[LinuxDevil]

What changed

• server/routes/suggestionRoutes.ts (new): GET /agents/:id/suggestions (prompt_edit records only, open first then createdAt desc; 404 LOUSHO_AGENT_NOT_FOUND), POST .../:sid/apply and POST .../:sid/dismiss. :sid is checked against SUGGESTION_ID_RE (400 LOUSHO_SUGGESTION_ID_INVALID); a missing record or a portability analysis is 404 LOUSHO_SUGGESTION_NOT_FOUND; a settled one is 409 LOUSHO_SUGGESTION_NOT_OPEN.
• Apply runs inside withAgentLock(id): reconcile external edit → read spec → instructions not a string → 409 LOUSHO_SUGGESTION_UNSUPPORTED → prompt hash mismatch or oldText occurring other than once (indexOf loop, no regex) → record marked conflict + 409 LOUSHO_SUGGESTION_CONFLICT → literal replace(old, () => newText) → schema check (400 LOUSHO_SPEC_INVALID) → writeSpec → versions.capture({ kind: 'update', source: 'suggestion' }) → 201 VersionListItem, record applied, agent.changed reason version.
• server/app.ts: registers the routes (per the workspace seam, handlers read workspaceOf(req).repo/.versions/.suggestions — no deps or singleton store) + route-list doc comment.
• src/runtime/runtimeClient.ts: listSuggestions(id), applySuggestion(id, sid): Promise<VersionListItem>, dismissSuggestion(id, sid): Promise<void>.

How tested

• New server/__tests__/suggestionRoutes.test.ts (10 tests, seeds via new SuggestionStore(repo).save(...)) and a RuntimeClient suggestion methods block in src/runtime/__tests__/runtimeClient.test.ts (4 tests).
• npm run typecheck + npm run typecheck:server (apps/agent-forge): pass. Studio suites: 972 client + 1141 server tests pass.
• Root npx tsc --noEmit, npm run lint: clean. Studio eslint: 0 errors (31 pre-existing warnings).
• npm run test:coverage: 7190 pass; the only failures are 6 known environmental CRLF template-README assertions (unrelated to this diff); coverage 96.94/90.67/96.35/96.94, above thresholds. npm run fallow (0 above threshold), docs:ratchet (at baseline), api:check, docs:llms:check, size-check: all pass.

Acceptance criteria

• A seeded open suggestion applies: instructions changed once, version written with source: 'suggestion', status applied.
• After a PUT changing the instructions, apply → 409 conflict and status conflict.
• oldText present twice → 409 conflict.
• oldText containing $& or .* is replaced literally (the replacer function form).
• Applying twice → second is 409 LOUSHO_SUGGESTION_NOT_OPEN.
• Portability records never appear in the list.

Generated with Devin