crewly 1.20.153 → 1.20.154

package/config/skills/team-leader/assign-ticket/execute.sh

@@ -0,0 +1,59 @@
+#!/bin/bash
+# =============================================================================
+# assign-ticket (TL) — assign a project ticket to one of your workers
+#
+# Backed by POST /api/project-tickets/:project/:id/assign
+# (specs/2026-09-28-project-tickets.md §5). The backend checks that you lead a
+# team on the project and that the assignee is on an eligible team. An agent
+# assignee gets a linked WorkItem right away (dispatched to it); `--no-start`
+# only records the assignee.
+#
+# Usage:
+#   bash execute.sh --project P --id APP-12 --to <worker-session> [--no-start]
+#   bash execute.sh '{"project":"P","id":"APP-12","to":"worker-session"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --project P --id APP-12 --to <worker-session> [--no-start]
+
+Options:
+  --project   Project id, name or absolute path (required)
+  --id        Ticket id, e.g. APP-12 (required)
+  --to        Session name of the worker (or a person's name) (required)
+  --no-start  Only record the assignee; do not create the WorkItem yet
+  --help | -h Show this help
+EOF_USAGE
+}
+
+PROJECT=""; ID=""; TO=""; START="true"
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  PROJECT=$(printf '%s' "$1" | jq -r '.project // .projectPath // .projectId // empty')
+  ID=$(printf '%s' "$1" | jq -r '.id // .ticket // empty')
+  TO=$(printf '%s' "$1" | jq -r '.to // .assignee // empty')
+  START=$(printf '%s' "$1" | jq -r 'if .start == false then "false" else "true" end')
+  shift || true
+fi
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --project|-p) [ $# -ge 2 ] || error_exit "--project requires a value"; PROJECT="$2"; shift 2 ;;
+    --id|--ticket) [ $# -ge 2 ] || error_exit "--id requires a value"; ID="$2"; shift 2 ;;
+    --to|--assignee) [ $# -ge 2 ] || error_exit "--to requires a value"; TO="$2"; shift 2 ;;
+    --no-start) START="false"; shift ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+
+require_param "project" "$PROJECT"
+require_param "id" "$ID"
+require_param "to" "$TO"
+
+enc() { jq -rn --arg v "$1" '$v|@uri'; }
+BODY=$(jq -n --arg to "$TO" --argjson start "$START" '{assignee: $to, start: $start}')
+api_call POST "/project-tickets/$(enc "$PROJECT")/$(enc "$ID")/assign" "$BODY" \
+  | jq '{success, ticket: (.data.ticket | {id, title, status, priority, assignee, workItemId}), workItemId: (.data.workItem.id // null)}'

package/config/skills/team-leader/assign-ticket/execute.test.sh

@@ -0,0 +1,64 @@
+#!/bin/bash
+# Tests for assign-ticket (TL) — run with: bash execute.test.sh
+# A python HTTP stub plays the backend; asserts the call and the output.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18842
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def reply(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps(obj).encode())
+    def do_GET(self):
+        return self.reply(200, {'ok': True})
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = json.loads(self.rfile.read(n).decode() or '{}')
+        open(LOG, 'w').write(json.dumps({'path': self.path, 'body': body, 'agent': self.headers.get('X-Agent-Session')}))
+        if body.get('assignee') == 'outsider':
+            return self.reply(403, {'success': False, 'error': 'outsider is not on a team that works on APP-1'})
+        started = body.get('start', True)
+        t = {'id': 'APP-1', 'title': 'Export', 'status': 'in_progress' if started else 'ready', 'priority': 'P1',
+             'assignee': body['assignee'], 'workItemId': 'wi-1' if started else None}
+        data = {'ticket': t}
+        if started: data['workItem'] = {'id': 'wi-1'}
+        return self.reply(200, {'success': True, 'data': data})
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_SESSION_NAME=tl-sam CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_SESSION_NAME=tl-sam CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OUT=$(run --project /work/app --id APP-1 --to dev-ann)
+check "path (project path encoded)" "$(jq -r .path "$STUB_LOG")" "/api/project-tickets/%2Fwork%2Fapp/APP-1/assign"
+check "body" "$(jq -c .body "$STUB_LOG")" '{"assignee":"dev-ann","start":true}'
+check "header" "$(jq -r .agent "$STUB_LOG")" "tl-sam"
+check "output" "$(printf '%s' "$OUT" | jq -c '[.ticket.status, .ticket.assignee, .workItemId]')" '["in_progress","dev-ann","wi-1"]'
+
+OUT=$(run '{"project":"p1","id":"APP-1","to":"dev-bo","start":false}')
+check "json no-start body" "$(jq -c .body "$STUB_LOG")" '{"assignee":"dev-bo","start":false}'
+check "no-start output" "$(printf '%s' "$OUT" | jq -c '[.ticket.status, .workItemId]')" '["ready",null]'
+run --project p1 --id APP-1 --to dev-bo --no-start >/dev/null
+check "flag no-start" "$(jq -c .body.start "$STUB_LOG")" "false"
+
+check "403 surfaces" "$(run_err --project p1 --id APP-1 --to outsider | grep -c '403')" "1"
+check "missing to" "$(run_err --project p1 --id APP-1 | grep -c 'to')" "1"
+check "unknown option" "$(run_err --bogus | grep -c 'Unknown option')" "1"
+
+echo "assign-ticket: ${PASS} passed, ${FAIL} failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/team-leader/decompose-goal/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: Decompose Goal
-description: "Break down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Creates task files in the project's .crewly/tasks/ directory."
+description: "Break down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Creates one WorkItem per sub-task in the task pool."
 version: 1.0.0
 category: management
 skillType: claude-skill
@@ -26,7 +26,7 @@ execution:
 
 # Decompose Goal
 
-Breaks down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Each sub-task is created as a task file in the project's `.crewly/tasks/` directory.
+Breaks down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Each sub-task is created as a WorkItem in the task pool. (For the project's own long-lived backlog use the `project-tickets` skill instead.)
 
 ## When to Use
 
@@ -89,8 +89,8 @@ Where `/tmp/decompose.json` contains:
   "objective": "Build user authentication module",
   "tasksCreated": 2,
   "tasks": [
-    { "title": "Implement JWT token service", "requiredRole": "backend-developer", "taskPath": "/project/.crewly/tasks/...", "taskId": "abc123", "priority": "high" },
-    { "title": "Build login form component", "requiredRole": "frontend-developer", "taskPath": "/project/.crewly/tasks/...", "taskId": "def456", "priority": "high" }
+    { "title": "Implement JWT token service", "requiredRole": "backend-developer", "workItemId": "abc123", "priority": "high" },
+    { "title": "Build login form component", "requiredRole": "frontend-developer", "workItemId": "def456", "priority": "high" }
   ],
   "errors": []
 }

package/config/skills/team-leader/delegate-task/SKILL.md

@@ -43,7 +43,7 @@ Assigns a task to a worker within the Team Leader's subordinate scope. Validates
 | `--task-file` | — | No | Read task description from a file path |
 | `--priority` / `-P` | `priority` | No | Priority: `low`, `normal`, `high` (default: `normal`) |
 | `--context` / `-c` | `context` | No | Additional context for the worker. Scanned for the Request Contract alongside `--task` |
-| `--project` / `-p` | `projectPath` | No | Project path; creates task file in `.crewly/tasks/` |
+| `--project` / `-p` | `projectPath` | No | Project path; recorded on the WorkItem (`metadata.projectPath`) |
 | `--team` / `-g` | `teamId` | No | Team ID for hierarchy validation |
 | `--tl-member` | `tlMemberId` | No | TL's member ID for hierarchy validation |
 | `--from` | `fromSession` | No | Delegating TL's session name (for monitoring) |

package/config/skills/team-leader/verify-output/SKILL.md

@@ -43,12 +43,12 @@ Supports two modes:
 
 ### With explicit checks (legacy)
 ```bash
-bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"taskId":"task-123","taskPath":"/project/.crewly/tasks/m1/done/task.md","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","checks":[{"name":"build","command":"npm run build"},{"name":"tests","command":"npm test"}]}'
+bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"workItemId":"<WorkItem id>","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","checks":[{"name":"build","command":"npm run build"},{"name":"tests","command":"npm test"}]}'
 ```
 
 ### With template pipeline (recommended)
 ```bash
-bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"taskId":"task-123","taskPath":"/project/.crewly/tasks/m1/done/task.md","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","templateId":"dev-fullstack"}'
+bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"workItemId":"<WorkItem id>","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","templateId":"dev-fullstack"}'
 ```
 
 ## Parameters

package/config/sops/developer/git-workflow.md

@@ -80,7 +80,7 @@ git worktree remove /tmp/crewly-{ticket-name}-{owner}
 **Notes:**
 - Step 4 is also done for you: the backend's worktree janitor removes a worktree under `.claude/worktrees/` or `/tmp/crewly-worktrees/` once its branch is merged (or its PR is MERGED), it is clean, and it has been idle for 2 hours. Uncommitted or untracked files keep it.
 - `node_modules` is not installed in the worktree by default. For prompt/doc-only PRs that's fine. For backend code PRs that need `npm test` / `npm run build`, run those checks back in the main repo or `npm install` inside the worktree.
-- `.crewly/` directory is gitignored — task spec markdown files written there in a worktree won't appear in the diff. Copy spec files to the main repo's `.crewly/tasks/...` if other agents need to read them.
+- `.crewly/` is usually gitignored, except `.crewly/tickets/` (project tickets, tracked on purpose). Notes you write elsewhere under `.crewly/` in a worktree won't appear in the diff and other agents won't see them. Put work other agents must pick up in a project ticket (`project-tickets create`), and edit tickets only through that skill, never by hand in a worktree — the live copy is the main checkout's.
 - Do NOT use the main repo `crewly/` directory to develop a feature branch when another agent is also active in the team. The main repo is the orchestrator's coordination surface, not a per-agent dev sandbox.
 
 **Solo work exception:** if you are the only developer active in the team and you're not parking work for parallel review, working directly in the main repo is acceptable. The worktree pattern is required only when there is a real risk of branch-state collision.

package/dist/backend/backend/src/constants.d.ts

@@ -7,6 +7,36 @@ export declare const PROCESS_EXIT_CODES: {
     readonly ERROR: 1;
     readonly RESTART_REQUESTED: 120;
 };
+/** Project tickets (specs/2026-09-28-project-tickets.md) — see config/constants.ts. */
+export declare const PROJECT_TICKET_CONSTANTS: {
+    readonly DIR_NAME: "tickets";
+    readonly REPO_RELATIVE_DIR: ".crewly/tickets";
+    readonly COUNTER_FILENAME: ".counter.json";
+    readonly LOCK_FILENAME: ".lock";
+    readonly FOLDER_GITIGNORE_CONTENT: "# Crewly: transient files, never commit\n.lock\n*.tmp.*\n";
+    readonly LOCK_STALE_MS: number;
+    readonly LOCK_RETRY_MS: 25;
+    readonly LOCK_TIMEOUT_MS: number;
+    readonly STATUSES: readonly ["backlog", "ready", "in_progress", "review", "done", "cancelled"];
+    readonly PRIORITIES: readonly ["P0", "P1", "P2", "P3"];
+    readonly DEFAULT_PRIORITY: "P2";
+    readonly DEFAULT_STATUS: "backlog";
+    readonly FALLBACK_PREFIX: "T";
+    readonly MAX_PREFIX_LENGTH: 4;
+    readonly MAX_SLUG_LENGTH: 48;
+    readonly SECTIONS: {
+        readonly DESCRIPTION: "Description";
+        readonly ACCEPTANCE: "Acceptance criteria";
+        readonly LOG: "Log";
+    };
+    readonly MIGRATION_SOURCE: "v1-migration";
+    readonly MIGRATION_STATUS_FOLDERS: readonly ["open", "in_progress"];
+    readonly MIGRATION_V1_DIR: "tasks";
+    readonly GITIGNORE_BLOCK: readonly ["# Crewly project tickets are tracked (specs/2026-09-28-project-tickets.md)", "!.crewly/", ".crewly/*", "!.crewly/tickets/", "!.crewly/tickets/**"];
+    readonly WORK_ITEM_METADATA_KEY: "projectTicket";
+    readonly SYNC_SWEEP_INTERVAL_MS: number;
+    readonly MAX_SUCCESSOR_HOPS: 8;
+};
 /**
  * Safe restart: drain in-flight agent turns before a shutdown kills the PTYs,
  * and resume the ones that were cut off after the next boot.
@@ -330,7 +360,9 @@ export declare const API_SECURITY_CONSTANTS: {
         readonly API_TOKEN: "CREWLY_API_TOKEN";
         readonly TRUST_PROXY: "CREWLY_TRUST_PROXY";
         readonly HEADLESS: "CREWLY_HEADLESS";
+        readonly PUBLIC_HEALTH: "CREWLY_PUBLIC_HEALTH";
     };
+    readonly AGENT_ENV_DENYLIST: readonly string[];
     readonly DEFAULT_BIND_HOST: "0.0.0.0";
     readonly LOOPBACK_BIND_HOST: "127.0.0.1";
     readonly TOKEN_FILE_NAME: "api-token";
@@ -595,6 +627,91 @@ export declare const PTY_CONSTANTS: {
      */
     readonly ORPHAN_REAPER_INTERVAL_MS: number;
 };
+/**
+ * Control-plane guard for Claude Code agent sessions (Request 72c9427a,
+ * specs/2026-09-24-control-plane-isolation.md Part 3).
+ *
+ * The backend writes a per-session settings file (permissions.deny + a
+ * PreToolUse Bash hook) and passes it with `--settings`, so an agent cannot
+ * edit the files that stop, start and configure agents. All paths are
+ * relative to the root named by the group: CREWLY_HOME (`~/.crewly`), the
+ * install root (the Crewly package / checkout), or the agent's project path.
+ */
+export declare const CONTROL_PLANE_GUARD_CONSTANTS: {
+    /** Backend env var; `0` turns the guard off for every session launched by this backend. */
+    readonly KILL_SWITCH_ENV: "CREWLY_CONTROL_PLANE_GUARD";
+    /** Value of KILL_SWITCH_ENV that disables the guard. Any other value (or unset) keeps it on. */
+    readonly KILL_SWITCH_OFF_VALUE: "0";
+    /** Directory under CREWLY_HOME that holds the generated per-session files. */
+    readonly RUNTIME_DIR: "runtime/control-plane";
+    /** Suffix of the generated Claude Code settings file (`<session><suffix>`). */
+    readonly SETTINGS_FILE_SUFFIX: ".settings.json";
+    /** Suffix of the protected-paths list the Bash hook reads (`<session><suffix>`). */
+    readonly PATHS_FILE_SUFFIX: ".paths";
+    /** The PreToolUse Bash hook, relative to the install root. */
+    readonly HOOK_SCRIPT: "config/hooks/control-plane-guard/pretooluse-bash.sh";
+    /** CLI flag the settings file is passed with. */
+    readonly SETTINGS_FLAG: "--settings";
+    /** Claude Code tool the PreToolUse hook is attached to. */
+    readonly HOOK_TOOL_MATCHER: "Bash";
+    /**
+     * Write-protected directories under CREWLY_HOME (whole subtree).
+     *
+     * `teams` is deliberately NOT here (WorkItem 70e54fbc / #798 review):
+     * specs/2026-09-24-control-plane-isolation.md Part 2 protects only
+     * `teams/*\/config.json`, not the whole subtree. A team directory also
+     * holds `norms/`, `wiki/`, `prompts/`, `sops/` and `cron-tasks.json` —
+     * files agents write routinely (`remember`, `record-learning`,
+     * norm/SOP authoring, follow-up scheduling). Blanket-protecting `teams`
+     * would block all of that. See TEAM_CONFIG_FILE_NAME below for how the
+     * narrower rule is built (one entry per existing team, resolved at
+     * guard-prep time since the hook needs literal paths, not globs).
+     */
+    readonly CREWLY_HOME_DIRS: readonly ["triggers", "runtime/control-plane"];
+    /**
+     * Directory under CREWLY_HOME holding one subdirectory per team, each
+     * expected to contain a `config.json` (see TEAM_CONFIG_FILE_NAME).
+     */
+    readonly TEAMS_DIR_NAME: "teams";
+    /** File name, within each team's directory, that the guard protects. */
+    readonly TEAM_CONFIG_FILE_NAME: "config.json";
+    /** Write-protected files under CREWLY_HOME. */
+    readonly CREWLY_HOME_FILES: readonly ["recurring-checks.json", "one-time-checks.json", "scheduled-messages.json", "settings.json", "runtime-pids.json", "session-state.json", "api-token"];
+    /** Files under CREWLY_HOME that agents must not read with the built-in tools either. */
+    readonly CREWLY_HOME_READ_DENIED_FILES: readonly ["api-token"];
+    /** Write-protected directories under the install root (whole subtree). */
+    readonly INSTALL_DIRS: readonly ["config/skills/orchestrator/stop-agent", "config/skills/orchestrator/start-agent", "config/skills/orchestrator/terminate-agent", "config/skills/orchestrator/stop-team", "config/skills/orchestrator/start-team", "config/skills/orchestrator/restart-crewly", "config/hooks/control-plane-guard", "config/hooks/agent-status", "dist"];
+    /** Write-protected files under the install root. */
+    readonly INSTALL_FILES: readonly ["config/skills/_common/lib.sh"];
+    /** Write-protected directories under the agent's project path (whole subtree). */
+    readonly PROJECT_DIRS: readonly [".claude/agents", ".crewly/triggers"];
+};
+/**
+ * Agent-status hook (#815, specs/2026-09-26-agent-waiting-on-human.md): Claude
+ * Code hook events that tell the backend when an agent waits on the user.
+ * Registered in the control-plane guard's per-session settings file, never as
+ * a second settings file, and never on PreToolUse (that event is the guard's).
+ */
+export declare const AGENT_STATUS_HOOK_CONSTANTS: {
+    /** Hook script, relative to the install root. */
+    readonly HOOK_SCRIPT: "config/hooks/agent-status/report.sh";
+    /** Hook events the script is registered for. */
+    readonly EVENTS: readonly ["Notification", "PermissionRequest", "Stop", "UserPromptSubmit", "PostToolUse"];
+    /** Events that carry a tool matcher; they match every tool. */
+    readonly TOOL_EVENTS: readonly ["PermissionRequest", "PostToolUse"];
+    /** Matcher that selects every tool. */
+    readonly ALL_TOOLS_MATCHER: "*";
+    /** Notification types that mean "waiting on the user". */
+    readonly WAITING_NOTIFICATION_TYPES: readonly ["permission_prompt", "elicitation_dialog"];
+    /** Every notification type the endpoint accepts (others are rejected). */
+    readonly KNOWN_NOTIFICATION_TYPES: readonly ["permission_prompt", "elicitation_dialog", "idle_prompt", "auth_success"];
+    /** Max length of an accepted event or notification-type identifier. */
+    readonly MAX_IDENTIFIER_LENGTH: 64;
+    /** Sessions whose latest hook signal is kept in memory (oldest dropped past this). */
+    readonly MAX_TRACKED_SESSIONS: 500;
+    /** Accepted X-Agent-Session header value. */
+    readonly SESSION_NAME_PATTERN: RegExp;
+};
 /**
  * Session recreation (Step 2 full recreation in AgentRegistrationService).
  *
@@ -924,6 +1041,44 @@ export declare const ACTIVITY_MONITOR_CONSTANTS: {
      *  (spinners, TUI re-renders). Default: 15 minutes. */
     readonly MAX_IN_PROGRESS_MS: 900000;
 };
+/**
+ * Give-up recovery (#841, specs/2026-09-27-give-up-recovery.md): when a worker
+ * stops on a feasibility give-up, queue a retry with a different approach,
+ * bounded per root WorkItem, then one escalation to the team lead.
+ */
+export declare const GIVE_UP_RECOVERY_CONSTANTS: {
+    /** Retries per root WorkItem when the team sets no recoveryPolicy. */
+    readonly DEFAULT_MAX_RETRIES: 2;
+    /** Retry WorkItem id: `${rootId}${RETRY_ID_INFIX}${attempt}`. */
+    readonly RETRY_ID_INFIX: ":giveup:";
+    /** Escalation review WorkItem id: `${rootId}${REVIEW_ID_SUFFIX}`. */
+    readonly REVIEW_ID_SUFFIX: ":review:gave_up";
+    /** WorkItem.metadata key for the recorded stop classification. */
+    readonly STOP_METADATA_KEY: "stop";
+    /** WorkItem.metadata key for the attempt log carried by retries. */
+    readonly GIVE_UP_METADATA_KEY: "giveUp";
+    /** Characters of stop text kept per attempt. */
+    readonly MAX_REASON_CHARS: 2000;
+    /** Audit label for transitions this feature makes. */
+    readonly ACTOR_VIA: "give-up-recovery";
+};
+/**
+ * Constants for the waiting_on_human attention verdict (#815).
+ * See specs/2026-09-26-agent-waiting-on-human.md.
+ */
+export declare const AGENT_ATTENTION_CONSTANTS: {
+    /** Non-empty lines at the bottom of the screen the dialog rules examine.
+     *  Dialogs render at the bottom; older answered dialogs sit above it. */
+    readonly BOTTOM_LINES: 20;
+    /** Lines captured from the terminal buffer for the verdict (more than the
+     *  5 lines the activity diff uses, because a dialog spans ~15 lines). */
+    readonly CAPTURE_LINES: 60;
+    /** How long an agent must stay waiting_on_human before the reconciler moves
+     *  its running WorkItems to blocked (5 minutes). */
+    readonly BLOCK_WORK_ITEM_AFTER_MS: 300000;
+    /** WorkItem blockedReason / escalation reason used for this state. */
+    readonly BLOCKED_REASON: "waiting_on_human";
+};
 /**
  * Event bus constants for the agent event pub/sub system.
  * Used by EventBusService for subscription management and notification delivery.
@@ -1045,6 +1200,94 @@ export declare const WIKI_KB_CONSTANTS: {
     /** Frontmatter keys agents may set. */
     readonly FRONTMATTER_KEYS: readonly ["title", "summary", "keep_because", "tags", "visibility", "source", "caller", "recorded", "updated", "superseded_by", "superseded_at", "superseded_reason", "proposed_by"];
 };
+/**
+ * Standing-answer pages (#816): a few question-anchored pages per scope,
+ * read at boot as a plain file read (no retrieval, no LLM) and refreshed by
+ * an agent only when the memory behind them has moved.
+ */
+export declare const STANDING_ANSWERS_CONSTANTS: {
+    /** Project pages live here, under the project's `.crewly` data dir. */
+    readonly PROJECT_DIR: "wiki/llm-curated/standing";
+    /** The agent page, under `<CREWLY_HOME>/agents/<session>/`. */
+    readonly AGENT_FILE: "standing.md";
+    /** Page id of the agent page. */
+    readonly AGENT_PAGE_ID: "unfinished-work";
+    /** Hard cap on the whole Standing Answers prompt section (~2 000 tokens). */
+    readonly PROMPT_MAX_CHARS: 8000;
+    /** Cap on one page's body inside the prompt. */
+    readonly PROMPT_PAGE_MAX_CHARS: 3000;
+    /** Cap on one section body written through the API. */
+    readonly SECTION_MAX_CHARS: 1500;
+    /** Cap on a section heading. */
+    readonly HEADING_MAX_CHARS: 80;
+    /** Cap on citations per section. */
+    readonly MAX_CITES_PER_SECTION: 20;
+    /** Entries listed in a refresh WorkItem brief. */
+    readonly BRIEF_MAX_ENTRIES: 30;
+    /** Characters of each entry shown in a refresh brief. */
+    readonly BRIEF_ENTRY_MAX_CHARS: 240;
+    /** Refresh tick interval when CREWLY_WIKI_REFLECT_INTERVAL_MS is unset (the reflect default). */
+    readonly REFRESH_INTERVAL_MS: number;
+    /** Minimum time between two refresh WorkItems for the same page. */
+    readonly REFRESH_COOLDOWN_MS: number;
+    /** At most this many refresh WorkItems per tick (PTY paste-flood guard). */
+    readonly REFRESH_MAX_CREATES_PER_TICK: 2;
+    /**
+     * A refresh WorkItem that failed or was cancelled without writing the page
+     * is retried even though the source watermark has not moved again (it
+     * otherwise would not be re-raised until new memory arrives). Bounded so a
+     * page that keeps failing does not retry forever.
+     */
+    readonly REFRESH_MAX_RETRIES: 2;
+    /** Refresh bookkeeping (last raised watermark per page), under CREWLY_HOME. */
+    readonly REFRESH_STATE_FILE: "standing-refresh-state.json";
+    /** `metadata.kind` of refresh WorkItems. */
+    readonly WORKITEM_KIND: "standing-refresh";
+    /**
+     * Decisions whose title starts with this are task-completion records that
+     * report-status files automatically, not decisions; they are out of scope
+     * for "decisions in force" (in this repo: 229 of 327 decision entries).
+     */
+    readonly COMPLETED_DECISION_PREFIX: "[COMPLETED]";
+    /**
+     * Agent-memory entries starting with this are report-status completion
+     * learnings ("Task completed: <summary>"). Done work is neither
+     * unfinished nor blocking, so they are out of scope for the agent page
+     * and do not move its watermark; "Task failed:"/"Task blocked:" stay in.
+     */
+    readonly COMPLETED_LEARNING_PREFIX: "Task completed:";
+};
+/**
+ * Per-WorkItem git worktrees (#814). Opt-in per project in v1
+ * (`Project.worktrees = 'on'`); a team can opt out (`Team.worktrees =
+ * 'off'`); `CREWLY_WORKTREES=off` disables them everywhere.
+ */
+export declare const WORKTREE_CONSTANTS: {
+    /** Worktrees live here, relative to the repo root (gitignored via .crewly). */
+    readonly DIR: ".crewly/worktrees";
+    /** Per-worktree manifests (symlinks, copies, base) live here, inside DIR. */
+    readonly META_DIR: ".meta";
+    /** Branch name prefix: `wi/<workItemId>`. */
+    readonly BRANCH_PREFIX: "wi/";
+    /** Repo-root file listing gitignored-but-needed files to copy in. */
+    readonly INCLUDE_FILE: ".worktreeinclude";
+    /** Cap on `.worktreeinclude` entries honoured. */
+    readonly INCLUDE_MAX_ENTRIES: 50;
+    /** Heavy directories symlinked (not copied) from the repo root when present and untracked. */
+    readonly DEFAULT_SHARED_DIRS: readonly string[];
+    /** Marker line for the entries this feature adds to `.git/info/exclude`. */
+    readonly EXCLUDE_MARKER: "# crewly worktree shared paths (#814) — never commit these";
+    /** Timeout for local git commands (checkout of a large repo can take minutes under load). */
+    readonly GIT_TIMEOUT_MS: number;
+    /** Timeout for `git ls-remote` (offline must not hang the sweep). */
+    readonly REMOTE_TIMEOUT_MS: 15000;
+    /** Orphan sweep interval. */
+    readonly SWEEP_INTERVAL_MS: number;
+    /** Kill switch env var; the value `off` disables worktrees everywhere. */
+    readonly ENV_KILL_SWITCH: "CREWLY_WORKTREES";
+    /** WorkItem metadata key holding the worktree record. */
+    readonly METADATA_KEY: "worktree";
+};
 /** One of {@link WIKI_KB_CONSTANTS.KEEP_BECAUSE}. */
 export type WikiKeepBecause = (typeof WIKI_KB_CONSTANTS.KEEP_BECAUSE)[number];
 /** How many recent thread channels an owner notification tries before giving up when SLACK_DEFAULT_CHANNEL is unset. */
@@ -1704,7 +1947,15 @@ export declare const FRESH_TASK_CONVERSATION_CONSTANTS: {
     readonly ENV_TOGGLE: "CREWLY_FRESH_TASK_CONVERSATION";
     /** Under CREWLY_HOME: `{ [session]: lastDeliveredRootId }` */
     readonly STATE_FILE: "fresh-task-conversation.json";
-    /** Id suffixes that mark follow-ups of the same task (retries, verifies, reviews) */
+    /**
+     * Id suffixes that mark follow-ups of the same task (retries, verifies,
+     * reviews). Deliberately excludes give-up recovery's `:giveup:N` (#841,
+     * #843): a give-up retry is meant to be a materially DIFFERENT approach,
+     * and its WorkItem description already carries the full attempt log, so
+     * nothing is lost by treating it as a new root — the agent starts that
+     * retry with a fresh conversation instead of one anchored on the
+     * reasoning that just failed. See give-up-recovery.service.ts buildRetry.
+     */
     readonly ROOT_SUFFIX_MARKERS: readonly [":retry:", ":verify:", ":review:"];
     /** The Claude Code command that starts a new conversation */
     readonly CLEAR_COMMAND: "/clear";
@@ -3107,6 +3358,33 @@ export declare const SELF_IMPROVEMENT_CONSTANTS: {
         readonly INACCURATE: readonly ["incorrect", "inaccurate", "false", "no", "wrong", "missed"];
     };
 };
+/**
+ * Daily owner receipt (#828): one phone-readable message every evening with
+ * every ask of the window, its outcome and link, what waits on the owner, and
+ * what it cost. See specs/owner-receipt.md.
+ */
+export declare const OWNER_RECEIPT_CONSTANTS: {
+    /** Default local send time (HH:MM, 24h) */
+    readonly DEFAULT_TIME: "21:00";
+    /** Default owner time zone (same default as team-health off-hours) */
+    readonly DEFAULT_TIMEZONE: "America/New_York";
+    /** How often the scheduler checks whether it is time (ms) */
+    readonly TICK_INTERVAL_MS: number;
+    /** Settings + last-sent state, under ~/.crewly */
+    readonly STATE_FILENAME: "owner-receipt.json";
+    /** An ask is shortened to this many characters (CJK count double) */
+    readonly MAX_ASK_WEIGHTED_LENGTH: 56;
+    /** A waiting-on-you question is shortened to this many characters */
+    readonly MAX_QUESTION_WEIGHTED_LENGTH: 90;
+    /** Ask lines in the Slack message before "另有 N 件" (phone length) */
+    readonly MAX_ASK_LINES: 30;
+    /** Waiting-on-you lines before "另有 N 件" */
+    readonly MAX_WAITING_LINES: 12;
+    /** 「可能漏记」 lines: appended messages that still read like a request (#828 coverage) */
+    readonly MAX_POSSIBLY_MISSED: 5;
+    /** Team label for a ticket nobody is assigned to */
+    readonly UNASSIGNED_TEAM: "未分配";
+};
 /**
  * Ticket loop (specs/ticket-loop.md, Phase 1): owner messages become tickets
  * (a `Request` with a TKT number), receipts go back where the owner spoke,
@@ -3119,6 +3397,13 @@ export declare const TICKET_CONSTANTS: {
     readonly NUMBER_PAD: 3;
     /** Counter file inside the requests dir (no `.json`, so listAll never reads it) */
     readonly COUNTER_FILENAME: ".ticket-counter";
+    /**
+     * #828 coverage: one JSON line per owner message intake handled
+     * (created / appended / ignored + reason), next to the Request files. The
+     * first line records when counting started, so a window that begins
+     * earlier is reported as unknown (不详), never as 0.
+     */
+    readonly INTAKE_LOG_FILENAME: ".intake-outcomes.jsonl";
     /** Tag every ticket carries */
     readonly TAG: "ticket";
     /** Tag added when the owner said "don't track" */
@@ -3129,8 +3414,81 @@ export declare const TICKET_CONSTANTS: {
      * (7 CJK = 14), while "好的收到" (8) does not.
      */
     readonly MIN_WEIGHTED_TEXT_LENGTH: 12;
+    /** Tag on a ticket an agent split out of another (#827) */
+    readonly SPLIT_TAG: "split";
     /** A bare "don't track" reply dismisses the ticket it answers */
     readonly DISMISS_PATTERN: RegExp;
+    /**
+     * Ask classifier (#827): is an owner message a new ask, or a follow-up on
+     * the thread's current deliverable? Deterministic, text only. Every
+     * pattern below was taken from real owner messages of 2026-09-25/26 — see
+     * ticket-ask-classifier.test.ts for the labelled set. Scoring and the
+     * tie rule live in ticket-ask-classifier.ts.
+     */
+    readonly ASK: {
+        /** A request verb: something to go and do (+2 ask) */
+        readonly REQUEST_VERB: RegExp;
+        /**
+         * An explicit request construction (+3 ask instead of +2). Survives the
+         * long-discussion damping: 「你能不能帮我…总结成一个MD文档」 inside a
+         * voice transcript is still an ask.
+         */
+        readonly STRONG_REQUEST: RegExp;
+        /** A question that asks for information (+1 ask; on its own, a question ticket) */
+        readonly INFO_QUESTION: RegExp;
+        /** The message points at something to look at: a link, an image, a file path */
+        readonly REFERENCE: RegExp;
+        /** A bare 「看看」 (look) — an ask only when it has a reference to look at */
+        readonly LOOK: RegExp;
+        /** Opens a new topic, near the start (+1 ask) */
+        readonly NEW_TOPIC: RegExp;
+        /** Suggests something new to do (+1 ask) */
+        readonly IDEA: RegExp;
+        /** First line is a numbered reply to the agent's list (+3 follow) */
+        readonly NUMBERED_REPLY: RegExp;
+        /**
+         * How the CURRENT deliverable should be delivered (+3 follow). Needs a
+         * delivery verb: a bare `00-plan.md` path is not an instruction.
+         */
+        readonly DELIVERY_FORMAT: RegExp;
+        /** Clarifies or corrects the work in progress (+2 follow) */
+        readonly CLARIFY: RegExp;
+        /** Feedback on the current draft (+3 follow) */
+        readonly FEEDBACK: RegExp;
+        /** Asks the agent about its own work or plan (+2 follow) */
+        readonly ABOUT_AGENT_WORK: RegExp;
+        /**
+         * Opens by correcting or choosing (+3 follow): 「不对 我要你研究的是…」,
+         * 「不是前面…」, 「方案A」 — a reply to the agent, never a new ask.
+         */
+        readonly CORRECTION_OR_CHOICE: RegExp;
+        /** 「…给我看看吗」: show me the current thing (+3 follow) */
+        readonly SHOW_ME_TAIL: RegExp;
+        /** Retry / continue the current work (+3 follow): 「你再看看」「按你说的继续挖」 */
+        readonly RETRY_CONTINUE: RegExp;
+        /** Ends as a suggestion about the current work (+3 follow): 「…添加一些截图吧？」 */
+        readonly SUGGEST_TAIL: RegExp;
+        /** Asks where things stand (+3 follow; top level: not an ask) */
+        readonly STATUS_PING: RegExp;
+        /**
+         * A line that approves what the agent proposed: starts with an ack and
+         * ends in approval ("好的 开issue可以的", "好的 部署吧") (+3 follow)
+         */
+        readonly APPROVAL_LINE: RegExp;
+        /** A line that is only an acknowledgement (ignored when scoring the rest) */
+        readonly ACK_ONLY_LINE: RegExp;
+        /**
+         * Weighted length above which a message reads as spoken discussion (a
+         * voice transcript): a follow-up unless it opens a new topic (+2 follow)
+         */
+        readonly LONG_DISCUSSION_WEIGHTED_LENGTH: 300;
+        /** Ends like a question (a verb-less question in a thread needs one) */
+        readonly QUESTION_MARK: RegExp;
+        /** Quoted text is content, not a request: 接住“能不能帮我做” asks nothing */
+        readonly QUOTED: RegExp;
+        /** Minimum ask score for a new ask; it must also beat the follow score (ties append) */
+        readonly MIN_ASK_SCORE: 2;
+    };
     /**
      * A top-level "不用记" (no thread) dismisses the latest open ticket from the
      * same conversation if it was opened this recently (ms).