crewly 1.20.192 → 1.20.194

package/dist/cli/backend/src/constants.js

@@ -411,6 +411,8 @@ export const CONTROL_PLANE_GUARD_CONSTANTS = {
         // #815: the agent-status hook runs on every tool call; an agent must not
         // be able to silence or rewrite it.
         'config/hooks/agent-status',
+        // #852: the subagent guard; an agent must not be able to switch it off.
+        'config/hooks/subagent-guard',
         'dist',
     ],
     /** Write-protected files under the install root. */
@@ -444,6 +446,23 @@ export const AGENT_STATUS_HOOK_CONSTANTS = {
     /** Accepted X-Agent-Session header value. */
     SESSION_NAME_PATTERN: /^[A-Za-z0-9._-]{1,128}$/,
 };
+/**
+ * Subagent guard (#852, specs/2026-10-03-subagent-guard.md): a Claude Code
+ * SubagentStart / SubagentStop hook. It injects Crewly's subagent rules when a
+ * subagent starts, and sends back, once, a subagent that stops without having
+ * made any tool call. Registered in the control-plane guard's per-session
+ * settings file, like the agent-status hook.
+ */
+export const SUBAGENT_GUARD_CONSTANTS = {
+    /** Hook script, relative to the install root. */
+    HOOK_SCRIPT: 'config/hooks/subagent-guard/subagent.sh',
+    /** Hook events the script is registered for. */
+    EVENTS: ['SubagentStart', 'SubagentStop'],
+    /** Environment variable that turns the subagent guard off when set to KILL_SWITCH_OFF_VALUE. */
+    KILL_SWITCH_ENV: 'CREWLY_SUBAGENT_GUARD',
+    /** Value of KILL_SWITCH_ENV that disables the subagent guard. */
+    KILL_SWITCH_OFF_VALUE: '0',
+};
 /**
  * Session recreation (Step 2 full recreation in AgentRegistrationService).
  *
@@ -800,6 +819,44 @@ export const GIVE_UP_RECOVERY_CONSTANTS = {
     /** Audit label for transitions this feature makes. */
     ACTOR_VIA: 'give-up-recovery',
 };
+/**
+ * Completion evidence contract (#873, specs/2026-10-03-completion-evidence.md):
+ * a WorkItem is marked done only with evidence — artifacts that exist,
+ * commands with their exit codes — and a worker that could not finish reports
+ * `blocked` evidence instead.
+ */
+export const COMPLETION_EVIDENCE_CONSTANTS = {
+    /** The two rollout modes for a completion that carries no evidence. */
+    MODES: ['warn', 'enforce'],
+    /**
+     * Default mode for a completion with no evidence. `warn` (this release):
+     * accepted, logged, and the response carries a `warning`. `enforce` (next
+     * release): 400. Malformed evidence, missing artifacts, failing commands and
+     * `blocked` entries are handled the same in both modes.
+     */
+    EVIDENCE_ENFORCEMENT_MODE: 'warn',
+    /** Env var that overrides {@link EVIDENCE_ENFORCEMENT_MODE} (`warn` | `enforce`). */
+    ENV_MODE: 'CREWLY_EVIDENCE_MODE',
+    /** Most evidence entries accepted on one completion. */
+    MAX_ENTRIES: 50,
+    /** Longest string accepted in any evidence field. */
+    MAX_FIELD_CHARS: 8000,
+    /** URL schemes accepted for an artifact without checking it exists. */
+    URL_SCHEMES: ['http:', 'https:'],
+    /** Response codes for each rejection. */
+    CODES: {
+        MALFORMED: 'evidence_malformed',
+        MISPLACED: 'evidence_misplaced',
+        MISSING: 'evidence_required',
+        ARTIFACT_NOT_FOUND: 'evidence_artifact_not_found',
+        ARTIFACT_UNRESOLVABLE: 'evidence_artifact_relative_path',
+        COMMAND_FAILED: 'evidence_command_failed',
+    },
+    /** The shape a worker must send, quoted in every rejection and warning. */
+    SHAPE_HINT: 'Send body.result.evidence: an array of {"type":"artifact","path":"<existing file or https URL>"}, ' +
+        '{"type":"command","command":"<cmd>","exitCode":0,"outputTail":"<last lines>"}, ' +
+        'or — if you could not finish — {"type":"blocked","step":"<step that failed>","reason":"<why>"}.',
+};
 /**
  * Constants for the waiting_on_human attention verdict (#815).
  * See specs/2026-09-26-agent-waiting-on-human.md.
@@ -2066,6 +2123,14 @@ export const RUNTIME_EXIT_CONSTANTS = {
      * spawned yet.
      */
     PROCESS_POLL_GRACE_PERIOD_MS: 30_000,
+    /**
+     * An exit with no recognised cause this soon after monitoring started is
+     * recorded as `startup_exit`, not `idle_exit` (#791): no runtime idles
+     * out in its first minute, so calling it idle hides the real cause.
+     */
+    EARLY_EXIT_WINDOW_MS: 60_000,
+    /** Characters of cleaned terminal output logged with an unexplained exit (#791) */
+    EXIT_DIAGNOSTIC_TAIL_CHARS: 1500,
 };
 /**
  * Constants for context window monitoring and auto-recovery.
@@ -2390,6 +2455,13 @@ export const CLAUDE_TRANSCRIPT_SYNC_CONSTANTS = {
      * so a small window is enough and keeps the cursor file small.
      */
     MAX_DEDUPE_IDS: 200,
+    /**
+     * How many earlier transcripts of a session keep their read offset.
+     * A session that switches between the owner's Claude Code accounts, or
+     * gets a new conversation, can come back to a transcript it already
+     * read; the remembered offset keeps it from being counted twice.
+     */
+    MAX_REMEMBERED_TRANSCRIPTS: 8,
     /**
      * Context size, in tokens, above which a claude-code agent is asked to
      * compact.
@@ -3329,8 +3401,10 @@ export const GOOGLE_WORKSPACE_CONSTANTS = {
         STATUS: '/status',
         /** GET ?email=&product= → { accessToken, expiresAt, scopes, email, products } */
         TOKEN: '/token',
-        /** GET ?token=&returnUrl=&products=&loginHint= → 302 to Google consent */
+        /** GET ?token=&returnUrl=&products=&loginHint=&authorizedBy= → 302 to Google consent */
         START: '/start',
+        /** POST { email, authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns a grant and who it is shared with (issue #968) */
+        SHARING: '/sharing',
         /**
          * POST { products, slackUserId, slackChannelId, slackThreadTs } →
          * `{ url, expiresAt }`.
@@ -3427,6 +3501,8 @@ export const CANVA_CONSTANTS = {
         START: '/start',
         /** DELETE CLOUD_PATH itself → { removed } */
         DISCONNECT: '',
+        /** POST { authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns the grant and who it is shared with (issue #968) */
+        SHARING: '/sharing',
     },
     /** Canva Connect REST base */
     API_BASE: 'https://api.canva.com/rest/v1',
@@ -3476,6 +3552,8 @@ export const MICROSOFT_TODO_CONSTANTS = {
         START: '/start',
         /** DELETE CLOUD_PATH itself → { removed } */
         DISCONNECT: '',
+        /** POST { authorizedBy?, sharing? } → { authorizedBy, sharing } — who owns the grant and who it is shared with (issue #968) */
+        SHARING: '/sharing',
     },
     /** Microsoft Graph v1.0 base */
     GRAPH_BASE: 'https://graph.microsoft.com/v1.0',
@@ -3494,6 +3572,8 @@ export const MICROSOFT_TODO_CONSTANTS = {
     NOTE_PREVIEW_LENGTH: 200,
     /** Accepted `importance` values */
     IMPORTANCE_VALUES: ['low', 'normal', 'high'],
+    /** Most steps (Graph `checklistItems`) one call may add to a task (#835) */
+    STEPS_MAX_PER_CALL: 50,
     /**
      * Time zone written with a due date. To Do stores due *dates*; midnight
      * in UTC is what Microsoft's own samples send and reads back unchanged.
@@ -3628,6 +3708,13 @@ export const CLOUD_SYNC_CONSTANTS = {
      * register. We re-register on this interval so recovery is bounded.
      */
     REGISTER_INTERVAL_MS: 60_000,
+    /**
+     * Retry gaps (ms) after a failed queue registration: 30 s, 1 min, 2 min,
+     * 5 min, then the last value forever. Without a queue this machine
+     * receives no Cloud or Slack messages, so it never gives up — but it
+     * backs off so a relay that is refusing (quota, outage) is not hammered.
+     */
+    REGISTER_RETRY_BACKOFF_MS: [30_000, 60_000, 120_000, 300_000],
     /** Device considered offline after this threshold (ms) */
     OFFLINE_THRESHOLD_MS: 60_000,
     /** HTTP request timeout for sync API calls (ms) */
@@ -4370,6 +4457,25 @@ export const HARNESS_CONSTANTS = {
          * when the login is gone. No session file is written.
          */
         PROBE_ARGS: ['-p', 'Reply with the single word OK.', '--model', 'haiku', '--no-session-persistence', '--strict-mcp-config'],
+        /**
+         * More of the owner's own Claude Code accounts on this machine, each
+         * with its own config dir (`CLAUDE_CONFIG_DIR`) and login, used as
+         * runtime fallbacks (`claude-code@<name>`). Issue #942.
+         */
+        ACCOUNTS: {
+            /** Directory under CREWLY_HOME holding one config dir per account */
+            DIR: 'claude-accounts',
+            /** Separator of a fallback chain entry: `claude-code@work` */
+            TARGET_SEPARATOR: '@',
+            /** Account names: lower-case letters, digits, `-`, `_` */
+            NAME_PATTERN: /^[a-z0-9][a-z0-9_-]{0,31}$/,
+            /** Words that cannot be account names (they read as part of "claude code account …") */
+            RESERVED_NAMES: ['code', 'cli', 'account', 'accounts', 'default', 'claude'],
+            /** Claude's user settings file, copied from the default login when an account is created */
+            SETTINGS_FILE: 'settings.json',
+            /** `.claude.json` keys copied from the default login (the owner's own earlier answers) */
+            COPIED_CONFIG_KEYS: ['hasCompletedOnboarding', 'bypassPermissionsModeAccepted', 'theme'],
+        },
     },
     /** Codex CLI facts */
     CODEX: {
@@ -5322,4 +5428,93 @@ export const RUNTIME_FALLBACK_CONSTANTS = {
         'crewly-agent': 'Crewly Agent',
     },
 };
+/**
+ * Per-person access (issue #968, epic #967): the people directory, the person
+ * each agent turn acts for, and grant sharing. specs/per-person-access.md
+ */
+export const PEOPLE_CONSTANTS = {
+    /** People directory under CREWLY_HOME */
+    STORE_FILE: 'people.json',
+    /** Who each agent session acts for, under CREWLY_HOME */
+    ACTING_FOR_FILE: 'acting-for.json',
+    /** Person id of the instance owner — always this, whatever their Slack user id (stored and sent to Cloud) */
+    OWNER_ID: 'owner',
+    /** Env var naming the owner's Slack user id(s), comma-separated — for Slack credentials from env (no installer known) */
+    OWNER_SLACK_USER_ID_ENV: 'SLACK_OWNER_USER_ID',
+    /** Error code when Crewly Cloud is too old for per-person access (sharing endpoint missing) */
+    CLOUD_UPDATE_REQUIRED_CODE: 'cloud_update_required',
+    /** What the dashboard shows for that */
+    CLOUD_UPDATE_REQUIRED_MESSAGE: 'Requires a Cloud update',
+    /** Roles a person can have */
+    ROLES: ['owner', 'member', 'guest'],
+    /** Role a newly seen Slack user gets */
+    DEFAULT_ROLE: 'member',
+    /** Headers the backend sends Cloud with each credential request (never taken from an agent) */
+    ACTING_FOR_HEADER: 'X-Crewly-Acting-For',
+    ACTING_FOR_ROLE_HEADER: 'X-Crewly-Acting-For-Role',
+    /** Cloud's refusal code when the person may not use a grant */
+    NOT_PERMITTED_CODE: 'not_permitted',
+    /** What an agent is told to do with that refusal */
+    NOT_PERMITTED_HINT: 'Tell the person you are working for exactly this, in one line. Do not retry, and do not use another account or connector to get around it.',
+    /** Grant sharing modes: only the person who authorized it, named people, or every member (not guests) */
+    SHARING_MODES: ['owner', 'people', 'members'],
+    /** Longest display name kept */
+    MAX_NAME_LENGTH: 80,
+    /** Slack user ids (`U…` / `W…`) */
+    SLACK_USER_ID_PATTERN: /^[UW][A-Z0-9]{2,30}$/,
+};
+/**
+ * Experiment cards (issue #986, epic #982): a hypothesis on an optimisation
+ * ticket, measured automatically at the end of its window. specs/experiment-cards.md
+ */
+export const EXPERIMENT_CONSTANTS = {
+    /** Experiment store under CREWLY_HOME */
+    STORE_FILE: 'experiments.json',
+    /** Id prefix (EXP-1, EXP-2, …) */
+    ID_PREFIX: 'EXP-',
+    /** Default observation window; whole weeks keep weekdays balanced */
+    DEFAULT_WINDOW_DAYS: 14,
+    /** Shortest / longest window accepted */
+    MIN_WINDOW_DAYS: 7,
+    MAX_WINDOW_DAYS: 90,
+    /** Days a source's numbers take to settle (Search Console 2-3, GA4 1-2) */
+    SOURCE_LAG_DAYS: { gsc: 3, ga4: 2 },
+    /** Measures each source offers (the seo-ops `metric` command) */
+    SOURCE_MEASURES: {
+        gsc: ['clicks', 'impressions', 'ctr', 'position'],
+        ga4: ['sessions', 'events'],
+    },
+    /** Measures where lower is better (default direction "decrease") */
+    LOWER_IS_BETTER: ['position'],
+    /** Fewest events (baseline + result) before a count verdict is more than "inconclusive" */
+    MIN_COUNT_VOLUME: { clicks: 30, impressions: 200, sessions: 30, events: 10 },
+    /** CTR / position: impressions needed in each window */
+    MIN_IMPRESSIONS_PER_WINDOW: 200,
+    /** CTR: clicks needed across both windows */
+    MIN_CTR_CLICKS: 10,
+    /** Position: days with impressions needed in each window */
+    MIN_POSITION_DAYS: 7,
+    /** |z| (or Welch t) at or above this is a real change (~95% two-sided) */
+    SIGNIFICANCE_Z: 1.96,
+    /** Confidence recorded on the agent's prediction when none is given */
+    DEFAULT_CONFIDENCE: 0.6,
+    /** Scheduler tick */
+    TICK_INTERVAL_MS: 15 * 60 * 1000,
+    /** Failed fetches before the owner is told a measurement is stuck */
+    MAX_FETCH_ATTEMPTS: 6,
+    /** seo-ops script, relative to the package root */
+    SEO_OPS_SCRIPT: 'config/skills/agent/marketplace/seo-ops/seo_ops.py',
+    /** Python used to run it */
+    PYTHON_BIN: 'python3',
+    /** seo-ops metric timeout */
+    FETCH_TIMEOUT_MS: 120_000,
+    /** Wiki page (append-only log) results are written to, inside the vault */
+    WIKI_LOG_PATH: 'llm-curated/experiments/log.md',
+    /** Timeline entries kept per experiment */
+    MAX_TIMELINE: 200,
+    /** Longest hypothesis / title kept */
+    MAX_TEXT_LENGTH: 1000,
+    /** Kill switch for the scheduler */
+    ENV_SWITCH: 'CREWLY_EXPERIMENTS',
+};
 //# sourceMappingURL=constants.js.map