cruo-agent 0.1.17 → 0.1.19

package/dist/VERSION

@@ -1 +1 @@
-0.1.17
+0.1.19

package/dist/cli.js

@@ -15300,6 +15300,13 @@ var init_order = __esm({
   }
 });
 
+// ../../packages/core/dist/csv.js
+var init_csv = __esm({
+  "../../packages/core/dist/csv.js"() {
+    "use strict";
+  }
+});
+
 // ../../packages/core/dist/index.js
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
@@ -15315,6 +15322,7 @@ var init_dist = __esm({
     init_tree();
     init_place();
     init_order();
+    init_csv();
   }
 });
 
@@ -47659,6 +47667,14 @@ async function invokeHarness(ctx, identity, hit, worktree) {
     "--strict-mcp-config",
     "--allowedTools",
     options.allow,
+    // CRA-131. The local database is shared by every agent and person on the
+    // machine, so no agent resets it. `pnpm supabase:reset` refuses inside a
+    // run on its own (CRUO_AGENT_RUN, below); these are the spellings that
+    // bypass that script. A deny rule matches a prefix, so it is a fence and
+    // not a wall — `bash -c "…"` still gets round it — but it stops the
+    // ordinary command an agent reaches for, which is how 2026-09-19 happened.
+    "--disallowedTools",
+    DB_RESET_DENY.join(","),
     "--system-prompt",
     systemPromptText,
     ...options.model ? ["--model", options.model] : [],
@@ -47675,7 +47691,9 @@ async function invokeHarness(ctx, identity, hit, worktree) {
         // both are written straight through — this tees, it does not capture.
         stdio: ["ignore", "pipe", "pipe"],
         cwd,
-        env: harnessEnv()
+        // CRA-131: marks everything the harness runs as inside an agent run,
+        // which is what makes `pnpm supabase:reset` refuse with no override.
+        env: { ...harnessEnv(), CRUO_AGENT_RUN: hit.ref }
       });
       const startedAtMs = Date.now();
       let stdoutBytes = 0;
@@ -47980,28 +47998,40 @@ async function recordRun(ctx, hit, run, outcome) {
   }
 }
 async function tick(ctx, identity, deadTicks, allowance) {
-  const mentions = await pollMentions(ctx, identity);
-  const [assigned, stateWork] = await Promise.all([pollAssigned(ctx, identity), poll(ctx, identity)]);
-  const seen = /* @__PURE__ */ new Set();
-  const hits = [...mentions, ...assigned, ...stateWork].filter((h) => {
-    if (seen.has(h.ref)) return false;
-    seen.add(h.ref);
-    return true;
-  });
-  const heldByOthers = await claimedElsewhere(ctx, hits);
-  const free = hits.filter((h) => !heldByOthers.has(h.issue.id));
-  if (heldByOthers.size > 0) {
-    log(`${heldByOthers.size} issue(s) already being worked by someone else`);
-  }
-  const attemptsByHit = await loadAttempts(ctx, free);
-  const attemptsFor = (h) => attemptsByHit.get(`${h.reason}:${h.issue.id}`) ?? 0;
-  const spendByHit = await loadSpend(ctx, free);
-  const spendFor = (h) => spendByHit.get(h.issue.id) ?? 0;
-  const overBudget = options.maxCostUsd !== void 0 ? free.filter((h) => attemptsFor(h) < options.maxAttempts && spendFor(h) >= options.maxCostUsd) : [];
-  for (const hit of overBudget) await handOffForCost(ctx, hit, spendFor(hit));
-  const actionable = free.filter(
-    (h) => attemptsFor(h) < options.maxAttempts && (options.maxCostUsd === void 0 || spendFor(h) < options.maxCostUsd)
-  );
+  const readQueue = async (exclude, quiet2) => {
+    const mentions = await pollMentions(ctx, identity);
+    const [assigned, stateWork] = await Promise.all([pollAssigned(ctx, identity), poll(ctx, identity)]);
+    const seen = /* @__PURE__ */ new Set();
+    const hits = [...mentions, ...assigned, ...stateWork].filter((h) => {
+      if (seen.has(h.ref)) return false;
+      seen.add(h.ref);
+      return true;
+    });
+    const heldByOthers2 = await claimedElsewhere(ctx, hits);
+    const free2 = hits.filter((h) => !heldByOthers2.has(h.issue.id));
+    if (heldByOthers2.size > 0 && !quiet2) {
+      log(`${heldByOthers2.size} issue(s) already being worked by someone else`);
+    }
+    const attemptsByHit = await loadAttempts(ctx, free2);
+    const attemptsFor2 = (h) => attemptsByHit.get(`${h.reason}:${h.issue.id}`) ?? 0;
+    const spendByHit = await loadSpend(ctx, free2);
+    const spendFor = (h) => spendByHit.get(h.issue.id) ?? 0;
+    const overBudget = options.maxCostUsd !== void 0 ? free2.filter(
+      (h) => !exclude.has(h.issue.id) && attemptsFor2(h) < options.maxAttempts && spendFor(h) >= options.maxCostUsd
+    ) : [];
+    for (const hit of overBudget) {
+      exclude.add(hit.issue.id);
+      await handOffForCost(ctx, hit, spendFor(hit));
+    }
+    const actionable2 = free2.filter(
+      (h) => !exclude.has(h.issue.id) && attemptsFor2(h) < options.maxAttempts && (options.maxCostUsd === void 0 || spendFor(h) < options.maxCostUsd)
+    );
+    return { free: free2, heldByOthers: heldByOthers2, actionable: actionable2, attemptsFor: attemptsFor2 };
+  };
+  const tried = /* @__PURE__ */ new Set();
+  const queue = await readQueue(tried, false);
+  const { free, heldByOthers } = queue;
+  let { actionable, attemptsFor } = queue;
   if (actionable.length === 0) {
     if (free.length > 0) {
       log(`${free.length} issue(s) waiting, all set aside`);
@@ -48039,13 +48069,25 @@ async function tick(ctx, identity, deadTicks, allowance) {
     `${actionable.length} issue(s) for "${identity.jobFunction}"` + (mentionCount > 0 ? ` \u2014 ${mentionCount} from unread mentions` : "")
   );
   const cap = allowance === "probe" ? 1 : options.limit;
-  const taking = cap ? actionable.slice(0, cap) : actionable;
-  if (taking.length < actionable.length) {
+  if (cap && cap < actionable.length) {
     log(
-      allowance === "probe" ? `  probing with ${taking.length} of ${actionable.length} \u2014 one card is enough to learn whether the harness works again` : `  taking ${taking.length} this tick (--limit ${options.limit})`
+      allowance === "probe" ? `  probing with ${cap} of ${actionable.length} \u2014 one card is enough to learn whether the harness works again` : `  taking ${cap} this tick (--limit ${options.limit})`
     );
   }
-  for (const queued of taking) {
+  const firstRead = new Set(actionable.map((h) => h.issue.id));
+  let worked = 0;
+  for (let first = true; ; first = false) {
+    if (cap && worked >= cap) break;
+    if (!first) {
+      if (stopping || paused) break;
+      ({ actionable, attemptsFor } = await readQueue(tried, true));
+    }
+    const queued = actionable.find((h) => !tried.has(h.issue.id));
+    if (!queued) break;
+    tried.add(queued.issue.id);
+    if (!firstRead.has(queued.issue.id)) {
+      log(`  ${queued.ref} arrived since this pass began \u2014 taking it next`);
+    }
     const rechecked = await recheckEligibility(ctx, queued, identity);
     if (!rechecked.ok) {
       log(`  ${queued.ref} ${rechecked.why} \u2014 skipping`);
@@ -48054,6 +48096,7 @@ async function tick(ctx, identity, deadTicks, allowance) {
     const hit = rechecked.hit;
     const why = hit.reason === "mention" ? "mentioned" : hit.reason === "assigned" ? `assigned \xB7 ${hit.state.name}` : hit.state.name;
     log(`\u2192 ${hit.ref} "${hit.issue.title}" (${why})`);
+    worked += 1;
     if (options.dryRun) {
       log(`  dry run \u2014 would invoke: ${options.harness} -p \u2026  --allowedTools ${options.allow}`);
       continue;
@@ -48375,7 +48418,7 @@ to catch: a second supervisor nothing could see or stop.
     if (stopping) return;
   }
 }
-var argv, flag, opt, num2, ms, readOptions, options, log, sessionRenewal, worktreeConfig, lastRefusal, CONFIG_DIR_PREFIX, CRUO_OWNED_ENV, HEAD_STORED, lastHolding, warnedAboutSpendTable, stopping, paused, stopRequestedAt, currentRun, pendingWait;
+var argv, flag, opt, num2, ms, readOptions, options, log, sessionRenewal, worktreeConfig, lastRefusal, CONFIG_DIR_PREFIX, CRUO_OWNED_ENV, DB_RESET_DENY, HEAD_STORED, lastHolding, warnedAboutSpendTable, stopping, paused, stopRequestedAt, currentRun, pendingWait;
 var init_supervisor = __esm({
   "src/supervisor.ts"() {
     "use strict";
@@ -48603,6 +48646,12 @@ cruo-supervisor: ${error51.message}
       // stands in for. Cheap to list, and wrong to discover the hard way.
       "CRUO_SESSION"
     ];
+    DB_RESET_DENY = [
+      "Bash(npx supabase db reset:*)",
+      "Bash(supabase db reset:*)",
+      "Bash(pnpm exec supabase db reset:*)",
+      "Bash(pnpm dlx supabase db reset:*)"
+    ];
     HEAD_STORED = 200;
     lastHolding = 0;
     warnedAboutSpendTable = false;

package/dist/index.js

@@ -89353,7 +89353,7 @@ function registerTools(server, getContext2, options = {}) {
     "delete_issue",
     {
       title: "Delete issue",
-      description: "Delete an issue (its comments, labels and activity cascade).",
+      description: "Move an issue to the trash. It disappears from the board and every tool, with its comments, labels and activity; a person can restore it from Trash in the app for 30 days, after which it is deleted for good.",
       inputSchema: { issue: external_exports.string().describe("Issue reference, e.g. CRU-14") }
     },
     async (args, ctx) => {
@@ -89361,7 +89361,7 @@ function registerTools(server, getContext2, options = {}) {
       const ref = issueRef(project, issue2);
       const { error: error52 } = await ctx.client.from("issues").delete().eq("id", issue2.id);
       if (error52) throw new ToolError(error52.message);
-      return `Deleted ${ref}.`;
+      return `Moved ${ref} to the trash. It can be restored from Trash in the app for 30 days.`;
     }
   );
   register(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cruo-agent",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "Run a Cruo agent: it watches your board, picks up the cards you assign it, and works them.",
   "license": "MIT",
   "homepage": "https://cruo.space/docs#agents",