@1mancompany/onemancompany 0.7.39 → 0.7.47

package/frontend/app.js

@@ -95,6 +95,7 @@ class AppController {
       const { employees, tasks, rooms, tools, activity_log, version, office_layout } = data;
       console.debug(`[bootstrap] /api/bootstrap took ${(performance.now() - t0).toFixed(0)}ms`);
 
+      this._cachedEmployees = employees || [];
       this.updateRoster(employees);
       this.updateOneononeDropdown(employees);
       this.updateProjectsPanel();
@@ -201,6 +202,7 @@ class AppController {
 
   async _fetchAndRenderRoster() {
     const employees = await fetch('/api/employees').then(r => r.json());
+    this._cachedEmployees = employees || [];
     this.updateRoster(employees);
     this.updateOneononeDropdown(employees);
     if (window.officeRenderer) {
@@ -1090,11 +1092,11 @@ class AppController {
             if (data.status === 'ok') {
                 console.log('Abort all result:', data);
             } else {
-                alert(data.detail || data.message || 'Failed to abort all tasks');
+                this._showToast(data.detail || data.message || 'Failed to abort all tasks', 'error');
             }
         } catch (e) {
             console.error('Abort all failed:', e);
-            alert('Failed to abort all tasks');
+            this._showToast('Failed to abort all tasks', 'error');
         }
     });
 
@@ -1259,7 +1261,7 @@ class AppController {
     startBtn.disabled = false;
 
     if (res.error) {
-      alert(res.error);
+      this._showToast(res.error, 'error');
       return;
     }
 
@@ -1752,7 +1754,7 @@ class AppController {
       })
       .then(data => {
         if (data.error) {
-          alert(`Cannot dismiss: ${data.error}`);
+          this._showToast(`Cannot dismiss: ${data.error}`, 'error');
         } else {
           this.closeEmployeeDetail();
           this.addLog(`Dismissed ${data.name} (${data.nickname}) — ${data.reason}`);
@@ -1761,7 +1763,7 @@ class AppController {
       })
       .catch(err => {
         console.error('Fire employee error:', err);
-        alert('Failed to dismiss employee. See console for details.');
+        this._showToast('Failed to dismiss employee', 'error');
       });
   }
 
@@ -2027,11 +2029,11 @@ class AppController {
       if (data.status === 'ok') {
         this._fetchCronList(empId);
       } else {
-        alert(data.detail || data.message || 'Failed to stop cron');
+        this._showToast(data.detail || data.message || 'Failed to stop cron', 'error');
       }
     } catch (err) {
       console.error('Failed to cancel cron:', err);
-      alert('Failed to stop cron job');
+      this._showToast('Failed to stop cron job', 'error');
     }
   }
 
@@ -2045,11 +2047,11 @@ class AppController {
       if (data.status === 'ok') {
         this._fetchCronList(empId);
       } else {
-        alert(data.detail || data.message || 'Failed to stop all crons');
+        this._showToast(data.detail || data.message || 'Failed to stop all crons', 'error');
       }
     } catch (err) {
       console.error('Failed to stop all crons:', err);
-      alert('Failed to stop all cron jobs');
+      this._showToast('Failed to stop all cron jobs', 'error');
     }
   }
 
@@ -2737,7 +2739,7 @@ class AppController {
     fetch('/api/ceo/dnd').then(r => r.json()).then(data => {
       dndBtn.classList.toggle('active', data.dnd);
       if (data.dnd) dndBtn.title = 'Do Not Disturb (ON)';
-    }).catch(() => {});
+    }).catch(err => console.warn('[dnd] state load failed:', err));
   }
 
   // ===== @Mention Autocomplete ===== //
@@ -5898,7 +5900,7 @@ class AppController {
       });
       const result = await resp.json();
       if (result.status === 'error') {
-        alert(result.message);
+        this._showToast(result.message, 'error');
       } else {
         this._renderSystemCrons();
       }
@@ -6679,7 +6681,7 @@ class AppController {
           window.open(data.auth_url, '_blank', 'width=600,height=700');
           setTimeout(() => this.openToolDetail(toolId), 5000);
         } else {
-          alert(data.message || 'OAuth login failed');
+          this._showToast(data.message || 'OAuth login failed', 'error');
         }
         break;
       }
@@ -6692,7 +6694,7 @@ class AppController {
       case 'credentials': {
         const clientId = document.getElementById('tool-oauth-client-id')?.value || '';
         const clientSecret = document.getElementById('tool-oauth-client-secret')?.value || '';
-        if (!clientId || !clientSecret) { alert('Both Client ID and Client Secret required'); return; }
+        if (!clientId || !clientSecret) { this._showToast('Both Client ID and Client Secret required', 'error'); return; }
         const res = await fetch(`/api/tools/${esc}/oauth/credentials`, {
           method: 'POST',
           headers: { 'Content-Type': 'application/json' },
@@ -6700,7 +6702,7 @@ class AppController {
         });
         const data = await res.json();
         if (data.status === 'ok') this.openToolDetail(toolId);
-        else alert(data.message || 'Failed');
+        else this._showToast(data.message || 'Failed', 'error');
         break;
       }
       case 'save_env': {
@@ -6714,7 +6716,7 @@ class AppController {
         });
         const data = await res.json();
         if (data.status === 'ok') this.openToolDetail(toolId);
-        else alert(data.message || 'Failed');
+        else this._showToast(data.message || 'Failed', 'error');
         break;
       }
     }
@@ -6725,7 +6727,7 @@ class AppController {
   async _templateOpen(toolId, filename) {
     const esc = encodeURIComponent;
     const res = await fetch(`/api/tools/${esc(toolId)}/templates/${esc(filename)}`);
-    if (!res.ok) { alert('Failed to load template'); return; }
+    if (!res.ok) { this._showToast('Failed to load template', 'error'); return; }
     const data = await res.json();
     const body = document.getElementById('tool-list-body');
     const escH = (t) => this._escapeHtml(t);
@@ -6743,7 +6745,7 @@ class AppController {
 
   async _templateSave(toolId, filename) {
     const content = document.getElementById('template-editor')?.value || '';
-    if (!content.trim()) { alert('Template cannot be empty'); return; }
+    if (!content.trim()) { this._showToast('Template cannot be empty', 'error'); return; }
     const esc = encodeURIComponent;
     const res = await fetch(`/api/tools/${esc(toolId)}/templates/${esc(filename)}`, {
       method: 'PUT',
@@ -6752,7 +6754,7 @@ class AppController {
     });
     const data = await res.json();
     if (data.status === 'ok') this.openToolDetail(toolId);
-    else alert(data.message || 'Save failed');
+    else this._showToast(data.message || 'Save failed', 'error');
   }
 
   async _templateDelete(toolId, filename) {
@@ -6761,7 +6763,7 @@ class AppController {
     const res = await fetch(`/api/tools/${esc(toolId)}/templates/${esc(filename)}`, { method: 'DELETE' });
     const data = await res.json();
     if (data.status === 'ok') this.openToolDetail(toolId);
-    else alert(data.message || 'Delete failed');
+    else this._showToast(data.message || 'Delete failed', 'error');
   }
 
   _templateNew(toolId, templatesDir) {
@@ -6961,7 +6963,7 @@ class AppController {
       }
     } catch (err) {
       this._chatPanel.showTyping(false);
-      alert(`Failed to send message: ${err.message}`);
+      this._showToast(`Failed to send message: ${err.message}`, 'error');
     }
     // Reply arrives via WebSocket conversation_message event
   }
@@ -6987,7 +6989,7 @@ class AppController {
       const empName = this._resolveEmployeeName(data.employee_id || '');
       this.logEntry('SYSTEM', `🧹 Cleared 1-on-1 history for ${empName}.`, 'system');
     } catch (err) {
-      alert(`Failed to clear history: ${err.message}`);
+      this._showToast(`Failed to clear history: ${err.message}`, 'error');
     }
   }
 
@@ -7099,6 +7101,7 @@ class AppController {
   }
 
   _escapeHtml(text) {
+    if (text == null) return '';
     const div = document.createElement('div');
     div.textContent = text;
     return div.innerHTML;
@@ -7396,20 +7399,15 @@ class AppController {
     list.appendChild(row);
   }
 
-  async _populateProductOwnerDropdown() {
-    try {
-      const data = await fetch('/api/bootstrap').then(r => r.json());
-      const sel = document.getElementById('create-product-owner');
-      if (!sel) return;
-      sel.innerHTML = '<option value="">Select owner...</option>';
-      for (const emp of (data.employees || [])) {
-        const opt = document.createElement('option');
-        opt.value = emp.id;
-        opt.textContent = `${emp.name || emp.id} (${emp.role || ''})`;
-        sel.appendChild(opt);
-      }
-    } catch (e) {
-      console.debug('Failed to populate owner dropdown:', e);
+  _populateProductOwnerDropdown() {
+    const sel = document.getElementById('create-product-owner');
+    if (!sel) return;
+    sel.innerHTML = '<option value="">Select owner...</option>';
+    for (const emp of (this._cachedEmployees || [])) {
+      const opt = document.createElement('option');
+      opt.value = emp.id;
+      opt.textContent = `${emp.name || emp.id} (${emp.role || ''})`;
+      sel.appendChild(opt);
     }
   }
 
@@ -7725,15 +7723,13 @@ class AppController {
     ownerEl.className = 'form-input';
     ownerEl.style.width = 'auto';
     ownerEl.innerHTML = '<option value="">Unassigned</option>';
-    fetch('/api/bootstrap').then(r => r.json()).then(d => {
-      for (const emp of (d.employees || [])) {
-        const opt = document.createElement('option');
-        opt.value = emp.id;
-        opt.textContent = `${emp.name || emp.id}`;
-        ownerEl.appendChild(opt);
-      }
-      ownerEl.value = product.owner_id || '';
-    });
+    for (const emp of (this._cachedEmployees || [])) {
+      const opt = document.createElement('option');
+      opt.value = emp.id;
+      opt.textContent = `${emp.name || emp.id}`;
+      ownerEl.appendChild(opt);
+    }
+    ownerEl.value = product.owner_id || '';
     ownerEl.addEventListener('change', () => {
       fetch(`/api/product/${encodeURIComponent(slug)}`, {
         method: 'PUT',
@@ -8220,15 +8216,13 @@ class AppController {
     assignSel.style.width = 'auto';
     assignSel.style.display = 'inline';
     assignSel.innerHTML = '<option value="">Unassigned</option>';
-    fetch('/api/bootstrap').then(r => r.json()).then(d => {
-      for (const emp of (d.employees || [])) {
-        const opt = document.createElement('option');
-        opt.value = emp.id;
-        opt.textContent = emp.name || emp.id;
-        assignSel.appendChild(opt);
-      }
-      assignSel.value = issue.assignee_id || '';
-    });
+    for (const emp of (this._cachedEmployees || [])) {
+      const opt = document.createElement('option');
+      opt.value = emp.id;
+      opt.textContent = emp.name || emp.id;
+      assignSel.appendChild(opt);
+    }
+    assignSel.value = issue.assignee_id || '';
     assignSel.addEventListener('click', (e) => e.stopPropagation());
     assignSel.addEventListener('change', () => {
       fetch(`/api/product/${encodeURIComponent(slug)}/issue/${encodeURIComponent(issue.id)}`, {
@@ -9067,8 +9061,9 @@ class AppController {
         header.className = 'review-card-header';
         const trigger = rev.trigger || 'manual';
         const dateStr = rev.created_at ? new Date(rev.created_at).toLocaleDateString() : '';
-        header.innerHTML = `<span class="review-trigger">${this._escHtml(trigger)}</span> <span class="review-date">${dateStr}</span>`;
-        if (rev.owner) header.innerHTML += ` <span class="review-owner">Owner: ${this._escHtml(rev.owner)}</span>`;
+        let headerHtml = `<span class="review-trigger">${this._escHtml(trigger)}</span> <span class="review-date">${dateStr}</span>`;
+        if (rev.owner) headerHtml += ` <span class="review-owner">Owner: ${this._escHtml(rev.owner)}</span>`;
+        header.innerHTML = headerHtml;
         card.appendChild(header);
 
         // Checklist items

package/frontend/index.html

@@ -11,22 +11,22 @@
   <script defer src="https://cloud.umami.is/script.js" data-website-id="e72ced7e-c551-40a9-b60e-18bb7db0592f"></script>
 </head>
 <body>
-  <div id="app">
+  <div id="app" role="application" aria-label="One Man Company CEO Console">
     <!-- Left top: Products & Projects -->
-    <div id="left-top-panel">
+    <aside id="left-top-panel" aria-label="Products">
       <div class="collapsible-header" data-target="projects-panel-body">
         <span class="collapse-arrow">&#9660;</span>
         <h3 class="pixel-title">PRODUCTS</h3>
-        <button id="create-product-btn" class="panel-add-btn" title="New Product">+</button>
-        <button id="import-product-btn" class="panel-add-btn" title="Import Product">&#8593;</button>
+        <button id="create-product-btn" class="panel-add-btn" title="New Product" aria-label="New Product">+</button>
+        <button id="import-product-btn" class="panel-add-btn" title="Import Product" aria-label="Import Product">&#8593;</button>
       </div>
       <div id="projects-panel-body" class="collapsible-body">
         <div id="projects-panel-list"></div>
       </div>
-    </div>
+    </aside>
 
     <!-- Left bottom: Activity Log -->
-    <div id="left-bottom-panel">
+    <aside id="left-bottom-panel" aria-label="Activity Log">
       <div class="collapsible-header" data-target="activity-body">
         <span class="collapse-arrow">&#9660;</span>
         <h3 class="pixel-title">ACTIVITY LOG</h3>
@@ -34,10 +34,10 @@
       <div id="activity-body" class="collapsible-body collapsible-flex">
         <div id="activity-log" style="background:#0a0a0a;flex:1"></div>
       </div>
-    </div>
+    </aside>
 
     <!-- Center top: Office Canvas -->
-    <div id="office-panel">
+    <main id="office-panel">
       <div class="panel-header">
         <h1 class="pixel-title">&#127970; ONE MAN COMPANY <span id="app-version" class="version-badge"></span></h1>
         <div id="status-bar">
@@ -45,22 +45,22 @@
           <span class="status-item status-clickable" id="tool-count" onclick="window.app.openToolList()">&#128295; 0</span>
           <span class="status-item" id="room-count">&#127970; 0/0</span>
           <!-- Meeting moved to /meeting slash command in CEO console -->
-          <button id="ex-employee-toolbar-btn" class="toolbar-icon-btn" title="Ex-Employee Wall">&#128220;</button>
-          <button id="company-culture-toolbar-btn" class="toolbar-icon-btn" title="Company Culture">&#127988;</button>
-          <button id="company-direction-toolbar-btn" class="toolbar-icon-btn" title="Company Direction">&#127919;</button>
-          <button id="dashboard-toolbar-btn" class="toolbar-icon-btn" title="Dashboard">&#128202;</button>
-          <button id="announcements-toolbar-btn" class="toolbar-icon-btn" title="Announcements" style="position:relative;">&#128276;<span id="announcements-badge" class="announcement-badge hidden"></span></button>
-          <button id="settings-toolbar-btn" class="toolbar-icon-btn" title="Settings">&#9881;</button>
-          <span class="status-item" id="connection-status">&#9679; OFFLINE</span>
+          <button id="ex-employee-toolbar-btn" class="toolbar-icon-btn" title="Ex-Employee Wall" aria-label="Ex-Employee Wall">&#128220;</button>
+          <button id="company-culture-toolbar-btn" class="toolbar-icon-btn" title="Company Culture" aria-label="Company Culture">&#127988;</button>
+          <button id="company-direction-toolbar-btn" class="toolbar-icon-btn" title="Company Direction" aria-label="Company Direction">&#127919;</button>
+          <button id="dashboard-toolbar-btn" class="toolbar-icon-btn" title="Dashboard" aria-label="Dashboard">&#128202;</button>
+          <button id="announcements-toolbar-btn" class="toolbar-icon-btn" title="Announcements" aria-label="Announcements" style="position:relative;">&#128276;<span id="announcements-badge" class="announcement-badge hidden"></span></button>
+          <button id="settings-toolbar-btn" class="toolbar-icon-btn" title="Settings" aria-label="Settings">&#9881;</button>
+          <span class="status-item" id="connection-status" role="status" aria-live="polite">&#9679; OFFLINE</span>
           <span class="status-item" id="last-sync-time"></span>
         </div>
       </div>
-      <canvas id="office-canvas" width="640" height="480"></canvas>
+      <canvas id="office-canvas" width="640" height="480" aria-label="Office floor plan" role="img"></canvas>
       <div id="tooltip" class="tooltip hidden"></div>
-    </div>
+    </main>
 
     <!-- Right top: Team Roster -->
-    <div id="roster-panel">
+    <aside id="roster-panel" aria-label="Team Roster">
       <div class="collapsible-header" data-target="roster-body">
         <span class="collapse-arrow">&#9660;</span>
         <h3 class="pixel-title">TEAM ROSTER</h3>
@@ -73,7 +73,7 @@
         </div>
         <div id="roster-list"></div>
       </div>
-    </div>
+    </aside>
 
     <!-- Bottom spanning center+right: CEO Console -->
     <div id="console-panel">
@@ -85,11 +85,11 @@
         <div id="ceo-avatar-area">
           <img id="ceo-avatar" width="32" height="32" src="/api/employees/00001/avatar" onerror="this.style.display='none'" />
           <span class="ceo-label">&#128081; YOU</span>
-          <button id="dnd-toggle-btn" class="toolbar-icon-btn" title="Do Not Disturb">&#127769;</button>
-          <button id="bg-tasks-toolbar-btn" class="toolbar-icon-btn" title="Background Tasks">&#9641;</button>
-          <button id="screenshot-toolbar-btn" class="toolbar-icon-btn" title="Export SVG Screenshot">&#128247;</button>
-          <button id="abort-all-toolbar-btn" class="toolbar-icon-btn" title="Stop All Tasks" style="color: #ff4444;">&#9888;</button>
-          <button id="reload-toolbar-btn" class="reload-btn" title="Force reload all data from disk">&#128260;</button>
+          <button id="dnd-toggle-btn" class="toolbar-icon-btn" title="Do Not Disturb" aria-label="Do Not Disturb">&#127769;</button>
+          <button id="bg-tasks-toolbar-btn" class="toolbar-icon-btn" title="Background Tasks" aria-label="Background Tasks">&#9641;</button>
+          <button id="screenshot-toolbar-btn" class="toolbar-icon-btn" title="Export SVG Screenshot" aria-label="Export SVG Screenshot">&#128247;</button>
+          <button id="abort-all-toolbar-btn" class="toolbar-icon-btn" title="Stop All Tasks" aria-label="Stop All Tasks" style="color: #ff4444;">&#9888;</button>
+          <button id="reload-toolbar-btn" class="reload-btn" title="Force reload all data from disk" aria-label="Force reload all data from disk">&#128260;</button>
         </div>
         <div id="ceo-split">
           <div id="ceo-project-list">
@@ -118,7 +118,7 @@
                 </select>
               </div>
               <div id="ceo-conv-input-row">
-                <textarea id="ceo-conv-input" placeholder="$ Type message, / for commands (Enter to send)" rows="1"></textarea>
+                <textarea id="ceo-conv-input" placeholder="$ Type message, / for commands (Enter to send)" rows="1" aria-label="CEO message input"></textarea>
                 <input type="file" id="ceo-file-input" multiple hidden />
               </div>
               <div id="ceo-slash-menu" class="hidden"></div>

package/frontend/style.css

@@ -15,7 +15,22 @@
   --pixel-white: #e0e0f0;
   --pixel-gray: #888899;
   --text-dim: #6666aa;
+  --text-primary: #e0e0f0;
+  --font-pixel: 'Press Start 2P', monospace;
+  --font-mono: 'Courier New', Courier, monospace;
+  --bg-card: #16162a;
   --font-boost: 2px;  /* Text size boost: 0px (small), 2px (medium, default), 4px (large) */
+
+  /* z-index scale */
+  --z-base: 2;
+  --z-dropdown: 10;
+  --z-sticky: 100;
+  --z-overlay: 200;
+  --z-floating: 300;
+  --z-modal: 900;
+  --z-toast-backdrop: 9998;
+  --z-toast: 9999;
+  --z-critical: 99999;
 }
 
 * {
@@ -24,6 +39,18 @@
   image-rendering: crisp-edges;
 }
 
+:focus-visible {
+  outline: 2px solid var(--pixel-cyan);
+  outline-offset: 2px;
+}
+
+input:focus-visible,
+textarea:focus-visible,
+select:focus-visible {
+  outline: 2px solid var(--pixel-cyan);
+  outline-offset: 0;
+}
+
 body {
   background: var(--bg-dark);
   color: var(--pixel-white);
@@ -224,7 +251,7 @@ body.resize-dragging {
   font-size: calc(7px + var(--font-boost));
   line-height: 1.8;
   pointer-events: none;
-  z-index: 10;
+  z-index: var(--z-dropdown);
   max-width: 200px;
   white-space: pre-wrap;
 }
@@ -258,7 +285,7 @@ body.resize-dragging {
 /* ===== Floating Panel (Settings dropdown etc.) ===== */
 .floating-panel {
   position: fixed;
-  z-index: 300;
+  z-index: var(--z-floating);
   background: var(--bg-panel, #1a1a2e);
   border: 2px solid var(--pixel-cyan, #0ff);
   box-shadow: 0 4px 20px rgba(0, 255, 255, 0.2);
@@ -361,7 +388,7 @@ body.resize-dragging {
   border-radius: 2px;
   white-space: nowrap;
   pointer-events: none;
-  z-index: 100;
+  z-index: var(--z-sticky);
 }
 
 .reload-btn:disabled {
@@ -908,7 +935,7 @@ body.resize-dragging {
   width: 100vw;
   height: 100vh;
   background: rgba(0, 0, 0, 0.75);
-  z-index: 100;
+  z-index: var(--z-sticky);
   display: flex;
   align-items: center;
   justify-content: center;
@@ -1794,7 +1821,7 @@ body.resize-dragging {
   border: 1px solid var(--pixel-green);
   background: var(--pixel-green);
   opacity: 0;
-  z-index: 2;
+  z-index: var(--z-base);
   display: flex;
   align-items: center;
   justify-content: center;
@@ -2017,7 +2044,7 @@ body.resize-dragging {
   background: var(--bg-panel);
   border: 1px solid var(--pixel-cyan);
   box-shadow: 0 0 20px rgba(0, 221, 255, 0.2);
-  z-index: 900;
+  z-index: var(--z-modal);
   font-family: var(--font-pixel);
   overflow: hidden;
   transition: max-height 0.3s ease;
@@ -3567,7 +3594,7 @@ body.resize-dragging {
   top: 0;
   left: 0;
   right: 0;
-  z-index: 9998;
+  z-index: var(--z-toast-backdrop);
   display: flex;
   align-items: center;
   justify-content: center;
@@ -3608,7 +3635,7 @@ body.resize-dragging {
   top: 0;
   left: 0;
   right: 0;
-  z-index: 9999;
+  z-index: var(--z-toast);
   display: flex;
   justify-content: center;
   padding: 8px;
@@ -4600,7 +4627,7 @@ body.resize-dragging {
     padding: 16px;
     background: #111;
     border-left: 1px solid var(--pixel-green-dim, #1a3a2a);
-    z-index: 10;
+    z-index: var(--z-dropdown);
 }
 
 .project-tree-drawer.hidden {
@@ -4677,7 +4704,7 @@ body.resize-dragging {
   top: 0; left: 0;
   width: 100vw; height: 100vh;
   background: rgba(0, 0, 0, 0.8);
-  z-index: 200;
+  z-index: var(--z-overlay);
   display: flex;
   align-items: center;
   justify-content: center;
@@ -4949,7 +4976,7 @@ body.resize-dragging {
   position: fixed;
   top: 0; left: 0; right: 0; bottom: 0;
   background: rgba(0, 0, 0, 0.7);
-  z-index: 200;
+  z-index: var(--z-overlay);
   display: flex;
   align-items: center;
   justify-content: center;
@@ -5602,7 +5629,7 @@ body.resize-dragging {
   border-radius: 4px;
   max-height: 180px;
   overflow-y: auto;
-  z-index: 100;
+  z-index: var(--z-sticky);
   width: 220px;
 }
 .mention-dropdown.hidden { display: none; }
@@ -6548,7 +6575,7 @@ body.resize-dragging {
   position: fixed;
   top: 12px;
   right: 12px;
-  z-index: 99999;
+  z-index: var(--z-critical);
   display: flex;
   flex-direction: column;
   gap: 6px;
@@ -6836,3 +6863,65 @@ body.resize-dragging {
 .release-form {
   margin-top: 8px;
 }
+
+/* ===== Responsive Breakpoints ===== */
+
+/* Tablet: stack left panels above, roster collapses */
+@media (max-width: 1024px) {
+  #app {
+    grid-template-columns: 200px 1fr;
+    grid-template-rows: auto 1fr auto;
+    grid-template-areas:
+      "left-top    canvas"
+      "left-bottom canvas"
+      "console     console";
+  }
+  #roster-panel {
+    display: none;
+  }
+  .floating-panel {
+    width: 280px !important;
+  }
+}
+
+/* Mobile: single column stack */
+@media (max-width: 768px) {
+  #app {
+    grid-template-columns: 1fr;
+    grid-template-rows: auto auto 200px auto;
+    grid-template-areas:
+      "canvas"
+      "console"
+      "left-top"
+      "left-bottom";
+    height: auto;
+    min-height: 100vh;
+  }
+  #roster-panel {
+    display: none;
+  }
+  #office-panel .panel-header {
+    flex-wrap: wrap;
+  }
+  #status-bar {
+    flex-wrap: wrap;
+    gap: 4px;
+  }
+  .floating-panel {
+    position: fixed !important;
+    left: 0 !important;
+    right: 0 !important;
+    top: auto !important;
+    bottom: 0 !important;
+    width: 100% !important;
+    max-height: 60vh;
+    border-radius: 8px 8px 0 0;
+  }
+  #ceo-split {
+    flex-direction: column;
+  }
+  #ceo-project-list {
+    max-height: 120px;
+    overflow-y: auto;
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1mancompany/onemancompany",
-  "version": "0.7.39",
+  "version": "0.7.47",
   "description": "The AI Operating System for One-Person Companies",
   "bin": {
     "onemancompany": "bin/cli.js"

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "onemancompany"
-version = "0.7.39"
+version = "0.7.47"
 description = "A one-man company simulation with pixel art visualization and LangChain AI agents"
 requires-python = ">=3.12"
 dependencies = [

package/src/onemancompany/agents/product_tools.py

@@ -743,6 +743,46 @@ async def delete_product_tool(product_slug: str) -> str:
         return f"Error: {e}"
 
 
+@tool
+async def assign_issue_tool(
+    product_slug: str,
+    issue_id: str,
+    assignee_id: str,
+) -> str:
+    """Assign (or reassign) an issue to an employee.
+
+    Args:
+        product_slug: The product slug
+        issue_id: The issue ID
+        assignee_id: Employee ID to assign
+    """
+    try:
+        issue = prod.update_issue(product_slug, issue_id, assignee_id=assignee_id)
+        return f"Issue {issue_id} assigned to {assignee_id}"
+    except (ValueError, FileNotFoundError) as e:
+        return f"Error: {e}"
+
+
+@tool
+async def transfer_product_ownership_tool(
+    product_slug: str,
+    new_owner_id: str,
+) -> str:
+    """Transfer product ownership to a different employee.
+
+    Args:
+        product_slug: The product slug
+        new_owner_id: Employee ID of the new owner
+    """
+    try:
+        result = prod.update_product(product_slug, owner_id=new_owner_id)
+        if result is None:
+            return f"Error: product '{product_slug}' not found"
+        return f"Product '{product_slug}' ownership transferred to {new_owner_id}"
+    except (ValueError, FileNotFoundError) as e:
+        return f"Error: {e}"
+
+
 # ---------------------------------------------------------------------------
 # Export
 # ---------------------------------------------------------------------------
@@ -770,4 +810,6 @@ PRODUCT_TOOLS = [
     version_management_tool,
     update_product_tool,
     delete_product_tool,
+    assign_issue_tool,
+    transfer_product_ownership_tool,
 ]

package/src/onemancompany/api/routes.py

@@ -2659,9 +2659,10 @@ async def delete_employee_session(employee_id: str, project_id: str) -> dict:
 # ===== Company Culture =====
 
 @router.get("/api/company-culture")
-async def get_company_culture() -> dict:
+async def get_company_culture(limit: int = 100, offset: int = 0) -> dict:
     """Get all company culture items."""
-    return {"items": _store.load_culture()}
+    items = _store.load_culture()
+    return {"items": items[offset:offset + limit], "total": len(items)}
 
 
 @router.post("/api/company-culture")
@@ -2846,10 +2847,11 @@ async def get_dashboard_costs() -> dict:
 
 
 @router.get("/api/projects")
-async def get_projects() -> dict:
+async def get_projects(limit: int = 100, offset: int = 0) -> dict:
     """List all projects (v1 + v2 summary view for the project wall)."""
     from onemancompany.core.project_archive import list_projects
-    return {"projects": list_projects()}
+    all_projects = list_projects()
+    return {"projects": all_projects[offset:offset + limit], "total": len(all_projects)}
 
 
 @router.post("/api/projects")
@@ -3792,44 +3794,6 @@ async def get_project_file(project_id: str, file_path: str):
         return Response(content=content, media_type=media)
 
 
-@router.get("/api/projects/{project_id}/download")
-async def download_project_files(project_id: str):
-    """Download all project workspace files as a zip archive."""
-    import io
-    import zipfile
-    from pathlib import Path
-
-    from fastapi.responses import StreamingResponse
-
-    from onemancompany.core.project_archive import get_project_dir, list_project_files
-
-    workspace = Path(get_project_dir(project_id))
-    if not workspace.exists():
-        raise HTTPException(status_code=404, detail="Project workspace not found")
-
-    files = list_project_files(project_id)
-    if not files:
-        raise HTTPException(status_code=404, detail="No files to download")
-
-    buf = io.BytesIO()
-    with zipfile.ZipFile(buf, "w", zipfile.ZIP_DEFLATED) as zf:
-        for rel_path in files:
-            abs_path = workspace / rel_path
-            if abs_path.is_file():
-                zf.write(abs_path, rel_path)
-    buf.seek(0)
-
-    slug = project_id.split("/")[0]
-    from urllib.parse import quote as _quote_url
-    _safe = slug.encode("ascii", "ignore").decode() or "project"
-    _enc = _quote_url(f"{slug}-files.zip", safe="")
-    return StreamingResponse(
-        buf,
-        media_type="application/zip",
-        headers={"Content-Disposition": f'attachment; filename="{_safe}-files.zip"; filename*=UTF-8\'\'{_enc}'},
-    )
-
-
 # ===== Employee Workspace =====
 
 @router.get("/api/employee/{employee_id}/workspace")
@@ -3970,10 +3934,11 @@ async def download_project_workspace(project_id: str):
 # ===== Ex-Employees =====
 
 @router.get("/api/ex-employees")
-async def get_ex_employees() -> dict:
+async def get_ex_employees(limit: int = 100, offset: int = 0) -> dict:
     """List all ex-employees."""
     ex_emps = _store.load_ex_employees()
-    return {"ex_employees": list(ex_emps.values())}
+    all_ex = list(ex_emps.values())
+    return {"ex_employees": all_ex[offset:offset + limit], "total": len(all_ex)}
 
 
 @router.post("/api/ex-employees/{employee_id}/rehire")
@@ -6062,35 +6027,6 @@ async def get_room_chat(room_id: str):
     return load_room_chat(room_id)
 
 
-@router.get("/api/rooms/{room_id}/minutes")
-async def get_room_minutes(room_id: str):
-    """List archived meeting minutes for a room."""
-    from onemancompany.core.store import load_meeting_minutes
-    minutes = load_meeting_minutes(room_id)
-    # Return lightweight list (exclude full messages)
-    return [
-        {
-            "minute_id": m.get("minute_id", ""),
-            "topic": m.get("topic", ""),
-            "room_name": m.get("room_name", ""),
-            "participants": m.get("participants", []),
-            "summary": (m.get("summary", "") or "")[:200],
-            "message_count": len(m.get("messages", [])),
-        }
-        for m in minutes
-    ]
-
-
-@router.get("/api/meeting-minutes/{minute_id}")
-async def get_meeting_minute(minute_id: str):
-    """Get full content of a single meeting minute."""
-    from onemancompany.core.store import load_meeting_minute
-    data = load_meeting_minute(minute_id)
-    if not data:
-        raise HTTPException(status_code=404, detail="Meeting minute not found")
-    return data
-
-
 @router.post("/api/rooms/{room_id}/chat")
 async def post_room_chat(room_id: str, body: dict):
     """CEO sends a message to a meeting room chat.

package/src/onemancompany/core/product.py

@@ -19,6 +19,7 @@ from loguru import logger
 
 from onemancompany.core.config import (
     ACTIVITY_LOG_DIR_NAME,
+    EMPLOYEES_DIR,
     ISSUES_DIR_NAME,
     PRODUCT_YAML_FILENAME,
     PRODUCTS_DIR,
@@ -99,6 +100,17 @@ def _gen_id(prefix: str) -> str:
     return f"{prefix}{uuid.uuid4().hex[:8]}"
 
 
+def _validate_employee_id(emp_id: str, label: str = "Employee") -> None:
+    """Raise ValueError if emp_id does not correspond to a valid employee directory.
+
+    Empty string is allowed (means "no owner/assignee assigned").
+    """
+    if not emp_id:
+        return  # empty = unassigned, valid
+    if not (EMPLOYEES_DIR / emp_id).is_dir():
+        raise ValueError(f"{label} '{emp_id}' not found in employee registry")
+
+
 # ---------------------------------------------------------------------------
 # Product CRUD
 # ---------------------------------------------------------------------------
@@ -112,6 +124,7 @@ def create_product(
     current_version: str = "0.1.0",
 ) -> dict:
     """Create a new product. Returns the product dict."""
+    _validate_employee_id(owner_id, label="Owner")
     slug = _dedup_slug(_slugify(name))
     product_id = _gen_id("prod_")
     now = datetime.now().isoformat()
@@ -165,6 +178,8 @@ def list_products() -> list[dict]:
 
 def update_product(slug: str, **fields) -> dict | None:
     """Update product fields. Returns updated dict or None if not found."""
+    if "owner_id" in fields and fields["owner_id"] is not None:
+        _validate_employee_id(fields["owner_id"], label="Owner")
     with _get_slug_lock(slug):
         path = _product_yaml_path(slug)
         data = _read_yaml(path)
@@ -314,6 +329,8 @@ def create_issue(
     product = load_product(slug)
     if not product:
         raise ValueError(f"Product '{slug}' not found")
+    if assignee_id:
+        _validate_employee_id(assignee_id, label="Assignee")
     issue_id = _gen_id("issue_")
     product_id = product["id"]
     now = datetime.now().isoformat()
@@ -424,6 +441,9 @@ def update_issue(slug: str, issue_id: str, *, _skip_transition_check: bool = Fal
     _skip_transition_check: internal flag for system-derived status updates
     that may jump non-adjacent states (e.g. sync_issue_statuses).
     """
+    new_assignee = fields.get("assignee_id")
+    if new_assignee is not None and new_assignee != "":
+        _validate_employee_id(new_assignee, label="Assignee")
     with _get_slug_lock(slug):
         path = _issues_dir(slug) / f"{issue_id}.yaml"
         data = _read_yaml(path)
@@ -441,6 +461,11 @@ def update_issue(slug: str, issue_id: str, *, _skip_transition_check: bool = Fal
                 if old_value != value:
                     _append_history(data, key, old_value, value, changed_by="system")
                 data[key] = value
+        # Auto-set closed_at and resolution when status transitions to DONE
+        if new_status == IssueStatus.DONE.value and not data.get("closed_at"):
+            data["closed_at"] = datetime.now().isoformat()
+            if not data.get("resolution"):
+                data["resolution"] = IssueResolution.FIXED.value
         _write_yaml(path, data)
     mark_dirty(DirtyCategory.PRODUCTS)
     return data
@@ -999,12 +1024,25 @@ def release_version(
         product["current_version"] = new_version
         _write_yaml(_product_yaml_path(product_slug), product)
 
-    # Mark resolved issues as released (bypass validation — release is a system operation)
+    # Mark resolved issues as released — only DONE issues are eligible
+    skipped_issues: list[str] = []
     for issue_id in resolved_issue_ids:
         issue = load_issue(product_slug, issue_id)
-        if issue and issue.get("status") != IssueStatus.RELEASED.value:
-            update_issue(product_slug, issue_id, _skip_transition_check=True, status=IssueStatus.RELEASED.value)
+        if not issue:
+            skipped_issues.append(issue_id)
+            continue
+        if issue.get("status") == IssueStatus.RELEASED.value:
+            continue  # already released
+        if issue.get("status") != IssueStatus.DONE.value:
+            skipped_issues.append(issue_id)
+            logger.warning(
+                "[VERSION] Skipping issue {} — status '{}' is not DONE",
+                issue_id, issue.get("status"),
+            )
+            continue
+        update_issue(product_slug, issue_id, _skip_transition_check=True, status=IssueStatus.RELEASED.value)
 
+    version_record["skipped_issues"] = skipped_issues
     mark_dirty(DirtyCategory.PRODUCTS)
     logger.info("[VERSION] Released {} for product '{}'", new_version, product_slug)
     return version_record
@@ -1355,6 +1393,24 @@ def create_sprint(
             f"End date '{end_date}' must be after start date '{start_date}'"
         )
 
+    # Check for date overlap with non-closed sprints
+    existing_sprints = list_sprints(slug)
+    for existing in existing_sprints:
+        if existing.get("status") == SprintStatus.CLOSED.value:
+            continue
+        try:
+            ex_sd = datetime.strptime(existing["start_date"], "%Y-%m-%d")
+            ex_ed = datetime.strptime(existing["end_date"], "%Y-%m-%d")
+        except (ValueError, KeyError):
+            logger.debug("Skipping overlap check for sprint with invalid dates: {}", existing.get("id"))
+            continue
+        # Overlap: ranges overlap if start < other_end AND other_start < end
+        if sd < ex_ed and ex_sd < ed:
+            raise ValueError(
+                f"Sprint dates {start_date}..{end_date} overlap with "
+                f"'{existing['name']}' ({existing['start_date']}..{existing['end_date']})"
+            )
+
     sprint_id = _gen_id("sprint_")
     now = datetime.now().isoformat()
 
@@ -1478,8 +1534,9 @@ def close_sprint(slug: str, sprint_id: str) -> dict:
     total_count = len(all_issues)
     unfinished = [i for i in all_issues if i.get("status") not in _DONE_STATUSES]
 
-    # 3. Carry-over: find next planning sprint
+    # 3. Carry-over: find next planning sprint (sorted by start_date, earliest first)
     planning_sprints = list_sprints(slug, status=SprintStatus.PLANNING.value)
+    planning_sprints.sort(key=lambda s: s.get("start_date", ""))
     next_sprint = planning_sprints[0] if planning_sprints else None
 
     for issue in unfinished:

package/src/onemancompany/core/product_triggers.py

@@ -34,6 +34,12 @@ STALE_REVIEW_HOURS: int = 24            # Hours before an open review is conside
 BLOCKED_DAYS_THRESHOLD: int = 7         # Days before a blocked issue is flagged
 UNHANDLED_BACKLOG_THRESHOLD: int = 2    # Unhandled backlog issues before alert
 
+def _get_threshold(product: dict, key: str, default: int) -> int:
+    """Read per-product config threshold, falling back to module-level default."""
+    config = product.get("config") or {}
+    return config.get(key, default)
+
+
 # ---------------------------------------------------------------------------
 # Trigger handlers
 # ---------------------------------------------------------------------------
@@ -148,6 +154,76 @@ async def _create_project_for_issue(slug: str, issue: dict) -> str:
         return ""
 
 
+async def _create_review_project(product_slug: str, reason: str) -> str:
+    """Create a standalone review project for the product owner.
+
+    Unlike _create_project_for_issue, this doesn't take an issue dict —
+    it constructs a proper review-scoped project.
+    Returns project_id or empty string.
+    """
+    from pathlib import Path
+    from onemancompany.core.config import CEO_ID, EA_ID, TASK_TREE_FILENAME
+    from onemancompany.core.project_archive import async_create_project_from_task, get_project_dir
+    from onemancompany.core.task_lifecycle import NodeType, TaskPhase
+
+    product = prod.load_product(product_slug)
+    if not product:
+        return ""
+    product_id = product["id"]
+    owner_id = product.get("owner_id", "")
+    task_description = f"Product review for '{product['name']}': {reason}"
+
+    try:
+        project_id, iter_id = await async_create_project_from_task(
+            task_description,
+            product_id=product_id,
+        )
+        pdir = get_project_dir(project_id)
+        ctx_id = f"{project_id}/{iter_id}" if iter_id else project_id
+
+        product_ctx = prod.build_product_context(product_slug)
+        review_task = (
+            f"Product review needed: {reason}\n\n"
+            f"{product_ctx}\n\n"
+            f"[Project ID: {ctx_id}] [Project workspace: {pdir}]"
+        )
+
+        from onemancompany.core.task_tree import TaskTree
+        from onemancompany.core.vessel import _save_project_tree
+
+        tree = TaskTree(project_id=ctx_id, mode="standard")
+        ceo_root = tree.create_root(employee_id=CEO_ID, description=task_description)
+        ceo_root.node_type = NodeType.CEO_PROMPT.value
+        ceo_root.set_status(TaskPhase.PROCESSING)
+
+        owner_node = tree.add_child(
+            parent_id=ceo_root.id,
+            employee_id=owner_id or EA_ID,
+            description=review_task,
+            acceptance_criteria=[],
+            title=f"Product review: {reason[:50]}",
+        )
+        _save_project_tree(pdir, tree)
+
+        from onemancompany.core.agent_loop import employee_manager
+        target_id = owner_id or EA_ID
+        tree_path = str(Path(pdir) / TASK_TREE_FILENAME)
+        employee_manager.schedule_node(target_id, owner_node.id, tree_path)
+        employee_manager._schedule_next(target_id)
+
+        logger.info(
+            "[PRODUCT_TRIGGER] Created review project {} for product '{}' (reason: {})",
+            project_id, product_slug, reason,
+        )
+        return project_id
+    except Exception:
+        logger.exception(
+            "[PRODUCT_TRIGGER] Failed to create review project for '{}'",
+            product_slug,
+        )
+        return ""
+
+
 async def handle_project_complete(event: CompanyEvent) -> None:
     """When a project with product context completes, close issues + release version."""
     slug = event.payload.get("product_slug", "")
@@ -236,78 +312,69 @@ async def notify_owner(product_slug: str, reason: str = "") -> bool:
         f"[skill: product-review]"
     )
 
-    try:
-        from pathlib import Path
-        from onemancompany.core.config import CEO_ID, TASK_TREE_FILENAME
-        from onemancompany.core.project_archive import list_projects, get_project_dir
-        from onemancompany.core.task_tree import get_tree
-        from onemancompany.core.vessel import _save_project_tree
+    from pathlib import Path
+    from onemancompany.core.config import CEO_ID, TASK_TREE_FILENAME
+    from onemancompany.core.project_archive import list_projects, get_project_dir
+    from onemancompany.core.task_tree import get_tree
+    from onemancompany.core.vessel import _save_project_tree
 
-        # Find existing active project for this product
-        all_projects = list_projects()
-        active_product_projects = [
-            p for p in all_projects
-            if p.get("product_id") == product["id"] and p.get("status") == "active"
-        ]
+    # Find existing active project for this product
+    all_projects = list_projects()
+    active_product_projects = [
+        p for p in all_projects
+        if p.get("product_id") == product["id"] and p.get("status") == "active"
+    ]
 
-        if active_product_projects:
-            # Add task to existing project's tree
-            proj = active_product_projects[0]
-            pdir = get_project_dir(proj["project_id"])
-            tree_path = Path(pdir) / TASK_TREE_FILENAME
-            if not tree_path.exists():
-                logger.debug("[PRODUCT_TRIGGER] Tree not found for project {}", proj["project_id"])
+    if active_product_projects:
+        # Add task to existing project's tree
+        proj = active_product_projects[0]
+        pdir = get_project_dir(proj["project_id"])
+        tree_path = Path(pdir) / TASK_TREE_FILENAME
+        if not tree_path.exists():
+            logger.debug("[PRODUCT_TRIGGER] Tree not found for project {}", proj["project_id"])
+            return False
+
+        tree = get_tree(str(tree_path))
+
+        # Check if owner already has a pending/processing review task — skip if so
+        from onemancompany.core.task_lifecycle import TaskPhase
+        for node in tree.all_nodes():
+            if (node.employee_id == owner_id
+                    and node.status in (TaskPhase.PENDING.value, TaskPhase.PROCESSING.value)
+                    and "review" in (node.title or node.description or "").lower()):
+                logger.debug("[PRODUCT_TRIGGER] Owner {} already has pending review task {}, skip",
+                             owner_id, node.id)
                 return False
 
-            tree = get_tree(str(tree_path))
-
-            # Check if owner already has a pending/processing review task — skip if so
-            from onemancompany.core.task_lifecycle import TaskPhase
-            for node in tree.all_nodes():
-                if (node.employee_id == owner_id
-                        and node.status in (TaskPhase.PENDING.value, TaskPhase.PROCESSING.value)
-                        and "review" in (node.title or node.description or "").lower()):
-                    logger.debug("[PRODUCT_TRIGGER] Owner {} already has pending review task {}, skip",
-                                 owner_id, node.id)
-                    return False
-
-            # Find a suitable parent (EA node or root)
-            ea_node = tree.get_ea_node()
-            parent_id = ea_node.id if ea_node else tree.root_id
-
-            child = tree.add_child(
-                parent_id=parent_id,
-                employee_id=owner_id,
-                description=task_desc,
-                acceptance_criteria=[],
-                title=f"Product review: {reason[:50]}",
-            )
-            _save_project_tree(pdir, tree)
+        # Find a suitable parent (EA node or root)
+        ea_node = tree.get_ea_node()
+        parent_id = ea_node.id if ea_node else tree.root_id
 
-            # Schedule owner to execute
-            from onemancompany.core.agent_loop import employee_manager
-            employee_manager.schedule_node(owner_id, child.id, str(tree_path))
-            employee_manager._schedule_next(owner_id)
+        child = tree.add_child(
+            parent_id=parent_id,
+            employee_id=owner_id,
+            description=task_desc,
+            acceptance_criteria=[],
+            title=f"Product review: {reason[:50]}",
+        )
+        _save_project_tree(pdir, tree)
 
-            logger.info("[PRODUCT_TRIGGER] Pushed review task to owner {} on project {} (reason: {})",
-                        owner_id, proj["project_id"], reason)
-        else:
-            # No active project — create one
-            project_id = await _create_project_for_issue(product_slug, {
-                "id": f"review_{product_slug}",
-                "title": f"Product review: {product['name']}",
-                "description": task_desc,
-                "priority": IssuePriority.P2.value,
-            })
-            if not project_id:
-                return False
-            logger.info("[PRODUCT_TRIGGER] Created review project {} for owner {} (reason: {})",
-                        project_id, owner_id, reason)
+        # Schedule owner to execute
+        from onemancompany.core.agent_loop import employee_manager
+        employee_manager.schedule_node(owner_id, child.id, str(tree_path))
+        employee_manager._schedule_next(owner_id)
 
-        return True
-    except Exception:
-        logger.exception("[PRODUCT_TRIGGER] Failed to push review task for '{}'", product_slug)
-        return False
+        logger.info("[PRODUCT_TRIGGER] Pushed review task to owner {} on project {} (reason: {})",
+                    owner_id, proj["project_id"], reason)
+    else:
+        # No active project — create a dedicated review project
+        project_id = await _create_review_project(product_slug, reason)
+        if not project_id:
+            return False
+        logger.info("[PRODUCT_TRIGGER] Created review project {} for owner {} (reason: {})",
+                    project_id, owner_id, reason)
+
+    return True
 
 
 def sync_issue_statuses(product_slug: str) -> list[dict]:
@@ -398,6 +465,8 @@ async def run_product_check(product_slug: str) -> dict:
     if not owner_id:
         return {"skipped": True, "reason": "no owner"}
 
+    max_active = _get_threshold(product, "max_active_projects", MAX_ACTIVE_PROJECTS)
+
     from onemancompany.core.project_archive import list_projects
     all_projects = list_projects()
     active_for_product = [
@@ -425,7 +494,7 @@ async def run_product_check(product_slug: str) -> dict:
 
         # High priority + no active project → create project
         if priority in _AUTO_PROJECT_PRIORITIES and not linked:
-            if len(active_for_product) >= MAX_ACTIVE_PROJECTS:
+            if len(active_for_product) >= max_active:
                 logger.debug("[PRODUCT_CHECK] Skipping project for issue {} — 3+ active projects", issue["id"])
                 continue
             project_id = await _create_project_for_issue(product_slug, issue)
@@ -440,7 +509,7 @@ async def run_product_check(product_slug: str) -> dict:
 
         # Has assignee but no project → create project
         elif issue.get("assignee_id") and not linked:
-            if len(active_for_product) >= MAX_ACTIVE_PROJECTS:
+            if len(active_for_product) >= max_active:
                 continue
             project_id = await _create_project_for_issue(product_slug, issue)
             if project_id:
@@ -460,10 +529,12 @@ async def run_product_check(product_slug: str) -> dict:
         if target <= 0 or current >= target:
             continue  # met or invalid
 
+        kr_id = kr.get("id", "")
         kr_title = kr.get("title", "")
-        # Check if any open issue is related to this KR (by title match)
+        kr_label = f"kr:{kr_id}"
+        # Check if any open issue is already tracking this KR (by kr_id label)
         has_issue = any(
-            kr_title in i.get("title", "") or kr.get("id", "") in i.get("title", "")
+            kr_label in i.get("labels", [])
             for i in all_issues
             if i.get("status") not in (IssueStatus.DONE.value, IssueStatus.RELEASED.value)
         )
@@ -475,7 +546,7 @@ async def run_product_check(product_slug: str) -> dict:
                 description=f"Key result '{kr_title}' is at {current}/{target}. Create and execute work to advance this metric.",
                 priority=IssuePriority.P2,
                 created_by="system",
-                labels=["kr-tracking", "auto-created"],
+                labels=["kr-tracking", "auto-created", kr_label],
             )
             actions_taken.append(f"Created issue for KR: {kr_title}")
             all_issues.append(issue)  # prevent duplicate creation in same cycle
@@ -665,6 +736,12 @@ async def handle_issue_assigned(event: CompanyEvent) -> None:
         logger.debug("[PRODUCT_TRIGGER] Issue {} already has linked tasks {}, skip", issue_id, linked)
         return
 
+    # Re-read to guard against race with handle_issue_created
+    fresh_issue = prod.load_issue(slug, issue_id)
+    if fresh_issue and fresh_issue.get("linked_task_ids"):
+        logger.debug("[PRODUCT_TRIGGER] Race guard: issue {} got linked_task_ids before project creation", issue_id)
+        return
+
     logger.info("[PRODUCT_TRIGGER] Issue {} assigned to {} — creating project", issue_id, assignee_id)
     project_id = await _create_project_for_issue(slug, issue)