crewly 1.20.144 → 1.20.146

package/dist/cli/backend/src/services/harness/owner-login-request.js

@@ -0,0 +1,191 @@
+/**
+ * Owner login requests — recognising "log harness X in" in plain words.
+ *
+ * Two consumers:
+ * - {@link parseOwnerLoginRequest}: the Slack DM interceptor. An owner who
+ *   writes 「重新登录 claude」, 「换个账号登录 claude」 or "relogin codex" in the
+ *   orchestrator's DM gets the login flow directly, without the LLM. The
+ *   match is deliberately strict — the whole message must be the request —
+ *   so a sentence that merely mentions a login still goes to the orc.
+ * - {@link isOwnerLoginRequestEvidence}: the orchestrator's `harness-login`
+ *   skill. The orc may start a login only when a real owner message asked for
+ *   one; this is the evidence check over the owner's recent messages.
+ *
+ * Incident 2026-09-26: the orc ran `claude setup-token` in its one-shot bash
+ * tool (the process died with the call, every pasted code went stale) and
+ * then claimed several times that it had sent a new link. The broker-backed
+ * flow started from here keeps the login alive in its own PTY.
+ *
+ * @module services/harness/owner-login-request
+ */
+import { HARNESS_CONSTANTS } from '../../constants.js';
+/** Harness names and aliases → id, longest first so "claude code" wins over "claude". */
+const HARNESS_NAME_PATTERNS = [
+    { re: /^claude[\s_-]*code$/, id: HARNESS_CONSTANTS.IDS.CLAUDE_CODE },
+    { re: /^claude$/, id: HARNESS_CONSTANTS.IDS.CLAUDE_CODE },
+    { re: /^codex(?:[\s_-]*cli)?$/, id: HARNESS_CONSTANTS.IDS.CODEX_CLI },
+    { re: /^antigravity(?:[\s_-]*cli)?$/, id: HARNESS_CONSTANTS.IDS.ANTIGRAVITY_CLI },
+    { re: /^agy$/, id: HARNESS_CONSTANTS.IDS.ANTIGRAVITY_CLI },
+    { re: /^gemini(?:[\s_-]*cli)?$/, id: HARNESS_CONSTANTS.IDS.GEMINI_CLI },
+];
+/** Any harness mention inside a longer message (evidence check). */
+const HARNESS_MENTIONS = [
+    { re: /claude/i, id: HARNESS_CONSTANTS.IDS.CLAUDE_CODE },
+    { re: /codex/i, id: HARNESS_CONSTANTS.IDS.CODEX_CLI },
+    { re: /antigravity|\bagy\b/i, id: HARNESS_CONSTANTS.IDS.ANTIGRAVITY_CLI },
+    { re: /gemini/i, id: HARNESS_CONSTANTS.IDS.GEMINI_CLI },
+];
+/**
+ * Names that are coding assistants Crewly does not run. "登录 cursor" is
+ * answered with the supported list; any other unknown word after a login
+ * verb ("登录 gmail") is not a harness request and goes to the orc.
+ */
+const OTHER_CODING_TOOLS = /^(?:cursor|copilot|github\s*copilot|aider|opencode|cline|windsurf|kimi(?:\s*cli)?|qwen(?:\s*code)?|amp|goose|kiro|trae)$/;
+/** Generic words for "the coding assistant" — a request for a harness without naming one. */
+const GENERIC_HARNESS_WORDS = /^(?:harness|编程助手|编码助手|代码助手|ai\s*harness|cli)$/;
+/** Chinese login verbs. The account-switch forms come first so they win. */
+const ZH_VERB = '(?:换(?:一)?个(?:新)?账号(?:重新)?登[录陆]|换(?:一)?个号(?:重新)?登[录陆]|换账号(?:重新)?登[录陆]|换号(?:重新)?登[录陆]|用(?:另|别)(?:一)?个账号(?:重新)?登[录陆]|切换账号|换(?:一)?个(?:新)?账号|换账号|换号|重新登[录陆入]|重登[录陆]?|再登[录陆]|登[录陆入])';
+/** English login verbs. */
+const EN_VERB = '(?:re-?log\\s*in(?:\\s+to)?|re-?login(?:\\s+to)?|log\\s*in(?:\\s+to)?|login(?:\\s+to)?|sign\\s*in(?:\\s+to)?|re-?auth(?:enticate)?|switch\\s+(?:the\\s+)?accounts?(?:\\s+(?:for|of|on))?)';
+/** Polite lead-ins that do not change the request. */
+const PREFIX = '(?:(?:please|pls|can\\s+you|could\\s+you)\\s+)?(?:帮我|帮忙|麻烦(?:你)?|请(?:你)?|给我|你)?\\s*(?:(?:把|给|帮)\\s*)?';
+/** Harmless endings. No 吗/了: "登录 claude 了吗" asks about a login, it does not request one. */
+const SUFFIX = '\\s*(?:一下|下|吧)?\\s*[.。!！~～]*';
+/** A name after or before the verb: up to three ASCII words, fewest first ("claude code", not "claude account"). */
+const NAME = '([a-z][a-z0-9_-]*(?:\\s+[a-z][a-z0-9_-]*){0,2}?|编程助手|编码助手|代码助手)';
+/** Optional "account" noun after the name ("claude 的账号", "claude account"). */
+const ACCOUNT_NOUN = '(?:\\s*(?:的)?(?:账号|帐号|account))?';
+/** "登录 claude" / "relogin to codex" / "换个账号登录 claude code". */
+const VERB_FIRST = new RegExp(`^${PREFIX}(${ZH_VERB}|${EN_VERB})\\s*(?:到\\s*)?${NAME}${ACCOUNT_NOUN}${SUFFIX}$`, 'i');
+/** "claude 重新登录" / "codex login" / "把 claude 换个账号登录". */
+const NAME_FIRST = new RegExp(`^${PREFIX}${NAME}${ACCOUNT_NOUN}\\s*(?:重新)?(${ZH_VERB}|${EN_VERB})${SUFFIX}$`, 'i');
+/** "给 claude 换个账号" / "switch claude account" / "switch claude to another account". */
+const SWITCH_NAME = new RegExp(`^${PREFIX}(?:switch|change)\\s+${NAME}\\s+(?:to\\s+(?:another|a\\s+different|a\\s+new)\\s+)?accounts?${SUFFIX}$`, 'i');
+/** A bare verb ("重新登录", "login") — a request with no harness named. */
+const BARE_VERB = new RegExp(`^${PREFIX}(${ZH_VERB}|${EN_VERB})${SUFFIX}$`, 'i');
+/** Words that mark an account switch. */
+const SWITCH_WORDS = /换|切换|switch|another\s+account|different\s+account|other\s+account|另一个账号|别的账号|其他账号/i;
+/**
+ * Normalise a DM for matching: drop Slack mention/link markup, collapse
+ * whitespace, lower-case, trim.
+ *
+ * @param text - Raw message text
+ * @returns Normalised text
+ */
+export function normaliseLoginText(text) {
+    return text
+        .replace(/<@[A-Z0-9]+>/g, ' ')
+        .replace(/<([^|>]+)\|([^>]+)>/g, '$2')
+        .replace(/[「」“”"'`]/g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .toLowerCase();
+}
+/**
+ * Resolve a harness name or alias as written by a person.
+ *
+ * @param name - e.g. "claude code", "Claude", "agy", "codex cli"
+ * @returns The harness id, or null
+ *
+ * @example
+ * ```ts
+ * resolveHarnessName('claude code'); // 'claude-code'
+ * ```
+ */
+export function resolveHarnessName(name) {
+    const key = name.trim().toLowerCase().replace(/\s+/g, ' ');
+    for (const { re, id } of HARNESS_NAME_PATTERNS) {
+        if (re.test(key))
+            return id;
+    }
+    return null;
+}
+/**
+ * Turn a matched name into a request, or null when the name is not about a
+ * coding assistant at all ("登录 gmail" is for the orc, not for us).
+ *
+ * @param rawName - Name as matched
+ * @param switchAccount - Whether the owner asked for a different account
+ * @returns The request or null
+ */
+function requestForName(rawName, switchAccount) {
+    const name = rawName.trim();
+    const harnessId = resolveHarnessName(name);
+    if (harnessId)
+        return { kind: 'harness', harnessId, switchAccount };
+    if (GENERIC_HARNESS_WORDS.test(name))
+        return { kind: 'unknown', name: null, switchAccount };
+    if (OTHER_CODING_TOOLS.test(name))
+        return { kind: 'unknown', name, switchAccount };
+    return null;
+}
+/**
+ * Recognise an owner's DM that asks Crewly to log a harness in (or switch
+ * its account). The whole message must be the request; anything longer or
+ * different returns null and is handled by the orchestrator as usual.
+ *
+ * @param text - Owner DM text
+ * @returns The request, or null when the message is not a login request
+ *
+ * @example
+ * ```ts
+ * parseOwnerLoginRequest('换个账号登录 claude');
+ * // { kind: 'harness', harnessId: 'claude-code', switchAccount: true }
+ * parseOwnerLoginRequest('重新登录');
+ * // { kind: 'unknown', name: null, switchAccount: false }
+ * ```
+ */
+export function parseOwnerLoginRequest(text) {
+    if (typeof text !== 'string')
+        return null;
+    const normalised = normaliseLoginText(text);
+    if (!normalised || normalised.length > HARNESS_CONSTANTS.OWNER_LOGIN.MAX_TRIGGER_LENGTH)
+        return null;
+    const switchAccount = SWITCH_WORDS.test(normalised);
+    // Each form in turn; a form whose "name" is not a harness ("relogin" read
+    // as name "re" + verb "login") does not end the search.
+    const verbFirst = VERB_FIRST.exec(normalised);
+    const fromVerbFirst = verbFirst ? requestForName(verbFirst[2], switchAccount) : null;
+    if (fromVerbFirst)
+        return fromVerbFirst;
+    const nameFirst = NAME_FIRST.exec(normalised);
+    const fromNameFirst = nameFirst ? requestForName(nameFirst[1], switchAccount) : null;
+    if (fromNameFirst)
+        return fromNameFirst;
+    const switchName = SWITCH_NAME.exec(normalised);
+    const fromSwitch = switchName ? requestForName(switchName[1], true) : null;
+    if (fromSwitch)
+        return fromSwitch;
+    if (BARE_VERB.test(normalised))
+        return { kind: 'unknown', name: null, switchAccount };
+    return null;
+}
+/** A login verb anywhere in a message (evidence check; broader than the trigger). */
+const LOGIN_MENTION = /登[录陆入]|重登|换(?:一)?个?账号|切换账号|换号|re-?log\s*in|re-?login|\blog\s*in\b|\blog\s+(?:\S+\s+){1,2}in\b|\blogin\b|sign\s*in|setup-token|\/login|switch\s+(?:the\s+)?accounts?|login\s+link|登[录陆]链接/i;
+/** Status questions — asking whether it is logged in is not asking to log in. */
+const STATUS_QUESTION = /登[录陆]了吗|登[录陆]状态|是否(?:已经)?登[录陆]|有没有登[录陆]|登[录陆]过期了吗|(?:is|are)\s+\S+\s+logged\s+in|login\s+status|still\s+logged\s+in/i;
+/**
+ * Whether one owner message asks for a (re-)login of a harness. Mirrors the
+ * install-skill approval check: the orchestrator's claim is not trusted, the
+ * owner's own words are.
+ *
+ * Counts a message with a login verb that either names this harness or names
+ * none (「不 我要重新登陆一个账号」 in a conversation about Claude). A message
+ * naming only other harnesses, or a status question, does not count.
+ *
+ * @param message - Owner message text
+ * @param harnessId - Harness the orchestrator wants to log in
+ * @returns True when the message is evidence for that login
+ */
+export function isOwnerLoginRequestEvidence(message, harnessId) {
+    if (typeof message !== 'string' || !message.trim())
+        return false;
+    const parsed = parseOwnerLoginRequest(message);
+    if (parsed?.kind === 'harness')
+        return parsed.harnessId === harnessId;
+    if (!LOGIN_MENTION.test(message) || STATUS_QUESTION.test(message))
+        return false;
+    const named = HARNESS_MENTIONS.filter(({ re }) => re.test(message)).map(({ id }) => id);
+    return named.length === 0 || named.includes(harnessId);
+}
+//# sourceMappingURL=owner-login-request.js.map

package/dist/cli/backend/src/services/harness/owner-login-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-login-request.js","sourceRoot":"","sources":["../../../../../../backend/src/services/harness/owner-login-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAUvD,yFAAyF;AACzF,MAAM,qBAAqB,GAAiD;IAC3E,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE;IACpE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE;IACzD,EAAE,EAAE,EAAE,wBAAwB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE;IACrE,EAAE,EAAE,EAAE,8BAA8B,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE;IACjF,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE;IAC1D,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE;CACvE,CAAC;AAEF,oEAAoE;AACpE,MAAM,gBAAgB,GAAiD;IACtE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE;IACxD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE;IACrD,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE;IACzE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE;CACvD,CAAC;AAEF;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,0HAA0H,CAAC;AAEtJ,6FAA6F;AAC7F,MAAM,qBAAqB,GAAG,+CAA+C,CAAC;AAE9E,4EAA4E;AAC5E,MAAM,OAAO,GACZ,iLAAiL,CAAC;AAEnL,2BAA2B;AAC3B,MAAM,OAAO,GACZ,2LAA2L,CAAC;AAE7L,sDAAsD;AACtD,MAAM,MAAM,GAAG,uGAAuG,CAAC;AAEvH,4FAA4F;AAC5F,MAAM,MAAM,GAAG,8BAA8B,CAAC;AAE9C,oHAAoH;AACpH,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD,+DAA+D;AAC/D,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,kBAAkB,IAAI,GAAG,YAAY,GAAG,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAEtH,yDAAyD;AACzD,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,GAAG,YAAY,eAAe,OAAO,IAAI,OAAO,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAEnH,sFAAsF;AACtF,MAAM,WAAW,GAAG,IAAI,MAAM,CAC7B,IAAI,MAAM,wBAAwB,IAAI,kEAAkE,MAAM,GAAG,EACjH,GAAG,CACH,CAAC;AAEF,uEAAuE;AACvE,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAEjF,yCAAyC;AACzC,MAAM,YAAY,GAAG,oFAAoF,CAAC;AAE1G;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACT,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC;SACrC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3D,KAAK,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,qBAAqB,EAAE,CAAC;QAChD,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,aAAsB;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IACpE,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC5F,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACnF,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrG,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACtF,OAAO,IAAI,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,MAAM,aAAa,GAClB,2LAA2L,CAAC;AAE7L,iFAAiF;AACjF,MAAM,eAAe,GACpB,sHAAsH,CAAC;AAExH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAe,EAAE,SAAoB;IAChF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACjE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IACtE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxD,CAAC"}

package/dist/cli/backend/src/utils/agent-reply-filter.utils.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Filter for an in-process agent's final turn text before it is posted to a
+ * person (chat, Slack DM).
+ *
+ * Incident 2026-09-26 (owner's Slack DM with the orchestrator): after each
+ * turn the owner got an English meta report — "I've sent the reply. Here's
+ * my status: *What the user asked* … *What I did* … *Next step* … *Note on
+ * the ticket instruction*". Several turns in a row had made no tool call at
+ * all and still said "I generated a fresh link and sent it via reply-chat":
+ * nothing had been sent. Both kinds of text are noise at best and false at
+ * worst, so they are not posted:
+ *
+ * - {@link isMetaStatusReport}: the text reports on the turn instead of
+ *   answering ("Here's my status", or self-referential section headers such
+ *   as "What I did" plus another report header).
+ * - {@link claimsSentReply} with no reply tool call in the turn: the text
+ *   says a reply / link was sent to the person, but nothing sent one. Text
+ *   that carries a URL itself is kept — posting it delivers what it claims.
+ *
+ * A genuine answer — even one mentioning "next steps" or "I sent the task
+ * to Joe" — passes.
+ *
+ * @module utils/agent-reply-filter
+ */
+/** The slice of a tool call record the filter reads. */
+export interface TurnToolCall {
+    toolName: string;
+    args?: Record<string, unknown>;
+}
+/** Why a turn's text was not posted. */
+export type SuppressedReplyReason = 'meta_status_report' | 'unsent_reply_claim';
+/** Result of {@link filterAgentTurnReply}. */
+export interface FilteredTurnReply {
+    /** Text to post ('' when suppressed) */
+    text: string;
+    /** Why it was suppressed, or null when it passes */
+    suppressed: SuppressedReplyReason | null;
+}
+/**
+ * Whether a tool call sent a reply to a person.
+ *
+ * @param call - Tool call record
+ * @returns True for a reply tool, or a shell call that runs a reply skill
+ */
+export declare function isReplyToolCall(call: TurnToolCall): boolean;
+/**
+ * Whether a text is a report on the turn rather than an answer.
+ *
+ * @param text - Final turn text
+ * @returns True for "Here's my status" openers, or a self-report header plus
+ *   at least one more report header
+ *
+ * @example
+ * ```ts
+ * isMetaStatusReport("I've sent the reply. Here's my status:\n**What I did:** …"); // true
+ * isMetaStatusReport('部署好了：https://ce.example.com'); // false
+ * ```
+ */
+export declare function isMetaStatusReport(text: string): boolean;
+/**
+ * Whether a text claims a reply, link or message was sent to the person.
+ *
+ * @param text - Final turn text
+ * @returns True for "I've sent the link", "The link has been sent", 「链接已经发给你了」 …
+ */
+export declare function claimsSentReply(text: string): boolean;
+/**
+ * Decide whether an in-process agent's final text may be posted.
+ *
+ * @param text - Final turn text (already stripped of tool-call markup)
+ * @param toolCalls - The turn's tool calls
+ * @returns The text to post, or '' with the reason it was suppressed
+ */
+export declare function filterAgentTurnReply(text: string, toolCalls: readonly TurnToolCall[] | undefined): FilteredTurnReply;
+//# sourceMappingURL=agent-reply-filter.utils.d.ts.map

package/dist/cli/backend/src/utils/agent-reply-filter.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-reply-filter.utils.d.ts","sourceRoot":"","sources":["../../../../../backend/src/utils/agent-reply-filter.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wCAAwC;AACxC,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AAEhF,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IACjC,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACzC;AA2CD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAK3D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWxD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,GAAG,iBAAiB,CAQpH"}

package/dist/cli/backend/src/utils/agent-reply-filter.utils.js

@@ -0,0 +1,127 @@
+/**
+ * Filter for an in-process agent's final turn text before it is posted to a
+ * person (chat, Slack DM).
+ *
+ * Incident 2026-09-26 (owner's Slack DM with the orchestrator): after each
+ * turn the owner got an English meta report — "I've sent the reply. Here's
+ * my status: *What the user asked* … *What I did* … *Next step* … *Note on
+ * the ticket instruction*". Several turns in a row had made no tool call at
+ * all and still said "I generated a fresh link and sent it via reply-chat":
+ * nothing had been sent. Both kinds of text are noise at best and false at
+ * worst, so they are not posted:
+ *
+ * - {@link isMetaStatusReport}: the text reports on the turn instead of
+ *   answering ("Here's my status", or self-referential section headers such
+ *   as "What I did" plus another report header).
+ * - {@link claimsSentReply} with no reply tool call in the turn: the text
+ *   says a reply / link was sent to the person, but nothing sent one. Text
+ *   that carries a URL itself is kept — posting it delivers what it claims.
+ *
+ * A genuine answer — even one mentioning "next steps" or "I sent the task
+ * to Joe" — passes.
+ *
+ * @module utils/agent-reply-filter
+ */
+/** Tools that post a reply by themselves. */
+const REPLY_TOOL_NAMES = new Set(['reply_slack', 'reply-slack', 'reply_chat', 'reply-chat', 'send_chat_response']);
+/** Shell tools whose command can run a reply skill. */
+const SHELL_TOOL_NAMES = new Set(['bash_exec', 'bash', 'Bash', 'shell']);
+/** Reply skills run through the shell. */
+const REPLY_SKILL_PATTERN = /\b(?:reply-chat|reply-slack|reply-gchat|reply-remote|reply-channel|send-chat-response)\b/;
+/**
+ * Opening line of a turn report: "I've sent the reply. Here's my status:",
+ * "I've replied to the Slack DM. Here's what I found and did:",
+ * "The link has been sent. Here's my status:".
+ */
+const REPORT_OPENER = /^[^\n]{0,160}?\bhere(?:'s| is)\s+(?:my\s+status|what\s+i\s+(?:found|did|have\s+done))\b/i;
+/** A markdown-ish section header line; group 1 is the label. */
+const HEADER_LINE = /^\s*(?:#{1,6}\s*)?(?:[-*>]\s+)?\*{0,2}_?([^\n:：*]{2,80}?)\s*(?:\([^)\n]{0,80}\))?\s*_?\*{0,2}\s*[:：]/gm;
+/** Headers in which the agent reports on itself or on "the user" (strong signal). */
+const SELF_REPORT_LABEL = /^(?:what\s+(?:the\s+)?(?:user|owner)\b|what\s+i\b|why\s+i\b|note\s+on\s+(?:the\s+)?ticket|correction\s+first|my\s+status\b|用户(?:问|要|说|想|的问题)|我(?:做了|完成了|检查了|验证了|发现)|我的状态)/i;
+/** Other headers a turn report uses (weak alone). */
+const REPORT_LABEL = /^(?:next\s+steps?|result|root\s+cause|investigation|caveats?(?:\s+i\s+flagged.*)?|status|summary|findings|verified|下一步|结果|原因|结论|总结)\b/i;
+/** Claims that a reply / link / message went to the person. */
+const SENT_REPLY_CLAIMS = [
+    /\bi(?:'ve|\s+have)?\s+(?:just\s+|now\s+|also\s+)?(?:re-?)?(?:sent|posted|shared|dm'?e?d|delivered)\s+(?:you\b|it\s+(?:to\s+you|to\s+the\s+(?:user|owner)|via\b|in\s+(?:the\s+)?(?:dm|thread|chat))|the\s+(?:(?:new|fresh|real|login|authorization|auth|interim)\s+)*(?:link|reply|url|message|code|answer)\b|a\s+(?:(?:new|fresh|short)\s+)?(?:link|reply|message)\b)/i,
+    /\bi(?:'ve|\s+have)\s+(?:just\s+)?replied\b/i,
+    /\b(?:link|reply|url|message|answer)\s+(?:has|have|was)\s+(?:just\s+)?(?:been\s+)?(?:sent|posted|delivered)\b/i,
+    /\b(?:sent|delivered|posted)\s+(?:it\s+|the\s+\w+\s+)?via\s+`?reply-(?:chat|slack)/i,
+    /(?:链接|回复|消息|验证码|登录链接|授权链接)(?:已经?|刚刚?|都)?(?:发|发送|发出)(?:给你|过去|出去|到)?了/,
+    /(?:已经?|刚刚?)(?:把[^。\n]{0,30})?(?:发给你|发送给你|私信给你|回复你|回复了你)/,
+    /发给你了/,
+];
+/** A URL in the text: posting it delivers the link it talks about. */
+const URL_PATTERN = /https?:\/\/\S+/i;
+/**
+ * Whether a tool call sent a reply to a person.
+ *
+ * @param call - Tool call record
+ * @returns True for a reply tool, or a shell call that runs a reply skill
+ */
+export function isReplyToolCall(call) {
+    if (REPLY_TOOL_NAMES.has(call.toolName))
+        return true;
+    if (!SHELL_TOOL_NAMES.has(call.toolName))
+        return false;
+    const command = call.args?.command;
+    return typeof command === 'string' && REPLY_SKILL_PATTERN.test(command);
+}
+/**
+ * Whether a text is a report on the turn rather than an answer.
+ *
+ * @param text - Final turn text
+ * @returns True for "Here's my status" openers, or a self-report header plus
+ *   at least one more report header
+ *
+ * @example
+ * ```ts
+ * isMetaStatusReport("I've sent the reply. Here's my status:\n**What I did:** …"); // true
+ * isMetaStatusReport('部署好了：https://ce.example.com'); // false
+ * ```
+ */
+export function isMetaStatusReport(text) {
+    if (typeof text !== 'string' || !text.trim())
+        return false;
+    if (REPORT_OPENER.test(text.trim()))
+        return true;
+    let self = 0;
+    let other = 0;
+    for (const match of text.matchAll(HEADER_LINE)) {
+        const label = match[1].trim();
+        if (SELF_REPORT_LABEL.test(label))
+            self += 1;
+        else if (REPORT_LABEL.test(label))
+            other += 1;
+    }
+    return self >= 1 && self + other >= 2;
+}
+/**
+ * Whether a text claims a reply, link or message was sent to the person.
+ *
+ * @param text - Final turn text
+ * @returns True for "I've sent the link", "The link has been sent", 「链接已经发给你了」 …
+ */
+export function claimsSentReply(text) {
+    if (typeof text !== 'string' || !text.trim())
+        return false;
+    return SENT_REPLY_CLAIMS.some((re) => re.test(text));
+}
+/**
+ * Decide whether an in-process agent's final text may be posted.
+ *
+ * @param text - Final turn text (already stripped of tool-call markup)
+ * @param toolCalls - The turn's tool calls
+ * @returns The text to post, or '' with the reason it was suppressed
+ */
+export function filterAgentTurnReply(text, toolCalls) {
+    if (!text)
+        return { text: '', suppressed: null };
+    if (isMetaStatusReport(text))
+        return { text: '', suppressed: 'meta_status_report' };
+    const replied = (toolCalls ?? []).some(isReplyToolCall);
+    if (!replied && claimsSentReply(text) && !URL_PATTERN.test(text)) {
+        return { text: '', suppressed: 'unsent_reply_claim' };
+    }
+    return { text, suppressed: null };
+}
+//# sourceMappingURL=agent-reply-filter.utils.js.map

package/dist/cli/backend/src/utils/agent-reply-filter.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-reply-filter.utils.js","sourceRoot":"","sources":["../../../../../backend/src/utils/agent-reply-filter.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAmBH,6CAA6C;AAC7C,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAExI,uDAAuD;AACvD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9F,0CAA0C;AAC1C,MAAM,mBAAmB,GAAG,0FAA0F,CAAC;AAEvH;;;;GAIG;AACH,MAAM,aAAa,GAAG,0FAA0F,CAAC;AAEjH,gEAAgE;AAChE,MAAM,WAAW,GAAG,wGAAwG,CAAC;AAE7H,qFAAqF;AACrF,MAAM,iBAAiB,GACtB,4KAA4K,CAAC;AAE9K,qDAAqD;AACrD,MAAM,YAAY,GACjB,wIAAwI,CAAC;AAE1I,+DAA+D;AAC/D,MAAM,iBAAiB,GAAsB;IAC5C,wWAAwW;IACxW,6CAA6C;IAC7C,+GAA+G;IAC/G,oFAAoF;IACpF,qEAAqE;IACrE,yDAAyD;IACzD,MAAM;CACN,CAAC;AAEF,sEAAsE;AACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;IACnC,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,IAAI,CAAC,CAAC;aACxC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,SAA8C;IAChG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACpF,MAAM,OAAO,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewly",
-  "version": "1.20.144",
+  "version": "1.20.146",
   "type": "module",
   "description": "Multi-agent orchestration platform for AI coding teams — coordinates Claude Code, Gemini CLI, and Codex agents with a real-time web dashboard",
   "workspaces": [

package/packages/crewly-agent/src/runtime/agent-runner.service.test.ts

@@ -136,6 +136,45 @@ describe('AgentRunnerService', () => {
       expect(runner.getHistoryLength()).toBe(1); // only user message
     });
 
+    it('asks for a short user-facing reply (not a status report) when tools ran and no text came back', async () => {
+      mockGenerateText
+        .mockResolvedValueOnce({
+          text: '',
+          steps: [{ toolCalls: [{ toolCallId: 'tc-1', toolName: 'get_team_status', input: {} }], toolResults: [{ toolCallId: 'tc-1', output: {} }] }],
+          usage: { inputTokens: 10, outputTokens: 0 },
+          finishReason: 'stop',
+        })
+        .mockResolvedValueOnce({ text: '两个团队都在跑。', usage: { inputTokens: 5, outputTokens: 5 } });
+
+      const result = await runner.run('团队怎么样');
+
+      expect(result.text).toBe('两个团队都在跑。');
+      expect(mockGenerateText).toHaveBeenCalledTimes(2);
+      const fallbackCall = mockGenerateText.mock.calls[1][0] as { messages: Array<{ role: string; content: string }>; tools?: unknown };
+      expect(fallbackCall.tools).toBeUndefined();
+      // The history array is shared, so find the injected prompt rather than taking the last entry.
+      const prompt = fallbackCall.messages.find((m) => m.role === 'user' && /No status report/.test(String(m.content)));
+      expect(prompt).toBeDefined();
+      expect(fallbackCall.messages.some((m) => /summarize what you just did/i.test(String(m.content)))).toBe(false);
+    });
+
+    it('asks for nothing more when the turn already replied with reply-chat (2026-09-26 status noise)', async () => {
+      mockGenerateText.mockResolvedValueOnce({
+        text: '',
+        steps: [{
+          toolCalls: [{ toolCallId: 'tc-1', toolName: 'bash_exec', input: { command: "bash config/skills/orchestrator/reply-chat/execute.sh '{\"content\":\"好了\"}'" } }],
+          toolResults: [{ toolCallId: 'tc-1', output: { success: true } }],
+        }],
+        usage: { inputTokens: 10, outputTokens: 0 },
+        finishReason: 'stop',
+      });
+
+      const result = await runner.run('帮我重新登陆claude code');
+
+      expect(result.text).toBe('');
+      expect(mockGenerateText).toHaveBeenCalledTimes(1);
+    });
+
     it('should track tool calls across steps', async () => {
       mockGenerateText.mockResolvedValueOnce({
         text: 'Done',

package/packages/crewly-agent/src/runtime/agent-runner.service.ts

@@ -38,6 +38,7 @@ import {
   MODEL_CONTEXT_WINDOWS,
   resolveMaxOutputTokens,
 } from './types.js';
+import { SUMMARY_FALLBACK_PROMPT, shouldRequestSummaryFallback } from './reply-tool-calls.js';
 
 /**
  * What a provider's finish reason means for the turn, and how to recover.
@@ -1572,9 +1573,11 @@ export class AgentRunnerService {
         this.state.messages.push({ role: 'assistant', content: text });
       }
 
-      // Empty response fallback: if model made tool calls but produced no text summary,
-      // prompt it once more to generate a summary (prevents silent completions)
-      if (!text && toolCalls.length > 0) {
+      // Empty response fallback: if model made tool calls but produced no text,
+      // prompt it once more for a short reply (prevents silent completions).
+      // Skipped when a reply tool already sent the answer: the "summary" that
+      // followed was the status report the owner got as noise (2026-09-26).
+      if (shouldRequestSummaryFallback(text, toolCalls)) {
         console.warn('[AgentRunner] Empty text response after tool calls, requesting summary fallback');
         const fallbackResult = await this.requestSummaryFallback();
         if (fallbackResult) {
@@ -1760,9 +1763,9 @@ export class AgentRunnerService {
       this.state.messages.push({ role: 'assistant', content: finalText });
     }
 
-    // Empty response fallback: if model made tool calls but produced no text summary,
-    // prompt it once more to generate a summary (prevents silent completions)
-    if (!finalText && toolCalls.length > 0) {
+    // Empty response fallback (see the streaming path): a short reply, and
+    // none at all when a reply tool already sent the answer.
+    if (shouldRequestSummaryFallback(finalText, toolCalls)) {
       console.warn('[AgentRunner] Empty text response after tool calls, requesting summary fallback');
       const fallbackResult = await this.requestSummaryFallback();
       if (fallbackResult) {
@@ -1991,24 +1994,21 @@ export class AgentRunnerService {
   }
 
   /**
-   * Request a text summary from the model when the previous response had tool calls
-   * but no text output. Injects a follow-up user message and makes a single
-   * generateText call with no tools to force a text-only response.
+   * Ask the model for a closing reply when the previous response had tool
+   * calls but no text output. Injects {@link SUMMARY_FALLBACK_PROMPT} (a short
+   * reply to the person, in their language — not a status report) and makes a
+   * single generateText call with no tools to force a text-only response.
    *
-   * @returns The summary text, or empty string if the fallback also fails
+   * @returns The reply text, or empty string if the fallback also fails
    */
   private async requestSummaryFallback(): Promise<string> {
     if (!this.model) return '';
 
-    const prompt =
-      '请用文字总结你刚才完成的工作和发现的结果，然后调用report-status汇报。' +
-      'Please summarize what you just did, what you found, and any issues encountered. ' +
-      'Then call report-status to report your status.';
-
-    this.state.messages.push({ role: 'user', content: prompt });
+    this.state.messages.push({ role: 'user', content: SUMMARY_FALLBACK_PROMPT });
 
     try {
-      const fallback = await generateText({
+      const generateFn = this._generateTextFn || (generateText as Function);
+      const fallback = await generateFn({
         model: this.model,
         system: this.state.systemPrompt,
         messages: this.state.messages,

package/packages/crewly-agent/src/runtime/interactive-login-guard.test.ts

@@ -0,0 +1,60 @@
+/**
+ * Tests for the interactive harness login guard of bash_exec.
+ */
+
+import { describe, it, expect } from 'vitest';
+import { HARNESS_LOGIN_SKILL_PATH, checkInteractiveLoginCommand, detectInteractiveLogin } from './interactive-login-guard.js';
+
+describe('detectInteractiveLogin', () => {
+  it.each([
+    ['claude setup-token', 'claude setup-token'],
+    ['~/.local/bin/claude setup-token', 'claude setup-token'],
+    ['cd ~ && claude setup-token 2>&1 | tee /tmp/x', 'claude setup-token'],
+    ['script -q /dev/null claude setup-token', 'claude setup-token'],
+    ["tmux send-keys -t login 'claude setup-token' Enter", 'claude setup-token'],
+    ['claude /login', 'claude /login'],
+    ['claude "/login"', 'claude /login'],
+    ['echo /login | claude', 'claude /login'],
+    ["printf '/login\\n' | ~/.local/bin/claude", 'claude /login'],
+    ['claude auth login', 'claude auth login'],
+    ['claude auth login --email someone@example.com', 'claude auth login'],
+    ['claude login', 'claude auth login'],
+    ['codex login', 'codex login'],
+    ['codex login --device-auth', 'codex login'],
+    ['nohup codex login --device-auth > /tmp/l.log 2>&1 &', 'codex login'],
+    ['agy login', 'agy login'],
+    ['antigravity auth login', 'agy login'],
+  ])('%s', (command, label) => {
+    expect(detectInteractiveLogin(command)).toBe(label);
+  });
+
+  it.each([
+    'claude auth status',
+    'claude --version',
+    'claude -p "summarise the repo"',
+    'codex login status',
+    'codex exec "fix the test"',
+    'cat backend/src/services/harness/claude-config.utils.ts',
+    'grep -rn setup-token backend/src/services/harness/login-rules.ts',
+    'bash config/skills/orchestrator/harness-login/execute.sh --harness claude',
+    'ls ~/.claude',
+    'echo login',
+    '',
+  ])('allows %s', (command) => {
+    expect(detectInteractiveLogin(command)).toBeNull();
+  });
+});
+
+describe('checkInteractiveLoginCommand', () => {
+  it('explains why and names the skill', () => {
+    const message = checkInteractiveLoginCommand('claude setup-token');
+    expect(message).toContain('`claude setup-token` is an interactive login');
+    expect(message).toContain('stale');
+    expect(message).toContain(HARNESS_LOGIN_SKILL_PATH);
+    expect(message).toContain('Do not retry');
+  });
+
+  it('returns null for ordinary commands', () => {
+    expect(checkInteractiveLoginCommand('npm run build')).toBeNull();
+  });
+});