crewly 1.20.191 → 1.20.193

package/dist/backend/backend/src/constants.js

@@ -411,6 +411,8 @@ export const CONTROL_PLANE_GUARD_CONSTANTS = {
         // #815: the agent-status hook runs on every tool call; an agent must not
         // be able to silence or rewrite it.
         'config/hooks/agent-status',
+        // #852: the subagent guard; an agent must not be able to switch it off.
+        'config/hooks/subagent-guard',
         'dist',
     ],
     /** Write-protected files under the install root. */
@@ -444,6 +446,23 @@ export const AGENT_STATUS_HOOK_CONSTANTS = {
     /** Accepted X-Agent-Session header value. */
     SESSION_NAME_PATTERN: /^[A-Za-z0-9._-]{1,128}$/,
 };
+/**
+ * Subagent guard (#852, specs/2026-10-03-subagent-guard.md): a Claude Code
+ * SubagentStart / SubagentStop hook. It injects Crewly's subagent rules when a
+ * subagent starts, and sends back, once, a subagent that stops without having
+ * made any tool call. Registered in the control-plane guard's per-session
+ * settings file, like the agent-status hook.
+ */
+export const SUBAGENT_GUARD_CONSTANTS = {
+    /** Hook script, relative to the install root. */
+    HOOK_SCRIPT: 'config/hooks/subagent-guard/subagent.sh',
+    /** Hook events the script is registered for. */
+    EVENTS: ['SubagentStart', 'SubagentStop'],
+    /** Environment variable that turns the subagent guard off when set to KILL_SWITCH_OFF_VALUE. */
+    KILL_SWITCH_ENV: 'CREWLY_SUBAGENT_GUARD',
+    /** Value of KILL_SWITCH_ENV that disables the subagent guard. */
+    KILL_SWITCH_OFF_VALUE: '0',
+};
 /**
  * Session recreation (Step 2 full recreation in AgentRegistrationService).
  *
@@ -800,6 +819,44 @@ export const GIVE_UP_RECOVERY_CONSTANTS = {
     /** Audit label for transitions this feature makes. */
     ACTOR_VIA: 'give-up-recovery',
 };
+/**
+ * Completion evidence contract (#873, specs/2026-10-03-completion-evidence.md):
+ * a WorkItem is marked done only with evidence — artifacts that exist,
+ * commands with their exit codes — and a worker that could not finish reports
+ * `blocked` evidence instead.
+ */
+export const COMPLETION_EVIDENCE_CONSTANTS = {
+    /** The two rollout modes for a completion that carries no evidence. */
+    MODES: ['warn', 'enforce'],
+    /**
+     * Default mode for a completion with no evidence. `warn` (this release):
+     * accepted, logged, and the response carries a `warning`. `enforce` (next
+     * release): 400. Malformed evidence, missing artifacts, failing commands and
+     * `blocked` entries are handled the same in both modes.
+     */
+    EVIDENCE_ENFORCEMENT_MODE: 'warn',
+    /** Env var that overrides {@link EVIDENCE_ENFORCEMENT_MODE} (`warn` | `enforce`). */
+    ENV_MODE: 'CREWLY_EVIDENCE_MODE',
+    /** Most evidence entries accepted on one completion. */
+    MAX_ENTRIES: 50,
+    /** Longest string accepted in any evidence field. */
+    MAX_FIELD_CHARS: 8000,
+    /** URL schemes accepted for an artifact without checking it exists. */
+    URL_SCHEMES: ['http:', 'https:'],
+    /** Response codes for each rejection. */
+    CODES: {
+        MALFORMED: 'evidence_malformed',
+        MISPLACED: 'evidence_misplaced',
+        MISSING: 'evidence_required',
+        ARTIFACT_NOT_FOUND: 'evidence_artifact_not_found',
+        ARTIFACT_UNRESOLVABLE: 'evidence_artifact_relative_path',
+        COMMAND_FAILED: 'evidence_command_failed',
+    },
+    /** The shape a worker must send, quoted in every rejection and warning. */
+    SHAPE_HINT: 'Send body.result.evidence: an array of {"type":"artifact","path":"<existing file or https URL>"}, ' +
+        '{"type":"command","command":"<cmd>","exitCode":0,"outputTail":"<last lines>"}, ' +
+        'or — if you could not finish — {"type":"blocked","step":"<step that failed>","reason":"<why>"}.',
+};
 /**
  * Constants for the waiting_on_human attention verdict (#815).
  * See specs/2026-09-26-agent-waiting-on-human.md.
@@ -1259,6 +1316,38 @@ export const SLACK_TEAM_CHANNEL_CONSTANTS = {
      * the "nobody addressed" fallback (specs/slack-room-presence.md).
      */
     PEOPLE_MENTIONS_METADATA_KEY: 'slackMentionedPeople',
+    /**
+     * Huddle-message metadata key: why a message with no @ of its own was
+     * treated as addressed to people — `same-sender-followup` or
+     * `person-exchange` (specs/slack-room-presence.md "Follow-ups of a
+     * person-to-person exchange").
+     */
+    ADDRESSEE_INHERITED_METADATA_KEY: 'slackAddresseeInherited',
+    /**
+     * Huddle-message metadata key: agents Cloud says the message @'d
+     * (`mentionedAgentSessions`), wherever they run. A thread whose latest
+     * addressed human message names an agent is not a person-to-person exchange.
+     */
+    AGENT_MENTIONS_METADATA_KEY: 'slackMentionedAgents',
+    /**
+     * A message with no @ that its sender posts this soon after their own
+     * message to people only, in the same conversation, is addressed to the
+     * same people (2026-10-02, #personal-assistant-team: the owner answered a
+     * colleague in two messages 35 s apart, and the second, un-@'d, woke Aria).
+     * Overridden by the env var named in PEOPLE_FOLLOWUP_WINDOW_ENV.
+     */
+    PEOPLE_FOLLOWUP_WINDOW_MS: 5 * 60 * 1000,
+    /** Env var that overrides PEOPLE_FOLLOWUP_WINDOW_MS (milliseconds). */
+    PEOPLE_FOLLOWUP_WINDOW_ENV: 'CREWLY_SLACK_PEOPLE_FOLLOWUP_WINDOW_MS',
+    /**
+     * How long a thread counts as a person-to-person exchange after its last
+     * human-to-human @: an un-@'d message within this time of it is context
+     * only; after it, the normal rules apply again (owner, 2026-10-02).
+     * Overridden by the env var named in PERSON_EXCHANGE_WINDOW_ENV.
+     */
+    PERSON_EXCHANGE_WINDOW_MS: 30 * 60 * 1000,
+    /** Env var that overrides PERSON_EXCHANGE_WINDOW_MS (milliseconds). */
+    PERSON_EXCHANGE_WINDOW_ENV: 'CREWLY_SLACK_PERSON_EXCHANGE_WINDOW_MS',
     /** Reaction added to a routed inbound message while the team works on it */
     INBOUND_REACTION: 'eyes',
     /** How many routed Slack messages to remember for duplicate-copy suppression */
@@ -2034,6 +2123,14 @@ export const RUNTIME_EXIT_CONSTANTS = {
      * spawned yet.
      */
     PROCESS_POLL_GRACE_PERIOD_MS: 30_000,
+    /**
+     * An exit with no recognised cause this soon after monitoring started is
+     * recorded as `startup_exit`, not `idle_exit` (#791): no runtime idles
+     * out in its first minute, so calling it idle hides the real cause.
+     */
+    EARLY_EXIT_WINDOW_MS: 60_000,
+    /** Characters of cleaned terminal output logged with an unexplained exit (#791) */
+    EXIT_DIAGNOSTIC_TAIL_CHARS: 1500,
 };
 /**
  * Constants for context window monitoring and auto-recovery.
@@ -2358,6 +2455,13 @@ export const CLAUDE_TRANSCRIPT_SYNC_CONSTANTS = {
      * so a small window is enough and keeps the cursor file small.
      */
     MAX_DEDUPE_IDS: 200,
+    /**
+     * How many earlier transcripts of a session keep their read offset.
+     * A session that switches between the owner's Claude Code accounts, or
+     * gets a new conversation, can come back to a transcript it already
+     * read; the remembered offset keeps it from being counted twice.
+     */
+    MAX_REMEMBERED_TRANSCRIPTS: 8,
     /**
      * Context size, in tokens, above which a claude-code agent is asked to
      * compact.
@@ -3297,8 +3401,10 @@ export const GOOGLE_WORKSPACE_CONSTANTS = {
         STATUS: '/status',
         /** GET ?email=&product= → { accessToken, expiresAt, scopes, email, products } */
         TOKEN: '/token',
-        /** GET ?token=&returnUrl=&products=&loginHint= → 302 to Google consent */
+        /** GET ?token=&returnUrl=&products=&loginHint=&authorizedBy= → 302 to Google consent */
         START: '/start',
+        /** POST { email, authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns a grant and who it is shared with (issue #968) */
+        SHARING: '/sharing',
         /**
          * POST { products, slackUserId, slackChannelId, slackThreadTs } →
          * `{ url, expiresAt }`.
@@ -3395,6 +3501,8 @@ export const CANVA_CONSTANTS = {
         START: '/start',
         /** DELETE CLOUD_PATH itself → { removed } */
         DISCONNECT: '',
+        /** POST { authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns the grant and who it is shared with (issue #968) */
+        SHARING: '/sharing',
     },
     /** Canva Connect REST base */
     API_BASE: 'https://api.canva.com/rest/v1',
@@ -3444,6 +3552,8 @@ export const MICROSOFT_TODO_CONSTANTS = {
         START: '/start',
         /** DELETE CLOUD_PATH itself → { removed } */
         DISCONNECT: '',
+        /** POST { authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns the grant and who it is shared with (issue #968) */
+        SHARING: '/sharing',
     },
     /** Microsoft Graph v1.0 base */
     GRAPH_BASE: 'https://graph.microsoft.com/v1.0',
@@ -3462,6 +3572,8 @@ export const MICROSOFT_TODO_CONSTANTS = {
     NOTE_PREVIEW_LENGTH: 200,
     /** Accepted `importance` values */
     IMPORTANCE_VALUES: ['low', 'normal', 'high'],
+    /** Most steps (Graph `checklistItems`) one call may add to a task (#835) */
+    STEPS_MAX_PER_CALL: 50,
     /**
      * Time zone written with a due date. To Do stores due *dates*; midnight
      * in UTC is what Microsoft's own samples send and reads back unchanged.
@@ -3596,6 +3708,13 @@ export const CLOUD_SYNC_CONSTANTS = {
      * register. We re-register on this interval so recovery is bounded.
      */
     REGISTER_INTERVAL_MS: 60_000,
+    /**
+     * Retry gaps (ms) after a failed queue registration: 30 s, 1 min, 2 min,
+     * 5 min, then the last value forever. Without a queue this machine
+     * receives no Cloud or Slack messages, so it never gives up — but it
+     * backs off so a relay that is refusing (quota, outage) is not hammered.
+     */
+    REGISTER_RETRY_BACKOFF_MS: [30_000, 60_000, 120_000, 300_000],
     /** Device considered offline after this threshold (ms) */
     OFFLINE_THRESHOLD_MS: 60_000,
     /** HTTP request timeout for sync API calls (ms) */
@@ -4338,6 +4457,25 @@ export const HARNESS_CONSTANTS = {
          * when the login is gone. No session file is written.
          */
         PROBE_ARGS: ['-p', 'Reply with the single word OK.', '--model', 'haiku', '--no-session-persistence', '--strict-mcp-config'],
+        /**
+         * More of the owner's own Claude Code accounts on this machine, each
+         * with its own config dir (`CLAUDE_CONFIG_DIR`) and login, used as
+         * runtime fallbacks (`claude-code@<name>`). Issue #942.
+         */
+        ACCOUNTS: {
+            /** Directory under CREWLY_HOME holding one config dir per account */
+            DIR: 'claude-accounts',
+            /** Separator of a fallback chain entry: `claude-code@work` */
+            TARGET_SEPARATOR: '@',
+            /** Account names: lower-case letters, digits, `-`, `_` */
+            NAME_PATTERN: /^[a-z0-9][a-z0-9_-]{0,31}$/,
+            /** Words that cannot be account names (they read as part of "claude code account …") */
+            RESERVED_NAMES: ['code', 'cli', 'account', 'accounts', 'default', 'claude'],
+            /** Claude's user settings file, copied from the default login when an account is created */
+            SETTINGS_FILE: 'settings.json',
+            /** `.claude.json` keys copied from the default login (the owner's own earlier answers) */
+            COPIED_CONFIG_KEYS: ['hasCompletedOnboarding', 'bypassPermissionsModeAccepted', 'theme'],
+        },
     },
     /** Codex CLI facts */
     CODEX: {
@@ -5127,6 +5265,14 @@ export const SPEND_CAP_CONSTANTS = {
     QUEUED_MARKER: '[SPEND_CAP]',
     /** Decision kind of the "cap reached" card */
     DECISION_KIND: 'spend_cap',
+    /**
+     * Why an open "cap reached" card was withdrawn when its stop lifted
+     * without it (cap removed or raised, boost from elsewhere) — shown on the
+     * card as "Closed — <note>" (#939)
+     */
+    CARD_WITHDRAWN_NOTE: 'no longer needed: the cap was removed, raised or boosted, so the stop has lifted',
+    /** Why an open "cap reached" card was withdrawn when a newer card for the same target (a changed cap) replaced it */
+    CARD_SUPERSEDED_NOTE: 'replaced by a newer card: the cap changed',
     OPTIONS: {
         KEEP: 'Keep stopped',
         UNLIMITED: 'Unlimited today',
@@ -5148,9 +5294,15 @@ export const USAGE_CONSTANTS = {
      */
     TOKENS_PER_USD: 1_000_000,
     /** groupBy values of GET /api/system/usage */
-    GROUP_BY: ['agent', 'team', 'project', 'workItem', 'runtime', 'day'],
+    GROUP_BY: ['agent', 'team', 'project', 'workItem', 'runtime', 'day', 'model'],
+    /** Row key / label of usage whose model the source did not record (or recorded as a `<runtime>-default` placeholder) */
+    UNKNOWN_MODEL_KEY: '(unknown-model)',
+    UNKNOWN_MODEL_LABEL: 'Unknown model',
     /** Rows returned for groupBy=workItem (highest first) */
     MAX_WORK_ITEM_ROWS: 50,
+    /** Row key / label (groupBy=workItem) of usage while the agent had no work item running */
+    NO_WORK_ITEM_KEY: '(no-work-item)',
+    NO_WORK_ITEM_LABEL: '(no work item)',
     /** Label of usage no team / project / work item can be attributed to */
     UNATTRIBUTED: '(unattributed)',
 };
@@ -5276,4 +5428,33 @@ export const RUNTIME_FALLBACK_CONSTANTS = {
         'crewly-agent': 'Crewly Agent',
     },
 };
+/**
+ * Per-person access (issue #968, epic #967): the people directory, the person
+ * each agent turn acts for, and grant sharing. specs/per-person-access.md
+ */
+export const PEOPLE_CONSTANTS = {
+    /** People directory under CREWLY_HOME */
+    STORE_FILE: 'people.json',
+    /** Who each agent session acts for, under CREWLY_HOME */
+    ACTING_FOR_FILE: 'acting-for.json',
+    /** Person id of the instance owner when their Slack user id is not known (dashboard, terminal) */
+    OWNER_ID: 'owner',
+    /** Roles a person can have */
+    ROLES: ['owner', 'member', 'guest'],
+    /** Role a newly seen Slack user gets */
+    DEFAULT_ROLE: 'member',
+    /** Headers the backend sends Cloud with each credential request (never taken from an agent) */
+    ACTING_FOR_HEADER: 'X-Crewly-Acting-For',
+    ACTING_FOR_ROLE_HEADER: 'X-Crewly-Acting-For-Role',
+    /** Cloud's refusal code when the person may not use a grant */
+    NOT_PERMITTED_CODE: 'not_permitted',
+    /** What an agent is told to do with that refusal */
+    NOT_PERMITTED_HINT: 'Tell the person you are working for exactly this, in one line. Do not retry, and do not use another account or connector to get around it.',
+    /** Grant sharing modes: only the person who authorized it, named people, or every member (not guests) */
+    SHARING_MODES: ['owner', 'people', 'members'],
+    /** Longest display name kept */
+    MAX_NAME_LENGTH: 80,
+    /** Slack user ids (`U…` / `W…`) */
+    SLACK_USER_ID_PATTERN: /^[UW][A-Z0-9]{2,30}$/,
+};
 //# sourceMappingURL=constants.js.map