muse-crew 0.13.1 → 0.13.2

package/docs/guide.md

@@ -17,7 +17,7 @@ This is the full setup and operations reference. If you're new, start with the [
 - A **release** — the first immutable snapshot of the crew's runtime code.
 - An **`.orchestration/` directory** in the crew home with identities, personas, workflow docs, and feedback conventions.
 - A **project registration** — the task service registered as its own first project.
-- **Cron jobs** — the scheduler state declared in `seed/crons.json`: a polling loop (every 15 minutes via Muse's scheduling, even when nobody's in the conversation). The scheduler identity is dashboard-independent — owner `cli:<instance-id>`, chosen once at first init — so deleting the dashboard artifact does not stop the crew. Removing a crew entirely is `crew-uninstall`'s job.
+- **Cron jobs** — the scheduler state declared in `seed/crons.json`: a polling loop (every 15 minutes via Muse's scheduling, even when nobody's in the conversation). The scheduler identity is dashboard-independent — chosen once at first init (no owner; the platform rejects `cli:` owners) — so deleting the dashboard artifact does not stop the crew. Removing a crew entirely is `crew-uninstall`'s job.
 
 The agent running in the main chat receives the dispatcher's claims and launches each task workflow. Workflows can't launch workflows, so this handoff is structural.
 
@@ -63,7 +63,7 @@ Optional arguments:
 - `dashboardName` — display name for the project registration (default: `"Muse Crew"`).
 - `crewName` — the human's chosen name for the crew. Stored as plain text at `$CREW_HOME/crew-name` and returned in the init summary. The setup conversation should always ask for one; init won't fail without it.
 - `cronIds` — manifest id → live id map for parallel instances on one account (default: `{}`). The manifest's ids are used as-is unless overridden, e.g. `{"crew-poll": "crew-poll-canary"}`.
-- `cronOwner` — explicit owner for the created cron jobs. Defaults to `cli:<instance-id>`: the instance id is chosen at first init (the crew-home basename) and kept from `.cron-registry.json` on re-runs, so re-init never renames the crew's jobs.
+- `cronOwner` — explicit owner for the created cron jobs. Defaults to null (omitted): the instance id is chosen at first init (the crew-home basename) and kept from `.cron-registry.json` on re-runs, so re-init never renames the crew's jobs. The platform rejects `cli:` owners.
 - `autoUpdateCrew` — automatic crew upgrades on/off (default: `true`). Persists as the `auto_update_crew` config key; `false` turns the update watcher's crew check off.
 - `autoUpdateDashboard` — automatic dashboard upgrades on/off (default: `true`). Persists as the `auto_update_dashboard` config key.
 - `updateChannel` — `latest` (default) or `patch`: narrows crew upgrades to patch releases. Persists as the `update_channel` config key; any other value fails the init.
@@ -79,7 +79,7 @@ Init runs five phases, each idempotent — re-running converges anything that dr
 
 3. **Project registration** — registers the task service as a project in its own database via `createproject`, with `repo_path` set to the validated `dashboardRepoPath`. The dashboard becomes its own first project, so the crew can work on the dashboard itself. Re-running init is self-healing: a project already registered with the correct path is left alone, while one with a different path (e.g. from an older init) is repaired via `update-project`. Skipped entirely in CLI-only mode (no `dashboardSlug`) — create projects with `crew-api.js create-project` instead.
 
-4. **Crons** — reads the manifest at `seed/crons.json` and makes the scheduler match it: missing jobs are created from the entry (title, enabled, mode, schedule, owner, timeout_secs, and the body built from the entry's template with `crewHome` substituted in); existing jobs are viewed and converged — drifted fields are updated, unchanged jobs are left alone. The scheduler identity (`instanceId`, `cli:<instanceId>` owner) is chosen once at first init and never renamed by re-runs: the instance id comes from the existing `.cron-registry.json` when present, otherwise the crew-home basename. One exception: init never touches `enabled` on an existing job. `enabled` is a creation-time default only — a disabled job is a deliberate human decision, and re-init must not silently resurrect it. Jobs removed from the manifest are left alone; deletion is a human decision.
+4. **Crons** — reads the manifest at `seed/crons.json` and makes the scheduler match it: missing jobs are created from the entry (title, enabled, mode, schedule, timeout_secs, and the body built from the entry's template with `crewHome` substituted in — owner is omitted); existing jobs are viewed and converged — drifted fields are updated, unchanged jobs are left alone. The scheduler identity (`instanceId`) is chosen once at first init and never renamed by re-runs: the instance id comes from the existing `.cron-registry.json` when present, otherwise the crew-home basename. One exception: init never touches `enabled` on an existing job. `enabled` is a creation-time default only — a disabled job is a deliberate human decision, and re-init must not silently resurrect it. Jobs removed from the manifest are left alone; deletion is a human decision.
 
 5. **Update policy** — persists the automatic-update policy (`auto_update_crew`, `auto_update_dashboard`, `update_channel`) via the Crew API's `update-config`, with the re-init semantics above: explicit inputs win, existing values survive, defaults apply only on first init. Seeds `$CREW_HOME/.update-watch.json` as `{}` only when it does not exist (the watcher's idempotency record is never overwritten).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muse-crew",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "description": "Opinionated orchestration for Muse \u2014 workflows, identities, and tooling for autonomous software development.",
   "license": "UNLICENSED",
   "private": false,
@@ -29,4 +29,4 @@
   "dependencies": {
     "playwright-core": "1.63.0"
   }
-}
+}

package/seed/crons.json

@@ -5,7 +5,6 @@
       "enabled": true,
       "id": "crew-poll",
       "mode": "task",
-      "owner": "cli:{instanceId}",
       "schedule": {
         "every": "15m",
         "kind": "interval"
@@ -18,7 +17,6 @@
       "enabled": true,
       "id": "crew-update-watch",
       "mode": "task",
-      "owner": "cli:{instanceId}",
       "schedule": {
         "every": "24h",
         "kind": "interval"

package/workflows/crew-init.js

@@ -663,8 +663,8 @@ try {
 } catch (e) {
   return { __hatchWorkflowControl: "blocked", result: { blocked_reason: "Scheduler identity unreadable", message: String(e.message || e) } };
 }
-var cronOwner = inputs.cronOwner || ("cli:" + instanceId);
-log("Scheduler identity: instanceId=" + instanceId + " owner=" + cronOwner +
+var cronOwner = inputs.cronOwner || null;
+log("Scheduler identity: instanceId=" + instanceId + " owner=" + (cronOwner || "(omitted; instance-local)") +
   (identityFacts.registryJson ? " (kept from existing registry)" : " (first init; crew-home basename)"));
 var cronsResult;
 try {
@@ -673,13 +673,13 @@ try {
     "Manifest: " + crewRepoPath + "/seed/crons.json\n" +
     "crewHome: " + crewHome + "\n" +
     "Instance id (cron id suffix): " + instanceId + "\n" +
-    "Cron owner: " + cronOwner + "\n" +
+    "Cron owner: " + (cronOwner || "(omitted)") + "\n" +
     "Id overrides (manifest id -> live id): " + JSON.stringify(cronIds) + "\n\n" +
     "Steps:\n" +
     "1. Read the manifest at " + crewRepoPath + "/seed/crons.json and parse it as JSON.\n" +
     "   Fail closed (return passed: false) if the file is missing, is not valid JSON,\n" +
     "   or any entry lacks a required field (id, title, enabled, mode, schedule,\n" +
-    "   owner, body_template).\n" +
+    "   body_template).\n" +
     "2. For each manifest entry, in order:\n" +
     "   a. The live id is the override for entry.id when present (inputs.cronIds[entry.id]).\n" +
     "      Otherwise, the live id is entry.id + '-' + \"" + instanceId + "\" (instance-safe by\n" +
@@ -692,7 +692,7 @@ try {
     "      - id: the live id\n" +
     "      - title, enabled, mode from the entry\n" +
     "      - schedule: the entry's schedule object\n" +
-    "      - owner: " + cronOwner + "\n" +
+    "      - owner: omit (instance-local; do not pass owner)\n" +
     "      - timeout_secs: the entry's timeout_secs when present\n" +
     "      - body: the resolved template text\n" +
     "      Record action 'created' with no updated fields.\n" +
@@ -708,7 +708,7 @@ try {
     "3. Write the cron registry at " + crewHome + "/.cron-registry.json — the exact\n" +
     "   record a later uninstall uses to find these jobs. Build this JSON (one entry\n" +
     "   per manifest entry, in manifest order, using the live ids from step 2):\n" +
-    "   {\"version\":1,\"instanceId\":\"" + instanceId + "\",\"owner\":\"" + cronOwner + "\",\n" +
+    "   {\"version\":1,\"instanceId\":\"" + instanceId + "\",\n" +
     "    \"crons\":[{\"id\":<live id>,\"manifestId\":<entry.id>}, ...]}\n" +
     "   Write it with printf '%s' and a single-quoted heredoc so the shell\n" +
     "   interpolates nothing, then read it back to confirm it parses.\n" +