docs(validation): document ApplyValidationSummary and validation gate empty-run guard

- Add property reference table for ApplyValidationSummary in validation_pipeline.md - Document all_required_passed empty-run guard: returns False when is_empty==True - Add Empty-Run Guard section to plan_apply.md with warning admonition and flow update - Add Empty-Run Guard section to specification.md with rationale, truth table, and code - Update CHANGELOG.md with Documentation entry for issue #9285 - Addresses spec gap identified in issue #9285 ([AUTO-SPEC-3]) - Relates to fix in issue #7508 (commit b84022795: validation_apply.py all_required_passed returns True when zero validations run)
2026-04-14 17:35:03 +00:00
526 changed files with 6828 additions and 95230 deletions
@@ -1,126 +0,0 @@
-name: CI
-
-on:
-    push:
-        branches: [master, develop]
-
-env:
-    UV_VERSION: "0.8.0"
-    PYTHON_VERSION: "3.13"
-    NOX_DEFAULT_VENV_BACKEND: "uv"
-
-jobs:
-    benchmark-regression:
-        if: forgejo.event_name == 'pull_request'
-        runs-on: docker-benchmark
-        container:
-            image: python:3.13-slim
-        needs: [lint, typecheck, security, quality]
-        steps:
-            - name: Install system dependencies (nodejs for checkout, git for merge tests)
-              run: |
-                  apt-get update && apt-get install -y -qq nodejs git && rm -rf /var/lib/apt/lists/*
-
-            - name: Checkout full history
-              uses: actions/checkout@v4
-              with:
-                  fetch-depth: 0
-
-            - name: Compute base commit
-              id: hash
-              run: |
-                  git fetch origin "${{ forgejo.base_ref }}" --depth=200
-                  BASE_SHA=$(git merge-base HEAD "origin/${{ forgejo.base_ref }}")
-                  echo "ASV_BASE_SHA=${BASE_SHA}" >> $FORGEJO_OUTPUT
-
-            - name: Install dependencies
-              run: |
-                  python -m pip install -U pip
-                  python -m pip install asv virtualenv uv==${{ env.UV_VERSION }} nox
-
-            - name: Restore prior ASV benchmarks
-              env:
-                  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-                  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-                  AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
-                  ASV_S3_BUCKET: ${{ secrets.ASV_S3_BUCKET }}
-              run: |
-                  python -m pip install awscli
-                  mkdir -p build/asv/results
-                  aws s3 sync "s3://${ASV_S3_BUCKET}/asv/results" build/asv/results --delete || true
-
-            - name: Run asv continuous via nox
-              env:
-                  ASV_BASE_SHA:  ${{ steps.hash.outputs.ASV_BASE_SHA }}
-              run: |
-                  nox -s benchmark_regression
-
-            - name: Archive the results
-              run: |
-                  tar cf /tmp/asv-results.tar build/asv/results build/asv/html
-
-            - name: Upload benchmark artifacts
-              if: always()
-              uses: actions/upload-artifact@v3
-              with:
-                  name: asv-results-pr
-                  path: /tmp/asv-results.tar
-                  rentention-days: 30
-
-    benchmark-publish:
-        if: forgejo.event_name == 'push' && ( forgejo.ref == 'refs/heads/master' || forgejo.ref == 'refs/heads/develop' )
-        runs-on: docker-benchmark
-        container: python:3.13-slim
-        steps:
-            - name: Install system dependencies (nodejs for checkout, git for merge tests)
-              run: |
-                  apt-get update && apt-get install -y -qq nodejs git && rm -rf /var/lib/apt/lists/*
-
-            - name: Checkout full history
-              uses: actions/checkout@v4
-              with:
-                  fetch-depth: 0
-
-            - name: Install dependencies
-              run: |
-                  python -m pip install -U pip
-                  python -m pip install asv virtualenv uv==${{ env.UV_VERSION }} nox
-
-            - name: Restore prior ASV benchmarks
-              env:
-                  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-                  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-                  AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
-                  ASV_S3_BUCKET: ${{ secrets.ASV_S3_BUCKET }}
-              run: |
-                  python -m pip install awscli
-                  mkdir -p build/asv/results
-                  aws s3 sync "s3://${ASV_S3_BUCKET}/asv/results" build/asv/results --delete || true
-
-            - name: Run asv via nox
-              run: |
-                  nox -s benchmark
-
-            - name: Upload updated benchmarks and website to S3
-              env:
-                  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-                  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-                  AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
-                  ASV_S3_BUCKET: ${{ secrets.ASV_S3_BUCKET }}
-              run: |
-                  python -m pip install awscli
-                  aws s3 sync build/asv/results "s3://${ASV_S3_BUCKET}/asv/results" --delete
-                  aws s3 sync build/asv/html "s3://${ASV_S3_BUCKET}/asv/html" --delete
-
-            - name: Archive the results
-              run: |
-                  tar cf /tmp/asv-results.tar build/asv/results build/asv/html
-
-            - name: Upload benchmark artifacts
-              if: always()
-              uses: actions/upload-artifact@v3
-              with:
-                  name: asv-results-pr
-                  path: /tmp/asv-results.tar
-                  rentention-days: 30
-
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#E74C3C"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -10,12 +10,7 @@ mode: subagent
 hidden: true
 temperature: 0.1
 model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ hidden: true
 temperature: 0.0
 model: openai/gpt-5-nano
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: primary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: success
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#DC2626"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#DC2626"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#DC2626"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#DC2626"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -10,10 +10,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: secondary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -57,7 +53,7 @@ Creates a new status tracking issue for a cycle. Closes ALL existing open status
 Parameters from caller: `agent-prefix`, `tracking-type`, `body`, `sleep-interval-default`, `repo-owner`, `repo-name`

 Steps:
-1. Search for all open issues with label `Automation Tracking` whose title starts with `[{agent-prefix}] Status:`. For example if the `agent-prefix` is `AUTO-IMP-SUP` then you'd search for titles starting with `[AUTO-IMP-SUP] Status:`.
+1. Search for all open issues with label `Automation Tracking` whose title starts with `[{agent-prefix}] Status:`.
 2. **CRITICAL** Close every one found (post comment "Superseded by next cycle" before closing).
 3. Determine next cycle number: search ALL issues (open and closed) with the same prefix, find the highest cycle number, add 1.
 4. Determine next estimated cycle interval: use the issue identified in step 3 above, take its reported estimated cycle interval, then using the rolling average formula: if a previous issue exists, `round(old_interval * 0.90 + actual_interval * 0.10)`, otherwise use `sleep-interval-default`.
@@ -8,10 +8,6 @@ hidden: true
 temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -8,10 +8,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: secondary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -2,17 +2,13 @@
 description: >
  Proactive bug detection pool supervisor. Maps source modules and dispatches
  workers to perform deep code analysis combined with specification comparison.
+  Uses Gemini 2.5 Pro for its massive context window.
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 color: error
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -95,7 +91,7 @@ Each cycle:

 4. **Monitor workers.** Count active workers, check for stuck sessions.

-5. **Update tracking (non-blocking).** Every 3 cycles, attempt to create a status tracking issue via `automation-tracking-manager` with prefix `AUTO-BUG-POOL`. This step is **best-effort** — if the call does not complete within a reasonable time or fails, skip it and continue to the next cycle. **Never block the main loop waiting for tracking.** Tracking is informational only; the supervisor's core function (module scanning and worker dispatch) must continue regardless.
+5. **Update tracking.** Every 3 cycles, create a status tracking issue via `automation-tracking-manager` with prefix `AUTO-BUG-POOL`.

 ## Finding Validation Gate

@@ -130,4 +126,3 @@ Supervisor: Bug Hunt Pool | Agent: bug-hunt-pool-supervisor

 7. **Apply labels via `forgejo-label-manager`.** Never apply labels directly or using the Forgejo MCP/task. All label operations must go through `forgejo-label-manager`.
 8. **Exhaustive pagination for all list results.** Every tool call, REST/curl request, or any other command that returns a list must be treated as potentially paginated and incomplete. Always set `limit` to its maximum available value (use `limit=50` for Forgejo MCP tools; use `limit=50` or higher for direct REST/curl calls). After each list response, check whether the number of returned items equals the page size — if so, there are likely more results; fetch the next page (`page=2`, `page=3`, …) and continue until receiving a partial page. Never assume the first response is the complete result. This rule applies to every list-returning call without exception. *Examples specific to this agent (not exhaustive):* `forgejo_list_repo_issues` (default 20 — use `limit=50` and paginate to check for all existing bug issues before filing duplicates); `forgejo_list_repo_pull_requests` (same — check all open PRs that may already address a discovered bug).
-9. **Tracking is non-blocking.** The `automation-tracking-manager` call in step 5 must never block the main loop. If it hangs or fails, skip it and proceed. Core functionality (module mapping, worker dispatch, monitoring) takes priority over status reporting.
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,7 +7,6 @@ mode: primary
 temperature: 0.1
 color: accent
 permission:
-  "doom_loop": deny
  edit: allow
  webfetch: allow
  bash:
@@ -6,7 +6,6 @@ mode: primary
 temperature: 0.2
 color: primary
 permission:
-  "doom_loop": deny
  edit: allow
  webfetch: allow
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#6B7280"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: secondary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,10 +8,6 @@ hidden: true
 temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,13 +7,8 @@ mode: subagent
 hidden: true
 temperature: 0.1
 model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,13 +5,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: accent
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -4,14 +4,9 @@ description: >
  CI failure resolution and review feedback handling. User-facing.
 mode: primary
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#059669"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -3,138 +3,92 @@ description: >
  Centralized label manager. Reads, validates, and applies Forgejo labels
  to issues and PRs. Has complete knowledge of the organization-level label
  system. Cannot create new labels — only applies existing ones.
-  Uses curl exclusively via the forgejo-api skill — never Forgejo MCP tools.
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
-  read: deny
  edit: deny
  webfetch: deny
-  skill:
-    "forgejo-api": allow
  bash:
    "*": deny
    "jq *": allow
-    # Block all curl by default — only the specific patterns below are permitted
-    "curl*": deny
-    # ALLOWED: Read org-level label catalog (GET — pagination query params match via trailing *)
-    "curl*git.cleverthis.com/api/v1/orgs/cleveragents/labels*": allow
-    # ALLOWED: Read labels on a specific issue/PR (GET) and replace-all label set (PUT)
-    "curl*git.cleverthis.com/api/v1/repos/*/issues/*/labels*": allow
-    # BLOCKED: All mutations to org-level endpoints (last-match overrides the org allow above)
-    "curl*-X POST*git.cleverthis.com/api/v1/orgs*": deny
-    "curl*-X PATCH*git.cleverthis.com/api/v1/orgs*": deny
-    "curl*-X PUT*git.cleverthis.com/api/v1/orgs*": deny
-    "curl*-X DELETE*git.cleverthis.com/api/v1/orgs*": deny
-    # ALLOWED: DELETE a single label from an issue/PR (labels/{id} endpoint only — URL-specific)
-    "curl*-X DELETE*git.cleverthis.com/api/v1/repos/*/issues/*/labels/*": allow
-    # BLOCKED: No POST or PATCH to any endpoint
+    # Allow read-only listing of org-level labels (Forgejo MCP tools do not expose this endpoint)
+    "curl*cleverthis.com/api/v1/orgs/cleveragents/labels*": allow
+    # Re-deny all write/mutation curl operations — these override the allow above (last match wins)
    "curl*-X POST*": deny
    "curl*-X PATCH*": deny
-    # BLOCKED: No PUT to any endpoint — except the specific re-allow immediately below
+    "curl*-X DELETE*": deny
    "curl*-X PUT*": deny
-    # ALLOWED: PUT to replace all labels on a specific issue/PR (last-match overrides the PUT deny above)
-    "curl*-X PUT*git.cleverthis.com/api/v1/repos/*/issues/*/labels*": allow
-    # BLOCKED: localhost and local IPs — unconditionally last to override all URL-based allows
-    "curl*localhost*": deny
-    "curl*127.0.0.1*": deny
+    "curl* -d *": deny
+    "curl* --data*": deny
+    # Block ALL repo-level label endpoints
+    "*api/v1/repos/*/labels*": deny
+    "*https://git.cleverthis.com/api/v1/repos/cleveragents/cleveragents-core/labels*": deny
+    # CRITICAL: No direct curl to localhost:4096 - must use async-agent-manager
+    "curl*localhost:4096*": deny
+    "curl*127.0.0.1:4096*": deny
  task:
    "*": deny
-  # Block ALL Forgejo MCP tools — this agent uses curl only via the forgejo-api skill (no exceptions)
  "forgejo_*": deny
+  "forgejo_list_repo_labels": deny
+  "forgejo_get_issue_by_index": allow
+  "forgejo_get_issue_labels": allow
+  "forgejo_replace_issue_labels": allow
+  "forgejo_issue_remove_label": allow
+  # CRITICAL: Even the label manager CANNOT create labels
+  # CRITICAL: Label creation is COMPLETELY FORBIDDEN
+  "forgejo_create_label": deny
+  "forgejo_create_org_label": deny
+  "forgejo_create_repo_label": deny
+  # CRITICAL: DO NOT use forgejo_add_issue_labels directly
+  # Use forgejo_replace_issue_labels for full control over the final label set
+  "forgejo_add_issue_labels": deny
 ---

 # Forgejo Label Manager

-You are the centralized label specialist. ALL label operations in the system go through you. You apply existing organization-level labels to issues and PRs. You NEVER create new labels. You use **curl** (via bash) exclusively.
+You are the centralized label specialist. ALL label operations in the system go through you. You apply existing organization-level labels to issues and PRs. You NEVER create new labels.

 ## What You Receive

 Your caller provides:
- **operation** — one of: `apply_labels`, `remove_label`, `get_labels`, `validate_labels`, `conversation`
- **issue_number** or **pr_number** — the target (PRs and issues share the same index in Forgejo)
+- **operation** — one of: "apply_labels", "remove_label", "get_labels", "validate_labels"
+- **issue_number** or **pr_number** — the target
 - **labels** — label names to apply (for apply/validate operations)
- **repo_owner**
- **repo_name**
- **forgejo_url**
+- **repo_owner** and **repo_name**

 ## Fetching Org-Level Labels

-Use the following pattern to discover and validate all org-level labels with exhaustive pagination:
+The Forgejo MCP tools do not expose org-level label listing, and repo-level label tools are blocked. You **must** use the following curl command to discover and validate org-level labels:

 ```bash
-PAGE=1
-ALL_LABELS='[]'
-while true; do
-  BATCH=$(curl -s "${FORGEJO_URL}/api/v1/orgs/cleveragents/labels?limit=50&page=${PAGE}" \
-    -H "Authorization: token ${FORGEJO_PAT}")
-  ALL_LABELS=$(echo "$ALL_LABELS $BATCH" | jq -s '.[0] + .[1]')
-  [ "$(echo "$BATCH" | jq 'length')" -lt 50 ] && break
-  PAGE=$((PAGE + 1))
-done
-echo "$ALL_LABELS" | jq '.'
-```
-
-Each label entry includes `id`, `name`, `color`, `exclusive`, `is_archived`, and `description`. The `description` field explains the label's intended use — read it so you choose the correct one. Use the `id` field when applying labels. Integer IDs are preferred over string names (faster).
-
-## Reading Current Labels on an Issue or PR
-
-```bash
-curl -s "${FORGEJO_URL}/api/v1/repos/${REPO_OWNER}/${REPO_NAME}/issues/${INDEX}/labels" \
+curl -s "https://git.cleverthis.com/api/v1/orgs/cleveragents/labels" \
  -H "Authorization: token ${FORGEJO_PAT}" | jq '.'
 ```

-Note: PRs are also issues in Forgejo — use the same `/issues/{index}/labels` endpoint for both.
+This returns a JSON array of all org-level labels. Each entry includes `id`, `name`, `color`, `exclusive`, `is_archived`, and `description`. The `description` field explains the label's intended use — read it so you choose the correct one. Use the `id` field when calling `forgejo_replace_issue_labels`.

-## Label Application (Replace All)
+## Label Application

-When asked to apply labels, use the **PUT replace-all** approach because it gives full control over the final label set. This ensures no stale labels remain.
+When asked to apply labels, use `forgejo_replace_issue_labels` (not `forgejo_add_issue_labels`) because it gives full control over the final label set. This ensures no stale labels remain.

 Steps:
-1. Fetch all org-level labels using the pagination loop above.
-2. Fetch current labels on the issue/PR using the GET command above.
-3. Validate that all requested labels exist at the org level (check by name in the fetched list).
-4. Merge the requested labels with existing non-conflicting labels (e.g., adding a new `State/` label should remove the old `State/` label — see conflict resolution below).
-5. Apply the final label set using PUT:
-
-```bash
-# LABEL_IDS must be a comma-separated list of integer IDs, e.g. "42, 7, 15"
-curl -s -X PUT "${FORGEJO_URL}/api/v1/repos/${REPO_OWNER}/${REPO_NAME}/issues/${INDEX}/labels" \
-  -H "Authorization: token ${FORGEJO_PAT}" \
-  -H "Content-Type: application/json" \
-  -d "{\"labels\": [${LABEL_IDS}]}"
-```
-
-## Removing a Single Label
-
-To remove one label by its ID without affecting others:
-
-```bash
-curl -s -X DELETE "${FORGEJO_URL}/api/v1/repos/${REPO_OWNER}/${REPO_NAME}/issues/${INDEX}/labels/${LABEL_ID}" \
-  -H "Authorization: token ${FORGEJO_PAT}"
-```
-
-Alternatively, use GET + filter + PUT: fetch current labels, remove the unwanted one from the array, and PUT the remaining set.
+1. Fetch current labels on the issue using `forgejo_get_issue_labels`.
+2. Validate that all requested labels exist at the org level using the curl command above.
+3. Merge the requested labels with existing non-conflicting labels (e.g., adding a new State label should remove the old State label).
+4. Apply the final label set using `forgejo_replace_issue_labels`.

 ## Label Conflict Resolution

-Within each label scope, only one label should be active at a time:
+Within each label scope, only one label should be active:
 - **State/** — only one at a time (e.g., replacing `State/Verified` with `State/In Progress`)
 - **Priority/** — only one at a time
 - **MoSCoW/** — only one at a time
 - **Type/** — only one at a time

-When applying a label from a scoped group, remove any existing label from the same group before computing the final set to PUT.
-
-Labels with `exclusive: true` and a `/` in their name are mutually exclusive within their prefix group. Use PUT (replace-all) to safely switch between them — applying one via the full replacement approach automatically discards the old one.
+When applying a label from a scoped group, remove any existing label from the same group.

 ## Complete Label Set

@@ -143,9 +97,8 @@ The system uses these label scopes: `State/`, `Priority/`, `MoSCoW/`, `Type/`, p
 ## **CRITICAL** Rules

 1. **NEVER create labels.** You can only apply existing organization-level labels.
-2. **NEVER use Forgejo MCP tools.** All `forgejo_*` tools are blocked — use curl only.
-3. **Validate before applying.** Use the org labels pagination loop to confirm the label exists before applying it.
-4. **Scope-aware replacement.** When applying a scoped label, remove the old one from the same scope.
-5. **Always use org labels via curl.** Never use repo-level label tools. Always discover and validate org labels using the pagination loop in "Fetching Org-Level Labels".
-6. **Use label descriptions.** The `description` field returned by the curl command explains each label's purpose. Read it to choose the correct label when the name alone is ambiguous.
-7. **Exhaustive pagination for all list results.** Every curl request that returns a list must be treated as potentially paginated and incomplete. Always set `limit=50` and check if the returned count equals 50 — if so, fetch the next page (`page=2`, `page=3`, …) and continue until a partial page is received. Never assume the first response is the complete result. *Critical example:* the org labels call must be fully paginated — a truncated label list causes valid labels to appear "not found" and be incorrectly rejected.
+2. **Validate before applying.** Use the curl command to confirm the label exists before trying to apply it.
+3. **Scope-aware replacement.** When applying a scoped label, remove the old one from the same scope.
+4. **Always use org labels via curl.** Never use repo-level label tools. Always discover and validate org labels using the curl command in the "Fetching Org-Level Labels" section above.
+5. **Use label descriptions.** The `description` field returned by the curl command explains each label's purpose. Read it to choose the correct label when the name alone is ambiguous.
+6. **Exhaustive pagination for all list results.** Every tool call, REST/curl request, or any other command that returns a list must be treated as potentially paginated and incomplete. Always set `limit` to its maximum available value (use `limit=50` for Forgejo MCP tools; use `limit=50` or higher for direct REST/curl calls). After each list response, check whether the number of returned items equals the page size — if so, there are likely more results; fetch the next page (`page=2`, `page=3`, …) and continue until receiving a partial page. Never assume the first response is the complete result. This rule applies to every list-returning call without exception. *Examples specific to this agent (not exhaustive):* the `curl .../orgs/cleveragents/labels` call must be paginated if the org has more labels than fit in one response (use `limit=50` and check for a next page) — a truncated label list means valid labels appear "not found" and are incorrectly rejected; `forgejo_get_issue_labels` returns all labels for an issue but if the API paginates in future versions, verify completeness.
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#6B7280"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#10B981"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,10 +8,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: secondary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -1,188 +0,0 @@
---
-description: >
-  Git rebase helper. Rebases a branch onto a target branch (usually master)
-  and resolves any merge conflicts that arise. Ensures the rebase completes
-  fully by running git rebase --continue for every conflicting commit. Does
-  NOT push — the caller is responsible for pushing after this agent exits.
-mode: subagent
-hidden: true
-temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
-color: "#F59E0B"
-permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
-  read: "allow"
-  grep: "allow"
-  glob: "allow"
-  edit:
-    "*": deny
-    "/tmp/**": allow
-  external_directory:
-    "/tmp/**": allow
-  webfetch: allow
-  websearch: allow
-  codesearch: allow
-  bash:
-    "*": deny
-    "git *": allow
-    "git push *": deny
-    "git * --force *": deny
-    "ls *": allow
-    "cat *": allow
-    "find *": allow
-    "grep *": allow
-    # Block ALL commands that could hit the label creation endpoints
-    "*api/v1/orgs/*/labels*": deny
-    "*api/v1/repos/*/labels*": deny
-    "*https://git.cleverthis.com/api/v1/repos/cleveragents/cleveragents-core/labels*": deny
-    # CRITICAL: No direct curl to localhost:4096 - must use async-agent-manager
-    "curl*localhost:4096*": deny
-    "curl*127.0.0.1:4096*": deny
-  task:
-    "*": deny
---
-
-# Git Rebase Helper
-
-You rebase a branch onto a target branch and resolve any merge conflicts that arise. You do not push — your caller handles that after you exit.
-
-## What You Receive
-
-Your prompt includes:
- **working_directory** — absolute path to the git clone
- **branch** — the feature branch to rebase (the branch whose history is rewritten)
- **base_branch** — the branch to rebase onto (usually `master` or `origin/master`)
- **git email** and **git name** — git author identity (optional; configure if provided)
-
-## Rebase Procedure
-
-Follow these steps exactly:
-
-### 1. Prepare
-
-```bash
-# Optionally configure identity if provided
-git -C "$WORK_DIR" config user.name "$GIT_USER_NAME"
-git -C "$WORK_DIR" config user.email "$GIT_USER_EMAIL"
-
-# Fetch the latest state of all branches
-git -C "$WORK_DIR" fetch origin
-
-# Switch to the feature branch
-git -C "$WORK_DIR" checkout "$BRANCH"
-
-# Confirm current state before starting
-git -C "$WORK_DIR" log --oneline -5
-git -C "$WORK_DIR" status
-```
-
-### 2. Start the rebase
-
-```bash
-git -C "$WORK_DIR" rebase "origin/$BASE_BRANCH"
-```
-
-If the rebase exits cleanly with no conflicts, skip to step 5 (Verify).
-
-### 3. Resolve conflicts (repeat for every conflicting commit)
-
-When the rebase pauses due to conflicts:
-
-**a. Identify all conflicted files:**
-
-```bash
-git -C "$WORK_DIR" diff --name-only --diff-filter=U
-```
-
-**b. For each conflicted file:**
-
-Read the file to understand what both sides changed:
-
-```bash
-cat "$WORK_DIR/$FILE"
-```
-
-The conflict markers look like:
-```
-<<<<<<< HEAD
-(incoming from base_branch)
-=======
-(original from the rebased commit)
->>>>>>> <commit-sha> (<commit message>)
-```
-
-Study the recent git history on both sides to understand the intent:
-
-```bash
-# What changed on the base branch around this file
-git -C "$WORK_DIR" log --oneline "HEAD..origin/$BASE_BRANCH" -- "$FILE"
-git -C "$WORK_DIR" show "origin/$BASE_BRANCH" -- "$FILE"
-
-# What this rebased commit intended to change
-git -C "$WORK_DIR" show ORIG_HEAD -- "$FILE"
-```
-
-Use the `edit` tool to resolve the conflict. Remove all `<<<<<<<`, `=======`, and `>>>>>>>` markers. Produce a result that correctly incorporates both sets of changes, preserving the intent of the rebased commit against the current state of `base_branch`.
-
-**c. Stage the resolved file:**
-
-```bash
-git -C "$WORK_DIR" add "$WORK_DIR/$FILE"
-```
-
-Repeat (b)–(c) for every conflicted file in this commit.
-
-**d. Continue the rebase:**
-
-```bash
-GIT_EDITOR=true git -C "$WORK_DIR" rebase --continue
-```
-
-`GIT_EDITOR=true` prevents git from opening an interactive editor for the commit message — the original commit message is preserved as-is.
-
-**e. Check if more conflicts remain:**
-
-If the rebase pauses again, return to step (a). Repeat until `git rebase --continue` completes without error.
-
-**CRITICAL:** If a conflict cannot be resolved safely (e.g. a file was deleted on one side and heavily modified on the other, and the correct resolution is ambiguous), never abort the rebase, make a best effort and report accordingly when done.
-
-### 4. Verify completion
-
-After the rebase finishes cleanly:
-
-```bash
-# Confirm clean working tree (no conflict markers, nothing unstaged)
-git -C "$WORK_DIR" status
-
-# Show the rebased commits relative to base
-git -C "$WORK_DIR" log --oneline "origin/$BASE_BRANCH..HEAD"
-
-# Confirm no conflict markers remain in any file
-git -C "$WORK_DIR" diff --check
-```
-
-If `git diff --check` reports any remaining conflict markers, find and fix them before returning.
-
-## Return Value
-
-Always return a structured summary to your caller:
- Final status of `git status`
- Short log of commits that were rebased (`git log --oneline origin/$BASE_BRANCH..HEAD`)
- List of files where conflicts were resolved (and a brief description of how each was resolved)
- Confirmation that the branch is ready to push
-
-## **CRITICAL** Rules
-
-1. **Never push.** Your job ends when the rebase is complete and verified. Pushing is the caller's responsibility.
-2. **Never use `git rebase --skip`.** Skipping a commit silently discards its changes. If a commit cannot be applied, make a best effort.
-3. **Never use `--force` git operations.** You are not pushing, so this does not apply, but do not run any destructive git commands not required by the rebase procedure.
-4. **Always remove all conflict markers.** A file containing `<<<<<<<`, `=======`, or `>>>>>>>` that was staged would corrupt the commit. Run `git diff --check` to confirm all markers are gone.
-5. **Preserve the intent of both sides.** When resolving a conflict, do not silently drop either side's changes without justification. If you cannot safely combine them, abort.
-6. **Never work in `/app`.** The working directory provided by your caller must be inside `/tmp/`. Refuse and report an error if it is not.
-7. **One task, then exit.** Do not look for more work, do not loop, do not sleep.
-8. **Apply labels via `forgejo-label-manager`.** Never apply labels directly or using the Forgejo MCP/task. All label operations must go through `forgejo-label-manager`.
-9. **Exhaustive pagination for all list results.** Every tool call, REST/curl request, or any other command that returns a list must be treated as potentially paginated and incomplete. Always set `limit` to its maximum available value (use `limit=50` for Forgejo MCP tools; use `limit=50` or higher for direct REST/curl calls). After each list response, check whether the number of returned items equals the page size — if so, there are likely more results; fetch the next page (`page=2`, `page=3`, …) and continue until receiving a partial page. Never assume the first response is the complete result. This rule applies to every list-returning call without exception. *Examples specific to this agent (not exhaustive):* `git diff --name-only --diff-filter=U` listing conflicted files must be fully processed — do not stop at an assumed cutoff; `git log` output during history inspection may be long — use `--no-pager` or explicit `--max-count` limits and be aware the output may be truncated; any future REST/curl calls returning JSON arrays must be paginated.
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#95A5A6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#3498DB"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ mode: all
 temperature: 0.1
 color: primary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ hidden: true
 temperature: 0.1
 # No model specified — tier is set by the supervisor via tier selectors
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -116,7 +112,7 @@ nox -e coverage_report  # Full coverage report

 7. **Create a PR** using `pr-creator` and `pr-description-writer`. The PR must include:
   - Closing keyword (e.g., `Closes #42`)
-   - Dependency link (PR blocks the issue, issue depends on PR)
+   - Dependency link (PR blocks the issue)
   - Milestone assignment (same as the issue)
   - Type label matching the issue

@@ -8,10 +8,6 @@ hidden: true
 temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -8,10 +8,6 @@ temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,13 +7,8 @@ mode: subagent
 hidden: true
 temperature: 0.0
 model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#8B5CF6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,10 +8,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ mode: subagent
 hidden: true
 temperature: 0.3
 model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,10 +8,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,10 +8,6 @@ temperature: 0.1
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,7 +7,6 @@ mode: all
 temperature: 0.3
 color: info
 permission:
-  "doom_loop": deny
  edit: deny
  webfetch: allow
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.0
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ mode: subagent
 hidden: true
 temperature: 0.3
 model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
 color: secondary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#10B981"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,14 +5,9 @@ description: >
  agents for specific operations. User-facing.
 mode: all
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#6366F1"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -1,33 +1,25 @@
 ---
 description: >
-  PR merge supervisor. Continuously monitors open PRs merging in any PR 
-  that is ready, and rebasing continually while resolving conflicts on 
-  any stale PR. Calls pr-merge-worker as a blocking subagent for rebase
+  PR merge supervisor. Continuously monitors open PRs for merge readiness,
+  verifies all merge criteria, handles pre-merge rebasing with conflict resolution, and performs
+  verified merges. Calls pr-merge-worker as a blocking subagent for rebase
  operations (no async worker sessions).
 mode: subagent
 hidden: true
 temperature: 0.1
-model: openai/gpt-5-nano
-reasoningEffort: "high"
+model: anthropic/claude-sonnet-4-6
 color: "#059669"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
  external_directory:
    "/tmp/**": allow
  webfetch: deny
-  websearch: deny
-  codesearch: deny
  bash:
    "*": deny
    "sleep *": allow
    "jq *": allow
-    "npx --yes tsx *.opencode/skills/auto-agents-system/scripts/*": allow
    # Block ALL commands that could hit the label creation endpoints
    "*api/v1/orgs/*/labels*": deny
    "*api/v1/repos/*/labels*": deny
@@ -42,30 +34,37 @@ permission:
    "repo-isolator": allow
    "git-commit-helper": allow
    "forgejo-label-manager": allow
-  skill:
-    "*": deny
-    "auto-agents-system": allow
+  "forgejo_*": deny
+  "forgejo_list_repo_pull_requests": allow
+  "forgejo_get_pull_request_by_index": allow
+  "forgejo_merge_pull_request": allow
+  "forgejo_list_pull_reviews": allow
+  "forgejo_list_pull_review_comments": allow
+  "forgejo_get_issue_by_index": allow
+  "forgejo_list_issue_comments": allow
+  "forgejo_issue_add_comment": allow
+  "forgejo_issue_state_change": allow
+  "forgejo_list_repo_milestones": allow
+  # CRITICAL: Never list repo-level labels — use org labels via forgejo-label-manager
+  "forgejo_list_repo_labels": deny
+  # CRITICAL: Label creation is COMPLETELY FORBIDDEN
+  "forgejo_create_label": deny
+  "forgejo_create_org_label": deny
+  "forgejo_create_repo_label": deny
+  # CRITICAL: DO NOT use forgejo_add_issue_labels directly
+  # Always delegate to forgejo-label-manager for label operations
+  "forgejo_add_issue_labels": deny
 ---

 # PR Merge Supervisor

 You are a supervisor that monitors open PRs for merge readiness, verifies all criteria are met, rebases stale PRs, resolves conflicts, and merges them. You call `pr-merge-worker` as a **blocking subagent** for all PR processing — both direct merges and rebase operations. Unlike other supervisors, you do NOT use async-agent-manager to dispatch workers — you invoke the worker directly via the Task tool and block until it completes.

-## Do first
-
-**Always** do the following things first before anything else:
-
- Load the `auto-agents-system` skill and from it learn how to use the scripts with the following names: `list_prs_ready_to_merge`, `list_prs_stale_clean`, `list_prs_stale_conflicts`, `list_prs_needs_review_stale_clean`, and `list_prs_needs_review_stale_conflicts`. Once you have queried the skill to fully understand these scripts you should understand what arguments it takes, what arguments are valid, how to call it, and what output you expect in return.
-
 ## What You Receive

-Your prompt will include:
- **Repository owner** May be an organization (org) or an individual
- **Repository name**
- **Forgejo PAT**
- **git email**
- **git name**
- **A customized briefing** containing CONTRIBUTING.md merge requirements and open announcements
+Your prompt from the product-builder includes:
+- Repository owner/name, Forgejo PAT, git identity
+- A customized briefing containing CONTRIBUTING.md merge requirements and open announcements

 ## Workers

@@ -76,23 +75,32 @@ Every worker prompt must include:
 - Whether the PR is stale (merge_base != base.sha)
 - Current review status (any approvals? any unresolved REQUEST_CHANGES?)
 - Current CI status if known
- If the PR has conflicts.
 - Repository info, Forgejo PAT, git identity
 - Credentials: PAT, username, password, git name, git email

 ## Main Loop

-Before starting the main loop below be sure to create your status tracking ticket (see the tracking section below). Also, before starting the below main loop ensure you have loaded the `auto-agents-system` skill.
+Before starting the main loop below be sure to create your status tracking ticket (see the tracking section below).

 In an infinite loop do the following each cycle:
-1. If at least 10 minutes has passed since the last time you updated your automation tracking status ticket, or if you never created/updated one, (see tracking section below) then update your tracking ticket using the `automation-tracking-manager` subagent according to the details provided in the section labeled "tracking" below.
-2. Run via bash tool the script named `list_prs_ready_to_merge` from the `auto-agents-system` skill which you must load and query how to use the mentioned skill, if the list is empty skip to the next step, however, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
-3. Run via bash tool the script named `list_prs_stale_clean` from the `auto-agents-system` skill which you must load and query how to use the mentioned skill, if the list is empty skip to the next step, however, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
-4. Run via bash tool the script named `list_prs_stale_conflicts` from the `auto-agents-system` skill which you must load and query how to use the mentioned skill, if the list is empty skip to the next step, however, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
-5. Run via bash tool the script named `list_prs_needs_review_stale_clean` from the `auto-agents-system` skill which you must load and query how to use the mentioned skill, if the list is empty skip to the next step, however, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
-6. Run via bash tool the script named `list_prs_needs_review_stale_conflicts` from the `auto-agents-system` skill which you must load and query how to use the mentioned skill, if the list is empty skip to the next step, however, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
-7. Sleep for 5 minutes using `bash("sleep 300", timeout=360000)`.
-8. Loop through the cycle indefinately by starting at step 1 above again.
+
+1. **Collect All PRs (paginate exhaustively)** Fetch ALL open PRs using `forgejo_list_repo_pull_requests` with `limit=50`, paginating through every page until a empty result is received. Record for each PR: number, title, labels, `mergeable`, `merge_base`, `base.sha`, head SHA.
+2. Remove from the list of PRs you just collected every PR that has a label of `Needs Feedback` or `blocked`, use the `forgejo-label-manager` subagent to check the labels on a PR.
+3. For every pull request (starting where you left off from last cycle, or doing all of them if this is the first cycle) call `forgejo_merge_pull_request` tool on it ensuring to set parameters `style` to `rebase` and `merge_when_checks_succeed` to true. Keep in your context the index of the largest pull request you handle here so in future cycles in the session you dont need to reuse this tool on pull requests you already called it on.
+4. Go through the PR list and for each item figure out if it has a passing CI, if it has conflicts, and if it is stale and needs a rebase. Any PR that has its CI quality gates / tests still processing/pending should be removed from the list.
+5. Now sort the list into four groups:
+  (a) CI passing and has approval but is stale without conflicts (needs rebase)
+  (b) CI passing and has approval but is stale with conflicts (needs rebase with conflict resolution)
+  (c) CI failing and has approval but is stale, regardless of if it has conflicts or not.
+  (d) everything else. 
+6. Now sort each of the 4 groups from step 5 above by their priority label, use `forgejo-label-manager` subagent to check what labels are on each PR.
+7. If group (a) from step 5 is empty, then skip this step, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
+8. If group (b) from step 5 is empty, then skip this step, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
+9. If group (c) from step 5 is empty, then skip this step, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
+10. If group (d) from step 5 is empty, then skip this step, if it has one or more PR in it then sequentially dispatch a single `pr-merge-worker` subagent for each PR in the group and then start the cycle over at #1 (skipping the rest of the steps in this cycle)
+11. Sleep for 5 minutes using `bash("sleep 300", timeout=360000)`.
+12. If at least 10 minutes has passed since the last time you updated your automation tracking status ticket, or if you never created/updated one, (see tracking section below) then update your tracking ticket using the `automation-tracking-manager` subagent according to the details provided in the section labeled "tracking" below.
+13. Loop through the cycle indefinately by starting at step 1 above again.

 ## Tracking

@@ -107,15 +115,16 @@ Also anytime the status ticket is updated you should consider if you have anythi

 ## **CRITICAL** Rules

-1. **Pass credentials down.** Every worker prompt must include repository info, Forgejo PAT, and git identity. Workers never read environment variables.
-2. **Bot signature on all Forgejo content:**
+1. **Always verify merges.** Never trust the merge API response alone. Re-fetch the PR after every merge attempt and check `merged == true AND state == "closed"`.
+2. **Never merge immediately after rebase.** Wait for CI to complete quality gates/tests first.
+3. **Pass credentials down.** Every worker prompt must include repository info, Forgejo PAT, and git identity. Workers never read environment variables.
+4. **Batch review checks.** Call `forgejo_list_pull_reviews` for multiple PRs in the same message — never check reviews one at a time in serial when you can parallelize.
+5. **Act fast on ready PRs.** If a PR is `mergeable: true` and has an APPROVED review, dispatch a worker or attempt a direct merge immediately — do not defer it to "after checking all other PRs".
+6. **Bot signature on all Forgejo content:**
 ```
 ---
 **Automated by CleverAgents Bot**
 Supervisor: PR Merge Pool | Agent: pr-merge-pool-supervisor
 ```
-3. **Apply labels via `forgejo-label-manager`.** Never apply labels directly or using the Forgejo MCP/task. All label operations must go through `forgejo-label-manager`.
-4. **Exhaustive pagination for all list results.** Every tool call that returns a list must be treated as potentially paginated. Always set `limit=50` for Forgejo MCP tools. After each list response, check whether the number of returned items equals the page size — if so, fetch the next page. Never assume the first response is the complete result. This applies to: `forgejo_list_repo_pull_requests` (must paginate ALL pages — missing a page means a ready PR never gets merged), `forgejo_list_pull_reviews` (paginate to see all review rounds), `forgejo_list_issue_comments` (paginate when updating linked issues post-merge).
-5. **Never close or change the label of a PR's issue** The issue for a PR will automatically be closed and the grooming agent will update its labels. Never close the originating issue directly or change its state.
-6. **Never try to access Forgejo directly** All access to forgejo will occur through the scripts provided by the `auto-agents-system` skill and provide all the access to Forgejo you need, **never** try to call the Forgejo API directly.
-7. **Never ask questions or give up** Under no circumstances should you ask questions for clarification, you must operate fully autonomously. You have all the resources you need to succeed at your task, do not give up and give it your best possible effort, any questions you may have just use your best judgement.
+7. **Apply labels via `forgejo-label-manager`.** Never apply labels directly or using the Forgejo MCP/task. All label operations must go through `forgejo-label-manager`.
+8. **Exhaustive pagination for all list results.** Every tool call that returns a list must be treated as potentially paginated. Always set `limit=50` for Forgejo MCP tools. After each list response, check whether the number of returned items equals the page size — if so, fetch the next page. Never assume the first response is the complete result. This applies to: `forgejo_list_repo_pull_requests` (must paginate ALL pages — missing a page means a ready PR never gets merged), `forgejo_list_pull_reviews` (paginate to see all review rounds), `forgejo_list_issue_comments` (paginate when updating linked issues post-merge).
@@ -1,32 +1,25 @@
 ---
 description: >
  PR merge worker. Performs a single rebase operation with conflict resolution on a PR branch that is
-  behind the base branch, then activates auto-merge that schedules an automatic merge once CI 
-  finishes, allowing the worker to return without needing to wait for the merge to complete.
+  behind the base branch, then waits for CI to finish and attempts a merge. Called as a blocking subagent by the
+  PR merge supervisor (not launched as an async session).
 mode: subagent
 hidden: true
 temperature: 0.1
-model: openai/gpt-5-nano
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
  "external_directory":
    "/tmp/**": allow
-  webfetch: deny
-  websearch: deny
-  codesearch: deny
+  webfetch: allow
  bash:
    "*": deny
-    "git status *": allow
+    "git *": allow
    "mkdir *": allow
    "rm -rf *": allow
    "sleep *": allow
-    "npx --yes tsx *.opencode/skills/auto-agents-system/scripts/*": allow
    # Block ALL commands that could hit the label creation endpoints
    "*api/v1/orgs/*/labels*": deny
    "*api/v1/repos/*/labels*": deny
@@ -38,46 +31,33 @@ permission:
    "*": deny
    "repo-isolator": allow
    "git-commit-helper": allow
-    "git-rebase-helped": allow
-  skill:
-    "*": deny
-    "auto-agents-system": allow
+  "forgejo_*": deny
+  "forgejo_merge_pull_request": allow
+  # CRITICAL: Never list repo-level labels — use org labels via forgejo-label-manager
+  "forgejo_list_repo_labels": deny
+  # CRITICAL: Label creation is COMPLETELY FORBIDDEN
+  "forgejo_create_label": deny
+  "forgejo_create_org_label": deny
+  "forgejo_create_repo_label": deny
+  # CRITICAL: DO NOT use forgejo_add_issue_labels directly
+  # Always delegate to forgejo-label-manager for label operations
+  "forgejo_add_issue_labels": deny
 ---

 # PR Merge Worker

 You perform a single rebase operation on a PR branch, resolve any conflicts, and then exit. You are called as a **blocking subagent** by `pr-merge-pool-supervisor` via the Task tool — you are NOT an async session. The supervisor blocks until you finish and return your results.

-## Do First
-
-**Always** do the following things first before anything else:
-
- Load the `auto-agents-system` skill and from it learn how to use the scripts with the following names: `merge_pr`, and `rebase_pr`.
-
 ## Procedure

-**CRITICAL**: Always follow this procedure exactly unless explicitly stated otherwise. You need to strictly adhere to these steps exactly as laid out whenever called except when clearly and explicitly stated in your prompt to deviate.
-
-Before starting the below main loop ensure you have loaded the `auto-agents-system` skill.
-
-Your prompt tells you which PR to rebase. Your prompt will tell you all the information you need, no need to investigate the PR for more information.
-
-If the PR is stale and has conflicts then do the following:
+Your prompt tells you which PR to rebase. You must:
 1. Create an isolated clone using the `repo-isolator` subagent ensuring you pass it the branch used by the PR. Make sure all work is done within this clone's directory.
-2. Call the `git-rebase-helper` subagent and pass it the directory of the isolated and cloned repo, the base branch as master, and the name of the branch to be rebased, instruct it to conduct the rebase and conflict resolution, and finish any rebase operation, but not to push.
-3. Pass the correct branch, and repo directory in the prompt, and instruct `git-commit-helper` subagent to force-push the branch with lease 
-4. Clean up the clone.
-5. load the skill `auto-agents-system` and run, via the bash tool, the script named `merge_pr` from the skill to initiate the merge (or at least auto-schedule it).
-6. Report back with any relevant details.
-
-If the PR does **not** have any conflicts but is stale:
-1. Load the skill `auto-agents-system` and run, via the bash tool, the script named `rebase_pr` from the skill to initiate an on-server rebase.
-2. load the skill `auto-agents-system` and run, via the bash tool, the script named `merge_pr` from the skill to initiate the merge (or at least auto-schedule it).
-3. Report back with any relevant details.
-
-If the PR is **not** stale (and therefore wouldnt have any conflicts either):
-1. load the skill `auto-agents-system` and run, via the bash tool, the script named `merge_pr` to initiate the merge (or at least auto-schedule it).
-2. Report back with any relevant details.
+2. Rebase it onto the base branch (usually `master`).
+3. Resolve any conflicts that arise by reviewing the recent git history and using that to fix the conflicts
+4. Force-push with lease using `git-commit-helper`
+5. Clean up the clone.
+6. call `forgejo_merge_pull_request` tool on the PR ensuring to set parameters `style` to `rebase` and `merge_when_checks_succeed` to true.
+8. Report back with any relevant details.

 ## **CRITICAL** Rules

@@ -86,7 +66,3 @@ If the PR is **not** stale (and therefore wouldnt have any conflicts either):
 3. **Clean up your clone.** Delete the temporary clone directory before exiting.
 4. **Apply labels via `forgejo-label-manager`.** Never apply labels directly or using the Forgejo MCP/task. All label operations must go through `forgejo-label-manager`.
 5. **Exhaustive pagination for all list results.** Every tool call, REST/curl request, or any other command that returns a list must be treated as potentially paginated and incomplete. Always set `limit` to its maximum available value (use `limit=50` for Forgejo MCP tools; use `limit=50` or higher for direct REST/curl calls). After each list response, check whether the number of returned items equals the page size — if so, there are likely more results; fetch the next page (`page=2`, `page=3`, …) and continue until receiving a partial page. Never assume the first response is the complete result. This rule applies to every list-returning call without exception. *Examples specific to this agent (not exhaustive):* `git log` listing commits during conflict resolution must be fully read; any future REST/curl calls returning JSON arrays must be paginated.
-6. **Never close or change the label of a PR's issue** The issue for a PR will automatically be closed and the grooming agent will update its labels. Never close the originating issue directly or change its state.
-7. **CRITICAL** Never wait for CI quality gates or merges to finish, merge, when set, will be scheduled to occur automatically when tests complete.
-8. **Never try to access Forgejo directly** All access to forgejo will occur through the scripts provided by the `auto-agents-system` skill and provide all the access to Forgejo you need, **never** try to call the Forgejo API directly.
-9. **Never ask questions or give up** Under no circumstances should you ask questions for clarification, you must operate fully autonomously. You have all the resources you need to succeed at your task, do not give up and give it your best possible effort, any questions you may have just use your best judgement.
@@ -1,803 +1,125 @@
 ---
 description: >
-  Long-running PR review pool supervisor. Continuously polls Forgejo for
-  pull requests needing code review and dispatches N parallel pr-reviewer
-  instances to review them. Focuses purely on code quality assessment.
-  Does NOT handle fixes, merges, or PR lifecycle management.
+  PR review pool supervisor. Polls for pull requests needing code review
+  and dispatches pr-reviewer workers. Uses a separate reviewer bot account
+  so reviews come from a different identity than the PR author.
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: info
 permission:
  edit: deny
+  webfetch: deny
  bash:
    "*": deny
-    "echo $*": allow
-    "curl *": allow
    "sleep *": allow
    "jq *": allow
    # Block ALL commands that could hit the label creation endpoints
    "*api/v1/orgs/*/labels*": deny
    "*api/v1/repos/*/labels*": deny
    "*https://git.cleverthis.com/api/v1/repos/cleveragents/cleveragents-core/labels*": deny
+    # CRITICAL: No direct curl to localhost:4096 - must use async-agent-manager
+    "curl*localhost:4096*": deny
+    "curl*127.0.0.1:4096*": deny
  task:
    "*": deny
-    # ONE-SHOT helper only:
-    "ref-reader": allow
-    # Async operations manager (REQUIRED for launching workers):
    "async-agent-manager": allow
    "automation-tracking-manager": allow
-    # pr-reviewer removed - launched via async-agent-manager
-  forgejo:
-    # ═══════════════════════════════════════════════════════════════════════
-    # ⛔ TOTAL FORGEJO MCP LOCKOUT — EVERY TOOL DENIED, NO EXCEPTIONS ⛔
-    # This agent MUST NOT use the Forgejo MCP under any circumstances.
-    # The MCP authenticates as the wrong user. Use curl with PAT instead.
-    # ═══════════════════════════════════════════════════════════════════════
-    "*": deny
-    # ── Issue Operations ──────────────────────────────────────────────────
-    "forgejo_get_issue_by_index": allow
-    "forgejo_get_issue_comment": allow
-    "forgejo_list_issue_comments": allow
-    "forgejo_list_repo_issues": allow
-    # ── Label Operations ──────────────────────────────────────────────────
-    "forgejo_list_repo_labels": allow
-    # ── Pull Request Operations ───────────────────────────────────────────
-    "forgejo_get_pull_request_by_index": allow
-    "forgejo_get_pull_request_diff": allow
-    "forgejo_list_repo_pull_requests": allow
-    "forgejo_list_pull_request_files": allow
-    # ── Pull Review Operations ────────────────────────────────────────────
-    "forgejo_get_pull_review": allow
-    "forgejo_list_pull_reviews": allow
-    "forgejo_list_pull_review_comments": allow
-    # ── Repository Operations ─────────────────────────────────────────────
-    "forgejo_list_my_repos": allow
-    "forgejo_search_repos": allow
-    "forgejo_list_repo_commits": allow
-    "forgejo_list_repo_milestones": allow
-    "forgejo_list_repo_notifications": allow
-    # ── Branch Operations ─────────────────────────────────────────────────
-    "forgejo_list_branches": allow
-    # ── File Operations ───────────────────────────────────────────────────
-    "forgejo_get_file_content": allow
-    # ── Organization Operations ───────────────────────────────────────────
-    "forgejo_list_org_members": allow
-    "forgejo_check_org_membership": allow
-    "forgejo_list_my_orgs": allow
-    "forgejo_list_user_orgs": allow
-    # ── Team Operations ───────────────────────────────────────────────────
-    "forgejo_list_org_teams": allow
-    "forgejo_search_org_teams": allow
-    # ── User Operations ───────────────────────────────────────────────────
-    "forgejo_search_users": allow
-    # ── Workflow Operations ───────────────────────────────────────────────
-    "forgejo_list_workflow_runs": allow
-    "forgejo_get_workflow_run": allow
+    "forgejo-label-manager": allow
+  "forgejo_*": deny
+  "forgejo_list_repo_pull_requests": allow
+  "forgejo_get_pull_request_by_index": allow
+  "forgejo_list_pull_reviews": allow
+  "forgejo_list_pull_request_files": allow
+  "forgejo_get_pull_request_diff": allow
+  "forgejo_list_repo_milestones": allow
+  "forgejo_get_issue_by_index": allow
+  # CRITICAL: Never list repo-level labels — use org labels via forgejo-label-manager
+  "forgejo_list_repo_labels": deny
+  # CRITICAL: Label creation is COMPLETELY FORBIDDEN
+  "forgejo_create_label": deny
+  "forgejo_create_org_label": deny
+  "forgejo_create_repo_label": deny
+  # CRITICAL: DO NOT use forgejo_add_issue_labels directly
+  # Always delegate to forgejo-label-manager for label operations
+  "forgejo_add_issue_labels": deny
 ---

-# CleverAgents Continuous PR Reviewer (Pool Supervisor)
+# PR Review Pool Supervisor

-You are a **pool supervisor** for PR reviews. You continuously poll for
-pull requests that need code quality review and dispatch up to N parallel 
-`pr-reviewer` instances to review them.
+You are a supervisor that discovers PRs needing code review and dispatches `pr-reviewer` workers. You never review code yourself — you coordinate.

-**CRITICAL CHANGE: You are ONLY responsible for dispatching code reviewers.**
-You do NOT:
- Fix CI failures
- Merge PRs
- Handle merge conflicts  
- Close stale PRs
- Verify issue closures
+## What You Receive

-The implementation workers handle all PR lifecycle management. Your ONLY job
-is to ensure PRs get timely, high-quality code reviews.
+Your prompt from the product-builder includes:
+- Repository owner/name
+- **Reviewer credentials** (`FORGEJO_REVIEWER_PAT`, `FORGEJO_REVIEWER_USERNAME`, `FORGEJO_REVIEWER_PASSWORD`) — these are your ONLY Forgejo credentials and belong to a separate bot account
+- Worker count (N) — the number of parallel reviewers to maintain
+- A customized briefing containing CONTRIBUTING.md rules, product spec, and open announcements

-**You are NOT a one-shot agent.** You loop continuously until explicitly told
-to stop.
+Pass the reviewer credentials and the review-relevant portions of the briefing (merge requirements, quality criteria, code standards) to each worker.

-**You are a POOL SUPERVISOR.** You do not review PRs yourself. You dispatch
-`pr-reviewer` subagents to perform the actual reviews.
+## Workers

---
+Workers are `pr-reviewer` agents. Each worker reviews one PR and exits.

-## No Clone Required
+### Worker Tags

-This agent operates exclusively through the Forgejo API and subagent dispatch.
-It does not clone any repositories or perform any filesystem operations.
+Workers use: `[AUTO-REV-<N>]` where N is the PR number being reviewed.

---
+### Dispatching Workers

-## Automation Tracking System
+Launch workers via the `async-agent-manager`. Each worker's prompt must include:
+- The PR number to review
+- Repository info and the **reviewer credentials** (not the primary bot credentials)
+- The review criteria from your briefing (CONTRIBUTING.md quality standards)

-**Updated**: This agent uses the centralized automation-tracking-manager subagent for all tracking operations.
+## Main Loop

-### Tracking Issue Format
- **Status Updates**: `[AUTO-REV-SUP] PR Review Pool Status (Cycle N)`
- **Health Reports**: `[AUTO-REV-SUP] PR Review Health Report (Cycle N)`
- **Announcements**: `[AUTO-REV-SUP] Announce: <message summary>`
- **Labels**: "Automation Tracking" + any relevant priority labels
+Before starting the main loop below be sure to create your status tracking ticket (see the tracking section below). Be careful while running the loop below that you keep track of the total number of active workers, and

-### Tracking Operations
+In an infinite loop do the following each cycle:

-All tracking operations are now handled by the automation-tracking-manager subagent:
+1. **Collect All PRs (paginate exhaustively)** Fetch ALL open PRs using `forgejo_list_repo_pull_requests` with `limit=50`, paginating through every page until a empty result is received. Record for each PR: number, title, labels, `mergeable`, `merge_base`, `base.sha`, head SHA.
+2. Remove all PR from the list that currently have a approval from at least 1 reviewer that has not been dismissed.
+3. Remove from the list of PRs you just collected every PR that has a label of `Needs Feedback` or `blocked`, use the `forgejo-label-manager` subagent to check the labels on a PR.
+4. Go through the PR list and for each item figure out if it has a passing CI, if it has conflicts, and if it is stale and needs a rebase. Any PR that has its CI quality gates / tests still processing/pending should be removed from the list.
+5. Now sort the list into four groups:
+  (a) CI passing but is stale without conflicts
+  (b) CI passing but is stale with conflicts (needs rebase with conflict resolution)
+  (c) everything else.
+6. Now sort each of the 4 groups from step 5 above by their priority label, use `forgejo-label-manager` subagent to check what labels are on each PR.
+7. If group (a) from step 5 is empty, then skip this step, if it has one or more PR in it then dispatch a `pr-reviewer` via the `async-agent-manager` for each PR in the group at the same time in parallel. Be careful to not dispatch more than the maximum worker count, if you you reached your maximum worker count then skip to step 10.
+8. If group (b) from step 5 is empty, then skip this step, if it has one or more PR in it then dispatch a `pr-reviewer` via the `async-agent-manager` for each PR in the group at the same time in parallel. Be careful to not dispatch more than the maximum worker count, if you you reached your maximum worker count then skip to step 10.
+9. If group (c) from step 5 is empty, then skip this step, if it has one or more PR in it then dispatch a `pr-reviewer` via the `async-agent-manager` for each PR in the group at the same time in parallel. Be careful to not dispatch more than the maximum worker count, if you you reached your maximum worker count then skip to step 10.
+10. Sleep for 3 minutes using `bash("sleep 180", timeout=360000)`.
+11. If at least 10 minutes has passed since the last time you updated your automation tracking status ticket, or if you never created/updated one, (see tracking section below) then update your tracking ticket using the `automation-tracking-manager` subagent according to the details provided in the section labeled "tracking" below.
+12. Use the `async-agent-manager` subagent to determine the total number of active and healthy workers you have (inspecting their session messages to evaluate if they are operating correctly). Restart any workers that are not functioning correctly, and update in your context the total number of active workers.  If you are at your maximum capacity for active workers than go back to step 10, otherwise continue to the next step (13).
+13. Loop through the cycle indefinately by starting at step 1 above again.

-**CRITICAL STARTUP ORDER: READ state FIRST, then CREATE new issue.** See shared/tracking_discovery_guide.md.
+## Tracking

-```bash
-# ⛔ STEP 1 (ON STARTUP): Read state from previous session BEFORE creating new
-recovered_state=$(task automation-tracking-manager "READ_TRACKING_STATE" \
-  --agent-prefix "AUTO-REV-SUP" \
-  --tracking-type "PR Review Pool Status" \
-  --repo-owner "$owner" \
-  --repo-name "$repo")
-# Parse: cycle_number, created_at, offline_duration_minutes, estimated_cycle_interval, issue_body, comments
+- Prefix: `AUTO-REV-POOL`
+- Cycle interval: ~3 minutes
+- Create announcements for: review backlog growing faster than workers can handle

-# STEP 2: Create new tracking issue (closes ALL old status issues first)
-# The ATM handles interval calculation internally when sleep_interval_default is provided
-task automation-tracking-manager "CREATE_TRACKING_ISSUE" \
-  --agent-prefix "AUTO-REV-SUP" \
-  --tracking-type "PR Review Pool Status" \
-  --body "$tracking_body" \
-  --sleep-interval-default 1 \
-  --repo-owner "$owner" \
-  --repo-name "$repo"
-# ATM automatically injects "**Estimated Cycle Interval**: Nmin" into the body
+At startup, and then approximately every 10 minutes there after (the update interval) you need to update your automation tracking status issue by calling `automation-tracking-manager` subagent's `CREATE_TRACKING_ISSUE` operation which is used for both creating and updating the status ticket. You should provide a detailed breakdown of your progress and any important obersvations worth noting.

-# Update current tracking issue with a comment
-task automation-tracking-manager "UPDATE_TRACKING_ISSUE" \
-  --agent-prefix "AUTO-REV-SUP" \
-  --tracking-type "PR Review Pool Status" \
-  --comment "$update_comment" \
-  --repo-owner "$owner" \
-  --repo-name "$repo"
-```
+Also anytime the status ticket is updated you should consider if you have anything important to announce to other agents, such as any state that blocks your operation that you cant resolve yourself. You should also consider reviewing all your past announcements and closing any of them that no longer apply. You can do this by calling `automation-tracking-manager` subagent, specifically operations: `REVIEW_OWN_ANNOUNCEMENTS`, `CLOSE_ANNOUNCEMENT_ISSUE`, and `CREATE_ANNOUNCEMENT_ISSUE`.

-### Announcement Functions
-
-```bash
-# Create announcement issue for urgent communications
-function create_reviewer_announcement_issue() {
-    local message="$1"
-    local priority="$2"
-    local body="$3"
-    
-    # Use automation-tracking-manager for consistent announcement handling
-    local result=$(task automation-tracking-manager "CREATE_ANNOUNCEMENT_ISSUE" \
-      --agent-prefix "AUTO-REV-SUP" \
-      --message "$message" \
-      --priority "$priority" \
-      --body "$body" \
-      --repo-owner "$owner" \
-      --repo-name "$repo")
-    
-    local issue_number=$(echo "$result" | grep -o 'issue #[0-9]*' | grep -o '[0-9]*')
-    
-    if [[ -n "$issue_number" ]]; then
-        echo "✓ Created reviewer announcement issue #$issue_number via tracking manager"
-        return 0
-    else
-        echo "✗ Failed to create reviewer announcement issue"
-        return 1
-    fi
-}
-
-# Discovery function for finding other automation tracking issues
-function find_automation_tracking_issues() {
-    local agent_prefix="$1"  # Optional filter by agent prefix
-    local state="${2:-open}" # Default to open issues
-    
-    echo "[DISCOVERY] Finding automation tracking issues (prefix: ${agent_prefix:-all}, state: $state)"
-    
-    local search_url="https://git.cleverthis.com/api/v1/repos/$owner/$repo/issues?state=$state&type=issues&labels=Automation+Tracking"
-    local tracking_issues=$(curl -s "$search_url" -H "Authorization: token $FORGEJO_REVIEWER_PAT")
-    
-    # Filter by agent prefix if specified
-    if [[ -n "$agent_prefix" ]]; then
-        echo "$tracking_issues" | jq -r ".[] | select(.title | contains(\"[${agent_prefix}]\")) | \"\\(.number)|\\(.title)|\\(.created_at)\""
-    else
-        echo "$tracking_issues" | jq -r ".[] | \"\\(.number)|\\(.title)|\\(.created_at)\""
-    fi
-}
-```
-
---
-
-## Setup
-
-You receive from your caller (product-builder):
- **Repo owner/name** — for Forgejo API calls
- **Instance ID** — unique identifier for this reviewer pool instance
- **FORGEJO_REVIEWER_PAT** — API token for Forgejo operations
- **FORGEJO_REVIEWER_USERNAME** — for API and CI log access
- **FORGEJO_REVIEWER_PASSWORD** — for CI log access
- **Max workers (N)** — target number of parallel reviewers (from
-  `CA_MAX_PARALLEL_WORKERS` or default 4)
-
-These are your **only** credentials. Use them for your own curl operations
-and pass them through to every `pr-reviewer` worker you dispatch.
-
-Invoke `ref-reader` once at startup to load project rules and specification.
-
---
-
-## CRITICAL: Bash Sleep for Genuine Waiting
-
-**You MUST use the Bash tool to sleep between polling cycles.** Do NOT
-return to your caller to "wait." Returning means you EXIT — and you must
-run as long as possible.
-
-To wait 30 seconds between cycles:
-```
-bash("sleep 30", timeout=60000)
-```
-
-**The timeout parameter MUST be set to at least 1.5x the sleep duration.**
-Always set timeout explicitly to a value larger than the sleep.
-
---
-
-## Pool Supervision Loop
-
-```
-N = max_workers
-ref_summary = load via ref-reader (once at startup)
-recently_reviewed = {}  # pr_number -> {last_review_time, last_sha}
-active_reviews = {}     # pr_number -> {session_id, dispatched_at}
-idle_cycles = 0
-SERVER = "http://localhost:4096"
-
-# Get initial cycle number from tracking manager
-cycle=$(task automation-tracking-manager "GET_NEXT_CYCLE_NUMBER" \
-  --agent-prefix "AUTO-REV-SUP" \
-  --tracking-type "PR Review Pool Status" \
-  --repo-owner "$owner" \
-  --repo-name "$repo")
-
-# If this returns empty or 1, we're starting fresh
-if [[ -z "$cycle" || "$cycle" == "1" ]]; then
-    cycle=1
-else
-    # We're resuming, so use the cycle we got
-    cycle=$((cycle - 1))  # Will be incremented in loop
-fi
-
-# Dynamic review focus areas (rotate through different aspects)
-REVIEW_FOCUS_AREAS = [
-    ["architecture-alignment", "module-boundaries", "interface-contracts"],
-    ["error-handling-patterns", "edge-cases", "boundary-conditions"],
-    ["test-coverage-quality", "test-scenario-completeness", "test-maintainability"],
-    ["api-consistency", "naming-conventions", "code-patterns"],
-    ["security-concerns", "input-validation", "access-control"],
-    ["performance-implications", "resource-usage", "scalability"],
-    ["code-maintainability", "readability", "documentation"],
-    ["concurrency-safety", "race-conditions", "deadlock-risks"],
-    ["resource-management", "memory-leaks", "cleanup-patterns"],
-    ["specification-compliance", "requirements-coverage", "behavior-correctness"]
-]
-
-# Helper function to select review focus
-function select_review_focus(cycle):
-    # Rotate through focus areas to ensure variety
-    focus_set_index = cycle % len(REVIEW_FOCUS_AREAS)
-    base_focus = REVIEW_FOCUS_AREAS[focus_set_index]
-    
-    # Sometimes mix in random elements for serendipity
-    if cycle % 3 == 0:
-        # Every 3rd cycle, create a custom mix
-        all_focuses = flatten(REVIEW_FOCUS_AREAS)
-        custom_focus = random.sample(all_focuses, k=3)
-        return custom_focus
-    else:
-        return base_focus
-
-LOOP FOREVER:
-    cycle += 1
-
-    # ── Step 1: Find PRs needing review ──────────────────────────
-    all_open_prs = forgejo_list_repo_pull_requests(owner, repo, state="open")
-    prs_needing_review = []
-    
-    for pr in all_open_prs:
-        # Skip PRs with 'needs feedback' label (human required)
-        if "needs feedback" in [l.name for l in pr.labels]:
-            continue
-        
-        # Skip PRs already being reviewed
-        if pr.number in active_reviews:
-            # Check if review session is still alive
-            session_id = active_reviews[pr.number]["session_id"]
-            STATUS = bash("curl -s ${SERVER}/session/status", timeout=30000)
-            if session_id is still active in STATUS:
-                continue
-            else:
-                # Clean up dead session
-                del active_reviews[pr.number]
-        
-        # Skip external PRs (not created by our workers)
-        if not ("Closes #" in pr.body or "Fixes #" in pr.body):
-            continue
-        
-        # Check review status
-        reviews = forgejo_list_pull_reviews(owner, repo, pr.number)
-        latest_review_time = None
-        has_changes_requested = False
-        has_approval = False
-        
-        for review in reviews:
-            if review.submitted_at > (latest_review_time or 0):
-                latest_review_time = review.submitted_at
-            if review.state == "REQUEST_CHANGES":
-                has_changes_requested = True
-            if review.state == "APPROVED":
-                has_approval = True
-        
-        # Determine if review is needed
-        needs_review = False
-        review_reason = ""
-        
-        # Case 1: Never been reviewed
-        if not reviews:
-            age_hours = (now - pr.created_at).total_hours()
-            if age_hours > 2:  # Give time for CI to run first
-                needs_review = True
-                review_reason = "initial-review"
-        
-        # Case 2: Has changes requested but new commits pushed
-        elif has_changes_requested:
-            if pr.number in recently_reviewed:
-                if pr.head.sha != recently_reviewed[pr.number]["last_sha"]:
-                    needs_review = True
-                    review_reason = "changes-addressed"
-        
-        # Case 3: No recent review activity (stale)
-        elif latest_review_time:
-            hours_since_review = (now - latest_review_time).total_hours()
-            if hours_since_review > 24 and not has_approval:
-                needs_review = True
-                review_reason = "stale-review"
-        
-        # Case 4: Approved but not merged (stuck)
-        if has_approval and not pr.merged:
-            # Find when it was approved
-            approval_time = None
-            for review in reviews:
-                if review.state == "APPROVED":
-                    if not approval_time or review.submitted_at > approval_time:
-                        approval_time = review.submitted_at
-            
-            if approval_time:
-                age_since_approval = (now - approval_time).total_hours()
-                if age_since_approval > 1:  # Approved for >1 hour but not merged
-                    needs_review = True
-                    review_reason = "approved-but-stuck"
-                    # This will dispatch a reviewer to check why it's not merging
-        
-        # Skip if CI is clearly failing (let implementor fix first)
-        # Check recent comments for CI status indicators
-        if needs_review:
-            recent_comments = forgejo_list_issue_comments(owner, repo, pr.number, 
-                                                         limit=5, page=1)
-            ci_failing = any("CI is failing" in c.body or 
-                           "checks are failing" in c.body 
-                           for c in recent_comments 
-                           if (now - c.created_at).total_hours() < 2)
-            if ci_failing:
-                needs_review = False
-        
-        if needs_review:
-            prs_needing_review.append({
-                "pr": pr,
-                "reason": review_reason,
-                "priority": calculate_review_priority(pr, review_reason)
-            })
-    
-    # Sort by priority (higher = more urgent)
-    prs_needing_review.sort(key=lambda x: x["priority"], reverse=True)
-    
-    # ── Step 2: Handle idle state ────────────────────────────────
-    if not prs_needing_review:
-        idle_cycles += 1
-        if idle_cycles % 20 == 0:  # Health signal every 20 idle cycles
-            post_health_signal()
-        bash("sleep 30", timeout=60000)
-        continue
-    else:
-        idle_cycles = 0
-    
-    # ── Step 3: Dispatch reviewers ───────────────────────────────
-    available_slots = N - len(active_reviews)
-    to_dispatch = prs_needing_review[:available_slots]
-    
-    for item in to_dispatch:
-        pr = item["pr"]
-        review_focus = select_review_focus(cycle)
-        
-        # Create session
-        SESSION_ID = bash("curl -s -X POST ${SERVER}/session \
-            -H 'Content-Type: application/json' \
-            -d '{\"title\": \"[AUTO-REV] worker-review: PR-${pr.number}\"}' \
-            | python3 -c \"import sys,json; print(json.loads(sys.stdin.read())['id'])\"",
-            timeout=30000)
-        
-        # Prepare prompt with review focus
-        if item["reason"] == "approved-but-stuck":
-            # Special prompt for stuck PRs
-            prompt = f"""You are a PR reviewer investigating why an APPROVED PR has not merged.
-            
-            PR to review: #{pr.number}
-            Repository: {owner}/{repo}
-            
-            This PR has been APPROVED but has not merged for over 1 hour.
-            
-            CRITICAL: If this is a bot PR (contains "Automated by CleverAgents Bot" in description),
-            it should merge with just 1 approval. Check:
-            1. Are all CI checks passing?
-            2. Is there at least 1 approval?
-            3. Are there any merge conflicts?
-            4. Is the PR blocked by rejected reviews?
-            
-            If all conditions are met, this may be a stuck PR that needs investigation.
-            
-            Your Forgejo credentials (use for ALL writes via curl):
-              FORGEJO_REVIEWER_PAT: {FORGEJO_REVIEWER_PAT}
-              FORGEJO_REVIEWER_USERNAME: {FORGEJO_REVIEWER_USERNAME}
-              FORGEJO_REVIEWER_PASSWORD: {FORGEJO_REVIEWER_PASSWORD}
-            You MUST post a FORMAL PR review (not just a comment).
-            
-            Reference summary: {ref_summary}
-            """
-        else:
-            prompt = f"""You are a PR reviewer focusing on code quality.
-                
-                PR to review: #{pr.number}
-                Repository: {owner}/{repo}
-                Review reason: {item["reason"]}
-                
-                REVIEW FOCUS for this session: {', '.join(review_focus)}
-                While you should check all standard items (spec compliance, tests, etc.),
-                pay SPECIAL ATTENTION to the focus areas above.
-                
-                Your Forgejo credentials (use for ALL writes via curl):
-                  FORGEJO_REVIEWER_PAT: {FORGEJO_REVIEWER_PAT}
-                  FORGEJO_REVIEWER_USERNAME: {FORGEJO_REVIEWER_USERNAME}
-                  FORGEJO_REVIEWER_PASSWORD: {FORGEJO_REVIEWER_PASSWORD}
-                You MUST post a FORMAL PR review (not just a comment).
-                
-                Reference summary: {ref_summary}
-                """
-        
-        # Use async-agent-manager to dispatch reviewer
-        launch_result = task(
-            subagent_type="async-agent-manager",
-            prompt=f"Start an async agent with these parameters:
-            - agent_name: pr-reviewer
-            - tag: AUTO-REV-PR-{pr.number}
-            - display_name: reviewer-pr-{pr.number}
-            - prompt_text: {prompt}
-            - server_url: {SERVER}"
-        )
-        
-        if launch_result.get("status") != "success":
-            print(f"Failed to launch reviewer for PR #{pr.number}: {launch_result}")
-            continue
-        
-        # Track active review
-        active_reviews[pr.number] = {
-            "session_id": SESSION_ID,
-            "dispatched_at": now,
-            "review_focus": review_focus
-        }
-        
-        # Log dispatch
-        bash(f"echo '[{now}] Dispatched reviewer for PR #{pr.number} with focus: {review_focus}'")
-    
-    # ── Step 4: Monitor active reviewers ─────────────────────────
-    # Brief check of active sessions
-    for pr_number, info in list(active_reviews.items()):
-        session_id = info["session_id"]
-        age_minutes = (now - info["dispatched_at"]).total_minutes()
-        
-        # If review is taking too long, check status
-        if age_minutes > 30:
-            STATUS = bash("curl -s ${SERVER}/session/status", timeout=30000)
-            if session_id not active in STATUS:
-                # Session completed or died
-                del active_reviews[pr_number]
-                
-                # Update recently reviewed
-                pr = get_pr_from_forgejo(pr_number)
-                recently_reviewed[pr_number] = {
-                    "last_review_time": now,
-                    "last_sha": pr.head.sha
-                }
-    
-    # ── Step 5: Health signal every 10 cycles ────────────────────
-    if cycle % 10 == 0:
-        post_health_signal()
-    
-    # ── Step 6: Read critical watchdog announcements ──────────────
-    announcements = task automation-tracking-manager "READ_ANNOUNCEMENTS" \
-      --agent-prefixes "AUTO-WATCHDOG,AUTO-LIAISON" \
-      --min-priority "Critical" \
-      --repo-owner "$owner" \
-      --repo-name "$repo"
-    for announcement in announcements:
-        if "CI" in announcement.title or "merge" in announcement.title.lower():
-            # Pause dispatching reviews if CI is broken or merging is blocked
-            log("[TRIAGE] Critical announcement affects review pipeline")
-
-    # Review own announcements every 3 cycles
-    if cycle % 3 == 0:
-        own_announcements = task automation-tracking-manager "REVIEW_OWN_ANNOUNCEMENTS" \
-          --agent-prefix "AUTO-REV-SUP" \
-          --repo-owner "$owner" \
-          --repo-name "$repo"
-        for announcement in own_announcements:
-            if is_condition_resolved(announcement):
-                task automation-tracking-manager "CLOSE_ANNOUNCEMENT_ISSUE" \
-                  --agent-prefix "AUTO-REV-SUP" \
-                  --message announcement.title \
-                  --repo-owner "$owner" \
-                  --repo-name "$repo"
-
-    # Sleep before next cycle
-    bash("sleep 30", timeout=60000)
-
-# Helper functions
-
-function calculate_review_priority(pr, reason):
-    priority = 0
-    
-    # Base priority by reason
-    if reason == "initial-review":
-        priority += 50
-    elif reason == "changes-addressed":
-        priority += 80  # High priority - author is waiting
-    elif reason == "stale-review":
-        priority += 20
-    
-    # Age factor
-    age_hours = (now - pr.created_at).total_hours()
-    priority += min(age_hours, 48)  # Cap age bonus at 48 hours
-    
-    # Labels factor
-    if "Priority/CI-Blocker" in [l.name for l in pr.labels]:
-        priority += 1000  # Absolute highest priority
-    elif "Priority/Critical" in [l.name for l in pr.labels]:
-        priority += 100
-    elif "Priority/High" in [l.name for l in pr.labels]:
-        priority += 50
-    
-    return priority
-
-function post_health_signal():
-    # Calculate actual cycle time
-    local current_timestamp=$(date +%s)
-    local cycle_time_display="60 minutes (estimated)"
-    if [[ -n "$LAST_TRACKING_TIMESTAMP" ]]; then
-        local elapsed_seconds=$((current_timestamp - LAST_TRACKING_TIMESTAMP))
-        local cycle_time_minutes=$((elapsed_seconds / 60))
-        cycle_time_display="${cycle_time_minutes} minutes"
-    fi
-    
-    # Get detailed worker information from OpenCode API
-    local SERVER="http://localhost:4096"
-    local detailed_reviewers=""
-    
-    # Query each active reviewer session for detailed status
-    for pr_num in "${!active_reviews[@]}"; do
-        local session_id="${active_reviews[$pr_num][session_id]}"
-        local focus_areas="${active_reviews[$pr_num][review_focus]}"
-        local dispatched_at="${active_reviews[$pr_num][dispatched_at]}"
-        
-        if [[ -n "$session_id" ]]; then
-            # Get session status
-            local session_status=$(curl -s "${SERVER}/session/${session_id}" | jq -r '.status // "unknown"' 2>/dev/null)
-            
-            # Get recent messages to understand current review progress
-            local recent_messages=$(curl -s "${SERVER}/session/${session_id}/messages?limit=3" | jq -r '.[-1].content // "No recent activity"' 2>/dev/null)
-            local last_activity=$(curl -s "${SERVER}/session/${session_id}/messages?limit=1" | jq -r '.[-1].timestamp // "unknown"' 2>/dev/null)
-            
-            # Calculate time since last activity
-            local activity_display="unknown"
-            if [[ "$last_activity" != "unknown" ]]; then
-                local last_activity_timestamp=$(date -d "$last_activity" +%s 2>/dev/null || echo "0")
-                local current_time=$(date +%s)
-                local minutes_since_activity=$(( (current_time - last_activity_timestamp) / 60 ))
-                activity_display="${minutes_since_activity}m ago"
-            fi
-            
-            # Calculate duration since assignment
-            local duration="unknown"
-            if [[ "$dispatched_at" != "unknown" ]]; then
-                local start_timestamp=$(date -d "$dispatched_at" +%s 2>/dev/null || echo "0")
-                local duration_minutes=$(( (current_time - start_timestamp) / 60 ))
-                if [[ $duration_minutes -lt 60 ]]; then
-                    duration="${duration_minutes}m"
-                else
-                    duration="$((duration_minutes/60))h $((duration_minutes%60))m"
-                fi
-            fi
-            
-            # Extract work summary from recent message (first 100 chars)
-            local work_summary=$(echo "$recent_messages" | head -c 100 | tr '\n' ' ')
-            if [[ ${#work_summary} -eq 100 ]]; then
-                work_summary="${work_summary}..."
-            fi
-            
-            detailed_reviewers+="| #$pr_num | $session_id | $session_status | $focus_areas | $duration | $activity_display | $work_summary |\n"
-        fi
-    done
-    
-    if [[ -z "$detailed_reviewers" ]]; then
-        detailed_reviewers="| - | - | - | - | - | - | No active reviewers |\n"
-    fi
-    
-    local tracking_body="# PR Review Pool Status — $(date +'%Y-%m-%d %H:%M:%S')
-
-**Agent**: pr-review-pool-supervisor
-**Cycle**: $cycle
-**Estimated Cycle Interval**: ${estimated_interval}min
-**Cycle Time**: $cycle_time_display
-**Reporting Interval**: Every 10 cycles (~60 minutes)
-**Status**: active
-
-## Summary
-
-Review pool managing ${#active_reviews[@]} active reviewers with ${#prs_needing_review[@]} PRs in queue and ${idle_cycles} idle cycles.
-
-## Detailed Reviewer Status
-
-**Active Reviewers**: ${#active_reviews[@]}/$N
-
-| PR | Session ID | Status | Focus Areas | Duration | Last Activity | Recent Thinking |
-|----|------------|--------|-------------|----------|---------------|-----------------|
-$detailed_reviewers
-
-## Pool Health
-
-**Pool Status**: Active - managing PR review workload
-**PRs Needing Review**: ${#prs_needing_review[@]} PRs queued
-**Recently Reviewed**: ${#recently_reviewed[@]} PRs tracked
-**Reviewer Utilization**: ${#active_reviews[@]}/$N ($(( ${#active_reviews[@]} * 100 / N ))%)
-
-### Queue Status
-
-**PRs Pending Review**: ${#prs_needing_review[@]}
-$(for pr in "${prs_needing_review[@]}"; do
-    echo "- PR #$pr (priority: $(calculate_review_priority $pr))"
-done | head -5)
-
-## Health Indicators
-
- **Reviewer Utilization**: ${#active_reviews[@]}/$N ($(( ${#active_reviews[@]} * 100 / N ))%)
- **Queue Health**: ${#prs_needing_review[@]} PRs pending review
- **Idle Cycles**: $idle_cycles
- **Stale Reviewers**: $(echo -e "$detailed_reviewers" | grep -c "unknown\|[3-9][0-9]m ago\|[0-9][0-9][0-9]m ago") (inactive >30min)
-
-## Next Actions
-
- Continue monitoring PR queue for review opportunities
- Dispatch reviewers to ${#prs_needing_review[@]} pending PRs
- Maintain focus area rotation for comprehensive reviews
- Check for stale reviewers and restart if needed
- Next status update in ~10 cycles
-
-## Inter-Agent Coordination
-
-Recent automation tracking issues found:
-$(find_automation_tracking_issues | head -5 | while IFS='|' read -r num title created; do
-    echo "- Issue #$num: $title (created $created)"
-done)
-
---
-**Automated by CleverAgents Bot**
-Supervisor: PR Review Pool | Agent: pr-review-pool-supervisor"
-
-    # Use automation-tracking-manager to create tracking issue
-    result=$(task automation-tracking-manager "CREATE_TRACKING_ISSUE" \
-      --agent-prefix "AUTO-REV-SUP" \
-      --tracking-type "PR Review Pool Status" \
-      --body "$tracking_body" \
-      --repo-owner "$owner" \
-      --repo-name "$repo")
-    
-    # Extract issue number and cycle from result
-    issue_number=$(echo "$result" | grep "ISSUE_NUMBER=" | cut -d'=' -f2)
-    cycle_number=$(echo "$result" | grep "CYCLE_NUMBER=" | cut -d'=' -f2)
-    
-    # Update cycle for next iteration
-    cycle=$cycle_number
-    
-    # Store timestamp for next cycle time calculation
-    export LAST_TRACKING_TIMESTAMP="$current_timestamp"
-}
-```
-
---
-
-## Context Management
-
-**You carry minimal context.** After each cycle:
- Discard all PR data except active_reviews and recently_reviewed
- Keep only essential tracking information
- All other data is re-queried from Forgejo each cycle
-
-This ensures you can run indefinitely without context exhaustion.
-
---
-
-## Inter-Agent Coordination
-
-Use the automation tracking system to coordinate with other agents:
-
-```bash
-# Check what other agents are doing
-function check_other_agents_activity() {
-    echo "[COORDINATION] Checking activity from other automation agents..."
-    
-    # Check for implementation pool activity
-    local impl_activity=$(find_automation_tracking_issues "AUTO-IMP-POOL" "open" | head -1)
-    if [[ -n "$impl_activity" ]]; then
-        echo "[COORDINATION] Implementation pool is active"
-    fi
-    
-    # Check for groomer activity
-    local groomer_activity=$(find_automation_tracking_issues "AUTO-GROOMER" "open" | head -1)
-    if [[ -n "$groomer_activity" ]]; then
-        echo "[COORDINATION] Backlog groomer is active"
-    fi
-    
-    # Check for system watchdog
-    local watchdog_activity=$(find_automation_tracking_issues "AUTO-WATCHDOG" "open" | head -1)
-    if [[ -n "$watchdog_activity" ]]; then
-        echo "[COORDINATION] System watchdog is monitoring"
-    fi
-}
-
-# Create announcement for urgent coordination needs
-function announce_urgent_issue() {
-    local message="$1"
-    local issue_description="$2"
-    
-    local announcement_body="# 🚨 PR Review Pool Alert
-
-**Alert Type**: Urgent Coordination Needed
-**Timestamp**: $(date +'%Y-%m-%d %H:%M:%S')
-**Priority**: High
-
-## Issue
-
-$issue_description
-
-## Impact
-
-This may affect PR review throughput and development velocity.
-
-## Coordination Needed
-
-Other agents should be aware of this issue and coordinate their activities accordingly.
-
---
-**Automated by CleverAgents Bot**
-Supervisor: PR Review Pool | Agent: pr-review-pool-supervisor
-**Alert Type**: Urgent"
-
-    create_reviewer_announcement_issue "$message" "High" "$announcement_body"
-}
-```
-
---
-
-## Bot Signature (Required on ALL Forgejo Content)
-
-Every comment you post to Forgejo MUST end with this signature block:
+## **CRITICAL** Rules

+1. **Use reviewer credentials.** Workers must authenticate as the reviewer bot, not the primary bot. This allows formal approval from a different account.
+2. **No duplicate reviews.** Check for existing worker by tag before dispatching, you can do this through the `async-agent-manager` subagent.
+3. **Never review code yourself.** Dispatch workers for all reviews.
+5. **Pass credentials down.** Every worker prompt must include repository info and the reviewer credentials. Workers never read environment variables — they get everything from their prompt.
+6. **Bot signature on all Forgejo content:**
 ```
 ---
 **Automated by CleverAgents Bot**
 Supervisor: PR Review Pool | Agent: pr-review-pool-supervisor
 ```
+
+7. **Apply labels via `forgejo-label-manager`.** Never apply labels directly or using the Forgejo MCP/task. All label operations must go through `forgejo-label-manager`.
+8. **Exhaustive pagination for all list results.** Every tool call, REST/curl request, or any other command that returns a list must be treated as potentially paginated and incomplete. Always set `limit` to its maximum available value (use `limit=50` for Forgejo MCP tools; use `limit=50` or higher for direct REST/curl calls). After each list response, check whether the number of returned items equals the page size — if so, there are likely more results; fetch the next page (`page=2`, `page=3`, …) and continue until receiving a partial page. Never assume the first response is the complete result. This rule applies to every list-returning call without exception. *Examples specific to this agent (not exhaustive):* `forgejo_list_repo_pull_requests` (default 20 — must use `limit=50` and paginate ALL pages; every PR must be assessed for review need or some will never receive a review); `forgejo_list_pull_reviews` (paginate to check all review rounds on each PR); `forgejo_list_pull_request_files` (paginate to see all changed files in large PRs); `forgejo_list_repo_milestones` (paginate for priority ordering).
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#3B82F6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,18 +5,11 @@ description: >
  and reports status. Never does implementation work itself.
 mode: primary
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: primary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
-  websearch: deny
-  codesearch: deny
  bash:
    "*": deny
    "echo $*": allow
@@ -68,33 +61,28 @@ Supervisors self-coordinate exclusively through Forgejo issues, PRs, and comment

 ## Required Information

-Before starting, gather these values into the local varible names listed for reuse later. Check the user's prompt first, then the environment variable via `echo $VAR`, then ask the user.
+Before starting, gather these values. Check the user's prompt first, then the environment variable via `echo $VAR`, then ask the user.

-| Information | Env Variable | Required? | Local Variable |
+| Information | Env Variable | Required? |
 |---|---|---|
-| Git full name | `GIT_USER_NAME` | Yes | `git_user_name` |
-| Git email | `GIT_USER_EMAIL` | Yes | `git_user_email` |
-| Forgejo PAT | `FORGEJO_PAT` | Yes | `forgejo_pat` |
-| Forgejo username | `FORGEJO_USERNAME` | Yes | `forgejo_username` |
-| Forgejo password | `FORGEJO_PASSWORD` | Yes | `forgejo_password` |
-| Reviewer PAT | `FORGEJO_REVIEWER_PAT` | Yes | `forgejo_reviewer_pat` |
-| Reviewer username | `FORGEJO_REVIEWER_USERNAME` | Yes | `forgejo_reviewer_username` |
-| Reviewer password | `FORGEJO_REVIEWER_PASSWORD` | Yes | `forgejo_reviewer_password` |
-| Max parallel workers (N) | `CA_MAX_PARALLEL_WORKERS` | No (default: 4) | `max_parallel_workers` |
-| Forgejo base url | `FORGEJO_URL` | No (default: Detected from remote  | `forgejo_url` |
-| Repository owner | `FORGEJO_OWNER` | No (default: Detected from remote  | `forgejo_owner` |
-| Repository name | `FORGEJO_REPO` | No (default: Detected from remote  | `forgejo_repo` |
+| Git full name | `GIT_USER_NAME` | Yes |
+| Git email | `GIT_USER_EMAIL` | Yes |
+| Forgejo PAT | `FORGEJO_PAT` | Yes |
+| Forgejo username | `FORGEJO_USERNAME` | Yes |
+| Forgejo password | `FORGEJO_PASSWORD` | Yes |
+| Reviewer PAT | `FORGEJO_REVIEWER_PAT` | Yes |
+| Reviewer username | `FORGEJO_REVIEWER_USERNAME` | Yes |
+| Reviewer password | `FORGEJO_REVIEWER_PASSWORD` | Yes |
+| Max parallel workers (N) | `CA_MAX_PARALLEL_WORKERS` | No (default: 4) |

 The reviewer credentials belong to a **separate Forgejo bot account** used exclusively by the PR review supervisor and its workers.

-Detect the forgejo base url (`forgejo_url`), repository owner (`forgejo_owner`) and name (`forgejo_repo`) by running:
+Detect the repository owner and name by running:

 ```bash
 git remote get-url origin
 ```

-For example if you get a remote url of ` https://git.cleverthis.com/cleveragents/cleveragents-core.git` would mean `forgejo_url` is `https://git.cleverthis.com`, `forgejo_owner` is `cleveragents`, and `forgejo_repo` is `cleveragents-core`.
-
 ### Worker Allocation Tiers

 Compute these once from N (defined in `CA_MAX_PARALLEL_WORKERS` environment variable) at startup. These values are passed to each pool supervisor in its launch prompt.
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -62,7 +57,8 @@ You assess overall product completeness. You check all dimensions and return eit
 9. **Documentation** — do README, API docs, and changelogs exist and appear current?
 10. **Blockers** — are there zero issues with the `Blocked` label?

-For the static checks (items 4 to 8 above) review the CI status on master as it is reported by Forgejo's CI system, do not run them locally. Also take a fail-fast approach, check the server and once you see at least one of these failing then just declare incomplete and return without checking the other points further.
+For the static checks (items 4 to 8 above) review the CI status on master if the other points are not passing (to save time). Only manually run these steps on the code locally
+to verify when all other points are satisfied.

 ## What You Return

@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: primary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#8E44AD"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.0
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: error
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#6B7280"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.0
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: "#6B7280"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -8,10 +8,6 @@ hidden: true
 temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,10 +7,6 @@ mode: primary
 temperature: 0.0
 color: error
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: secondary
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.0
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 color: info
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -5,14 +5,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.0
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ temperature: 0.0
 model: openai/gpt-5-nano
 color: "#9B59B6"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,14 +8,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: openai/gpt-5-codex
 color: accent
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#E74C3C"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -9,10 +9,6 @@ temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 color: warning
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 color: "#2ECC71"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -68,13 +63,6 @@ Workers are `test-infra-worker` agents. Each worker analyzes one area of testing

 Workers use: `[AUTO-INF-<N>]` where N is a sequential number or area identifier.

-### Dispatching Workers
-
-Launch workers via the `async-agent-manager`. Each worker's prompt must include:
- Area of focus  (one of: CI timing, coverage gaps, test architecture, flaky tests, pipeline design, test data quality, missing test levels, dependency security)
- Repository owner/name, Forgejo PAT, git identity
- A customized briefing containing CONTRIBUTING.md merge requirements and open announcements
-
 ### Eight Analysis Areas

 Workers are assigned one of these focus areas:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.2
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: google/gemini-2.5-pro
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -7,10 +7,6 @@ hidden: true
 temperature: 0.0
 model: openai/gpt-5-codex
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -6,12 +6,7 @@ mode: subagent
 hidden: true
 temperature: 0.0
 model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,10 +7,6 @@ hidden: true
 temperature: 0.0
 model: anthropic/claude-opus-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,10 +7,6 @@ hidden: true
 temperature: 0.0
 model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -6,14 +6,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: "#2ECC71"
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.1
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -8,10 +8,6 @@ hidden: true
 temperature: 0.1
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -7,14 +7,9 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 color: success
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -6,13 +6,8 @@ description: >
 mode: subagent
 hidden: true
 temperature: 0.3
-model: anthropic/claude-haiku-4-5
-reasoningEffort: "max"
+model: anthropic/claude-sonnet-4-6
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit: deny
  webfetch: deny
  bash:
@@ -8,10 +8,6 @@ hidden: true
 temperature: 0.2
 # NO MODEL SPECIFIED - inherits from caller (tier selector)
 permission:
-  "*": deny
-  "doom_loop": deny
-  question: deny
-  "sequential-thinking*": allow
  edit:
    "*": deny
    "/tmp/**": allow
@@ -0,0 +1,70 @@
+# Async Agent Manager Migration Summary
+
+## Problem Identified
+The `async-agent-starter` subagent was failing because it tried to use bash with curl commands, but the environment was restricting these operations. The error message showed:
+> "I don't currently have the ability to run the required shell or HTTP commands from this environment"
+
+## Solution Implemented
+
+### 1. Created New `async-agent-manager.md`
+- Renamed from `async-agent-starter` to better reflect its expanded responsibilities
+- Enhanced to handle all async agent operations:
+  - Starting async agents
+  - Getting session status
+  - Retrieving session messages
+  - Searching sessions by tag
+  - Closing/cleanup sessions
+  - Monitoring session health
+- Properly configured with explicit curl permissions to localhost:4096
+- Includes detailed curl command examples that have been tested and verified to work
+
+### 2. Updated All Agents Using Async Operations
+
+#### Primary Agent Updated:
+- **product-builder.md**:
+  - Removed direct curl permissions to localhost:4096
+  - Added permission to use `async-agent-manager` subagent
+  - Updated `launch_supervisor` function to use async-agent-manager instead of direct curl
+  - Updated all session status queries to use async-agent-manager
+  - Updated session conversation retrieval to use async-agent-manager
+
+#### Pool Supervisors Updated:
+- **implementation-orchestrator.md**: Updated all references from async-agent-starter to async-agent-manager
+- **uat-tester.md**: Added async-agent-manager permission and updated worker launch code
+- **test-infra-improver.md**: Added async-agent-manager permission and updated worker launch code
+- **continuous-pr-reviewer.md**: Added async-agent-manager permission and updated reviewer dispatch code
+- **bug-hunter.md**: Added async-agent-manager permission (already structured for worker dispatch)
+
+#### Other Agents Updated:
+- **subtask-loop.md**: Updated all references from async-agent-starter to async-agent-manager
+- **async-agent-monitor.md**: Updated to use async-agent-manager for restart operations
+- **system-watchdog.md**: Added async-agent-manager permission and updated dispatch_one_off function
+- **async-agent-cleanup.md**: Removed direct curl permissions, added async-agent-manager permission
+- **async-agent-cleanup-all.md**: Removed direct curl permissions, added async-agent-manager permission
+
+### 3. Key Design Principles
+
+1. **Single Point of Control**: Only `async-agent-manager` has permission to curl to localhost:4096
+2. **Consistent Interface**: All agents use the same Task tool interface to interact with async operations
+3. **Proper Error Handling**: The manager returns structured JSON responses for all operations
+4. **Security**: Properly escapes all inputs to prevent injection attacks
+5. **Comprehensive Operations**: Handles the full lifecycle of async sessions
+
+### 4. Testing
+Created and ran a test script that verified:
+- Session listing works correctly
+- Session status retrieval works correctly
+- Session creation returns proper session IDs
+- Async agent launch returns HTTP 204 (success)
+- Session deletion works correctly
+
+## Benefits
+
+1. **Centralized Management**: All async operations go through a single, well-tested agent
+2. **Better Error Handling**: Structured responses make it easier to handle failures
+3. **Improved Security**: Only one agent needs curl permissions to the API
+4. **Easier Maintenance**: Changes to the API only need to be updated in one place
+5. **Consistent Patterns**: All agents use the same interface for async operations
+
+## Migration Complete
+All agents that previously used direct curl commands or async-agent-starter have been updated to use the new async-agent-manager. The old async-agent-starter.md file has been removed.
@@ -5,100 +5,21 @@
  "packages": {
    "": {
      "dependencies": {
-        "@opencode-ai/plugin": "1.4.8"
+        "@opencode-ai/plugin": "1.3.17"
      }
    },
-    "node_modules/@msgpackr-extract/msgpackr-extract-darwin-arm64": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-darwin-arm64/-/msgpackr-extract-darwin-arm64-3.0.3.tgz",
-      "integrity": "sha512-QZHtlVgbAdy2zAqNA9Gu1UpIuI8Xvsd1v8ic6B2pZmeFnFcMWiPLfWXh7TVw4eGEZ/C9TH281KwhVoeQUKbyjw==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/@msgpackr-extract/msgpackr-extract-darwin-x64": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-darwin-x64/-/msgpackr-extract-darwin-x64-3.0.3.tgz",
-      "integrity": "sha512-mdzd3AVzYKuUmiWOQ8GNhl64/IoFGol569zNRdkLReh6LRLHOXxU4U8eq0JwaD8iFHdVGqSy4IjFL4reoWCDFw==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
-    },
-    "node_modules/@msgpackr-extract/msgpackr-extract-linux-arm": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-arm/-/msgpackr-extract-linux-arm-3.0.3.tgz",
-      "integrity": "sha512-fg0uy/dG/nZEXfYilKoRe7yALaNmHoYeIoJuJ7KJ+YyU2bvY8vPv27f7UKhGRpY6euFYqEVhxCFZgAUNQBM3nw==",
-      "cpu": [
-        "arm"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/@msgpackr-extract/msgpackr-extract-linux-arm64": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-arm64/-/msgpackr-extract-linux-arm64-3.0.3.tgz",
-      "integrity": "sha512-YxQL+ax0XqBJDZiKimS2XQaf+2wDGVa1enVRGzEvLLVFeqa5kx2bWbtcSXgsxjQB7nRqqIGFIcLteF/sHeVtQg==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/@msgpackr-extract/msgpackr-extract-linux-x64": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-x64/-/msgpackr-extract-linux-x64-3.0.3.tgz",
-      "integrity": "sha512-cvwNfbP07pKUfq1uH+S6KJ7dT9K8WOE4ZiAcsrSes+UY55E/0jLYc+vq+DO7jlmqRb5zAggExKm0H7O/CBaesg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/@msgpackr-extract/msgpackr-extract-win32-x64": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-win32-x64/-/msgpackr-extract-win32-x64-3.0.3.tgz",
-      "integrity": "sha512-x0fWaQtYp4E6sktbsdAqnehxDgEc/VwM7uLsRCYWaiGu0ykYdZPiS8zCWdnjHwyiumousxfBm4SO31eXqwEZhQ==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ]
-    },
    "node_modules/@opencode-ai/plugin": {
-      "version": "1.4.8",
-      "resolved": "https://registry.npmjs.org/@opencode-ai/plugin/-/plugin-1.4.8.tgz",
-      "integrity": "sha512-arbggGAwR7vE6d5a/Ra8A7yECXYcOAPyRbJHzkofLLiVzyclsThFaL2SSCZw/UNJJTtt3L7JGl95phFodJq8tQ==",
+      "version": "1.3.17",
+      "resolved": "https://registry.npmjs.org/@opencode-ai/plugin/-/plugin-1.3.17.tgz",
+      "integrity": "sha512-N5lckFtYvEu2R8K1um//MIOTHsJHniF2kHoPIWPCrxKG5Jpismt1ISGzIiU3aKI2ht/9VgcqKPC5oZFLdmpxPw==",
      "license": "MIT",
      "dependencies": {
-        "@opencode-ai/sdk": "1.4.8",
-        "effect": "4.0.0-beta.48",
+        "@opencode-ai/sdk": "1.3.17",
        "zod": "4.1.8"
      },
      "peerDependencies": {
-        "@opentui/core": ">=0.1.100",
-        "@opentui/solid": ">=0.1.100"
+        "@opentui/core": ">=0.1.96",
+        "@opentui/solid": ">=0.1.96"
      },
      "peerDependenciesMeta": {
        "@opentui/core": {
@@ -110,24 +31,16 @@
      }
    },
    "node_modules/@opencode-ai/sdk": {
-      "version": "1.4.8",
-      "resolved": "https://registry.npmjs.org/@opencode-ai/sdk/-/sdk-1.4.8.tgz",
-      "integrity": "sha512-DTN0TwRxuBxdm2JvJO3Dg7Vp9/j8PFpTS/26qD6Mzi6UPI5+NBxgcDVkozKygi55Goj3AAQGJPp63qzbdc+8ag==",
+      "version": "1.3.17",
+      "resolved": "https://registry.npmjs.org/@opencode-ai/sdk/-/sdk-1.3.17.tgz",
+      "integrity": "sha512-2+MGgu7wynqTBwxezR01VAGhILXlpcHDY/pF7SWB87WOgLt3kD55HjKHNj6PWxyY8n575AZolR95VUC3gtwfmA==",
      "license": "MIT",
      "dependencies": {
        "cross-spawn": "7.0.6"
      }
    },
-    "node_modules/@standard-schema/spec": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
-      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
-      "license": "MIT"
-    },
    "node_modules/cross-spawn": {
      "version": "7.0.6",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
-      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
      "license": "MIT",
      "dependencies": {
        "path-key": "^3.1.0",
@@ -138,164 +51,19 @@
        "node": ">= 8"
      }
    },
-    "node_modules/detect-libc": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
-      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
-      "license": "Apache-2.0",
-      "optional": true,
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/effect": {
-      "version": "4.0.0-beta.48",
-      "resolved": "https://registry.npmjs.org/effect/-/effect-4.0.0-beta.48.tgz",
-      "integrity": "sha512-MMAM/ZabuNdNmgXiin+BAanQXK7qM8mlt7nfXDoJ/Gn9V8i89JlCq+2N0AiWmqFLXjGLA0u3FjiOjSOYQk5uMw==",
-      "license": "MIT",
-      "dependencies": {
-        "@standard-schema/spec": "^1.1.0",
-        "fast-check": "^4.6.0",
-        "find-my-way-ts": "^0.1.6",
-        "ini": "^6.0.0",
-        "kubernetes-types": "^1.30.0",
-        "msgpackr": "^1.11.9",
-        "multipasta": "^0.2.7",
-        "toml": "^4.1.1",
-        "uuid": "^13.0.0",
-        "yaml": "^2.8.3"
-      }
-    },
-    "node_modules/fast-check": {
-      "version": "4.6.0",
-      "resolved": "https://registry.npmjs.org/fast-check/-/fast-check-4.6.0.tgz",
-      "integrity": "sha512-h7H6Dm0Fy+H4ciQYFxFjXnXkzR2kr9Fb22c0UBpHnm59K2zpr2t13aPTHlltFiNT6zuxp6HMPAVVvgur4BLdpA==",
-      "funding": [
-        {
-          "type": "individual",
-          "url": "https://github.com/sponsors/dubzzz"
-        },
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/fast-check"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "pure-rand": "^8.0.0"
-      },
-      "engines": {
-        "node": ">=12.17.0"
-      }
-    },
-    "node_modules/find-my-way-ts": {
-      "version": "0.1.6",
-      "resolved": "https://registry.npmjs.org/find-my-way-ts/-/find-my-way-ts-0.1.6.tgz",
-      "integrity": "sha512-a85L9ZoXtNAey3Y6Z+eBWW658kO/MwR7zIafkIUPUMf3isZG0NCs2pjW2wtjxAKuJPxMAsHUIP4ZPGv0o5gyTA==",
-      "license": "MIT"
-    },
-    "node_modules/ini": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/ini/-/ini-6.0.0.tgz",
-      "integrity": "sha512-IBTdIkzZNOpqm7q3dRqJvMaldXjDHWkEDfrwGEQTs5eaQMWV+djAhR+wahyNNMAa+qpbDUhBMVt4ZKNwpPm7xQ==",
-      "license": "ISC",
-      "engines": {
-        "node": "^20.17.0 || >=22.9.0"
-      }
-    },
    "node_modules/isexe": {
      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
-      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
      "license": "ISC"
    },
-    "node_modules/kubernetes-types": {
-      "version": "1.30.0",
-      "resolved": "https://registry.npmjs.org/kubernetes-types/-/kubernetes-types-1.30.0.tgz",
-      "integrity": "sha512-Dew1okvhM/SQcIa2rcgujNndZwU8VnSapDgdxlYoB84ZlpAD43U6KLAFqYo17ykSFGHNPrg0qry0bP+GJd9v7Q==",
-      "license": "Apache-2.0"
-    },
-    "node_modules/msgpackr": {
-      "version": "1.11.9",
-      "resolved": "https://registry.npmjs.org/msgpackr/-/msgpackr-1.11.9.tgz",
-      "integrity": "sha512-FkoAAyyA6HM8wL882EcEyFZ9s7hVADSwG9xrVx3dxxNQAtgADTrJoEWivID82Iv1zWDsv/OtbrrcZAzGzOMdNw==",
-      "license": "MIT",
-      "optionalDependencies": {
-        "msgpackr-extract": "^3.0.2"
-      }
-    },
-    "node_modules/msgpackr-extract": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/msgpackr-extract/-/msgpackr-extract-3.0.3.tgz",
-      "integrity": "sha512-P0efT1C9jIdVRefqjzOQ9Xml57zpOXnIuS+csaB4MdZbTdmGDLo8XhzBG1N7aO11gKDDkJvBLULeFTo46wwreA==",
-      "hasInstallScript": true,
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "node-gyp-build-optional-packages": "5.2.2"
-      },
-      "bin": {
-        "download-msgpackr-prebuilds": "bin/download-prebuilds.js"
-      },
-      "optionalDependencies": {
-        "@msgpackr-extract/msgpackr-extract-darwin-arm64": "3.0.3",
-        "@msgpackr-extract/msgpackr-extract-darwin-x64": "3.0.3",
-        "@msgpackr-extract/msgpackr-extract-linux-arm": "3.0.3",
-        "@msgpackr-extract/msgpackr-extract-linux-arm64": "3.0.3",
-        "@msgpackr-extract/msgpackr-extract-linux-x64": "3.0.3",
-        "@msgpackr-extract/msgpackr-extract-win32-x64": "3.0.3"
-      }
-    },
-    "node_modules/multipasta": {
-      "version": "0.2.7",
-      "resolved": "https://registry.npmjs.org/multipasta/-/multipasta-0.2.7.tgz",
-      "integrity": "sha512-KPA58d68KgGil15oDqXjkUBEBYc00XvbPj5/X+dyzeo/lWm9Nc25pQRlf1D+gv4OpK7NM0J1odrbu9JNNGvynA==",
-      "license": "MIT"
-    },
-    "node_modules/node-gyp-build-optional-packages": {
-      "version": "5.2.2",
-      "resolved": "https://registry.npmjs.org/node-gyp-build-optional-packages/-/node-gyp-build-optional-packages-5.2.2.tgz",
-      "integrity": "sha512-s+w+rBWnpTMwSFbaE0UXsRlg7hU4FjekKU4eyAih5T8nJuNZT1nNsskXpxmeqSK9UzkBl6UgRlnKc8hz8IEqOw==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "detect-libc": "^2.0.1"
-      },
-      "bin": {
-        "node-gyp-build-optional-packages": "bin.js",
-        "node-gyp-build-optional-packages-optional": "optional.js",
-        "node-gyp-build-optional-packages-test": "build-test.js"
-      }
-    },
    "node_modules/path-key": {
      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
-      "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
      "license": "MIT",
      "engines": {
        "node": ">=8"
      }
    },
-    "node_modules/pure-rand": {
-      "version": "8.4.0",
-      "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-8.4.0.tgz",
-      "integrity": "sha512-IoM8YF/jY0hiugFo/wOWqfmarlE6J0wc6fDK1PhftMk7MGhVZl88sZimmqBBFomLOCSmcCCpsfj7wXASCpvK9A==",
-      "funding": [
-        {
-          "type": "individual",
-          "url": "https://github.com/sponsors/dubzzz"
-        },
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/fast-check"
-        }
-      ],
-      "license": "MIT"
-    },
    "node_modules/shebang-command": {
      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
-      "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
      "license": "MIT",
      "dependencies": {
        "shebang-regex": "^3.0.0"
@@ -306,39 +74,13 @@
    },
    "node_modules/shebang-regex": {
      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
-      "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
      "license": "MIT",
      "engines": {
        "node": ">=8"
      }
    },
-    "node_modules/toml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/toml/-/toml-4.1.1.tgz",
-      "integrity": "sha512-EBJnVBr3dTXdA89WVFoAIPUqkBjxPMwRqsfuo1r240tKFHXv3zgca4+NJib/h6TyvGF7vOawz0jGuryJCdNHrw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=20"
-      }
-    },
-    "node_modules/uuid": {
-      "version": "13.0.0",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.0.tgz",
-      "integrity": "sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==",
-      "funding": [
-        "https://github.com/sponsors/broofa",
-        "https://github.com/sponsors/ctavan"
-      ],
-      "license": "MIT",
-      "bin": {
-        "uuid": "dist-node/bin/uuid"
-      }
-    },
    "node_modules/which": {
      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
-      "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
      "license": "ISC",
      "dependencies": {
        "isexe": "^2.0.0"
@@ -350,21 +92,6 @@
        "node": ">= 8"
      }
    },
-    "node_modules/yaml": {
-      "version": "2.8.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
-      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
-      "license": "ISC",
-      "bin": {
-        "yaml": "bin.mjs"
-      },
-      "engines": {
-        "node": ">= 14.6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/eemeli"
-      }
-    },
    "node_modules/zod": {
      "version": "4.1.8",
      "license": "MIT",
@@ -1,316 +0,0 @@
---
-name: auto-agents-system
-description: |
-  Complete self-reflection skill for the auto-agents autonomous development
-  system. Covers every architectural concept, agent role, operational rule,
-  and coordination pattern that agents need in order to understand and operate
-  within the system correctly.
-references:
-  - universal-rules
-  - agent-registry
-  - async-operations
-  - tracking-system
-  - tier-system
-  - credential-flow
-  - coordination
-  - redundancy
-  - operational-parameters
---
-
-# CleverAgents System — Self-Reflection Skill
-
-Use this skill whenever you need to know:
-
- What every agent does and what session tag prefix it uses
- How the OpenCode server at `localhost:4096` works and why `prompt_async` is used
- How worker count is calculated (`N`, `N/2`, `N/4`) and what sleep interval each supervisor uses
- How environment variables flow down the agent hierarchy (they do NOT — everything comes through prompts)
- How the four-tier model escalation system works (`Haiku → Codex → Sonnet → Opus`)
- How automation tracking status tickets and announcement tickets work
- Why the `Automation Tracking` label is the universal discovery mechanism
- What the `needs feedback` label means and when to use it
- Why labels are NEVER created and only org-level labels are used via `forgejo-label-manager`
- How the announcement relevancy matrix determines which agents consume which announcements at what priority threshold
- How claim/heartbeat/release coordination prevents duplicate work
- How supervisors recover state from previous tracking issues on startup
- How the three-layer redundancy and self-healing system works (product-builder every 60s, system-watchdog every 5min via Forgejo staleness, each supervisor monitors its own workers every cycle)
- How crashed supervisors are detected and relaunched within 60 seconds
- How crashed workers are detected and re-dispatched
- How the two independent health signals (OpenCode session API and Forgejo tracking issue staleness) cross-check each other
- What failure modes exist and how each is detected and recovered
-
-## ⚡ Quick Reference
-
-```
-Session format:    [TAG] display-name          (all AUTO-* sessions)
-Worker formula:    N_FULL=N  N_HALF=max(1,N÷2)  N_QUARTER=max(1,N÷4)
-Escalation:        Haiku(1) → Codex(2) → Sonnet(3) → Opus(4) → Human
-Labels:            NEVER create. Org-level only. Always via forgejo-label-manager.
-Tracking:          One status issue at a time per prefix. Announcements persist until closed.
-```
-
-## 🧭 Master Decision Trees
-
-### "Being asked to use a script from this skill?"
-
-```
-Need to use or understand a script by name?
-├─ `merge_pr`                               → [`merge_pr/`](./references/scripts/merge_pr/)\
-├─ `rebase_pr`                              → [`rebase_pr/`](./references/scripts/rebase_pr/)\
-├─ `list_prs_needs_review_not_stale`        → [`list_prs_needs_review_not_stale/`](./references/scripts/list_prs_needs_review_not_stale/)\
-├─ `list_prs_needs_review_stale_clean`      → [`list_prs_needs_review_stale_clean/`](./references/scripts/list_prs_needs_review_stale_clean/)\
-├─ `list_prs_needs_review_stale_conflicts`  → [`list_prs_needs_review_stale_conflicts/`](./references/scripts/list_prs_needs_review_stale_conflicts/)\
-├─ `list_prs_stale_clean`                   → [`list_prs_stale_clean/`](./references/scripts/list_prs_stale_clean/)\
-├─ `list_prs_stale_conflicts`               → [`list_prs_stale_conflicts/`](./references/scripts/list_prs_stale_conflicts/)\
-├─ `list_prs_ready_to_merge`                → [`list_prs_ready_to_merge/`](./references/scripts/list_prs_ready_to_merge/)\
-├─ `list_prs`                               → [`list_prs/`](./references/scripts/list_prs/)\
-└─ Overview of all scripts                  → [`scripts/`](./references/scripts/)
-```
-
-### "What is this agent / session tag / prefix?"
-
-```
-Need to identify an agent, prefix, or worker tag?
-├─ Has `[AUTO-*]` prefix → it is a supervisor or worker session\
-│   └─ For the full prefix-to-agent-name table, role descriptions,\
-│      worker tag patterns, and dispatch relationships:\
-│      → [`agent-registry/`](./references/agent-registry/)\
-│\
-├─ Has `[AUTO-XYZ-N]` pattern → it is a WORKER session (N = number)\
-│   └─ To identify which supervisor owns workers with this tag:\
-│      → [`agent-registry/`](./references/agent-registry/) (worker tag patterns section)\
-│\
-└─ No `AUTO-` prefix → utility subagent or user-facing agent\
-    → [`agent-registry/`](./references/agent-registry/) (utility subagents section)
-```
-
-### "How many workers can this supervisor run? / What is N_FULL/N_HALF/N_QUARTER?"
-
-→ [`operational-parameters/`](./references/operational-parameters/)\
-  (supervisor registry table, worker count formula, examples for common N values)
-
-### "How does a supervisor launch a worker or async session?"
-
-```
-Need to dispatch a worker or start an async session?
-├─ Am I the PR Merge pool supervisor (`AUTO-PRMRG-SUP`)?\
-│   └─ Call `pr-merge-worker` via Task tool (blocking) — NOT async-agent-manager\
-│      → [`agent-registry/`](./references/agent-registry/) for the PR Merge Pool special case\
-│\
-├─ Am I any other pool supervisor or product-builder?\
-│   ├─ Full launch procedure, session naming, prompt_async mechanics:\
-│   │   → [`async-operations/`](./references/async-operations/)\
-│   ├─ Which tier to select for the worker:\
-│   │   → [`tier-system/`](./references/tier-system/)\
-│   └─ What credentials to embed in the worker's prompt:\
-│       → [`credential-flow/`](./references/credential-flow/)\
-│\
-└─ Am I a worker or utility subagent?\
-    → You should NOT launch async sessions. Workers do not dispatch workers.
-```
-
-### "Do I need to launch something asynchronously? / Can I call localhost:4096?"
-
-```
-Need async session management?
-├─ Am I `async-agent-manager`? → permitted to call `localhost:4096` directly\
-│\
-├─ Am I any other agent? → FORBIDDEN from calling `localhost:4096` directly\
-│   └─ Invoke `async-agent-manager` via the Task tool instead\
-│      → [`async-operations/`](./references/async-operations/) for the full API reference\
-│      → [`universal-rules/`](./references/universal-rules/) Rule 5 for the restriction rationale\
-│\
-└─ Why `prompt_async` (not `prompt`)?\
-    → [`async-operations/`](./references/async-operations/) (Why prompt_async Exists section)
-```
-
-### "How do I apply, remove, or check a label?"
-
-```
-Need any label operation?
-└─ Delegate to `forgejo-label-manager` subagent — no exceptions\
-    ├─ Forbidden operations, why PUT not POST:\
-    │   → [`universal-rules/`](./references/universal-rules/) Rule 2\
-    ├─ What labels exist, scope definitions (`State/`, `Priority/`, `MoSCoW/`, `Type/`):\
-    │   → `cleveragents-contributing` skill\
-    └─ System-specific labels (`Automation Tracking`, `needs feedback`):\
-        → [`tracking-system/`](./references/tracking-system/) (System-Specific Labels section)
-```
-
-### "Which universal rule governs this action?"
-
-```
-About to perform an action — does a universal rule apply?
-├─ Calling anything that returns a **LIST**?\
-│   → Rule 1: Exhaustive Pagination\
-│\
-├─ Touching any **LABEL** (apply, remove, create, list)?\
-│   → Rule 2: Label Management via `forgejo-label-manager`\
-│\
-├─ Creating or editing content on **FORGEJO** (issue, PR, comment)?\
-│   → Rule 3: Bot Signature\
-│\
-├─ Using or passing a **CREDENTIAL** (PAT, password, git identity)?\
-│   → Rule 4: Credential Flow\
-│\
-└─ Managing an **ASYNC AGENT SESSION** (launch, monitor, delete)?\
-    → Rule 5: localhost:4096 Restriction
-
-→ Full text of all five rules: [`universal-rules/`](./references/universal-rules/)
-```
-
-### "When should I load the universal-rules reference?"
-
-```
-Load [`universal-rules/`](./references/universal-rules/) when ANY of these are true:
-├─ Paginating a list call — need the exact stop condition and bash pattern\
-├─ Unsure which label operations are forbidden vs permitted\
-├─ Need the exact bot signature wording and placement\
-├─ Writing a supervisor and need the complete worker-prompt credential checklist\
-├─ Unsure whether your agent is permitted to call `localhost:4096`\
-└─ Received a violation report from system-watchdog and need to identify the rule
-
-Do NOT load if:\
-├─ Already loaded this session and rules are in context\
-├─ Task involves none of: lists, labels, Forgejo content, credentials, or sessions\
-└─ You are a read-only research agent that does not interact with Forgejo
-
-When in doubt → load it. Violation cost > reference load cost.
-```
-
-### "How do I create or update a tracking issue or announcement?"
-
-```
-Need to persist state or communicate with other agents?
-├─ STATUS TRACKING ISSUES\
-│   └─ Call `automation-tracking-manager`: `CREATE_TRACKING_ISSUE`\
-│      (creates new, closes old — also used to UPDATE existing status)\
-│\
-├─ ANNOUNCEMENT ISSUES\
-│   └─ Call `automation-tracking-manager`: `CREATE_ANNOUNCEMENT_ISSUE`\
-│\
-├─ READING STATE\
-│   └─ Call `automation-tracking-manager`: `READ_TRACKING_STATE`\
-│\
-└─ Full protocol, all operations, startup order, lifecycle rules:\
-    → [`tracking-system/`](./references/tracking-system/)
-```
-
-### "Which announcements should I consume? / What is the relevancy matrix?"
-
-```
-Need to know which announcements to read?
-├─ Universal baseline (ALL agents): `Priority/CI-Blocker` from ANY agent → always\
-│\
-├─ Per-agent source and minimum-priority table:\
-│   → [`tracking-system/announcement-matrix/`](./references/tracking-system/announcement-matrix/)\
-│\
-└─ Dynamic programmatic lookup:\
-    → `agent-prefix-info` subagent, operation: `GET_RELEVANCY_MATRIX`
-```
-
-### "How does state recovery work when a supervisor starts up?"
-
-```
-Starting up or restarting after a crash?
-├─ **CRITICAL**: READ state BEFORE creating a new tracking issue\
-│   Wrong order destroys state (CREATE closes old issue before you can READ it)\
-│\
-├─ Correct order: `READ_TRACKING_STATE` → assess recovery → `CREATE_TRACKING_ISSUE`\
-│\
-└─ Full startup recovery protocol, offline duration thresholds, re-dispatch logic:\
-    → [`tracking-system/`](./references/tracking-system/) (Mandatory Startup Recovery Protocol section)\
-    → [`redundancy/`](./references/redundancy/) (Supervisor Crash-Recovery Pattern section)
-```
-
-### "Which model tier should I use? / How does tier escalation work?"
-
-```
-Selecting a tier for a worker:
-├─ No previous attempts → start at Tier 1 (`tier-haiku`)\
-├─ Same problem persists after an attempt → escalate to next tier\
-├─ Different problem or partial progress → stay at current tier\
-└─ Tier 4 + same problem × 3 more → human escalation (`needs feedback` label)
-
-→ Full tier table, tier selector mechanics, default model assignments,\
-  human escalation steps: [`tier-system/`](./references/tier-system/)
-```
-
-### "How do credentials get to workers? / Which env vars does the system use?"
-
-```
-Need credentials or need to pass them down to workers?
-├─ Am I `product-builder`? → read from environment variables at startup only\
-├─ Am I anything else? → credentials came through my prompt — use those\
-│\
-└─ Workers MUST receive ALL credentials explicitly in their prompt from the supervisor.\
-   Workers never read environment variables.
-
-→ Full env var list, two-bot accounts, worker prompt credential checklist:\
-  [`credential-flow/`](./references/credential-flow/)
-```
-
-### "Is something wrong with the system? / How do I diagnose a failure?"
-
-```
-Diagnosing a system problem?
-├─ Supervisor missing, frozen, error-looping, or stopped dispatching workers?\
-├─ Worker crashed, frozen, or repeatedly failing?\
-├─ Multiple agents down simultaneously?\
-├─ CI quality gate violated?\
-├─ Orphaned work claims?\
-│\
-→ Full failure mode catalogue, detection methods, recovery procedures:\
-  [`redundancy/`](./references/redundancy/)
-```
-
-### "How does the system self-heal? / What are the three redundancy layers?"
-
-```
-→ [`redundancy/`](./references/redundancy/)\
-  (Layer 1: product-builder 60s cycle; Layer 2: system-watchdog 5min;\
-   Layer 3: supervisor self-monitoring; Forgejo persistence foundation;\
-   the single point of failure)
-```
-
-### "I need a specific threshold, timing, or capacity number"
-
-```
-→ [`operational-parameters/`](./references/operational-parameters/)\
-  (all timeouts, sleep intervals, claim expiry, rolling average formula,\
-   worker count formula, supervisor registry quick-lookup table)
-```
-
-## Scripts Index
-
-See [`scripts/`](./references/scripts/) for the full index with invocation instructions and detailed documentation for each script. Quick reference:
-
-| Script | Reference Docs | Script File | Description |
-|--------|---------------|-------------|-------------|
-| `list_prs` | [docs](./references/scripts/list_prs/) | [list_prs.ts](./scripts/list_prs.ts) | General-purpose PR lister with all filter options (`--stale`, `--ci-status`, `--min-approvals`, …); core module imported by the six wrappers below |
-| `list_prs_ready_to_merge` | [docs](./references/scripts/list_prs_ready_to_merge/) | [list_prs_ready_to_merge.ts](./scripts/list_prs_ready_to_merge.ts) | Open PRs with ≥ 1 approval, not stale, **and CI passing** — ready to merge immediately |
-| `list_prs_stale_clean` | [docs](./references/scripts/list_prs_stale_clean/) | [list_prs_stale_clean.ts](./scripts/list_prs_stale_clean.ts) | Open PRs with ≥ 1 approval, stale but no conflicts, any CI status — server-side rebase then merge |
-| `list_prs_stale_conflicts` | [docs](./references/scripts/list_prs_stale_conflicts/) | [list_prs_stale_conflicts.ts](./scripts/list_prs_stale_conflicts.ts) | Open PRs with ≥ 1 approval, stale with conflicts, any CI status — local clone, resolve, force-push, then merge |
-| `list_prs_needs_review_not_stale` | [docs](./references/scripts/list_prs_needs_review_not_stale/) | [list_prs_needs_review_not_stale.ts](./scripts/list_prs_needs_review_not_stale.ts) | Open PRs with zero approvals, not stale, any CI status — review only needed; merges immediately on approval |
-| `list_prs_needs_review_stale_clean` | [docs](./references/scripts/list_prs_needs_review_stale_clean/) | [list_prs_needs_review_stale_clean.ts](./scripts/list_prs_needs_review_stale_clean.ts) | Open PRs with zero approvals, stale but no conflicts, any CI status — review + server-side rebase needed |
-| `list_prs_needs_review_stale_conflicts` | [docs](./references/scripts/list_prs_needs_review_stale_conflicts/) | [list_prs_needs_review_stale_conflicts.ts](./scripts/list_prs_needs_review_stale_conflicts.ts) | Open PRs with zero approvals, stale with conflicts, any CI status — review + local conflict resolution needed |
-| `merge_pr` | [docs](./references/scripts/merge_pr/) | [merge_pr.ts](./scripts/merge_pr.ts) | Initiates a rebase-style merge with automerge scheduling; handles open issue dependencies |
-| `rebase_pr` | [docs](./references/scripts/rebase_pr/) | [rebase_pr.ts](./scripts/rebase_pr.ts) | Triggers a Forgejo server-side rebase on a stale, conflict-free PR — no local clone required |
-
---
-
-## 📂 Reference Index
-
-| Reference | Covers |
-|-----------|--------|
-| [`universal-rules/`](./references/universal-rules/) | The five non-negotiable rules every agent must follow: exhaustive pagination protocol, label management via forgejo-label-manager (forbidden operations, why PUT not POST), bot signature format and placement, credential flow hierarchy (workers never read env vars), localhost:4096 restriction (async-agent-manager only) |
-| [`agent-registry/`](./references/agent-registry/) | Complete catalog of all agents: supervisor hierarchy, pool supervisor detailed reference (roles, worker counts, sleep intervals, worker tag patterns), utility subagents table, shared prompt fragments |
-| [`async-operations/`](./references/async-operations/) | OpenCode Server API at localhost:4096 (all endpoints, request/response shapes), why prompt_async is fire-and-forget, session naming conventions, supervisor and worker tag patterns, common operation recipes |
-| [`tracking-system/`](./references/tracking-system/) | Automation tracking issues (status vs announcement types), CREATE/READ/UPDATE/CLOSE operations, startup recovery protocol (READ before CREATE), system-specific labels (Automation Tracking, needs feedback) |
-| [`tracking-system/announcement-matrix/`](./references/tracking-system/announcement-matrix/) | Full per-agent announcement relevancy table: every supervisor prefix with its complete source-and-minimum-priority matrix; universal CI-Blocker baseline |
-| [`tier-system/`](./references/tier-system/) | Four model tiers and their models, how tier selector agents work (model inheritance), progressive escalation rules, human escalation steps, default model assignments for all agents |
-| [`credential-flow/`](./references/credential-flow/) | All environment variables (product-builder reads these), two-bot account design (primary vs reviewer), credential hierarchy, complete worker-prompt credential checklist |
-| [`coordination/`](./references/coordination/) | Claim/heartbeat/release work-item protocol (comment format, 2h expiry, 10min heartbeat), PR work conflict matrix, session-level deduplication, startup deduplication, bot signature format |
-| [`redundancy/`](./references/redundancy/) | Three-layer self-healing architecture (product-builder 60s, watchdog 5min, supervisor self-monitoring), supervisor and worker crash-recovery patterns, complete failure mode catalogue, async-agent-monitor health classifications |
-| [`operational-parameters/`](./references/operational-parameters/) | Supervisor registry quick-lookup table (all 18 prefixes, sleep intervals, worker counts, tracking prefixes), worker count formula (N/N_FULL/N_HALF/N_QUARTER), all key thresholds and timings |
-| [`scripts/`](./references/scripts/) | All PR pipeline helper scripts: 7 listing scripts covering the six merge-readiness buckets (`list_prs` core + 6 wrappers), plus `merge_pr` and `rebase_pr` action scripts. Load the directory for an overview; load an individual subdirectory for a full man-page reference |
--- a/Show More
+++ b/Show More