muse-crew 0.1.0 → 0.2.0

package/workflows/chore.js

@@ -1,14 +1,14 @@
 export const meta = {
   name: "crew-chore",
-  description: "Chore workflow: Triage → Map → Build → Review → Integrate → Deploy",
-  phases: ["Triage", "Map", "Build", "Review", "Integrate", "Deploy"],
+  description: "Chore workflow: Triage → Map → Build → Review → Integrate → Publish",
+  phases: ["Triage", "Map", "Build", "Review", "Integrate", "Publish"],
   steps: [
     { name: "Triage", identity: "sage" },
     { name: "Map", identity: "mara" },
     { name: "Build", identity: "wren" },
     { name: "Review", identity: "cass" },
     { name: "Integrate", identity: "wren" },
-    { name: "Deploy", identity: "wren" }
+    { name: "Publish", identity: "wren" }
   ],
   reworkTarget: "Build"
 };
@@ -30,12 +30,17 @@ const MERGE_LOCK_SRC = crewHome + "/lib/merge-lock.sh";
 const RUN_LIB = "/tmp/crew-lib-" + taskId;
 const LIFECYCLE = RUN_LIB + "/worktree-lifecycle.sh";
 const MERGE_LOCK = RUN_LIB + "/merge-lock.sh";
+const ORPHAN_SWEEP_SRC = crewHome + "/lib/orphan-sweep.sh";
+const ORPHAN_SWEEP = RUN_LIB + "/orphan-sweep.sh";
 
 // Project config — passed by dispatcher, falls back to dashboard defaults
 const projectConfig = inputs.project_config || {};
+// Project this run was dispatched for — the mid-run project-change guard
+// compares the task's live project against this on every phase boundary.
+const LAUNCH_PROJECT_ID = inputs.project_id || "";
 const REPO_PATH = projectConfig.repo_path || "~/workspace/ts-spaces/orchestra-dashboard";
-const DEPLOY_TYPE = projectConfig.deploy_type || "artifact";
-const DEPLOY_SLUG = projectConfig.deploy_slug || DASHBOARD_SLUG;
+const PUBLISH_TYPE = projectConfig.deploy_type || "";
+const PUBLISH_SLUG = projectConfig.deploy_slug || DASHBOARD_SLUG;
 const PROJECT_DESC = projectConfig.description || "React + TypeScript web dashboard (client/src/, server/src/, drizzle/)";
 const RELEASE_SCRIPT = crewHome + "/crew-release.sh";
 
@@ -58,10 +63,11 @@ const STEPS = [
   { name: "Build", identity: "wren" },
   { name: "Review", identity: "cass" },
   { name: "Integrate", identity: "wren" },
-  { name: "Deploy", identity: "wren" }
+  { name: "Publish", identity: "wren" }
 ];
 const BUILD_INDEX = STEPS.findIndex(s => s.name === 'Build');
 if (BUILD_INDEX < 0) throw new Error("STEPS missing 'Build' step");
+const REWORK_STEP = STEPS[BUILD_INDEX].name;
 const MAX_REWORK = 2;
 let reworkCount = 0;
 let rejectionNotes = inputs.rejection_notes || "";
@@ -71,7 +77,7 @@ let i = startStepIndex;
 // Pin lifecycle scripts
 await agent(
   "Snapshot lifecycle scripts for version pinning.\n" +
-  "Run: mkdir -p " + RUN_LIB + " && cp " + LIFECYCLE_SRC + " " + LIFECYCLE + " && cp " + MERGE_LOCK_SRC + " " + MERGE_LOCK + " && chmod +x " + LIFECYCLE + " " + MERGE_LOCK,
+  "Run: mkdir -p " + RUN_LIB + " && cp " + LIFECYCLE_SRC + " " + LIFECYCLE + " && cp " + MERGE_LOCK_SRC + " " + MERGE_LOCK + " && cp " + ORPHAN_SWEEP_SRC + " " + ORPHAN_SWEEP + " && chmod +x " + LIFECYCLE + " " + MERGE_LOCK + " " + ORPHAN_SWEEP,
   { key: "pin-lifecycle", label: "Pinning lifecycle scripts", schema: { type: "object" } }
 );
 
@@ -82,6 +88,62 @@ while (i < STEPS.length) {
   phase(step.name);
   log(step.name + " step (" + step.identity + ") for task " + taskId);
 
+  // ── Project-change guard ───────────────────────────────────────────
+  // A task moved to another project mid-run must not keep working in the
+  // old project's repo. Re-read the task's project at every phase
+  // boundary: if it differs from the project this run was dispatched for,
+  // abort the stale run (failed at the rework target) so the dispatcher
+  // re-launches the step with the new project's config.
+  if (LAUNCH_PROJECT_ID) {
+    const projectCheck = await agent(
+      "Read this task's current project from the dashboard.\n" +
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getstate\", args: { \"events_limit\": 1 }.\n" +
+      "Find the task with id \"" + taskId + "\" in the returned tasks array.\n" +
+      "Return exactly { \"project\": \"<the task's project field, or empty string if absent>\" } and nothing else.",
+      {
+        key: "project-check-" + step.name + (reworkCount > 0 ? "-r" + reworkCount : ""),
+        label: "Checking project before " + step.name,
+        schema: { type: "object", properties: { project: { type: "string" } }, required: ["project"] }
+      }
+    );
+    const currentProject = (projectCheck && projectCheck.project) ? projectCheck.project : LAUNCH_PROJECT_ID;
+    if (currentProject !== LAUNCH_PROJECT_ID) {
+      const abortMessage = "Task project changed mid-run from '" + LAUNCH_PROJECT_ID + "' to '" + currentProject + "' — aborting stale run. The dispatcher will re-launch from " + REWORK_STEP + " with the new project context.";
+      log(abortMessage);
+      const abortSessionPatch = (isFirstClaim && firstSessionId) ? "\"id\": \"" + firstSessionId + "\", " : "";
+      await agent(
+        "Abort the stale run and remove its worktree from the old project's repo.\n" +
+        "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"upsertagentsession\", args:\n" +
+        "{ \"task_id\": \"" + taskId + "\", " + abortSessionPatch + "\"identity\": \"" + step.identity + "\", \"step\": \"" + REWORK_STEP + "\", \"status\": \"failed\", " +
+        "\"notes\": " + JSON.stringify(abortMessage + " Rebuild from the Map session notes in the task's event history.") + " }.\n" +
+        "Then call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"logevent\", args:\n" +
+        "{ \"task_id\": \"" + taskId + "\", \"type\": \"failed\", \"identity\": \"" + step.identity + "\", \"message\": " + JSON.stringify(abortMessage) + " }.\n" +
+        "Then run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " cleanup " + taskId + "\n" +
+        "The cleanup output should contain CLEANUP.",
+        { key: "abort-project-change", label: "Aborting stale run (project changed)", schema: { type: "object" } }
+      );
+      return { status: "failed", task_id: taskId, reason: abortMessage };
+    }
+  }
+
+  // Publish is optional and target-based. Empty target = prototyping project: skip the phase.
+  // Unknown target (incl. legacy "repo") = config error: block.
+  if (step.name === "Publish" && !PUBLISH_TYPE) {
+    log("Publish skipped for task " + taskId + " — no publish target configured (deploy_type empty)");
+    await agent(
+      "Release the merge lock and clean up without publishing.\n" +
+      "Run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " post-deploy " + taskId + "\n" +
+      "If the output contains DEPLOYED, the lock is released and the worktree is cleaned up.",
+      { key: "publish-skip-cleanup", label: "Skipping Publish (no target)", schema: { type: "object" } }
+    );
+    i++;
+    continue;
+  }
+  if (step.name === "Publish" && PUBLISH_TYPE !== "npm" && PUBLISH_TYPE !== "artifact" && PUBLISH_TYPE !== "vercel") {
+    log("Unknown publish target for task " + taskId + ": " + PUBLISH_TYPE);
+    return { status: "blocked", task_id: taskId, reason: "Unknown publish target '" + PUBLISH_TYPE + "' — expected 'npm', 'artifact', 'vercel', or empty (skip publish)." };
+  }
+
   let activeSessionId;
   if (isFirstClaim && firstSessionId) {
     activeSessionId = firstSessionId;
@@ -121,8 +183,10 @@ while (i < STEPS.length) {
       (mapperSpec ? "MAPPER'S SPEC (implement exactly this):\n" + mapperSpec + "\n\n" : "") +
       "Your working directory: " + REPO_PATH + "/.worktrees/" + taskId + "/\n" +
       "This is the project source: " + PROJECT_DESC + "\n" +
-      "Edit the TypeScript source files directly. Do NOT use artifact_edit — that happens in the Deploy phase.\n" +
-      "Do not add unrequested features.\n\n" +
+      "Edit the TypeScript source files directly. Do NOT use artifact_edit — that happens in the Publish phase.\n" +
+      "Do not add unrequested features.\n" +
+      "PUBLIC DOCS: If your change is public-affecting (it alters anything a user or consumer can observe: API actions, parameters, behavior, or errors), update the public docs in the same commit — API.md for API changes. Documentation and implementation ship together.\n\n" +
+      (PUBLISH_TYPE === "npm" ? "PACKAGE VERSION: this project publishes to the npm registry, so you choose the package version. If this change warrants a published release (anything a consumer can observe: workflow behavior, phase lists, identities, published docs, API), bump the version in package.json with semver (patch for fixes, minor for new behavior, major for breaking changes) and state the chosen version and why in your summary. If the change is internal-only, leave the version unchanged and say so. Check the registry first — npm view muse-crew version — and never re-publish an existing version.\n\n" : "") +
       "STEP 3: Commit your changes.\n" +
       "cd " + REPO_PATH + "/.worktrees/" + taskId + "\n" +
       "git add -A\n" +
@@ -135,9 +199,12 @@ while (i < STEPS.length) {
       (mapperSpec ? "MAPPER'S SPEC (the builder was asked to implement exactly this):\n" + mapperSpec + "\n\n" : "Read the spec from the task description.\n\n") +
       "Examine the code changes by running:\n" +
       "CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " inspect " + taskId + "\n\n" +
+      "The inspect output is authoritative: it prints the task branch's actual tip commit (TIP) and every commit ahead of main. Base your review ONLY on this output — do NOT run git log yourself to pick commits, and do NOT discuss commit hashes from any other source (they may come from stale rework rounds or a different repo).\n\n" +
       "You can also read specific files in the worktree at:\n" +
       REPO_PATH + "/.worktrees/" + taskId + "/\n\n" +
       "Check quality, correctness, spec compliance.\n" +
+      "Check that public-affecting changes have matching public doc updates (API.md or the published API contract). If the docs are missing or inaccurate, reject with notes on what is stale.\n" +
+      (PUBLISH_TYPE === "npm" ? "PACKAGE VERSION: this project publishes to the npm registry. Validate the builder's version choice: package.json must hold valid semver; if the version was bumped it must be greater than the registry version (npm view muse-crew version), the bump scope (patch/minor/major) must fit the change, and exactly one version field may change. If the version is invalid, already published, or mis-scoped, reject with notes.\n" : "") +
       "If it passes, your final response MUST be valid JSON and nothing else: { \"passed\": true, \"summary\": \"approval notes\" }.\n" +
       "If it fails, your final response MUST be valid JSON and nothing else: { \"passed\": false, \"summary\": \"rejection notes\" }.\n" +
       "No prose, no markdown, just the JSON object.";
@@ -147,40 +214,76 @@ while (i < STEPS.length) {
       "Run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " integrate " + taskId + " \"merge: chore: " + safeTitle + "\"\n\n" +
       "Read the output:\n" +
       "- If it contains MERGED, integration succeeded. Report the merged commit hash.\n" +
-      "- If it contains LOCK_HELD, another task is deploying. Set passed to false.\n" +
+      "- If it contains LOCK_HELD, another task holds the merge lock (mid Integrate/Publish). Set passed to false.\n" +
       "- If it contains CONFLICT, a merge conflict occurred. Set passed to false with details.\n" +
       "- If it contains ERROR, something else failed. Set passed to false.\n\n" +
+      "\n" +
+      "STEP 2: Push the merged main to the remote repository.\n" +
+      "Run: cd " + REPO_PATH + " && git push origin main\n" +
+      "- If the push succeeds, report the merged commit hash.\n" +
+      "- If the push is rejected as non-fast-forward (the remote has commits not present locally),\n" +
+      "  NEVER force-push. Do not run any --force variant. Set passed to false with summary:\n" +
+      "  'git push origin main rejected as non-fast-forward — remote main has diverged; manual resolution required'.\n\n" +
       "Your final response MUST be valid JSON and nothing else: { \"summary\": \"result\", \"passed\": true/false }. No prose, no markdown, just the JSON object.";
 
-  } else if (step.name === "Deploy") {
-    if (DEPLOY_TYPE === "repo") {
-      // Repo projects: install immutable release and atomically activate
-      instructions = "Deploy repo changes via the immutable release system.\n\n" +
-        "STEP 0: Refresh the merge lock to prevent stale-lock breaking during deploy.\n" +
+  } else if (step.name === "Publish") {
+    if (PUBLISH_TYPE === "npm") {
+      // npm packages: immutable release + pack + publish to the registry (push is universal in Integrate)
+      instructions = "Publish the npm package to the registry.\n\n" +
+        "The repo push already happened in Integrate — do NOT push to git in this phase, and NEVER force-push.\n" +
+        "Version discipline: publish ships the exact version merged in Integrate (Build applied it, Review validated it). Do not bump the version here.\n\n" +
+        "STEP 0: Refresh the merge lock to prevent stale-lock breaking during publish.\n" +
         "Run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " refresh-lock " + taskId + "\n\n" +
-        "STEP 1: Install and activate the new release.\n" +
+        "STEP 1: Install and activate the immutable release.\n" +
         "Run: " + RELEASE_SCRIPT + " deploy " + REPO_PATH + "\n" +
         "Verify the output contains INSTALLED and ACTIVATED (or EXISTS and ACTIVATED if unchanged).\n\n" +
-        "STEP 2: Finalize.\n" +
+        "STEP 2: Check whether the package version needs publishing.\n" +
+        "Read the version from: cd " + REPO_PATH + " && node -p \"require('./package.json').version\"\n" +
+        "Check the registry: npm view muse-crew version 2>/dev/null || echo NOT_FOUND\n" +
+        "If the local version matches the registry version, the version is already live — skip to STEP 5.\n\n" +
+        "STEP 3: Pack and publish.\n" +
+        "Run: cd " + REPO_PATH + " && npm pack\n" +
+        "Then publish: python3 ~/workspace/skills/npm/bin/npm-publish.py " + REPO_PATH + "/muse-crew-$(node -p \"require('" + REPO_PATH + "/package.json').version\").tgz\n" +
+        "If publish fails with 'You cannot publish over the previously published versions', the version is already live — continue to STEP 4.\n\n" +
+        "STEP 4: Verify.\n" +
+        "Run: npm view muse-crew version\n" +
+        "Confirm it matches the local package.json version.\n\n" +
+        "STEP 5: Finalize.\n" +
         "Run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " post-deploy " + taskId + "\n" +
         "If the output contains DEPLOYED, finalization is complete.\n\n" +
-        "Your final response MUST be valid JSON and nothing else: { \"summary\": \"release activated and finalized\", \"passed\": true }.\n" +
+        "Your final response MUST be valid JSON and nothing else: { \"summary\": \"result\", \"passed\": true }.\n" +
         "No prose, no markdown, just the JSON object.";
-    } else {
-      instructions = "Deploy the merged code to the live artifact.\n\n" +
-        "STEP 0: Refresh the merge lock to prevent stale-lock breaking during deploy.\n" +
+    } else if (PUBLISH_TYPE === "artifact") {
+      // Artifact projects: rebuild the live artifact via artifact_edit, then finalize
+      instructions = "Publish the merged code to the live artifact.\n\n" +
+        "POLICY: The live artifact is rebuilt only in this phase, from the repo. Never use artifact_edit to change the artifact directly — fixes go through the repo and the loop. A source fix is not done until the artifact is rebuilt from it here.\n\n" +
+        "The repo push already happened in Integrate — do NOT push to git in this phase.\n\n" +
+        "STEP 0: Refresh the merge lock to prevent stale-lock breaking during publish.\n" +
         "Run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " refresh-lock " + taskId + "\n\n" +
-        "STEP 1: Deploy to the live artifact.\n" +
+        "STEP 1: Publish to the live artifact.\n" +
         "Get the change summary: cd " + REPO_PATH + " && git log -1 --stat\n" +
-        "Then call artifact_edit with slug \"" + DEPLOY_SLUG + "\" and verbatim_request:\n" +
+        "Then call artifact_edit with slug \"" + PUBLISH_SLUG + "\" and verbatim_request:\n" +
         "'Rebuild the application from current source. Do not modify any source files — just rebuild and deploy what is on disk.'\n" +
         "Wait for the build to complete by polling artifact_status until it is no longer running.\n\n" +
+        "STEP 1B: Stamp publication provenance.\n" +
+        "Run: cd " + REPO_PATH + " && git rev-parse HEAD\n" +
+        "Run: basename $(readlink " + crewHome + "/current)\n" +
+        "Run: date -u +%Y-%m-%dT%H:%M:%SZ\n" +
+        "Call artifact_invoke_action on slug \"" + PUBLISH_SLUG + "\", action \"setprovenance\", args:\n" +
+        "{ \"source_commit\": \"<rev-parse output>\", \"crew_release\": \"<basename output>\", \"published_at\": \"<date output>\", \"task_id\": \"" + taskId + "\" }.\n" +
+        "Confirm the response contains ok: true. If setprovenance fails, report it in your summary but still run post-deploy to release the lock.\n\n" +
         "STEP 2: Finalize.\n" +
         "Run: CREW_REPO=" + REPO_PATH + " " + LIFECYCLE + " post-deploy " + taskId + "\n" +
-        "If the output contains DEPLOYED, deployment is complete.\n\n" +
+        "If the output contains DEPLOYED, publishing is complete.\n\n" +
         "If artifact_edit failed, still run post-deploy to release the merge lock and clean up.\n" +
-        "Report the failure: { \"passed\": false, \"summary\": \"artifact deployment failed: [details]\" }.\n\n" +
-        "Your final response MUST be valid JSON and nothing else: { \"summary\": \"deployed changes\", \"passed\": true }.\n" +
+        "Report the failure: { \"passed\": false, \"summary\": \"artifact publish failed: [details]\" }.\n\n" +
+        "Your final response MUST be valid JSON and nothing else: { \"summary\": \"published changes\", \"passed\": true }.\n" +
+        "No prose, no markdown, just the JSON object.";
+    } else if (PUBLISH_TYPE === "vercel") {
+      // vercel publish is not yet implemented — block without inventing behavior
+      instructions = "The project's publish target is \"vercel\", which is not yet implemented.\n" +
+        "Do NOT invent publish behavior — do not guess CLI commands, APIs, or deployment steps.\n" +
+        "Your final response MUST be valid JSON and nothing else: { \"passed\": false, \"summary\": \"vercel publish not yet implemented\" }.\n" +
         "No prose, no markdown, just the JSON object.";
     }
   }
@@ -189,8 +292,8 @@ while (i < STEPS.length) {
   var eventPreamble = "";
   if (step.name !== "Review") {
     eventPreamble = "CONTEXT: First, fetch this task's event history for background.\n" +
-      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getevents\", args: { \"limit\": 100 }.\n" +
-      "Look through returned events for entries matching task_id \"" + taskId + "\". They contain notes and decisions from prior phases.\n\n";
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getevents\", args: { \"task_id\": \"" + taskId + "\" }.\n" +
+      "The returned events are filtered to this task. They contain notes and decisions from prior phases.\n\n";
   }
 
   var stepResult;
@@ -273,9 +376,9 @@ while (i < STEPS.length) {
     return { status: "blocked", task_id: taskId, reason: "Integration failed: " + summary };
   }
 
-  if (!passed && step.name === "Deploy") {
-    log("Deploy failed for task " + taskId + ": " + summary);
-    return { status: "blocked", task_id: taskId, reason: "Deploy failed: " + summary };
+  if (!passed && step.name === "Publish") {
+    log("Publish failed for task " + taskId + ": " + summary);
+    return { status: "blocked", task_id: taskId, reason: "Publish failed: " + summary };
   }
 
   i++;

package/workflows/crew-dispatch.js

@@ -250,8 +250,9 @@ for (var p = 0; p < toProcess.length; p++) {
     "Claim the task for the " + nextStepName + " step.\n" +
     "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"claimtask\", args:\n" +
     "{ \"task_id\": \"" + itask.id + "\", \"identity\": \"" + identity + "\", \"step\": \"" + nextStepName + "\", \"notes\": \"" + nextStepName + " step started\" }.\n" +
-    "Check the response. If the task was successfully claimed (a new session was created), return { claimed: true, session_id: \"<the new session id>\" }.\n" +
-    "If the task was already claimed by another tick (already has a running session), return { claimed: false, session_id: \"\" }.",
+    "Do not interpret the response. It already contains an explicit \"claimed\" field — copy it verbatim.\n" +
+    "Return { claimed: <the response's claimed field exactly>, session_id: \"<the response's session_id field>\" }.\n" +
+    "If claimed is false there is no session_id; return { claimed: false, session_id: \"\" }.",
     {
       key: "claim-" + itask.id,
       label: "Claiming " + nextStepName + " for: " + itask.title,
@@ -284,6 +285,7 @@ for (var p = 0; p < toProcess.length; p++) {
     start_step_index: item.startStep,
     rejection_notes: item.rejectionNotes || "",
     project_config: projectCfg,
+    project_id: taskProject,
     dashboardSlug: DASHBOARD_SLUG,
     crewHome: crewHome
   };

package/workflows/crew-init.js

@@ -172,7 +172,7 @@ try {
     "      - mode: 'task'\n" +
     "      - schedule: { kind: 'interval', every: '3m' }\n" +
     "      - owner: 'space:" + dashboardSlug + "'\n" +
-    "      - timeout_secs: 180\n" +
+    "      - timeout_secs: 120\n" +
     "      - body: the processed template text\n" +
     "   d. Return { existed: false }\n\n" +
     "Return JSON with existed (boolean).",

package/workflows/docs.js

@@ -22,6 +22,14 @@ const DASHBOARD_SLUG = inputs.dashboardSlug || "orchestra-dashboard";
 const crewHome = inputs.crewHome || "~/workspace/.jarvis";
 const ORCH_PATH = crewHome + "/.orchestration";
 
+// Project repo — the docs workflow edits the project's own docs, not the crew home.
+// Falls back to crew home only for manual launches without a project config.
+const projectConfig = inputs.project_config || {};
+// Project this run was dispatched for — the mid-run project-change guard
+// compares the task's live project against this on every phase boundary.
+const LAUNCH_PROJECT_ID = inputs.project_id || "";
+const REPO_PATH = projectConfig.repo_path || crewHome;
+
 if (!taskId) {
   throw new Error("task_id is required in args");
 }
@@ -34,6 +42,7 @@ const STEPS = [
 ];
 const WRITE_INDEX = STEPS.findIndex(s => s.name === 'Write');
 if (WRITE_INDEX < 0) throw new Error("STEPS missing 'Write' step");
+const REWORK_STEP = STEPS[WRITE_INDEX].name;
 const MAX_REWORK = 2;
 let reworkCount = 0;
 let rejectionNotes = inputs.rejection_notes || "";
@@ -46,6 +55,42 @@ while (i < STEPS.length) {
   phase(step.name);
   log(step.name + " step (" + step.identity + ") for task " + taskId);
 
+  // ── Project-change guard ───────────────────────────────────────────
+  // A task moved to another project mid-run must not keep editing the old
+  // project's repo. Re-read the task's project at every phase boundary: if
+  // it differs from the project this run was dispatched for, abort the
+  // stale run (failed at the rework target) so the dispatcher re-launches
+  // the step with the new project's config.
+  if (LAUNCH_PROJECT_ID) {
+    const projectCheck = await agent(
+      "Read this task's current project from the dashboard.\n" +
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getstate\", args: { \"events_limit\": 1 }.\n" +
+      "Find the task with id \"" + taskId + "\" in the returned tasks array.\n" +
+      "Return exactly { \"project\": \"<the task's project field, or empty string if absent>\" } and nothing else.",
+      {
+        key: "project-check-" + step.name + (reworkCount > 0 ? "-r" + reworkCount : ""),
+        label: "Checking project before " + step.name,
+        schema: { type: "object", properties: { project: { type: "string" } }, required: ["project"] }
+      }
+    );
+    const currentProject = (projectCheck && projectCheck.project) ? projectCheck.project : LAUNCH_PROJECT_ID;
+    if (currentProject !== LAUNCH_PROJECT_ID) {
+      const abortMessage = "Task project changed mid-run from '" + LAUNCH_PROJECT_ID + "' to '" + currentProject + "' — aborting stale run. The dispatcher will re-launch from " + REWORK_STEP + " with the new project context.";
+      log(abortMessage);
+      const abortSessionPatch = (isFirstClaim && firstSessionId) ? "\"id\": \"" + firstSessionId + "\", " : "";
+      await agent(
+        "Abort the stale run.\n" +
+        "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"upsertagentsession\", args:\n" +
+        "{ \"task_id\": \"" + taskId + "\", " + abortSessionPatch + "\"identity\": \"" + step.identity + "\", \"step\": \"" + REWORK_STEP + "\", \"status\": \"failed\", " +
+        "\"notes\": " + JSON.stringify(abortMessage) + " }.\n" +
+        "Then call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"logevent\", args:\n" +
+        "{ \"task_id\": \"" + taskId + "\", \"type\": \"failed\", \"identity\": \"" + step.identity + "\", \"message\": " + JSON.stringify(abortMessage) + " }.",
+        { key: "abort-project-change", label: "Aborting stale run (project changed)", schema: { type: "object" } }
+      );
+      return { status: "failed", task_id: taskId, reason: abortMessage };
+    }
+  }
+
   let activeSessionId;
   if (isFirstClaim && firstSessionId) {
     activeSessionId = firstSessionId;
@@ -72,7 +117,7 @@ while (i < STEPS.length) {
   if (step.name === "Triage") {
     instructions = "Validate the task, check clarity, confirm the docs workflow assignment.\nYour final response MUST be valid JSON and nothing else: { \"summary\": \"your assessment\", \"passed\": true }. No prose, no markdown, just the JSON object.";
   } else if (step.name === "Write") {
-    instructions = "Write or revise the documentation the task asks for.\nFollow Tate's voice — clear, conversational, no jargon unless it earns its place.\nAll doc files go under " + crewHome + "/." +
+    instructions = "Write or revise the documentation the task asks for.\nFollow Tate's voice — clear, conversational, no jargon unless it earns its place.\nDo your work in the project repository at " + REPO_PATH + " — all doc files go there, not under the crew home." +
       (rejectionNotes ? "\n\nREWORK after review rejection. Address:\n" + rejectionNotes : "") +
       "\nYour final response MUST be valid JSON and nothing else: { \"summary\": \"what you wrote and where\", \"passed\": true }. No prose, no markdown, just the JSON object.";
   } else if (step.name === "Review") {
@@ -83,7 +128,7 @@ while (i < STEPS.length) {
     "Read the identity file at " + ORCH_PATH + "/identities/" + step.identity + ".md using the read tool, and embody that character fully.\n\n" +
     "## Your Assignment\n\n" +
     "Task: " + taskTitle + "\nTask ID: " + taskId + "\nDescription: " + taskDescription + "\nStep: " + step.name + "\nDashboard slug: " + DASHBOARD_SLUG + "\n\n" +
-    "## Instructions\n\n" + instructions + "\n\nCONSTRAINT: Do NOT call logevent or upsertagentsession — the workflow handles all phase tracking after your step completes.\n\nStay in character. All file work under " + crewHome + "/.",
+    "## Instructions\n\n" + instructions + "\n\nCONSTRAINT: Do NOT call logevent or upsertagentsession — the workflow handles all phase tracking after your step completes.\n\nStay in character. All file work under " + REPO_PATH + "/.",
     {
       key: "work-" + step.name + (reworkCount > 0 ? "-r" + reworkCount : ""),
       label: step.identity + ": " + step.name + " on \"" + taskTitle + "\"",