@sjawhar/pi-legion-envoy 1.27.2 → 1.28.1

package/dist/envoy.js

@@ -29746,7 +29746,7 @@ var MessageEventPayloadSchema = object({
 });
 var DispatchTargetedMessagePayloadSchema = MessageEventPayloadSchema.extend({
   id: string2(),
-  issue_key: string2(),
+  issue_key: string2().nullable(),
   author: object({ kind: string2(), id: string2() }),
   body: string2(),
   target: string2(),
@@ -29759,6 +29759,7 @@ var MessageDeliveryEventPayloadSchema = object({
   attempt: number2().int().positive().optional(),
   delivery: _enum2(["btw", "aside", "steer"]).optional(),
   session_id: string2().optional(),
+  target: string2().optional(),
   title: string2().optional(),
   state: _enum2(["sent", "failed"]).optional(),
   error: string2().optional()
@@ -31095,7 +31096,7 @@ var DispatchTargetedFrameSchema = object({
 }).refine(({ event }) => event.type === "message.created" && DispatchTargetedMessagePayloadSchema.safeParse(event.payload).success, { message: "targeted delivery requires a message.created event" });
 var RecoverableDispatchDeliveryFailureSchema = object({
   event: object({
-    issue_key: string2(),
+    issue_key: string2().nullable(),
     payload: object({ id: string2(), body: string2().optional() }).passthrough()
   }).passthrough(),
   delivery: DispatchDeliveryRequestSchema
@@ -31298,7 +31299,7 @@ function renderInbound(raw, sessionID, subject) {
         askQuestion = dispatchAskQuestion(frame.event);
         messageReplyPreview = dispatchMessageReplyPreview(frame.event);
         dispatchReply = dispatchCommentReplyWith(frame.event, subject ?? envelope.topic);
-        if (frame.event.type === "message.created" && frame.event.issue_key !== null) {
+        if (frame.event.type === "message.created") {
           const message = MessageEventPayloadSchema.safeParse(frame.event.payload);
           const requested = DispatchDeliveryRequestSchema.safeParse(frame.delivery);
           if (message.success && requested.success && message.data.id !== undefined) {
@@ -31309,7 +31310,9 @@ function renderInbound(raw, sessionID, subject) {
               issueKey: frame.event.issue_key,
               body: message.data.body ?? envelope.payload_summary ?? ""
             };
-            dispatchReply = `dispatch_message(issue="${frame.event.issue_key}", in_reply_to="${message.data.id}", body="...")`;
+            if (frame.event.issue_key !== null) {
+              dispatchReply = `dispatch_message(issue="${frame.event.issue_key}", in_reply_to="${message.data.id}", body="...")`;
+            }
           }
         }
         dispatchEvent = {
@@ -32614,17 +32617,18 @@ async function executeDispatchTool(input) {
     }
     case "dispatch_message": {
       const inReplyTo = messageInReplyTo(args);
-      const message = await client.message(issue(), {
+      const issueKey = issue();
+      const message = await client.message(issueKey, {
         body: stringArg(args, "body"),
         ...inReplyTo === undefined ? {} : { in_reply_to: inReplyTo },
         actor
       });
-      const messageRef = `dispatch://${message.issue_key}/message/${message.id}`;
+      const messageRef = `dispatch://${issueKey}/message/${message.id}`;
       return {
         text: `Posted message ${message.id} (${messageRef})`,
         details: {
-          issue: message.issue_key,
-          topic: dispatchIssueSubject(message.issue_key, ">"),
+          issue: issueKey,
+          topic: dispatchIssueSubject(issueKey, ">"),
           message: message.id
         }
       };
@@ -33396,6 +33400,13 @@ function envoyExtension(pi) {
   };
   const deliver = async (subject, raw, reply) => {
     const rendered = renderInbound(raw, sessionID, subject);
+    if (reply !== "" && subject === agentSubject(sessionID)) {
+      try {
+        (await ensureConnection()).publish(reply);
+      } catch (error) {
+        console.warn(`[envoy] failed to acknowledge envelope ${rendered.envelope?.event_id ?? "unknown"}`, error);
+      }
+    }
     for (const topic of subscriptionRemovedTopics(raw, sessionID) ?? [])
       closeIntentionally(topic);
     const dedupeKey = rendered.envelope?.dedupe_key;
@@ -33452,9 +33463,6 @@ function envoyExtension(pi) {
         }
       }
     }
-    if (reply !== "" && subject === agentSubject(sessionID)) {
-      (await ensureConnection()).publish(reply);
-    }
   };
   const RESUBSCRIBE_DELAY_MS = Number(process.env.ENVOY_RESUBSCRIBE_DELAY_MS ?? "") || 5000;
   let shuttingDown = false;

package/dist/legion.js

@@ -29746,7 +29746,7 @@ var MessageEventPayloadSchema = object({
 });
 var DispatchTargetedMessagePayloadSchema = MessageEventPayloadSchema.extend({
   id: string2(),
-  issue_key: string2(),
+  issue_key: string2().nullable(),
   author: object({ kind: string2(), id: string2() }),
   body: string2(),
   target: string2(),
@@ -29759,6 +29759,7 @@ var MessageDeliveryEventPayloadSchema = object({
   attempt: number2().int().positive().optional(),
   delivery: _enum2(["btw", "aside", "steer"]).optional(),
   session_id: string2().optional(),
+  target: string2().optional(),
   title: string2().optional(),
   state: _enum2(["sent", "failed"]).optional(),
   error: string2().optional()
@@ -31548,7 +31549,7 @@ var DispatchTargetedFrameSchema = object({
 }).refine(({ event }) => event.type === "message.created" && DispatchTargetedMessagePayloadSchema.safeParse(event.payload).success, { message: "targeted delivery requires a message.created event" });
 var RecoverableDispatchDeliveryFailureSchema = object({
   event: object({
-    issue_key: string2(),
+    issue_key: string2().nullable(),
     payload: object({ id: string2(), body: string2().optional() }).passthrough()
   }).passthrough(),
   delivery: DispatchDeliveryRequestSchema
@@ -31751,7 +31752,7 @@ function renderInbound(raw, sessionID, subject) {
         askQuestion = dispatchAskQuestion(frame.event);
         messageReplyPreview = dispatchMessageReplyPreview(frame.event);
         dispatchReply = dispatchCommentReplyWith(frame.event, subject ?? envelope.topic);
-        if (frame.event.type === "message.created" && frame.event.issue_key !== null) {
+        if (frame.event.type === "message.created") {
           const message = MessageEventPayloadSchema.safeParse(frame.event.payload);
           const requested = DispatchDeliveryRequestSchema.safeParse(frame.delivery);
           if (message.success && requested.success && message.data.id !== undefined) {
@@ -31762,7 +31763,9 @@ function renderInbound(raw, sessionID, subject) {
               issueKey: frame.event.issue_key,
               body: message.data.body ?? envelope.payload_summary ?? ""
             };
-            dispatchReply = `dispatch_message(issue="${frame.event.issue_key}", in_reply_to="${message.data.id}", body="...")`;
+            if (frame.event.issue_key !== null) {
+              dispatchReply = `dispatch_message(issue="${frame.event.issue_key}", in_reply_to="${message.data.id}", body="...")`;
+            }
           }
         }
         dispatchEvent = {
@@ -33045,17 +33048,18 @@ async function executeDispatchTool(input) {
     }
     case "dispatch_message": {
       const inReplyTo = messageInReplyTo(args);
-      const message = await client.message(issue(), {
+      const issueKey = issue();
+      const message = await client.message(issueKey, {
         body: stringArg(args, "body"),
         ...inReplyTo === undefined ? {} : { in_reply_to: inReplyTo },
         actor
       });
-      const messageRef = `dispatch://${message.issue_key}/message/${message.id}`;
+      const messageRef = `dispatch://${issueKey}/message/${message.id}`;
       return {
         text: `Posted message ${message.id} (${messageRef})`,
         details: {
-          issue: message.issue_key,
-          topic: dispatchIssueSubject(message.issue_key, ">"),
+          issue: issueKey,
+          topic: dispatchIssueSubject(issueKey, ">"),
           message: message.id
         }
       };
@@ -33819,6 +33823,13 @@ function envoyExtension(pi) {
   };
   const deliver = async (subject, raw, reply) => {
     const rendered = renderInbound(raw, sessionID, subject);
+    if (reply !== "" && subject === agentSubject(sessionID)) {
+      try {
+        (await ensureConnection()).publish(reply);
+      } catch (error) {
+        console.warn(`[envoy] failed to acknowledge envelope ${rendered.envelope?.event_id ?? "unknown"}`, error);
+      }
+    }
     for (const topic of subscriptionRemovedTopics(raw, sessionID) ?? [])
       closeIntentionally(topic);
     const dedupeKey = rendered.envelope?.dedupe_key;
@@ -33875,9 +33886,6 @@ function envoyExtension(pi) {
         }
       }
     }
-    if (reply !== "" && subject === agentSubject(sessionID)) {
-      (await ensureConnection()).publish(reply);
-    }
   };
   const RESUBSCRIBE_DELAY_MS = Number(process.env.ENVOY_RESUBSCRIBE_DELAY_MS ?? "") || 5000;
   let shuttingDown = false;

package/dist/skills/envoy/SKILL.md

@@ -148,11 +148,16 @@ not construct a token from a partial issue reference.
 
 ## Legion exception lane
 
-`no_holder` and `delivery_failed` for a Legion role are daemon liveness signals, not reasons to
-add a second subscriber or manually retry. For example, treat a `delivery_failed` wake as the
-daemon's responsibility to revive or recreate the backing worker and re-deliver; otherwise it
-resurrects the root process with derived catch-up and the workspace handoffs. Raw delivery failures
-stay out of architect context.
+`no_holder`, `delivery_failed`, and `receipt_timeout` for a Legion role are daemon liveness
+signals, not reasons to add a second subscriber or manually retry. `no_holder`: no live session
+holds the role. `delivery_failed`: the message was not forwarded at all — the holder lookup
+failed, the holder was stale, or the publish errored. `receipt_timeout`: the listener forwarded
+the message to a registered, live holder and no receipt arrived inside the window; its payload
+keeps `original_topic`, `event_id`, `payload`, and the original `dedupe_key`, so the daemon can
+re-send the same message and the receiver's dedupe drops a copy that did arrive. Treat any of
+these wakes as the daemon's responsibility to revive or recreate the backing worker and
+re-deliver; otherwise it resurrects the root process with derived catch-up and the workspace
+handoffs. Raw delivery failures stay out of architect context.
 
 ## Slack
 

package/dist/skills/legion-retro/SKILL.md

@@ -45,7 +45,7 @@ before step 3. The design gate is not a substitute for review and retro.
 
 1. Re-read the issue, its acceptance criteria, the PR, test evidence, and review evidence.
    Confirm the PR carries both proofs: the implementer's own `E2E (implementer)` line and the tester's `E2E (tester)` line,
-   each naming a production-like surface (a scratch daemon, a smoke rig, a sandbox repository, a devN
+   each naming a production-like surface (the daemon's test harness (`packages/daemon/src/daemon/__tests__/`) and real-process fixtures; a live check at the operator's next daemon restart, recorded on the PR; a sandbox repository, a devN
    stack, staging, or a local stack with real migrations), a command or run id, an observation, a head
    SHA, and a negative control. If either is missing, or links only a unit suite, the retro's first
    durable learning is that gap and the issue goes back — to the implementer for its own proof, to the

package/dist/skills/legion-worker/SKILL.md

@@ -251,7 +251,7 @@ PR opens, and every later phase keeps it current rather than replacing it:
 ```
 ## Verification
 
-**CI:** `Tests` run <run-id> — jobs lint, pr-title, typecheck, test all success at <head-sha>.
+**CI:** `Tests` run <run-id> — jobs lint, typecheck, test all success at <head-sha>; `PR Title` run <run-id> — job pr-title success at <head-sha>.
 
 **Threads:** <n> resolved, 0 unresolved. Each disposed individually, never in bulk:
 - Thread <id>: fixed in <commit-sha> — <one line>.
@@ -276,6 +276,7 @@ Verified the implementer's proof by <re-running its command | driving the same s
 **Fast-follow:** <one named cleanup item and where it will land>, or "none".
 
 **Chain:** stacked on <base bookmark> frozen at <sha> / not stacked.
+**Retarget:** Retargeting a pull request to a new base does not re-run Tests; after a retarget, rebase onto the new base and push — the new head runs Tests against the new merge result — and cite that run in the PR body.
 ```
 
 - **Threads are dispositioned individually, never resolved in bulk.** Every open review
@@ -301,11 +302,11 @@ Verified the implementer's proof by <re-running its command | driving the same s
   changes behavior, hides an error, or breaks a gate is fixed here — never deferred.
   Findings about naming, duplication, or wording are batched into the single `Fast-follow`
   line instead of iterating per push.
-- **Rebase only on a real conflict.** Sami, 2026-09-11, verbatim:
+- **Rebase only on a real conflict, except after a base retarget.** Sami, 2026-09-11, verbatim:
   "Please don't do unnecessary rebases (i.e. unless there are merge conflicts). The CI queue is too long and slow."
-  The implementer rebases the issue branch only when GitHub reports it `CONFLICTING` or the
-  controller asks because of a conflict — never to pick up `main` or to refresh CI. A single
-  failed CI job is re-run on its own with `legion gh -- run rerun <run-id> --failed`, never by
+  The implementer rebases the issue branch only when GitHub reports it `CONFLICTING`, the controller asks
+  because of a conflict, or after the pull request is retargeted to a new base. Otherwise, never rebase to
+  pick up `main` or refresh CI. A single failed CI job is re-run on its own with `legion gh -- run rerun <run-id> --failed`, never by
   pushing a new commit. A conflict-forced rebase that leaves the branch's diff unchanged is a
   confirmation, not a new round (see *The unchanged-diff check* below). Before rebasing, record
   the fingerprint at the current tip; after pushing the rebased branch, record it at the new
@@ -317,9 +318,10 @@ Verified the implementer's proof by <re-running its command | driving the same s
   field names naming, duplication, or wording cleanup only; anything that changes behaviour,
   hides an error, or breaks a gate lands in this PR.
 - **The implementer proves the change before its phase completes, and writes the `E2E (implementer)` line when the pull request opens.**
-  The proof is the changed behaviour exercised on the surface a user reaches it through — a
-  scratch daemon, a smoke rig, a sandbox repository, a real browser, a devN stack, a local stack
-  with real migrations — with the exact command or run id, what was observed, the head SHA, and
+  The proof is the changed behaviour exercised on the surface a user reaches it through — the daemon's
+  test harness (`packages/daemon/src/daemon/__tests__/`) and real-process fixtures; a live check at the
+  operator's next daemon restart, recorded on the PR; a sandbox repository, a real browser, a devN stack,
+  or a local stack with real migrations — with the exact command or run id, what was observed, the head SHA,
   one negative control. The same proof goes into `.legion/implement.json` as its required `proof`
   array (`legion handoff write --phase implement` refuses a payload without one and names the
   field), and into the PR body, because the reviewer and the merger verify facts on GitHub and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/pi-legion-envoy",
-  "version": "1.27.2",
+  "version": "1.28.1",
   "type": "module",
   "omp": {
     "extensions": [