crewly 1.20.153 → 1.20.155

package/dist/backend/backend/src/services/agent/control-plane-guard.service.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Control-plane guard for Claude Code agent sessions.
+ *
+ * Request 72c9427a, spec `specs/2026-09-24-control-plane-isolation.md` Part 3.
+ * The backend writes two files per session under
+ * `~/.crewly/runtime/control-plane/`:
+ *
+ * - `<session>.settings.json` — a Claude Code settings file with
+ *   `permissions.deny` rules for the control-plane paths and a PreToolUse
+ *   hook on the Bash tool. It is passed with `claude --settings <file>`.
+ * - `<session>.paths` — the protected-path list the hook script reads.
+ *
+ * Both files, and the hook script itself, are on their own deny list.
+ *
+ * Coverage (stated in the hook's output as well): this stops an agent editing
+ * the stop/start/config mechanisms with its normal tools, and accidental
+ * edits. It does NOT stop an interpreter one-liner, a runtime-built path, or a
+ * call to the loopback API. That needs OS-level isolation (spec Part 4).
+ */
+/** Roots the protected paths are resolved against. */
+export interface ControlPlaneRoots {
+    /** Crewly home directory (`~/.crewly`, or `$CREWLY_HOME`). */
+    crewlyHome: string;
+    /** Crewly install root (package dir or checkout) that holds `config/` and `dist/`. */
+    installRoot: string;
+    /** The agent's working directory / project path, when known. */
+    projectPath?: string;
+}
+/** Protected paths, split by what is denied. */
+export interface ControlPlanePaths {
+    /** Paths agents may not write. Directories protect their whole subtree. */
+    writeDenied: Array<{
+        path: string;
+        isDirectory: boolean;
+    }>;
+    /** Files agents may not read with the built-in Read/Grep/Glob tools. */
+    readDenied: string[];
+}
+/** One Claude Code hook group: an optional tool matcher and its commands. */
+export interface HookGroup {
+    matcher?: string;
+    hooks: Array<{
+        type: 'command';
+        command: string;
+    }>;
+}
+/** Shape of the generated Claude Code settings file (the subset we write). */
+export interface ControlPlaneSettings {
+    permissions: {
+        deny: string[];
+    };
+    hooks: {
+        /** The control-plane guard's Bash hook. Nothing else is ever added here. */
+        PreToolUse: Array<HookGroup & {
+            matcher: string;
+        }>;
+        /** Agent-status hook events (#815), present only when a status hook is given. */
+        [event: string]: HookGroup[];
+    };
+}
+/** Result of preparing the guard for one session. */
+export type ControlPlaneGuardResult = {
+    enabled: true;
+    settingsPath: string;
+    pathsPath: string;
+    protectedCount: number;
+} | {
+    enabled: false;
+    reason: string;
+};
+/**
+ * Whether the guard is on for sessions launched by this backend.
+ *
+ * Read from the backend's own environment at launch, so an agent session
+ * cannot switch it off: exporting the variable inside a session changes that
+ * shell, not the backend.
+ *
+ * @param env - Environment to read (defaults to the backend's process.env)
+ * @returns false only when `CREWLY_CONTROL_PLANE_GUARD=0`
+ */
+export declare function isControlPlaneGuardEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Resolve every control-plane path (spec Part 2 table) to an absolute path.
+ *
+ * Duplicates are dropped, e.g. when the project path is the install root.
+ *
+ * @param roots - Crewly home, install root and optional project path
+ * @param existingTeamIds - Team directory names to protect `config.json` for
+ *   (spec Part 2 protects `teams/*\/config.json`, not the whole `teams/`
+ *   subtree — a team directory also holds `norms/`, `wiki/`, `prompts/`,
+ *   `sops/` and `cron-tasks.json`, which agents write routinely). Pass the
+ *   ids returned by {@link listExistingTeamIds}; defaults to none, so
+ *   calling this without them protects no team config (documented, not a
+ *   silent gap — `prepareControlPlaneGuard` always supplies them).
+ * @returns Write-denied paths (with a directory flag) and read-denied files
+ *
+ * @example
+ * ```ts
+ * const { writeDenied } = resolveControlPlanePaths(
+ *   { crewlyHome: '/h/.crewly', installRoot: '/opt/crewly' },
+ *   ['team-0001'],
+ * );
+ * // writeDenied includes { path: '/h/.crewly/teams/team-0001/config.json', isDirectory: false }
+ * // writeDenied does NOT include '/h/.crewly/teams' itself — reads and
+ * // writes to team-0001/wiki, norms, prompts, sops, cron-tasks.json stay allowed.
+ * ```
+ */
+export declare function resolveControlPlanePaths(roots: ControlPlaneRoots, existingTeamIds?: readonly string[]): ControlPlanePaths;
+/**
+ * Format an absolute path as a Claude Code permission-rule specifier.
+ *
+ * In Claude Code rules `//x` is an absolute path, while `/x` is relative to
+ * the settings file, so an absolute path gets one extra leading slash.
+ *
+ * @param absPath - Absolute filesystem path
+ * @param isDirectory - Append `/**` to cover the subtree
+ * @returns Specifier such as `//Users/me/.crewly/teams/**`
+ */
+export declare function toRuleSpecifier(absPath: string, isDirectory: boolean): string;
+/**
+ * Build the Claude Code settings object for one session.
+ *
+ * Deny rules use `Edit(...)`, which Claude Code applies to every built-in
+ * file-editing tool (Edit, Write, NotebookEdit), and `Read(...)` for the API
+ * token. Only documented rule forms are emitted: an invalid rule could get
+ * the whole settings file rejected, and the Bash hook with it.
+ *
+ * The agent-status hook (#815) is merged into the same file, because Claude
+ * Code takes one `--settings`. It is registered only on its own events
+ * (Notification, PermissionRequest, Stop, UserPromptSubmit, PostToolUse) and
+ * never on PreToolUse, so the guard's entry and the deny list are identical
+ * with or without it.
+ *
+ * @param paths - Resolved control-plane paths
+ * @param hookCommand - Shell command that runs the PreToolUse Bash hook
+ * @param statusHookCommand - Shell command that runs the agent-status hook; omit to leave it out
+ * @returns Settings object ready to serialise
+ */
+export declare function buildControlPlaneSettings(paths: ControlPlanePaths, hookCommand: string, statusHookCommand?: string): ControlPlaneSettings;
+/**
+ * Make a session name safe to use as a file name.
+ *
+ * @param sessionName - Crewly session name
+ * @returns Name with anything outside `[A-Za-z0-9._-]` replaced by `_`
+ */
+export declare function toSafeFileStem(sessionName: string): string;
+/**
+ * Write the per-session settings file and protected-path list.
+ *
+ * @param sessionName - Crewly session name (used for the file names)
+ * @param roots - Crewly home, install root and optional project path
+ * @param env - Environment holding the kill switch (defaults to process.env)
+ * @returns Where the files were written, or why the guard is off
+ * @throws When the files cannot be written (the caller decides whether to launch unguarded)
+ */
+export declare function prepareControlPlaneGuard(sessionName: string, roots: ControlPlaneRoots, env?: NodeJS.ProcessEnv): Promise<ControlPlaneGuardResult>;
+/**
+ * Append `--settings <file>` to a Claude Code launch command.
+ *
+ * Only commands that carry `--dangerously-skip-permissions` (the Crewly agent
+ * launch line) are changed. A command that already passes `--settings` is
+ * left alone: the owner configured their own, and Claude Code takes one.
+ *
+ * @param cmd - Launch command line
+ * @param settingsPath - Generated settings file
+ * @returns The command with the flag appended, or unchanged
+ */
+export declare function applyControlPlaneSettingsFlag(cmd: string, settingsPath: string): string;
+//# sourceMappingURL=control-plane-guard.service.d.ts.map

package/dist/backend/backend/src/services/agent/control-plane-guard.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-guard.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/agent/control-plane-guard.service.ts"],"names":[],"mappings":"AA2BA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IACjC,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,sFAAsF;IACtF,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IACjC,2EAA2E;IAC3E,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3D,wEAAwE;IACxE,UAAU,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnD;AAED,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACpC,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChC,KAAK,EAAE;QACN,4EAA4E;QAC5E,UAAU,EAAE,KAAK,CAAC,SAAS,GAAG;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACnD,iFAAiF;QACjF,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC;KAC7B,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,MAAM,uBAAuB,GAChC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAExF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,iBAAiB,EACxB,eAAe,GAAE,SAAS,MAAM,EAAO,GACrC,iBAAiB,CAwBnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,CAG7E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,iBAAiB,EACxB,WAAW,EAAE,MAAM,EACnB,iBAAiB,CAAC,EAAE,MAAM,GACxB,oBAAoB,CA4BtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG1D;AAYD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC7C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,iBAAiB,EACxB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAgClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAKvF"}

package/dist/backend/backend/src/services/agent/control-plane-guard.service.js

@@ -0,0 +1,231 @@
+import { promises as fs } from 'fs';
+import * as path from 'path';
+import { CONTROL_PLANE_GUARD_CONSTANTS, AGENT_STATUS_HOOK_CONSTANTS } from '../../constants.js';
+/**
+ * List the team directories that exist under `<crewlyHome>/teams` right now.
+ *
+ * The Bash hook needs literal paths, not globs, so protecting exactly
+ * `teams/*\/config.json` (spec Part 2) means resolving the `*` at guard-prep
+ * time against whatever teams already exist. A team created after this
+ * session launched is not yet in the list — out of scope for this fix,
+ * flagged in specs/2026-09-24-control-plane-isolation.md's coverage limits.
+ *
+ * @param crewlyHome - Crewly home directory (`~/.crewly`, or `$CREWLY_HOME`)
+ * @returns Directory names under `teams/` (team ids); empty if the directory
+ *   does not exist yet (a fresh install with no teams) or cannot be read
+ */
+async function listExistingTeamIds(crewlyHome) {
+    const teamsDir = path.join(crewlyHome, CONTROL_PLANE_GUARD_CONSTANTS.TEAMS_DIR_NAME);
+    try {
+        const entries = await fs.readdir(teamsDir, { withFileTypes: true });
+        return entries.filter((e) => e.isDirectory()).map((e) => e.name);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Whether the guard is on for sessions launched by this backend.
+ *
+ * Read from the backend's own environment at launch, so an agent session
+ * cannot switch it off: exporting the variable inside a session changes that
+ * shell, not the backend.
+ *
+ * @param env - Environment to read (defaults to the backend's process.env)
+ * @returns false only when `CREWLY_CONTROL_PLANE_GUARD=0`
+ */
+export function isControlPlaneGuardEnabled(env = process.env) {
+    return env[CONTROL_PLANE_GUARD_CONSTANTS.KILL_SWITCH_ENV] !== CONTROL_PLANE_GUARD_CONSTANTS.KILL_SWITCH_OFF_VALUE;
+}
+/**
+ * Resolve every control-plane path (spec Part 2 table) to an absolute path.
+ *
+ * Duplicates are dropped, e.g. when the project path is the install root.
+ *
+ * @param roots - Crewly home, install root and optional project path
+ * @param existingTeamIds - Team directory names to protect `config.json` for
+ *   (spec Part 2 protects `teams/*\/config.json`, not the whole `teams/`
+ *   subtree — a team directory also holds `norms/`, `wiki/`, `prompts/`,
+ *   `sops/` and `cron-tasks.json`, which agents write routinely). Pass the
+ *   ids returned by {@link listExistingTeamIds}; defaults to none, so
+ *   calling this without them protects no team config (documented, not a
+ *   silent gap — `prepareControlPlaneGuard` always supplies them).
+ * @returns Write-denied paths (with a directory flag) and read-denied files
+ *
+ * @example
+ * ```ts
+ * const { writeDenied } = resolveControlPlanePaths(
+ *   { crewlyHome: '/h/.crewly', installRoot: '/opt/crewly' },
+ *   ['team-0001'],
+ * );
+ * // writeDenied includes { path: '/h/.crewly/teams/team-0001/config.json', isDirectory: false }
+ * // writeDenied does NOT include '/h/.crewly/teams' itself — reads and
+ * // writes to team-0001/wiki, norms, prompts, sops, cron-tasks.json stay allowed.
+ * ```
+ */
+export function resolveControlPlanePaths(roots, existingTeamIds = []) {
+    const C = CONTROL_PLANE_GUARD_CONSTANTS;
+    const seen = new Set();
+    const writeDenied = [];
+    const add = (p, isDirectory) => {
+        const abs = path.resolve(p);
+        if (seen.has(abs))
+            return;
+        seen.add(abs);
+        writeDenied.push({ path: abs, isDirectory });
+    };
+    for (const d of C.CREWLY_HOME_DIRS)
+        add(path.join(roots.crewlyHome, d), true);
+    for (const f of C.CREWLY_HOME_FILES)
+        add(path.join(roots.crewlyHome, f), false);
+    for (const teamId of existingTeamIds) {
+        add(path.join(roots.crewlyHome, C.TEAMS_DIR_NAME, teamId, C.TEAM_CONFIG_FILE_NAME), false);
+    }
+    for (const d of C.INSTALL_DIRS)
+        add(path.join(roots.installRoot, d), true);
+    for (const f of C.INSTALL_FILES)
+        add(path.join(roots.installRoot, f), false);
+    if (roots.projectPath) {
+        for (const d of C.PROJECT_DIRS)
+            add(path.join(roots.projectPath, d), true);
+    }
+    const readDenied = C.CREWLY_HOME_READ_DENIED_FILES.map((f) => path.resolve(roots.crewlyHome, f));
+    return { writeDenied, readDenied };
+}
+/**
+ * Format an absolute path as a Claude Code permission-rule specifier.
+ *
+ * In Claude Code rules `//x` is an absolute path, while `/x` is relative to
+ * the settings file, so an absolute path gets one extra leading slash.
+ *
+ * @param absPath - Absolute filesystem path
+ * @param isDirectory - Append `/**` to cover the subtree
+ * @returns Specifier such as `//Users/me/.crewly/teams/**`
+ */
+export function toRuleSpecifier(absPath, isDirectory) {
+    const base = `/${absPath}`;
+    return isDirectory ? `${base}/**` : base;
+}
+/**
+ * Build the Claude Code settings object for one session.
+ *
+ * Deny rules use `Edit(...)`, which Claude Code applies to every built-in
+ * file-editing tool (Edit, Write, NotebookEdit), and `Read(...)` for the API
+ * token. Only documented rule forms are emitted: an invalid rule could get
+ * the whole settings file rejected, and the Bash hook with it.
+ *
+ * The agent-status hook (#815) is merged into the same file, because Claude
+ * Code takes one `--settings`. It is registered only on its own events
+ * (Notification, PermissionRequest, Stop, UserPromptSubmit, PostToolUse) and
+ * never on PreToolUse, so the guard's entry and the deny list are identical
+ * with or without it.
+ *
+ * @param paths - Resolved control-plane paths
+ * @param hookCommand - Shell command that runs the PreToolUse Bash hook
+ * @param statusHookCommand - Shell command that runs the agent-status hook; omit to leave it out
+ * @returns Settings object ready to serialise
+ */
+export function buildControlPlaneSettings(paths, hookCommand, statusHookCommand) {
+    const deny = [];
+    for (const { path: p, isDirectory } of paths.writeDenied) {
+        deny.push(`Edit(${toRuleSpecifier(p, false)})`);
+        if (isDirectory)
+            deny.push(`Edit(${toRuleSpecifier(p, true)})`);
+    }
+    for (const p of paths.readDenied)
+        deny.push(`Read(${toRuleSpecifier(p, false)})`);
+    const settings = {
+        permissions: { deny },
+        hooks: {
+            PreToolUse: [
+                {
+                    matcher: CONTROL_PLANE_GUARD_CONSTANTS.HOOK_TOOL_MATCHER,
+                    hooks: [{ type: 'command', command: hookCommand }],
+                },
+            ],
+        },
+    };
+    if (statusHookCommand) {
+        const S = AGENT_STATUS_HOOK_CONSTANTS;
+        for (const event of S.EVENTS) {
+            const group = { hooks: [{ type: 'command', command: statusHookCommand }] };
+            if (S.TOOL_EVENTS.includes(event))
+                group.matcher = S.ALL_TOOLS_MATCHER;
+            settings.hooks[event] = [group];
+        }
+    }
+    return settings;
+}
+/**
+ * Make a session name safe to use as a file name.
+ *
+ * @param sessionName - Crewly session name
+ * @returns Name with anything outside `[A-Za-z0-9._-]` replaced by `_`
+ */
+export function toSafeFileStem(sessionName) {
+    const stem = sessionName.replace(/[^A-Za-z0-9._-]/g, '_').replace(/^\.+/, '_');
+    return stem.length > 0 ? stem : '_';
+}
+/**
+ * Quote a value for a POSIX shell command line.
+ *
+ * @param value - Raw string
+ * @returns Single-quoted string with embedded quotes escaped
+ */
+function shellQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * Write the per-session settings file and protected-path list.
+ *
+ * @param sessionName - Crewly session name (used for the file names)
+ * @param roots - Crewly home, install root and optional project path
+ * @param env - Environment holding the kill switch (defaults to process.env)
+ * @returns Where the files were written, or why the guard is off
+ * @throws When the files cannot be written (the caller decides whether to launch unguarded)
+ */
+export async function prepareControlPlaneGuard(sessionName, roots, env = process.env) {
+    const C = CONTROL_PLANE_GUARD_CONSTANTS;
+    if (!isControlPlaneGuardEnabled(env)) {
+        return { enabled: false, reason: `${C.KILL_SWITCH_ENV}=${C.KILL_SWITCH_OFF_VALUE}` };
+    }
+    const existingTeamIds = await listExistingTeamIds(roots.crewlyHome);
+    const paths = resolveControlPlanePaths(roots, existingTeamIds);
+    const dir = path.join(roots.crewlyHome, C.RUNTIME_DIR);
+    const stem = toSafeFileStem(sessionName);
+    const settingsPath = path.join(dir, `${stem}${C.SETTINGS_FILE_SUFFIX}`);
+    const pathsPath = path.join(dir, `${stem}${C.PATHS_FILE_SUFFIX}`);
+    const hookScript = path.join(roots.installRoot, C.HOOK_SCRIPT);
+    const hookCommand = `bash ${shellQuote(hookScript)} ${shellQuote(pathsPath)}`;
+    const statusHookCommand = `bash ${shellQuote(path.join(roots.installRoot, AGENT_STATUS_HOOK_CONSTANTS.HOOK_SCRIPT))}`;
+    const pathsBody = [
+        `# Crewly control-plane guard — protected paths for ${sessionName}`,
+        '# Generated by the backend at launch; one absolute path per line.',
+        ...paths.writeDenied.map((p) => p.path),
+        '',
+    ].join('\n');
+    await fs.mkdir(dir, { recursive: true });
+    await fs.writeFile(pathsPath, pathsBody, 'utf-8');
+    await fs.writeFile(settingsPath, `${JSON.stringify(buildControlPlaneSettings(paths, hookCommand, statusHookCommand), null, 2)}\n`, 'utf-8');
+    return { enabled: true, settingsPath, pathsPath, protectedCount: paths.writeDenied.length };
+}
+/**
+ * Append `--settings <file>` to a Claude Code launch command.
+ *
+ * Only commands that carry `--dangerously-skip-permissions` (the Crewly agent
+ * launch line) are changed. A command that already passes `--settings` is
+ * left alone: the owner configured their own, and Claude Code takes one.
+ *
+ * @param cmd - Launch command line
+ * @param settingsPath - Generated settings file
+ * @returns The command with the flag appended, or unchanged
+ */
+export function applyControlPlaneSettingsFlag(cmd, settingsPath) {
+    const flag = CONTROL_PLANE_GUARD_CONSTANTS.SETTINGS_FLAG;
+    if (!cmd.includes('--dangerously-skip-permissions'))
+        return cmd;
+    if (new RegExp(`(^|\\s)${flag}(\\s|=|$)`).test(cmd))
+        return cmd;
+    return `${cmd} ${flag} "${settingsPath.replace(/["`$\\]/g, '')}"`;
+}
+//# sourceMappingURL=control-plane-guard.service.js.map

package/dist/backend/backend/src/services/agent/control-plane-guard.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-guard.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/agent/control-plane-guard.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEhG;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,6BAA6B,CAAC,cAAc,CAAC,CAAC;IACrF,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AA8DD;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9E,OAAO,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC,KAAK,6BAA6B,CAAC,qBAAqB,CAAC;AACnH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,wBAAwB,CACvC,KAAwB,EACxB,kBAAqC,EAAE;IAEvC,MAAM,CAAC,GAAG,6BAA6B,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAqC,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,WAAoB,EAAQ,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,WAAoB;IACpE,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CACxC,KAAwB,EACxB,WAAmB,EACnB,iBAA0B;IAE1B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,WAAW;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAyB;QACtC,WAAW,EAAE,EAAE,IAAI,EAAE;QACrB,KAAK,EAAE;YACN,UAAU,EAAE;gBACX;oBACC,OAAO,EAAE,6BAA6B,CAAC,iBAAiB;oBACxD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;iBAClD;aACD;SACD;KACD,CAAC;IACF,IAAI,iBAAiB,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,2BAA2B,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;YACtF,IAAK,CAAC,CAAC,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,iBAAiB,CAAC;YAC9F,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,WAAmB,EACnB,KAAwB,EACxB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,CAAC,GAAG,6BAA6B,CAAC;IACxC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,qBAAqB,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,QAAQ,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IAC9E,MAAM,iBAAiB,GAAG,QAAQ,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,2BAA2B,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;IAEtH,MAAM,SAAS,GAAG;QACjB,sDAAsD,WAAW,EAAE;QACnE,mEAAmE;QACnE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,EAAE;KACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,SAAS,CACjB,YAAY,EACZ,GAAG,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAChG,OAAO,CACP,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAW,EAAE,YAAoB;IAC9E,MAAM,IAAI,GAAG,6BAA6B,CAAC,aAAa,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAAE,OAAO,GAAG,CAAC;IAChE,IAAI,IAAI,MAAM,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChE,OAAO,GAAG,GAAG,IAAI,IAAI,KAAK,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC;AACnE,CAAC"}

package/dist/backend/backend/src/services/agent/fresh-task-conversation.service.d.ts

@@ -26,6 +26,15 @@
  * idle and nobody else just wrote to it; any failure falls back to plain
  * delivery — nothing here throws into dispatch.
  *
+ * Idle-boundary context cap: one task can run for 1000+ turns, so a new root
+ * alone does not bound the context. A periodic sweep
+ * ({@link FreshTaskConversationService.startContextCapSweep}) saves and
+ * clears an idle Claude Code member whose last turn carried more than
+ * `CREWLY_MEMBER_CONTEXT_CAP_TOKENS` (300k by default, `0` disables), then
+ * writes one line naming its active WorkItem and the handover. Same safety
+ * rules — never the orchestrator, never mid-turn, never while a message is
+ * queued for or being delivered to it — plus at most one cap per 20 minutes.
+ *
  * @module services/agent/fresh-task-conversation.service
  */
 import type { WorkItem } from '../../types/v2/work-item.types.js';
@@ -98,6 +107,60 @@ export declare function decideFreshConversation(input: FreshTaskDecisionInput):
  * @returns One line
  */
 export declare function freshConversationNote(handoverPath: string): string;
+/**
+ * The context cap for members, from the environment.
+ *
+ * @param env - Environment (tests)
+ * @returns Tokens; 0 means the cap is off. Unset or invalid → the default.
+ */
+export declare function memberContextCapTokens(env?: NodeJS.ProcessEnv): number;
+/** Everything the idle-boundary context-cap decision depends on. */
+export interface ContextCapDecisionInput {
+    /** Agent session */
+    sessionName: string;
+    /** Its runtime */
+    runtimeType?: string;
+    /** Cap in tokens (0 = off) */
+    capTokens: number;
+    /** Env + settings kill-switch of the fresh-conversation feature */
+    enabled: boolean;
+    /** Last turn's context, or null when unknown */
+    contextTokens: number | null;
+    /** Agent is mid-turn */
+    busy: boolean;
+    /** How long the PTY has been quiet (null = unknown) */
+    quietMs: number | null;
+    /** A message is being delivered, was just delivered, or a prepare/clear is running */
+    deliveryActive: boolean;
+    /** Messages are queued for the agent */
+    queuedMessages: boolean;
+    /** When the session was last capped (ms), if ever */
+    lastCapAt: number | null;
+    /** Now (ms) */
+    now: number;
+    /** Id of the WorkItem the agent is on (null = none) */
+    activeWorkItemId: string | null;
+}
+/**
+ * Decide whether to cap (save + clear + re-orient) a member's conversation.
+ * Pure; the order of checks is also the order of the logged reasons.
+ *
+ * @param input - Decision inputs
+ * @returns The decision
+ */
+export declare function decideContextCap(input: ContextCapDecisionInput): FreshTaskDecision;
+/**
+ * The one line written after a context-cap clear. It must carry the WorkItem
+ * id: the new conversation id is found by it.
+ *
+ * @param args - WorkItem, handover file and the old context size
+ * @returns One line
+ */
+export declare function contextCapReorientation(args: {
+    workItem: Pick<WorkItem, 'id' | 'title'>;
+    handoverPath: string;
+    contextTokens: number;
+}): string;
 /** What the service needs to know about a session. */
 export interface FreshTaskSessionInfo {
     /** Runtime */
@@ -142,6 +205,14 @@ export interface FreshTaskDeps {
     sleep: (ms: number) => Promise<void>;
     /** Environment */
     env: NodeJS.ProcessEnv;
+    /** Registered agent sessions (context-cap sweep) */
+    listSessions: () => string[];
+    /** Messages are queued for the session and not yet written */
+    hasQueuedMessages: (sessionName: string) => boolean;
+    /** How long the session's PTY has been quiet (ms), or null when unknown */
+    getQuietMs: (sessionName: string) => number | null;
+    /** Write one message into the session (paste + Enter); false when the session is gone */
+    sendMessage: (sessionName: string, text: string) => Promise<boolean>;
 }
 /** Result of {@link FreshTaskConversationService.prepareForTask}. */
 export interface PrepareForTaskResult {
@@ -150,8 +221,20 @@ export interface PrepareForTaskResult {
     /** Handover file for the old conversation (when cleared) */
     handoverPath?: string;
 }
+/** Result of {@link FreshTaskConversationService.capContextIfNeeded}. */
+export interface ContextCapResult {
+    /** The conversation was saved, cleared and the agent re-oriented */
+    capped: boolean;
+    /** Why (logged; the decision reason when not capped) */
+    reason: string;
+    /** Handover file for the old conversation (when capped) */
+    handoverPath?: string;
+    /** WorkItem the agent was re-oriented on (when capped) */
+    workItemId?: string;
+}
 /**
- * Singleton that starts a fresh Claude Code conversation per new task.
+ * Singleton that starts a fresh Claude Code conversation per new task, and
+ * caps a long task's conversation at idle boundaries.
  */
 export declare class FreshTaskConversationService {
     private static instance;
@@ -162,6 +245,14 @@ export declare class FreshTaskConversationService {
     private readonly inFlight;
     /** Last time a message was written to a session (terminal write / deliver) */
     private readonly lastDelivery;
+    /** Deliveries currently being written to a session (see {@link beginDelivery}) */
+    private readonly deliveriesInFlight;
+    /** Last context-cap clear per session (rate limit) */
+    private readonly lastCapAt;
+    /** Context-cap sweep timer */
+    private capSweepTimer;
+    /** A sweep is running (sweeps never overlap) */
+    private capSweepRunning;
     private constructor();
     /**
      * @returns The singleton
@@ -176,6 +267,22 @@ export declare class FreshTaskConversationService {
     static createForTesting(deps: Partial<FreshTaskDeps>): FreshTaskConversationService;
     /** Drop the singleton (tests). */
     static resetInstance(): void;
+    /**
+     * Mark a delivery to a session as in progress until the returned function
+     * is called. Neither a new-task clear nor a context-cap clear starts while
+     * one is running: it would wipe the message before the agent reads it.
+     *
+     * @param sessionName - Session being written to
+     * @returns Call when the delivery has finished (idempotent)
+     */
+    beginDelivery(sessionName: string): () => void;
+    /**
+     * Whether a delivery is being written to the session right now.
+     *
+     * @param sessionName - Session
+     * @returns True while a {@link beginDelivery} is open
+     */
+    isDelivering(sessionName: string): boolean;
     /**
      * Record that a message is being written to a session. A clear right after
      * would wipe it before the agent reads it, so {@link prepareForTask} skips
@@ -209,8 +316,53 @@ export declare class FreshTaskConversationService {
      * @param workItem - Task being delivered
      * @returns Whether it cleared, and the handover file when it did
      */
-    prepareForTask(sessionName: string, workItem: Pick<WorkItem, 'id'>): Promise<PrepareForTaskResult>;
+    prepareForTask(sessionName: string, workItem: Pick<WorkItem, 'id' | 'metadata'>): Promise<PrepareForTaskResult>;
+    /**
+     * Start the periodic context-cap sweep (idempotent). The timer is unref'd
+     * so it never keeps the process alive.
+     *
+     * @param intervalMs - Sweep interval
+     */
+    startContextCapSweep(intervalMs?: number): void;
+    /** Stop the periodic context-cap sweep. */
+    stopContextCapSweep(): void;
+    /**
+     * Check every registered session once. Sessions are handled one after
+     * another and sweeps never overlap. Never throws.
+     *
+     * @returns Per-session results (sessions skipped cheaply are omitted)
+     */
+    runContextCapSweep(): Promise<Record<string, ContextCapResult>>;
+    /**
+     * If the member is idle between turns and its last turn carried more than
+     * the cap, save the conversation (handover file + wiki), `/clear` it and
+     * write one line naming its WorkItem and the handover. Runs in the same
+     * per-session chain as {@link prepareForTask}, so terminal writes wait for
+     * it. Never throws.
+     *
+     * @param sessionName - Member session
+     * @returns What happened
+     */
+    capContextIfNeeded(sessionName: string): Promise<ContextCapResult>;
+    private doCapContext;
+    /**
+     * The WorkItem a member is on: running before accepted before proposed,
+     * then the most recently started.
+     */
+    private pickCurrentItem;
     private doPrepare;
+    /**
+     * Save the current conversation (handover file + memory/wiki copy, no
+     * agent turn) and write `/clear`. Shared by the new-task and the
+     * context-cap paths.
+     *
+     * @param sessionName - Agent session
+     * @param conv - Its cwd and current conversation id
+     * @param handover - Task the old conversation was on, and why it closed
+     * @returns The handover file and the time `/clear` was written, or null
+     *   when nothing was cleared (transcript missing, session gone)
+     */
+    private saveAndClear;
     /**
      * Write the handover file (same shape as the orchestrator's restart handover).
      *

package/dist/backend/backend/src/services/agent/fresh-task-conversation.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fresh-task-conversation.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/agent/fresh-task-conversation.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAiBH,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,mCAAmC,CAAC;AAMlF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAI7F;AAED,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACrC,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,wBAAwB;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,oDAAoD;IACpD,cAAc,EAAE,OAAO,CAAC;IACxB,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,kCAAkC;AAClC,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CAWxF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAElE;AAMD,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,cAAc;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,oBAAoB,GAAG,IAAI,CAAC;IACrE,yDAAyD;IACzD,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3D,oCAAoC;IACpC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,wDAAwD;IACxD,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,wBAAwB;IACxB,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,qEAAqE;IACrE,cAAc,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,4CAA4C;IAC5C,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,oDAAoD;IACpD,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/D,wEAAwE;IACxE,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChH,2CAA2C;IAC3C,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY;IACZ,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,YAAY;IACZ,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AA2FD,qEAAqE;AACrE,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA6C;IAEpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,IAAI,CAAgB;IAC5B,OAAO,CAAC,KAAK,CAA+B;IAC5C,wFAAwF;IACxF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoD;IAC7E,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAE1D,OAAO;IAKP;;OAEG;WACW,WAAW,IAAI,4BAA4B;IAOzD;;;;;OAKG;WACW,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,4BAA4B;IAK1F,kCAAkC;WACpB,aAAa,IAAI,IAAI;IAInC;;;;;;;OAOG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;OAMG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,MAAkE,GACxE,OAAO,CAAC,IAAI,CAAC;IAchB;;;;;OAKG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAI/C;;;;;;;;OAQG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;YA2B1F,SAAS;IAmGvB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA8BrB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAOvB;;;;;;;;;;;;OAYG;YACW,oBAAoB;IA+BlC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA6BzB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAmBpB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,UAAU;CAiBnB"}
+{"version":3,"file":"fresh-task-conversation.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/agent/fresh-task-conversation.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAkBH,OAAO,KAAK,EAAE,QAAQ,EAAkB,MAAM,mCAAmC,CAAC;AAOlF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAI7F;AAED,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACrC,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,wBAAwB;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,oDAAoD;IACpD,cAAc,EAAE,OAAO,CAAC;IACxB,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,kCAAkC;AAClC,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CAWxF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAMnF;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wBAAwB;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,uDAAuD;IACvD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sFAAsF;IACtF,cAAc,EAAE,OAAO,CAAC;IACxB,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IACxB,qDAAqD;IACrD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,GAAG,iBAAiB,CAuBlF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAMT;AAMD,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,cAAc;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,oBAAoB,GAAG,IAAI,CAAC;IACrE,yDAAyD;IACzD,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3D,oCAAoC;IACpC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,wDAAwD;IACxD,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,wBAAwB;IACxB,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,qEAAqE;IACrE,cAAc,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,4CAA4C;IAC5C,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,oDAAoD;IACpD,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/D,wEAAwE;IACxE,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChH,2CAA2C;IAC3C,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY;IACZ,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,YAAY;IACZ,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,oDAAoD;IACpD,YAAY,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;IACpD,2EAA2E;IAC3E,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD,yFAAyF;IACzF,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAiHD,qEAAqE;AACrE,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA6C;IAEpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,IAAI,CAAgB;IAC5B,OAAO,CAAC,KAAK,CAA+B;IAC5C,wFAAwF;IACxF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoD;IAC7E,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAChE,sDAAsD;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,8BAA8B;IAC9B,OAAO,CAAC,aAAa,CAA+B;IACpD,gDAAgD;IAChD,OAAO,CAAC,eAAe,CAAS;IAEhC,OAAO;IAKP;;OAEG;WACW,WAAW,IAAI,4BAA4B;IAOzD;;;;;OAKG;WACW,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,4BAA4B;IAK1F,kCAAkC;WACpB,aAAa,IAAI,IAAI;IAKnC;;;;;;;OAOG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,IAAI;IAa9C;;;;;OAKG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI1C;;;;;;;OAOG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;OAMG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,MAAkE,GACxE,OAAO,CAAC,IAAI,CAAC;IAchB;;;;;OAKG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAI/C;;;;;;;;OAQG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmCrH;;;;;OAKG;IACH,oBAAoB,CAAC,UAAU,GAAE,MAA+D,GAAG,IAAI;IAYvG,2CAA2C;IAC3C,mBAAmB,IAAI,IAAI;IAK3B;;;;;OAKG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAsBrE;;;;;;;;;OASG;IACG,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAuB1D,YAAY;IAgF1B;;;OAGG;IACH,OAAO,CAAC,eAAe;YAcT,SAAS;IAyEvB;;;;;;;;;;OAUG;YACW,YAAY;IAyC1B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA+BrB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAOvB;;;;;;;;;;;;OAYG;YACW,oBAAoB;IA+BlC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA6BzB;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAmBpB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,UAAU;CAiBnB"}