crewly 1.20.153 → 1.20.155

package/config/skills/team-leader/assign-ticket/execute.sh

@@ -0,0 +1,59 @@
+#!/bin/bash
+# =============================================================================
+# assign-ticket (TL) — assign a project ticket to one of your workers
+#
+# Backed by POST /api/project-tickets/:project/:id/assign
+# (specs/2026-09-28-project-tickets.md §5). The backend checks that you lead a
+# team on the project and that the assignee is on an eligible team. An agent
+# assignee gets a linked WorkItem right away (dispatched to it); `--no-start`
+# only records the assignee.
+#
+# Usage:
+#   bash execute.sh --project P --id APP-12 --to <worker-session> [--no-start]
+#   bash execute.sh '{"project":"P","id":"APP-12","to":"worker-session"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --project P --id APP-12 --to <worker-session> [--no-start]
+
+Options:
+  --project   Project id, name or absolute path (required)
+  --id        Ticket id, e.g. APP-12 (required)
+  --to        Session name of the worker (or a person's name) (required)
+  --no-start  Only record the assignee; do not create the WorkItem yet
+  --help | -h Show this help
+EOF_USAGE
+}
+
+PROJECT=""; ID=""; TO=""; START="true"
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  PROJECT=$(printf '%s' "$1" | jq -r '.project // .projectPath // .projectId // empty')
+  ID=$(printf '%s' "$1" | jq -r '.id // .ticket // empty')
+  TO=$(printf '%s' "$1" | jq -r '.to // .assignee // empty')
+  START=$(printf '%s' "$1" | jq -r 'if .start == false then "false" else "true" end')
+  shift || true
+fi
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --project|-p) [ $# -ge 2 ] || error_exit "--project requires a value"; PROJECT="$2"; shift 2 ;;
+    --id|--ticket) [ $# -ge 2 ] || error_exit "--id requires a value"; ID="$2"; shift 2 ;;
+    --to|--assignee) [ $# -ge 2 ] || error_exit "--to requires a value"; TO="$2"; shift 2 ;;
+    --no-start) START="false"; shift ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+
+require_param "project" "$PROJECT"
+require_param "id" "$ID"
+require_param "to" "$TO"
+
+enc() { jq -rn --arg v "$1" '$v|@uri'; }
+BODY=$(jq -n --arg to "$TO" --argjson start "$START" '{assignee: $to, start: $start}')
+api_call POST "/project-tickets/$(enc "$PROJECT")/$(enc "$ID")/assign" "$BODY" \
+  | jq '{success, ticket: (.data.ticket | {id, title, status, priority, assignee, workItemId}), workItemId: (.data.workItem.id // null)}'

package/config/skills/team-leader/assign-ticket/execute.test.sh

@@ -0,0 +1,64 @@
+#!/bin/bash
+# Tests for assign-ticket (TL) — run with: bash execute.test.sh
+# A python HTTP stub plays the backend; asserts the call and the output.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18842
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def reply(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps(obj).encode())
+    def do_GET(self):
+        return self.reply(200, {'ok': True})
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = json.loads(self.rfile.read(n).decode() or '{}')
+        open(LOG, 'w').write(json.dumps({'path': self.path, 'body': body, 'agent': self.headers.get('X-Agent-Session')}))
+        if body.get('assignee') == 'outsider':
+            return self.reply(403, {'success': False, 'error': 'outsider is not on a team that works on APP-1'})
+        started = body.get('start', True)
+        t = {'id': 'APP-1', 'title': 'Export', 'status': 'in_progress' if started else 'ready', 'priority': 'P1',
+             'assignee': body['assignee'], 'workItemId': 'wi-1' if started else None}
+        data = {'ticket': t}
+        if started: data['workItem'] = {'id': 'wi-1'}
+        return self.reply(200, {'success': True, 'data': data})
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_SESSION_NAME=tl-sam CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_SESSION_NAME=tl-sam CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OUT=$(run --project /work/app --id APP-1 --to dev-ann)
+check "path (project path encoded)" "$(jq -r .path "$STUB_LOG")" "/api/project-tickets/%2Fwork%2Fapp/APP-1/assign"
+check "body" "$(jq -c .body "$STUB_LOG")" '{"assignee":"dev-ann","start":true}'
+check "header" "$(jq -r .agent "$STUB_LOG")" "tl-sam"
+check "output" "$(printf '%s' "$OUT" | jq -c '[.ticket.status, .ticket.assignee, .workItemId]')" '["in_progress","dev-ann","wi-1"]'
+
+OUT=$(run '{"project":"p1","id":"APP-1","to":"dev-bo","start":false}')
+check "json no-start body" "$(jq -c .body "$STUB_LOG")" '{"assignee":"dev-bo","start":false}'
+check "no-start output" "$(printf '%s' "$OUT" | jq -c '[.ticket.status, .workItemId]')" '["ready",null]'
+run --project p1 --id APP-1 --to dev-bo --no-start >/dev/null
+check "flag no-start" "$(jq -c .body.start "$STUB_LOG")" "false"
+
+check "403 surfaces" "$(run_err --project p1 --id APP-1 --to outsider | grep -c '403')" "1"
+check "missing to" "$(run_err --project p1 --id APP-1 | grep -c 'to')" "1"
+check "unknown option" "$(run_err --bogus | grep -c 'Unknown option')" "1"
+
+echo "assign-ticket: ${PASS} passed, ${FAIL} failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/team-leader/decompose-goal/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: Decompose Goal
-description: "Break down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Creates task files in the project's .crewly/tasks/ directory."
+description: "Break down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Creates one WorkItem per sub-task in the task pool."
 version: 1.0.0
 category: management
 skillType: claude-skill
@@ -26,7 +26,7 @@ execution:
 
 # Decompose Goal
 
-Breaks down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Each sub-task is created as a task file in the project's `.crewly/tasks/` directory.
+Breaks down a high-level objective from the Orchestrator into specific, actionable sub-tasks for workers. Each sub-task is created as a WorkItem in the task pool. (For the project's own long-lived backlog use the `project-tickets` skill instead.)
 
 ## When to Use
 
@@ -89,8 +89,8 @@ Where `/tmp/decompose.json` contains:
   "objective": "Build user authentication module",
   "tasksCreated": 2,
   "tasks": [
-    { "title": "Implement JWT token service", "requiredRole": "backend-developer", "taskPath": "/project/.crewly/tasks/...", "taskId": "abc123", "priority": "high" },
-    { "title": "Build login form component", "requiredRole": "frontend-developer", "taskPath": "/project/.crewly/tasks/...", "taskId": "def456", "priority": "high" }
+    { "title": "Implement JWT token service", "requiredRole": "backend-developer", "workItemId": "abc123", "priority": "high" },
+    { "title": "Build login form component", "requiredRole": "frontend-developer", "workItemId": "def456", "priority": "high" }
   ],
   "errors": []
 }

package/config/skills/team-leader/delegate-task/SKILL.md

@@ -43,7 +43,7 @@ Assigns a task to a worker within the Team Leader's subordinate scope. Validates
 | `--task-file` | — | No | Read task description from a file path |
 | `--priority` / `-P` | `priority` | No | Priority: `low`, `normal`, `high` (default: `normal`) |
 | `--context` / `-c` | `context` | No | Additional context for the worker. Scanned for the Request Contract alongside `--task` |
-| `--project` / `-p` | `projectPath` | No | Project path; creates task file in `.crewly/tasks/` |
+| `--project` / `-p` | `projectPath` | No | Project path; recorded on the WorkItem (`metadata.projectPath`) |
 | `--team` / `-g` | `teamId` | No | Team ID for hierarchy validation |
 | `--tl-member` | `tlMemberId` | No | TL's member ID for hierarchy validation |
 | `--from` | `fromSession` | No | Delegating TL's session name (for monitoring) |

package/config/skills/team-leader/delegate-task/execute.sh

@@ -212,12 +212,25 @@ POOL_BODY=$(jq -n \
   --arg priority "$WI_PRIORITY" \
   --arg projectPath "${PROJECT_PATH:-}" \
   --arg requestId "${REQUEST_ID:-}" \
-  '{type: $type, owner: $owner, target: $target, title: $title, description: $description, briefMarkdown: $briefMarkdown, metadata: ({priority: $priority} + (if $projectPath != "" then {projectPath: $projectPath} else {} end))} + (if $requestId != "" then {requestId: $requestId} else {} end)')
+  '{type: $type, owner: $owner, target: $target, title: $title, description: $description, briefMarkdown: $briefMarkdown, metadata: ({priority: $priority, directDelivery: true} + (if $projectPath != "" then {projectPath: $projectPath} else {} end))} + (if $requestId != "" then {requestId: $requestId} else {} end)')
+# metadata.directDelivery: this script delivers the brief itself (below), so
+# the backend's workitem:queued push holds off and only fires if that
+# delivery never lands — the task reaches the worker once.
 
 POOL_RESULT=$(api_call POST "/task-pool/add" "$POOL_BODY" 2>/dev/null || echo '{"success":false}')
 POOL_OK=$(echo "$POOL_RESULT" | jq -r '.success // "false"' 2>/dev/null)
 TASK_ID=$(echo "$POOL_RESULT" | jq -r '.data.id // .workItemId // empty' 2>/dev/null || true)
 
+# The delivered text names the WorkItem id: the worker needs it for
+# report-status, and after a fresh-conversation clear the backend finds the
+# new conversation by it. The deliver body carries it too (workItemId), so
+# the backend starts a fresh conversation for a new task before this first
+# delivery and does not push the same task a second time.
+DELIVER_MESSAGE="$TASK_MESSAGE"
+if [ -n "$TASK_ID" ]; then
+  DELIVER_MESSAGE="WorkItem ${TASK_ID} — ${TASK_MESSAGE//<your WorkItem id>/$TASK_ID}"
+fi
+
 if [ "$POOL_OK" != "true" ]; then
   # Unchanged from before the reorder: warn and still attempt delivery.
   # Aborting here instead would be a behavioural change beyond this WI's
@@ -241,13 +254,13 @@ fi
 # delivery, so there is nothing here that this literal can honestly be said
 # to mirror. Left exactly as-is rather than attached to a plausible-looking
 # constant that does not actually govern it.
-BODY=$(jq -n --arg message "$TASK_MESSAGE" '{message: $message, waitForReady: true, waitTimeout: 15000}')
+BODY=$(jq -n --arg message "$DELIVER_MESSAGE" --arg workItemId "$TASK_ID" '{message: $message, waitForReady: true, waitTimeout: 15000} + (if $workItemId != "" then {workItemId: $workItemId} else {} end)')
 
 DELIVER_OK=true
 api_call POST "/terminal/${TO}/deliver" "$BODY" || DELIVER_OK=false
 
 if [ "$DELIVER_OK" = "false" ]; then
-  FORCE_BODY=$(jq -n --arg message "$TASK_MESSAGE" '{message: $message, force: true}')
+  FORCE_BODY=$(jq -n --arg message "$DELIVER_MESSAGE" --arg workItemId "$TASK_ID" '{message: $message, force: true} + (if $workItemId != "" then {workItemId: $workItemId} else {} end)')
   api_call POST "/terminal/${TO}/deliver" "$FORCE_BODY" || {
     # Worker likely offline — attempt auto-start if we have team context
     STARTED=false
@@ -283,7 +296,7 @@ if [ "$DELIVER_OK" = "false" ]; then
           # EVENT_DELIVERY_CONSTANTS.TOTAL_DELIVERY_TIMEOUT, but coincidence
           # of value is not evidence of relationship — eleven constants share
           # 30000. Not claimed as a mirror.
-          RETRY_BODY=$(jq -n --arg message "$TASK_MESSAGE" '{message: $message, waitForReady: true, waitTimeout: 30000}')
+          RETRY_BODY=$(jq -n --arg message "$DELIVER_MESSAGE" --arg workItemId "$TASK_ID" '{message: $message, waitForReady: true, waitTimeout: 30000} + (if $workItemId != "" then {workItemId: $workItemId} else {} end)')
           api_call POST "/terminal/${TO}/deliver" "$RETRY_BODY" && STARTED=true || {
             # Final fallback: force deliver
             api_call POST "/terminal/${TO}/deliver" "$FORCE_BODY" && STARTED=true || true

package/config/skills/team-leader/verify-output/SKILL.md

@@ -43,12 +43,12 @@ Supports two modes:
 
 ### With explicit checks (legacy)
 ```bash
-bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"taskId":"task-123","taskPath":"/project/.crewly/tasks/m1/done/task.md","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","checks":[{"name":"build","command":"npm run build"},{"name":"tests","command":"npm test"}]}'
+bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"workItemId":"<WorkItem id>","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","checks":[{"name":"build","command":"npm run build"},{"name":"tests","command":"npm test"}]}'
 ```
 
 ### With template pipeline (recommended)
 ```bash
-bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"taskId":"task-123","taskPath":"/project/.crewly/tasks/m1/done/task.md","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","templateId":"dev-fullstack"}'
+bash {{SKILLS_PATH}}/team-leader/verify-output/execute.sh '{"workItemId":"<WorkItem id>","workerId":"worker-1","teamId":"team-123","projectPath":"/path/to/project","templateId":"dev-fullstack"}'
 ```
 
 ## Parameters

package/config/sops/developer/git-workflow.md

@@ -80,7 +80,7 @@ git worktree remove /tmp/crewly-{ticket-name}-{owner}
 **Notes:**
 - Step 4 is also done for you: the backend's worktree janitor removes a worktree under `.claude/worktrees/` or `/tmp/crewly-worktrees/` once its branch is merged (or its PR is MERGED), it is clean, and it has been idle for 2 hours. Uncommitted or untracked files keep it.
 - `node_modules` is not installed in the worktree by default. For prompt/doc-only PRs that's fine. For backend code PRs that need `npm test` / `npm run build`, run those checks back in the main repo or `npm install` inside the worktree.
-- `.crewly/` directory is gitignored — task spec markdown files written there in a worktree won't appear in the diff. Copy spec files to the main repo's `.crewly/tasks/...` if other agents need to read them.
+- `.crewly/` is usually gitignored, except `.crewly/tickets/` (project tickets, tracked on purpose). Notes you write elsewhere under `.crewly/` in a worktree won't appear in the diff and other agents won't see them. Put work other agents must pick up in a project ticket (`project-tickets create`), and edit tickets only through that skill, never by hand in a worktree — the live copy is the main checkout's.
 - Do NOT use the main repo `crewly/` directory to develop a feature branch when another agent is also active in the team. The main repo is the orchestrator's coordination surface, not a per-agent dev sandbox.
 
 **Solo work exception:** if you are the only developer active in the team and you're not parking work for parallel review, working directly in the main repo is acceptable. The worktree pattern is required only when there is a real risk of branch-state collision.