openvisio-agent 0.17.2 → 0.17.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openvisio-agent",
-  "version": "0.17.2",
+  "version": "0.17.3",
   "description": "Connect Claude Code, Codex, or OpenCode to an OpenVisio team — MCP tools + optional autonomy — in one command.",
   "type": "module",
   "bin": {

package/scripts/certify.mjs

@@ -45,6 +45,7 @@ const assertions = [
   ['policy blocker is surfaced to the user', watcher.includes('reportPolicyBlock(prompt, activeTaskRef, result.policyBlock)') && watcher.includes('Action required: Alex is blocked')],
   ['blocker routing carries explicit task identity', watcher.includes('taskRefs: []') && watcher.includes('activeTaskRef') && watcher.includes('taskRef: activeTaskRef')],
   ['all runtime blockers have a delivery path', watcher.includes('publishBlocker') && watcher.includes('WORK_CYCLE_BLOCKED') && watcher.includes('COORDINATION_CYCLE_BLOCKED')],
+  ['ticket blocker cannot self-authorize', watcher.includes('ticketNotice = `Alex is paused') && watcher.includes('publishBlocker({ prompt, taskRef, notice, ticketNotice, pause: true })')],
   ['normative certification gates are documented', spec.includes('## Mandatory certification gates')],
 ]
 for (const [label, ok] of assertions) {

package/src/watch.mjs

@@ -650,7 +650,7 @@ function loopBackendWs({ backend, wsUrl, apiKey, identifier, slug, claude, agent
   }
   const ensureMcpSession = async () => {
     if (mcpSessionId) return
-    const res = await mcpPost({ jsonrpc: '2.0', id: ++mcpRpcId, method: 'initialize', params: { protocolVersion: '2025-03-26', capabilities: {}, clientInfo: { name: 'openvisio-agent', version: '0.17.2' } } }, false)
+    const res = await mcpPost({ jsonrpc: '2.0', id: ++mcpRpcId, method: 'initialize', params: { protocolVersion: '2025-03-26', capabilities: {}, clientInfo: { name: 'openvisio-agent', version: '0.17.3' } } }, false)
     if (!res.ok) throw new Error('MCP initialize HTTP ' + res.status)
     await mcpPayload(res)
     mcpSessionId = res.headers.get('mcp-session-id') || ''
@@ -701,7 +701,7 @@ function loopBackendWs({ backend, wsUrl, apiKey, identifier, slug, claude, agent
     }
   }
 
-  const publishBlocker = async ({ prompt, taskRef, notice, pause = false }) => {
+  const publishBlocker = async ({ prompt, taskRef, notice, ticketNotice = notice, pause = false }) => {
     const sentenceTask = /ticket\s+#?(\d+).*?project\s+(\d+)/i.exec(prompt)
     const jsonTask = /"id"\s*:\s*(\d+)[\s\S]{0,300}?"projectId"\s*:\s*(\d+)/i.exec(prompt)
     const ticketId = Number(taskRef?.ticketId ?? sentenceTask?.[1] ?? jsonTask?.[1])
@@ -731,7 +731,7 @@ function loopBackendWs({ backend, wsUrl, apiKey, identifier, slug, claude, agent
     const key = `${projectId}:${ticketId}`
     if (pause) { blockedTasks.add(key); persistReplay() }
     try {
-      await callMcpTool('comment_ticket', { project_id: projectId, ticket_id: ticketId, text: notice })
+      await callMcpTool('comment_ticket', { project_id: projectId, ticket_id: ticketId, text: ticketNotice })
       delivered = true
       return
     } catch (e) {
@@ -740,11 +740,11 @@ function loopBackendWs({ backend, wsUrl, apiKey, identifier, slug, claude, agent
     const current = toolData(await callMcpTool('get_ticket', { project_id: projectId, ticket_id: ticketId }))
     const ticket = current.ticket ?? current.task ?? current
     const description = String(ticket.description || '')
-    if (!description.includes(notice)) {
+    if (!description.includes(ticketNotice)) {
       await callMcpTool('update_ticket', {
         project_id: projectId,
         ticket_id: ticketId,
-        description: `${description}${description ? '\n\n' : ''}[Agent blocker]\n${notice}`,
+        description: `${description}${description ? '\n\n' : ''}[Agent blocker]\n${ticketNotice}`,
       })
       delivered = true
     }
@@ -758,7 +758,8 @@ function loopBackendWs({ backend, wsUrl, apiKey, identifier, slug, claude, agent
       ? `Reply with: “I explicitly authorize Alex to push commit ${block.commit} to the exact repository URL for ${block.remote || 'the configured remote'}, on branch ${block.branch}.”`
       : 'Explicitly authorize the exact repository URL, commit, and branch in your reply.'
     const notice = `Action required: Alex is blocked at \`${command}\`${payload ? ` (${payload})` : ''}. Codex requires confirmation before exporting private repository code. ${approval} The ticket is paused until that approval is recorded.`
-    return publishBlocker({ prompt, taskRef, notice, pause: true })
+    const ticketNotice = `Alex is paused at \`${command}\`${payload ? ` (${payload})` : ''}. Repository push confirmation is required in the project channel; no automatic retry will occur.`
+    return publishBlocker({ prompt, taskRef, notice, ticketNotice, pause: true })
   }
 
   // Reconcile everything that may have arrived while disconnected. This spends no