…econciliation

Add failures.mjs to classify CLI/transcript/job failures (rate-limit, invalid-json,
stale-job, etc.) with retryable + next-step guidance, threaded through review/task
execution, AGY transcript recovery, and rendered output. Job status/result queries
now reconcile active jobs whose worker pid died or whose job file is corrupt,
guarding against a completion race so a job that finished on disk while a stale
snapshot was in flight is never clobbered back to "failed".

Also fix buildEnvUnavailable inheriting the calling shell's own GEMINI_ENGINE,
which made the AGY-fallback setup-label test environment-dependent.

Machine-verified on AGY 1.1.0/Windows: a fresh --engine agy --write turn
with no prior workspace/project association silently writes files under
~/.gemini/antigravity-cli/scratch/ instead of cwd (status 0, no error).
buildCliArgs now appends --new-project on a non-continuation write turn to
bind the session's workspace to cwd; a --continue resume is left alone.

Also verified AGY 1.1.0's new default request-review mode does not stall
headless writes (--dangerously-skip-permissions still bypasses it, no
--mode workaround needed), and documented that AGY now runs its own
consumerOAuth login independent of the shared gemini CLI credential file,
which getAgyLoginStatus() does not yet account for.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…ents

Post-commit re-verification of 0c23b99 on AGY 1.1.0/Windows: a fresh
headless write turn completed in 13s (no request-review stall) with the
file landing in cwd. README (EN + zh-TW) dependency row and brain-root
platform notes, agyBrainRoots() inline comment, and one CHANGELOG
evidence sentence. Docs/comments only, no behavior change; 216 tests
pass.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

quoteForWindowsShell cannot reliably escape cmd.exe (embedded quotes toggle
its parse state; backslash-escaping is the child's MSVCRT convention). Instead
of strengthening the quoter, eliminate the shell:true + free-text-argv combo:
agy now must resolve to an absolute .exe path (requireExe, mirroring
companion-cx) or detectEngine throws fail-closed, so its positional prompt
always spawns shell:false and never traverses cmd.exe. Also closes the
.cmd-on-unpatched-Node CVE-2024-27980 angle. Quoter kept only as a no-op net
for fixed-constant bare-name argv; comment/doc corrected to not claim it
protects free text.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018uDUc5kSwMWqWrgsGsyYdh

Expose the existing background dispatch and job-control paths behind a hand-rolled stdio MCP server, with hermetic request tests and CLI prompt parity coverage.

Constraint: No new dependencies and no duplicated prompt assembly

Confidence: high

Scope-risk: moderate

Dispatch prompt-identical Gemini and AGY adversarial reviews under one group id, aggregate status/results, and degrade visibly when only one requested engine is available.

Constraint: Preserve v0.6.6 exports and single-engine behavior

Confidence: high

Scope-risk: moderate

…t; CC ledger (WP-6 r1 / D-CC1)

Blind review blocking: .mcp.json used a relative script path with cwd ".",
which resolves against the host's cwd, not the plugin dir -- so the MCP server
would fail to launch whenever the user's cwd differs from the plugin
directory (the normal case), silently un-delivering F-CC1. Every other file in
this plugin (hooks.json, commands/*.md) already uses ${CLAUDE_PLUGIN_ROOT};
.mcp.json now does too. Added tests/mcp-launch.test.mjs that spawns exactly
what .mcp.json declares from a temp cwd and requires an initialize reply --
verified it fails on the old relative form and passes on the fixed one
(the major finding: nothing previously exercised the declared launch command).
Also added docs/known-diffs.md (D-CC1) recording the two minor group-cancel /
partial-dispatch follow-ups and CC's deliberate differences.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018uDUc5kSwMWqWrgsGsyYdh

…-confirmed OAuth retired)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018uDUc5kSwMWqWrgsGsyYdh