@sjawhar/opencode-legion-envoy 1.14.0 → 1.14.1

package/dist/src/server.js

@@ -13663,7 +13663,9 @@ var ChildStatusEventPayloadSchema = object({
 var SubscriptionRemovedEventPayloadSchema = object({
   session_id: string2().optional(),
   by: object({ kind: string2(), id: string2().optional() }).passthrough().optional(),
-  topics: array(string2()).optional()
+  topics: array(string2()).optional(),
+  pending: boolean2().optional(),
+  request_event_id: number2().int().positive().optional()
 });
 // ../contracts/src/dispatch-snippet.ts
 var HTML_ENTITIES = [
@@ -14616,6 +14618,11 @@ function asErrorShape(value) {
 function isJson(response) {
   return response.headers.get("content-type")?.includes("application/json") ?? false;
 }
+var DISPATCH_TOOL_DEADLINE_MS = 60000;
+function requestSignal(signal) {
+  const deadline = AbortSignal.timeout(DISPATCH_TOOL_DEADLINE_MS);
+  return signal === undefined ? deadline : AbortSignal.any([signal, deadline]);
+}
 
 class DispatchClient {
   token;
@@ -14623,10 +14630,12 @@ class DispatchClient {
   #baseUrl;
   #resolvedIssues = new Map;
   #creatingIssues = new Map;
-  constructor(baseUrl, token, fetchImpl = fetch) {
+  #signal;
+  constructor(baseUrl, token, fetchImpl = fetch, signal) {
     this.token = token;
     this.fetchImpl = fetchImpl;
     this.#baseUrl = baseUrl.replace(/\/+$/, "");
+    this.#signal = requestSignal(signal);
   }
   async issue(input) {
     return this.#json("POST", ["api", "v1", "issues"], input);
@@ -14838,6 +14847,7 @@ class DispatchClient {
     const response = await this.fetchImpl(this.#url(path, query), {
       method,
       headers,
+      signal: this.#signal,
       ...body === undefined ? {} : { body: JSON.stringify(body) }
     });
     return this.#response(response);
@@ -14846,7 +14856,8 @@ class DispatchClient {
     const response = await this.fetchImpl(this.#url(path), {
       method,
       headers: { Accept: "application/json", Authorization: `Bearer ${this.token}` },
-      body
+      body,
+      signal: this.#signal
     });
     return this.#response(response);
   }
@@ -15311,7 +15322,7 @@ async function executeDispatchTool(input) {
   const ownerArguments = await resolveOwnerArguments(input.tool, input.args, input.cwd, env, exec);
   const args = toolSchema(input.tool).parse(ownerArguments.args);
   const actor = toolActor(await resolveOrigin(env, exec, input.cwd), input);
-  const client = new DispatchClient(configUrl, configToken, input.fetchImpl);
+  const client = new DispatchClient(configUrl, configToken, input.fetchImpl, input.signal);
   const owner = ownerArguments.owner?.kind === "issue" ? {
     kind: "issue",
     issue: await ensureIssue(client, ownerArguments.owner.issue, actor)
@@ -15894,7 +15905,7 @@ class EnvoyApiError extends Error {
 function createEnvoyClient(config) {
   const baseUrl = normalizeEnvoyUrl(config.baseUrl);
   const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  const apiToken = process.env["ENVOY_TOKEN"];
+  const { ENVOY_TOKEN: apiToken } = process.env;
   const request = async (path, init) => {
     const url = `${baseUrl}${path}`;
     for (let attempt = 0;attempt < 2; attempt += 1) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/opencode-legion-envoy",
-  "version": "1.14.0",
+  "version": "1.14.1",
   "type": "module",
   "main": "dist/src/server.js",
   "exports": {

package/skills/dispatch/SKILL.md

@@ -165,7 +165,8 @@ dispatch_edit_ask({
 })
 ```
 At least one field besides `ask` is required. Use this only while the same decision remains open: it keeps the prior text in the event
-log. An answered or resolved ask cannot be edited. If the decision is moot or superseded, retract the old ask and open a new one.
+log and invalidates any answer draft against the prior `edited_at` revision, so the human sees the new wording and explicitly reconfirms.
+An answered or resolved ask cannot be edited. If the decision is moot or superseded, retract the old ask and open a new one.
 
 An ask stays open until a human answers, unless its question no longer needs that answer. Retract a moot or superseded question, or
 self-resolve one after finding the answer:

package/skills/legion-architect/SKILL.md

@@ -127,10 +127,12 @@ legion({
 
 The daemon spawns that sub-architect as its own process with the child's context already
 in its environment; a resume of an existing role continues the same process instead of
-starting a fresh one. Keep the returned session identifiers, because retro and adjustment
-use those live sessions. Park while children are in flight. On each child closure,
-re-scope open work, close obsolete work with a reason, and release the next wave only
-when it now makes sense. There is no inter-child dependency mechanism to encode.
+starting a fresh one. Keep the returned session identifiers; retro and adjustment resume
+those same sessions through `spawn_worker` (a finished worker is retired after
+`worker_idle_retire_seconds` and comes back from its session file). Park while children are
+in flight. On each child closure, re-scope open work, close obsolete work with a reason, and
+release the next wave only when it now makes sense. There is no inter-child dependency
+mechanism to encode.
 
 ## 3. Children complete
 
@@ -160,18 +162,24 @@ review and the merge-gate sequence.
 
 ## 5. Retro
 
-Retro is mandatory for every issue that passed review, before merge. Message the
-implementer's live session (idle since it completed its phase; the daemon never tears
-it down) with `envoy_publish` to its role token, naming the skill:
+Retro is mandatory for every issue that passed review, before merge. Send the implementer
+back in through the daemon — `spawn_worker` on the implementer carrying the retro task. This
+resumes the same agent whether its pane is still live or the daemon has already retired it
+idle (a finished worker is retired after `worker_idle_retire_seconds`, default 600 s, and
+resumed from its session file on its next assignment). Never `envoy_publish` to a finished
+worker's role topic for this: a retired role has no live holder and the publish is rejected
+with 404.
 
 ```text
-envoy_publish({
-  topic: "notifications.role.<implementer's encoded token>",
-  message: "Run the legion-retro skill now. Capture durable learnings and post the issue comment; do not create a .legion handoff file."
+legion({
+  op: "spawn_worker",
+  issue: "LEGION-40",
+  role: "implementer",
+  task: "Run the legion-retro skill now. Capture durable learnings and post the issue comment; do not create a .legion handoff file."
 })
 ```
 
-Wait for the messaged implementer to report its durable retro result. Retro output is
+Wait for the implementer to report its durable retro result. Retro output is
 `docs/solutions/` plus an issue comment; it must not create a `.legion` file or change
 the reviewer-approved head after cleanup.
 
@@ -189,7 +197,8 @@ Preserve this order exactly:
    head. The deletion must land before that approval, which is head-pinned. An implementer
    completion always writes the issue's status as `testing`; this one is not a test round,
    so on its `phase-complete` wake call `legion({ op: "set_status", issue, status: "retro" })`
-   before messaging the reviewer to approve;
+   before `spawn_worker` on the reviewer to approve that head (a finished reviewer may already
+   be retired; `spawn_worker` resumes it);
 3. retro completes without dirtying the branch beyond `docs/solutions/`;
 4. the merger verifies the current head is the reviewer-approved head plus only the retro
    commits and publishes `READY #<n> at <sha>` to `notifications.role.pr-queue`; it never

package/skills/legion-worker/SKILL.md

@@ -61,7 +61,9 @@ Reach any live role on this issue the same way you reach the architect: `envoy_p
 `notifications.role.` followed by that role's encoded token. Use it when you need context an
 earlier phase has that its handoff doesn't cover — ask the planner why a constraint was
 scoped that way, ask the implementer what a commit actually did. A role that finished its
-phase is still alive and idle in its pane; it answers.
+phase stays idle in its pane for the daemon's idle-retire window and answers; once retired (no
+live holder, a publish is rejected 404), read its committed handoff or ask the architect to
+`spawn_worker` it.
 
 ## Workspace and handoff precedence
 
@@ -316,7 +318,9 @@ record of this issue's active phase. Do not add pipeline labels, run a controlle
 invent a different completion protocol — this is the whole contract.
 
 **Stay in this session afterward.** Your process does not exit when your phase completes;
-it goes idle in its pane. Other roles on this issue may reach you through Envoy with
+it goes idle in its pane, and after `worker_idle_retire_seconds` (default 600 s) idle with no
+active phase the daemon retires it — your next assignment resumes this same session from its
+session file, so it is still you. Other roles on this issue may reach you through Envoy with
 questions about the work you did — answer them, reading `$LEGION_WORKSPACE` and your own
 committed handoff as needed, without mutating anything (see Workspace and handoff
 precedence above). You will also be the one resumed, with a new prompt in this same