autofix: opt-in, one-shot fixing of the PR reviewer's feedback

.changeset/autofix.md

@@ -0,0 +1,13 @@
+---
+"autofix": minor
+---
+
+Add the `autofix` workflow: opt-in, one-shot fixing of the PR reviewer's own feedback.
+
+Arm a PR with an `autofix: blocking` / `autofix: nits` label or an `/autofix [scope]` comment; the run fixes the reviewer's open threads in that scope, pushes one commit, replies in each thread, and removes the label. Both arming surfaces are peers resolving through one shared token vocabulary, and the trigger decides which is read, so a stale label cannot widen an explicit command.
+
+Everything except the code edit is deterministic. `lib/stage.ts` runs as a pre-agent step and fetches the inputs before the agent starts; `lib/plan.ts` then resolves scope, checks review currency, builds the work list, and renders the commit trailer. The plan is final: the prompt may execute it or stop, never widen it.
+
+Guards fail closed. Currency is checked per file so one unrelated push doesn't refuse the whole run; unparseable labels, outdated anchors, threads a human opened, an unreadable diff, and a head that moves mid-run are all excluded. Refusal is reserved for a PR with no review at all.
+
+The push uses `KHAN_ACTIONS_BOT_TOKEN`, because GitHub creates no workflow runs for `GITHUB_TOKEN`-triggered events and the re-review of the autofix commit is the only verification a fix gets. Ships with a documented workaround for gh-aw's unbounded PR-branch fetch, which is otherwise fatal on large monorepos.

.changeset/review-dispatch-gate.md

@@ -0,0 +1,5 @@
+---
+"review": minor
+---
+
+The dispatch-conformance gate: a review verdict can no longer be submitted unless the sub-agent outputs it is supposed to summarize actually exist. On the v1.7.0 acceptance trial (Khan/webapp#40992, run 29865480728) the orchestrator skipped its own protocol in production: it ran no router, dispatched zero sub-agents, did no claim validation, reviewed the diff itself, labeled its audit record "streamlined direct review", and submitted a REQUEST_CHANGES that disclosed none of it; the previous day's review of Khan/actions#272 dispatched correctly and disclosed its sheds, so this is stochastic non-conformance the eval suite cannot see by construction (the harness dispatches sub-agents from a script). The gate is code at the submit chokepoint, same family as v1.6.1's non-empty-body rule: a new `post-steps:` step in the agent job (`lib/dispatch-gate.ts`) runs after gh-aw finalizes the safe-output queue and before the queue ships to the `safe_outputs` job that calls the GitHub API. It checks the queued verdict and findings against the staged `out/` files per re-review depth (the correctness pass wherever the depth dispatches one, with the pattern-triage empty-`reviewFiles` waiver; a parseable `claim-validator.json` or its disclosed skipped-dimension note whenever inline comments post; a disclosure note for every reviewer routing planned that never dispatched) and, on violation, strips every posting item from the queue and fails the job: the submission is blocked rather than detected, the run goes red, and the original queue plus the gate report ride the agent artifact for diagnosis. Fail-open only for the gate's own bugs (loud warning, review unblocked); a detected violation never passes silently.

.changeset/review-pre-agent-staging.md

@@ -0,0 +1,5 @@
+---
+"review": minor
+---
+
+Staging becomes a pre-agent step (deterministic-orchestrator slice 1, scoped 07-13 out of the #246 review). A new `lib/stage-pr.ts` runs in `pre-agent-steps:` before the agent starts: it fetches the PR metadata, changed files, and prior bot reviews from the GitHub API, rebuilds the unified diff in the exact header format the provenance parser requires, computes the diff facts (per-file fingerprint plus added-lines hunk signature, staged as `diff-facts.json` so Step 2 compares and Step 9 saves code-computed values) and the newly-changed-code scope against cache memory's `reviewedHunks`, and then runs the deterministic CLI chain the orchestrator previously invoked mid-conversation (router first pass, provenance staging, re-review plan including the `out/` copy, and the scoped swap; at flip-gated depth `pr.diff` / `pr-annotated.diff` / `review-files.json` are staged from `scoped.diff` since no triage runs there). Steps 1 and 3 of the prompt now read the staged files instead of fetching and invoking; #246's interim prompt wiring is deleted. The one model touch stays mid-run by design: when the staged `routing.json` carries `pendingRiskQuestions`, the orchestrator still answers them and runs the router's second pass, which changes only tiers and budget. Every staging failure degrades toward more review, never less (missing cache puts the whole diff in scope, a failed reviews fetch forces a full review), and a hard fetch failure fails the step before any AI spend. Behavior-neutral by construction: the eval producer stages cases through the same lib functions, so A/Bs keep measuring production.

.changeset/stamp-carrier-cache-memory.md

@@ -0,0 +1,7 @@
+---
+"review": patch
+---
+
+review: the re-review fingerprint anchors on cache memory; the body stamp never survives gh-aw ingest
+
+gh-aw's safe-output sanitizer strips all XML/HTML comments (`removeXmlComments`), so the hidden fingerprint stamp a review body carries never reaches the PR: every production re-review planned `no-prior-fingerprint` and silently escalated to full depth, making the `re-review` ROUTING dial (scoped/flip-gated/fast) inert. The plan CLI now falls back to the Step 9 cache-memory record (`verdict`, `stampHunks`/`reviewedHunks`, `wasDraft`) when no prior-review body carries a stamp, and records which carrier anchored the plan as `stampSource` in `rereview-plan.json`. Step 9 gains a `stampHunks` field copied verbatim from the plan CLI's own hash computation so hash regimes are never mixed. Cache eviction still degrades to a full review, never a cheaper one.

.github/aw/actions-lock.json

@@ -1,14 +1,9 @@
 {
   "entries": {
-    "github/gh-aw-actions/setup-cli@v0.81.6": {
-      "repo": "github/gh-aw-actions/setup-cli",
-      "version": "v0.81.6",
-      "sha": "ba6380cc6e5be5d21677bebe04d52fb48e3abec7"
-    },
-    "github/gh-aw-actions/setup@v0.81.6": {
+    "github/gh-aw-actions/setup@v0.83.4": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.81.6",
-      "sha": "ba6380cc6e5be5d21677bebe04d52fb48e3abec7"
+      "version": "v0.83.4",
+      "sha": "e89c65e17eb281bbd5ff2ff9e9199a03e96654c7"
     }
   }
 }