fix: patch 3 production bugs found during deep audit

1. Post-phase verify timer leak — setTimeout for verifyCurrentPhase was
   never stored, so pause() couldn't cancel it. Timer now tracked in
   postPhaseTimer field and cleared in clearPhasePoll().

2. Event forwarding flag survives loop replacement — boolean
   eventForwardingAttached stayed true when a new loop was created,
   so the new loop never got SSE forwarding. Now tracks the loop
   instance reference instead of a boolean.

3. Replan stuck when no sessions — replanPhase() returned without
   setting up task handlers or polling when no idle sessions were
   available. Now starts polling so the queued task gets picked up
   when a session becomes idle.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/orchestrator-loop.ts

@@ -103,6 +103,9 @@ export class OrchestratorLoop extends EventEmitter {
   /** Phase-level timeout timer */
   private phaseTimeoutTimer: NodeJS.Timeout | null = null;
 
+  /** Post-phase delay timer before verification */
+  private postPhaseTimer: NodeJS.Timeout | null = null;
+
   /** Session completion listener (bound for cleanup) */
   private sessionCompletionListener: ((sessionId: string, phrase: string) => void) | null = null;
 
@@ -559,6 +562,10 @@ export class OrchestratorLoop extends EventEmitter {
       clearTimeout(this.phaseTimeoutTimer);
       this.phaseTimeoutTimer = null;
     }
+    if (this.postPhaseTimer) {
+      clearTimeout(this.postPhaseTimer);
+      this.postPhaseTimer = null;
+    }
   }
 
   private pollPhaseStatus(phase: OrchestratorPhase): void {
@@ -615,8 +622,9 @@ export class OrchestratorLoop extends EventEmitter {
       // Phase has failed tasks
       this.handlePhaseError(phase, 'One or more tasks failed');
     } else {
-      // All tasks completed — run verification
-      setTimeout(() => {
+      // All tasks completed — run verification after brief delay
+      this.postPhaseTimer = setTimeout(() => {
+        this.postPhaseTimer = null;
         this.verifyCurrentPhase().catch((err) => this.handleError(err));
       }, POST_PHASE_DELAY_MS);
     }
@@ -765,10 +773,15 @@ export class OrchestratorLoop extends EventEmitter {
 
     this.persist();
 
+    // Set up handlers so task completion is tracked
+    this.setupTaskHandlers();
+
     // Assign to a session
     const sessions = this.sessionManager.getIdleSessions();
     if (sessions.length === 0) {
-      console.warn('[Orchestrator] No idle sessions for replan — task queued, waiting');
+      console.warn('[Orchestrator] No idle sessions for replan — task queued, will pick up on next poll');
+      // Start polling so the task gets assigned when a session becomes idle
+      this.startPhasePoll(phase);
       return;
     }