crewforth 3.2.0-rc.7 → 3.2.0-rc.9

package/CHANGELOG.md

@@ -220,6 +220,11 @@ versioning follows [SemVer](https://semver.org/).
 
 ### Fixed
 
+- **Crew Map reads a `fetch` call's method from its own options only.** The method was taken from the next four
+  lines, so in a file of one-line calls a `{ method: 'POST' }` on a later call was given to the earlier ones, and the
+  map reported `POST /api/products is called but no endpoint in this repo provides it` (endpoint-missing) for a
+  plain `fetch('/api/products')`. The scan now reads the call's arguments up to its own closing parenthesis, over
+  strings and nested brackets; a method on a later line of the same call is still read.
 - **A push approval covers a tag on the approved commit.** `git push <remote> <tag>` had no way to be approved: the
   click and `/crew-approve push` both record a push of the branch, and the tag push of a release was refused after
   either, so the session handed the user the command to run. It now passes when the tag points at the commit the
@@ -228,6 +233,9 @@ versioning follows [SemVer](https://semver.org/).
 - **`change: review` is read as `audit`.** The model table of the working rules names review with audit, and
   `crew-review-agent` cards that said `change: review` were refused. It now takes the audit floor, on a critical path
   too; a kind that is not on the list is still refused.
+- **A one-line task card may open with `Kart`.** Sessions that write in Turkish lead the card with `Kart —` as
+  others write `Card —`, and the call was refused as having no card. The Turkish word is read like the English one;
+  the fields after it are held to the same rules.
 - **`above:` is read anywhere among a task card's three lines.** A card with `above: <why>` between `change:` and
   `verify:` was refused ("line 3 of the task is not one of files:, change:, verify:") and the call was sent again
   with the line moved down. It is now read in any position and keeps the model as it does after the three; the three

package/VERSION

@@ -1 +1 @@
-3.2.0-rc.7
+3.2.0-rc.9

package/kit/eval/lib/crew-map/surface.mjs

@@ -270,6 +270,24 @@ function firstArg(L, i, from) {
   }
   return null;
 }
+// The arguments of a call whose `(` ends at `from` on line i, up to its own `)`, across at most four lines: strings
+// and nested brackets are stepped over, so `method:` is read from this call's options and never from the next call's.
+function callArgs(L, i, from) {
+  let out = ''; let depth = 0; let q = null;
+  for (let j = i; j < Math.min(L.length, i + 4); j++) {
+    const s = j === i ? L[i].slice(from) : L[j];
+    for (let k = 0; k < s.length; k++) {
+      const c = s[k];
+      if (q) { if (c === '\\') { out += c + (s[k + 1] ?? ''); k += 1; continue; } if (c === q) q = null; }
+      else if (c === '"' || c === "'" || c === '`') q = c;
+      else if (c === '(' || c === '[' || c === '{') depth += 1;
+      else if (c === ')' || c === ']' || c === '}') { if (depth === 0) return out; depth -= 1; }
+      out += c;
+    }
+    out += ' ';
+  }
+  return out;
+}
 // The names a module calls HTTP through: axios, and every `x = axios.create(…)` in any of its files (a client made
 // in lib/api.ts is called from every component). A name a file itself makes a server of is not one there.
 function httpClients(pj, m) {
@@ -358,8 +376,7 @@ export function endpoints(pj, st, out) {
           if (nm && nest !== null) add(provides, m, nm[1] === 'All' ? '*' : nm[1], join(nest, nm[2] || ''), f, i, `@${nm[1]}`);
           const fe = /\bfetch\(\s*(['"`])([^'"`]+)\1/.exec(l);
           if (fe && !/^https?:/.test(fe[2])) {
-            const win = L.slice(i, i + 4).join(' ');
-            const mt = /method\s*:\s*['"](\w+)['"]/.exec(win);
+            const mt = /method\s*:\s*['"](\w+)['"]/.exec(callArgs(L, i, fe.index + l.slice(fe.index).indexOf('(') + 1));
             add(consumes, m, mt ? mt[1] : 'GET', fe[2], f, i, fe[2]);
           }
           // `api.get<User[]>("/x")` and a call whose path is on the next line read alike.

package/kit/eval/smoke-test.sh

@@ -8601,7 +8601,8 @@ done
 _v2b=""; _v2one(){ printf '{"hook_event_name":"PreToolUse","tool_name":"Agent","tool_input":{"prompt":"%s\\n\\nDo it.","subagent_type":"crew-backend-expert","model":"%s"}}' "$1" "$2" > "$_v2/one.json"
   ( cd "$_v2p" && _v2e bash "$_V2G" < "$_v2/one.json" >"$_v2/oneout" 2>"$_v2/err" ); _rc=$?; }
 for _pr in 'files: src/ui/a.ts · change: feature · verify: true' 'files: src/ui/a.ts; change: feature; verify: true' 'files: src/ui/a.ts | change: feature | verify: true' \
-           'Card: files: src/ui/a.ts, src/ui/b.ts · change: feature · verify: true.' 'Card — files: src/ui/a.ts · change: text · verify: none'; do
+           'Card: files: src/ui/a.ts, src/ui/b.ts · change: feature · verify: true.' 'Card — files: src/ui/a.ts · change: text · verify: none' \
+           'Kart — files: src/ui/a.ts · change: text · verify: none' 'Kart: files: src/ui/a.ts · change: feature · verify: true'; do
   _v2one "$_pr" sonnet; [ "$_rc" = 0 ] || _v2b="$_v2b [refused: $_pr → $_rc $(head -c 120 "$_v2/err")]"
 done
 _v2one 'files: src/payments/p.ts · change: feature · verify: true' sonnet
@@ -8612,10 +8613,10 @@ _v2one 'files: src/ui/a.ts · change: feature (a small one) · verify: true' son
 _v2one 'files: src/ui/a.ts · change: architecture (planning only) · verify: none' sonnet
 { [ "$_rc" = 2 ] && grep -q 'runs on opus' "$_v2/err"; } || _v2b="$_v2b [architecture (planning only) was not read as architecture, which runs on opus (rc $_rc)]"
 _v2one 'files: src/ui/a.ts\nchange: refactor (no behaviour change)\nverify: true' sonnet; [ "$_rc" = 0 ] || _v2b="$_v2b [a kind with a note in parentheses, three lines → $_rc]"
-for _pr in 'files: a · change: archi (planning only) · verify: none' 'files: a · change: feature extra · verify: none' 'files: a · verify: true · change: text' 'files: a · change: feature' 'Do this. files: a · change: feature · verify: true'; do
+for _pr in 'files: a · change: archi (planning only) · verify: none' 'files: a · change: feature extra · verify: none' 'files: a · verify: true · change: text' 'files: a · change: feature' 'Do this. files: a · change: feature · verify: true' 'Kartal files: a · change: feature · verify: true'; do
   _v2one "$_pr" sonnet; { [ "$_rc" = 2 ] && grep -q 'opens with its task card' "$_v2/err"; } || _v2b="$_v2b [passed: $_pr → $_rc]"
 done
-[ -z "$_v2b" ] && pass "a card on one line (· ; | separators, a Card: lead, above: on the line) is read by its labels and held to the three-line rules: a critical path still needs opus; a kind with a note in parentheses is the kind, on one line or three; a bad change, labels out of order, a missing verify or prose first are refused" \
+[ -z "$_v2b" ] && pass "a card on one line (· ; | separators, a Card: or Kart: lead, above: on the line) is read by its labels and held to the three-line rules: a critical path still needs opus; a kind with a note in parentheses is the kind, on one line or three; a bad change, labels out of order, a missing verify or prose first are refused" \
                || fail "the one-line card:$_v2b"
 # `above:` among the three lines, not only after them (2026-10-19: 2 of 19 line refusals had it between change: and
 # verify:; the retry moved it down and passed). It keeps the model the same way; the three are still all required.

package/kit/hooks/guard-agent-model.sh

@@ -442,11 +442,12 @@ _am_trim(){  # $1 -> _AMT: no white space around it, and no separator or full st
 }
 # THE CARD ON ONE LINE. Sessions write it as `files: … · change: … · verify: …` (measured on this machine's transcripts,
 # 2026-10-18: 17 of the 39 calls refused for their card, in 6 projects; the next call was the same card on three lines).
-# It is read by its labels, in that order, after an optional `Card:` / `Card —`; `above: <why>` may close the line. The
-# fields are then held to exactly the rules of the three-line card below, so nothing passes here that would not there.
+# It is read by its labels, in that order, after an optional `Card:` / `Card —` (or `Kart`, the Turkish word: 2 refused
+# calls, 2026-10-21); `above: <why>` may close the line. The fields are then held to exactly the rules of the
+# three-line card below, so nothing passes here that would not there.
 _am_card_line(){  # $1 = the first line of the task -> 0 and CARD_* set (unchecked); 1 when it is not a one-line card
   local l="$1" r f c v a=""
-  case "$l" in [Cc]ard*) l="${l#[Cc]ard}"; l="${l#\*\*}"
+  case "$l" in [Cc]ard*|[Kk]art*) l="${l#[Cc]ard}"; l="${l#[Kk]art}"; l="${l#\*\*}"
     while :; do case "$l" in [$' \t:*']*|'—'*|'–'*|-*) case "$l" in '—'*) l="${l#'—'}" ;; '–'*) l="${l#'–'}" ;; *) l="${l:1}" ;; esac ;; *) break ;; esac; done ;;
   esac
   case "$l" in files:*) ;; *) return 1 ;; esac

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewforth",
-  "version": "3.2.0-rc.7",
+  "version": "3.2.0-rc.9",
   "description": "Crewforth — your engineering crew for Claude Code: agents, skills and tool-level gates, in any stack.",
   "bin": {
     "crewforth": "bin/cli.js"