crewly 1.20.204 → 1.20.206

package/config/skills/_common/lib.sh

@@ -225,9 +225,10 @@ api_call() {
   # Include agent session identity header for heartbeat tracking
   # Use ${VAR:-} pattern to avoid 'unbound variable' error under set -u (nounset)
   # The agent badge (#999): the credential that makes the backend treat this
-  # call as this agent. Injected by the harness at launch; without it the
-  # session header alone is accepted for one release only. Never the owner
-  # either way.
+  # call as this agent. Injected by the harness at launch. Without a valid
+  # one, the session header counts only when the backend finds this shell's
+  # process under that agent's PTY; terminal writes and API-key reads refuse
+  # it otherwise (#1024). Never the owner either way.
   if [ -n "${CREWLY_AGENT_BADGE:-}" ]; then
     args+=(-H "X-Agent-Badge: $CREWLY_AGENT_BADGE")
   fi

package/config/skills/agent/core/docs-comment/SKILL.md

@@ -0,0 +1,121 @@
+---
+name: Docs Comment
+description: Handle feedback left as comments in a Google Doc — list comments and replies, reply, resolve, or add a comment (via the Google Workspace grant held by Crewly Cloud). Writes as the owner's Google account — say what you posted.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - comments in the doc
+  - google doc comments
+  - reply to the comment
+  - resolve the comment
+  - feedback in the doc
+  - add a comment to the doc
+tags:
+  - google
+  - docs
+  - comments
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Docs Comment
+
+```bash
+bash execute.sh list    --doc "https://docs.google.com/document/d/1AbC…/edit"
+bash execute.sh list    --doc 1AbC… --include-resolved
+bash execute.sh reply   --doc 1AbC… --comment AAAB… --text "Updated the intro, see paragraph 2."
+bash execute.sh resolve --doc 1AbC… --comment AAAB… --text "Done in v2."
+bash execute.sh resolve --doc 1AbC… --comment AAAB…
+bash execute.sh add     --doc 1AbC… --text "Is this number from Q2?" --quote "grew 40%"
+```
+
+`--doc` takes a document id or its docs.google.com URL. `--account` picks a
+connected Google account (see below).
+
+## Working through feedback
+
+1. `list` the open comments. Each one has the text it is about (`quote`),
+   who wrote it and when, and any replies.
+2. Make the change the comment asks for (for example with `docs-write`), or
+   decide it needs the owner.
+3. `resolve` the comment with a one-line note of what changed, or `reply`
+   with a question if it is unclear. Do not resolve a comment you did not
+   address.
+
+Everything you post appears under the owner's Google name. Tell the owner
+what you replied to or resolved.
+
+## Output
+
+`list`:
+
+```json
+{"success":true,"docId":"1AbC…","count":1,"truncated":false,"comments":[{"id":"AAAB…","author":"Steve","createdTime":"2026-10-03T09:12:00.000Z","content":"Too long","quote":"In this document we…","anchor":"kix.x1","resolved":false,"replies":[{"id":"AAAC…","author":"Ella","createdTime":"…","content":"Trimmed."}]}]}
+```
+
+Resolved comments are left out unless you pass `--include-resolved`.
+`truncated: true` means the document has more than 500 comments and only the
+first 500 were read.
+
+`reply` / `resolve`:
+
+```json
+{"success":true,"action":"reply","docId":"1AbC…","commentId":"AAAB…","replyId":"AAAD…","content":"Updated the intro."}
+```
+
+`add`:
+
+```json
+{"success":true,"action":"add","docId":"1AbC…","commentId":"AAAE…","content":"Is this number from Q2?","quote":"grew 40%"}
+```
+
+## Comments you add are not anchored
+
+Google Docs does not show a comment created through the API as attached to
+text. `--quote` is sent to Google as the quoted text, but in the Docs UI the
+comment **may appear as a general (unanchored) comment** on the whole
+document. When the location matters, quote the passage in the comment text
+too, for example `--text "On 'grew 40%': is this Q2?"`.
+
+## Failures
+
+`{"success":false,"reason":"reauth_required",…}` (exit 1): the Google grant
+can read comments but not write them on this document. Reply, resolve and add
+on a document Crewly did not create need Google Drive edit access, which
+older connections do not include. Run `google-connect --product drive --channel <chat-channel-id>` to
+post a one-tap card for the owner, and tell them in one line what you will do
+once it is granted. Do not paste a link yourself.
+
+`{"success":false,"reason":"not_connected","hint":"…"}` (exit 1): Google
+Drive is not connected. Use `google-connect --product drive` the same way.
+
+`{"success":false,"reason":"not_permitted",…}` (exit 1): this Google
+connection belongs to someone else and is not shared with the person you are
+working for. Say so; do not try another account.
+
+`reason: "google_error"` with a 404 means the document id or comment id is
+wrong, or the account cannot see the document.
+
+## Choosing a Google account
+
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+
+```bash
+bash execute.sh list --doc 1AbC… --account work@company.com
+```
+
+The account must be connected *for this product* — Google consent is per product (Gmail / Calendar / Drive), so an account connected only for Calendar cannot read Drive.

package/config/skills/agent/core/docs-comment/execute.sh

@@ -0,0 +1,131 @@
+#!/bin/bash
+# =============================================================================
+# docs-comment — List, reply to, resolve or add comments in a Google Doc
+#
+# Backed by:
+#   GET  /api/google/docs/:id/comments[?includeResolved=1]
+#   POST /api/google/docs/:id/comments                     { text, quote? }
+#   POST /api/google/docs/:id/comments/:commentId/replies  { text }
+#   POST /api/google/docs/:id/comments/:commentId/resolve  { text? }
+#
+# Usage:
+#   bash execute.sh list    --doc <id|url> [--include-resolved]
+#   bash execute.sh reply   --doc <id|url> --comment <id> --text "…"
+#   bash execute.sh resolve --doc <id|url> --comment <id> [--text "…"]
+#   bash execute.sh add     --doc <id|url> --text "…" [--quote "exact text"]
+#   bash execute.sh '{"command":"list","doc":"<id>"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh list    --doc <id|url> [--include-resolved]
+  bash execute.sh reply   --doc <id|url> --comment <id> --text "…"
+  bash execute.sh resolve --doc <id|url> --comment <id> [--text "…"]
+  bash execute.sh add     --doc <id|url> --text "…" [--quote "exact text in the doc"]
+  bash execute.sh '{"command":"reply","doc":"<id>","comment":"<id>","text":"…"}'
+
+Options:
+  --doc               Document id or docs.google.com URL
+  --comment           Comment id (from list)
+  --text              Reply / comment text (optional for resolve)
+  --quote             Exact document text the new comment is about (add only;
+                      Google Docs may still show it as an unanchored comment)
+  --include-resolved  list: include resolved comments too
+  --account           Which connected Google account to act as (default: your primary)
+  --help | -h         Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+COMMAND=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+elif [[ $# -gt 0 && ${1:0:1} != '-' ]]; then
+  COMMAND="$1"
+  shift
+fi
+DOC=""; COMMENT=""; TEXT=""; TEXT_SET=0; QUOTE=""; INCLUDE_RESOLVED=0; ACCOUNT=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --doc|--id)         [ $# -ge 2 ] || error_exit "$1 requires a value";        DOC="$2";     shift 2 ;;
+    --comment)          [ $# -ge 2 ] || error_exit "--comment requires a value"; COMMENT="$2"; shift 2 ;;
+    --text)             [ $# -ge 2 ] || error_exit "--text requires a value";    TEXT="$2"; TEXT_SET=1; shift 2 ;;
+    --quote)            [ $# -ge 2 ] || error_exit "--quote requires a value";   QUOTE="$2";   shift 2 ;;
+    --include-resolved) INCLUDE_RESOLVED=1; shift ;;
+    --account)          [ $# -ge 2 ] || error_exit "--account requires a value"; ACCOUNT="$2"; shift 2 ;;
+    --help|-h)          print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$COMMAND" ] && COMMAND=$(printf '%s' "$INPUT" | jq -r '.command // .action // empty')
+  [ -z "$DOC" ]     && DOC=$(printf '%s' "$INPUT" | jq -r '.doc // .id // .documentId // empty')
+  [ -z "$COMMENT" ] && COMMENT=$(printf '%s' "$INPUT" | jq -r '.comment // .commentId // empty')
+  [ "$TEXT_SET" -eq 0 ] && TEXT=$(printf '%s' "$INPUT" | jq -r '.text // empty')
+  [ -z "$QUOTE" ]   && QUOTE=$(printf '%s' "$INPUT" | jq -r '.quote // empty')
+  [ "$INCLUDE_RESOLVED" -eq 0 ] && [ "$(printf '%s' "$INPUT" | jq -r '.includeResolved // false')" = "true" ] && INCLUDE_RESOLVED=1
+  [ -z "$ACCOUNT" ] && ACCOUNT=$(printf '%s' "$INPUT" | jq -r '.account // empty')
+fi
+# Route the call at one connected Google account; unset means the default.
+[ -n "$ACCOUNT" ] && export CREWLY_GOOGLE_ACCOUNT="$ACCOUNT"
+# Accept a full docs.google.com URL too.
+DOC=$(printf '%s' "$DOC" | sed -E 's#.*/document/d/([^/?]+).*#\1#')
+
+[ -n "$COMMAND" ] || error_exit "a command is required: list, reply, resolve or add (see --help)"
+require_param "doc (--doc)" "$DOC"
+BASE="/google/docs/$(uri "$DOC")/comments"
+
+case "$COMMAND" in
+  list)
+    QS=""; [ "$INCLUDE_RESOLVED" -eq 1 ] && QS="?includeResolved=1"
+    RESPONSE=$(call GET "${BASE}${QS}") || { printf '%s\n' "$RESPONSE"; exit 1; }
+    # Oversized answers come back as the output-cap envelope; pass it through.
+    if printf '%s' "$RESPONSE" | jq -e '.truncated == true and has("file")' >/dev/null 2>&1; then printf '%s\n' "$RESPONSE"; exit 0; fi
+    printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), docId: .data.docId, count: (.data.comments | length), truncated: (.data.truncated // false), comments: .data.comments}'
+    ;;
+  reply)
+    require_param "comment (--comment)" "$COMMENT"
+    require_param "text (--text)" "$TEXT"
+    BODY=$(jq -cn --arg text "$TEXT" '{text: $text}')
+    RESPONSE=$(call POST "${BASE}/$(uri "$COMMENT")/replies" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+    printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), action: "reply", docId: .data.docId, commentId: .data.commentId, replyId: .data.id, content: .data.content}'
+    ;;
+  resolve)
+    require_param "comment (--comment)" "$COMMENT"
+    BODY=$(jq -cn --arg text "$TEXT" 'if $text != "" then {text: $text} else {} end')
+    RESPONSE=$(call POST "${BASE}/$(uri "$COMMENT")/resolve" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+    printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), action: "resolve", docId: .data.docId, commentId: .data.commentId, replyId: .data.id, content: (.data.content // ""), resolved: true}'
+    ;;
+  add)
+    require_param "text (--text)" "$TEXT"
+    BODY=$(jq -cn --arg text "$TEXT" --arg quote "$QUOTE" '{text: $text} + (if $quote != "" then {quote: $quote} else {} end)')
+    RESPONSE=$(call POST "${BASE}" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+    printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), action: "add", docId: .data.docId, commentId: .data.id, content: .data.content} + (if .data.quote then {quote: .data.quote} else {} end)'
+    ;;
+  *)
+    error_exit "Unknown command: $COMMAND (expected list, reply, resolve or add)"
+    ;;
+esac

package/config/skills/agent/core/docs-comment/execute.test.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+# Tests for docs-comment — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. No Google call is made. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18831
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+COMMENT = {'id': 'c1', 'author': 'Steve', 'createdTime': 't0', 'content': 'Too long', 'quote': 'intro',
+           'resolved': False, 'replies': [{'id': 'r0', 'author': 'Ella', 'createdTime': 't1', 'content': 'Trimmed'}]}
+class H(BaseHTTPRequestHandler):
+    def _send(self, status, payload):
+        self.send_response(status); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps(payload).encode())
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data,
+                                         'account': self.headers.get('X-Google-Account')}))
+        if '/docs/narrow/' in self.path:
+            return self._send(403, {'success': False, 'error': 'reauth_required',
+                                    'message': 'Replying to or adding comments on this document needs Google Drive edit access, which this Google account has not granted yet.',
+                                    'hint': 'Ask the owner to reconnect Google Drive: run the google-connect skill with --product drive.'})
+        if method == 'GET':
+            return self._send(200, {'success': True, 'data': {'docId': 'd1', 'comments': [COMMENT], 'truncated': False}})
+        if self.path.endswith('/replies'):
+            return self._send(200, {'success': True, 'data': {'docId': 'd1', 'commentId': 'c1', 'id': 'r9', 'content': data['text']}})
+        if self.path.endswith('/resolve'):
+            return self._send(200, {'success': True, 'data': {'docId': 'd1', 'commentId': 'c1', 'id': 'r10', 'action': 'resolve', 'content': data.get('text', ''), 'resolved': True}})
+        out = {'docId': 'd1', 'id': 'c7', 'content': data['text'], 'resolved': False, 'replies': []}
+        if 'quote' in data: out['quote'] = data['quote']
+        return self._send(200, {'success': True, 'data': out})
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+req() { jq -r '.method + " " + .path + " " + (.body|tojson)' "$STUB_LOG"; }
+
+# list
+OUT=$(run list --doc "https://docs.google.com/document/d/d1/edit?tab=t.0")
+check "list: request" "$(req)" 'GET /api/google/docs/d1/comments null'
+check "list: output" "$(printf '%s' "$OUT" | jq -c '{success, docId, count, truncated, first: .comments[0].id, quote: .comments[0].quote, replies: (.comments[0].replies|length)}')" \
+  '{"success":true,"docId":"d1","count":1,"truncated":false,"first":"c1","quote":"intro","replies":1}'
+run list --doc d1 --include-resolved >/dev/null
+check "list: --include-resolved" "$(req)" 'GET /api/google/docs/d1/comments?includeResolved=1 null'
+
+# reply
+OUT=$(run reply --doc d1 --comment c1 --text "Fixed, see para 2")
+check "reply: request" "$(req)" 'POST /api/google/docs/d1/comments/c1/replies {"text":"Fixed, see para 2"}'
+check "reply: output" "$OUT" '{"success":true,"action":"reply","docId":"d1","commentId":"c1","replyId":"r9","content":"Fixed, see para 2"}'
+
+# resolve, with and without a message
+OUT=$(run resolve --doc d1 --comment c1 --text "Done")
+check "resolve: request" "$(req)" 'POST /api/google/docs/d1/comments/c1/resolve {"text":"Done"}'
+check "resolve: output" "$OUT" '{"success":true,"action":"resolve","docId":"d1","commentId":"c1","replyId":"r10","content":"Done","resolved":true}'
+run resolve --doc d1 --comment c1 >/dev/null
+check "resolve: no text" "$(req)" 'POST /api/google/docs/d1/comments/c1/resolve {}'
+
+# add, with and without a quote
+OUT=$(run add --doc d1 --text "Source?" --quote "grew 40%")
+check "add: request" "$(req)" 'POST /api/google/docs/d1/comments {"text":"Source?","quote":"grew 40%"}'
+check "add: output" "$OUT" '{"success":true,"action":"add","docId":"d1","commentId":"c7","content":"Source?","quote":"grew 40%"}'
+run add --doc d1 --text "General" >/dev/null
+check "add: no quote" "$(req)" 'POST /api/google/docs/d1/comments {"text":"General"}'
+
+# JSON input + --account
+run '{"command":"reply","doc":"d1","comment":"c1","text":"via json","account":"work@x.com"}' >/dev/null
+check "json input: request" "$(req)" 'POST /api/google/docs/d1/comments/c1/replies {"text":"via json"}'
+check "json input: account header" "$(jq -r '.account' "$STUB_LOG")" 'work@x.com'
+
+# reauth_required is passed through with its English hint, exit 1
+OUT=$(run reply --doc narrow --comment c1 --text "x"); CODE=$?
+check "reauth: exit code" "$CODE" "1"
+check "reauth: reason" "$(printf '%s' "$OUT" | jq -r '.reason')" "reauth_required"
+check "reauth: hint names the one-tap path" "$(printf '%s' "$OUT" | jq -r '.hint' | grep -c 'google-connect skill with --product drive')" "1"
+
+# argument validation (no request sent)
+check "no command" "$(run_err --doc d1 | grep -c 'command is required')" "1"
+check "unknown command" "$(run_err delete --doc d1 | grep -c 'Unknown command')" "1"
+check "reply needs --comment" "$(run_err reply --doc d1 --text x | grep -c 'comment')" "1"
+check "reply needs --text" "$(run_err reply --doc d1 --comment c1 | grep -c 'text')" "1"
+check "add needs --text" "$(run_err add --doc d1 | grep -c 'text')" "1"
+check "needs --doc" "$(run_err list | grep -c 'doc')" "1"
+
+echo "docs-comment: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/project-tickets/SKILL.md

@@ -193,6 +193,18 @@ orchestrator.
 `--retro on|off|default` switches the team lead's daily retro (default: on
 while an autopilot experiment on the project is running).
 
+When the project has a goal (its goals log or an active project OKR) but
+nothing is left to triage and someone on the team is idle, the team lead gets
+ONE `goal_replan` WorkItem: the goal, the tickets closed in the last 7 days,
+any open experiment card, and the ask "open the next tickets toward this goal,
+or say why there are none". The lead opens the tickets; the autopilot never
+makes them ready or starts work. At most `--replans-per-day <0-5>` a day
+(default 1; 0 = off), within the same daily budget and in-progress cap. A
+replan still open after `--replan-ttl-hours` (default 4) is expired. After a
+replan that opened no tickets the autopilot backs off (skips 2 days, then 4,
+then 7) until a new goal / OKR is set or a ticket is created. Only goals-log
+entries from the last 30 days count as an active goal.
+
 ## Autopilot numbers and retro (owner / orchestrator / team lead)
 
 ```bash
@@ -201,7 +213,7 @@ bash execute.sh runs  --project P [--days 7]  [--label feed]   # run trace + tic
 ```
 
 `stats` counts tickets triaged / started / done (worker finished) / verified
-(ticket done) / sent back / stalled, cycle times, owner touches by kind,
+(ticket done) / sent back / stalled, goal replans, cycle times, owner touches by kind,
 stalls by cause, harness interventions, traced tokens and $ against the daily
 budget, and time paused on the budget. Read a day's run with `trace-read
 --trace <runTraceId>`.

package/config/skills/agent/core/project-tickets/execute.sh

@@ -23,7 +23,8 @@
 #   bash execute.sh ask-owner --project P --id APP-12 --clear [--note "answer"]
 #   bash execute.sh autopilot --project P [--on|--off] [--driver <session>|--driver default]
 #                             [--daily-budget <tokens, e.g. 20M>] [--max-in-flight <n>]      (owner / orchestrator)
-#                             [--retro on|off|default]
+#                             [--retro on|off|default] [--replans-per-day <0-5>|default]
+#                             [--replan-ttl-hours <1-48>|default]
 #   bash execute.sh stats     --project P [--days 14] [--label feed]       (owner / orc / lead)
 #   bash execute.sh runs      --project P [--days 7] [--label feed]        (owner / orc / lead)
 #   bash execute.sh retro     --project P --day YYYY-MM-DD --summary "…" [--problem "class|title|detail|evidence" …]
@@ -63,10 +64,15 @@ Usage:
                                                               The owner answered: remove the needs-owner mark
   bash execute.sh autopilot --project P [--on|--off] [--driver <session>|default]
                           [--daily-budget <tokens, e.g. 20M>] [--max-in-flight <n>] [--retro on|off|default]
+                          [--replans-per-day <0-5>|default] [--replan-ttl-hours <1-48>|default]
                                                               Owner / orchestrator: show or change the ticket
                                                               autopilot (no flags = show). --retro: the lead's
                                                               daily retro (default: on while an autopilot
-                                                              experiment runs)
+                                                              experiment runs). --replans-per-day: how often a
+                                                              day the lead is woken to plan toward the goal when
+                                                              nothing is left to triage (default 1, 0 = off);
+                                                              --replan-ttl-hours: a replan still open after this
+                                                              long is expired (default 4)
   bash execute.sh stats     --project P [--days 14] [--label feed]
                                                               Autopilot numbers per day: tickets triaged /
                                                               started / done / verified / sent back / stalled,
@@ -90,7 +96,7 @@ STATUS=""; SOURCE=""; REQUEST_ID=""; NOTE=""; OWNER_REVIEW=""; ASSIGNEE=""; STAR
 ACCEPTANCE_JSON="null"
 HAS_DESCRIPTION=0
 QUESTION=""; CLEAR=""; OPTIONS_JSON="[]"; DEFAULT_OPT=""; DEADLINE=""; SENSITIVE=""; AP_ENABLED=""; AP_DRIVER=""; AP_BUDGET=""; AP_MAX=""
-AP_RETRO=""; DAYS=""; LABEL=""; DAY=""; SUMMARY=""; PROBLEMS_JSON="[]"
+AP_RETRO=""; AP_REPLANS=""; AP_REPLAN_TTL=""; DAYS=""; LABEL=""; DAY=""; SUMMARY=""; PROBLEMS_JSON="[]"
 
 if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
   J="$1"; shift
@@ -124,6 +130,8 @@ if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
   AP_BUDGET=$(printf '%s' "$J" | jq -r '.dailyBudgetTokens // empty')
   AP_MAX=$(printf '%s' "$J" | jq -r '.maxInFlightPerMember // empty')
   AP_RETRO=$(printf '%s' "$J" | jq -r 'if (.retro|type) == "boolean" then (if .retro then "on" else "off" end) else (.retro // empty) end')
+  AP_REPLANS=$(printf '%s' "$J" | jq -r '.replansPerDay // empty')
+  AP_REPLAN_TTL=$(printf '%s' "$J" | jq -r '.replanTtlHours // empty')
   DAYS=$(printf '%s' "$J" | jq -r '.days // empty')
   LABEL=$(printf '%s' "$J" | jq -r '.label // empty')
   DAY=$(printf '%s' "$J" | jq -r '.day // empty')
@@ -166,6 +174,10 @@ while [[ $# -gt 0 ]]; do
                      [ $# -ge 2 ] || error_exit "--daily-budget requires a value"; AP_BUDGET="$2"; shift 2 ;;
     --max-in-flight) [ $# -ge 2 ] || error_exit "--max-in-flight requires a value"; AP_MAX="$2"; shift 2 ;;
     --retro)         [ $# -ge 2 ] || error_exit "--retro requires on, off or default"; AP_RETRO="$2"; shift 2 ;;
+    --replans-per-day)
+                     [ $# -ge 2 ] || error_exit "--replans-per-day requires 0-5 or default"; AP_REPLANS="$2"; shift 2 ;;
+    --replan-ttl-hours)
+                     [ $# -ge 2 ] || error_exit "--replan-ttl-hours requires 1-48 or default"; AP_REPLAN_TTL="$2"; shift 2 ;;
     --days)          [ $# -ge 2 ] || error_exit "--days requires a value";        DAYS="$2"; shift 2 ;;
     --label)         [ $# -ge 2 ] || error_exit "--label requires a value";       LABEL="$2"; shift 2 ;;
     --day)           [ $# -ge 2 ] || error_exit "--day requires a value";         DAY="$2"; shift 2 ;;
@@ -282,13 +294,15 @@ case "$ACTION" in
     ;;
   autopilot)
     require_param "project" "$PROJECT"
-    if [ -z "$AP_ENABLED$AP_DRIVER$AP_BUDGET$AP_MAX$AP_RETRO" ]; then
+    if [ -z "$AP_ENABLED$AP_DRIVER$AP_BUDGET$AP_MAX$AP_RETRO$AP_REPLANS$AP_REPLAN_TTL" ]; then
       api_call GET "/project-ticket-autopilot/$(enc "$PROJECT")" | jq '{success, autopilot: .data}'
     else
-      BODY=$(jq -n --arg enabled "$AP_ENABLED" --arg driver "$AP_DRIVER" --arg budget "$AP_BUDGET" --arg max "$AP_MAX" --arg retro "$AP_RETRO" \
+      BODY=$(jq -n --arg enabled "$AP_ENABLED" --arg driver "$AP_DRIVER" --arg budget "$AP_BUDGET" --arg max "$AP_MAX" --arg retro "$AP_RETRO" --arg replans "$AP_REPLANS" --arg ttl "$AP_REPLAN_TTL" \
         '{}
          + (if $enabled != "" then {enabled: ($enabled == "true")} else {} end)
          + (if $retro == "default" then {retro: null} elif $retro != "" then {retro: $retro} else {} end)
+         + (if $replans == "default" then {replansPerDay: null} elif $replans != "" then {replansPerDay: ($replans | tonumber? // $replans)} else {} end)
+         + (if $ttl == "default" then {replanTtlHours: null} elif $ttl != "" then {replanTtlHours: ($ttl | tonumber? // $ttl)} else {} end)
          + (if $driver == "default" then {driver: null} elif $driver != "" then {driver: $driver} else {} end)
          + (if $budget == "default" then {dailyBudgetTokens: null} elif $budget != "" then {dailyBudgetTokens: ($budget | tonumber? // $budget)} else {} end)
          + (if $max == "default" then {maxInFlightPerMember: null} elif $max != "" then {maxInFlightPerMember: ($max | tonumber? // $max)} else {} end)')
@@ -303,7 +317,7 @@ case "$ACTION" in
     if [ "$ACTION" = "stats" ]; then
       api_call GET "/project-ticket-autopilot/$(enc "$PROJECT")/stats${QS:+?$QS}" \
         | jq '{success, stats: (.data | if . == null then null else {project, label, range, pausedForToday, total, labels,
-               days: [.days[] | {day, triaged, started, done, verified, sentBack, stalled, ownerTouches: .ownerTouches.total, stallMs: .stalls.totalMs, costUsd, pausedMs, runTraceId}]} end)}'
+               days: [.days[] | {day, triaged, replans, started, done, verified, sentBack, stalled, ownerTouches: .ownerTouches.total, stallMs: .stalls.totalMs, costUsd, pausedMs, runTraceId}]} end)}'
     else
       api_call GET "/project-ticket-autopilot/$(enc "$PROJECT")/runs${QS:+?$QS}" | jq '{success, runs: .data}'
     fi

package/config/skills/agent/core/project-tickets/execute.test.sh

@@ -32,7 +32,7 @@ class H(BaseHTTPRequestHandler):
                 return self.reply(200, {'success': True, 'data': T})
             return self.reply(200, {'success': True, 'data': {'project': {'id': 'p1'}, 'tickets': [T], 'invalid': []}})
         if self.path.startswith('/api/project-ticket-autopilot/') and '/stats' in self.path:
-            day = {'day': '2026-10-02', 'triaged': 3, 'started': 2, 'done': 2, 'verified': 1, 'sentBack': 0, 'stalled': 1,
+            day = {'day': '2026-10-02', 'triaged': 3, 'replans': 1, 'started': 2, 'done': 2, 'verified': 1, 'sentBack': 0, 'stalled': 1,
                    'ownerTouches': {'total': 2}, 'stalls': {'totalMs': 60000}, 'costUsd': 1.5, 'pausedMs': 0, 'runTraceId': 'tr-x', 'extra': 1}
             return self.reply(200, {'success': True, 'data': {'project': {'id': 'p1'}, 'label': 'feed', 'range': {}, 'pausedForToday': False,
                                                                'total': {'verified': 1}, 'labels': ['feed'], 'days': [day]}})
@@ -158,11 +158,17 @@ run autopilot --project p1 --retro on >/dev/null
 check "autopilot retro on: body" "$(last '.body | tostring')" '{"retro":"on"}'
 run autopilot --project p1 --retro default >/dev/null
 check "autopilot retro default: body" "$(last '.body | tostring')" '{"retro":null}'
+run autopilot --project p1 --replans-per-day 2 >/dev/null
+check "autopilot replans: body" "$(last '.body | tostring')" '{"replansPerDay":2}'
+run autopilot --project p1 --replans-per-day default >/dev/null
+check "autopilot replans default: body" "$(last '.body | tostring')" '{"replansPerDay":null}'
+run autopilot --project p1 --replan-ttl-hours 6 >/dev/null
+check "autopilot replan ttl: body" "$(last '.body | tostring')" '{"replanTtlHours":6}'
 
 # --- stats / runs / retro (specs/2026-10-03-autopilot-experiments.md) ---
 OUT=$(run stats --project p1 --days 7 --label feed)
 check "stats: path" "$(last .path)" "/api/project-ticket-autopilot/p1/stats?days=7&label=feed"
-check "stats: day row" "$(printf '%s' "$OUT" | jq -c '.stats.days[0] | [.day, .verified, .ownerTouches, .stallMs, .runTraceId, has("extra")]')" '["2026-10-02",1,2,60000,"tr-x",false]'
+check "stats: day row" "$(printf '%s' "$OUT" | jq -c '.stats.days[0] | [.day, .verified, .replans, .ownerTouches, .stallMs, .runTraceId, has("extra")]')" '["2026-10-02",1,1,2,60000,"tr-x",false]'
 OUT=$(run runs --project p1)
 check "runs: path" "$(last .path)" "/api/project-ticket-autopilot/p1/runs"
 check "runs: output" "$(printf '%s' "$OUT" | jq -c '.runs.days[0].runTraceId')" '"tr-x"'

package/dist/backend/backend/src/constants.d.ts

@@ -145,6 +145,39 @@ export declare const TICKET_AUTOPILOT_CONSTANTS: {
     /** Option labels of that card */
     readonly RETRO_APPROVE_LABEL: "Approve";
     readonly RETRO_SKIP_LABEL: "Skip";
+    /** WorkItem type / `metadata.kind` of the goal replan the driver receives when nothing is left to triage */
+    readonly REPLAN_WORK_ITEM_TYPE: "goal_replan";
+    readonly REPLAN_METADATA_KIND: "goal_replan";
+    /** Default and largest number of goal replans per project per local day (0 = off) */
+    readonly DEFAULT_REPLANS_PER_DAY: 1;
+    readonly REPLANS_PER_DAY_LIMIT: 5;
+    /** Tickets closed (done / cancelled) this many days back are listed in the replan brief */
+    readonly REPLAN_CLOSED_LOOKBACK_DAYS: 7;
+    /** Most closed tickets listed in the replan brief */
+    readonly REPLAN_MAX_CLOSED_TICKETS: 20;
+    /** Most characters of goal text quoted in the replan brief */
+    readonly REPLAN_GOAL_MAX_CHARS: 2000;
+    /** Most goals.md entries quoted (newest first) */
+    readonly REPLAN_GOAL_MAX_ENTRIES: 3;
+    /** Most open experiment cards listed in the replan brief */
+    readonly REPLAN_MAX_EXPERIMENTS: 5;
+    /**
+     * A replan still live (any live status) after this many hours is expired:
+     * cancelled where the pool allows it, and never counted as live again, so
+     * it cannot hold triage forever. Default and bounds of `replanTtlHours`.
+     */
+    readonly DEFAULT_REPLAN_TTL_HOURS: 4;
+    readonly REPLAN_TTL_HOURS_LIMIT: 48;
+    /** A live replan older than this stops holding triage once there are tickets to triage (ms) */
+    readonly REPLAN_YIELD_AFTER_MS: number;
+    /**
+     * After a replan that opened no tickets: skip the next 2 days, then 4,
+     * then 7 (doubling, capped). Reset by a new goal / OKR or a new ticket.
+     */
+    readonly REPLAN_BACKOFF_FIRST_DAYS: 2;
+    readonly REPLAN_BACKOFF_MAX_DAYS: 7;
+    /** Goals-log entries older than this are not an active goal (days); OKRs keep their own status */
+    readonly REPLAN_GOAL_ACTIVE_DAYS: 30;
 };
 /**
  * Safe restart: drain in-flight agent turns before a shutdown kills the PTYs,
@@ -4148,6 +4181,16 @@ export declare const GOOGLE_WORKSPACE_CONSTANTS: {
     readonly DRIVE_MAX_CONTENT_BYTES: number;
     /** Google-native MIME types and what they export to as text */
     readonly DRIVE_EXPORT_MIME: Record<string, string>;
+    /**
+     * Full Drive scope. Needed to reply to, resolve or add comments on a
+     * document Crewly did not create (`comments.create` / `replies.create`
+     * accept only `drive` or `drive.file`). Optional on the Cloud grant.
+     */
+    readonly DRIVE_FULL_SCOPE: "https://www.googleapis.com/auth/drive";
+    /** Comments fetched per Drive `comments.list` page (Google's max is 100) */
+    readonly COMMENTS_PAGE_SIZE: 100;
+    /** Pages read per `docs-comment list` before stopping (caps a huge thread) */
+    readonly COMMENTS_MAX_PAGES: 5;
     /** Sheets range used when the caller names none */
     readonly SHEETS_DEFAULT_RANGE: "A1:Z1000";
     /** Cap on rows accepted per Sheets write */
@@ -4174,6 +4217,8 @@ export declare const GOOGLE_WORKSPACE_CONSTANTS: {
         readonly NETWORK: "network";
         /** Caller sent an invalid request */
         readonly VALIDATION: "validation";
+        /** The grant lacks a scope this call needs; the owner must reconnect the product */
+        readonly REAUTH_REQUIRED: "reauth_required";
     };
 };
 /**
@@ -6325,4 +6370,35 @@ export declare const EXPERIMENT_CONSTANTS: {
     readonly CHECK_IN_RETRY_MIN_MS: number;
     readonly CHECK_IN_RETRY_MAX_MS: number;
 };
+/**
+ * Release input-guard check (specs/2026-10-04-release-input-guard-check.md):
+ * classify every live agent's input box with the NEW build before restarting.
+ */
+export declare const INPUT_GUARD_CHECK_CONSTANTS: {
+    /** Script of the new build that classifies views, relative to a build's `dist/` */
+    readonly SCRIPT_RELATIVE: "backend/backend/src/scripts/input-guard-classify.js";
+    /** Longest the child process may run (ms) */
+    readonly CHILD_TIMEOUT_MS: number;
+    /** Largest child output accepted (bytes) */
+    readonly CHILD_MAX_OUTPUT_BYTES: number;
+    /** Env switch: skip the gate in the auto-update path */
+    readonly SKIP_ENV: "CREWLY_SKIP_INPUT_GUARD_CHECK";
+    /** Once-per-version "blocked" ledger under CREWLY_HOME */
+    readonly LEDGER_FILE: "input-guard-blocked.json";
+    /** Route (under /api) */
+    readonly ROUTE: "/system/input-guard-check";
+    /** Marker of a build installed on disk but not restarted onto, under CREWLY_HOME */
+    readonly BLOCKED_BUILD_FILE: "blocked-build.json";
+    /** Only the bottom N non-empty screen rows are searched for markers (a transcript can quote anything) */
+    readonly TAIL_LINES: 12;
+    /**
+     * Lower-case footer / composer hints that mean "this runtime is at its chat
+     * prompt": Claude Code's status footer (`⏵⏵ … (shift+tab to cycle)`), the
+     * `? for shortcuts` hint (Codex, Antigravity, Gemini) and Gemini's composer
+     * placeholder. Only with one of these on screen is a missing box a failure.
+     */
+    readonly READY_MARKERS: readonly string[];
+    /** Lower-case text of dialogs, login and picker screens (no input box expected) */
+    readonly DIALOG_MARKERS: readonly string[];
+};
 //# sourceMappingURL=constants.d.ts.map