crewly 1.20.152 → 1.20.154

package/dist/backend/backend/src/controllers/worktree-janitor/worktree-janitor.routes.js

@@ -0,0 +1,63 @@
+/**
+ * Worktree Janitor Routes
+ *
+ * Debug and manual-trigger endpoints for {@link WorktreeJanitorService},
+ * mounted at `/api/worktree-janitor` behind the same API-token middleware as
+ * every other `/api` route.
+ *
+ * - `GET  /api/worktree-janitor/worktrees` — dry run: every worktree of every
+ *   known repo with its keep/remove verdict and reason. Removes nothing.
+ * - `POST /api/worktree-janitor/run` — one real pass now. Refused (409) while
+ *   the `CREWLY_WORKTREE_JANITOR=0` kill switch is on.
+ *
+ * @module controllers/worktree-janitor/worktree-janitor.routes
+ */
+import { Router } from 'express';
+import { WorktreeJanitorService } from '../../services/worktree/worktree-janitor.service.js';
+import { WORKTREE_JANITOR_CONSTANTS } from '../../constants.js';
+/**
+ * Create the worktree janitor router.
+ *
+ * @param getService - Service accessor (tests inject their own)
+ * @returns Express router for /api/worktree-janitor
+ *
+ * @example
+ * ```typescript
+ * router.use('/worktree-janitor', createWorktreeJanitorRouter());
+ * ```
+ */
+export function createWorktreeJanitorRouter(getService = () => WorktreeJanitorService.getInstance()) {
+    const router = Router();
+    router.get('/worktrees', async (_req, res) => {
+        try {
+            const service = getService();
+            const plan = await service.plan();
+            res.json({
+                success: true,
+                data: { ...plan, disabled: service.isDisabled(), lastRun: service.getLastSummary() },
+            });
+        }
+        catch (error) {
+            res.status(500).json({ success: false, error: error instanceof Error ? error.message : String(error) });
+        }
+    });
+    router.post('/run', async (_req, res) => {
+        try {
+            const service = getService();
+            if (service.isDisabled()) {
+                res.status(409).json({
+                    success: false,
+                    error: `Worktree janitor is disabled (${WORKTREE_JANITOR_CONSTANTS.ENV_VAR}=0)`,
+                });
+                return;
+            }
+            const summary = await service.run();
+            res.json({ success: true, data: summary });
+        }
+        catch (error) {
+            res.status(500).json({ success: false, error: error instanceof Error ? error.message : String(error) });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=worktree-janitor.routes.js.map

package/dist/backend/backend/src/controllers/worktree-janitor/worktree-janitor.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-janitor.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/worktree-janitor/worktree-janitor.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CAC1C,aAA2C,GAAG,EAAE,CAAC,sBAAsB,CAAC,WAAW,EAAE;IAErF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/D,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC;gBACR,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE;aACpF,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAC1D,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,iCAAiC,0BAA0B,CAAC,OAAO,KAAK;iBAC/E,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/backend/backend/src/index.d.ts

@@ -46,6 +46,7 @@ export declare class CrewlyServer {
     /** Tells the owner on Slack when this machine loses Crewly Cloud */
     private cloudDisconnectNotice;
     private conversationCloudSync;
+    private waitingItemsSync;
     /** Epoch ms of the last shutdown signal acted on (dedups process-group delivery) */
     private lastShutdownSignalAt;
     /** Interrupted turns loaded at boot, resumed once their agents are back */
@@ -168,6 +169,12 @@ export declare class CrewlyServer {
      * first time history reaches Cloud. Never throws.
      */
     private startConversationCloudSync;
+    /**
+     * Start the "waiting on you" uploader: tickets in 待验收 go to Crewly Cloud
+     * as text snapshots when they change (and every 5 minutes), so the portal
+     * lists what waits on the owner across machines. Never throws.
+     */
+    private startWaitingItemsSync;
     /**
      * Load interrupted turns left by the previous shutdown (fresh ones only).
      */

package/dist/backend/backend/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../backend/src/index.ts"],"names":[],"mappings":";AA2CA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA4MjD,qBAAa,YAAY;IACxB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAqE;IACnF,gFAAgF;IAChF,OAAO,CAAC,iBAAiB,CAAC,CAAyD;IAEnF,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,sBAAsB,CAA0B;IACxD,OAAO,CAAC,4BAA4B,CAAgC;IACpE,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,qBAAqB,CAAyB;IACtD,OAAO,CAAC,wBAAwB,CAA4B;IAC5D,OAAO,CAAC,eAAe,CAAmB;IAC1C,qEAAqE;IACrE,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,sBAAsB,CAAuC;IACrE,OAAO,CAAC,sBAAsB,CAAiD;IAC/E,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,kGAAkG;IAClG,OAAO,CAAC,sBAAsB,CAAuC;IAGrE,OAAO,CAAC,+BAA+B,CAAgD;IACvF,+FAA+F;IAC/F,OAAO,CAAC,oBAAoB,CAAqC;IACjE,8HAA8H;IAC9H,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,OAAO,CAAC,6BAA6B,CAA8C;IACnF,OAAO,CAAC,wBAAwB,CAAyC;IACzE,OAAO,CAAC,2BAA2B,CAA+B;IAClE,OAAO,CAAC,0BAA0B,CAA8B;IAChE,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,kBAAkB,CAA0C;IAKpE,OAAO,CAAC,aAAa,CAAuE;IAC5F,OAAO,CAAC,gBAAgB,CAET;IAGf,OAAO,CAAC,cAAc,CAAS;IAC/B,oEAAoE;IACpE,OAAO,CAAC,qBAAqB,CAA6C;IAC1E,OAAO,CAAC,qBAAqB,CAA2G;IACxI,oFAAoF;IACpF,OAAO,CAAC,oBAAoB,CAAK;IACjC,2EAA2E;IAC3E,OAAO,CAAC,sBAAsB,CAA8B;IAC5D,OAAO,CAAC,wBAAwB,CAA+B;gBAEnD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAsE3C,OAAO,CAAC,kBAAkB;IAgjC1B,OAAO,CAAC,mBAAmB;IAmD3B,OAAO,CAAC,eAAe;IA4KvB,OAAO,CAAC,kBAAkB;IAwBpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA0gD5B;;;OAGG;YACW,2BAA2B;IAkCzC;;;OAGG;YACW,8BAA8B;IAsB5C;;;OAGG;YACW,gCAAgC;IAsB9C;;;OAGG;YACW,8BAA8B;IAsB5C;;;;OAIG;YACW,8BAA8B;IA8M5C;;;;;;;;;;;;OAYG;YACW,6BAA6B;IAsB3C;;;;;OAKG;YACW,iCAAiC;IAoL/C;;;;OAIG;YACW,2BAA2B;YA0B3B,qBAAqB;IAsBnC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;YA6BZ,eAAe;YAoFf,kBAAkB;IAgBhC,OAAO,CAAC,WAAW,CAAK;IAExB,OAAO,CAAC,sBAAsB;IAsC9B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oBAAoB;IAwB5B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAoBvB;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAsDvB;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAuClC;;;;;OAKG;YACW,0BAA0B;IA+DxC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAuBlC;;;;OAIG;YACW,+BAA+B;IA0C7C;;;;;;OAMG;YACW,kBAAkB;IA0BhC,OAAO,CAAC,qBAAqB;IAoC7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAoE1B;;;;;;;;;OASG;IACH;;;;;;;;;;;;;;OAcG;IACH,sEAAsE;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAE1D;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;YAyBd,wBAAwB;IAWtC,OAAO,CAAC,qBAAqB;IAwH7B,OAAO,CAAC,cAAc;IActB;;;;;;;;OAQG;IACG,QAAQ,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA+VpG,SAAS,IAAI,aAAa;CAG1B;AAmCD,eAAe,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../backend/src/index.ts"],"names":[],"mappings":";AA2CA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmNjD,qBAAa,YAAY;IACxB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAqE;IACnF,gFAAgF;IAChF,OAAO,CAAC,iBAAiB,CAAC,CAAyD;IAEnF,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,sBAAsB,CAA0B;IACxD,OAAO,CAAC,4BAA4B,CAAgC;IACpE,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,qBAAqB,CAAyB;IACtD,OAAO,CAAC,wBAAwB,CAA4B;IAC5D,OAAO,CAAC,eAAe,CAAmB;IAC1C,qEAAqE;IACrE,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,sBAAsB,CAAuC;IACrE,OAAO,CAAC,sBAAsB,CAAiD;IAC/E,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,kGAAkG;IAClG,OAAO,CAAC,sBAAsB,CAAuC;IAGrE,OAAO,CAAC,+BAA+B,CAAgD;IACvF,+FAA+F;IAC/F,OAAO,CAAC,oBAAoB,CAAqC;IACjE,8HAA8H;IAC9H,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,OAAO,CAAC,6BAA6B,CAA8C;IACnF,OAAO,CAAC,wBAAwB,CAAyC;IACzE,OAAO,CAAC,2BAA2B,CAA+B;IAClE,OAAO,CAAC,0BAA0B,CAA8B;IAChE,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,kBAAkB,CAA0C;IAKpE,OAAO,CAAC,aAAa,CAAuE;IAC5F,OAAO,CAAC,gBAAgB,CAET;IAGf,OAAO,CAAC,cAAc,CAAS;IAC/B,oEAAoE;IACpE,OAAO,CAAC,qBAAqB,CAA6C;IAC1E,OAAO,CAAC,qBAAqB,CAA2G;IACxI,OAAO,CAAC,gBAAgB,CAAiG;IACzH,oFAAoF;IACpF,OAAO,CAAC,oBAAoB,CAAK;IACjC,2EAA2E;IAC3E,OAAO,CAAC,sBAAsB,CAA8B;IAC5D,OAAO,CAAC,wBAAwB,CAA+B;gBAEnD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAsE3C,OAAO,CAAC,kBAAkB;IAioC1B,OAAO,CAAC,mBAAmB;IAmD3B,OAAO,CAAC,eAAe;IA+KvB,OAAO,CAAC,kBAAkB;IAwBpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwkD5B;;;OAGG;YACW,2BAA2B;IAkCzC;;;OAGG;YACW,8BAA8B;IAsB5C;;;OAGG;YACW,gCAAgC;IAsB9C;;;OAGG;YACW,8BAA8B;IAsB5C;;;;OAIG;YACW,8BAA8B;IA8M5C;;;;;;;;;;;;OAYG;YACW,6BAA6B;IAsB3C;;;;;OAKG;YACW,iCAAiC;IAoL/C;;;;OAIG;YACW,2BAA2B;YA0B3B,qBAAqB;IAsBnC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;YA6BZ,eAAe;YAoFf,kBAAkB;IAgBhC,OAAO,CAAC,WAAW,CAAK;IAExB,OAAO,CAAC,sBAAsB;IAsC9B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oBAAoB;IAwB5B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAoBvB;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAsDvB;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IAuClC;;;;;OAKG;YACW,0BAA0B;IAkExC;;;;OAIG;YACW,qBAAqB;IA6DnC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAuBlC;;;;OAIG;YACW,+BAA+B;IA0C7C;;;;;;OAMG;YACW,kBAAkB;IA0BhC,OAAO,CAAC,qBAAqB;IAoC7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAoE1B;;;;;;;;;OASG;IACH;;;;;;;;;;;;;;OAcG;IACH,sEAAsE;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAE1D;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;YAyBd,wBAAwB;IAWtC,OAAO,CAAC,qBAAqB;IAwH7B,OAAO,CAAC,cAAc;IActB;;;;;;;;OAQG;IACG,QAAQ,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAmWpG,SAAS,IAAI,aAAa;CAG1B;AAmCD,eAAe,YAAY,CAAC"}

package/dist/backend/backend/src/index.js

@@ -55,11 +55,14 @@ import { RequestDecomposeSubscriber, setRequestDecomposeSubscriber, } from './se
 import { RequestStatusUpdateSubscriber } from './services/v3/request-status-update.subscriber.js';
 import { RequestCascadeSubscriber } from './services/v3/request-cascade.subscriber.js';
 import { setRequestServiceEventBus, RequestService } from './services/v3/request.service.js';
+import { OwnerReceiptService, setOwnerReceiptService } from './services/v3/owner-receipt/owner-receipt.service.js';
+import { createSlackOwnerSender, startOwnerReceiptSchedule, teamIndexOf, teamLeadIndexOf } from './services/v3/owner-receipt/owner-receipt.boot.js';
+import { IntakeOutcomeLog } from './services/v3/ticket-intake-log.js';
 import { getSlackService } from './services/slack/slack.service.js';
 import { getSlackTypingPlaceholderService } from './services/slack/slack-typing-placeholder.service.js';
 import { sendBootAnnouncement, isFirstBoot, markBooted } from './services/boot/boot-announce.service.js';
 import { SubAgentMessageQueue } from './services/messaging/sub-agent-message-queue.service.js';
-import { SUB_AGENT_QUEUE_CONSTANTS, CHAT_CONTEXT_CONSTANTS, SAFE_RESTART, AUTO_UPDATE_CONSTANTS, PROCESS_EXIT_CODES, CLAUDE_STARTUP_CONSTANTS, WEB_CONSTANTS, TICKET_CONSTANTS, UNASSIGNED_ROUTE_CONSTANTS, CLOUD_TALK_CONSTANTS } from './constants.js';
+import { SUB_AGENT_QUEUE_CONSTANTS, CHAT_CONTEXT_CONSTANTS, SAFE_RESTART, AUTO_UPDATE_CONSTANTS, PROCESS_EXIT_CODES, CLAUDE_STARTUP_CONSTANTS, WEB_CONSTANTS, TICKET_CONSTANTS, UNASSIGNED_ROUTE_CONSTANTS, CLOUD_TALK_CONSTANTS, STANDING_ANSWERS_CONSTANTS } from './constants.js';
 import { PtyActivityTrackerService } from './services/agent/pty-activity-tracker.service.js';
 import { InFlightTurnTracker } from './services/restart/in-flight-turn-tracker.service.js';
 import { TicketIntakeService, setTicketIntakeService, resolveTicketIdForSession, } from './services/v3/ticket-intake.service.js';
@@ -85,7 +88,7 @@ import { setMessageQueueService as setMessagingControllerQueueService } from './
 import { SystemResourceAlertService } from './services/monitoring/system-resource-alert.service.js';
 import { TokenUsageService } from './services/monitoring/token-usage.service.js';
 import { agentHeartbeatMiddleware } from './middleware/agent-heartbeat.middleware.js';
-import { apiTokenMiddleware, socketIoAllowRequest, installWebSocketGate, } from './middleware/api-token.middleware.js';
+import { apiTokenMiddleware, healthGateMiddleware, socketIoAllowRequest, installWebSocketGate, } from './middleware/api-token.middleware.js';
 import { resolveApiToken } from './services/core/api-token.service.js';
 import { isHeadlessEnvironment, describeNetworkExposure } from './utils/network-exposure.utils.js';
 import { RedisCacheService } from './services/cache/redis-cache.service.js';
@@ -113,6 +116,7 @@ import { createCloudDisconnectNoticeService, } from './services/cloud/cloud-disc
 import { isNoticeEnabled } from './services/cloud/cloud-disconnect-notice.utils.js';
 import { createOwnerDirectDm } from './services/slack/slack-owner-direct-dm.js';
 import { LogRotationService } from './services/session/log-rotation.service.js';
+import { WorktreeJanitorService } from './services/worktree/worktree-janitor.service.js';
 import { AuditorSchedulerService } from './services/agent/auditor-scheduler.service.js';
 import { setAuditorSchedulerService } from './controllers/auditor/auditor.controller.js';
 import { AddonLoaderService } from './services/addon/addon-loader.service.js';
@@ -124,6 +128,8 @@ import { FissionGuardService, createFailOpenBudgetChecker } from './services/fis
 import { BudgetService } from './services/autonomous/budget.service.js';
 import { setFissionGuardService } from './controllers/fission/fission.controller.js';
 import { TaskPoolService } from './services/task-pool/task-pool.service.js';
+import { WorkItemWorktreeService } from './services/worktree/workitem-worktree.service.js';
+import { WorkItemWorktreeSubscriber, createTerminalNotifier } from './services/worktree/workitem-worktree.subscriber.js';
 import { sessionsToRestore } from './services/agent/restore-filter.js';
 import { ProjectMemoryService } from './services/memory/project-memory.service.js';
 import { TaskHistorySubscriber } from './services/memory/task-history.subscriber.js';
@@ -218,6 +224,7 @@ export class CrewlyServer {
     /** Tells the owner on Slack when this machine loses Crewly Cloud */
     cloudDisconnectNotice = null;
     conversationCloudSync = null;
+    waitingItemsSync = null;
     /** Epoch ms of the last shutdown signal acted on (dedups process-group delivery) */
     lastShutdownSignalAt = 0;
     /** Interrupted turns loaded at boot, resumed once their agents are back */
@@ -383,6 +390,37 @@ export class CrewlyServer {
             taskPoolService: TaskPoolService.getInstance(),
         });
         taskHistorySubscriber.start();
+        // Per-WorkItem git worktrees (#814): observes WorkItem events only
+        // (no status writes). Opt-in per project (Project.worktrees = 'on');
+        // Team.worktrees = 'off' and CREWLY_WORKTREES=off opt out.
+        try {
+            const pool = TaskPoolService.getInstance();
+            const worktreeService = new WorkItemWorktreeService({ pool, storage: this.storageService, notify: createTerminalNotifier() });
+            const worktreeSubscriber = new WorkItemWorktreeSubscriber({
+                service: worktreeService,
+                events: this.eventBusService,
+                pool,
+            });
+            worktreeSubscriber.start();
+            // So the FIRST [CREWLY-DISPATCH] brief can already name the workdir
+            // (git worktree add can take seconds — long enough for a separate,
+            // later "worktree ready" message to arrive after the agent has
+            // already started in the shared checkout; #829 review).
+            void import('./services/v3/workitem-dispatch.subscriber.js')
+                .then(({ WorkItemDispatchSubscriber }) => {
+                WorkItemDispatchSubscriber.getInstance().setWorktreeHintResolver(worktreeService);
+            })
+                .catch((err) => {
+                this.logger.warn('Could not wire worktree hints into WorkItemDispatchSubscriber (non-fatal)', {
+                    error: err.message,
+                });
+            });
+        }
+        catch (worktreeErr) {
+            this.logger.warn('Per-WorkItem worktrees failed to start (non-fatal)', {
+                error: worktreeErr.message,
+            });
+        }
         // P1 Bug B (Pool umbrella WI 72ca743a): Wire RequestService into the
         // TaskPool singleton so addToPool intrinsically links new WIs into
         // their parent Request.workItemIds[] — independent of the
@@ -407,9 +445,12 @@ export class CrewlyServer {
         // Failure-isolated: tickets are an addition — messages are delivered
         // whether or not this is wired.
         try {
+            // #828 coverage: every owner message's fate, for the receipt's coverage line.
+            const intakeOutcomeLog = new IntakeOutcomeLog(RequestService.getInstance().getRequestsDir());
             const ticketIntake = new TicketIntakeService({
                 requests: RequestService.getInstance(),
                 findWorkItem: (id) => TaskPoolService.getInstance().findWorkItem(id),
+                outcomeLog: intakeOutcomeLog,
             });
             ticketIntake.setReceiptSink('chat-v2', createChatV2ReceiptSink({
                 chat: {
@@ -430,6 +471,21 @@ export class CrewlyServer {
                 },
             }));
             setTicketIntakeService(ticketIntake);
+            // #828: the owner's nightly receipt — built from tickets + WorkItems,
+            // DMed at his local time (default 21:00, can be turned off), and the
+            // same data at GET /api/owner-receipt for the dashboard.
+            {
+                const receipt = new OwnerReceiptService({
+                    listRequests: () => RequestService.getInstance().listAll(),
+                    listWorkItems: () => TaskPoolService.getInstance().getAllItems(),
+                    loadTeamIndex: async () => teamIndexOf(await StorageService.getInstance().getTeams()),
+                    loadTeamLeadIndex: async () => teamLeadIndexOf(await StorageService.getInstance().getTeams()),
+                    sender: createSlackOwnerSender(() => getSlackService()),
+                    readIntakeLog: () => intakeOutcomeLog.read(),
+                });
+                setOwnerReceiptService(receipt);
+                startOwnerReceiptSchedule(receipt);
+            }
             TaskPoolService.getInstance().setTicketResolver((sessionName) => resolveTicketIdForSession(InFlightTurnTracker.getInstance(), sessionName));
             // Phase 2: answered → 待验收 → 验过了 / 打回 / silence accepts.
             const ticketReview = new TicketReviewService({
@@ -690,6 +746,36 @@ export class CrewlyServer {
                     error: reflectErr.message,
                 });
             }
+            try {
+                // Standing-answer refresh (#816) on the reflect cadence: raise a
+                // refresh WorkItem for a standing page only when the memory
+                // behind it has moved. No LLM here; the WorkItem's agent writes.
+                // Agent pages are only checked for members that are active, so a
+                // stopped agent is never woken for its own page.
+                // CREWLY_STANDING_REFRESH=false disables it.
+                if (process.env['CREWLY_STANDING_REFRESH'] !== 'false') {
+                    const { StandingRefreshService } = await import('./services/memory/standing-refresh.service.js');
+                    const { resolveWikiOwner } = await import('./services/wiki/wiki-owner.resolver.js');
+                    const standingRefresh = new StandingRefreshService({
+                        pool: TaskPoolService.getInstance(),
+                        agentSkillsPath: path.join(findPackageRoot(__dirname), 'config', 'skills', 'agent'),
+                        listProjects: async () => (await this.storageService.getProjects()).map((p) => p.path).filter(Boolean),
+                        listAgents: async () => (await this.storageService.getTeams())
+                            .flatMap((t) => t.members ?? [])
+                            .filter((m) => m.agentStatus === CREWLY_CONSTANTS.AGENT_STATUSES.ACTIVE && m.sessionName)
+                            .map((m) => m.sessionName),
+                        resolveProjectTarget: (projectPath) => resolveWikiOwner(this.storageService, projectPath),
+                    });
+                    // Same cadence as the reflect trigger above.
+                    const reflectEvery = Number(process.env['CREWLY_WIKI_REFLECT_INTERVAL_MS']);
+                    standingRefresh.start(reflectEvery > 0 ? reflectEvery : STANDING_ANSWERS_CONSTANTS.REFRESH_INTERVAL_MS);
+                }
+            }
+            catch (standingErr) {
+                this.logger.warn('Standing-answer refresh failed to start (non-fatal)', {
+                    error: standingErr.message,
+                });
+            }
             // Daily memory consolidation (self-improvement wiring): the
             // MemoryConsolidationService existed but nothing ever called
             // consolidate(), so no agent ever had a consolidation.json. Run it
@@ -1280,15 +1366,18 @@ export class CrewlyServer {
     }
     configureRoutes() {
         // API token gate — loopback callers (local skills, local dashboard)
-        // pass; every other address must present the API token. `/health`,
-        // static assets and the SPA shell are outside `/api` and stay open.
+        // pass; every other address must present the API token. Static assets
+        // and the SPA shell are outside `/api` and stay open; `/health` has its
+        // own gate below (#825).
         this.app.use('/api', apiTokenMiddleware);
         // Agent heartbeat middleware - any API call with X-Agent-Session header updates heartbeat
         this.app.use('/api', agentHeartbeatMiddleware);
         // API routes
         this.app.use('/api', createApiRoutes(this.apiController));
-        // Health check (enhanced with mode and agent info)
-        this.app.get('/health', (req, res) => {
+        // Health check (enhanced with mode and agent info).
+        // #825: non-loopback callers need the API token (or CREWLY_PUBLIC_HEALTH=1);
+        // loopback reaches this handler exactly as before.
+        this.app.get('/health', healthGateMiddleware, (req, res) => {
             const versionService = VersionCheckService.getInstance();
             const cachedCheck = versionService.getCachedCheckResult();
             // Count active agents from the session backend.
@@ -1955,6 +2044,38 @@ export class CrewlyServer {
                                 error: talkErr instanceof Error ? talkErr.message : String(talkErr),
                             });
                         }
+                        // "Waiting on you" (specs/unified-conversations-cloud-store.md §F):
+                        // the owner's accept / send-back from the portal arrives as a
+                        // `waiting_action` push; the handler fetches it with this
+                        // machine's token and runs it through the ticket review.
+                        // Starting it is what advertises `waiting_actions` to Cloud.
+                        try {
+                            const [{ WaitingActionsInboundService }, { CloudClientService }, { getWaitingItemsSyncService },] = await Promise.all([
+                                import('./services/cloud/waiting-actions-inbound.service.js'),
+                                import('./services/cloud/cloud-client.service.js'),
+                                import('./services/cloud/waiting-items-sync.service.js'),
+                            ]);
+                            const cloudClient = CloudClientService.getInstance();
+                            new WaitingActionsInboundService({
+                                source: sync,
+                                cloud: {
+                                    getToken: () => cloudClient.getToken(),
+                                    getCloudUrl: () => cloudClient.getCloudUrl(),
+                                    tryRefreshToken: () => cloudClient.tryRefreshToken(),
+                                },
+                                review: () => getTicketReviewService(),
+                                identity: async () => {
+                                    const id = await DeviceIdentityService.getInstance().getOrCreateIdentity();
+                                    return { instanceId: id.deviceId, deviceName: id.deviceName };
+                                },
+                                requestResync: () => getWaitingItemsSyncService()?.requestSync(),
+                            }).start();
+                        }
+                        catch (waitingErr) {
+                            this.logger.warn('"Waiting on you" action handler wiring skipped', {
+                                error: waitingErr instanceof Error ? waitingErr.message : String(waitingErr),
+                            });
+                        }
                         // Mobile app: generic allowlisted REST passthrough over the same
                         // relay (api_request → local HTTP → api_response). Non-fatal.
                         try {
@@ -2389,7 +2510,7 @@ export class CrewlyServer {
                             const taskPool = TaskPoolService.getInstance();
                             // Append system note to description so Agent knows why it was woken
                             const wakeNote = `\n\n[SYSTEM NOTE] Woken automatically by Trigger '${triggerId}' at ${new Date().toISOString()}.`;
-                            await taskPool.updateItemStatus(action.wakeWorkItemId, 'queued');
+                            await taskPool.updateItemStatus(action.wakeWorkItemId, 'queued', { role: 'system', via: 'trigger-wake' });
                             // Append wake reason to WorkItem description via storage
                             try {
                                 const item = (await taskPool.getAllItems()).find(wi => wi.id === action.wakeWorkItemId);
@@ -2539,6 +2660,12 @@ export class CrewlyServer {
                 autoClaimService.initialize(this.eventBusService);
                 await autoClaimService.start();
                 this.logger.info('AgentAutoClaimService started — idle agents will auto-claim work');
+                // Project tickets (specs/2026-09-28-project-tickets.md): wire the
+                // workflow singleton (claim / assign / AutoClaim fallback) and keep
+                // tickets in step with their WorkItems — pool events plus a sweep.
+                const { projectTicketWorkflow } = await import('./controllers/project-tickets/project-tickets.controller.js');
+                projectTicketWorkflow().start(this.eventBusService);
+                this.logger.info('Project ticket workflow started — tickets follow their WorkItems');
             }
             catch (autoClaimErr) {
                 this.logger.warn('AgentAutoClaimService initialization failed (non-critical)', {
@@ -2625,6 +2752,9 @@ export class CrewlyServer {
             // specs/unified-conversations-cloud-store.md §B). On by default for a
             // signed-in machine; CREWLY_CONVERSATION_SYNC=0 turns it off.
             void this.startConversationCloudSync();
+            // "Waiting on you" (§F): tickets in 待验收 go to Crewly Cloud as text
+            // snapshots, so the portal lists them for every machine.
+            void this.startWaitingItemsSync();
             // V3-only as of spec 2026-05-06-task-management-v1-deprecation.md.
             // The legacy `TaskTrackingService.startAutoSync()` is gone — V3
             // task-pool reconciler owns lifecycle cleanup now.
@@ -2829,6 +2959,22 @@ export class CrewlyServer {
                     error: error instanceof Error ? error.message : String(error),
                 });
             }
+            // Worktree janitor (non-critical): removes finished agent worktrees
+            // (merged + clean + idle >2h + nobody inside). Kill switch:
+            // CREWLY_WORKTREE_JANITOR=0.
+            try {
+                if (WorktreeJanitorService.getInstance().start()) {
+                    this.logger.info('WorktreeJanitorService scheduled');
+                }
+                else {
+                    this.logger.info('WorktreeJanitorService disabled (CREWLY_WORKTREE_JANITOR)');
+                }
+            }
+            catch (error) {
+                this.logger.warn('Failed to start WorktreeJanitorService (non-critical)', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
             // Start AuditorSchedulerService (non-critical — audit scheduling)
             // Priority: env var > settings.json > ENABLED_BY_DEFAULT constant
             const envValue = process.env[AUDITOR_CONSTANTS.ENV_VAR]?.toLowerCase();
@@ -3766,12 +3912,13 @@ export class CrewlyServer {
      */
     async startConversationCloudSync() {
         try {
-            const [{ ConversationCloudSyncService, setConversationCloudSyncService }, { CloudClientService }, { VersionCheckService }, { buildAgentRoster }, { cloudTalkCapabilities },] = await Promise.all([
+            const [{ ConversationCloudSyncService, setConversationCloudSyncService }, { CloudClientService }, { VersionCheckService }, { buildAgentRoster }, { cloudTalkCapabilities }, { waitingActionCapabilities },] = await Promise.all([
                 import('./services/cloud/conversation-cloud-sync.service.js'),
                 import('./services/cloud/cloud-client.service.js'),
                 import('./services/system/version-check.service.js'),
                 import('./services/cloud/agent-roster.utils.js'),
                 import('./services/cloud/cloud-talk-inbound.service.js'),
+                import('./services/cloud/waiting-actions-inbound.service.js'),
             ]);
             const chat = getChatV2Service();
             const cloud = CloudClientService.getInstance();
@@ -3792,7 +3939,7 @@ export class CrewlyServer {
                 // whether this machine takes `talk_message` — also for machines
                 // without Slack, which never send the registry heartbeat.
                 roster: async () => buildAgentRoster(await this.storageService.getTeams()),
-                capabilities: () => cloudTalkCapabilities(),
+                capabilities: () => [...cloudTalkCapabilities(), ...waitingActionCapabilities()],
                 onNewMessage: (listener) => {
                     chat.on('chat_message', listener);
                     return () => chat.off('chat_message', listener);
@@ -3821,6 +3968,61 @@ export class CrewlyServer {
             });
         }
     }
+    /**
+     * Start the "waiting on you" uploader: tickets in 待验收 go to Crewly Cloud
+     * as text snapshots when they change (and every 5 minutes), so the portal
+     * lists what waits on the owner across machines. Never throws.
+     */
+    async startWaitingItemsSync() {
+        try {
+            const [{ WaitingItemsSyncService, setWaitingItemsSyncService }, { CloudClientService }, { VersionCheckService }, { buildAgentRoster }, { cloudTalkCapabilities }, { waitingActionCapabilities }, { getTicketIntakeService },] = await Promise.all([
+                import('./services/cloud/waiting-items-sync.service.js'),
+                import('./services/cloud/cloud-client.service.js'),
+                import('./services/system/version-check.service.js'),
+                import('./services/cloud/agent-roster.utils.js'),
+                import('./services/cloud/cloud-talk-inbound.service.js'),
+                import('./services/cloud/waiting-actions-inbound.service.js'),
+                import('./services/v3/ticket-intake.service.js'),
+            ]);
+            const cloud = CloudClientService.getInstance();
+            const service = new WaitingItemsSyncService({
+                listWaiting: async () => {
+                    const intake = getTicketIntakeService();
+                    // Never upload an empty set just because tickets are not wired yet.
+                    if (!intake)
+                        throw new Error('ticket service is not ready');
+                    // Only tickets that can be in 待验收 need their WorkItems looked up
+                    // (this runs every 30 s; done / cancelled / no-review tickets never are).
+                    const candidates = (await RequestService.getInstance().listAll()).filter((r) => typeof r.ticketNumber === 'number' && r.requiresConfirmation && r.status !== 'done' && r.status !== 'cancelled');
+                    const rows = await Promise.all(candidates.map((r) => intake.toListItem(r)));
+                    return rows.filter((row) => row.column === 'to_review');
+                },
+                cloud: {
+                    getToken: () => cloud.getToken(),
+                    getCloudUrl: () => cloud.getCloudUrl(),
+                    tryRefreshToken: () => cloud.tryRefreshToken(),
+                },
+                identity: async () => {
+                    const id = await DeviceIdentityService.getInstance().getOrCreateIdentity();
+                    return { instanceId: id.deviceId, deviceName: id.deviceName };
+                },
+                crewlyVersion: async () => VersionCheckService.getInstance().getLocalVersion(),
+                agentNames: async () => new Map(buildAgentRoster(await this.storageService.getTeams())
+                    .filter((a) => a.displayName)
+                    .map((a) => [a.agentSession, a.displayName])),
+                capabilities: () => [...cloudTalkCapabilities(), ...waitingActionCapabilities()],
+                onTicketChange: (listener) => RequestService.getInstance().onChange(() => listener()),
+            });
+            setWaitingItemsSyncService(service);
+            service.start();
+            this.waitingItemsSync = service;
+        }
+        catch (error) {
+            this.logger.warn('"Waiting on you" sync not started (non-fatal)', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
     /**
      * Load interrupted turns left by the previous shutdown (fresh ones only).
      */
@@ -4248,6 +4450,7 @@ export class CrewlyServer {
         AutoUpdateService.getInstance()?.stop();
         this.cloudDisconnectNotice?.stop();
         this.conversationCloudSync?.stop();
+        this.waitingItemsSync?.stop();
         // Safe restart: stop delivering, wait for agents mid-turn, persist the rest.
         // Runs before the force-exit timer below, which only bounds the teardown.
         await this.drainInFlightTurns(options.reason ?? 'shutdown', options.drain !== false);
@@ -4482,6 +4685,8 @@ export class CrewlyServer {
             this.teamsJsonWatcherService.stop();
             // Stop log rotation service
             LogRotationService.getInstance().stop();
+            // Stop worktree janitor timers
+            WorktreeJanitorService.getInstance().stop();
             // Stop auditor scheduler
             AuditorSchedulerService.getInstance().stop();
             // Persist the token ledger: it flushes every 5 minutes, so a restart