Merge pull request 'feat: config & onboarding — each teammate connects their own Gitea (productionize Phase A)' (#51) from feat/config-onboarding into main

Reviewed-on: #51

apps/desktop/e2e/live-backlog.spec.ts

@@ -41,6 +41,21 @@ test.describe('live backlog', () => {
     await expect(
       win.getByText(/cold-start priors · \d+\/20 closed issues estimated|calibrated on \d+ closed/),
     ).toBeVisible()
+    // Real per-milestone forecasts — these milestone names come from gitea, not the
+    // fixture (which lists Beta / Pilot-ready / v1.0).
+    await expect(win.getByText(/P2 — Scheduler/)).toBeVisible()
+    // Real capacity config from pm-state (christian/stephen), not the fixture (Stephen/Ana K.)
+    await expect(win.getByText('christian', { exact: true })).toBeVisible()
+    await expect(win.getByText(/pd\/day/).first()).toBeVisible()
+    await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-runway.png'), fullPage: true, animations: 'disabled' })
+
+    // Milestone drill-in — clicking a real milestone opens its real detail
+    await win.getByText(/P2 — Scheduler/).click()
+    await expect(win.getByRole('heading', { name: 'P2 — Scheduler + Monte Carlo' })).toBeVisible()
+    await expect(win.getByText(/\d+ issues · est \d+d/)).toBeVisible()
+    await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-milestone.png'), fullPage: true, animations: 'disabled' })
+    await rail.getByRole('button', { name: 'Runway' }).click()
+
     await win.getByRole('button', { name: 'Full report' }).click()
     await expect(win.getByText(/cold-start · \d+\/20|curve active · n ≥ 20/)).toBeVisible()
     await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-calibration.png'), fullPage: true, animations: 'disabled' })

apps/desktop/e2e/live-capture.spec.ts

@@ -0,0 +1,37 @@
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { _electron as electron, expect, test } from '@playwright/test'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const MAIN = join(here, '..', 'out', 'main', 'index.js')
+
+// Opt-in (GITEA_LIVE=1 + COMMITEA_MODEL_LIVE=1 + a local model on :1234). Launches
+// WITHOUT COMMITEA_E2E so capture_work runs the real decomposition. It Discards at
+// the end so the run never files junk issues (the create-issue POST is unit-tested).
+test.describe('live capture_work', () => {
+  test('decomposes a braindump into a reviewable ticket set', async () => {
+    test.skip(!process.env.GITEA_LIVE || !process.env.COMMITEA_MODEL_LIVE, 'live model test — opt-in')
+    test.setTimeout(300_000)
+    const app = await electron.launch({ args: [MAIN], env: { ...process.env } })
+    const win = await app.firstWindow()
+    await win.waitForLoadState('domcontentloaded')
+    const rail = win.getByRole('navigation', { name: 'Primary' })
+
+    await rail.getByRole('button', { name: 'Capture' }).click()
+    await expect(win.getByRole('heading', { name: 'Capture' })).toBeVisible()
+    // the braindump is prefilled; run the real decomposition
+    await win.getByRole('button', { name: 'Brew tickets' }).click()
+
+    // capture_work → the review tray with a real, estimated ticket set
+    await expect(win.getByText(/tickets · ~\d+d of work/)).toBeVisible({ timeout: 240_000 })
+    await expect(win.getByRole('button', { name: 'Approve all' })).toBeVisible()
+    await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-capture.png'), fullPage: true, animations: 'disabled' })
+
+    // Discard — never file junk issues into the real repo from a test
+    await win.getByRole('button', { name: 'Discard' }).click()
+    await expect(win.getByRole('button', { name: 'Brew tickets' })).toBeVisible()
+
+    await app.close()
+  })
+})

apps/desktop/e2e/live-directive.spec.ts

@@ -0,0 +1,32 @@
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { _electron as electron, expect, test } from '@playwright/test'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const MAIN = join(here, '..', 'out', 'main', 'index.js')
+
+// Opt-in (GITEA_LIVE=1 + COMMITEA_MODEL_LIVE=1 + a local model + the commitea-pm-state
+// repo). Reginald records a standing directive; it's appended to the real pm-state
+// ledger. The append is idempotent-ish (a fresh line each run); this only reads back
+// that a directive was consulted, and leaves the ledger intact.
+test.describe('live record_directive', () => {
+  test('logs a standing directive to the pm-state ledger', async () => {
+    test.skip(!process.env.GITEA_LIVE || !process.env.COMMITEA_MODEL_LIVE, 'live model test — opt-in')
+    test.setTimeout(300_000)
+    const app = await electron.launch({ args: [MAIN], env: { ...process.env } })
+    const win = await app.firstWindow()
+    await win.waitForLoadState('domcontentloaded')
+    await expect(win.getByText(/· local$/)).toBeVisible({ timeout: 20000 })
+
+    const composer = win.getByPlaceholder(/Tell me what to do/)
+    await composer.fill('Record a standing directive: freeze scope for beta, pilots come first.')
+    await composer.press('Enter')
+
+    // the agent logged it to the ledger (record_directive), not applied a change
+    await expect(win.getByText(/consulted the directive ledger/)).toBeVisible({ timeout: 240_000 })
+    await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-directive.png'), fullPage: true, animations: 'disabled' })
+
+    await app.close()
+  })
+})

apps/desktop/e2e/live-onboarding.spec.ts

@@ -0,0 +1,56 @@
+import { dirname, join } from 'node:path'
+import { mkdtempSync, readFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { fileURLToPath } from 'node:url'
+
+import { _electron as electron, expect, test } from '@playwright/test'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const MAIN = join(here, '..', 'out', 'main', 'index.js')
+
+/** Read the real token from .env.local (walking up) so the test can fill the form. */
+function readToken(): string | null {
+  let dir = here
+  for (let i = 0; i < 6; i++) {
+    try {
+      const m = /^GITEA_TOKEN\s*=\s*(.+?)\s*$/m.exec(readFileSync(join(dir, '.env.local'), 'utf8'))
+      if (m) return m[1].trim()
+    } catch {
+      /* keep walking */
+    }
+    dir = dirname(dir)
+  }
+  return null
+}
+
+// Opt-in (GITEA_LIVE=1). Forces the onboarding path (COMMITEA_NO_ENV_LOCAL) with a
+// fresh userData, fills the real connection form, and asserts it lands on real data.
+test.describe('live onboarding', () => {
+  test('connect form → real board', async () => {
+    const token = process.env.GITEA_LIVE ? readToken() : null
+    test.skip(!token, 'GITEA_LIVE + a .env.local token required')
+    test.setTimeout(90_000)
+
+    const app = await electron.launch({
+      args: [MAIN],
+      env: { ...process.env, COMMITEA_NO_ENV_LOCAL: '1', COMMITEA_USERDATA: mkdtempSync(join(tmpdir(), 'commitea-')) },
+    })
+    const win = await app.firstWindow()
+    await win.waitForLoadState('domcontentloaded')
+
+    // the connection gate, not the app
+    await expect(win.getByText(/Connect your Gitea/)).toBeVisible({ timeout: 15000 })
+    await win.getByPlaceholder('your-org').fill('christian')
+    await win.getByPlaceholder('your-repo').fill('commitea')
+    await win.getByPlaceholder(/gitea PAT/).fill(token!)
+    await win.getByRole('button', { name: 'Connect' }).click()
+
+    // it validated + saved + reconciled into the real board — real issue titles prove it
+    const rail = win.getByRole('navigation', { name: 'Primary' })
+    await rail.getByRole('button', { name: 'The pot' }).click()
+    await expect(win.getByText(/Model router|SQLite cache bootstrap|Purity\/rebuild/).first()).toBeVisible({ timeout: 30000 })
+    await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-onboarding.png'), fullPage: true, animations: 'disabled' })
+
+    await app.close()
+  })
+})

apps/desktop/e2e/live-persistence.spec.ts

@@ -0,0 +1,37 @@
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { _electron as electron, expect, test } from '@playwright/test'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const MAIN = join(here, '..', 'out', 'main', 'index.js')
+
+// Opt-in (GITEA_LIVE=1). A real launch persists the snapshot; a second launch with
+// gitea unreachable must still show the board + real scheduler output from the
+// persisted cache (offline reads). No model needed.
+test.describe('live persistence', () => {
+  test('offline: serves the persisted snapshot', async () => {
+    test.skip(!process.env.GITEA_LIVE, 'GITEA_LIVE not set — opt-in live test')
+    test.setTimeout(120_000)
+
+    // launch 1 — real reconcile writes the snapshot to disk
+    const app1 = await electron.launch({ args: [MAIN], env: { ...process.env } })
+    const w1 = await app1.firstWindow()
+    await w1.waitForLoadState('domcontentloaded')
+    // a scheduler-only phrase confirms real data reconciled (never emitted by fixtures)
+    await expect(w1.getByText(/on the critical path|unblocks #|waits on #|· ready/).first()).toBeVisible({ timeout: 30000 })
+    await app1.close()
+
+    // launch 2 — gitea unreachable; the reconcile must fall back to the persisted snapshot
+    const app2 = await electron.launch({
+      args: [MAIN],
+      env: { ...process.env, GITEA_BASE_URL: 'http://127.0.0.1:9' },
+    })
+    const w2 = await app2.firstWindow()
+    await w2.waitForLoadState('domcontentloaded')
+    // Focus still renders real scheduler output — proving it came from the cache, offline
+    await expect(w2.getByText(/on the critical path|unblocks #|waits on #|· ready/).first()).toBeVisible({ timeout: 20000 })
+    await w2.screenshot({ path: join(here, '.artifacts', 'screens', 'live-offline.png'), fullPage: true, animations: 'disabled' })
+    await app2.close()
+  })
+})

apps/desktop/e2e/live-reginald.spec.ts

@@ -30,4 +30,27 @@ test.describe('live Reginald', () => {
 
     await app.close()
   })
+
+  test('proposes an estimate change for inline approval (writes via chat)', async () => {
+    test.skip(!process.env.GITEA_LIVE || !process.env.COMMITEA_MODEL_LIVE, 'live model test — opt-in')
+    test.setTimeout(300_000)
+    const app = await electron.launch({ args: [MAIN], env: { ...process.env } })
+    const win = await app.firstWindow()
+    await win.waitForLoadState('domcontentloaded')
+    await expect(win.getByText(/· local$/)).toBeVisible({ timeout: 20000 })
+
+    const composer = win.getByPlaceholder(/Tell me what to do/)
+    await composer.fill('Set the estimate on issue #3 to est/5d.')
+    await composer.press('Enter')
+
+    // propose_change → an inline propose-approve card (never an auto-write)
+    await expect(win.getByText('Proposed · #3')).toBeVisible({ timeout: 240_000 })
+    await expect(win.getByText(/→ est\/5d/)).toBeVisible()
+    await win.screenshot({ path: join(here, '.artifacts', 'screens', 'live-reginald-propose.png'), fullPage: true, animations: 'disabled' })
+    // Dismiss so the live run never mutates the repo (the write path itself is #41-tested)
+    await win.getByRole('button', { name: 'Dismiss' }).click()
+    await expect(win.getByText(/Left #3 as it was/)).toBeVisible()
+
+    await app.close()
+  })
 })

apps/desktop/e2e/smoke.spec.ts

@@ -97,7 +97,7 @@ test('Directives: consequence diff + append-only ledger', async ({ app, window }
 test('Settings: connection, schema, and appearance sync with theme', async ({ app, window }) => {
   await app.nav('Settings').click()
   await expect(window.getByRole('heading', { name: 'Settings' })).toBeVisible()
-  await expect(window.getByText('Managed repos')).toBeVisible()
+  await expect(window.getByRole('heading', { name: 'Connection' })).toBeVisible()
   await app.screenshot('settings')
   // the Evening (dark) radio drives the shared theme
   await window.getByText('Evening (dark)').click()

apps/desktop/src/main/config-store.ts

@@ -0,0 +1,101 @@
+/**
+ * Persistent app config for a shared/team build. The gitea PAT is encrypted at
+ * rest with Electron's safeStorage (OS keychain-backed) and only ever lives in
+ * the main process — the renderer receives everything *except* the token. Config
+ * lives in userData so each teammate has their own; a `.env.local` remains a dev
+ * fallback (see resolveConfig). Nothing here runs under COMMITEA_E2E.
+ */
+
+import { readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+import { app, safeStorage } from 'electron'
+
+export interface AppConfig {
+  baseUrl: string
+  owner: string
+  repo: string
+  token: string
+  /** Defaults to `${repo}-pm-state` when omitted. */
+  pmStateRepo?: string
+  /** OpenAI-compatible base for Reginald; chat stays off when absent. */
+  modelUrl?: string
+}
+
+/** The renderer-safe view — everything but the token, plus whether one is set. */
+export type PublicConfig = Omit<AppConfig, 'token'> & { hasToken: boolean }
+
+interface StoredConfig {
+  baseUrl: string
+  owner: string
+  repo: string
+  tokenEnc: string | null // base64 of safeStorage-encrypted token
+  pmStateRepo?: string
+  modelUrl?: string
+}
+
+function configPath(): string {
+  return join(app.getPath('userData'), 'commitea-config.json')
+}
+
+function readStored(): StoredConfig | null {
+  try {
+    return JSON.parse(readFileSync(configPath(), 'utf8')) as StoredConfig
+  } catch {
+    return null
+  }
+}
+
+/** Full config incl. the decrypted token, or null when unset. Main-process only. */
+export function loadConfig(): AppConfig | null {
+  const s = readStored()
+  if (!s || !s.baseUrl || !s.owner || !s.repo) return null
+  let token = ''
+  if (s.tokenEnc) {
+    try {
+      token = safeStorage.decryptString(Buffer.from(s.tokenEnc, 'base64'))
+    } catch {
+      token = '' // key rotated / different machine — treat as no token
+    }
+  }
+  if (!token) return null
+  return { baseUrl: s.baseUrl, owner: s.owner, repo: s.repo, token, pmStateRepo: s.pmStateRepo, modelUrl: s.modelUrl }
+}
+
+/** The renderer-safe view of the saved config (never includes the token). */
+export function publicConfig(): PublicConfig | null {
+  const s = readStored()
+  if (!s) return null
+  return {
+    baseUrl: s.baseUrl,
+    owner: s.owner,
+    repo: s.repo,
+    pmStateRepo: s.pmStateRepo,
+    modelUrl: s.modelUrl,
+    hasToken: !!s.tokenEnc,
+  }
+}
+
+/** Encrypt the token + persist. Best-effort; throws only on a genuine write failure. */
+export function saveConfig(cfg: AppConfig): void {
+  const tokenEnc = cfg.token
+    ? Buffer.from(safeStorage.encryptString(cfg.token)).toString('base64')
+    : (readStored()?.tokenEnc ?? null) // keep the existing token if none supplied
+  const stored: StoredConfig = {
+    baseUrl: cfg.baseUrl.trim().replace(/\/+$/, ''),
+    owner: cfg.owner.trim(),
+    repo: cfg.repo.trim(),
+    tokenEnc,
+    pmStateRepo: cfg.pmStateRepo?.trim() || undefined,
+    modelUrl: cfg.modelUrl?.trim() || undefined,
+  }
+  writeFileSync(configPath(), JSON.stringify(stored, null, 2), 'utf8')
+}
+
+export function clearConfig(): void {
+  try {
+    writeFileSync(configPath(), JSON.stringify({ baseUrl: '', owner: '', repo: '', tokenEnc: null }), 'utf8')
+  } catch {
+    // ignore
+  }
+}

apps/desktop/src/main/gitea.ts

@@ -6,21 +6,32 @@
  * properly later.
  */
 
+import { randomUUID } from 'node:crypto'
 import { readFileSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 
 import {
+  appendDirective,
   createGiteaClient,
+  GiteaApiError,
+  type DirectiveEntry,
   type GiteaClient,
   type GiteaConfig,
   type GiteaLabel,
   type IssueChange,
   type LifecycleEvent,
+  makeDirectiveEntry,
+  parseCapacityConfig,
+  parseDirectiveLog,
   planIssueChange,
   type ProjectSnapshot,
+  type DirectiveInput,
 } from '@commitea/core'
 import { ipcMain } from 'electron'
 
+import { type AppConfig, clearConfig, loadConfig, publicConfig, saveConfig } from './config-store.js'
+import { loadSnapshot, saveSnapshot } from './snapshot-store.js'
+
 /** Walk up from cwd looking for a .env.local with a GITEA_TOKEN (dev convenience). */
 function loadEnvLocalToken(): string | undefined {
   let dir = process.cwd()
@@ -39,9 +50,15 @@ function loadEnvLocalToken(): string | undefined {
   return undefined
 }
 
-function resolveConfig(): GiteaConfig | null {
+/** Saved config wins (team build); a `.env.local` is the dev fallback; e2e uses fixtures. */
+export function resolveConfig(): GiteaConfig | null {
   // E2E runs against fixtures — never hit the network from the test harness.
   if (process.env.COMMITEA_E2E === '1') return null
+  const saved = loadConfig()
+  if (saved) return { baseUrl: saved.baseUrl, token: saved.token, owner: saved.owner, repo: saved.repo }
+  // COMMITEA_NO_ENV_LOCAL forces the onboarding path (no .env.local fallback) for testing.
+  if (process.env.COMMITEA_NO_ENV_LOCAL === '1') return null
+  // dev fallback — .env.local / env vars
   const token = process.env.GITEA_TOKEN ?? loadEnvLocalToken()
   if (!token) return null
   return {
@@ -52,8 +69,23 @@ function resolveConfig(): GiteaConfig | null {
   }
 }
 
-// Memoized client so both the gitea and model bridges share one instance.
+/** The pm-state repo name: configured, else `${repo}-pm-state`, else the env override. */
+function pmStateRepoName(config: GiteaConfig): string {
+  return loadConfig()?.pmStateRepo ?? process.env.COMMITEA_PMSTATE_REPO ?? `${config.repo}-pm-state`
+}
+
+// Memoized clients; reset via resetClients() when the config changes.
 let sharedClient: GiteaClient | null | undefined
+let pmStateClient: GiteaClient | null | undefined
+
+/** Drop the cached clients + snapshot so the next call re-reads the new config. */
+export function resetClients(): void {
+  sharedClient = undefined
+  pmStateClient = undefined
+  labelCache = null
+  invalidateSnapshot()
+}
+
 export function getGiteaClient(): GiteaClient | null {
   if (sharedClient === undefined) {
     const config = resolveConfig()
@@ -62,6 +94,55 @@ export function getGiteaClient(): GiteaClient | null {
   return sharedClient
 }
 
+// The pm-state repo holds machine-derived state (the directive ledger). Same
+// token/host as the work repo, a different repo (the purity split, decisions D4).
+export function getPmStateClient(): GiteaClient | null {
+  if (pmStateClient === undefined) {
+    const config = resolveConfig()
+    pmStateClient = config ? createGiteaClient({ ...config, repo: pmStateRepoName(config) }, fetch) : null
+  }
+  return pmStateClient
+}
+
+const DIRECTIVE_LOG_PATH = 'directives/log.jsonl'
+
+async function readDirectiveLog(client: GiteaClient): Promise<{ text: string; sha: string | null }> {
+  const file = await client.getFile(DIRECTIVE_LOG_PATH)
+  if (!file) return { text: '', sha: null }
+  return { text: Buffer.from(file.contentBase64, 'base64').toString('utf8'), sha: file.sha }
+}
+
+/** Record a directive: read the ledger, append, write it back (concatenation merge). */
+export async function appendDirectiveEntry(client: GiteaClient, input: DirectiveInput): Promise<DirectiveEntry> {
+  const entry = makeDirectiveEntry(input, randomUUID(), new Date().toISOString())
+  const { text, sha } = await readDirectiveLog(client)
+  const next = appendDirective(text, entry)
+  await client.putFile(DIRECTIVE_LOG_PATH, {
+    contentBase64: Buffer.from(next, 'utf8').toString('base64'),
+    message: `directive: ${entry.kind}`,
+    sha: sha ?? undefined,
+  })
+  return entry
+}
+
+export async function readDirectives(client: GiteaClient) {
+  const { text } = await readDirectiveLog(client)
+  return parseDirectiveLog(text)
+}
+
+const CAPACITY_PATH = 'capacity/members.json'
+
+/** Read the capacity config from the pm-state repo (empty when absent). */
+export async function readCapacity(client: GiteaClient) {
+  const file = await client.getFile(CAPACITY_PATH)
+  if (!file) return []
+  try {
+    return parseCapacityConfig(JSON.parse(Buffer.from(file.contentBase64, 'base64').toString('utf8')))
+  } catch {
+    return []
+  }
+}
+
 /** Full reconcile: issues + milestones + native deps + lifecycle timelines. */
 export async function reconcileSnapshot(
   client: GiteaClient,
@@ -81,27 +162,59 @@ export async function reconcileSnapshot(
   return { issues, milestones, deps, timelines }
 }
 
-export function registerGiteaIpc(): void {
+type Snapshot = Awaited<ReturnType<typeof reconcileSnapshot>>
-  const client = getGiteaClient()
-  const repo = client ? `${process.env.GITEA_OWNER ?? 'christian'}/${process.env.GITEA_REPO ?? 'commitea'}` : null
 
-  ipcMain.handle('gitea:status', () => ({ configured: !!client, repo }))
+/**
+ * A single in-memory reconcile cache shared across the app. A full reconcile is
+ * ~2N gitea calls (deps + timelines per issue); without this, every agent tool
+ * call refetched the whole repo. Reads within `maxAgeMs` reuse the cache;
+ * `getSnapshot({ maxAgeMs: 0 })` forces a fresh pull (the explicit UI reconcile),
+ * and any write calls `invalidateSnapshot()` so the next read sees it. The cache
+ * is rebuildable — the durable truth stays in gitea (the purity split, D4).
+ */
+let snapshotCache: { snap: Snapshot; at: number } | null = null
 
-  ipcMain.handle('gitea:reconcile', async () => {
+export async function getSnapshot(client: GiteaClient, opts?: { maxAgeMs?: number }): Promise<Snapshot> {
-    if (!client) return { configured: false, issues: [], milestones: [], deps: [], timelines: {} }
+  const maxAgeMs = opts?.maxAgeMs ?? 0
+  if (snapshotCache && maxAgeMs > 0 && Date.now() - snapshotCache.at <= maxAgeMs) {
+    return snapshotCache.snap
+  }
   const snap = await reconcileSnapshot(client)
-    return { configured: true, ...snap }
+  snapshotCache = { snap, at: Date.now() }
-  })
+  saveSnapshot(snap, new Date().toISOString()) // persist for instant boot + offline
+  return snap
+}
 
-  ipcMain.handle('gitea:getIssue', async (_event, index: number) => {
+/** Drop the cache so the next read reflects a just-made write. */
-    if (!client) return null
+export function invalidateSnapshot(): void {
-    return client.getIssue(index)
+  snapshotCache = null
-  })
+}
 
-  // Cached label list for name→id resolution; refreshed on demand if a name misses.
+/**
-  let labelCache: GiteaLabel[] | null = null
+ * The last persisted snapshot (from a previous session), for instant boot. The
-  async function resolveLabelIds(names: string[]): Promise<number[]> {
+ * renderer shows it immediately, then a real reconcile supersedes it
-    if (!client) return []
+ * (stale-while-revalidate). Returns null when there's nothing on disk; its
+ * `savedAt` marks staleness. It does NOT seed the cache — agent tool calls
+ * always reconcile fresh so they never reason over stale data.
+ */
+export function bootSnapshot(): (Snapshot & { savedAt: string }) | null {
+  const persisted = loadSnapshot()
+  if (!persisted) return null
+  return {
+    issues: persisted.issues,
+    milestones: persisted.milestones,
+    deps: persisted.deps,
+    timelines: persisted.timelines,
+    savedAt: persisted.savedAt,
+  } as unknown as Snapshot & { savedAt: string }
+}
+
+/** Agent tool calls tolerate a slightly stale snapshot (seconds) to stay responsive. */
+export const AGENT_SNAPSHOT_TTL_MS = 30_000
+
+// Label cache is reset with the clients (module-level so resetClients can clear it).
+let labelCache: GiteaLabel[] | null = null
+async function resolveLabelIds(client: GiteaClient, names: string[]): Promise<number[]> {
   const lookup = () => new Map(labelCache!.map((l) => [l.name, l.id]))
   if (!labelCache) labelCache = await client.listLabels()
   let byName = lookup()
@@ -110,18 +223,128 @@ export function registerGiteaIpc(): void {
     byName = lookup()
   }
   return names.map((n) => byName.get(n)).filter((id): id is number => id != null)
+}
+
+export function registerGiteaIpc(): void {
+  ipcMain.handle('gitea:status', () => {
+    const cfg = resolveConfig()
+    return {
+      configured: !!cfg,
+      repo: cfg ? `${cfg.owner}/${cfg.repo}` : null,
+      demo: process.env.COMMITEA_E2E === '1',
     }
+  })
+
+  // Instant boot: the last persisted snapshot, shown before the fresh reconcile lands.
+  ipcMain.handle('gitea:boot', () => {
+    if (!getGiteaClient()) return { configured: false }
+    const persisted = bootSnapshot()
+    return persisted ? { configured: true, cached: true, ...persisted } : { configured: true, cached: false }
+  })
+
+  ipcMain.handle('gitea:reconcile', async () => {
+    const client = getGiteaClient()
+    if (!client) return { configured: false, issues: [], milestones: [], deps: [], timelines: {} }
+    try {
+      // explicit UI sync — force fresh, and warm the cache for agent tool calls
+      const snap = await getSnapshot(client, { maxAgeMs: 0 })
+      return { configured: true, stale: false, ...snap }
+    } catch (e) {
+      // offline / gitea down — serve the last persisted snapshot rather than error out
+      const persisted = bootSnapshot()
+      if (persisted) return { configured: true, stale: true, ...persisted }
+      throw e
+    }
+  })
+
+  ipcMain.handle('gitea:getIssue', async (_event, index: number) => {
+    const client = getGiteaClient()
+    if (!client) return null
+    return client.getIssue(index)
+  })
 
   // The write path (apply_changes). Additive label swaps, applied only after the
   // renderer's propose-approve. Returns the plan + the freshly-read issue.
   ipcMain.handle('gitea:applyChange', async (_event, change: IssueChange) => {
+    const client = getGiteaClient()
     if (!client) return { ok: false as const, reason: 'unconfigured' as const }
     const current = await client.getIssue(change.issue)
     const plan = planIssueChange(current.labels, change)
     if (plan.noop) return { ok: true as const, plan, issue: current }
-    const ids = await resolveLabelIds(plan.labels)
+    const ids = await resolveLabelIds(client, plan.labels)
     await client.setIssueLabels(change.issue, ids)
     const issue = await client.getIssue(change.issue)
+    invalidateSnapshot() // the board + forecast must reflect the label change
     return { ok: true as const, plan, issue }
   })
+
+  // capture_work filing: open each approved issue with its est/* + p/* labels.
+  // Only touches the CommiTea label namespaces — no invented labels (zero-pollution).
+  ipcMain.handle(
+    'gitea:createIssues',
+    async (_event, issues: { title: string; body?: string; estimate?: string; priority?: string }[]) => {
+      const client = getGiteaClient()
+      if (!client) return { ok: false as const, reason: 'unconfigured' as const }
+      const created: { number: number; title: string }[] = []
+      for (const it of issues) {
+        const names = [it.estimate, it.priority].filter((n): n is string => !!n)
+        const labelIds = await resolveLabelIds(client, names)
+        const issue = await client.createIssue({ title: it.title, body: it.body, labelIds })
+        created.push({ number: issue.number, title: issue.title })
+      }
+      if (created.length) invalidateSnapshot() // new issues enter the board/scope
+      return { ok: true as const, created }
+    },
+  )
+
+  // Read the directive ledger from the pm-state repo (for the Directives screen).
+  ipcMain.handle('pmstate:directives', async () => {
+    const pm = getPmStateClient()
+    if (!pm) return { ok: false as const, reason: 'unconfigured' as const }
+    try {
+      return { ok: true as const, directives: await readDirectives(pm) }
+    } catch (e) {
+      return { ok: false as const, reason: 'error' as const, message: e instanceof Error ? e.message : String(e) }
+    }
+  })
+
+  // Read the capacity config from the pm-state repo (for capacity-aware forecasts).
+  ipcMain.handle('pmstate:capacity', async () => {
+    const pm = getPmStateClient()
+    if (!pm) return { ok: false as const, reason: 'unconfigured' as const, members: [] }
+    try {
+      return { ok: true as const, members: await readCapacity(pm) }
+    } catch {
+      return { ok: true as const, members: [] }
+    }
+  })
+
+  // ---- config (team onboarding) ----
+  ipcMain.handle('config:get', () => publicConfig())
+
+  ipcMain.handle('config:set', (_event, cfg: AppConfig) => {
+    saveConfig(cfg)
+    resetClients() // new config takes effect without a restart
+    return { ok: true as const }
+  })
+
+  ipcMain.handle('config:clear', () => {
+    clearConfig()
+    resetClients()
+    return { ok: true as const }
+  })
+
+  // Validate a token + repo before saving: any authed read on the repo proves access.
+  ipcMain.handle('config:test', async (_event, cfg: AppConfig) => {
+    try {
+      const c = createGiteaClient(
+        { baseUrl: cfg.baseUrl.replace(/\/+$/, ''), owner: cfg.owner.trim(), repo: cfg.repo.trim(), token: cfg.token },
+        fetch,
+      )
+      await c.listLabels()
+      return { ok: true as const }
+    } catch (e) {
+      return { ok: false as const, error: e instanceof GiteaApiError ? `${e.status}` : e instanceof Error ? e.message : String(e) }
+    }
+  })
 }

apps/desktop/src/main/index.ts

@@ -2,6 +2,9 @@ import { join } from 'node:path'
 
 import { BrowserWindow, app, shell } from 'electron'
 
+// Test hook: isolate config/cache to a throwaway dir (must run before any getPath).
+if (process.env.COMMITEA_USERDATA) app.setPath('userData', process.env.COMMITEA_USERDATA)
+
 import { registerGiteaIpc } from './gitea.js'
 import { registerModelIpc } from './model.js'
 

apps/desktop/src/main/model.ts

@@ -9,23 +9,40 @@
 
 import {
   buildProjectView,
+  captureWork,
+  type ChangeProposal,
   type ChatMessage,
   createChatClient,
+  describeChange,
   type ModelRouter,
   type ProjectView,
+  proposalsFor,
+  type ProposeChangeArgs,
   type QueryFilters,
   REGINALD_SYSTEM,
   REGINALD_TOOLS,
   runAgentTurn,
+  toDirectiveInput,
 } from '@commitea/core'
-import { ipcMain } from 'electron'
+import { app, ipcMain } from 'electron'
 
-import { getGiteaClient, reconcileSnapshot } from './gitea.js'
+import { loadConfig } from './config-store.js'
+import {
+  AGENT_SNAPSHOT_TTL_MS,
+  appendDirectiveEntry,
+  getGiteaClient,
+  getPmStateClient,
+  getSnapshot,
+} from './gitea.js'
 
 /** Small local model for prose + the read tool; big model reserved for later decomposition. */
 function resolveModelRouter(): ModelRouter | null {
   if (process.env.COMMITEA_E2E === '1') return null // e2e uses the scripted fixture Reginald
-  const baseUrl = process.env.COMMITEA_MODEL_URL ?? 'http://localhost:1234/v1'
+  // Config wins (team build); env is the dev override; localhost is a dev convenience only.
+  const baseUrl =
+    loadConfig()?.modelUrl ??
+    process.env.COMMITEA_MODEL_URL ??
+    (app.isPackaged ? undefined : 'http://localhost:1234/v1')
   if (!baseUrl) return null
   return {
     small: { baseUrl, model: process.env.COMMITEA_MODEL_SMALL ?? '' },
@@ -33,6 +50,19 @@ function resolveModelRouter(): ModelRouter | null {
   }
 }
 
+/** Probe the endpoint for a usable model; null when unreachable (chat then stays off). */
+async function probeModel(baseUrl: string): Promise<string | null> {
+  try {
+    const model = await resolveLoadedModel(baseUrl, process.env.COMMITEA_MODEL_SMALL ?? '')
+    // resolveLoadedModel only returns a real id when the server answered; the default
+    // fallback means unreachable, so confirm with a lightweight models call.
+    const res = await fetch(`${baseUrl.replace(/\/+$/, '')}/models`)
+    return res.ok ? model : null
+  } catch {
+    return null
+  }
+}
+
 /**
  * Resolve which model to actually ask for. An explicit env override wins;
  * otherwise ask the server which model is *loaded* (LM Studio's native
@@ -66,36 +96,84 @@ async function resolveLoadedModel(baseUrl: string, override: string): Promise<st
 }
 
 export function registerModelIpc(): void {
-  const router = resolveModelRouter()
-
   ipcMain.handle('model:status', async () => {
-    if (!router) return { configured: false, model: null }
+    const r = resolveModelRouter() // resolve fresh so a saved modelUrl takes effect
-    const model = await resolveLoadedModel(router.small.baseUrl, router.small.model)
+    if (!r) return { configured: false, model: null }
-    return { configured: true, model }
+    const model = await probeModel(r.small.baseUrl) // only "configured" if a model actually answers
+    return { configured: !!model, model }
   })
 
-  ipcMain.handle('model:chat', async (_event, messages: ChatMessage[]) => {
+  ipcMain.handle('model:chat', async (event, messages: ChatMessage[]) => {
+    const router = resolveModelRouter()
     if (!router) return { ok: false as const, reason: 'unconfigured' as const }
     const client = getGiteaClient()
     const model = await resolveLoadedModel(router.small.baseUrl, router.small.model)
     const chat = createChatClient({ ...router.small, model }, fetch)
+    // stream the model's prose to the renderer token-by-token
+    const onToken = (delta: string) => {
+      if (!event.sender.isDestroyed()) event.sender.send('model:chat:token', delta)
+    }
+
+    // Proposals the model formulates this turn; the renderer approves them (the
+    // write happens through gitea:applyChange, never inside the loop).
+    const proposals: ChangeProposal[] = []
 
     const execute = async (name: string, args: unknown) => {
-      if (name !== 'query_project') return { error: `unknown tool: ${name}` }
       if (!client) return { error: 'gitea is not configured' }
-      const snap = await reconcileSnapshot(client)
+      if (name === 'query_project') {
+        // reuse a recent reconcile — a multi-tool turn shouldn't refetch the repo each call
+        const snap = await getSnapshot(client, { maxAgeMs: AGENT_SNAPSHOT_TTL_MS })
         const a = (args ?? {}) as { view: ProjectView; filters?: QueryFilters }
         return buildProjectView(a.view, a.filters, snap, new Date())
       }
+      if (name === 'propose_change') {
+        const a = (args ?? {}) as ProposeChangeArgs
+        const issue = await client.getIssue(a.issue).catch(() => null)
+        if (!issue) return { error: `issue #${a.issue} not found` }
+        const built = proposalsFor(a, issue.labels, issue.title)
+        proposals.push(...built)
+        return built.length
+          ? { proposed: built.map((p) => ({ issue: a.issue, diff: describeChange(p.plan) })) }
+          : { proposed: [], note: 'no change — already at that value' }
+      }
+      if (name === 'record_directive') {
+        const pm = getPmStateClient()
+        if (!pm) return { error: 'pm-state is not configured' }
+        try {
+          const entry = await appendDirectiveEntry(pm, toDirectiveInput(args))
+          return { recorded: { kind: entry.kind, quote: entry.quote } }
+        } catch (e) {
+          return { error: `could not record — is the pm-state repo created? (${e instanceof Error ? e.message : e})` }
+        }
+      }
+      return { error: `unknown tool: ${name}` }
+    }
 
     try {
       const turn = await runAgentTurn({
-        complete: (m, t) => chat.complete(m, t),
+        complete: (m, t, ot) => chat.complete(m, t, ot),
         messages: [{ role: 'system', content: REGINALD_SYSTEM }, ...messages],
         tools: REGINALD_TOOLS,
         execute,
+        onToken,
       })
-      return { ok: true as const, content: turn.content, steps: turn.steps }
+      return { ok: true as const, content: turn.content, steps: turn.steps, proposals }
+    } catch (e) {
+      return { ok: false as const, reason: 'error' as const, message: e instanceof Error ? e.message : String(e) }
+    }
+  })
+
+  // capture_work — braindump → proposed issue set. The big model does the
+  // decomposition (with one loaded local model, that's the loaded one). Returns
+  // a proposal; nothing is filed until the Capture tray approves it.
+  ipcMain.handle('model:capture', async (_event, braindump: string) => {
+    const router = resolveModelRouter()
+    if (!router) return { ok: false as const, reason: 'unconfigured' as const }
+    const model = await resolveLoadedModel(router.big.baseUrl, router.big.model)
+    const chat = createChatClient({ ...router.big, model }, fetch)
+    try {
+      const proposal = await captureWork((m, t) => chat.complete(m, t), braindump)
+      return { ok: true as const, ...proposal }
     } catch (e) {
       return { ok: false as const, reason: 'error' as const, message: e instanceof Error ? e.message : String(e) }
     }

apps/desktop/src/main/snapshot-store.ts

@@ -0,0 +1,47 @@
+/**
+ * Durable snapshot store — the reconcile cache, persisted to disk. On boot the
+ * app shows the last snapshot instantly (stale-while-revalidate) instead of a
+ * blank board while ~2N gitea calls run; if gitea is unreachable, reads fall
+ * back to it (offline). It's a rebuildable mirror — the durable truth stays in
+ * gitea (the purity split, D4). A plain JSON file: the whole snapshot fits in
+ * memory at this scale, so indexed SQL buys nothing yet (see the PR).
+ */
+
+import { readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+import { app } from 'electron'
+
+/** The shape we persist — kept loose so a schema drift degrades to "no cache", not a crash. */
+export interface PersistedSnapshot {
+  issues: unknown[]
+  milestones: unknown[]
+  deps: unknown[]
+  timelines: Record<number, unknown[]>
+  /** ISO time the snapshot was reconciled — shown as "cached since". */
+  savedAt: string
+}
+
+function snapshotPath(): string {
+  return join(app.getPath('userData'), 'commitea-snapshot.json')
+}
+
+/** Load the last persisted snapshot, or null if absent/corrupt. Never throws. */
+export function loadSnapshot(): PersistedSnapshot | null {
+  try {
+    const parsed = JSON.parse(readFileSync(snapshotPath(), 'utf8')) as PersistedSnapshot
+    if (parsed && Array.isArray(parsed.issues)) return parsed
+    return null
+  } catch {
+    return null // missing file, bad JSON, or drift — treat as no cache
+  }
+}
+
+/** Persist a freshly reconciled snapshot. Best-effort — a write failure never breaks a reconcile. */
+export function saveSnapshot(snap: Omit<PersistedSnapshot, 'savedAt'>, savedAt: string): void {
+  try {
+    writeFileSync(snapshotPath(), JSON.stringify({ ...snap, savedAt }), 'utf8')
+  } catch {
+    // disk full / permissions — the in-memory cache still works this session
+  }
+}

apps/desktop/src/preload/index.ts

@@ -5,18 +5,46 @@ const api = {
   gitea: {
     /** Whether the main process has a gitea token + target repo configured. */
     status: () => ipcRenderer.invoke('gitea:status'),
+    /** The last persisted snapshot, for instant boot before the fresh reconcile. */
+    boot: () => ipcRenderer.invoke('gitea:boot'),
     /** Full read of the managed repo — every issue + milestone. */
     reconcile: () => ipcRenderer.invoke('gitea:reconcile'),
     /** One issue by index, normalized (or null if unconfigured). */
     getIssue: (index: number) => ipcRenderer.invoke('gitea:getIssue', index),
     /** Apply an estimate/priority change (the write path); resolves to the plan + fresh issue. */
     applyChange: (change: unknown) => ipcRenderer.invoke('gitea:applyChange', change),
+    /** File a set of captured issues with their est/* + p/* labels. */
+    createIssues: (issues: unknown) => ipcRenderer.invoke('gitea:createIssues', issues),
+  },
+  pmstate: {
+    /** Read the directive ledger from the pm-state repo. */
+    directives: () => ipcRenderer.invoke('pmstate:directives'),
+    /** Read the capacity config from the pm-state repo. */
+    capacity: () => ipcRenderer.invoke('pmstate:capacity'),
+  },
+  config: {
+    /** The saved config (never the token) — null when unset. */
+    get: () => ipcRenderer.invoke('config:get'),
+    /** Validate a token + repo before saving. */
+    test: (cfg: unknown) => ipcRenderer.invoke('config:test', cfg),
+    /** Save config (token encrypted in main); takes effect without restart. */
+    set: (cfg: unknown) => ipcRenderer.invoke('config:set', cfg),
+    /** Forget the saved config. */
+    clear: () => ipcRenderer.invoke('config:clear'),
   },
   model: {
     /** Whether a model endpoint is configured (else the UI keeps the scripted Reginald). */
     status: () => ipcRenderer.invoke('model:status'),
     /** One agent turn: messages in, Reginald's prose + the tools it consulted out. */
     chat: (messages: unknown) => ipcRenderer.invoke('model:chat', messages),
+    /** Subscribe to streamed prose tokens for the in-flight turn; returns an unsubscribe. */
+    onToken: (cb: (delta: string) => void) => {
+      const listener = (_e: unknown, delta: string) => cb(delta)
+      ipcRenderer.on('model:chat:token', listener)
+      return () => ipcRenderer.removeListener('model:chat:token', listener)
+    },
+    /** Decompose a braindump into a proposed issue set (capture_work). */
+    capture: (braindump: string) => ipcRenderer.invoke('model:capture', braindump),
   },
 }
 

apps/desktop/src/renderer/src/components/screens/capture-screen.tsx

@@ -1,8 +1,12 @@
 import React from 'react'
 
+import type { ProposedIssue } from '@commitea/core'
+
 import { Badge, Button, Card, Icon, Select, Tag } from '../ui/index.js'
 
-// Capture interview — braindump → interview → approved ticket set (< 2 min)
+// Capture interview — braindump → interview → approved ticket set (< 2 min).
+// With a model configured, "Brew tickets" runs real capture_work decomposition
+// and "Approve all" files the issues in gitea; otherwise the scripted demo runs.
 
 interface Ticket {
   title: string
@@ -30,6 +34,64 @@ export function CaptureScreen({ onDone }: { onDone: () => void }) {
   const [webEst, setWebEst] = React.useState<string | null>(null)
   const [secs, setSecs] = React.useState(0)
 
+  // live capture_work path (real model + gitea writes)
+  const [live, setLive] = React.useState(false)
+  const [brewing, setBrewing] = React.useState(false)
+  const [liveTickets, setLiveTickets] = React.useState<ProposedIssue[] | null>(null)
+  const [filedCount, setFiledCount] = React.useState(0)
+  const [error, setError] = React.useState<string | null>(null)
+
+  React.useEffect(() => {
+    let alive = true
+    window.commitea.model.status().then((s) => { if (alive) setLive(s.configured) }).catch(() => {})
+    return () => { alive = false }
+  }, [])
+
+  const editTicket = (i: number, field: 'estimate' | 'priority', value: string) =>
+    setLiveTickets((ts) => (ts ? ts.map((t, j) => (j === i ? { ...t, [field]: value } : t)) : ts))
+
+  // Decide live-vs-scripted at click time: re-check status if it hasn't resolved
+  // yet, so a configured model never falls into the scripted interview by a race.
+  const onBrew = async () => {
+    const configured = live || (await window.commitea.model.status().then((s) => s.configured).catch(() => false))
+    if (configured) {
+      setLive(true)
+      brew()
+    } else {
+      setStage('interview')
+    }
+  }
+
+  const brew = () => {
+    setError(null)
+    setBrewing(true)
+    window.commitea.model
+      .capture(dump)
+      .then((res) => {
+        setBrewing(false)
+        if (res.ok && res.issues.length) {
+          setLiveTickets(res.issues)
+          setStage('review')
+        } else {
+          setError(res.ok ? 'I could not find concrete work in that — try a bit more detail.' : `Capture failed: ${res.reason === 'error' ? res.message : 'no model'}`)
+        }
+      })
+      .catch(() => { setBrewing(false); setError('I could not reach the model.') })
+  }
+
+  const fileLive = () => {
+    if (!liveTickets) return
+    setBrewing(true)
+    window.commitea.gitea
+      .createIssues(liveTickets)
+      .then((res) => {
+        setBrewing(false)
+        if (res.ok) { setFiledCount(res.created.length); setStage('filed') }
+        else setError('Filing failed — gitea is not configured.')
+      })
+      .catch(() => { setBrewing(false); setError('Filing failed.') })
+  }
+
   const running = stage === 'interview' || stage === 'review'
   React.useEffect(() => {
     if (!running) return
@@ -63,19 +125,23 @@ export function CaptureScreen({ onDone }: { onDone: () => void }) {
     else setStage('review')
   }
 
-  // draft tickets build as the interview progresses
+  // draft tickets build as the interview progresses (scripted demo path)
-  const tickets: Ticket[] = []
+  const scripted: Ticket[] = []
   if (split === true) {
-    tickets.push({ title: 'Token refresh: retry with backoff', est: 'est/2d', p: 'p/2' })
+    scripted.push({ title: 'Token refresh: retry with backoff', est: 'est/2d', p: 'p/2' })
-    tickets.push({ title: 'Session storage: stale reads on wake', est: 'est/1d', p: 'p/3' })
+    scripted.push({ title: 'Session storage: stale reads on wake', est: 'est/1d', p: 'p/3' })
   } else if (split === false) {
-    tickets.push({ title: 'Auth: token refresh + session storage', est: 'est/3d', p: 'p/2' })
+    scripted.push({ title: 'Auth: token refresh + session storage', est: 'est/3d', p: 'p/2' })
   }
-  if (webEst) tickets.push({ title: 'Webhook debounce: double-fire guard', est: webEst, p: 'p/1', dep: 'blocked by auth work' })
+  if (webEst) scripted.push({ title: 'Webhook debounce: double-fire guard', est: webEst, p: 'p/1', dep: 'blocked by auth work' })
-  if (stage === 'review' || stage === 'filed') {
+  if (!live && (stage === 'review' || stage === 'filed')) {
-    tickets.push({ title: 'Docs: auth setup guide', est: 'est/1d', p: 'p/4', byReginald: true })
+    scripted.push({ title: 'Docs: auth setup guide', est: 'est/1d', p: 'p/4', byReginald: true })
   }
-  const totalDays = tickets.reduce((n, t) => n + parseInt(t.est.replace('est/', '')), 0)
+  // real capture_work output overrides the scripted set when present
+  const tickets: Ticket[] = liveTickets
+    ? liveTickets.map((i) => ({ title: i.title, est: i.estimate ?? 'est/2d', p: i.priority ?? 'p/3' }))
+    : scripted
+  const totalDays = tickets.reduce((n, t) => n + parseInt(t.est.replace('est/', ''), 10), 0)
 
   const estOptions = ['est/1d', 'est/2d', 'est/3d', 'est/5d', 'est/8d'].map((v) => ({ value: v, label: v }))
   const pOptions = ['p/1', 'p/2', 'p/3', 'p/4'].map((v) => ({ value: v, label: v }))
@@ -96,8 +162,20 @@ export function CaptureScreen({ onDone }: { onDone: () => void }) {
             <div style={{ display: 'flex', alignItems: 'center', gap: 8, flexWrap: 'wrap' }}>
               {editable ? (
                 <>
-                  <Select options={estOptions} defaultValue={t.est} style={{ width: 96 }} />
+                  <Select
-                  <Select options={pOptions} defaultValue={t.p} style={{ width: 76 }} />
+                    options={estOptions}
+                    value={liveTickets ? t.est : undefined}
+                    defaultValue={liveTickets ? undefined : t.est}
+                    onChange={(e) => editTicket(i, 'estimate', e.target.value)}
+                    style={{ width: 96 }}
+                  />
+                  <Select
+                    options={pOptions}
+                    value={liveTickets ? t.p : undefined}
+                    defaultValue={liveTickets ? undefined : t.p}
+                    onChange={(e) => editTicket(i, 'priority', e.target.value)}
+                    style={{ width: 76 }}
+                  />
                 </>
               ) : (
                 <>
@@ -144,7 +222,12 @@ export function CaptureScreen({ onDone }: { onDone: () => void }) {
           <p style={{ font: 'var(--text-agent)', color: 'var(--ink-2)', margin: '10px 0 14px' }}>
             Sentences, fragments, grievances — all welcome. I'll sort it into tickets and only ask what I can't infer.
           </p>
-          <Button icon="sparkles" onClick={() => setStage('interview')}>Brew tickets</Button>
+          <Button icon="sparkles" onClick={() => void onBrew()} disabled={brewing}>
+            {brewing ? 'Brewing…' : 'Brew tickets'}
+          </Button>
+          {error ? (
+            <p style={{ font: 'var(--text-agent)', color: 'var(--danger)', margin: '10px 0 0' }}>{error}</p>
+          ) : null}
         </Card>
       ) : null}
 
@@ -174,15 +257,26 @@ export function CaptureScreen({ onDone }: { onDone: () => void }) {
         <div style={{ display: 'grid', gridTemplateColumns: '1fr 1.1fr', gap: 14, alignItems: 'start' }}>
           <Card overline="Consequence" title={`${tickets.length} tickets · ~${totalDays}d of work`} jade
                 footer={<>
-                  <Button onClick={() => setStage('filed')}>Approve all</Button>
+                  <Button onClick={() => (live ? fileLive() : setStage('filed'))} disabled={brewing}>
-                  <Button variant="ghost" onClick={() => { setStage('dump'); setQi(0); setLog([]); setSplit(null); setWebEst(null); setSecs(0); }}>Discard</Button>
+                    {brewing ? 'Filing…' : 'Approve all'}
+                  </Button>
+                  <Button variant="ghost" onClick={() => { setStage('dump'); setQi(0); setLog([]); setSplit(null); setWebEst(null); setSecs(0); setLiveTickets(null); setError(null); }}>Discard</Button>
                 </>}>
+            {live ? (
+              <p style={{ font: 'var(--text-agent)', color: 'var(--ink-2)', margin: 0 }}>
+                {tickets.length} issue{tickets.length === 1 ? '' : 's'} from your braindump, estimated and prioritized.
+                Adjust the labels, then approve — I'll open them in gitea with only est/* and p/* labels.
+              </p>
+            ) : (
+              <>
                 <p style={{ font: 'var(--text-body)', margin: '0 0 8px' }}>
                   Beta's 80% window moves <span style={{ font: 'var(--text-data)' }}>Mar 3–12 → Mar 5–14</span>. Capacity absorbs the rest.
                 </p>
                 <p style={{ font: 'var(--text-agent)', color: 'var(--ink-2)', margin: 0 }}>
                   I added the docs ticket you mentioned and wired the dependency. Shall I make it so?
                 </p>
+              </>
+            )}
           </Card>
           <Tray editable />
         </div>
@@ -195,7 +289,7 @@ export function CaptureScreen({ onDone }: { onDone: () => void }) {
               <Icon name="circle-check" size={22} /> Filed
             </span>
             <p style={{ font: 'var(--text-body)', margin: 0 }}>
-              {tickets.length} issues opened in gitea with <span style={{ font: 'var(--text-data)' }}>est/*</span> and <span style={{ font: 'var(--text-data)' }}>p/*</span> labels — nothing else touched.
+              {live ? filedCount : tickets.length} issues opened in gitea with <span style={{ font: 'var(--text-data)' }}>est/*</span> and <span style={{ font: 'var(--text-data)' }}>p/*</span> labels — nothing else touched.
             </p>
             <p style={{ font: 'var(--text-agent)', color: 'var(--ink-2)', margin: 0 }}>
               Elapsed {clock} — under budget. No bot comments, no synthetic issues; your repo remains yours.

apps/desktop/src/renderer/src/components/screens/connect-screen.tsx

@@ -0,0 +1,117 @@
+import React from 'react'
+
+import type { PublicConfig } from '../../global.js'
+import logoIcon from '../../design/assets/logo-icon.png'
+import { Button, Card, Input } from '../ui/index.js'
+
+/**
+ * Real onboarding — each teammate connects their own Gitea with a personal access
+ * token. The token is validated (an authed read on the repo) then saved encrypted
+ * in the main process (never exposed to this renderer). Optional model URL wires
+ * Reginald; leave it blank and chat simply stays off.
+ */
+export function ConnectScreen({ onConnected, existing }: { onConnected: () => void; existing?: PublicConfig | null }) {
+  const [baseUrl, setBaseUrl] = React.useState(existing?.baseUrl ?? 'https://gitea.stephenmann.io')
+  const [owner, setOwner] = React.useState(existing?.owner ?? '')
+  const [repo, setRepo] = React.useState(existing?.repo ?? '')
+  const [token, setToken] = React.useState('')
+  const [modelUrl, setModelUrl] = React.useState(existing?.modelUrl ?? '')
+  const [state, setState] = React.useState<'idle' | 'testing' | 'saving'>('idle')
+  const [error, setError] = React.useState<string | null>(null)
+
+  const cfg = () => ({ baseUrl, owner, repo, token, modelUrl: modelUrl.trim() || undefined })
+  const ready = baseUrl.trim() && owner.trim() && repo.trim() && (token.trim() || existing?.hasToken)
+
+  const connect = async () => {
+    setError(null)
+    setState('testing')
+    // reuse the saved token when editing and the field is left blank
+    const payload = token.trim() ? cfg() : { ...cfg(), token: '' }
+    if (token.trim()) {
+      const test = await window.commitea.config.test(cfg()).catch(() => ({ ok: false, error: 'unreachable' }))
+      if (!test.ok) {
+        setState('idle')
+        setError(
+          test.error === '404'
+            ? "Couldn't find that repo — check owner/name and that the token can see it."
+            : test.error === '401' || test.error === '403'
+              ? 'The token was rejected — check it has repo + issue scopes.'
+              : `Connection failed${test.error ? ` (${test.error})` : ''}.`,
+        )
+        return
+      }
+    }
+    setState('saving')
+    await window.commitea.config.set(payload)
+    onConnected()
+  }
+
+  const field = (
+    label: string,
+    value: string,
+    set: (v: string) => void,
+    opts: { placeholder?: string; type?: string; hint?: string } = {},
+  ) => (
+    <div style={{ display: 'flex', flexDirection: 'column', gap: 5 }}>
+      <Input
+        label={label}
+        value={value}
+        type={opts.type}
+        placeholder={opts.placeholder}
+        onChange={(e) => set(e.target.value)}
+      />
+      {opts.hint ? <span style={{ font: 'var(--text-caption)', color: 'var(--ink-3)' }}>{opts.hint}</span> : null}
+    </div>
+  )
+
+  return (
+    <div
+      style={{
+        height: '100vh',
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'center',
+        background: 'var(--surface-app)',
+        padding: 24,
+      }}
+    >
+      <Card style={{ width: 460, maxWidth: '100%' }}>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 10, marginBottom: 6 }}>
+          <img src={logoIcon} width="28" height="28" alt="" style={{ borderRadius: 7, display: 'block' }} />
+          <span style={{ font: '400 24px/1 var(--font-serif-display)', color: 'var(--ink-1)' }}>
+            Commi<span style={{ color: 'var(--accent-text)' }}>Tea</span>
+          </span>
+        </div>
+        <p style={{ font: 'var(--text-body)', color: 'var(--ink-2)', margin: '0 0 18px' }}>
+          Connect your Gitea. Your token is stored encrypted on this machine and never leaves it.
+        </p>
+
+        <div style={{ display: 'flex', flexDirection: 'column', gap: 12 }}>
+          {field('Gitea URL', baseUrl, setBaseUrl, { placeholder: 'https://gitea.example.com' })}
+          <div style={{ display: 'grid', gridTemplateColumns: '1fr 1fr', gap: 12 }}>
+            {field('Owner', owner, setOwner, { placeholder: 'your-org' })}
+            {field('Repository', repo, setRepo, { placeholder: 'your-repo' })}
+          </div>
+          {field('Access token', token, setToken, {
+            type: 'password',
+            placeholder: existing?.hasToken ? '•••••••• (saved — leave blank to keep)' : 'gitea PAT · scopes: repo + issue',
+          })}
+          {field('Model URL', modelUrl, setModelUrl, {
+            placeholder: 'http://localhost:1234/v1',
+            hint: 'Optional — an OpenAI-compatible endpoint for Reginald. Leave blank to keep chat off.',
+          })}
+        </div>
+
+        {error ? (
+          <p style={{ font: 'var(--text-agent)', color: 'var(--danger)', margin: '12px 0 0' }}>{error}</p>
+        ) : null}
+
+        <div style={{ display: 'flex', gap: 10, marginTop: 18 }}>
+          <Button onClick={() => void connect()} disabled={!ready || state !== 'idle'}>
+            {state === 'testing' ? 'Checking…' : state === 'saving' ? 'Connecting…' : existing ? 'Save' : 'Connect'}
+          </Button>
+        </div>
+      </Card>
+    </div>
+  )
+}

apps/desktop/src/renderer/src/components/screens/directives-screen.tsx

@@ -8,6 +8,35 @@ export function DirectivesScreen() {
   const [pending, setPending] = React.useState<DirectivePending | null>(DIRECTIVES.pending)
   const [entries, setEntries] = React.useState<DirectiveEntry[]>(DIRECTIVES.entries)
 
+  // Real ledger from the pm-state repo, when it exists — else the fixture demo.
+  React.useEffect(() => {
+    let alive = true
+    window.commitea.pmstate
+      .directives()
+      .then((r) => {
+        if (!alive || !r.ok || r.directives.length === 0) return
+        setPending(null)
+        setEntries(
+          r.directives
+            .slice()
+            .reverse()
+            .map((d) => ({
+              seq: d.seq,
+              who: 'You',
+              when: new Date(d.ts).toLocaleDateString(),
+              what: d.quote,
+              why: d.rationale ?? '',
+              status: d.status === 'accepted' ? 'applied' : d.status === 'withdrawn' ? 'withdrawn' : 'superseded',
+              consequence: '',
+            })),
+        )
+      })
+      .catch(() => {})
+    return () => {
+      alive = false
+    }
+  }, [])
+
   const resolve = (status: string) => {
     setEntries((e) => [{
       seq: pending!.seq, who: pending!.who, when: pending!.when, what: pending!.what, why: 'pilot demo on the 14th',

apps/desktop/src/renderer/src/components/screens/milestone-screen.tsx

@@ -1,22 +1,44 @@
 import React from 'react'
 
 import { COLUMNS, type IssueRef } from '../../data/fixtures.js'
+import { type MilestoneView } from '../../lib/backlog.js'
 import { BurnUpCone } from '../charts/chart.js'
 import { Badge, Button, Card, Icon, Tag } from '../ui/index.js'
 
-// Milestone detail — scope, cone, issues; forecasts stay ranges
+// Milestone detail — scope, cone, issues; forecasts stay ranges.
-export function MilestoneScreen({ onBack, onOpenIssue }: { onBack: () => void; onOpenIssue: (issue: IssueRef) => void }) {
+// `data` (real milestone forecast) overrides the demo fixture when present.
+export function MilestoneScreen({
+  onBack,
+  onOpenIssue,
+  data,
+}: {
+  onBack: () => void
+  onOpenIssue: (issue: IssueRef) => void
+  data?: MilestoneView
+}) {
   const cols = COLUMNS
   const byState = (ids: number[]) =>
     cols.flatMap((c) => c.issues.map((i) => ({ ...i, col: c.label }))).filter((i) => ids.includes(i.id))
 
-  const groups = [
+  const fixtureGroups = [
     { label: 'Steeping', issues: byState([87, 84]) },
     { label: 'In review', issues: byState([92]) },
     { label: 'Queued', issues: byState([102, 103, 99, 96, 78]) },
     { label: 'Done', issues: byState([71, 69, 65]), muted: true },
   ]
 
+  // real or demo, in one shape the render loop understands
+  const groups = data
+    ? data.groups.map((g) => ({ label: g.label, issues: g.issues, muted: g.label === 'Done' }))
+    : fixtureGroups
+  const name = data ? data.name : 'Beta'
+  const dueLine = data
+    ? `milestone · due ${data.due} · ${data.soft ? 'soft — scope may flex' : 'hard deadline'}`
+    : 'milestone · due Mar 15 · soft — scope may flex'
+  const forecastLabel = data ? (data.forecastRange ? `80% ${data.forecastRange}` : 'all shipped') : '80% Mar 3–12'
+  const scopeStat = data ? `${data.scopeCount} issues · est ${data.scopeEstDays}d` : '42 issues · est 61d'
+  const doneStat = data ? `${data.doneCount} · ${data.donePct}%` : '24 · 57%'
+
   const Stat = ({ label, value, tone }: { label: string; value: string; tone?: string }) => (
     <div style={{ flex: 1, padding: '12px 18px', borderRight: '1px solid var(--line-1)' }}>
       <div style={{ font: 'var(--text-overline)', letterSpacing: 'var(--letter-spacing-wide)', textTransform: 'uppercase', color: 'var(--ink-3)', marginBottom: 5 }}>{label}</div>
@@ -36,12 +58,12 @@ export function MilestoneScreen({ onBack, onOpenIssue }: { onBack: () => void; o
         <header style={{ borderBottom: 'var(--rule-double)', paddingBottom: 14, display: 'flex', alignItems: 'flex-start', gap: 16 }}>
           <div style={{ flex: 1, minWidth: 0 }}>
             <p style={{ font: '400 12px var(--font-mono)', color: 'var(--ink-3)', margin: '0 0 6px', display: 'inline-flex', alignItems: 'center', gap: 6 }}>
-              <Icon name="milestone" size={13} /> milestone · due Mar 15 · soft — scope may flex
+              <Icon name="milestone" size={13} /> {dueLine}
             </p>
-            <h1 style={{ font: 'var(--text-display)', color: 'var(--ink-1)', margin: 0 }}>Beta</h1>
+            <h1 style={{ font: 'var(--text-display)', color: 'var(--ink-1)', margin: 0 }}>{name}</h1>
             <div style={{ display: 'flex', alignItems: 'center', gap: 8, marginTop: 10 }}>
-              <Badge tone="ok" dot>ahead of forecast</Badge>
+              <Badge tone="ok" dot>{data ? `${data.doneCount}/${data.scopeCount} done` : 'ahead of forecast'}</Badge>
-              <span style={{ font: '400 12px var(--font-mono)', color: 'var(--ink-2)', whiteSpace: 'nowrap' }}>80% Mar 3–12</span>
+              <span style={{ font: '400 12px var(--font-mono)', color: 'var(--ink-2)', whiteSpace: 'nowrap' }}>{forecastLabel}</span>
             </div>
           </div>
           <Button variant="secondary" icon="arrow-up-right">Open in Gitea</Button>
@@ -51,21 +73,25 @@ export function MilestoneScreen({ onBack, onOpenIssue }: { onBack: () => void; o
       {/* stats strip */}
       <Card flush>
         <div style={{ display: 'flex' }}>
-          <Stat label="Scope" value="42 issues · est 61d" />
+          <Stat label="Scope" value={scopeStat} />
-          <Stat label="Done" value="24 · 57%" />
+          <Stat label="Done" value={doneStat} />
-          <Stat label="Forecast" value="80% Mar 3–12" />
+          <Stat label="Forecast" value={forecastLabel} />
           <div style={{ flex: 1, padding: '12px 18px' }}>
-            <div style={{ font: 'var(--text-overline)', letterSpacing: 'var(--letter-spacing-wide)', textTransform: 'uppercase', color: 'var(--ink-3)', marginBottom: 5 }}>Drift · 7d</div>
+            <div style={{ font: 'var(--text-overline)', letterSpacing: 'var(--letter-spacing-wide)', textTransform: 'uppercase', color: 'var(--ink-3)', marginBottom: 5 }}>Remaining</div>
-            <div style={{ font: '500 14px var(--font-mono)', color: 'var(--ok)', whiteSpace: 'nowrap' }}>−2d · cone narrowed</div>
+            <div style={{ font: '500 14px var(--font-mono)', color: 'var(--ink-1)', whiteSpace: 'nowrap' }}>{data ? `${data.scopeCount - data.doneCount} open` : '−2d · cone narrowed'}</div>
           </div>
         </div>
       </Card>
 
       <div style={{ display: 'grid', gridTemplateColumns: '1.2fr 1fr', gap: 14, alignItems: 'start' }}>
-        <Card overline="Burn-up" title={<>80% this lands <span style={{ whiteSpace: 'nowrap' }}>Mar 3–12</span></>} jade>
+        <Card overline="Burn-up" title={<>80% this lands <span style={{ whiteSpace: 'nowrap' }}>{data ? (data.forecastRange ?? 'shipped') : 'Mar 3–12'}</span></>} jade>
-          <BurnUpCone />
+          <BurnUpCone data={data?.cone ?? undefined} />
           <p style={{ font: 'var(--text-agent)', color: 'var(--ink-2)', margin: '10px 0 0' }}>
-            Comfortably ahead. Beta needs #87 more than it needs my commentary.
+            {data
+              ? data.cone
+                ? `${data.scopeCount - data.doneCount} open of ${data.scopeCount}. Cone over what's left.`
+                : 'Everything here has shipped.'
+              : 'Comfortably ahead. Beta needs #87 more than it needs my commentary.'}
           </p>
         </Card>
 

apps/desktop/src/renderer/src/components/screens/runway-screen.tsx

@@ -1,19 +1,35 @@
 import React from 'react'
 
+import { type CapacityMember, capacityPerWorkday } from '@commitea/core'
+
 import { RunwayBar } from '../charts/chart.js'
 import { Card, Badge, Tag, Icon, IconButton } from '../ui/index.js'
-import { RUNWAY, CAPACITY } from '../../data/fixtures.js'
+import { RUNWAY, CAPACITY, type RunwayMilestone } from '../../data/fixtures.js'
 
-// Runway — capacity vs milestone dates; ranges, never points
+// Runway — capacity vs milestone dates; ranges, never points.
+// `milestones` (real per-milestone forecasts) + `capacity` (real config) override the demo.
 export function RunwayScreen({
   onOpenCalibration,
   onOpenMilestone,
   calibration,
+  milestones,
+  capacity,
 }: {
   onOpenCalibration: () => void
-  onOpenMilestone: () => void
+  onOpenMilestone: (id?: number) => void
   calibration?: { n: number; coldStart: boolean }
+  milestones?: RunwayMilestone[]
+  capacity?: CapacityMember[]
 }) {
+  const rows = milestones && milestones.length ? milestones : RUNWAY
+  const capacityRows =
+    capacity && capacity.length
+      ? capacity.map((m) => ({
+          who: m.person,
+          slices: `focus ${m.focusFactor} · alloc ${Math.round(m.allocation * 100)}%`,
+          hours: `${capacityPerWorkday(m).toFixed(2)} pd/day`,
+        }))
+      : CAPACITY
   const calibNote = calibration
     ? calibration.coldStart
       ? `cold-start priors · ${calibration.n}/20 closed issues estimated`
@@ -28,8 +44,8 @@ export function RunwayScreen({
 
       <Card overline="Milestones" flush>
         <div>
-          {RUNWAY.map((m, i) => (
+          {rows.map((m, i) => (
-            <div key={m.name} onClick={onOpenMilestone} style={{
+            <div key={m.name} onClick={() => onOpenMilestone(m.id)} style={{
               display: 'grid', gridTemplateColumns: '160px 1fr 150px 90px', gap: 16, alignItems: 'center', cursor: 'pointer',
               padding: '14px 20px', borderTop: i === 0 ? 'none' : '1px solid var(--line-1)',
             }}
@@ -55,7 +71,7 @@ export function RunwayScreen({
       <div style={{ display: 'grid', gridTemplateColumns: '1fr 1fr', gap: 14, alignItems: 'start' }}>
         <Card overline="Capacity" flush>
           <div>
-            {CAPACITY.map((p, i) => (
+            {capacityRows.map((p, i) => (
               <div key={p.who} style={{
                 display: 'flex', alignItems: 'center', gap: 12, padding: '12px 20px',
                 borderTop: i === 0 ? 'none' : '1px solid var(--line-1)',

apps/desktop/src/renderer/src/components/screens/settings-screen.tsx

@@ -1,9 +1,22 @@
 import React from 'react'
 
+import type { PublicConfig } from '../../global.js'
 import { Badge, Button, Card, Icon, IconButton, Input, Radio, Select, Switch, Tag } from '../ui/index.js'
 
 // Settings — gitea connection, sync, model roles, labels, rituals, appearance
-export function SettingsScreen({ dark, setDark }: { dark: boolean; setDark: (v: boolean) => void }) {
+export function SettingsScreen({
+  dark,
+  setDark,
+  connection,
+  onReconnect,
+  onDisconnect,
+}: {
+  dark: boolean
+  setDark: (v: boolean) => void
+  connection?: PublicConfig | null
+  onReconnect?: () => void
+  onDisconnect?: () => void
+}) {
   const [webhooks, setWebhooks] = React.useState(true)
   const [reconcile, setReconcile] = React.useState(true)
   const [poll, setPoll] = React.useState(true)
@@ -24,25 +37,35 @@ export function SettingsScreen({ dark, setDark }: { dark: boolean; setDark: (v:
       </header>
 
       <Card overline="Gitea" title="Connection">
-        <div style={{ display: 'flex', flexDirection: 'column', gap: 14 }}>
+        <div style={{ display: 'flex', flexDirection: 'column', gap: 12 }}>
-          <Input label="Base URL" icon="link" mono defaultValue="https://gitea.stephenmann.io" />
+          {connection ? (
-          <Input label="Access token" icon="keyboard" mono type="password" defaultValue="ct_9f2e81c4a7d6" hint="Scopes: repo, issue. Nothing more." />
+            <>
-          <div style={{ display: 'flex', flexDirection: 'column', gap: 8 }}>
-            <span style={{ font: '600 13px/1.2 var(--font-sans)', color: 'var(--ink-1)' }}>Managed repos</span>
               <Row style={{ padding: '8px 12px', background: 'var(--paper-0)', border: '1px solid var(--line-1)', borderRadius: 'var(--radius-2)' }}>
                 <Icon name="git-branch" size={14} style={{ color: 'var(--ink-3)' }} />
-              <span style={{ font: 'var(--text-data)', color: 'var(--ink-1)', flex: 1 }}>stephen/commitea</span>
+                <span style={{ font: 'var(--text-data)', color: 'var(--ink-1)', flex: 1 }}>{connection.owner}/{connection.repo}</span>
-              <Badge tone="ok" dot>syncing</Badge>
+                <Badge tone="ok" dot>connected</Badge>
-              <IconButton icon="x" label="Stop managing" size="sm" />
               </Row>
-            <Row style={{ padding: '8px 12px', background: 'var(--paper-0)', border: '1px solid var(--line-1)', borderRadius: 'var(--radius-2)' }}>
+              <Row style={{ font: 'var(--text-caption)', color: 'var(--ink-3)', gap: 6 }}>
-              <Icon name="layers" size={14} style={{ color: 'var(--ink-3)' }} />
+                <Icon name="link" size={12} />{connection.baseUrl}
-              <span style={{ font: 'var(--text-data)', color: 'var(--ink-1)', flex: 1 }}>stephen/pm-state</span>
-              <Badge>sidecar</Badge>
               </Row>
-            <Note>The sidecar holds machine-derived state only. Delete it and resync — no truth is lost.</Note>
+              <Row style={{ font: 'var(--text-caption)', color: 'var(--ink-3)', gap: 6 }}>
-            <Button variant="secondary" size="sm" icon="plus" style={{ alignSelf: 'flex-start' }}>Add repo</Button>
+                <Icon name="layers" size={12} />sidecar: {connection.pmStateRepo ?? `${connection.repo}-pm-state`}
-          </div>
+              </Row>
+              <Row style={{ font: 'var(--text-caption)', color: 'var(--ink-3)', gap: 6 }}>
+                <Icon name="sparkles" size={12} />model: {connection.modelUrl ?? 'not set — chat off'}
+              </Row>
+              <Note>Your token is stored encrypted on this machine. Delete the sidecar and resync — no truth is lost.</Note>
+              <Row style={{ gap: 8, marginTop: 2 }}>
+                <Button variant="secondary" size="sm" icon="settings-2" onClick={onReconnect}>Reconfigure</Button>
+                <Button variant="ghost" size="sm" onClick={onDisconnect}>Disconnect</Button>
+              </Row>
+            </>
+          ) : (
+            <Row style={{ gap: 8 }}>
+              <Note>Not connected.</Note>
+              <Button variant="secondary" size="sm" onClick={onReconnect}>Connect</Button>
+            </Row>
+          )}
         </div>
       </Card>
 

apps/desktop/src/renderer/src/components/shell/app-shell.tsx

@@ -3,9 +3,20 @@ import React, { useEffect, useState } from 'react'
 import logoIcon from '../../design/assets/logo-icon.png'
 import type { IssueChange } from '@commitea/core'
 
+import type { PublicConfig } from '../../global.js'
 import type { IssueRef } from '../../data/fixtures.js'
-import { backlogCalibration, forecastBacklog, issuesToBoardColumns, scheduleFocus } from '../../lib/backlog.js'
+import { ConnectScreen } from '../screens/connect-screen.js'
+import {
+  backlogCalibration,
+  capacityWorkers,
+  forecastBacklog,
+  issuesToBoardColumns,
+  milestoneView,
+  runwayView,
+  scheduleFocus,
+} from '../../lib/backlog.js'
 import { useBacklog } from '../../lib/use-backlog.js'
+import { useCapacity } from '../../lib/use-capacity.js'
 import { PrimitivesGallery } from '../gallery.js'
 import { BoardScreen } from '../screens/board-screen.js'
 import { CalibrationScreen } from '../screens/calibration-screen.js'
@@ -87,7 +98,12 @@ export function AppShell() {
   const [offline, setOffline] = useState(false)
   const [issue, setIssue] = useState<IssueRef | null>(null)
   const [readIds, setReadIds] = useState<number[]>([])
+  const [milestoneId, setMilestoneId] = useState<number | null>(null)
+  const [gate, setGate] = useState<'checking' | 'connect' | 'ready'>('checking')
+  const [pubConfig, setPubConfig] = useState<PublicConfig | null>(null)
   const [backlog, refetchBacklog] = useBacklog()
+  const capacityMembers = useCapacity()
+  const workers = capacityWorkers(capacityMembers)
   const boardColumns =
     backlog.status === 'ready' ? issuesToBoardColumns(backlog.issues, backlog.timelines) : undefined
   const focus =
@@ -96,13 +112,40 @@ export function AppShell() {
     backlog.status === 'ready' ? backlogCalibration(backlog.issues, backlog.timelines) : undefined
   const forecast =
     backlog.status === 'ready'
-      ? (forecastBacklog(backlog.issues, backlog.deps, new Date(), calibration?.model) ?? undefined)
+      ? (forecastBacklog(backlog.issues, backlog.deps, new Date(), calibration?.model, workers) ?? undefined)
+      : undefined
+  const runwayMilestones =
+    backlog.status === 'ready'
+      ? runwayView(backlog.issues, backlog.milestones, backlog.deps, new Date(), workers)
+      : undefined
+  const milestone =
+    backlog.status === 'ready' && milestoneId != null
+      ? (milestoneView(
+          milestoneId,
+          backlog.issues,
+          backlog.milestones,
+          backlog.deps,
+          backlog.timelines,
+          calibration?.model,
+          new Date(),
+          workers,
+        ) ?? undefined)
       : undefined
 
   useEffect(() => {
     document.documentElement.setAttribute('data-theme', dark ? 'dark' : 'light')
   }, [dark])
 
+  // Gate: e2e/demo → the shell (fixtures); configured → the shell (real data);
+  // otherwise → the connect screen (each teammate brings their own token).
+  useEffect(() => {
+    window.commitea.gitea
+      .status()
+      .then((s) => setGate(s.demo || s.configured ? 'ready' : 'connect'))
+      .catch(() => setGate('connect'))
+    window.commitea.config.get().then(setPubConfig).catch(() => {})
+  }, [])
+
   const openIssue = (ref: IssueRef) => {
     if (view !== 'issue') setPrevView(view)
     setIssue(ref)
@@ -194,14 +237,19 @@ export function AppShell() {
         return (
           <RunwayScreen
             onOpenCalibration={() => setView('calibration')}
-            onOpenMilestone={() => setView('milestone')}
+            onOpenMilestone={(id) => {
+              setMilestoneId(id ?? null)
+              setView('milestone')
+            }}
             calibration={calibration ? { n: calibration.model.n, coldStart: calibration.model.coldStart } : undefined}
+            milestones={runwayMilestones}
+            capacity={capacityMembers}
           />
         )
       case 'calibration':
         return <CalibrationScreen onBack={() => setView('runway')} data={calibration?.data} />
       case 'milestone':
-        return <MilestoneScreen onBack={() => setView('runway')} onOpenIssue={openIssue} />
+        return <MilestoneScreen onBack={() => setView('runway')} onOpenIssue={openIssue} data={milestone} />
       case 'inbox':
         return (
           <InboxScreen
@@ -216,7 +264,20 @@ export function AppShell() {
       case 'directives':
         return <DirectivesScreen />
       case 'settings':
-        return <SettingsScreen dark={dark} setDark={setDark} />
+        return (
+          <SettingsScreen
+            dark={dark}
+            setDark={setDark}
+            connection={pubConfig}
+            onReconnect={() => setGate('connect')}
+            onDisconnect={() => {
+              void window.commitea.config.clear().then(() => {
+                setPubConfig(null)
+                setGate('connect')
+              })
+            }}
+          />
+        )
       case 'issue':
         return issue ? (
           <IssueScreen
@@ -236,6 +297,23 @@ export function AppShell() {
     }
   }
 
+  // Connection gate (real onboarding) comes before everything else.
+  if (gate === 'checking') {
+    return <div style={{ height: '100vh', background: 'var(--surface-app)' }} />
+  }
+  if (gate === 'connect') {
+    return (
+      <ConnectScreen
+        existing={pubConfig}
+        onConnected={() => {
+          window.commitea.config.get().then(setPubConfig).catch(() => {})
+          setGate('ready')
+          refetchBacklog()
+        }}
+      />
+    )
+  }
+
   // First run is full-window — no rail, no chat panel
   if (view === 'firstrun') {
     return <OnboardingScreen onDone={(dest) => setView(dest)} />
@@ -337,7 +415,7 @@ export function AppShell() {
         </div>
       </main>
 
-      <ChatPanel onOpenDirectives={() => setView('directives')} offline={offline} />
+      <ChatPanel onOpenDirectives={() => setView('directives')} offline={offline} onApplyChange={applyChange} />
     </div>
   )
 }

apps/desktop/src/renderer/src/components/shell/chat-panel.tsx

@@ -1,21 +1,25 @@
 import React, { useEffect, useRef, useState } from 'react'
 
+import { describeChange, type IssueChange } from '@commitea/core'
+
 import { useChat } from '../../lib/use-chat.js'
-import { Icon, IconButton } from '../ui/index.js'
+import { Button, Icon, IconButton } from '../ui/index.js'
 
 /**
  * Reginald's panel — chat is the write-path (decisions.md D1). Wired to the
- * model bridge via `useChat`: when a model is configured, sending drives a real
+ * model bridge via `useChat`: a configured model drives a real agent turn
- * agent turn (query_project + prose); otherwise it echoes the scripted fixture
+ * (query_project + prose, propose_change for edits); otherwise it echoes the
- * reply so the layout stays real. Writes still go through propose-approve.
+ * scripted fixture reply. Proposed changes are approved inline here — the write
+ * runs through `onApplyChange`, the same guarded handler the Issue screen uses.
  */
 export interface ChatPanelProps {
   onOpenDirectives?: () => void
   offline?: boolean
+  onApplyChange?: (change: IssueChange) => Promise<{ ok: boolean }>
 }
 
-export function ChatPanel({ onOpenDirectives, offline }: ChatPanelProps) {
+export function ChatPanel({ onOpenDirectives, offline, onApplyChange }: ChatPanelProps) {
-  const { msgs, thinking, live, model, steps, send: sendChat } = useChat()
+  const { msgs, thinking, live, model, steps, proposals, streaming, send: sendChat, approve, dismiss } = useChat(onApplyChange)
   // shorten "google/gemma-4-26b-a4b-qat" → "gemma-4-26b" for the header chip
   const modelLabel = model ? (model.split('/').pop() ?? model).replace(/-(qat|instruct|it|gguf)$/i, '') : 'gemma-4'
   const [text, setText] = useState('')
@@ -24,7 +28,7 @@ export function ChatPanel({ onOpenDirectives, offline }: ChatPanelProps) {
   useEffect(() => {
     const el = scrollRef.current
     if (el) el.scrollTop = el.scrollHeight
-  }, [msgs, thinking])
+  }, [msgs, thinking, streaming])
 
   const send = () => {
     const t = text.trim()
@@ -58,7 +62,7 @@ export function ChatPanel({ onOpenDirectives, offline }: ChatPanelProps) {
         <Icon name="sparkles" size={16} style={{ color: offline ? 'var(--ink-3)' : 'var(--jade)' }} />
         <span style={{ font: 'var(--text-body-strong)', color: 'var(--ink-1)' }}>Reginald</span>
         <span style={{ font: '400 11px var(--font-mono)', color: 'var(--ink-3)', marginLeft: 'auto' }}>
-          {offline ? 'offline · queueing' : live ? `${modelLabel} · local` : 'demo · scripted'}
+          {offline ? 'offline · queueing' : live ? `${modelLabel} · local` : 'no model'}
         </span>
         <IconButton icon="history" label="Directive log" size="sm" onClick={onOpenDirectives} />
       </header>
@@ -94,12 +98,46 @@ export function ChatPanel({ onOpenDirectives, offline }: ChatPanelProps) {
             The model is away from its desk. Reads still work; writes will wait their turn.
           </div>
         ) : null}
-        {thinking ? <div style={{ font: 'var(--text-agent)', color: 'var(--ink-3)' }}>considering…</div> : null}
+        {streaming ? (
+          <div style={{ font: 'var(--text-agent)', color: 'var(--ink-1)', lineHeight: 1.55 }}>
+            {streaming}
+            <span style={{ opacity: 0.5 }}>▊</span>
+          </div>
+        ) : thinking ? (
+          <div style={{ font: 'var(--text-agent)', color: 'var(--ink-3)' }}>considering…</div>
+        ) : null}
         {!thinking && steps.length ? (
           <div style={{ font: 'var(--text-caption)', color: 'var(--ink-3)', display: 'flex', alignItems: 'center', gap: 5 }}>
-            <Icon name="eye" size={11} /> consulted {Array.from(new Set(steps.map((s) => s.replace('query_project', 'the project')))).join(', ')}
+            <Icon name="eye" size={11} /> consulted {Array.from(new Set(steps.map((s) => s.replace('query_project', 'the project').replace('propose_change', 'the labels').replace('record_directive', 'the directive ledger')))).join(', ')}
           </div>
         ) : null}
+        {proposals.map((p) => (
+          <div
+            key={`${p.change.issue}:${p.change.kind}`}
+            style={{
+              border: '1px solid var(--line-2)',
+              borderRadius: 'var(--radius-2)',
+              background: 'var(--paper-0)',
+              padding: '10px 12px',
+              display: 'flex',
+              flexDirection: 'column',
+              gap: 8,
+            }}
+          >
+            <div style={{ font: 'var(--text-caption)', color: 'var(--ink-3)', textTransform: 'uppercase', letterSpacing: 'var(--letter-spacing-wide)' }}>
+              Proposed · #{p.change.issue}
+            </div>
+            <div style={{ font: '500 13px var(--font-mono)', color: 'var(--ink-1)' }}>{describeChange(p.plan)}</div>
+            <div style={{ display: 'flex', gap: 8 }}>
+              <Button size="sm" onClick={() => approve(p)} disabled={offline}>
+                Approve
+              </Button>
+              <Button size="sm" variant="ghost" onClick={() => dismiss(p)}>
+                Dismiss
+              </Button>
+            </div>
+          </div>
+        ))}
       </div>
 
       <div style={{ padding: 14, borderTop: '1px solid var(--line-1)', flexShrink: 0 }}>
@@ -123,8 +161,8 @@ export function ChatPanel({ onOpenDirectives, offline }: ChatPanelProps) {
                 send()
               }
             }}
-            placeholder={offline ? 'Writes wait for the connection…' : 'Tell me what to do…'}
+            placeholder={offline ? 'Writes wait for the connection…' : live ? 'Tell me what to do…' : 'Add a Model URL in Settings…'}
-            disabled={offline}
+            disabled={offline || !live}
             rows={1}
             style={{
               flex: 1,
@@ -142,15 +180,15 @@ export function ChatPanel({ onOpenDirectives, offline }: ChatPanelProps) {
             type="button"
             onClick={send}
             aria-label="Send"
-            disabled={offline}
+            disabled={offline || !live}
             style={{
               width: 30,
               height: 30,
               borderRadius: 'var(--radius-2)',
               border: 'none',
-              cursor: offline ? 'not-allowed' : 'pointer',
+              cursor: offline || !live ? 'not-allowed' : 'pointer',
-              background: offline ? 'var(--paper-3)' : 'var(--accent)',
+              background: offline || !live ? 'var(--paper-3)' : 'var(--accent)',
-              color: offline ? 'var(--ink-3)' : 'var(--ink-inverse)',
+              color: offline || !live ? 'var(--ink-3)' : 'var(--ink-inverse)',
               display: 'inline-flex',
               alignItems: 'center',
               justifyContent: 'center',

apps/desktop/src/renderer/src/data/fixtures.ts

@@ -315,6 +315,8 @@ export interface RunwayMilestone {
   spread: number
   tone: 'ok' | 'warn'
   note: string
+  /** gitea milestone id, for the drill-in (absent on the demo fixture). */
+  id?: number
 }
 
 export const RUNWAY: RunwayMilestone[] = [

apps/desktop/src/renderer/src/global.d.ts

@@ -1,12 +1,17 @@
 import type {
   AgentStep,
+  CapacityMember,
+  ChangeProposal,
   ChatMessage,
+  CaptureProposal,
   DependencyEdge,
+  DirectiveRecord,
   GiteaIssue,
   GiteaMilestone,
   IssueChange,
   LabelPlan,
   LifecycleEvent,
+  ProposedIssue,
 } from '@commitea/core'
 
 /** The result of a write through the bridge. */
@@ -14,30 +19,102 @@ export type ApplyChangeResult =
   | { ok: false; reason: 'unconfigured' }
   | { ok: true; plan: LabelPlan; issue: GiteaIssue }
 
-/** The gitea bridge exposed by the preload over IPC (main-process backed). */
+/** The result of filing captured issues. */
-export interface GiteaBridge {
+export type CreateIssuesResult =
-  status(): Promise<{ configured: boolean; repo: string | null }>
+  | { ok: false; reason: 'unconfigured' }
-  reconcile(): Promise<{
+  | { ok: true; created: { number: number; title: string }[] }
+
+/** The result of a capture_work decomposition. */
+export type CaptureResult =
+  | { ok: false; reason: 'unconfigured' | 'error'; message?: string }
+  | ({ ok: true } & CaptureProposal)
+
+/** A reconciled snapshot as it crosses the bridge. */
+export interface SnapshotPayload {
   configured: boolean
   issues: GiteaIssue[]
   milestones: GiteaMilestone[]
   deps: DependencyEdge[]
   /** Normalized lifecycle events keyed by issue number. */
   timelines: Record<number, LifecycleEvent[]>
-  }>
+  /** true when served from the persisted cache (offline / instant boot). */
+  stale?: boolean
+  /** ISO time the persisted snapshot was reconciled (present on cached reads). */
+  savedAt?: string
+}
+
+/** Boot payload — the persisted snapshot, or a marker that there's none yet. */
+export type BootPayload =
+  | { configured: false }
+  | { configured: true; cached: false }
+  | ({ configured: true; cached: true } & Omit<SnapshotPayload, 'configured'>)
+
+/** The saved connection config (never includes the token). */
+export interface PublicConfig {
+  baseUrl: string
+  owner: string
+  repo: string
+  pmStateRepo?: string
+  modelUrl?: string
+  hasToken: boolean
+}
+
+/** What the onboarding/settings form submits. */
+export interface ConfigInput {
+  baseUrl: string
+  owner: string
+  repo: string
+  token: string
+  pmStateRepo?: string
+  modelUrl?: string
+}
+
+/** The config bridge for team onboarding. */
+export interface ConfigBridge {
+  get(): Promise<PublicConfig | null>
+  test(cfg: ConfigInput): Promise<{ ok: boolean; error?: string }>
+  set(cfg: ConfigInput): Promise<{ ok: boolean }>
+  clear(): Promise<{ ok: boolean }>
+}
+
+/** The gitea bridge exposed by the preload over IPC (main-process backed). */
+export interface GiteaBridge {
+  status(): Promise<{ configured: boolean; repo: string | null; demo: boolean }>
+  boot(): Promise<BootPayload>
+  reconcile(): Promise<SnapshotPayload>
   getIssue(index: number): Promise<GiteaIssue | null>
   applyChange(change: IssueChange): Promise<ApplyChangeResult>
+  createIssues(issues: ProposedIssue[]): Promise<CreateIssuesResult>
 }
 
 /** One agent turn's result. */
 export type ChatResult =
   | { ok: false; reason: 'unconfigured' | 'error'; message?: string }
-  | { ok: true; content: string; steps: AgentStep[] }
+  | { ok: true; content: string; steps: AgentStep[]; proposals: ChangeProposal[] }
 
 /** The model bridge (Reginald) exposed by the preload over IPC. */
 export interface ModelBridge {
   status(): Promise<{ configured: boolean; model: string | null }>
   chat(messages: ChatMessage[]): Promise<ChatResult>
+  capture(braindump: string): Promise<CaptureResult>
+  /** Subscribe to streamed prose tokens; returns an unsubscribe fn. */
+  onToken(cb: (delta: string) => void): () => void
+}
+
+/** The result of reading the directive ledger. */
+export type DirectivesResult =
+  | { ok: false; reason: 'unconfigured' | 'error'; message?: string }
+  | { ok: true; directives: DirectiveRecord[] }
+
+/** The result of reading the capacity config. */
+export type CapacityResult =
+  | { ok: false; reason: 'unconfigured'; members: CapacityMember[] }
+  | { ok: true; members: CapacityMember[] }
+
+/** The pm-state bridge (machine-derived state) exposed by the preload over IPC. */
+export interface PmStateBridge {
+  directives(): Promise<DirectivesResult>
+  capacity(): Promise<CapacityResult>
 }
 
 declare global {
@@ -46,6 +123,8 @@ declare global {
       platform: string
       gitea: GiteaBridge
       model: ModelBridge
+      pmstate: PmStateBridge
+      config: ConfigBridge
     }
   }
 }

apps/desktop/src/renderer/src/lib/backlog.ts

@@ -2,11 +2,15 @@ import {
   type CalibrationModel,
   type CalibrationSample,
   calibrationSamples,
+  type CapacityMember,
+  capacityPerWorkday,
   COLD_START_THRESHOLD,
   type DependencyEdge,
   fitCalibration,
   forecast,
+  type Worker,
   type GiteaIssue,
+  type GiteaMilestone,
   inferLifecycle,
   type LifecycleColumn,
   type LifecycleEvent,
@@ -16,10 +20,17 @@ import {
   type ScheduledItem,
   selectFocus,
   toDurationModel,
+  workingDaysBetween,
 } from '@commitea/core'
 
-import { type BoardColumn, type BoardIssue, type CalibrationData, type FocusIssue } from '../data/fixtures.js'
+import {
-import { type BurnUpData, buildBurnUpData } from './dates.js'
+  type BoardColumn,
+  type BoardIssue,
+  type CalibrationData,
+  type FocusIssue,
+  type RunwayMilestone,
+} from '../data/fixtures.js'
+import { addWorkingDays, type BurnUpData, buildBurnUpData, formatRange, formatShort } from './dates.js'
 
 type Timelines = Record<number, LifecycleEvent[]>
 
@@ -99,9 +110,15 @@ function toSchedulable(issues: GiteaIssue[]) {
       labels: i.labels,
       estimateDays: i.facts.estimateDays,
       priority: i.facts.priority,
+      assignee: i.assignee,
     }))
 }
 
+/** gitea CapacityMembers → scheduler lanes (person + throughput). */
+export function capacityWorkers(members: CapacityMember[]): Worker[] {
+  return members.map((m) => ({ person: m.person, speed: capacityPerWorkday(m) }))
+}
+
 export interface ForecastView {
   scope: number
   cone: BurnUpData
@@ -124,9 +141,10 @@ export function forecastBacklog(
   deps: DependencyEdge[],
   today: Date = new Date(),
   calibration?: CalibrationModel,
+  workers: Worker[] = [],
 ): ForecastView | null {
   const model = calibration ? toDurationModel(calibration) : undefined
-  const f = forecast(toSchedulable(issues), deps, model ? { model } : {})
+  const f = forecast(toSchedulable(issues), deps, { ...(model ? { model } : {}), workers })
   const cone = buildBurnUpData(f, today)
   if (!cone) return null
   return {
@@ -232,3 +250,138 @@ export function scheduleFocus(
     later: toFocusIssue(f.later, inf),
   }
 }
+
+/**
+ * Per-milestone Monte Carlo forecast for the Runway screen — each open milestone's
+ * open scope gets its own cone, and the p80 landing is compared to the milestone's
+ * due date (ok/at-risk). Ranges, never point dates. Milestones with no open scope
+ * (already shipped) are omitted. Falls back to the demo when there's nothing real.
+ */
+export function runwayView(
+  issues: GiteaIssue[],
+  milestones: GiteaMilestone[],
+  deps: DependencyEdge[],
+  today: Date = new Date(),
+  workers: Worker[] = [],
+): RunwayMilestone[] {
+  const open = issues.filter((i) => i.state === 'open')
+  const rows = milestones
+    .filter((m) => m.state === 'open')
+    .map((m) => ({ m, scope: open.filter((i) => i.milestone?.id === m.id) }))
+    .filter((x) => x.scope.length > 0)
+    .map(({ m, scope }) => {
+      const f = forecast(
+        scope.map((i) => ({
+          number: i.number,
+          title: i.title,
+          labels: i.labels,
+          estimateDays: i.facts.estimateDays,
+          priority: i.facts.priority,
+          assignee: i.assignee,
+        })),
+        deps,
+        { workers },
+      )
+      const p90 = f.curve.length ? f.curve[f.curve.length - 1].p90Day : f.p95Day
+      const dueDay = m.dueOn ? workingDaysBetween(today, new Date(m.dueOn)) : null
+      return { m, p50: f.p50Day, p80: f.p80Day, p90, dueDay }
+    })
+
+  const horizon = Math.max(1, ...rows.map((r) => Math.max(r.p90, r.dueDay ?? 0)))
+
+  return rows.map(({ m, p50, p80, p90, dueDay }) => {
+    const onTrack = dueDay == null || p80 <= dueDay
+    return {
+      id: m.id,
+      name: m.title,
+      due: m.dueOn ? formatShort(new Date(m.dueOn)) : 'no date',
+      hard: false,
+      p80: formatRange(addWorkingDays(today, p50), addWorkingDays(today, p90)),
+      pos: p80 / horizon,
+      spread: Math.min(0.6, (p90 - p50) / horizon),
+      tone: onTrack ? ('ok' as const) : ('warn' as const),
+      note: dueDay == null ? `${Math.ceil(p80)}d of work` : onTrack ? 'on track' : 'at risk',
+    }
+  })
+}
+
+export interface MilestoneGroup {
+  label: string
+  issues: { id: number; title: string; labels: string[]; days?: string }[]
+}
+
+export interface MilestoneView {
+  name: string
+  due: string
+  soft: boolean
+  scopeCount: number
+  scopeEstDays: number
+  doneCount: number
+  donePct: number
+  /** p50..p90 landing range for the remaining open scope; null when nothing's open. */
+  forecastRange: string | null
+  cone: BurnUpData | null
+  groups: MilestoneGroup[]
+}
+
+/**
+ * The Milestone drill-in: real scope, done %, a Monte Carlo cone over the
+ * milestone's remaining open work, and its issues grouped by lifecycle column.
+ * Returns null for an unknown id — the screen then shows the demo fixture.
+ */
+export function milestoneView(
+  id: number,
+  issues: GiteaIssue[],
+  milestones: GiteaMilestone[],
+  deps: DependencyEdge[],
+  timelines: Timelines = {},
+  calibration?: CalibrationModel,
+  today: Date = new Date(),
+  workers: Worker[] = [],
+): MilestoneView | null {
+  const m = milestones.find((x) => x.id === id)
+  if (!m) return null
+  const all = issues.filter((i) => i.milestone?.id === id)
+  const open = all.filter((i) => i.state === 'open')
+  const done = all.filter((i) => i.state === 'closed')
+  const scopeEstDays = all.reduce((sum, i) => sum + (i.facts.estimateDays ?? 2), 0)
+
+  const model = calibration ? toDurationModel(calibration) : undefined
+  const f = forecast(
+    open.map((i) => ({
+      number: i.number,
+      title: i.title,
+      labels: i.labels,
+      estimateDays: i.facts.estimateDays,
+      priority: i.facts.priority,
+      assignee: i.assignee,
+    })),
+    deps,
+    { ...(model ? { model } : {}), workers },
+  )
+  const cone = buildBurnUpData(f, today)
+
+  const inf = inferAll(all, timelines, today)
+  const groups: MilestoneGroup[] = COLUMN_ORDER.map((key) => ({
+    label: COLUMN_LABELS[key],
+    issues: all
+      .filter((i) => inf.get(i.number)!.column === key)
+      .map((i) => {
+        const days = inf.get(i.number)!.steepingDays
+        return { id: i.number, title: i.title, labels: i.labels, days: days != null ? `${days}d` : undefined }
+      }),
+  })).filter((g) => g.issues.length > 0)
+
+  return {
+    name: m.title,
+    due: m.dueOn ? formatShort(new Date(m.dueOn)) : 'no date',
+    soft: true,
+    scopeCount: all.length,
+    scopeEstDays,
+    doneCount: done.length,
+    donePct: all.length ? Math.round((done.length / all.length) * 100) : 0,
+    forecastRange: cone ? cone.rangeLabel : null,
+    cone,
+    groups,
+  }
+}

apps/desktop/src/renderer/src/lib/use-backlog.ts

@@ -12,13 +12,18 @@ export type BacklogState =
       milestones: GiteaMilestone[]
       deps: DependencyEdge[]
       timelines: Record<number, LifecycleEvent[]>
+      /** true while showing the persisted snapshot (instant boot / offline). */
+      stale: boolean
+      /** ISO time the shown snapshot was reconciled, when stale. */
+      savedAt?: string
     }
 
 /**
- * Reconcile the managed repo through the main-process bridge. Runs once on
+ * Reconcile the managed repo through the main-process bridge, stale-while-
- * mount; the returned `refetch` re-reconciles after a write so the board and
+ * revalidate: on mount it shows the persisted snapshot instantly (marked stale),
- * forecast reflect the change. `unconfigured` means no token — the UI falls
+ * then a fresh reconcile supersedes it. If gitea is unreachable, the fresh
- * back to demo fixtures. Errors (network, bad token) surface as `error`.
+ * reconcile falls back to the persisted snapshot (offline). `refetch` re-syncs
+ * after a write. `unconfigured` means no token — the UI uses demo fixtures.
  */
 export function useBacklog(): [BacklogState, () => void] {
   const [state, setState] = useState<BacklogState>({ status: 'loading' })
@@ -27,6 +32,30 @@ export function useBacklog(): [BacklogState, () => void] {
 
   useEffect(() => {
     let alive = true
+
+    // instant boot from the persisted snapshot (only on first mount, not refetch)
+    if (nonce === 0) {
+      window.commitea.gitea
+        .boot()
+        .then((b) => {
+          if (!alive || !('cached' in b) || !b.cached) return
+          setState((prev) =>
+            prev.status === 'ready' && !prev.stale
+              ? prev // a fresh reconcile already won the race
+              : {
+                  status: 'ready',
+                  issues: b.issues,
+                  milestones: b.milestones,
+                  deps: b.deps,
+                  timelines: b.timelines,
+                  stale: true,
+                  savedAt: b.savedAt,
+                },
+          )
+        })
+        .catch(() => {})
+    }
+
     window.commitea.gitea
       .reconcile()
       .then((r) => {
@@ -39,12 +68,19 @@ export function useBacklog(): [BacklogState, () => void] {
                 milestones: r.milestones,
                 deps: r.deps,
                 timelines: r.timelines,
+                stale: r.stale ?? false,
+                savedAt: r.savedAt,
               }
             : { status: 'unconfigured' },
         )
       })
       .catch((e: unknown) => {
-        if (alive) setState({ status: 'error', message: e instanceof Error ? e.message : String(e) })
+        if (alive) {
+          // keep a shown boot snapshot rather than clobbering it with an error
+          setState((prev) =>
+            prev.status === 'ready' ? prev : { status: 'error', message: e instanceof Error ? e.message : String(e) },
+          )
+        }
       })
     return () => {
       alive = false

apps/desktop/src/renderer/src/lib/use-capacity.ts

@@ -0,0 +1,24 @@
+import { useEffect, useState } from 'react'
+
+import type { CapacityMember } from '@commitea/core'
+
+/**
+ * The team's capacity config from the pm-state repo. Empty when unconfigured —
+ * forecasts then fall back to a single serial worker. Read once on mount.
+ */
+export function useCapacity(): CapacityMember[] {
+  const [members, setMembers] = useState<CapacityMember[]>([])
+  useEffect(() => {
+    let alive = true
+    window.commitea.pmstate
+      .capacity()
+      .then((r) => {
+        if (alive) setMembers(r.members)
+      })
+      .catch(() => {})
+    return () => {
+      alive = false
+    }
+  }, [])
+  return members
+}

apps/desktop/src/renderer/src/lib/use-chat.ts

@@ -1,14 +1,19 @@
 import { useCallback, useEffect, useRef, useState } from 'react'
 
-import type { ChatMessage as WireMessage } from '@commitea/core'
+import type { ChangeProposal, ChatMessage as WireMessage, IssueChange } from '@commitea/core'
 
-import { CANNED_REPLY, CHAT, type ChatMessage } from '../data/fixtures.js'
+import { CHAT, type ChatMessage } from '../data/fixtures.js'
 
 const LIVE_GREETING: ChatMessage = {
   from: 'agent',
   text: 'Morning. Ask me anything about the project — I check the real board before I answer.',
 }
 
+const NO_MODEL: ChatMessage = {
+  from: 'agent',
+  text: "Reginald is off — I need a model. Add a Model URL in Settings and chat turns on.",
+}
+
 export interface ChatState {
   msgs: ChatMessage[]
   thinking: boolean
@@ -18,7 +23,13 @@ export interface ChatState {
   model: string | null
   /** Tools Reginald consulted on the last turn (for a subtle activity line). */
   steps: string[]
+  /** Changes Reginald has proposed and is awaiting approval on. */
+  proposals: ChangeProposal[]
+  /** The in-flight streamed prose (grows token-by-token) before the turn finalizes. */
+  streaming: string
   send: (text: string) => void
+  approve: (p: ChangeProposal) => void
+  dismiss: (p: ChangeProposal) => void
 }
 
 /**
@@ -26,27 +37,37 @@ export interface ChatState {
  * turn through the main-process bridge (which runs the tool loop). Otherwise it
  * echoes the scripted fixture reply, so the layout stays real with no model and
  * fixture e2e is unaffected. The fixture greeting is display-only — only real
- * turns (`convo`) are sent to the model as history.
+ * turns (`convo`) are sent to the model as history. `onApplyChange` performs an
+ * approved write (the same handler the Issue screen uses — it refetches).
  */
-export function useChat(): ChatState {
+export function useChat(onApplyChange?: (change: IssueChange) => Promise<{ ok: boolean }>): ChatState {
   const [seed, setSeed] = useState<ChatMessage[]>(CHAT)
   const [convo, setConvo] = useState<ChatMessage[]>([])
   const [thinking, setThinking] = useState(false)
   const [live, setLive] = useState(false)
   const [model, setModel] = useState<string | null>(null)
   const [steps, setSteps] = useState<string[]>([])
+  const [proposals, setProposals] = useState<ChangeProposal[]>([])
+  const [streaming, setStreaming] = useState('')
   const convoRef = useRef(convo)
   convoRef.current = convo
 
+  const proposalKey = (p: ChangeProposal) => `${p.change.issue}:${p.change.kind}`
+  const drop = (p: ChangeProposal) => setProposals((ps) => ps.filter((x) => proposalKey(x) !== proposalKey(p)))
+
   useEffect(() => {
     let alive = true
     window.commitea.model
       .status()
       .then((s) => {
-        if (alive && s.configured) {
+        if (!alive) return
+        if (s.configured) {
           setLive(true)
           setModel(s.model)
           setSeed([LIVE_GREETING])
+        } else {
+          // no model → clean "off" state, not a scripted fixture reply
+          setSeed([NO_MODEL])
         }
       })
       .catch(() => {})
@@ -63,12 +84,11 @@ export function useChat(): ChatState {
       setConvo(nextConvo)
       setThinking(true)
       setSteps([])
+      setProposals([])
 
       if (!live) {
-        window.setTimeout(() => {
+        // no model configured — nothing to send (composer is disabled anyway)
         setThinking(false)
-          setConvo((c) => [...c, { from: 'agent', text: CANNED_REPLY }])
-        }, 900)
         return
       }
 
@@ -76,12 +96,20 @@ export function useChat(): ChatState {
         role: m.from === 'user' ? 'user' : 'assistant',
         content: m.text,
       }))
+      setStreaming('')
+      const unsubscribe = window.commitea.model.onToken((delta) => setStreaming((s) => s + delta))
+      const finish = () => {
+        unsubscribe()
+        setThinking(false)
+        setStreaming('')
+      }
       window.commitea.model
         .chat(wire)
         .then((res) => {
-          setThinking(false)
+          finish()
           if (res.ok) {
             setSteps(res.steps.map((s) => s.tool))
+            setProposals(res.proposals)
             setConvo((c) => [...c, { from: 'agent', text: res.content || '…' }])
           } else {
             setConvo((c) => [
@@ -94,12 +122,37 @@ export function useChat(): ChatState {
           }
         })
         .catch(() => {
-          setThinking(false)
+          finish()
           setConvo((c) => [...c, { from: 'agent', text: 'I could not reach the model.' }])
         })
     },
     [live],
   )
 
-  return { msgs: [...seed, ...convo], thinking, live, model, steps, send }
+  const approve = useCallback(
+    (p: ChangeProposal) => {
+      if (!onApplyChange) return
+      drop(p)
+      const label = p.plan.added[0] ?? p.plan.removed[0] ?? 'change'
+      void onApplyChange(p.change).then((res) => {
+        setConvo((c) => [
+          ...c,
+          {
+            from: 'agent',
+            text: res.ok
+              ? `Done — #${p.change.issue} is now ${label}. The plan's been re-run.`
+              : `That didn't take — #${p.change.issue} is unchanged.`,
+          },
+        ])
+      })
+    },
+    [onApplyChange],
+  )
+
+  const dismiss = useCallback((p: ChangeProposal) => {
+    drop(p)
+    setConvo((c) => [...c, { from: 'agent', text: `Left #${p.change.issue} as it was.` }])
+  }, [])
+
+  return { msgs: [...seed, ...convo], thinking, live, model, steps, proposals, streaming, send, approve, dismiss }
 }

packages/core/src/agent/agent-live.test.ts

@@ -1,4 +1,4 @@
-import { describe, expect, it } from 'vitest'
+import { beforeAll, describe, expect, it } from 'vitest'
 
 import { extractLabelFacts } from '../labels/label-schema.js'
 import type { FetchLike, GiteaIssue } from '../gitea/types.js'
@@ -10,11 +10,22 @@ import { buildProjectView, type ProjectSnapshot } from './query-project.js'
 /**
  * Opt-in (COMMITEA_MODEL_LIVE=1). Drives the real chat client + agent loop
  * against a local OpenAI-compatible server (LM Studio on :1234 by default),
- * proving the model calls query_project and narrates the real result.
+ * proving the model calls the tools and narrates the real result. The model is
+ * whatever is loaded (via LM Studio's native API), so it never JIT-swaps.
  */
 const LIVE = !!process.env.COMMITEA_MODEL_LIVE
 const BASE = process.env.COMMITEA_MODEL_URL ?? 'http://localhost:1234/v1'
-const MODEL = process.env.COMMITEA_MODEL_SMALL ?? 'google/gemma-4-e4b'
+let MODEL = process.env.COMMITEA_MODEL_SMALL ?? ''
+
+beforeAll(async () => {
+  if (!LIVE || MODEL) return
+  const root = BASE.replace(/\/v1\/?$/, '')
+  const loaded = await fetch(`${root}/api/v0/models`)
+    .then((r) => (r.ok ? (r.json() as Promise<{ data?: { id: string; state?: string; type?: string }[] }>) : null))
+    .then((d) => d?.data?.find((m) => m.state === 'loaded' && m.type !== 'embeddings')?.id)
+    .catch(() => undefined)
+  MODEL = loaded ?? 'google/gemma-4-e4b'
+})
 
 function issue(over: Partial<GiteaIssue>): GiteaIssue {
   const labels = over.labels ?? []
@@ -59,4 +70,34 @@ describe('agent loop (live model)', () => {
     },
     60_000,
   )
+
+  it.skipIf(!LIVE)(
+    'records a standing instruction via record_directive',
+    async () => {
+      const client = createChatClient({ baseUrl: BASE, model: MODEL }, globalThis.fetch as unknown as FetchLike)
+      const recorded: unknown[] = []
+      const turn = await runAgentTurn({
+        complete: (m, t) => client.complete(m, t),
+        messages: [
+          { role: 'system', content: REGINALD_SYSTEM },
+          { role: 'user', content: 'Log this standing directive: pilots come first, everything else waits.' },
+        ],
+        tools: REGINALD_TOOLS,
+        execute: async (name, args) => {
+          if (name === 'record_directive') {
+            recorded.push(args)
+            return { recorded: { kind: (args as { kind?: string }).kind ?? 'note' } }
+          }
+          return name === 'query_project'
+            ? buildProjectView((args as { view: any }).view, (args as any).filters, SNAP, new Date())
+            : { error: `unknown tool ${name}` }
+        },
+      })
+
+      // the model logged the directive rather than trying to apply it
+      expect(turn.steps.some((s) => s.tool === 'record_directive')).toBe(true)
+      expect(recorded.length).toBeGreaterThan(0)
+    },
+    60_000,
+  )
 })

packages/core/src/agent/agent-loop.ts

@@ -31,18 +31,20 @@ function stringify(result: unknown): string {
 }
 
 export async function runAgentTurn(opts: {
-  complete: (messages: ChatMessage[], tools?: ToolDecl[]) => Promise<CompletionResult>
+  complete: (messages: ChatMessage[], tools?: ToolDecl[], onToken?: (delta: string) => void) => Promise<CompletionResult>
   messages: ChatMessage[]
   tools: ToolDecl[]
   execute: ToolExecutor
   maxSteps?: number
+  /** Streams content deltas as the model produces prose (final-answer streaming). */
+  onToken?: (delta: string) => void
 }): Promise<AgentTurn> {
   const maxSteps = opts.maxSteps ?? DEFAULT_MAX_STEPS
   const convo: ChatMessage[] = [...opts.messages]
   const steps: AgentStep[] = []
 
   for (let step = 0; step < maxSteps; step++) {
-    const { content, toolCalls } = await opts.complete(convo, opts.tools)
+    const { content, toolCalls } = await opts.complete(convo, opts.tools, opts.onToken)
     if (toolCalls.length === 0) {
       convo.push({ role: 'assistant', content })
       return { content, steps, messages: convo }
@@ -63,7 +65,7 @@ export async function runAgentTurn(opts: {
   }
 
   // Out of tool budget — force a final prose answer with tools withheld.
-  const final = await opts.complete(convo, [])
+  const final = await opts.complete(convo, [], opts.onToken)
   convo.push({ role: 'assistant', content: final.content })
   return { content: final.content, steps, messages: convo }
 }

packages/core/src/agent/agent-tools.ts

@@ -35,12 +35,57 @@ export const QUERY_PROJECT_TOOL: ToolDecl = {
   },
 }
 
-export const REGINALD_TOOLS: ToolDecl[] = [QUERY_PROJECT_TOOL]
+export const PROPOSE_CHANGE_TOOL: ToolDecl = {
+  name: 'propose_change',
+  description:
+    "Propose an estimate and/or priority change to an issue. This does NOT apply anything — it shows the " +
+    'human a diff to approve. Use it whenever the user asks to re-estimate or reprioritize. After calling it, ' +
+    "tell the user you've *proposed* the change for approval — never say it is done.",
+  parameters: {
+    type: 'object',
+    properties: {
+      issue: { type: 'number', description: 'the issue number to change' },
+      estimate: { type: 'string', enum: ['est/1d', 'est/2d', 'est/3d', 'est/5d', 'est/8d'] },
+      priority: { type: 'string', enum: ['p/1', 'p/2', 'p/3', 'p/4'] },
+    },
+    required: ['issue'],
+  },
+}
+
+export const RECORD_DIRECTIVE_TOOL: ToolDecl = {
+  name: 'record_directive',
+  description:
+    'Log a standing instruction from the PM to the durable directive ledger — a reprioritization, ' +
+    'a re-estimate policy, a deadline, a scope or capacity call, or a plain note. Use it when the user ' +
+    'states intent that should persist ("pilots come first", "freeze scope for beta"). This records the ' +
+    'intent verbatim; the actual issue edits still go through propose_change.',
+  parameters: {
+    type: 'object',
+    properties: {
+      kind: { type: 'string', enum: ['reprioritize', 'reestimate', 'set-deadline', 'scope', 'capacity', 'note'] },
+      quote: { type: 'string', description: "the PM's own words, stored verbatim" },
+      target: {
+        type: 'object',
+        properties: {
+          issue: { type: 'number' },
+          milestone: { type: 'number' },
+          member: { type: 'string' },
+        },
+      },
+      rationale: { type: 'string', description: 'why (optional)' },
+    },
+    required: ['kind', 'quote'],
+  },
+}
+
+export const REGINALD_TOOLS: ToolDecl[] = [QUERY_PROJECT_TOOL, PROPOSE_CHANGE_TOOL, RECORD_DIRECTIVE_TOOL]
 
 export const REGINALD_SYSTEM = [
   'You are Reginald, the calm, dry project manager inside CommiTea — a tool that runs projects on Gitea.',
   'Call query_project to ground every answer in the real project; never invent issues, numbers, or dates.',
   'The scheduler and forecasts are deterministic code — report their output, do not recompute it.',
-  'Forecasts are ranges, never single dates. Refer to issues as #<number>.',
+  'To change an estimate or priority, call propose_change — it shows the human a diff to approve.',
-  'Be brief and plain. A sentence or two is usually enough. No preamble, no bullet-point dumps.',
+  'When the PM states standing intent ("pilots first", "freeze scope"), call record_directive to log it.',
+  'Never claim a change is applied; you propose, the human approves. Forecasts are ranges, never single dates.',
+  'Refer to issues as #<number>. Be brief and plain — a sentence or two. No preamble, no bullet dumps.',
 ].join(' ')

packages/core/src/agent/agent.test.ts

@@ -25,6 +25,48 @@ describe('createChatClient', () => {
     return { fetch, calls }
   }
 
+  function sseStub(chunks: string[]) {
+    const calls: { url: string; body: unknown }[] = []
+    const fetch: FetchLike = (url, init) => {
+      calls.push({ url, body: init?.body ? JSON.parse(init.body) : undefined })
+      const enc = new TextEncoder()
+      const body = new ReadableStream<Uint8Array>({
+        start(c) {
+          for (const ch of chunks) c.enqueue(enc.encode(ch))
+          c.close()
+        },
+      })
+      return Promise.resolve({ ok: true, status: 200, body, json: () => Promise.resolve({}), text: () => Promise.resolve('') })
+    }
+    return { fetch, calls }
+  }
+
+  it('streams content deltas via onToken and returns the assembled result', async () => {
+    const { fetch, calls } = sseStub([
+      'data: {"choices":[{"delta":{"content":"Right "}}]}\n\n',
+      'data: {"choices":[{"delta":{"content":"now: #2."}}]}\n\n',
+      'data: [DONE]\n\n',
+    ])
+    const client = createChatClient({ baseUrl: 'http://x/v1', model: 'm' }, fetch)
+    const tokens: string[] = []
+    const res = await client.complete([{ role: 'user', content: 'now?' }], undefined, (d) => tokens.push(d))
+
+    expect(tokens).toEqual(['Right ', 'now: #2.'])
+    expect(res.content).toBe('Right now: #2.')
+    expect((calls[0].body as { stream?: boolean }).stream).toBe(true)
+  })
+
+  it('assembles a streamed tool call from argument deltas', async () => {
+    const { fetch } = sseStub([
+      'data: {"choices":[{"delta":{"tool_calls":[{"index":0,"id":"c1","function":{"name":"query_project","arguments":"{\\"view\\""}}]}}]}\n\n',
+      'data: {"choices":[{"delta":{"tool_calls":[{"index":0,"function":{"arguments":":\\"focus\\"}"}}]}}]}\n\n',
+      'data: [DONE]\n\n',
+    ])
+    const client = createChatClient({ baseUrl: 'http://x/v1', model: 'm' }, fetch)
+    const res = await client.complete([{ role: 'user', content: 'x' }], [{ name: 'query_project', description: '', parameters: {} }], () => {})
+    expect(res.toolCalls).toEqual([{ id: 'c1', name: 'query_project', arguments: '{"view":"focus"}' }])
+  })
+
   it('POSTs to /chat/completions and parses content', async () => {
     const { fetch, calls } = stub({ choices: [{ message: { content: 'the focus is #2' } }] })
     const client = createChatClient({ baseUrl: 'http://localhost:1234/v1', model: 'gemma' }, fetch)

packages/core/src/agent/capture-work.test.ts

@@ -0,0 +1,65 @@
+import { describe, expect, it } from 'vitest'
+
+import type { CompletionResult } from './chat-client.js'
+import { captureWork, parseCaptureArgs } from './capture-work.js'
+
+describe('parseCaptureArgs', () => {
+  it('validates issues and keeps only real titles + valid labels', () => {
+    const p = parseCaptureArgs({
+      issues: [
+        { title: 'Fix token refresh', body: 'dies silently', estimate: 'est/2d', priority: 'p/1' },
+        { title: '  ', body: 'blank title dropped' },
+        { title: 'Docs', estimate: 'est/9d', priority: 'urgent' }, // invalid labels → dropped to undefined
+      ],
+      consequence: 'Beta slips a day',
+    })
+    expect(p.issues).toHaveLength(2)
+    expect(p.issues[0]).toEqual({ title: 'Fix token refresh', body: 'dies silently', estimate: 'est/2d', priority: 'p/1' })
+    expect(p.issues[1]).toEqual({ title: 'Docs', body: '', estimate: undefined, priority: undefined })
+    expect(p.consequence).toBe('Beta slips a day')
+  })
+
+  it('tolerates a missing/!array issues field', () => {
+    expect(parseCaptureArgs({}).issues).toEqual([])
+    expect(parseCaptureArgs({ issues: 'nope' }).issues).toEqual([])
+  })
+})
+
+describe('captureWork', () => {
+  it('forces propose_issues and returns the validated set', async () => {
+    const result: CompletionResult = {
+      content: '',
+      toolCalls: [
+        {
+          id: 'c1',
+          name: 'propose_issues',
+          arguments: JSON.stringify({
+            issues: [{ title: 'Retry token refresh with backoff', body: '', estimate: 'est/2d', priority: 'p/2' }],
+            consequence: 'no material shift',
+          }),
+        },
+      ],
+    }
+    let sawTool = ''
+    const proposal = await captureWork(async (_m, tools) => {
+      sawTool = tools?.[0]?.name ?? ''
+      return result
+    }, 'auth is flaky, token refresh dies')
+    expect(sawTool).toBe('propose_issues')
+    expect(proposal.issues[0].title).toBe('Retry token refresh with backoff')
+    expect(proposal.consequence).toBe('no material shift')
+  })
+
+  it('returns an empty set when the model answers without the tool', async () => {
+    const proposal = await captureWork(async () => ({ content: 'I need more detail.', toolCalls: [] }), 'vague')
+    expect(proposal.issues).toEqual([])
+  })
+
+  it('survives malformed tool arguments', async () => {
+    const proposal = await captureWork(
+      async () => ({ content: '', toolCalls: [{ id: 'c1', name: 'propose_issues', arguments: '{not json' }] }),
+      'x',
+    )
+    expect(proposal.issues).toEqual([])
+  })
+})

packages/core/src/agent/capture-work.ts

@@ -0,0 +1,109 @@
+/**
+ * capture_work — braindump → a small set of concrete issues. This is the one
+ * place the big model earns its keep (decomposition + estimate negotiation).
+ * It returns a *proposal*; nothing is filed until the human approves it in the
+ * Capture tray and it goes through the create-issue write path. Pure
+ * orchestration over an injected `complete` — stubbable, so it's testable offline.
+ */
+
+import {
+  type EstimateLabel,
+  ESTIMATE_LABELS,
+  type PriorityLabel,
+  PRIORITY_LABELS,
+} from '../labels/label-schema.js'
+import type { ChatMessage, CompletionResult, ToolDecl } from './chat-client.js'
+
+export interface ProposedIssue {
+  title: string
+  body: string
+  estimate?: EstimateLabel
+  priority?: PriorityLabel
+}
+
+export interface CaptureProposal {
+  issues: ProposedIssue[]
+  /** One-line schedule impact, if the model offered one. */
+  consequence?: string
+}
+
+export const PROPOSE_ISSUES_TOOL: ToolDecl = {
+  name: 'propose_issues',
+  description: 'Return the decomposed issue set for a braindump. Call this exactly once.',
+  parameters: {
+    type: 'object',
+    properties: {
+      issues: {
+        type: 'array',
+        items: {
+          type: 'object',
+          properties: {
+            title: { type: 'string', description: 'a clear imperative title' },
+            body: { type: 'string', description: 'one or two lines of detail' },
+            estimate: { type: 'string', enum: ['est/1d', 'est/2d', 'est/3d', 'est/5d', 'est/8d'] },
+            priority: { type: 'string', enum: ['p/1', 'p/2', 'p/3', 'p/4'] },
+          },
+          required: ['title'],
+        },
+      },
+      consequence: { type: 'string', description: 'one-line note on the schedule impact' },
+    },
+    required: ['issues'],
+  },
+}
+
+export const CAPTURE_SYSTEM = [
+  'You are Reginald, decomposing a rough braindump into a small set of concrete Gitea issues.',
+  'Call propose_issues exactly once. Split genuinely separate work; merge trivially-coupled work; invent no scope.',
+  'Each issue gets an imperative title, a one-line body, an estimate (est/1d…8d) and a priority (p/1…4).',
+  'Estimate honestly — a "quick" task is rarely one day. Keep the set tight; three good issues beat eight vague ones.',
+].join(' ')
+
+function isEstimate(v: unknown): v is EstimateLabel {
+  return typeof v === 'string' && (ESTIMATE_LABELS as readonly string[]).includes(v)
+}
+function isPriority(v: unknown): v is PriorityLabel {
+  return typeof v === 'string' && (PRIORITY_LABELS as readonly string[]).includes(v)
+}
+
+/** Coerce the model's raw propose_issues args into a validated proposal. */
+export function parseCaptureArgs(args: unknown): CaptureProposal {
+  const a = (args ?? {}) as { issues?: unknown[]; consequence?: unknown }
+  const issues: ProposedIssue[] = []
+  for (const raw of Array.isArray(a.issues) ? a.issues : []) {
+    const r = (raw ?? {}) as Record<string, unknown>
+    const title = typeof r.title === 'string' ? r.title.trim() : ''
+    if (!title) continue
+    issues.push({
+      title,
+      body: typeof r.body === 'string' ? r.body : '',
+      estimate: isEstimate(r.estimate) ? r.estimate : undefined,
+      priority: isPriority(r.priority) ? r.priority : undefined,
+    })
+  }
+  return { issues, consequence: typeof a.consequence === 'string' ? a.consequence : undefined }
+}
+
+/**
+ * Run one decomposition turn. Forces the model to answer via propose_issues and
+ * returns the validated set. An empty set means the model declined to structure it.
+ */
+export async function captureWork(
+  complete: (messages: ChatMessage[], tools?: ToolDecl[]) => Promise<CompletionResult>,
+  braindump: string,
+): Promise<CaptureProposal> {
+  const res = await complete(
+    [
+      { role: 'system', content: CAPTURE_SYSTEM },
+      { role: 'user', content: braindump },
+    ],
+    [PROPOSE_ISSUES_TOOL],
+  )
+  const call = res.toolCalls.find((t) => t.name === 'propose_issues')
+  if (!call) return { issues: [] }
+  try {
+    return parseCaptureArgs(JSON.parse(call.arguments || '{}'))
+  } catch {
+    return { issues: [] }
+  }
+}

packages/core/src/agent/chat-client.ts

@@ -48,8 +48,12 @@ export interface CompletionResult {
   toolCalls: ToolCall[]
 }
 
+/** Called with each streamed content delta (final-prose streaming). */
+export type OnToken = (delta: string) => void
+
 export interface ChatClient {
-  complete(messages: ChatMessage[], tools?: ToolDecl[]): Promise<CompletionResult>
+  /** When `onToken` is given, the response streams (SSE) and each content delta is emitted. */
+  complete(messages: ChatMessage[], tools?: ToolDecl[], onToken?: OnToken): Promise<CompletionResult>
 }
 
 /** Map our message shape to the OpenAI wire shape. */
@@ -85,7 +89,7 @@ export function createChatClient(config: ModelConfig, fetchImpl: FetchLike): Cha
   const url = `${config.baseUrl.replace(/\/+$/, '')}/chat/completions`
 
   return {
-    async complete(messages, tools) {
+    async complete(messages, tools, onToken) {
       const body: Record<string, unknown> = {
         model: config.model,
         messages: messages.map(toWireMessage),
@@ -95,11 +99,13 @@ export function createChatClient(config: ModelConfig, fetchImpl: FetchLike): Cha
         body.tools = tools.map(toWireTool)
         body.tool_choice = 'auto'
       }
+      const stream = !!onToken
+      if (stream) body.stream = true
       const res = await fetchImpl(url, {
         method: 'POST',
         headers: {
           'Content-Type': 'application/json',
-          Accept: 'application/json',
+          Accept: stream ? 'text/event-stream' : 'application/json',
           ...(config.apiKey ? { Authorization: `Bearer ${config.apiKey}` } : {}),
         },
         body: JSON.stringify(body),
@@ -108,6 +114,8 @@ export function createChatClient(config: ModelConfig, fetchImpl: FetchLike): Cha
         const text = await res.text().catch(() => '')
         throw new Error(`model completion failed (${res.status}): ${text.slice(0, 200)}`)
       }
+      if (stream && res.body) return readStream(res.body, onToken!)
+
       const json = (await res.json()) as { choices?: { message: RawChoiceMessage }[] }
       const msg = json.choices?.[0]?.message
       return {
@@ -121,3 +129,56 @@ export function createChatClient(config: ModelConfig, fetchImpl: FetchLike): Cha
     },
   }
 }
+
+/** Streamed tool-call delta: name arrives first, arguments accumulate across chunks. */
+interface RawToolDelta {
+  index: number
+  id?: string
+  function?: { name?: string; arguments?: string }
+}
+
+/** Parse an OpenAI SSE stream: emit content deltas via onToken, accumulate the final result. */
+async function readStream(body: ReadableStream<Uint8Array>, onToken: OnToken): Promise<CompletionResult> {
+  const reader = body.getReader()
+  const decoder = new TextDecoder()
+  let buffer = ''
+  let content = ''
+  const toolAcc: { id: string; name: string; arguments: string }[] = []
+
+  const handle = (data: string) => {
+    if (data === '[DONE]') return
+    let chunk: { choices?: { delta?: { content?: string; tool_calls?: RawToolDelta[] } }[] }
+    try {
+      chunk = JSON.parse(data)
+    } catch {
+      return
+    }
+    const delta = chunk.choices?.[0]?.delta
+    if (!delta) return
+    if (delta.content) {
+      content += delta.content
+      onToken(delta.content)
+    }
+    for (const tc of delta.tool_calls ?? []) {
+      const slot = (toolAcc[tc.index] ??= { id: '', name: '', arguments: '' })
+      if (tc.id) slot.id = tc.id
+      if (tc.function?.name) slot.name = tc.function.name
+      if (tc.function?.arguments) slot.arguments += tc.function.arguments
+    }
+  }
+
+  for (;;) {
+    const { done, value } = await reader.read()
+    if (done) break
+    buffer += decoder.decode(value, { stream: true })
+    const lines = buffer.split('\n')
+    buffer = lines.pop() ?? ''
+    for (const line of lines) {
+      const t = line.trim()
+      if (t.startsWith('data:')) handle(t.slice(5).trim())
+    }
+  }
+  if (buffer.trim().startsWith('data:')) handle(buffer.trim().slice(5).trim())
+
+  return { content, toolCalls: toolAcc.filter((t) => t.name).map((t) => ({ id: t.id, name: t.name, arguments: t.arguments })) }
+}

packages/core/src/capacity/capacity-v0.test.ts

@@ -0,0 +1,88 @@
+import { describe, expect, it } from 'vitest'
+
+import { type DependencyEdge, type SchedulableIssue } from '../scheduler/scheduler-v0.js'
+import { makespan, scheduleWithCapacity, type Worker } from '../scheduler/scheduler-capacity-v0.js'
+import { capacityPerWorkday, parseCapacityConfig } from './capacity-v0.js'
+
+describe('capacity model', () => {
+  it('capacityPerWorkday = focusFactor × allocation', () => {
+    expect(capacityPerWorkday({ person: 'a', focusFactor: 0.8, allocation: 0.5 })).toBeCloseTo(0.4)
+  })
+
+  it('parses + clamps config, drops invalid members', () => {
+    const members = parseCapacityConfig({
+      members: [
+        { person: 'christian', focusFactor: 0.8, allocation: 1 },
+        { person: 'ak', focusFactor: 1.5, allocation: -1 }, // clamps to 1 / 0 → zero capacity → dropped
+        { focusFactor: 0.8 }, // no person → dropped
+      ],
+    })
+    expect(members).toEqual([{ person: 'christian', focusFactor: 0.8, allocation: 1 }])
+  })
+
+  it('returns [] for a non-array/absent members field', () => {
+    expect(parseCapacityConfig({})).toEqual([])
+    expect(parseCapacityConfig({ members: 'nope' })).toEqual([])
+  })
+})
+
+function issue(number: number, over: Partial<SchedulableIssue> = {}): SchedulableIssue {
+  return { number, title: `#${number}`, labels: [], estimateDays: 4, priority: 2, ...over }
+}
+
+describe('scheduleWithCapacity', () => {
+  it('with no workers, falls back to the single serial plan', () => {
+    const issues = [issue(1), issue(2)]
+    const plan = scheduleWithCapacity(issues, [], [])
+    expect(makespan(plan)).toBe(8) // 4 + 4 serial
+  })
+
+  it('parallelizes independent work across lanes (makespan shrinks)', () => {
+    const issues = [issue(1), issue(2), issue(3), issue(4)] // 4×4d = 16d serial
+    const one: Worker[] = [{ person: 'a', speed: 1 }]
+    const two: Worker[] = [
+      { person: 'a', speed: 1 },
+      { person: 'b', speed: 1 },
+    ]
+    expect(makespan(scheduleWithCapacity(issues, [], one))).toBe(16)
+    expect(makespan(scheduleWithCapacity(issues, [], two))).toBe(8) // two lanes → half
+  })
+
+  it('scales duration by a lane speed (slower lane takes longer)', () => {
+    const plan = scheduleWithCapacity([issue(1, { estimateDays: 4 })], [], [{ person: 'a', speed: 0.5 }])
+    expect(plan.items[0].durationDays).toBe(8) // 4 / 0.5
+    expect(plan.items[0].worker).toBe('a')
+  })
+
+  it('routes an issue to its assignee lane', () => {
+    const issues = [issue(1, { assignee: 'ak' }), issue(2, { assignee: 'sm' })]
+    const workers: Worker[] = [
+      { person: 'ak', speed: 1 },
+      { person: 'sm', speed: 1 },
+    ]
+    const plan = scheduleWithCapacity(issues, [], workers)
+    const byN = Object.fromEntries(plan.items.map((i) => [i.number, i]))
+    expect(byN[1].worker).toBe('ak')
+    expect(byN[2].worker).toBe('sm')
+    // both start at 0 (different lanes) → parallel
+    expect(byN[1].startDay).toBe(0)
+    expect(byN[2].startDay).toBe(0)
+  })
+
+  it('adds a lane for an assignee not in the config (mean speed)', () => {
+    const plan = scheduleWithCapacity([issue(1, { assignee: 'newbie' })], [], [{ person: 'a', speed: 0.5 }])
+    expect(plan.items[0].worker).toBe('newbie')
+    expect(plan.items[0].durationDays).toBe(8) // mean speed 0.5 → 4/0.5
+  })
+
+  it('respects dependencies across lanes (a blocker finishes before its dependent starts)', () => {
+    const edges: DependencyEdge[] = [{ issue: 2, dependsOn: 1 }]
+    const workers: Worker[] = [
+      { person: 'a', speed: 1 },
+      { person: 'b', speed: 1 },
+    ]
+    const plan = scheduleWithCapacity([issue(1), issue(2)], edges, workers)
+    const byN = Object.fromEntries(plan.items.map((i) => [i.number, i]))
+    expect(byN[2].startDay).toBeGreaterThanOrEqual(byN[1].endDay) // #2 waits for #1 even on another lane
+  })
+})

packages/core/src/capacity/capacity-v0.ts

@@ -0,0 +1,49 @@
+/**
+ * Capacity model (#8). A member's throughput is `focusFactor × allocation` =
+ * ideal person-days of project work delivered per calendar working day. The
+ * scheduler treats each member as a lane whose task durations are scaled by that
+ * rate (a 0.5-capacity person takes twice as long on an est/2d task). Config
+ * lives in the pm-state repo (`capacity/members.yaml/json`, D4); estimates are
+ * in ideal person-days (pm-state.md).
+ */
+
+export interface CapacityMember {
+  /** gitea login. */
+  person: string
+  /** Productive fraction of a working day (0..1). */
+  focusFactor: number
+  /** Fraction of that allocated to this project (0..1). */
+  allocation: number
+}
+
+/** Ideal person-days delivered per calendar working day. */
+export function capacityPerWorkday(m: CapacityMember): number {
+  return m.focusFactor * m.allocation
+}
+
+function clamp01(n: unknown, fallback: number): number {
+  return typeof n === 'number' && Number.isFinite(n) ? Math.min(1, Math.max(0, n)) : fallback
+}
+
+/**
+ * Validate a raw capacity config (`{ members: [...] }`) into members. Unknown
+ * shapes degrade to `[]` (→ the scheduler falls back to a single worker), never
+ * throw. focusFactor/allocation clamp to [0,1]; a member without a person is dropped.
+ */
+export function parseCapacityConfig(raw: unknown): CapacityMember[] {
+  const list = (raw as { members?: unknown })?.members
+  if (!Array.isArray(list)) return []
+  const out: CapacityMember[] = []
+  for (const m of list) {
+    const r = (m ?? {}) as Record<string, unknown>
+    const person = typeof r.person === 'string' ? r.person.trim() : ''
+    if (!person) continue
+    const member: CapacityMember = {
+      person,
+      focusFactor: clamp01(r.focusFactor, 0.8),
+      allocation: clamp01(r.allocation, 1),
+    }
+    if (capacityPerWorkday(member) > 0) out.push(member)
+  }
+  return out
+}

packages/core/src/changes/apply-changes-v0.test.ts

@@ -1,6 +1,6 @@
 import { describe, expect, it } from 'vitest'
 
-import { describeChange, type IssueChange, planIssueChange } from './apply-changes-v0.js'
+import { describeChange, type IssueChange, planIssueChange, proposalsFor } from './apply-changes-v0.js'
 
 describe('planIssueChange', () => {
   it('swaps the estimate label, keeping non-axis labels', () => {
@@ -52,3 +52,28 @@ describe('planIssueChange', () => {
     expect(describeChange(planIssueChange(['est/5d'], change))).toBe('no change')
   })
 })
+
+describe('proposalsFor', () => {
+  it('builds one proposal per changed axis, carrying the concrete change + diff', () => {
+    const props = proposalsFor({ issue: 2, estimate: 'est/5d', priority: 'p/1' }, ['est/2d', 'p/3'], 'ChangeSource')
+    expect(props).toHaveLength(2)
+    expect(props[0].change).toEqual({ kind: 'reestimate', issue: 2, estimate: 'est/5d' })
+    expect(describeChange(props[0].plan)).toBe('est/2d → est/5d')
+    expect(props[1].change).toEqual({ kind: 'reprioritize', issue: 2, priority: 'p/1' })
+    expect(props[0].issueTitle).toBe('ChangeSource')
+  })
+
+  it('drops a noop axis (already at the requested value)', () => {
+    const props = proposalsFor({ issue: 2, estimate: 'est/2d', priority: 'p/1' }, ['est/2d', 'p/3'])
+    expect(props.map((p) => p.change.kind)).toEqual(['reprioritize']) // estimate unchanged
+  })
+
+  it('ignores invalid label values from the model', () => {
+    const props = proposalsFor({ issue: 2, estimate: 'est/4d' as never, priority: 'high' as never }, [])
+    expect(props).toEqual([])
+  })
+
+  it('returns nothing when no axis is provided', () => {
+    expect(proposalsFor({ issue: 2 }, ['est/2d'])).toEqual([])
+  })
+})

packages/core/src/changes/apply-changes-v0.ts

@@ -57,3 +57,48 @@ export function describeChange(plan: LabelPlan): string {
   const to = plan.added.length ? plan.added.join(', ') : '∅'
   return `${from} → ${to}`
 }
+
+/** A change the agent proposes: the concrete op + its diff, ready for approve-then-apply. */
+export interface ChangeProposal {
+  change: IssueChange
+  plan: LabelPlan
+  issueTitle?: string
+}
+
+/** What the `propose_change` tool accepts — a target issue and the axes to set. */
+export interface ProposeChangeArgs {
+  issue: number
+  estimate?: EstimateLabel
+  priority?: PriorityLabel
+}
+
+function isEstimate(v: unknown): v is EstimateLabel {
+  return typeof v === 'string' && (ESTIMATE_LABELS as readonly string[]).includes(v)
+}
+function isPriority(v: unknown): v is PriorityLabel {
+  return typeof v === 'string' && (PRIORITY_LABELS as readonly string[]).includes(v)
+}
+
+/**
+ * Build the concrete, non-noop proposals for a `propose_change` request against
+ * an issue's current labels. Invalid or unchanged axes are dropped — the agent
+ * proposes only real changes, and never a label outside the est/* · p/* axes.
+ */
+export function proposalsFor(
+  args: ProposeChangeArgs,
+  currentLabels: string[],
+  issueTitle?: string,
+): ChangeProposal[] {
+  const out: ChangeProposal[] = []
+  if (isEstimate(args.estimate)) {
+    const change: IssueChange = { kind: 'reestimate', issue: args.issue, estimate: args.estimate }
+    const plan = planIssueChange(currentLabels, change)
+    if (!plan.noop) out.push({ change, plan, issueTitle })
+  }
+  if (isPriority(args.priority)) {
+    const change: IssueChange = { kind: 'reprioritize', issue: args.issue, priority: args.priority }
+    const plan = planIssueChange(currentLabels, change)
+    if (!plan.noop) out.push({ change, plan, issueTitle })
+  }
+  return out
+}

packages/core/src/directives/record-directive-v0.test.ts

@@ -0,0 +1,66 @@
+import { describe, expect, it } from 'vitest'
+
+import {
+  appendDirective,
+  makeDirectiveEntry,
+  parseDirectiveLog,
+  serializeDirective,
+  toDirectiveInput,
+} from './record-directive-v0.js'
+
+describe('toDirectiveInput', () => {
+  it('keeps a valid kind + target and drops an empty target', () => {
+    const input = toDirectiveInput({ kind: 'reprioritize', quote: 'pilots first', target: { issue: 87 }, rationale: 'blocked' })
+    expect(input).toEqual({ kind: 'reprioritize', quote: 'pilots first', target: { issue: 87 }, params: undefined, rationale: 'blocked' })
+    expect(toDirectiveInput({ kind: 'note', quote: 'x', target: {} }).target).toBeUndefined()
+  })
+
+  it('falls back to note for an unknown kind', () => {
+    expect(toDirectiveInput({ kind: 'nonsense', quote: 'hmm' }).kind).toBe('note')
+  })
+})
+
+describe('serialize + parse round-trip', () => {
+  const entry = makeDirectiveEntry(
+    { kind: 'reprioritize', quote: 'pilots come first', target: { issue: 87 } },
+    'id-1',
+    '2026-02-01T09:00:00Z',
+  )
+
+  it('serializes to one JSON line', () => {
+    const line = serializeDirective(entry)
+    expect(line).not.toContain('\n')
+    expect(JSON.parse(line)).toMatchObject({ id: 'id-1', kind: 'reprioritize', status: 'accepted' })
+  })
+
+  it('parses a log, orders by ts, and assigns a 1-based seq', () => {
+    const a = serializeDirective(makeDirectiveEntry({ kind: 'note', quote: 'later' }, 'b', '2026-02-02T00:00:00Z'))
+    const b = serializeDirective(makeDirectiveEntry({ kind: 'note', quote: 'earlier' }, 'a', '2026-02-01T00:00:00Z'))
+    const records = parseDirectiveLog(`${a}\n${b}\n`)
+    expect(records.map((r) => r.quote)).toEqual(['earlier', 'later'])
+    expect(records.map((r) => r.seq)).toEqual([1, 2])
+  })
+
+  it('skips blank and corrupt lines without losing the rest', () => {
+    const good = serializeDirective(entry)
+    const records = parseDirectiveLog(`\n{not json\n${good}\n\n`)
+    expect(records).toHaveLength(1)
+    expect(records[0].id).toBe('id-1')
+  })
+})
+
+describe('appendDirective', () => {
+  it('concatenates a newline-terminated entry, normalizing a missing trailing newline', () => {
+    const e1 = makeDirectiveEntry({ kind: 'note', quote: 'one' }, 'i1', '2026-01-01T00:00:00Z')
+    const e2 = makeDirectiveEntry({ kind: 'note', quote: 'two' }, 'i2', '2026-01-02T00:00:00Z')
+    let log = appendDirective('', e1)
+    log = appendDirective(log, e2)
+    expect(parseDirectiveLog(log).map((r) => r.quote)).toEqual(['one', 'two'])
+    expect(log.endsWith('\n')).toBe(true)
+  })
+
+  it('handles existing text without a trailing newline', () => {
+    const e = makeDirectiveEntry({ kind: 'note', quote: 'x' }, 'i', '2026-01-01T00:00:00Z')
+    expect(appendDirective('{"id":"prev","ts":"2025-01-01T00:00:00Z"}', e).split('\n').filter(Boolean)).toHaveLength(2)
+  })
+})

packages/core/src/directives/record-directive-v0.ts

@@ -0,0 +1,106 @@
+/**
+ * record_directive — the PM's standing instructions ("pilots come first"),
+ * appended to an append-only JSONL ledger in the pm-state repo (decisions.md D4,
+ * pm-state.md). A directive is *intent*: it's logged verbatim; its effects land
+ * later through apply_changes. Merge is concatenation — order derives from `ts`
+ * at read time, so two writers never conflict. `seq` is a display ordinal
+ * computed on read, never stored. This module is pure serialize/parse; the
+ * append (read → concat → write) is the bridge's job.
+ */
+
+export type DirectiveKind = 'reprioritize' | 'reestimate' | 'set-deadline' | 'scope' | 'capacity' | 'note'
+
+export type DirectiveStatus = 'proposed' | 'accepted' | 'amended' | 'withdrawn'
+
+export interface DirectiveTarget {
+  issue?: number
+  milestone?: number
+  member?: string
+}
+
+/** What the record_directive tool captures. */
+export interface DirectiveInput {
+  kind: DirectiveKind
+  /** Verbatim PM words, shown in the ledger. */
+  quote: string
+  target?: DirectiveTarget
+  /** Structured effect the scheduler applies, e.g. { priority: 1 }. */
+  params?: Record<string, unknown>
+  rationale?: string
+}
+
+/** A ledger entry — an input plus its durable id/ts/status. */
+export interface DirectiveEntry extends DirectiveInput {
+  id: string
+  ts: string
+  status: DirectiveStatus
+}
+
+/** A ledger entry as read back, with a computed display ordinal. */
+export interface DirectiveRecord extends DirectiveEntry {
+  seq: number
+}
+
+const DIRECTIVE_KINDS: readonly DirectiveKind[] = [
+  'reprioritize',
+  'reestimate',
+  'set-deadline',
+  'scope',
+  'capacity',
+  'note',
+]
+
+/** Normalize a raw tool payload into a DirectiveInput (unknown kind → note). */
+export function toDirectiveInput(raw: unknown): DirectiveInput {
+  const r = (raw ?? {}) as Record<string, unknown>
+  const kind = DIRECTIVE_KINDS.includes(r.kind as DirectiveKind) ? (r.kind as DirectiveKind) : 'note'
+  const target = (r.target ?? undefined) as DirectiveTarget | undefined
+  return {
+    kind,
+    quote: typeof r.quote === 'string' ? r.quote : '',
+    target: target && (target.issue || target.milestone || target.member) ? target : undefined,
+    params: (r.params && typeof r.params === 'object' ? (r.params as Record<string, unknown>) : undefined),
+    rationale: typeof r.rationale === 'string' ? r.rationale : undefined,
+  }
+}
+
+/** Build a full entry from an input + externally-supplied id/ts (Date/uuid live in the caller). */
+export function makeDirectiveEntry(
+  input: DirectiveInput,
+  id: string,
+  ts: string,
+  status: DirectiveStatus = 'accepted',
+): DirectiveEntry {
+  return { ...input, id, ts, status }
+}
+
+/** One JSONL line (no trailing newline — the caller joins). */
+export function serializeDirective(entry: DirectiveEntry): string {
+  return JSON.stringify(entry)
+}
+
+/**
+ * Parse a JSONL log into records ordered by `ts` (then id for stability), with a
+ * 1-based `seq` assigned on read. Blank/corrupt lines are skipped, not fatal.
+ */
+export function parseDirectiveLog(text: string): DirectiveRecord[] {
+  const entries: DirectiveEntry[] = []
+  for (const line of text.split('\n')) {
+    const trimmed = line.trim()
+    if (!trimmed) continue
+    try {
+      const e = JSON.parse(trimmed) as DirectiveEntry
+      if (e && typeof e.id === 'string' && typeof e.ts === 'string') entries.push(e)
+    } catch {
+      // skip a corrupt line rather than lose the whole ledger
+    }
+  }
+  entries.sort((a, b) => (a.ts === b.ts ? a.id.localeCompare(b.id) : a.ts.localeCompare(b.ts)))
+  return entries.map((e, i) => ({ ...e, seq: i + 1 }))
+}
+
+/** Append a serialized entry to existing log text (concatenation merge). */
+export function appendDirective(existing: string, entry: DirectiveEntry): string {
+  const base = existing.endsWith('\n') || existing === '' ? existing : existing + '\n'
+  return `${base}${serializeDirective(entry)}\n`
+}

packages/core/src/forecast/forecast-v0.test.ts

@@ -120,4 +120,20 @@ describe('forecast', () => {
     expect(fitted.coldStart).toBe(false)
     expect(fitted.p50Day).toBeLessThan(priors.p50Day)
   })
+
+  it('capacity lanes parallelize the sim — the makespan shrinks with more workers', () => {
+    const independent = [issue(1), issue(2), issue(3), issue(4)] // no deps → fully parallelizable
+    const serial = forecast(independent, [], { trials: 2000, seed: 7 })
+    const twoLanes = forecast(independent, [], {
+      trials: 2000,
+      seed: 7,
+      workers: [
+        { person: 'a', speed: 1 },
+        { person: 'b', speed: 1 },
+      ],
+    })
+    // two equal lanes ≈ half the serial landing (independent work)
+    expect(twoLanes.p80Day).toBeLessThan(serial.p80Day)
+    expect(twoLanes.p80Day).toBeLessThan(serial.p80Day * 0.7)
+  })
 })

packages/core/src/forecast/forecast-v0.ts

@@ -18,6 +18,7 @@ import {
   schedule,
   type SchedulableIssue,
 } from '../scheduler/scheduler-v0.js'
+import { type LaneInputs, layoutOnLanes, resolveLanes, type Worker } from '../scheduler/scheduler-capacity-v0.js'
 
 export interface LognormalPrior {
   /** Median log-ratio: sampled median duration = estimate * e^mu. */
@@ -76,6 +77,12 @@ export interface ForecastOptions {
    * the sim; otherwise the code-resident cold-start priors do.
    */
   model?: DurationModel
+  /**
+   * Capacity lanes. When provided, each trial lays sampled durations across the
+   * lanes (parallel) instead of a single serial worker — the makespan shrinks
+   * toward the critical path. Empty/absent → single serial worker.
+   */
+  workers?: Worker[]
 }
 
 /** Resolve the lognormal params for an estimate, preferring a fitted model. */
@@ -158,17 +165,34 @@ export function forecast(
   const priors = order.map((it) => durationParams(it.durationDays, options.model))
   const rng = mulberry32(seed)
 
-  // endByRank[k][t] = working day the (k+1)-th scheduled issue completes on trial t.
+  // Capacity lanes, when configured — the per-trial layout goes parallel.
+  const laneInputs: LaneInputs = {
+    order: order.map((it) => it.number),
+    blockedBy: new Map(order.map((it) => [it.number, it.blockedBy])),
+    assignee: new Map(issues.map((i) => [i.number, i.assignee ?? null])),
+  }
+  const lanes =
+    options.workers && options.workers.length ? resolveLanes(options.workers, [...laneInputs.assignee.values()]) : null
+
+  // endByRank[k][t] = working day the (k+1)-th issue *to finish* completes on trial t.
   const endByRank: number[][] = Array.from({ length: n }, () => new Array<number>(trials))
   for (let t = 0; t < trials; t++) {
+    const sampled = order.map((it, k) => it.durationDays * Math.exp(priors[k].mu + priors[k].sigma * standardNormal(rng)))
+    if (lanes) {
+      // parallel: lay the sampled durations across lanes, then sort finish days
+      const byNumber = new Map(order.map((it, k) => [it.number, sampled[k]]))
+      const { finishAt } = layoutOnLanes(laneInputs, lanes, (num) => byNumber.get(num)!)
+      const finishes = order.map((it) => finishAt.get(it.number)!).sort((a, b) => a - b)
+      for (let k = 0; k < n; k++) endByRank[k][t] = finishes[k]
+    } else {
+      // single serial worker: cumulative sum (already sorted ascending)
       let cursor = 0
       for (let k = 0; k < n; k++) {
-      const p = priors[k]
+        cursor += sampled[k]
-      const sampled = order[k].durationDays * Math.exp(p.mu + p.sigma * standardNormal(rng))
-      cursor += sampled
         endByRank[k][t] = cursor
       }
     }
+  }
 
   const curve: BurnUpPoint[] = endByRank.map((row, k) => {
     const sorted = [...row].sort((a, b) => a - b)

packages/core/src/gitea/client.test.ts

@@ -146,6 +146,40 @@ describe('createGiteaClient.getIssue', () => {
     ])
   })
 
+  it('getFile returns null on 404 and content+sha on hit', async () => {
+    const miss = stubFetch('nope', 404)
+    expect(await createGiteaClient(CONFIG, miss.fetch).getFile('directives/log.jsonl')).toBeNull()
+
+    const hit = stubFetch({ content: 'aGVsbG8=\n', sha: 'abc123' })
+    const file = await createGiteaClient(CONFIG, hit.fetch).getFile('directives/log.jsonl')
+    expect(file).toEqual({ contentBase64: 'aGVsbG8=', sha: 'abc123' })
+    expect(hit.calls[0].url).toContain('/contents/directives/log.jsonl')
+  })
+
+  it('putFile POSTs to create and PUTs to update (with sha)', async () => {
+    const create = stubFetch({}, 201)
+    await createGiteaClient(CONFIG, create.fetch).putFile('directives/log.jsonl', { contentBase64: 'eA==', message: 'seed' })
+    expect(create.calls[0].init?.method).toBe('POST')
+    expect(JSON.parse(create.calls[0].init?.body ?? '{}')).toEqual({ content: 'eA==', message: 'seed' })
+
+    const update = stubFetch({}, 200)
+    await createGiteaClient(CONFIG, update.fetch).putFile('directives/log.jsonl', { contentBase64: 'eQ==', message: 'append', sha: 's1' })
+    expect(update.calls[0].init?.method).toBe('PUT')
+    expect(JSON.parse(update.calls[0].init?.body ?? '{}')).toEqual({ content: 'eQ==', message: 'append', sha: 's1' })
+  })
+
+  it('createIssue POSTs title/body/labels and returns a normalized issue', async () => {
+    const created = { ...RAW_ISSUE, number: 44, title: 'Retry token refresh', labels: [{ name: 'est/2d' }, { name: 'p/2' }] }
+    const { fetch, calls } = stubFetch(created, 201)
+    const issue = await createGiteaClient(CONFIG, fetch).createIssue({ title: 'Retry token refresh', body: 'backoff', labelIds: [3, 7] })
+
+    expect(calls[0].url).toBe('https://gitea.stephenmann.io/api/v1/repos/christian/commitea/issues')
+    expect(calls[0].init?.method).toBe('POST')
+    expect(JSON.parse(calls[0].init?.body ?? '{}')).toEqual({ title: 'Retry token refresh', body: 'backoff', labels: [3, 7] })
+    expect(issue.number).toBe(44)
+    expect(issue.labels).toEqual(['est/2d', 'p/2'])
+  })
+
   it('throws GiteaApiError carrying status + body on a non-2xx response', async () => {
     const { fetch } = stubFetch('not found', 404)
     const client = createGiteaClient(CONFIG, fetch)

packages/core/src/gitea/client.ts

@@ -103,6 +103,12 @@ export interface GiteaClient {
   listLabels(): Promise<GiteaLabel[]>
   /** Replace an issue's entire label set with the given label ids. Write. */
   setIssueLabels(index: number, labelIds: number[]): Promise<void>
+  /** Open a new issue with a title, optional body, and label ids. Write. */
+  createIssue(input: { title: string; body?: string; labelIds?: number[] }): Promise<GiteaIssue>
+  /** Read a repo file's base64 content + blob sha; null if it (or the repo) is absent. */
+  getFile(path: string): Promise<{ contentBase64: string; sha: string } | null>
+  /** Create or update a repo file with base64 content (pass `sha` to update). Write. */
+  putFile(path: string, input: { contentBase64: string; message: string; sha?: string }): Promise<void>
 }
 
 /** Map raw gitea issue JSON to the normalized domain shape. Pure. */
@@ -222,5 +228,33 @@ export function createGiteaClient(config: GiteaConfig, fetchImpl: FetchLike): Gi
     async setIssueLabels(index, labelIds) {
       await request(`/issues/${index}/labels`, { method: 'PUT', body: { labels: labelIds } })
     },
+
+    async createIssue(input) {
+      const raw = (await request('/issues', {
+        method: 'POST',
+        body: { title: input.title, body: input.body ?? '', labels: input.labelIds ?? [] },
+      })) as RawIssue
+      return normalizeIssue(raw)
+    },
+
+    async getFile(path) {
+      const res = await fetchImpl(`${repoBase}/contents/${path}`, {
+        headers: { Authorization: `token ${config.token}`, Accept: 'application/json' },
+      })
+      if (res.status === 404) return null
+      if (!res.ok) {
+        const body = await res.text().catch(() => '')
+        throw new GiteaApiError(res.status, `GET contents/${path} failed (${res.status})`, body)
+      }
+      const json = (await res.json()) as { content?: string; sha: string }
+      return { contentBase64: (json.content ?? '').replace(/\n/g, ''), sha: json.sha }
+    },
+
+    async putFile(path, input) {
+      await request(`/contents/${path}`, {
+        method: input.sha ? 'PUT' : 'POST',
+        body: { content: input.contentBase64, message: input.message, ...(input.sha ? { sha: input.sha } : {}) },
+      })
+    },
   }
 }

packages/core/src/gitea/types.ts

@@ -31,6 +31,8 @@ export interface GiteaHttpResponse {
   status: number
   json(): Promise<unknown>
   text(): Promise<string>
+  /** Present on the real fetch Response; used for SSE streaming (chat). */
+  body?: ReadableStream<Uint8Array> | null
 }
 
 export type FetchLike = (url: string, init?: GiteaRequestInit) => Promise<GiteaHttpResponse>

packages/core/src/index.ts

@@ -23,8 +23,8 @@ export type {
   GiteaRequestInit,
 } from './gitea/types.js'
 
-export { describeChange, planIssueChange } from './changes/apply-changes-v0.js'
+export { describeChange, planIssueChange, proposalsFor } from './changes/apply-changes-v0.js'
-export type { IssueChange, LabelPlan } from './changes/apply-changes-v0.js'
+export type { ChangeProposal, IssueChange, LabelPlan, ProposeChangeArgs } from './changes/apply-changes-v0.js'
 
 export {
   inferColumnV0,
@@ -49,6 +49,12 @@ export type {
   SchedulePlan,
 } from './scheduler/scheduler-v0.js'
 
+export { makespan, scheduleWithCapacity } from './scheduler/scheduler-capacity-v0.js'
+export type { Worker } from './scheduler/scheduler-capacity-v0.js'
+
+export { capacityPerWorkday, parseCapacityConfig } from './capacity/capacity-v0.js'
+export type { CapacityMember } from './capacity/capacity-v0.js'
+
 export {
   COLD_START_PRIORS,
   durationParams,
@@ -80,11 +86,35 @@ export type {
 } from './calibration/calibration-v0.js'
 
 export { createChatClient } from './agent/chat-client.js'
-export type { ChatClient, ChatMessage, CompletionResult, ModelConfig, ToolCall, ToolDecl } from './agent/chat-client.js'
+export type { ChatClient, ChatMessage, CompletionResult, ModelConfig, OnToken, ToolCall, ToolDecl } from './agent/chat-client.js'
 export { pickModel } from './agent/model-router.js'
 export type { ModelRouter, TaskKind } from './agent/model-router.js'
 export { runAgentTurn } from './agent/agent-loop.js'
 export type { AgentStep, AgentTurn, ToolExecutor } from './agent/agent-loop.js'
-export { QUERY_PROJECT_TOOL, REGINALD_SYSTEM, REGINALD_TOOLS } from './agent/agent-tools.js'
+export {
+  PROPOSE_CHANGE_TOOL,
+  QUERY_PROJECT_TOOL,
+  RECORD_DIRECTIVE_TOOL,
+  REGINALD_SYSTEM,
+  REGINALD_TOOLS,
+} from './agent/agent-tools.js'
 export { buildProjectView } from './agent/query-project.js'
 export type { ProjectSnapshot, ProjectView, QueryFilters } from './agent/query-project.js'
+export { CAPTURE_SYSTEM, captureWork, parseCaptureArgs, PROPOSE_ISSUES_TOOL } from './agent/capture-work.js'
+export type { CaptureProposal, ProposedIssue } from './agent/capture-work.js'
+
+export {
+  appendDirective,
+  makeDirectiveEntry,
+  parseDirectiveLog,
+  serializeDirective,
+  toDirectiveInput,
+} from './directives/record-directive-v0.js'
+export type {
+  DirectiveEntry,
+  DirectiveInput,
+  DirectiveKind,
+  DirectiveRecord,
+  DirectiveStatus,
+  DirectiveTarget,
+} from './directives/record-directive-v0.js'

packages/core/src/scheduler/scheduler-capacity-v0.ts

@@ -0,0 +1,119 @@
+/**
+ * Capacity-aware scheduler (#8). Reuses the single-worker scheduler's topological
+ * order + critical-path marking, then re-lays the work across lanes: an issue
+ * runs on its assignee's lane (or the earliest-free lane when unassigned), its
+ * duration scaled by that lane's speed (ideal person-days/workday). Makespan
+ * shrinks toward the critical path as lanes are added. Deterministic; falls back
+ * to the single serial worker when no capacity is configured. The lane layout is
+ * factored so the Monte Carlo forecast reuses it per trial with sampled durations.
+ */
+
+import {
+  type DependencyEdge,
+  schedule,
+  type SchedulableIssue,
+  type SchedulePlan,
+} from './scheduler-v0.js'
+
+/** A scheduling lane: a person and their throughput (ideal person-days / workday). */
+export interface Worker {
+  person: string
+  speed: number
+}
+
+/** The topological order + per-issue relations the layout needs (from the base plan). */
+export interface LaneInputs {
+  order: number[]
+  blockedBy: Map<number, number[]>
+  assignee: Map<number, string | null>
+}
+
+/** Ensure a lane exists for every assignee; unconfigured assignees get the mean speed. */
+export function resolveLanes(workers: Worker[], assignees: (string | null)[]): Worker[] {
+  const lanes = [...workers]
+  const known = new Set(lanes.map((w) => w.person))
+  const meanSpeed = lanes.length ? lanes.reduce((s, w) => s + w.speed, 0) / lanes.length : 1
+  for (const a of assignees) {
+    if (a && !known.has(a)) {
+      lanes.push({ person: a, speed: meanSpeed })
+      known.add(a)
+    }
+  }
+  return lanes
+}
+
+function pickWorker(lanes: Worker[], freeAt: Map<string, number>, assignee: string | null | undefined): Worker {
+  if (assignee) {
+    const own = lanes.find((w) => w.person === assignee)
+    if (own) return own
+  }
+  let best = lanes[0]
+  for (const w of lanes) if (freeAt.get(w.person)! < freeAt.get(best.person)!) best = w
+  return best
+}
+
+/**
+ * Lay a topologically-ordered set out across lanes. `duration(n)` supplies each
+ * issue's duration for this layout (estimate, or a sampled value in a MC trial).
+ * Returns each issue's finish day + the lane it ran on. Order guarantees a
+ * dependency is always laid out before its dependents.
+ */
+export function layoutOnLanes(
+  inputs: LaneInputs,
+  lanes: Worker[],
+  duration: (n: number) => number,
+): { finishAt: Map<number, number>; startAt: Map<number, number>; laneOf: Map<number, string> } {
+  const freeAt = new Map(lanes.map((w) => [w.person, 0]))
+  const finishAt = new Map<number, number>()
+  const startAt = new Map<number, number>()
+  const laneOf = new Map<number, string>()
+  for (const n of inputs.order) {
+    const worker = pickWorker(lanes, freeAt, inputs.assignee.get(n))
+    const blockers = inputs.blockedBy.get(n) ?? []
+    const depFinish = blockers.length ? Math.max(...blockers.map((d) => finishAt.get(d) ?? 0)) : 0
+    const start = Math.max(freeAt.get(worker.person)!, depFinish)
+    const end = start + duration(n) / worker.speed
+    startAt.set(n, start)
+    finishAt.set(n, end)
+    laneOf.set(n, worker.person)
+    freeAt.set(worker.person, end)
+  }
+  return { finishAt, startAt, laneOf }
+}
+
+/**
+ * Capacity-aware plan. An empty `workers` means no capacity is configured → the
+ * single-worker plan verbatim.
+ */
+export function scheduleWithCapacity(
+  issues: SchedulableIssue[],
+  edges: DependencyEdge[],
+  workers: Worker[],
+): SchedulePlan {
+  if (workers.length === 0) return schedule(issues, edges)
+  const base = schedule(issues, edges)
+  if (base.cycle || base.items.length === 0) return base
+
+  const inputs: LaneInputs = {
+    order: base.items.map((it) => it.number),
+    blockedBy: new Map(base.items.map((it) => [it.number, it.blockedBy])),
+    assignee: new Map(issues.map((i) => [i.number, i.assignee ?? null])),
+  }
+  const lanes = resolveLanes(workers, [...inputs.assignee.values()])
+  const durationOf = new Map(base.items.map((it) => [it.number, it.durationDays]))
+  const { finishAt, startAt, laneOf } = layoutOnLanes(inputs, lanes, (n) => durationOf.get(n)!)
+
+  const items = base.items.map((it) => ({
+    ...it,
+    startDay: startAt.get(it.number)!,
+    endDay: finishAt.get(it.number)!,
+    durationDays: finishAt.get(it.number)! - startAt.get(it.number)!,
+    worker: laneOf.get(it.number),
+  }))
+  return { items, cycle: null }
+}
+
+/** Makespan (last finish) of a plan — the project's landing day. */
+export function makespan(plan: SchedulePlan): number {
+  return plan.items.reduce((m, it) => Math.max(m, it.endDay), 0)
+}

packages/core/src/scheduler/scheduler-v0.ts

@@ -21,6 +21,8 @@ export interface SchedulableIssue {
   estimateDays: number | null
   /** 1 (most urgent) … 4; null when unset. */
   priority: number | null
+  /** gitea assignee login, for capacity-aware lane routing; optional. */
+  assignee?: string | null
 }
 
 export interface DependencyEdge {
@@ -45,6 +47,8 @@ export interface ScheduledItem {
   /** On a longest-duration dependency chain. */
   critical: boolean
   rationale: string
+  /** Lane it's scheduled on, when capacity-aware; absent for the single-worker plan. */
+  worker?: string
 }
 
 export interface SchedulePlan {