crewly 1.20.280 → 1.20.282

package/config/skills/agent/core/receive-file/execute.test.sh

@@ -0,0 +1,80 @@
+#!/bin/bash
+# Tests for receive-file — run with: bash execute.test.sh
+# A Python stub plays both the Crewly backend and the object storage.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1"; echo "  want: $3"; echo "  got:  $2"; fi; }
+
+PORT=18862
+STUB_LOG="$(mktemp)"; export STUB_LOG STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+OK = 'hf_AbCdEfGhIjKlMnOpQrStUv'; SHORT = 'hf_ShortShortShortShortSh'; PEND = 'hf_PendPendPendPendPendPe'
+DATA = b'x' * 2000000
+def note(**kw):
+    with open(LOG, 'a') as f: f.write(json.dumps(kw) + '\n')
+class H(BaseHTTPRequestHandler):
+    def send(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers(); self.wfile.write(json.dumps(obj).encode())
+    def do_GET(self):
+        if self.path.startswith('/store/'):
+            data = DATA[:1000] if 'short' in self.path else DATA
+            note(op='download', range=self.headers.get('Range'))
+            self.send_response(200); self.send_header('Content-Length', str(len(data))); self.end_headers(); self.wfile.write(data); return
+        hid = self.path.rsplit('/', 1)[-1]
+        if hid == PEND:
+            return self.send(200, {'success': True, 'data': {'handoffId': hid, 'status': 'pending', 'sizeBytes': 5, 'fileName': 'a'}})
+        if hid in (OK, SHORT):
+            return self.send(200, {'success': True, 'data': {'handoffId': hid, 'status': 'ready', 'sizeBytes': len(DATA), 'fileName': '../../evil name.mp4', 'note': 'today',
+                'download': {'url': f'http://127.0.0.1:{PORT}/store/' + ('short' if hid == SHORT else 'ok'), 'expiresAt': 'x'}}})
+        self.send(404, {'success': False, 'error': 'not_found', 'message': 'This handoff is gone.'})
+    def do_POST(self):
+        note(op='ack' if self.path.endswith('/ack') else 'other', path=self.path, session=self.headers.get('X-Agent-Session')); self.send(200, {'success': True, 'data': {'deleted': True}})
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+WORK="$(cd "$(mktemp -d)" && pwd -P)"
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -rf "$STUB_LOG" "$WORK"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+mkdir -p "$WORK/home/.crewly" "$WORK/proj"
+ENVS=(CREWLY_API_URL="http://127.0.0.1:${PORT}" CREWLY_SESSION_NAME=dev-mia HOME="$WORK/home" CREWLY_HOME="$WORK/home/.crewly" CREWLY_PROJECT_PATH="$WORK/proj")
+run() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OK=hf_AbCdEfGhIjKlMnOpQrStUv
+OUT=$(run --id $OK)
+DEST="$WORK/proj/received/evil name.mp4"
+check "result" "$(printf '%s' "$OUT" | jq -c '{success, fileName, sizeBytes, acked, note}')" '{"success":true,"fileName":"evil name.mp4","sizeBytes":2000000,"acked":true,"note":"today"}'
+check "saved in the default folder under a safe name" "$(wc -c < "$DEST" | tr -d ' ')" "2000000"
+check "ack sent as this agent" "$(grep '"op": "ack"' "$STUB_LOG" | jq -c '{path, session}')" '{"path":"/api/apps/handoffs/hf_AbCdEfGhIjKlMnOpQrStUv/ack","session":"dev-mia"}'
+check "no .part left" "$(ls -a "$WORK/proj/received" | grep -c part)" "0"
+
+OUT=$(run --id $OK --dir "$WORK/proj/inbox")
+check "second copy goes to --dir" "$(printf '%s' "$OUT" | jq -r .path)" "$WORK/proj/inbox/evil name.mp4"
+run --id $OK >/dev/null
+check "never overwrites" "$(ls "$WORK/proj/received" | sort | tr '\n' '|')" "evil name-1.mp4|evil name.mp4|"
+
+: > "$STUB_LOG"
+OUT=$(run --id $OK --no-ack --dir "$WORK/proj/noack")
+check "--no-ack keeps the server copy" "$(printf '%s' "$OUT" | jq -c '{acked, warning: (.warning != null)}')" '{"acked":false,"warning":true}'
+check "no ack request" "$(grep -c '"op": "ack"' "$STUB_LOG")" "0"
+
+: > "$STUB_LOG"
+OUT=$(run --id hf_ShortShortShortShortSh --dir "$WORK/proj/short"; true)
+check "size mismatch fails, removes the partial and does not ack" "$(printf '%s' "$OUT" | jq -r .reason)|$(ls -A "$WORK/proj/short" | wc -l | tr -d ' ')|$(grep -c '"op": "ack"' "$STUB_LOG")" "size_mismatch|0|0"
+
+OUT=$(run --id hf_PendPendPendPendPendPe; true)
+check "pending handoff is not ready" "$(printf '%s' "$OUT" | jq -r .reason)" "not_ready"
+OUT=$(run --id hf_GoneGoneGoneGoneGoneGo; true)
+check "unknown handoff passes Cloud's reason" "$(printf '%s' "$OUT" | jq -r .reason)" "not_found"
+check "bad id refused" "$(run_err --id nope | grep -c 'handoff id')" "1"
+check "dir inside Crewly home refused" "$(run_err --id $OK --dir "$WORK/home/.crewly/x" | grep -c 'Crewly home')" "1"
+
+echo "receive-file: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/send-file/SKILL.md

@@ -0,0 +1,62 @@
+---
+name: Send File
+description: Hand a LARGE file (video, archive, dataset, up to 2 GB) to another agent of the same Crewly account, on this or another machine, through a temporary Crewly Cloud relay. Prefer this over Drive or Slack for anything bigger than a few MB. The receiver deletes it with receive-file; unclaimed files are deleted after 24 hours.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - "*"
+triggers:
+  - send file
+  - send a large file
+  - hand off a file
+  - pass the video to
+  - transfer file to agent
+  - share a big file
+tags:
+  - files
+  - handoff
+  - transfer
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 3600000
+---
+
+# Send File
+
+Passes one big file to another agent of **your own Crewly account**
+(same machine or another one) without Slack or Drive. Needs the machine to be
+signed in to Crewly Cloud. The file is streamed from disk (never loaded into
+memory), kept on a temporary server, and deleted as soon as the receiver
+acknowledges it, or after 24 hours.
+
+```bash
+bash execute.sh --path ./out/daily-2026-10-09.mp4 --note "today's cut, 300 MB" --to Mia
+```
+
+Prints:
+
+```json
+{"success":true,"handoffId":"hf_…","fileName":"daily-2026-10-09.mp4","sizeBytes":314572800,"expiresAt":"…",
+ "instruction":"Receive it with the receive-file skill: bash <skills>/core/receive-file/execute.sh --id hf_… [--dir <folder>]"}
+```
+
+**Send the `instruction` line to the receiving agent** (use your normal
+agent-to-agent message), and tell it the handoff id. Do not post the id anywhere
+public.
+
+Options:
+
+- `--path` (required): a regular file inside your project directory (not a
+  symlink, not inside Crewly's home). Max 2 GB; the account may hold 5 GB of
+  waiting handoffs at once, so wait for receivers to finish before sending more.
+- `--name`: the name the receiver sees (default: the file's name).
+- `--note`: one line for the receiver. `--to`: who it is for (informational).
+- `--content-type`: default from the extension.
+
+Not for secrets or credentials. Not for files under ~5 MB that can go in a
+message. Cancel a handoff you no longer want received with
+`bash execute.sh --cancel hf_…`.

package/config/skills/agent/core/send-file/execute.sh

@@ -0,0 +1,145 @@
+#!/bin/bash
+# =============================================================================
+# send-file — hand a large file to another agent of the same Crewly account
+# through the Cloud file-handoff relay (crewly-services apps/SPEC.md section 18).
+#
+# The backend (POST /api/apps/handoffs) asks Cloud for a presigned upload URL;
+# this script then streams the file straight to object storage with curl -T
+# (from disk, never buffered), and confirms with /complete.
+#
+# Usage:
+#   bash execute.sh --path <file> [--name <name>] [--note <text>] [--to <agent>] [--content-type <type>]
+#   bash execute.sh --cancel <handoffId>
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --path <file> [--name <name>] [--note <text>] [--to <agent>] [--content-type <type>]
+  bash execute.sh --cancel <handoffId>
+
+Options:
+  --path          Regular file inside your project directory, up to 2 GB (required)
+  --name          Name the receiver sees (default: the file's name)
+  --note          One line for the receiver
+  --to            Who it is for (informational; any agent of the account can receive it)
+  --content-type  MIME type (default: from the extension)
+  --cancel        Withdraw a handoff you made (deletes the uploaded file)
+  --help | -h     Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, status: (.status // 0), reason: (.details.error // .error // "unknown"), message: (.details.message // .details // "")}' 2>/dev/null \
+    || jq -cn --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+content_type_for() {
+  case "$(printf '%s' "${1##*.}" | tr '[:upper:]' '[:lower:]')" in
+    mp4|m4v) echo video/mp4 ;;
+    mov) echo video/quicktime ;;
+    webm) echo video/webm ;;
+    mkv) echo video/x-matroska ;;
+    mp3) echo audio/mpeg ;;
+    wav) echo audio/wav ;;
+    m4a) echo audio/mp4 ;;
+    png) echo image/png ;;
+    jpg|jpeg) echo image/jpeg ;;
+    pdf) echo application/pdf ;;
+    zip) echo application/zip ;;
+    json) echo application/json ;;
+    csv) echo text/csv ;;
+    txt|md|log) echo text/plain ;;
+    *) echo application/octet-stream ;;
+  esac
+}
+
+# Regular, non-symlink file inside the project directory, never under Crewly's
+# home. Prints the real path, then the size in bytes.
+check_file() {
+  command -v node >/dev/null 2>&1 || error_exit "node is required"
+  CF_PATH="$1" CF_PROJECT="${CREWLY_PROJECT_PATH:-$PWD}" node <<'NODE'
+const fs = require('fs'); const path = require('path'); const os = require('os');
+const fail = (m) => { process.stderr.write(JSON.stringify({ error: m }) + '\n'); process.exit(1); };
+const real = (p) => { try { return fs.realpathSync(p); } catch { return null; } };
+const within = (c, p) => c === p || c.startsWith(p.endsWith(path.sep) ? p : p + path.sep);
+const given = process.env.CF_PATH;
+const abs = path.resolve(given);
+let st;
+try { st = fs.lstatSync(abs); } catch { fail(`file not found: ${given}`); }
+if (st.isSymbolicLink()) fail(`${given} is a symbolic link; pass the real file`);
+if (!st.isFile()) fail(`${given} is not a regular file`);
+if (st.size === 0) fail(`${given} is empty`);
+const r = real(abs); const project = real(process.env.CF_PROJECT || process.cwd());
+if (!project) fail('cannot resolve the project directory');
+const homes = [path.join(os.homedir(), '.crewly'), process.env.CREWLY_HOME].filter(Boolean).map((p) => real(p) || path.resolve(p));
+if (homes.some((h) => within(r, h))) fail(`${given} is inside Crewly's home directory`);
+if (!within(r, project)) fail(`${given} is outside your project directory (${project}); copy it there first`);
+process.stdout.write(r + '\n' + st.size + '\n');
+NODE
+}
+
+FILE=""; NAME=""; NOTE=""; TO=""; CTYPE=""; CANCEL=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --path)         [ $# -ge 2 ] || error_exit "--path requires a value"; FILE="$2"; shift 2 ;;
+    --name)         [ $# -ge 2 ] || error_exit "--name requires a value"; NAME="$2"; shift 2 ;;
+    --note)         [ $# -ge 2 ] || error_exit "--note requires a value"; NOTE="$2"; shift 2 ;;
+    --to)           [ $# -ge 2 ] || error_exit "--to requires a value"; TO="$2"; shift 2 ;;
+    --content-type) [ $# -ge 2 ] || error_exit "--content-type requires a value"; CTYPE="$2"; shift 2 ;;
+    --cancel)       [ $# -ge 2 ] || error_exit "--cancel requires a handoff id"; CANCEL="$2"; shift 2 ;;
+    --help|-h)      print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+
+if [ -n "$CANCEL" ]; then
+  [[ "$CANCEL" =~ ^hf_[A-Za-z0-9_-]{22}$ ]] || error_exit "--cancel needs a handoff id like hf_…"
+  RESULT=$(call DELETE "/apps/handoffs/${CANCEL}") || { printf '%s\n' "$RESULT"; exit 1; }
+  jq -cn --arg id "$CANCEL" '{success: true, handoffId: $id, cancelled: true}'
+  exit 0
+fi
+
+[ -n "$FILE" ] || error_exit "--path is required"
+INFO=$(check_file "$FILE") || { printf '%s\n' "$INFO" >&2; exit 1; }
+REAL=$(printf '%s\n' "$INFO" | sed -n 1p)
+SIZE=$(printf '%s\n' "$INFO" | sed -n 2p)
+[ -n "$NAME" ] || NAME="$(basename "$REAL")"
+[ -n "$CTYPE" ] || CTYPE="$(content_type_for "$REAL")"
+
+BODY=$(jq -cn --arg n "$NAME" --argjson s "$SIZE" --arg c "$CTYPE" --arg note "$NOTE" --arg to "$TO" \
+  '{fileName: $n, sizeBytes: $s, contentType: $c} + (if $note != "" then {note: $note} else {} end) + (if $to != "" then {to: $to} else {} end)')
+CREATED=$(call POST "/apps/handoffs" "$BODY") || { printf '%s\n' "$CREATED"; exit 1; }
+ID=$(printf '%s' "$CREATED" | jq -r '.data.handoffId // empty')
+URL=$(printf '%s' "$CREATED" | jq -r '.data.upload.url // empty')
+[ -n "$ID" ] && [ -n "$URL" ] || error_exit "Cloud answered without an upload URL"
+
+# Headers the presigned URL was signed with; the file streams from disk (-T).
+HDRS=()
+while IFS= read -r line; do HDRS+=(-H "$line"); done < <(printf '%s' "$CREATED" | jq -r '.data.upload.headers // {} | to_entries[] | "\(.key): \(.value)"')
+
+cancel_quietly() { api_call DELETE "/apps/handoffs/${ID}" >/dev/null 2>&1 || true; }
+
+CODE=$(curl -sS -o /dev/null -w '%{http_code}' --connect-timeout 30 --retry 3 --retry-delay 3 -X PUT -T "$REAL" ${HDRS[@]+"${HDRS[@]}"} "$URL" 2>/dev/null) || CODE="000"
+if [ "$CODE" != "200" ]; then
+  cancel_quietly
+  jq -cn --arg c "$CODE" '{success: false, reason: "upload_failed", message: ("The upload to temporary storage failed (HTTP " + $c + "). Nothing was kept; try again.")}'
+  exit 1
+fi
+
+DONE=$(api_call POST "/apps/handoffs/${ID}/complete" 2>&1) || { cancel_quietly; fail_from "$(printf '%s\n' "$DONE" | tail -n 1)"; }
+EXPIRES=$(printf '%s\n' "$DONE" | tail -n 1 | jq -r '.data.expiresAt // empty')
+
+jq -cn --arg id "$ID" --arg n "$NAME" --argjson s "$SIZE" --arg e "$EXPIRES" \
+  '{success: true, handoffId: $id, fileName: $n, sizeBytes: $s, expiresAt: $e,
+    instruction: ("Receive it with the receive-file skill: bash <skills>/core/receive-file/execute.sh --id " + $id + " [--dir <folder>]")}'

package/config/skills/agent/core/send-file/execute.test.sh

@@ -0,0 +1,81 @@
+#!/bin/bash
+# Tests for send-file — run with: bash execute.test.sh
+# A Python stub plays both the Crewly backend and the object storage.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1"; echo "  want: $3"; echo "  got:  $2"; fi; }
+
+PORT=18861
+STUB_LOG="$(mktemp)"; STORE="$(mktemp)"; export STUB_LOG STORE STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; STORE = os.environ['STORE']; PORT = int(os.environ['STUB_PORT'])
+ID = 'hf_AbCdEfGhIjKlMnOpQrStUv'
+def note(**kw):
+    with open(LOG, 'a') as f: f.write(json.dumps(kw) + '\n')
+class H(BaseHTTPRequestHandler):
+    def send(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers(); self.wfile.write(json.dumps(obj).encode())
+    def body(self):
+        n = int(self.headers.get('Content-Length') or 0); return self.rfile.read(n)
+    def do_POST(self):
+        b = self.body()
+        if self.path == '/api/apps/handoffs':
+            req = json.loads(b); note(op='create', req=req, session=self.headers.get('X-Agent-Session'))
+            if req['fileName'] == 'refuse.bin':
+                return self.send(402, {'success': False, 'error': 'quota_exceeded', 'message': 'Too many bytes waiting.'})
+            return self.send(201, {'success': True, 'data': {'handoffId': ID, 'status': 'pending', 'upload': {'url': f'http://127.0.0.1:{PORT}/store/obj', 'method': 'PUT', 'headers': {'Content-Type': req['contentType'], 'x-amz-server-side-encryption': 'AES256'}}}})
+        if self.path == f'/api/apps/handoffs/{ID}/complete':
+            note(op='complete'); return self.send(200, {'success': True, 'data': {'handoffId': ID, 'status': 'ready', 'expiresAt': '2026-10-10T00:00:00.000Z'}})
+        self.send(404, {'success': False})
+    def do_DELETE(self):
+        note(op='cancel', path=self.path); self.send(200, {'success': True, 'data': {'deleted': True}})
+    def do_PUT(self):
+        b = self.body()
+        note(op='put', bytes=len(b), ctype=self.headers.get('Content-Type'), sse=self.headers.get('x-amz-server-side-encryption'))
+        self.send_response(500 if os.path.exists(STORE + '.fail') else 200); self.end_headers()
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+WORK="$(mktemp -d)"
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -rf "$STUB_LOG" "$STORE" "$STORE.fail" "$WORK"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+mkdir -p "$WORK/home/.crewly" "$WORK/proj"
+ENVS=(CREWLY_API_URL="http://127.0.0.1:${PORT}" CREWLY_SESSION_NAME=dev-ella HOME="$WORK/home" CREWLY_HOME="$WORK/home/.crewly" CREWLY_PROJECT_PATH="$WORK/proj")
+run() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+head -c 3000000 /dev/zero > "$WORK/proj/daily.mp4"
+OUT=$(run --path "$WORK/proj/daily.mp4" --note "today" --to Mia)
+check "result" "$(printf '%s' "$OUT" | jq -c '{success, handoffId, fileName, sizeBytes, expiresAt}')" '{"success":true,"handoffId":"hf_AbCdEfGhIjKlMnOpQrStUv","fileName":"daily.mp4","sizeBytes":3000000,"expiresAt":"2026-10-10T00:00:00.000Z"}'
+check "instruction names the receiver skill" "$(printf '%s' "$OUT" | jq -r '.instruction' | grep -c 'receive-file/execute.sh --id hf_AbCdEfGhIjKlMnOpQrStUv')" "1"
+check "create request" "$(sed -n 1p "$STUB_LOG" | jq -c '{req, session}')" '{"req":{"fileName":"daily.mp4","sizeBytes":3000000,"contentType":"video/mp4","note":"today","to":"Mia"},"session":"dev-ella"}'
+check "upload streamed with signed headers" "$(sed -n 2p "$STUB_LOG" | jq -c '{bytes, ctype, sse}')" '{"bytes":3000000,"ctype":"video/mp4","sse":"AES256"}'
+check "complete called" "$(sed -n 3p "$STUB_LOG" | jq -r .op)" "complete"
+
+: > "$STUB_LOG"
+OUT=$(run --path "$WORK/proj/daily.mp4" --name "refuse.bin"; true)
+check "cloud refusal passed through" "$(printf '%s' "$OUT" | jq -c '{success, reason}')" '{"success":false,"reason":"quota_exceeded"}'
+
+: > "$STUB_LOG"; touch "$STORE.fail"
+OUT=$(run --path "$WORK/proj/daily.mp4"; true)
+check "failed upload reports and cancels" "$(printf '%s' "$OUT" | jq -r .reason)" "upload_failed"
+check "cancel issued" "$(grep -c '"op": "cancel"' "$STUB_LOG")" "1"
+rm -f "$STORE.fail"
+
+echo secret > "$WORK/outside.txt"; ln -s "$WORK/proj/daily.mp4" "$WORK/proj/link.mp4"
+check "outside project refused" "$(run_err --path "$WORK/outside.txt" | grep -c 'outside your project directory')" "1"
+check "symlink refused" "$(run_err --path "$WORK/proj/link.mp4" | grep -c 'symbolic link')" "1"
+check "missing file refused" "$(run_err --path "$WORK/proj/nope" | grep -c 'file not found')" "1"
+check "path required" "$(run_err | grep -c -- '--path is required')" "1"
+: > "$STUB_LOG"
+run --cancel hf_AbCdEfGhIjKlMnOpQrStUv >/dev/null
+check "cancel" "$(jq -r .path "$STUB_LOG")" "/api/apps/handoffs/hf_AbCdEfGhIjKlMnOpQrStUv"
+
+echo "send-file: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/dist/backend/backend/src/constants.d.ts

@@ -1016,12 +1016,29 @@ export declare const CONTROL_PLANE_GUARD_CONSTANTS: {
     /** Files under CREWLY_HOME that agents must not read with the built-in tools either. */
     readonly CREWLY_HOME_READ_DENIED_FILES: readonly ["api-token"];
     /** Write-protected directories under the install root (whole subtree). */
-    readonly INSTALL_DIRS: readonly ["config/skills/orchestrator/stop-agent", "config/skills/orchestrator/start-agent", "config/skills/orchestrator/terminate-agent", "config/skills/orchestrator/stop-team", "config/skills/orchestrator/start-team", "config/skills/orchestrator/restart-crewly", "config/hooks/control-plane-guard", "config/hooks/agent-status", "config/hooks/subagent-guard", "config/hooks/credential-guard", "dist"];
+    readonly INSTALL_DIRS: readonly ["config/skills/orchestrator/stop-agent", "config/skills/orchestrator/start-agent", "config/skills/orchestrator/terminate-agent", "config/skills/orchestrator/stop-team", "config/skills/orchestrator/start-team", "config/skills/orchestrator/restart-crewly", "config/hooks/control-plane-guard", "config/hooks/agent-status", "config/hooks/subagent-guard", "config/hooks/credential-guard", "config/hooks/live-checkout-guard", "dist"];
     /** Write-protected files under the install root. */
     readonly INSTALL_FILES: readonly ["config/skills/_common/lib.sh"];
     /** Write-protected directories under the agent's project path (whole subtree). */
     readonly PROJECT_DIRS: readonly [".claude/agents", ".crewly/triggers"];
 };
+/**
+ * Live-checkout guard: agents may not change the checkout the running Crewly
+ * is built from (git state changes or file edits). Incident 2026-10-08/09: an
+ * agent switched branches in it and the next restart refused to start.
+ */
+export declare const LIVE_CHECKOUT_GUARD_CONSTANTS: {
+    /** Backend env var; `0` turns the guard off for sessions launched by this backend. */
+    readonly KILL_SWITCH_ENV: "CREWLY_LIVE_CHECKOUT_GUARD";
+    /** Value of KILL_SWITCH_ENV that disables the guard. */
+    readonly KILL_SWITCH_OFF_VALUE: "0";
+    /** The hook script (node), relative to the install root. */
+    readonly HOOK_SCRIPT: "config/hooks/live-checkout-guard/guard.mjs";
+    /** Claude Code tools the hook is attached to. */
+    readonly CLAUDE_MATCHER: "Bash|Edit|Write|MultiEdit|NotebookEdit";
+    /** Codex tools the hook is attached to (shell, plus its patch tool). */
+    readonly CODEX_MATCHER: "Bash|apply_patch|Edit|Write";
+};
 /**
  * Credential guard (specs/2026-10-04-agent-credential-isolation.md, layer 2):
  * a pre-tool hook, on every runtime that has one, that refuses an agent's
@@ -7357,6 +7374,18 @@ export declare const REMOTE_MCP_CONSTANTS: {
     readonly MAX_TOOL_NAMES: 50;
     /** Catalog presets the add form offers. */
     readonly PROVIDERS: readonly string[];
+    /**
+     * Tools an AGENT may never call through the proxy, per server kind (the
+     * server's provider, or its id when it has none). Compared after
+     * trim + NFKC + lower-casing, so case and width tricks do not bypass it.
+     * Zoho has no draft tool: a draft is a mode of sendEmail, so one missing
+     * field sends mail. Mail is only ever drafted through the backend's
+     * draft-only path (CREW-400). resendVerification* mails an address a
+     * verification link; denied too since an agent has no reason to trigger it.
+     */
+    readonly DENIED_AGENT_TOOLS: Record<string, readonly string[]>;
+    /** Message an agent gets when it calls a denied tool. */
+    readonly DENIED_TOOL_MESSAGE: "sending mail is not allowed for agents; save a draft instead";
     /**
      * OAuth state (clients, tokens, pending sign-ins) under CREWLY_HOME:
      * AES-256-GCM with the install's master key, mode 0600.