muse-crew 0.6.0 → 0.6.1

package/API.md

@@ -258,7 +258,7 @@ Set a global configuration value.
 
 ### `setprovenance`
 
-Stamp publication provenance. Called by the crew Publish phase after rebuilding the artifact.
+Stamp publication provenance. Called by the crew Publish phase after rebuilding the artifact, and after installing/activating a crew release (npm path): in the release case Publish refreshes `crew_release` to the live release identity while preserving the existing `source_commit`.
 
 | Field | Type | Required | Notes |
 |-------|------|----------|-------|

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muse-crew",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Opinionated orchestration for Muse \u2014 workflows, identities, and tooling for autonomous software development.",
   "license": "UNLICENSED",
   "private": false,

package/workflows/bugfix.js

@@ -22,6 +22,14 @@ const taskTitle = inputs.task_title || "";
 const taskDescription = inputs.task_description || "";
 const startStepIndex = inputs.start_step_index || 0;
 
+// Dispatcher-carried facts for the claim-time persist: the workflow name the
+// dispatcher actually resolved and launched, and whether the task record had
+// no workflow (the standard fallback). The launched workflow writes the
+// resolution back via updatetask in the self-claim below.
+const RESOLVED_WORKFLOW = inputs.resolved_workflow || null;
+const WORKFLOW_WAS_NULL = inputs.workflow_was_null === true;
+const CLAIM_WORKFLOW_PERSIST = (WORKFLOW_WAS_NULL && RESOLVED_WORKFLOW) ? ", \"workflow\": \"" + RESOLVED_WORKFLOW + "\"" : "";
+
 // Config from args — backward-compatible fallbacks for manual launches
 const DASHBOARD_SLUG = inputs.dashboardSlug || "orchestra-dashboard";
 const crewHome = inputs.crewHome || "~/workspace/.jarvis";
@@ -660,7 +668,7 @@ while (i < STEPS.length) {
   if (isFirstClaim) {
     const claimResult = await agent(
       "Claim this task for the " + step.name + " step.\n" +
-      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\" }.\n" +
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\"" + CLAIM_WORKFLOW_PERSIST + " }.\n" +
       "Then call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"claimtask\", args:\n" +
       "{ \"task_id\": \"" + taskId + "\", \"identity\": \"" + step.identity + "\", \"step\": \"" + step.name + "\", \"notes\": \"" + step.name + " step started\" }.\n" +
       "Do not interpret the claim response. It already contains an explicit \"claimed\" field — copy it verbatim.\n" +
@@ -1357,8 +1365,39 @@ while (i < STEPS.length) {
         return await parkTask("Publish verification failed: registry shows " + regVer + " but the release decision required " +
           publishTarget.target + " (" + publishTarget.base + " + " + publishTarget.scope + "). The publish did not land.");
       }
-      log("Publish verified for task " + taskId + ": registry at " + regVer);
       publishVerified = true;
+      // Provenance refresh for self-publishes (task 7946d2a4): the npm path
+      // installs and activates a new immutable release (crew-release.sh deploy
+      // swaps the `current` symlink inside publish-npm.sh) but never stamped
+      // the dashboard's provenance record — every crew release left
+      // crew_release pointing at a pruned release. After a verified landed
+      // publish, refresh the record's crew_release to the now-live release
+      // identity, preserving the existing source_commit (the dashboard
+      // artifact's build source — a crew-repo commit here would fail the
+      // dashboard QA source check).
+      try {
+        var provRefresh = await agent(
+          "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getprovenance\", args: {}. " +
+          "If the response has no provenance (null), return JSON { \"refreshed\": false, \"reason\": \"no-record\" } and stop. " +
+          "Otherwise run: basename $(readlink " + crewHome + "/current) — call this REL; " +
+          "run: date -u +%Y-%m-%dT%H:%M:%SZ — call this TS. " +
+          "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"setprovenance\", args: " +
+          "{ \"source_commit\": \"<existing provenance.source_commit>\", \"crew_release\": \"<REL trimmed>\", \"published_at\": \"<TS trimmed>\", \"task_id\": \"" + taskId + "\" }. " +
+          "Return JSON { \"refreshed\": <true if the setprovenance response contains ok: true, false otherwise>, \"crew_release\": \"<REL trimmed>\", \"published_at\": \"<TS trimmed>\" } and nothing else.",
+          { key: attemptKey("publish-provenance-refresh-" + taskId, totalReworkCount), label: "Refreshing dashboard provenance after crew release",
+            schema: { type: "object", properties: { refreshed: { type: "boolean" }, reason: { type: "string" }, crew_release: { type: "string" }, published_at: { type: "string" } }, required: ["refreshed"] } }
+        );
+        if (provRefresh.refreshed) {
+          log("Provenance refreshed for task " + taskId + ": crew_release " + provRefresh.crew_release);
+        } else if (provRefresh.reason === "no-record") {
+          log("Provenance refresh skipped for task " + taskId + ": no existing record to refresh (fresh instance — the dashboard's first artifact publish will create it)");
+        } else {
+          return await parkTask("Provenance refresh failed after a verified npm publish (crew_release " + (provRefresh.crew_release || "unknown") + "). The release is live but the dashboard record is stale — fail-closed.");
+        }
+      } catch (e) {
+        return await parkTask("Provenance refresh failed: could not refresh dashboard provenance after a verified npm publish (" + (e && e.message ? e.message : e) + "). Fail-closed.");
+      }
+
     } catch (e) {
       return await parkTask("Publish verification failed: could not read the registry version (" + (e && e.message ? e.message : e) + "). Fail-closed.");
     }

package/workflows/chore.js

@@ -20,6 +20,14 @@ const taskTitle = inputs.task_title || "";
 const taskDescription = inputs.task_description || "";
 const startStepIndex = inputs.start_step_index || 0;
 
+// Dispatcher-carried facts for the claim-time persist: the workflow name the
+// dispatcher actually resolved and launched, and whether the task record had
+// no workflow (the standard fallback). The launched workflow writes the
+// resolution back via updatetask in the self-claim below.
+const RESOLVED_WORKFLOW = inputs.resolved_workflow || null;
+const WORKFLOW_WAS_NULL = inputs.workflow_was_null === true;
+const CLAIM_WORKFLOW_PERSIST = (WORKFLOW_WAS_NULL && RESOLVED_WORKFLOW) ? ", \"workflow\": \"" + RESOLVED_WORKFLOW + "\"" : "";
+
 // Config from args — backward-compatible fallbacks for manual launches
 const DASHBOARD_SLUG = inputs.dashboardSlug || "orchestra-dashboard";
 const crewHome = inputs.crewHome || "~/workspace/.jarvis";
@@ -618,7 +626,7 @@ while (i < STEPS.length) {
   if (isFirstClaim) {
     const claimResult = await agent(
       "Claim this task for the " + step.name + " step.\n" +
-      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\" }.\n" +
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\"" + CLAIM_WORKFLOW_PERSIST + " }.\n" +
       "Then call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"claimtask\", args:\n" +
       "{ \"task_id\": \"" + taskId + "\", \"identity\": \"" + step.identity + "\", \"step\": \"" + step.name + "\", \"notes\": \"" + step.name + " step started\" }.\n" +
       "Do not interpret the claim response. It already contains an explicit \"claimed\" field — copy it verbatim.\n" +
@@ -1232,8 +1240,39 @@ while (i < STEPS.length) {
         return await parkTask("Publish verification failed: registry shows " + regVer + " but the release decision required " +
           publishTarget.target + " (" + publishTarget.base + " + " + publishTarget.scope + "). The publish did not land.");
       }
-      log("Publish verified for task " + taskId + ": registry at " + regVer);
       publishVerified = true;
+      // Provenance refresh for self-publishes (task 7946d2a4): the npm path
+      // installs and activates a new immutable release (crew-release.sh deploy
+      // swaps the `current` symlink inside publish-npm.sh) but never stamped
+      // the dashboard's provenance record — every crew release left
+      // crew_release pointing at a pruned release. After a verified landed
+      // publish, refresh the record's crew_release to the now-live release
+      // identity, preserving the existing source_commit (the dashboard
+      // artifact's build source — a crew-repo commit here would fail the
+      // dashboard QA source check).
+      try {
+        var provRefresh = await agent(
+          "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getprovenance\", args: {}. " +
+          "If the response has no provenance (null), return JSON { \"refreshed\": false, \"reason\": \"no-record\" } and stop. " +
+          "Otherwise run: basename $(readlink " + crewHome + "/current) — call this REL; " +
+          "run: date -u +%Y-%m-%dT%H:%M:%SZ — call this TS. " +
+          "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"setprovenance\", args: " +
+          "{ \"source_commit\": \"<existing provenance.source_commit>\", \"crew_release\": \"<REL trimmed>\", \"published_at\": \"<TS trimmed>\", \"task_id\": \"" + taskId + "\" }. " +
+          "Return JSON { \"refreshed\": <true if the setprovenance response contains ok: true, false otherwise>, \"crew_release\": \"<REL trimmed>\", \"published_at\": \"<TS trimmed>\" } and nothing else.",
+          { key: attemptKey("publish-provenance-refresh-" + taskId, reworkCount), label: "Refreshing dashboard provenance after crew release",
+            schema: { type: "object", properties: { refreshed: { type: "boolean" }, reason: { type: "string" }, crew_release: { type: "string" }, published_at: { type: "string" } }, required: ["refreshed"] } }
+        );
+        if (provRefresh.refreshed) {
+          log("Provenance refreshed for task " + taskId + ": crew_release " + provRefresh.crew_release);
+        } else if (provRefresh.reason === "no-record") {
+          log("Provenance refresh skipped for task " + taskId + ": no existing record to refresh (fresh instance — the dashboard's first artifact publish will create it)");
+        } else {
+          return await parkTask("Provenance refresh failed after a verified npm publish (crew_release " + (provRefresh.crew_release || "unknown") + "). The release is live but the dashboard record is stale — fail-closed.");
+        }
+      } catch (e) {
+        return await parkTask("Provenance refresh failed: could not refresh dashboard provenance after a verified npm publish (" + (e && e.message ? e.message : e) + "). Fail-closed.");
+      }
+
     } catch (e) {
       return await parkTask("Publish verification failed: could not read the registry version (" + (e && e.message ? e.message : e) + "). Fail-closed.");
     }

package/workflows/crew-dispatch.js

@@ -593,7 +593,13 @@ for (var p = 0; p < toProcess.length; p++) {
     project_config: projectCfg,
     project_id: taskProject,
     dashboardSlug: DASHBOARD_SLUG,
-    crewHome: crewHome
+    crewHome: crewHome,
+    // Facts the launched workflow needs to persist the resolution at claim time:
+    // the workflow name the dispatcher actually resolved and is launching, and
+    // whether the task record had no workflow (playtest filings carry explicit
+    // workflow:'standard', so they correctly get false).
+    resolved_workflow: iworkflow,
+    workflow_was_null: (itask.workflow == null)
   };
 
   log("Recommended " + iworkflow + " for \"" + itask.title + "\" [" + taskProject + "] at step " + nextStepName);

package/workflows/docs.js

@@ -16,6 +16,14 @@ const taskTitle = inputs.task_title || "";
 const taskDescription = inputs.task_description || "";
 const startStepIndex = inputs.start_step_index || 0;
 
+// Dispatcher-carried facts for the claim-time persist: the workflow name the
+// dispatcher actually resolved and launched, and whether the task record had
+// no workflow (the standard fallback). The launched workflow writes the
+// resolution back via updatetask in the self-claim below.
+const RESOLVED_WORKFLOW = inputs.resolved_workflow || null;
+const WORKFLOW_WAS_NULL = inputs.workflow_was_null === true;
+const CLAIM_WORKFLOW_PERSIST = (WORKFLOW_WAS_NULL && RESOLVED_WORKFLOW) ? ", \"workflow\": \"" + RESOLVED_WORKFLOW + "\"" : "";
+
 // Config from args — backward-compatible fallbacks for manual launches
 const DASHBOARD_SLUG = inputs.dashboardSlug || "orchestra-dashboard";
 const crewHome = inputs.crewHome || "~/workspace/.jarvis";
@@ -125,7 +133,7 @@ while (i < STEPS.length) {
   if (isFirstClaim) {
     const claimResult = await agent(
       "Claim this task for the " + step.name + " step.\n" +
-      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\" }.\n" +
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\"" + CLAIM_WORKFLOW_PERSIST + " }.\n" +
       "Then call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"claimtask\", args:\n" +
       "{ \"task_id\": \"" + taskId + "\", \"identity\": \"" + step.identity + "\", \"step\": \"" + step.name + "\", \"notes\": \"" + step.name + " step started\" }.\n" +
       "Do not interpret the claim response. It already contains an explicit \"claimed\" field — copy it verbatim.\n" +

package/workflows/standard.js

@@ -21,6 +21,14 @@ const taskTitle = inputs.task_title || "";
 const taskDescription = inputs.task_description || "";
 const startStepIndex = inputs.start_step_index || 0;
 
+// Dispatcher-carried facts for the claim-time persist: the workflow name the
+// dispatcher actually resolved and launched, and whether the task record had
+// no workflow (the standard fallback). The launched workflow writes the
+// resolution back via updatetask in the self-claim below.
+const RESOLVED_WORKFLOW = inputs.resolved_workflow || null;
+const WORKFLOW_WAS_NULL = inputs.workflow_was_null === true;
+const CLAIM_WORKFLOW_PERSIST = (WORKFLOW_WAS_NULL && RESOLVED_WORKFLOW) ? ", \"workflow\": \"" + RESOLVED_WORKFLOW + "\"" : "";
+
 // Config from args — backward-compatible fallbacks for manual launches
 const DASHBOARD_SLUG = inputs.dashboardSlug || "orchestra-dashboard";
 const crewHome = inputs.crewHome || "~/workspace/.jarvis";
@@ -659,7 +667,7 @@ while (i < STEPS.length) {
   if (isFirstClaim) {
     const claimResult = await agent(
       "Claim this task for the " + step.name + " step.\n" +
-      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\" }.\n" +
+      "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"updatetask\", args: { \"id\": \"" + taskId + "\", \"state\": \"in_progress\"" + CLAIM_WORKFLOW_PERSIST + " }.\n" +
       "Then call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"claimtask\", args:\n" +
       "{ \"task_id\": \"" + taskId + "\", \"identity\": \"" + step.identity + "\", \"step\": \"" + step.name + "\", \"notes\": \"" + step.name + " step started\" }.\n" +
       "Do not interpret the claim response. It already contains an explicit \"claimed\" field — copy it verbatim.\n" +
@@ -1367,8 +1375,39 @@ while (i < STEPS.length) {
         return await parkTask("Publish verification failed: registry shows " + regVer + " but the release decision required " +
           publishTarget.target + " (" + publishTarget.base + " + " + publishTarget.scope + "). The publish did not land.");
       }
-      log("Publish verified for task " + taskId + ": registry at " + regVer);
       publishVerified = true;
+      // Provenance refresh for self-publishes (task 7946d2a4): the npm path
+      // installs and activates a new immutable release (crew-release.sh deploy
+      // swaps the `current` symlink inside publish-npm.sh) but never stamped
+      // the dashboard's provenance record — every crew release left
+      // crew_release pointing at a pruned release. After a verified landed
+      // publish, refresh the record's crew_release to the now-live release
+      // identity, preserving the existing source_commit (the dashboard
+      // artifact's build source — a crew-repo commit here would fail the
+      // dashboard QA source check).
+      try {
+        var provRefresh = await agent(
+          "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"getprovenance\", args: {}. " +
+          "If the response has no provenance (null), return JSON { \"refreshed\": false, \"reason\": \"no-record\" } and stop. " +
+          "Otherwise run: basename $(readlink " + crewHome + "/current) — call this REL; " +
+          "run: date -u +%Y-%m-%dT%H:%M:%SZ — call this TS. " +
+          "Call artifact_invoke_action on slug \"" + DASHBOARD_SLUG + "\", action \"setprovenance\", args: " +
+          "{ \"source_commit\": \"<existing provenance.source_commit>\", \"crew_release\": \"<REL trimmed>\", \"published_at\": \"<TS trimmed>\", \"task_id\": \"" + taskId + "\" }. " +
+          "Return JSON { \"refreshed\": <true if the setprovenance response contains ok: true, false otherwise>, \"crew_release\": \"<REL trimmed>\", \"published_at\": \"<TS trimmed>\" } and nothing else.",
+          { key: attemptKey("publish-provenance-refresh-" + taskId, totalReworkCount), label: "Refreshing dashboard provenance after crew release",
+            schema: { type: "object", properties: { refreshed: { type: "boolean" }, reason: { type: "string" }, crew_release: { type: "string" }, published_at: { type: "string" } }, required: ["refreshed"] } }
+        );
+        if (provRefresh.refreshed) {
+          log("Provenance refreshed for task " + taskId + ": crew_release " + provRefresh.crew_release);
+        } else if (provRefresh.reason === "no-record") {
+          log("Provenance refresh skipped for task " + taskId + ": no existing record to refresh (fresh instance — the dashboard's first artifact publish will create it)");
+        } else {
+          return await parkTask("Provenance refresh failed after a verified npm publish (crew_release " + (provRefresh.crew_release || "unknown") + "). The release is live but the dashboard record is stale — fail-closed.");
+        }
+      } catch (e) {
+        return await parkTask("Provenance refresh failed: could not refresh dashboard provenance after a verified npm publish (" + (e && e.message ? e.message : e) + "). Fail-closed.");
+      }
+
     } catch (e) {
       return await parkTask("Publish verification failed: could not read the registry version (" + (e && e.message ? e.message : e) + "). Fail-closed.");
     }