crewly 1.20.192 → 1.20.193

package/config/skills/orchestrator/harness-login/SKILL.md

@@ -38,8 +38,15 @@ account ("帮我重新登陆 claude code", "换个账号", "send me the login li
 ```bash
 bash config/skills/orchestrator/harness-login/execute.sh --harness claude
 bash config/skills/orchestrator/harness-login/execute.sh --harness codex --switch-account
+bash config/skills/orchestrator/harness-login/execute.sh --harness claude --account work
 ```
 
+`--account <name>` signs in another of the owner's **own** Claude Code accounts
+("login claude work"): it gets its own config dir and login, and agents move to
+it when an earlier runtime in their fallback order runs out (chain entry
+`claude-code@work`). Nothing is restarted. Add only Claude Code accounts that
+the owner owns; never use it for another person's account.
+
 ## What happens
 
 1. Crewly starts the harness's own login command in a terminal it keeps alive
@@ -75,7 +82,7 @@ in one line to finish it in Setup).
 - `antigravity` answers `no_link_login` (it uses a Gemini API key, entered in
   Setup); Gemini CLI is enterprise-only. Pass the message on in one line.
 - The owner can also just write 「重新登录 claude」 / 「换个账号登录 codex」 /
-  `relogin claude` in your DM — Crewly handles that without you.
+  `relogin claude` / `login claude@work` in your DM — Crewly handles that without you.
 
 ## Errors
 
@@ -86,3 +93,4 @@ in one line to finish it in Setup).
 | `owner_request_unverifiable` | The owner's chat history could not be read |
 | `unknown_harness` | Use claude, codex or antigravity |
 | `no_link_login` | The harness has no link login (Antigravity, Gemini) |
+| `invalid_account` | Account names are 1–32 lower-case letters, digits, `-` or `_` |

package/config/skills/orchestrator/harness-login/execute.sh

@@ -19,6 +19,7 @@
 # Usage:
 #   bash execute.sh --harness claude
 #   bash execute.sh --harness codex --switch-account
+#   bash execute.sh --harness claude --account work   # another of the owner's Claude accounts
 #   bash execute.sh '{"harness":"claude","switchAccount":true}'
 # =============================================================================
 set -euo pipefail
@@ -28,22 +29,25 @@ source "${SCRIPT_DIR}/../_common/lib.sh"
 print_usage() {
   cat <<'EOF_USAGE'
 Usage:
-  bash execute.sh --harness <claude|codex|antigravity> [--switch-account]
-  bash execute.sh '{"harness":"claude","switchAccount":false}'
+  bash execute.sh --harness <claude|codex|antigravity> [--switch-account] [--account <name>]
+  bash execute.sh '{"harness":"claude","switchAccount":false,"account":"work"}'
 
 Options:
   --harness         claude (Claude Code), codex (Codex CLI) or antigravity (agy) — required
   --switch-account  The owner wants a different account (changes the wording of the DM)
+  --account         Sign in another of the owner's own Claude Code accounts (used as a
+                    runtime fallback, chain entry claude-code@<name>) instead of the default login
   --help | -h       Show this help
 EOF_USAGE
 }
 
-INPUT_JSON=""; HARNESS=""; SWITCH=false
+INPUT_JSON=""; HARNESS=""; SWITCH=false; ACCOUNT=""
 if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then INPUT_JSON="$1"; shift || true; fi
 while [[ $# -gt 0 ]]; do
   case "$1" in
     --harness)        [ $# -ge 2 ] || error_exit "--harness requires a value"; HARNESS="$2"; shift 2 ;;
     --switch-account) SWITCH=true; shift ;;
+    --account)        [ $# -ge 2 ] || error_exit "--account requires a value"; ACCOUNT="$2"; shift 2 ;;
     --help|-h)        print_usage; exit 0 ;;
     *) error_exit "Unknown option: $1" ;;
   esac
@@ -52,6 +56,7 @@ if [ -n "$INPUT_JSON" ]; then
   INPUT=$(read_json_input "$INPUT_JSON")
   [ -z "$HARNESS" ] && HARNESS=$(printf '%s' "$INPUT" | jq -r '.harness // .harnessId // empty')
   [ "$(printf '%s' "$INPUT" | jq -r '.switchAccount // false')" = "true" ] && SWITCH=true
+  [ -z "$ACCOUNT" ] && ACCOUNT=$(printf '%s' "$INPUT" | jq -r '.account // empty')
 fi
 require_param "harness (--harness)" "$HARNESS"
 
@@ -59,7 +64,10 @@ require_param "harness (--harness)" "$HARNESS"
 HARNESS_ID=$(printf '%s' "$HARNESS" | tr '[:upper:]' '[:lower:]' | sed -E 's/[[:space:]_]+/-/g')
 [[ "$HARNESS_ID" =~ ^[a-z0-9-]+$ ]] || error_exit "Invalid harness: $HARNESS (use claude, codex or antigravity)"
 
-BODY=$(jq -cn --argjson sw "$SWITCH" '{switchAccount: $sw}')
+ACCOUNT=$(printf '%s' "$ACCOUNT" | tr '[:upper:]' '[:lower:]')
+[ -z "$ACCOUNT" ] || [[ "$ACCOUNT" =~ ^[a-z0-9][a-z0-9_-]{0,31}$ ]] || error_exit "Invalid account: $ACCOUNT (lower-case letters, digits, - or _)"
+
+BODY=$(jq -cn --argjson sw "$SWITCH" --arg acct "$ACCOUNT" '{switchAccount: $sw} + (if $acct != "" then {account: $acct} else {} end)')
 
 ERR_FILE=$(mktemp); trap 'rm -f "$ERR_FILE"' EXIT
 RESPONSE=$(api_call POST "/harness/${HARNESS_ID}/owner-login" "$BODY" 2>"$ERR_FILE") || {

package/config/skills/orchestrator/harness-login/execute.test.sh

@@ -54,6 +54,12 @@ check "display name → id, switch flag" "$(jq -c '{path, body}' "$STUB_LOG")" '
 OUT=$(run '{"harness":"claude","switchAccount":true}')
 check "json input" "$(jq -c .body "$STUB_LOG")" '{"switchAccount":true}'
 
+OUT=$(run --harness claude --account Work)
+check "account (lower-cased)" "$(jq -c .body "$STUB_LOG")" '{"switchAccount":false,"account":"work"}'
+
+OUT=$(run '{"harness":"claude","account":"b"}')
+check "json account" "$(jq -c .body "$STUB_LOG")" '{"switchAccount":false,"account":"b"}'
+
 OUT=$(run --harness codex); RC=$?
 check "no owner request: exit 1" "$RC" "1"
 check "no owner request: reason" "$(printf '%s' "$OUT" | jq -r .reason)" "owner_request_not_found"
@@ -67,6 +73,7 @@ check "other agents refused" "$(printf '%s' "$OUT" | jq -r .reason)" "orchestrat
 check "missing harness" "$(run_err)" "Missing required parameter: harness (--harness)"
 check "path injection refused" "$(run_err --harness '../orc')" "Invalid harness: ../orc (use claude, codex or antigravity)"
 check "unknown option" "$(run_err --yes)" "Unknown option: --yes"
+check "invalid account" "$(run_err --harness claude --account '../x')" "Invalid account: ../x (lower-case letters, digits, - or _)"
 
 echo "=== Results: $PASS passed, $FAIL failed ==="
 [ "$FAIL" -eq 0 ]

package/config/skills/team-leader/delegate-task/execute.sh

@@ -170,7 +170,7 @@ if [ -n "$CONTEXT" ]; then
 fi
 
 # Build a structured task message from Team Leader
-TASK_MESSAGE="New task from Team Leader (priority: ${PRIORITY}):\n\n**[REQUIRED] When done, you MUST:** (1) Output a text summary of your work, findings, and any issues. (2) Call report-status, passing the workItemId from your [CREWLY-DISPATCH] notice (or from get-my-tasks) so the right WorkItem is closed:\nbash ${CREWLY_ROOT}/config/skills/agent/core/report-status/execute.sh '{\"sessionName\":\"${TO}\",\"workItemId\":\"<your WorkItem id>\",\"status\":\"done\",\"summary\":\"<brief summary>\",\"projectPath\":\"${PROJECT_PATH}\"}'\n\n---\n\n${TASK}"
+TASK_MESSAGE="New task from Team Leader (priority: ${PRIORITY}):\n\n**[REQUIRED] When done, you MUST:** (1) Output a text summary of your work, findings, and any issues. (2) Call report-status, passing the workItemId from your [CREWLY-DISPATCH] notice (or from get-my-tasks) so the right WorkItem is closed:\nbash ${CREWLY_ROOT}/config/skills/agent/core/report-status/execute.sh '{\"sessionName\":\"${TO}\",\"workItemId\":\"<your WorkItem id>\",\"status\":\"done\",\"summary\":\"<brief summary>\",\"evidence\":[{\"type\":\"artifact\",\"path\":\"<file you produced>\"},{\"type\":\"command\",\"command\":\"<check you ran>\",\"exitCode\":0}],\"projectPath\":\"${PROJECT_PATH}\"}' — done needs evidence (files that exist, checks with exit code 0); if a step failed, send [{\"type\":\"blocked\",\"step\":\"<step>\",\"reason\":\"<why>\"}] instead, never done.\n\n---\n\n${TASK}"
 [ -n "$CONTEXT" ] && TASK_MESSAGE="${TASK_MESSAGE}\n\nContext: ${CONTEXT}"
 
 # V3-only producer (spec 2026-05-06-task-management-v1-deprecation.md):

package/config/skills/team-leader/verify-output/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: Verify Output
 description: "Execute the team's verification pipeline against a completed task. Reads verificationPipeline configuration from the team template and runs each verification step sequentially."
-version: 1.0.0
+version: 1.1.0
 category: quality
 skillType: claude-skill
 assignableRoles:
@@ -33,6 +33,18 @@ Supports two modes:
 1. **Explicit checks**: Pass `checks[]` array directly with specific verification steps
 2. **Template pipeline**: Pass `templateId` to automatically load verification steps from the team template's `verificationPipeline`
 
+## Evidence first (#873)
+
+The skill reads the worker's **evidence block** (`output.evidence` on the
+WorkItem: artifacts that exist, commands with exit codes, blocked steps) before
+running any check, and returns it as the first field of the verdict.
+
+- `evidenceWarning` is set when the item was marked done **without evidence**
+  (accepted only while the server is in evidence warn mode) — do not verify it
+  on its summary alone: check the work directly or send it back asking for
+  evidence. It is also set when the worker reported `blocked` steps.
+- The warning, when present, leads `feedback`.
+
 ## When to Use
 
 - When a worker reports a task as `done`
@@ -118,6 +130,11 @@ The template's `passPolicy` controls the overall pass/fail determination:
 
 ```json
 {
+  "evidence": [
+    { "type": "artifact", "path": "src/auth.ts" },
+    { "type": "command", "command": "npm test", "exitCode": 0, "outputTail": "42 passed" }
+  ],
+  "evidenceWarning": null,
   "passed": false,
   "score": 67,
   "feedback": "Verification failed: 1/3 checks failed (policy: critical_only).",

package/config/skills/team-leader/verify-output/execute.sh

@@ -36,6 +36,25 @@ WI_DATA=$(api_call GET "/task-pool/items/${WORK_ITEM_ID}" 2>/dev/null || echo '{
 WI_BRIEF=$(echo "$WI_DATA" | jq -r '.data.briefMarkdown // empty' 2>/dev/null || true)
 WI_OUTPUT_RAW=$(echo "$WI_DATA" | jq -c '.data.output // empty' 2>/dev/null || true)
 
+# Evidence first (#873). The worker's completion carries an evidence block
+# (artifacts that exist, commands with exit codes, or blocked steps), stored
+# at output.evidence. Read it before anything else, and flag an item that was
+# marked done WITHOUT evidence — accepted only because the server is in warn
+# mode this release — so it is not verified on its summary alone.
+WI_FOUND=$(echo "$WI_DATA" | jq -r 'if (.data // null) != null then "yes" else "no" end' 2>/dev/null || echo "no")
+WI_EVIDENCE=$(echo "$WI_DATA" | jq -c 'if (.data.output.evidence | type) == "array" then .data.output.evidence else [] end' 2>/dev/null || echo '[]')
+EVIDENCE_WARNING=""
+if [ "$WI_FOUND" = "yes" ]; then
+  if [ "$(printf '%s' "$WI_EVIDENCE" | jq 'length')" = "0" ]; then
+    EVIDENCE_WARNING="No completion evidence: this WorkItem was marked done without artifacts or commands (accepted only in evidence warn mode). Do not verify on the summary alone — check the work directly, or send it back asking for evidence."
+  else
+    BLOCKED_STEPS=$(printf '%s' "$WI_EVIDENCE" | jq -r '[.[] | select(.type == "blocked") | "\(.step): \(.reason)"] | join("; ")')
+    if [ -n "$BLOCKED_STEPS" ]; then
+      EVIDENCE_WARNING="The worker reported blocked steps (the item is blocked, not done): ${BLOCKED_STEPS}"
+    fi
+  fi
+fi
+
 # Compose `TASK_OUTPUT` for content-scan checks. Prefer worker-supplied
 # structured output, falling back to the brief if no output was set.
 if [ -n "$WI_OUTPUT_RAW" ] && [ "$WI_OUTPUT_RAW" != "null" ] && [ "$WI_OUTPUT_RAW" != "" ]; then
@@ -316,6 +335,11 @@ else
   FEEDBACK="Verification failed: ${TOTAL_FAILED}/${TOTAL_CHECKS} checks failed (policy: ${PASS_POLICY})."
 fi
 
+# The evidence finding leads the feedback.
+if [ -n "$EVIDENCE_WARNING" ]; then
+  FEEDBACK="${EVIDENCE_WARNING} ${FEEDBACK}"
+fi
+
 # Check if any results require manual TL review
 REQUIRES_REVIEW=$(echo "$RESULTS" | jq '[.[] | select(.requiresReview == true)] | length')
 if [ "$REQUIRES_REVIEW" -gt 0 ]; then
@@ -323,6 +347,8 @@ if [ "$REQUIRES_REVIEW" -gt 0 ]; then
 fi
 
 jq -n \
+  --argjson evidence "$WI_EVIDENCE" \
+  --arg evidenceWarning "$EVIDENCE_WARNING" \
   --arg passed "$PASSED" \
   --arg score "$SCORE" \
   --arg feedback "$FEEDBACK" \
@@ -333,6 +359,8 @@ jq -n \
   --arg workerId "$WORKER_ID" \
   --arg templateId "$TEMPLATE_ID" \
   '{
+    evidence: $evidence,
+    evidenceWarning: (if $evidenceWarning != "" then $evidenceWarning else null end),
     passed: ($passed == "true"),
     score: ($score | tonumber),
     feedback: $feedback,

package/config/skills/team-leader/verify-output/execute.test.sh

@@ -25,6 +25,15 @@ cat > "$FAKE_BIN/curl" <<'CURL_EOF'
 #!/bin/bash
 url="${@: -1}"
 case "$url" in
+  */api/task-pool/items/wi-ev)
+    printf '%s\n200' '{"success":true,"data":{"id":"wi-ev","status":"done_by_worker","output":{"summary":"Report written","evidence":[{"type":"artifact","path":"/proj/report.md"},{"type":"command","command":"npm test","exitCode":0}]}}}'
+    ;;
+  */api/task-pool/items/wi-noev)
+    printf '%s\n200' '{"success":true,"data":{"id":"wi-noev","status":"done_by_worker","output":{"summary":"Trust me"}}}'
+    ;;
+  */api/task-pool/items/wi-blocked)
+    printf '%s\n200' '{"success":true,"data":{"id":"wi-blocked","status":"blocked","output":{"summary":"Stuck","evidence":[{"type":"blocked","step":"deploy","reason":"no creds"}]}}}'
+    ;;
   */api/templates/tmpl-majority)
     printf '%s\n200' '{"success":true,"data":{"verificationPipeline":{"passPolicy":"majority","maxRetries":3,"steps":[{"id":"s1","name":"Review","method":"code_review","critical":false}]}}}'
     ;;
@@ -112,6 +121,24 @@ INPUT_INLINE=$(jq -n --arg pp "$PROJECT_DIR" \
 assert_json_field "inline checks with default policy: all must pass" \
   "$INPUT_INLINE" '.passed' 'false'
 
+echo ""
+echo "verify-output: evidence first (#873)"
+
+assert_json_field "evidence is the first key of the verdict" \
+  '{"workItemId":"wi-ev"}' 'keys_unsorted[0]' 'evidence'
+assert_json_field "evidence block is surfaced from output.evidence" \
+  '{"workItemId":"wi-ev"}' '[.evidence[].type] | join(",")' 'artifact,command'
+assert_json_field "no evidence warning when evidence is present" \
+  '{"workItemId":"wi-ev"}' '.evidenceWarning' 'null'
+assert_json_field "done without evidence is flagged" \
+  '{"workItemId":"wi-noev"}' '.evidenceWarning | startswith("No completion evidence")' 'true'
+assert_json_field "the evidence flag leads the feedback" \
+  '{"workItemId":"wi-noev"}' '.feedback | startswith("No completion evidence")' 'true'
+assert_json_field "blocked evidence is surfaced with its step" \
+  '{"workItemId":"wi-blocked"}' '.evidenceWarning | contains("deploy: no creds")' 'true'
+assert_json_field "an unreadable WorkItem gets empty evidence and no flag" \
+  '{"workItemId":"wi-missing"}' '(.evidence | length | tostring) + "/" + (.evidenceWarning | tostring)' '0/null'
+
 echo ""
 echo "Results: $PASS passed, $FAIL failed"
 [ "$FAIL" -eq 0 ]

package/dist/backend/backend/src/constants.d.ts

@@ -348,6 +348,8 @@ export declare const CLOUD_DISCONNECT_NOTICE_CONSTANTS: {
     readonly DISCONNECT_THRESHOLD_MS: number;
     readonly CHECK_INTERVAL_MS: number;
     readonly REPEAT_INTERVAL_MS: number;
+    readonly QUEUE_FAILURE_THRESHOLD_MS: number;
+    readonly RELAY_QUEUE_NOTICE_FILE: "cloud/relay-queue-notice.json";
     readonly STATE_FILE: "cloud/disconnect-notice.json";
     readonly CLI_LOGIN_ARGS: readonly ["cloud", "login", "--no-browser"];
     readonly CLI_ENTRY: "dist/cli/cli/src/index.js";
@@ -778,7 +780,7 @@ export declare const CONTROL_PLANE_GUARD_CONSTANTS: {
     /** Files under CREWLY_HOME that agents must not read with the built-in tools either. */
     readonly CREWLY_HOME_READ_DENIED_FILES: readonly ["api-token"];
     /** Write-protected directories under the install root (whole subtree). */
-    readonly INSTALL_DIRS: readonly ["config/skills/orchestrator/stop-agent", "config/skills/orchestrator/start-agent", "config/skills/orchestrator/terminate-agent", "config/skills/orchestrator/stop-team", "config/skills/orchestrator/start-team", "config/skills/orchestrator/restart-crewly", "config/hooks/control-plane-guard", "config/hooks/agent-status", "dist"];
+    readonly INSTALL_DIRS: readonly ["config/skills/orchestrator/stop-agent", "config/skills/orchestrator/start-agent", "config/skills/orchestrator/terminate-agent", "config/skills/orchestrator/stop-team", "config/skills/orchestrator/start-team", "config/skills/orchestrator/restart-crewly", "config/hooks/control-plane-guard", "config/hooks/agent-status", "config/hooks/subagent-guard", "dist"];
     /** Write-protected files under the install root. */
     readonly INSTALL_FILES: readonly ["config/skills/_common/lib.sh"];
     /** Write-protected directories under the agent's project path (whole subtree). */
@@ -810,6 +812,23 @@ export declare const AGENT_STATUS_HOOK_CONSTANTS: {
     /** Accepted X-Agent-Session header value. */
     readonly SESSION_NAME_PATTERN: RegExp;
 };
+/**
+ * Subagent guard (#852, specs/2026-10-03-subagent-guard.md): a Claude Code
+ * SubagentStart / SubagentStop hook. It injects Crewly's subagent rules when a
+ * subagent starts, and sends back, once, a subagent that stops without having
+ * made any tool call. Registered in the control-plane guard's per-session
+ * settings file, like the agent-status hook.
+ */
+export declare const SUBAGENT_GUARD_CONSTANTS: {
+    /** Hook script, relative to the install root. */
+    readonly HOOK_SCRIPT: "config/hooks/subagent-guard/subagent.sh";
+    /** Hook events the script is registered for. */
+    readonly EVENTS: readonly ["SubagentStart", "SubagentStop"];
+    /** Environment variable that turns the subagent guard off when set to KILL_SWITCH_OFF_VALUE. */
+    readonly KILL_SWITCH_ENV: "CREWLY_SUBAGENT_GUARD";
+    /** Value of KILL_SWITCH_ENV that disables the subagent guard. */
+    readonly KILL_SWITCH_OFF_VALUE: "0";
+};
 /**
  * Session recreation (Step 2 full recreation in AgentRegistrationService).
  *
@@ -1162,6 +1181,42 @@ export declare const GIVE_UP_RECOVERY_CONSTANTS: {
     /** Audit label for transitions this feature makes. */
     readonly ACTOR_VIA: "give-up-recovery";
 };
+/**
+ * Completion evidence contract (#873, specs/2026-10-03-completion-evidence.md):
+ * a WorkItem is marked done only with evidence — artifacts that exist,
+ * commands with their exit codes — and a worker that could not finish reports
+ * `blocked` evidence instead.
+ */
+export declare const COMPLETION_EVIDENCE_CONSTANTS: {
+    /** The two rollout modes for a completion that carries no evidence. */
+    readonly MODES: readonly string[];
+    /**
+     * Default mode for a completion with no evidence. `warn` (this release):
+     * accepted, logged, and the response carries a `warning`. `enforce` (next
+     * release): 400. Malformed evidence, missing artifacts, failing commands and
+     * `blocked` entries are handled the same in both modes.
+     */
+    readonly EVIDENCE_ENFORCEMENT_MODE: "warn" | "enforce";
+    /** Env var that overrides {@link EVIDENCE_ENFORCEMENT_MODE} (`warn` | `enforce`). */
+    readonly ENV_MODE: "CREWLY_EVIDENCE_MODE";
+    /** Most evidence entries accepted on one completion. */
+    readonly MAX_ENTRIES: 50;
+    /** Longest string accepted in any evidence field. */
+    readonly MAX_FIELD_CHARS: 8000;
+    /** URL schemes accepted for an artifact without checking it exists. */
+    readonly URL_SCHEMES: readonly string[];
+    /** Response codes for each rejection. */
+    readonly CODES: {
+        readonly MALFORMED: "evidence_malformed";
+        readonly MISPLACED: "evidence_misplaced";
+        readonly MISSING: "evidence_required";
+        readonly ARTIFACT_NOT_FOUND: "evidence_artifact_not_found";
+        readonly ARTIFACT_UNRESOLVABLE: "evidence_artifact_relative_path";
+        readonly COMMAND_FAILED: "evidence_command_failed";
+    };
+    /** The shape a worker must send, quoted in every rejection and warning. */
+    readonly SHAPE_HINT: string;
+};
 /**
  * Constants for the waiting_on_human attention verdict (#815).
  * See specs/2026-09-26-agent-waiting-on-human.md.
@@ -2344,6 +2399,14 @@ export declare const RUNTIME_EXIT_CONSTANTS: {
      * spawned yet.
      */
     readonly PROCESS_POLL_GRACE_PERIOD_MS: 30000;
+    /**
+     * An exit with no recognised cause this soon after monitoring started is
+     * recorded as `startup_exit`, not `idle_exit` (#791): no runtime idles
+     * out in its first minute, so calling it idle hides the real cause.
+     */
+    readonly EARLY_EXIT_WINDOW_MS: 60000;
+    /** Characters of cleaned terminal output logged with an unexplained exit (#791) */
+    readonly EXIT_DIAGNOSTIC_TAIL_CHARS: 1500;
 };
 /**
  * Constants for context window monitoring and auto-recovery.
@@ -2668,6 +2731,13 @@ export declare const CLAUDE_TRANSCRIPT_SYNC_CONSTANTS: {
      * so a small window is enough and keeps the cursor file small.
      */
     readonly MAX_DEDUPE_IDS: 200;
+    /**
+     * How many earlier transcripts of a session keep their read offset.
+     * A session that switches between the owner's Claude Code accounts, or
+     * gets a new conversation, can come back to a transcript it already
+     * read; the remembered offset keeps it from being counted twice.
+     */
+    readonly MAX_REMEMBERED_TRANSCRIPTS: 8;
     /**
      * Context size, in tokens, above which a claude-code agent is asked to
      * compact.
@@ -3542,8 +3612,10 @@ export declare const GOOGLE_WORKSPACE_CONSTANTS: {
         readonly STATUS: "/status";
         /** GET ?email=&product= → { accessToken, expiresAt, scopes, email, products } */
         readonly TOKEN: "/token";
-        /** GET ?token=&returnUrl=&products=&loginHint= → 302 to Google consent */
+        /** GET ?token=&returnUrl=&products=&loginHint=&authorizedBy= → 302 to Google consent */
         readonly START: "/start";
+        /** POST { email, authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns a grant and who it is shared with (issue #968) */
+        readonly SHARING: "/sharing";
         /**
          * POST { products, slackUserId, slackChannelId, slackThreadTs } →
          * `{ url, expiresAt }`.
@@ -3636,6 +3708,8 @@ export declare const CANVA_CONSTANTS: {
         readonly START: "/start";
         /** DELETE CLOUD_PATH itself → { removed } */
         readonly DISCONNECT: "";
+        /** POST { authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns the grant and who it is shared with (issue #968) */
+        readonly SHARING: "/sharing";
     };
     /** Canva Connect REST base */
     readonly API_BASE: "https://api.canva.com/rest/v1";
@@ -3685,6 +3759,8 @@ export declare const MICROSOFT_TODO_CONSTANTS: {
         readonly START: "/start";
         /** DELETE CLOUD_PATH itself → { removed } */
         readonly DISCONNECT: "";
+        /** POST { authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns the grant and who it is shared with (issue #968) */
+        readonly SHARING: "/sharing";
     };
     /** Microsoft Graph v1.0 base */
     readonly GRAPH_BASE: "https://graph.microsoft.com/v1.0";
@@ -3703,6 +3779,8 @@ export declare const MICROSOFT_TODO_CONSTANTS: {
     readonly NOTE_PREVIEW_LENGTH: 200;
     /** Accepted `importance` values */
     readonly IMPORTANCE_VALUES: readonly string[];
+    /** Most steps (Graph `checklistItems`) one call may add to a task (#835) */
+    readonly STEPS_MAX_PER_CALL: 50;
     /**
      * Time zone written with a due date. To Do stores due *dates*; midnight
      * in UTC is what Microsoft's own samples send and reads back unchanged.
@@ -3835,6 +3913,13 @@ export declare const CLOUD_SYNC_CONSTANTS: {
      * register. We re-register on this interval so recovery is bounded.
      */
     readonly REGISTER_INTERVAL_MS: 60000;
+    /**
+     * Retry gaps (ms) after a failed queue registration: 30 s, 1 min, 2 min,
+     * 5 min, then the last value forever. Without a queue this machine
+     * receives no Cloud or Slack messages, so it never gives up — but it
+     * backs off so a relay that is refusing (quota, outage) is not hammered.
+     */
+    readonly REGISTER_RETRY_BACKOFF_MS: readonly number[];
     /** Device considered offline after this threshold (ms) */
     readonly OFFLINE_THRESHOLD_MS: 60000;
     /** HTTP request timeout for sync API calls (ms) */
@@ -4570,6 +4655,25 @@ export declare const HARNESS_CONSTANTS: {
          * when the login is gone. No session file is written.
          */
         readonly PROBE_ARGS: readonly string[];
+        /**
+         * More of the owner's own Claude Code accounts on this machine, each
+         * with its own config dir (`CLAUDE_CONFIG_DIR`) and login, used as
+         * runtime fallbacks (`claude-code@<name>`). Issue #942.
+         */
+        readonly ACCOUNTS: {
+            /** Directory under CREWLY_HOME holding one config dir per account */
+            readonly DIR: "claude-accounts";
+            /** Separator of a fallback chain entry: `claude-code@work` */
+            readonly TARGET_SEPARATOR: "@";
+            /** Account names: lower-case letters, digits, `-`, `_` */
+            readonly NAME_PATTERN: RegExp;
+            /** Words that cannot be account names (they read as part of "claude code account …") */
+            readonly RESERVED_NAMES: readonly string[];
+            /** Claude's user settings file, copied from the default login when an account is created */
+            readonly SETTINGS_FILE: "settings.json";
+            /** `.claude.json` keys copied from the default login (the owner's own earlier answers) */
+            readonly COPIED_CONFIG_KEYS: readonly string[];
+        };
     };
     /** Codex CLI facts */
     readonly CODEX: {
@@ -5443,4 +5547,33 @@ export declare const RUNTIME_FALLBACK_CONSTANTS: {
     /** Short names for "(Claude limit)" */
     readonly SHORT_LABELS: Readonly<Record<string, string>>;
 };
+/**
+ * Per-person access (issue #968, epic #967): the people directory, the person
+ * each agent turn acts for, and grant sharing. specs/per-person-access.md
+ */
+export declare const PEOPLE_CONSTANTS: {
+    /** People directory under CREWLY_HOME */
+    readonly STORE_FILE: "people.json";
+    /** Who each agent session acts for, under CREWLY_HOME */
+    readonly ACTING_FOR_FILE: "acting-for.json";
+    /** Person id of the instance owner when their Slack user id is not known (dashboard, terminal) */
+    readonly OWNER_ID: "owner";
+    /** Roles a person can have */
+    readonly ROLES: readonly string[];
+    /** Role a newly seen Slack user gets */
+    readonly DEFAULT_ROLE: "member";
+    /** Headers the backend sends Cloud with each credential request (never taken from an agent) */
+    readonly ACTING_FOR_HEADER: "X-Crewly-Acting-For";
+    readonly ACTING_FOR_ROLE_HEADER: "X-Crewly-Acting-For-Role";
+    /** Cloud's refusal code when the person may not use a grant */
+    readonly NOT_PERMITTED_CODE: "not_permitted";
+    /** What an agent is told to do with that refusal */
+    readonly NOT_PERMITTED_HINT: "Tell the person you are working for exactly this, in one line. Do not retry, and do not use another account or connector to get around it.";
+    /** Grant sharing modes: only the person who authorized it, named people, or every member (not guests) */
+    readonly SHARING_MODES: readonly string[];
+    /** Longest display name kept */
+    readonly MAX_NAME_LENGTH: 80;
+    /** Slack user ids (`U…` / `W…`) */
+    readonly SLACK_USER_ID_PATTERN: RegExp;
+};
 //# sourceMappingURL=constants.d.ts.map