@sjawhar/opencode-legion-envoy 1.16.0 → 1.17.1

package/dist/src/server.js

@@ -13647,6 +13647,16 @@ var MessageEventPayloadSchema = object({
   reply_body: string2().optional(),
   author: object({ kind: string2(), id: string2() }).optional()
 });
+var DispatchTargetedMessagePayloadSchema = MessageEventPayloadSchema.extend({
+  id: string2(),
+  issue_key: string2(),
+  author: object({ kind: string2(), id: string2() }),
+  body: string2(),
+  target: string2(),
+  in_reply_to: string2().nullable(),
+  deliveries: array(unknown()),
+  created_at: string2()
+});
 var MessageDeliveryEventPayloadSchema = object({
   message_id: string2().optional(),
   attempt: number2().int().positive().optional(),
@@ -13721,7 +13731,9 @@ function snippetText(snippet) {
 // ../contracts/src/dispatch-tools.ts
 function dispatchToolSchema(spec, z, opts) {
   const shape = spec.arguments(z);
-  return spec.validation === undefined ? z.object(shape, opts) : z.refineObject(shape, spec.validation.check, spec.validation.message, opts);
+  const strict = opts?.strict ?? spec.strict;
+  const schemaOptions = strict === undefined ? undefined : { strict };
+  return spec.validation === undefined ? z.object(shape, schemaOptions) : z.refineObject(shape, spec.validation.check, spec.validation.message, schemaOptions);
 }
 var ISSUE_REFERENCE = "An issue is a native KEY or external owner/repo#n reference; an external reference creates its native issue in the repository's dashboard-configured project or, failing that, the default project (DISPATCH_DEFAULT_PROJECT).";
 var OWNER_REFERENCE = "Exactly one of issue and project is required. An issue is a native KEY or external owner/repo#n reference; a project is a project key such as CORE and addresses an unlinked project document named by artifact.";
@@ -13945,6 +13957,12 @@ var dispatchToolSpecs = [
       project: z.string().describe("Optional project key to search within.").optional(),
       limit: z.number({ int: true, min: 1, max: 50 }).describe("Maximum results, 1-50; default 20.").optional()
     })
+  },
+  {
+    name: "dispatch_open_asks",
+    description: "List this session's active unanswered asks across issues and project documents, including age and whose reply is needed. Call before saying you are waiting for human input.",
+    arguments: () => ({}),
+    strict: true
   }
 ];
 // ../contracts/src/envelope.ts
@@ -14682,6 +14700,12 @@ class DispatchClient {
   async ask(issue, input) {
     return this.#json("POST", ["api", "v1", "issues", await this.#resolveIssue(issue), "asks"], input);
   }
+  async openAsks(sessionID, since) {
+    return this.#json("GET", ["api", "v1", "asks", "open"], undefined, {
+      author_session: sessionID,
+      ...since === undefined ? {} : { since }
+    });
+  }
   async resolveAsk(id, input) {
     return this.#json("POST", ["api", "v1", "asks", id, "resolve"], input);
   }
@@ -14934,7 +14958,8 @@ var issueFreeTools = {
   dispatch_issue: true,
   dispatch_edit_ask: true,
   dispatch_resolve_ask: true,
-  dispatch_search: true
+  dispatch_search: true,
+  dispatch_open_asks: true
 };
 function canonicalExternalIssueRef(value) {
   const match = value.trim().match(externalIssueRefPattern);
@@ -15274,6 +15299,45 @@ function askSummary({ ask, replies }) {
   ].join(`
 `);
 }
+function openAskAge(ageSeconds) {
+  const seconds = Math.max(0, Math.floor(ageSeconds));
+  if (seconds < 60)
+    return `${seconds}s`;
+  const minutes = Math.floor(seconds / 60);
+  if (minutes < 60)
+    return `${minutes}m${seconds % 60 === 0 ? "" : ` ${seconds % 60}s`}`;
+  const hours = Math.floor(minutes / 60);
+  if (hours < 24)
+    return `${hours}h${minutes % 60 === 0 ? "" : ` ${minutes % 60}m`}`;
+  const days = Math.floor(hours / 24);
+  return `${days}d${hours % 24 === 0 ? "" : ` ${hours % 24}h`}`;
+}
+function openAskOwner(ask) {
+  return "issue" in ask.owner ? `${ask.owner.issue.key}: ${ask.owner.issue.title}` : `${ask.owner.document.project} / ${ask.owner.document.name}`;
+}
+function openAskLine(ask, baseUrl) {
+  const priority = ask.priority === null ? "" : `P${ask.priority} \xB7 `;
+  return `- ${openAskAge(ask.age_seconds)} \xB7 ${priority}${openAskOwner(ask)} \xB7 ${ask.question} \xB7 ${new URL(ask.ref, baseUrl).toString()}`;
+}
+function formatOpenAsksSummary(response, baseUrl) {
+  const scope = "active open asks you authored on open issues and project documents";
+  if (response.count === 0) {
+    return ["There are no unanswered asks for this session.", `Scope: ${scope}.`].join(`
+`);
+  }
+  const waitingOnHuman = response.asks.filter((ask) => ask.waiting_on === "human");
+  const waitingOnAgent = response.asks.filter((ask) => ask.waiting_on === "agent");
+  return [
+    `${response.count} unanswered ${response.count === 1 ? "ask" : "asks"} you authored on active issues and project documents.`,
+    "",
+    `Waiting on human (${waitingOnHuman.length}):`,
+    ...waitingOnHuman.map((ask) => openAskLine(ask, baseUrl)),
+    "",
+    `Waiting on agent (${waitingOnAgent.length}):`,
+    ...waitingOnAgent.map((ask) => openAskLine(ask, baseUrl))
+  ].join(`
+`);
+}
 function commentSummary({ comment, replies }) {
   const root = [
     `${comment.id} \xB7 ${comment.author.kind} ${comment.author.id}`,
@@ -15322,6 +15386,15 @@ async function executeDispatchTool(input) {
   if (!input.config.enabled || !configUrl || !configToken) {
     throw new Error("Dispatch is disabled; resolve both DISPATCH_URL and DISPATCH_TOKEN");
   }
+  if (input.tool === "dispatch_open_asks") {
+    const sessionId = input.sessionId?.trim();
+    if (!sessionId)
+      throw new Error("host session id is required for dispatch_open_asks");
+    toolSchema(input.tool).parse(input.args);
+    const client = new DispatchClient(configUrl, configToken, input.fetchImpl, input.signal);
+    const response = await client.openAsks(sessionId);
+    return { text: formatOpenAsksSummary(response, configUrl), details: { ...response } };
+  }
   const env = input.env ?? process.env;
   const exec = input.exec ?? defaultExec;
   const ownerArguments = await resolveOwnerArguments(input.tool, input.args, input.cwd, env, exec);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/opencode-legion-envoy",
-  "version": "1.16.0",
+  "version": "1.17.1",
   "type": "module",
   "main": "dist/src/server.js",
   "exports": {

package/skills/dispatch/SKILL.md

@@ -50,7 +50,7 @@ rest. Use these headings in this order.
 | Section | Required content | Form |
 | --- | --- | --- |
 | **Summary** | The problem, what changes for whom, and how we will know it worked — in plain words. | Three sentences at most. |
-| **Decisions needed** | Only decisions that need human authority, taste, or risk appetite. Each is one plain question, two or three options with what each costs, and your recommendation with its reason — understandable without opening anything else. Every item is an anchored `dispatch_ask`; an answered item moves into Requirements with its provenance. If there is nothing to decide, write `None: this records what was agreed.` and do not ask for a review. | One decision per line. |
+| **Decisions needed** | Only decisions that need human authority, taste, or risk appetite. Each is one plain question, two or three options with what each costs, and your recommendation with its reason — understandable without opening anything else. Each is a `dispatch_ask`; anchor it only when it concerns a document passage. An answered item moves into Requirements with its provenance. If there is nothing to decide, write `None: this records what was agreed.` and do not ask for a review. | One decision per line. |
 | **New since we talked** | Every design point the human did not settle in conversation, marked `inferred:` with the reasoning. Empty is fine. | One plain sentence per point. |
 | **Acceptance** | Each outcome names what a user will observe and the check that proves it (browser scenario, API call, or command). An outcome without a check is not acceptance. | Numbered lines. |
 | **Requirements** | What must hold, and where each came from: a quoted human sentence, or `inferred:` plus the reasoning. Readers treat inferred requirements as hypotheses. | `requirement \| where it comes from` table, or prose if the reader follows it more easily. |
@@ -132,9 +132,12 @@ containing block while retaining its quote as display text, so rewording the pas
 attached; a quote spanning top-level blocks, and existing anchors without a block, stay readable
 against their original document version if their quote disappears.
 
-An ask must be answerable from its own text and its anchor alone. Anchor a question about a document passage with `anchor`; thread one
-about a comment with `reply_to`; thread a follow-up on your own ask with `reply_to_ask`; cite anything else with a `dispatch://`
-reference (see [References](#references)). Never write "see above", "the message above", or "as attached".
+An ask must be answerable from its own text and its anchor alone. Anchor a question about a document
+passage with `anchor`. Follow up on an ask or comment with `dispatch_comment`; cite anything else
+with a `dispatch://` reference (see [References](#references)). Never write "see above", "the
+message above", or "as attached".
+
+Before saying you are waiting for human input, call `dispatch_open_asks`. It lists this session's active asks across open issues and project documents, including whether the human or agent owes the next reply.
 
 **Anything that needs the human is an ask, or it does not exist.** An approval, a credential,
 a setting only they can change, a review click, a conflict between two of their own rules - if

package/skills/legion-worker/SKILL.md

@@ -146,13 +146,20 @@ capability it needs; invoke GitHub through the credential helper:
 legion gh -- <gh args…>
 ```
 
-Three facts about `gh` in a worker pane. The `gh` on your `PATH` is a shim
-(`packages/pi-envoy/src/legion/gh-shim.ts`) that execs `legion gh -- "$@"`, so `gh …` and
-`legion gh -- …` are the same call, and each call redeems a fresh token from your session's
-grant — identity is supplied per call, never stored. Never run `gh auth login` or
-`gh auth setup-git`; there is no login state to create. The shim refuses `pr merge` (and a raw
-`gh api …/merge`): no worker role merges a pull request — the merge queue does, under its own
-authority.
+Four facts about `gh` in a worker pane. The `gh` on your `PATH` is a shim
+(`<state_dir>/worker-bin/gh`, installed by the daemon at startup — `packages/daemon/src/daemon/worker-bin.ts`)
+that execs `legion gh -- "$@"`, so `gh …` and `legion gh -- …` are the same call, and each call
+redeems a fresh token from your session's grant — identity is supplied per call, never stored.
+Never run `gh auth login` or `gh auth setup-git`; there is no login state to create. The shim
+refuses `pr merge` (and a raw `gh api …/merge`): no worker role merges a pull request — the merge
+queue does, under its own authority. The credential reaches `legion` through the file
+`$LEGION_GRANT_FILE` names, written before each of your bash commands by the extension; never
+`cat`, `echo`, copy, or `export` it — `legion credential`, `legion gh`, `jj git push`, and
+`legion handoff complete` read it themselves. The file is the pane's, not the command's: a `task`
+subagent, an `eval` subprocess, or a background job in your pane reads the grant your last bash
+command minted, so its `legion gh` or `jj git push` succeeds only within 60 seconds of that call
+and 403s afterwards — a timing artifact, not a broken credential; run credentialed commands from
+your own bash calls.
 
 ## GitHub PR comment attribution