crewly 1.20.290 → 1.20.292

package/config/domain-sops/expert-distillation.sop.md

@@ -1,70 +1,70 @@
-# SOP: Expert Mindset Distillation (名人思维蒸馏)
+# SOP: Expert Mindset Distillation
 
 **Version:** 1.0.0
 **Owner:** Product Team (Mia)
 **Scope:** Crewly Pro Core Methodology
 
-## 1. 目标 (Objective)
-本 SOP 旨在标准化「专家思维蒸馏」流程，将非结构化的名人/专家素材转化为 Crewly 可用的结构化 `Expert Profile` (MD + JSON)，从而为 Agent 提供高质量的思维注入。
+## 1. Objective
+This SOP standardizes the "expert mindset distillation" process: turning unstructured material from famous people and experts into a structured `Expert Profile` (MD + JSON) that Crewly can use, so Agents get high-quality mindset injection.
 
-## 2. 输入 (Inputs)
-- **Primary Source:** 专家著作 (PDF/EPUB)、公开访谈录音或转录稿 (Markdown/TXT)。
-- **Secondary Source:** 媒体分析文章、维基百科、YouTube 视频转录。
+## 2. Inputs
+- **Primary Source:** the expert's books (PDF/EPUB), public interview recordings or transcripts (Markdown/TXT).
+- **Secondary Source:** media analysis articles, Wikipedia, YouTube video transcripts.
 - **Tools:** 
-  - Teacher Model: Claude 3.5 Sonnet (首选) 或 GPT-4o。
-  - Crewly Distiller CLI: `crewly-pro distill`。
+  - Teacher Model: Claude 3.5 Sonnet (preferred) or GPT-4o.
+  - Crewly Distiller CLI: `crewly-pro distill`.
 
-## 3. 流程阶段 (Phases)
+## 3. Phases
 
-### Phase 1: 素材清洗 (Data Preprocessing)
-- **任务:** 过滤掉无关信息（广告、日常寒暄、重复片段）。
-- **标准:** 仅保留包含「决策逻辑」、「价值观」、「行业洞察」和「语言风格」的核心文本。
-- **输出:** 清洗后的文本文件 (`raw_distill_input.txt`)。
+### Phase 1: Data Preprocessing
+- **Task:** filter out irrelevant material (ads, small talk, repeated passages).
+- **Standard:** keep only the core text that contains "decision logic", "values", "industry insights" and "language style".
+- **Output:** the cleaned text file (`raw_distill_input.txt`).
 
-### Phase 2: 专家特征提取 (Mindset Extraction)
-- **任务:** 使用 Teacher Model 执行蒸馏提示词 (Distillation Prompt)。
+### Phase 2: Mindset Extraction
+- **Task:** run the Distillation Prompt with the Teacher Model.
 - **Prompt:**
   ```markdown
   # SYSTEM PROMPT: Expert Mindset Distiller
-  你是一名顶级的「思维建模专家」。你的目标是分析提供的专家素材，提取其底层的「思维软件」。
+  You are a top-tier "mindset modeling expert". Your goal is to analyze the provided expert material and extract the underlying "thinking software".
   
-  ## 提取维度:
-  1. **Mental Models (思维模型):** 专家常用的核心框架（如第一性原理、二八定律）。
-  2. **Decision Logic (决策逻辑):** 专家如何权衡风险、处理权衡、评估长短期利益。
-  3. **Industry Insights (行业洞察):** 专家对特定领域的独特「反直觉」见解。
-  4. **Communication Style (沟通风格):** 语气词、标志性短语、论证逻辑结构。
+  ## Dimensions to extract:
+  1. **Mental Models:** the core frameworks the expert uses often (e.g. first principles, the 80/20 rule).
+  2. **Decision Logic:** how the expert weighs risk, handles trade-offs, and evaluates short- vs long-term benefit.
+  3. **Industry Insights:** the expert's distinctive "counter-intuitive" views on a specific field.
+  4. **Communication Style:** filler words, signature phrases, the structure of their argumentation.
 
-  ## 约束:
-  - 必须使用分析性的、冷静的第三方视角描述，而非模仿其语气说话。
-  - 提取的思维模型必须具有「可操作性」，即 Agent 可以在执行任务时引用。
+  ## Constraints:
+  - Describe from an analytical, calm third-person perspective; do not imitate their tone of voice.
+  - The extracted mental models must be "actionable", i.e. an Agent can cite them while executing tasks.
   ```
-- **输出:** 专家思维草稿 (`{expert-id}-draft.md`)。
+- **Output:** the expert mindset draft (`{expert-id}-draft.md`).
 
-### Phase 3: 格式化与 JSON 元数据生成 (Synthesis)
-- **任务:** 将草稿整理为标准 Markdown 格式，并生成元数据 JSON。
-- **JSON 规范:** 参考 `config/experts/EXAMPLE.json`。
-- **MD 规范:** 参考 `config/experts/EXAMPLE.md`。
+### Phase 3: Formatting and JSON Metadata (Synthesis)
+- **Task:** turn the draft into standard Markdown and generate the metadata JSON.
+- **JSON spec:** see `config/experts/EXAMPLE.json`.
+- **MD spec:** see `config/experts/EXAMPLE.md`.
 
-### Phase 4: OSS/Pro 边界处理 (Security & Packaging)
-- **任务:** 根据分发渠道进行打包。
+### Phase 4: OSS/Pro Boundary (Security & Packaging)
+- **Task:** package according to the distribution channel.
 - **OSS:**
-  - 仅包含 MD 文件。
-  - 存储于 `config/experts/`。
+  - MD file only.
+  - Stored in `config/experts/`.
 - **Pro:**
-  - 包含 MD + JSON。
-  - 包含预设的 `intensity` 值。
-  - 存储于 `crewly-pro/data/experts/`。
-  - 必须通过 `LicenseValidator` 检查。
+  - MD + JSON.
+  - Includes a preset `intensity` value.
+  - Stored in `crewly-pro/data/experts/`.
+  - Must pass the `LicenseValidator` check.
 
-### Phase 5: 质量审核 (Quality Gates)
-- **Round 1 (Self):** 蒸馏者检查逻辑是否自洽。
-- **Round 2 (Peer):** 另一名 PM 或专家审核提取的模型是否抓住了本质。
-- **Round 3 (Test):** 将 Profile 注入 Agent，进行 3 个标准任务的 Prompt 压力测试。
+### Phase 5: Quality Gates
+- **Round 1 (Self):** the distiller checks that the logic is self-consistent.
+- **Round 2 (Peer):** another PM or expert reviews whether the extracted models capture the essence.
+- **Round 3 (Test):** inject the Profile into an Agent and run a prompt stress test on 3 standard tasks.
 
-## 4. 交付物 (Outputs)
+## 4. Outputs
 - `config/experts/{id}.md`
 - `crewly-pro/data/experts/{id}.json` (Pro Only)
 
-## 5. 质量指标 (KPIs)
-- **Accuracy:** 蒸馏模型能准确预测专家在 80% 常见商业场景下的决策倾向。
-- **Utility:** Agent 使用该模板后，在特定领域的专业评分提升 ≥ 20%。
+## 5. KPIs
+- **Accuracy:** the distilled model accurately predicts the expert's decision tendencies in 80% of common business scenarios.
+- **Utility:** after an Agent uses the template, its professional rating in the specific domain improves by ≥ 20%.

package/config/skills/agent/core/calendar-create/SKILL.md

@@ -63,7 +63,7 @@ Missing `--summary` / `--start` / `--end` → `{"error":"Missing required parame
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/calendar-list/SKILL.md

@@ -59,7 +59,7 @@ when the owner has not connected Google Workspace.
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/docs-comment/SKILL.md

@@ -100,8 +100,10 @@ older connections do not include. When the output has
 `"reconnectLinkSent":true`, the harness has already sent the owner a one-tap
 reconnect card in Slack: tell them in one line what you will do once it is
 granted, and retry when you get `[GOOGLE] Google Drive reconnected — retry your
-comment.` Without it, run `google-connect --product drive --channel <chat-channel-id>` to
-post the card yourself. Do not paste a link yourself.
+comment.` The card's link does not expire. If the owner says it did not work (or
+there is no `reconnectLinkSent`), run `google-connect --product drive --resend` for a
+fresh card, or give them https://crewlyai.com/portal/integrations/google?products=drive&auto=1
+to open directly. Never send them to Crewly settings or the Connections page.
 
 `{"success":false,"reason":"not_connected","hint":"…"}` (exit 1): Google
 Drive is not connected. Use `google-connect --product drive` the same way.
@@ -115,7 +117,7 @@ wrong, or the account cannot see the document.
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh list --doc 1AbC… --account work@company.com

package/config/skills/agent/core/docs-read/SKILL.md

@@ -45,13 +45,15 @@ bash execute.sh --id "https://docs.google.com/document/d/1AbC…/edit"
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/docs-write/SKILL.md

@@ -50,13 +50,15 @@ re-connect Google Workspace once the scope is enabled".
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/drive-read/SKILL.md

@@ -39,13 +39,15 @@ Files over 10 MB are refused with a `webViewLink` to open instead.
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/drive-search/SKILL.md

@@ -41,13 +41,15 @@ else → `drive-read`.
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/drive-upload/SKILL.md

@@ -40,13 +40,15 @@ permissions are the owner's — this skill does not change sharing).
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/gmail-read/SKILL.md

@@ -62,7 +62,7 @@ with a 404 message when the id is unknown.
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/gmail-search/SKILL.md

@@ -33,7 +33,7 @@ execution:
 # Gmail Search
 
 Runs a Gmail search on the owner's mailbox and prints the hits. Uses the
-Google Workspace connection the owner made under Settings → Integrations;
+Google Workspace connection the owner made in Crewly;
 the mail content goes straight from Google to this instance.
 
 ```bash
@@ -60,12 +60,13 @@ Use the `id` with `gmail-read` to get the body; `threadId` + `gmail-read`'s
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` — the
-owner has not connected Google Workspace yet; hand them the hint URL (or
-point them to Settings → Integrations → Google Workspace). Exit code 1.
+owner has not connected Google Workspace yet; run the `google-connect` skill so
+they get a one-tap card in Slack (manual fallback: https://crewlyai.com/portal/integrations/google; never
+Crewly settings or the Connections page). Exit code 1.
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/gmail-send/SKILL.md

@@ -103,13 +103,13 @@ There is no output shape in which you have sent an email.
 Missing `--to` / `--subject` / body → `{"error":"Missing required parameter: …"}` on stderr, exit 1, nothing sent.
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1) when the owner has not connected Google Workspace.
 
-`{"success":false,"reason":"reauth_required","hint":"A reconnect link was sent to the owner in Slack. …","reconnectLinkSent":true}` (exit 1): the Gmail connection cannot save drafts yet (connections made before 2026-10-08 lack that permission). The harness has already sent the owner a one-tap reconnect card in Slack. Tell them in one line that you need them to tap it — do not ask them to open Connections, and do not paste a link. When it is done you get `[GOOGLE] Gmail reconnected — retry your draft.`; run the same command again.
+`{"success":false,"reason":"reauth_required","hint":"A reconnect link was sent to the owner in Slack. …","reconnectLinkSent":true}` (exit 1): the Gmail connection cannot save drafts yet (connections made before 2026-10-08 lack that permission). The harness has already sent the owner a one-tap reconnect card in Slack. Tell them in one line that you need them to tap it — do not send them to Crewly settings or Connections. The card's link does not expire; if they say it failed, run the `google-connect` skill for a fresh one, or give them https://crewlyai.com/portal/integrations/google. When it is done you get `[GOOGLE] Gmail reconnected — retry your draft.`; run the same command again.
 
 `{"success":false,"reason":"not_connected",…,"reconnectLinkSent":true}` (exit 1): Gmail access expired or was revoked. Same as above: the owner already has the card; wait for `[GOOGLE] Gmail reconnected …` and retry.
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/google-connect/SKILL.md

@@ -23,22 +23,25 @@ execution:
 
 # Google Connect
 
-When a Google skill answers `not_connected`, the owner has not granted that
-product yet. Do **not** improvise an authorization link: the one this
-instance can build carries a Cloud session token, and posting it into a
-channel publishes a credential. It also expires within the hour, so the link
-you paste is usually dead by the time anyone clicks it.
-
-Run this instead. It posts a card with an **Add** button that only the
-person who asked can see, backed by a single-use link.
+When a Google skill answers `not_connected` or `reauth_required`, the owner has
+to grant (or re-grant) a product. Do **not** improvise an authorization link:
+never build one by hand and never paste one. Run this instead. It posts a card
+with a button that only the person who asked can see; the button opens the
+Crewly portal's Google page, so the link carries no credential and **never
+expires**. The owner can tap it hours later, from a phone.
 
 ```bash
-bash execute.sh --product gmail --channel <chat-channel-id>
+bash execute.sh --product gmail [--channel <chat-channel-id>] [--account me@example.com]
 ```
 
-`--channel` is the id in the `[CHAT:…]` header of the message you are
-answering.
+- `--channel` is the id in the `[CHAT:…]` or `[SLACK-THREAD:…]` header of the
+  message you are answering. It is optional: without it, or if it cannot be
+  resolved, the card goes where you are working with the owner, else their DM.
+- Every call posts a fresh card. If the owner says the last card did not work,
+  run it again (`--resend` is accepted to make that intent explicit).
+- Never tell the owner to open Crewly settings or the Connections page — they
+  are usually on a phone and cannot reach it. If they cannot find the card, the
+  manual fallback is https://crewlyai.com/portal/integrations/google
 
-After running it, say in one line that you have asked for access and what
-you will do once it is granted. Do not repeat the link — there is no link
-to repeat.
+After running it, say in one line that you have asked for access and what you
+will do once it is granted. Do not repeat a link.

package/config/skills/agent/core/google-connect/execute.sh

@@ -3,11 +3,11 @@
 # google-connect — Ask the owner to authorize a Google product, in Slack
 #
 # Backed by POST /api/google/connect-card, which posts a Block Kit card whose
-# button carries a single-use ticket. Never build an authorization link by
-# hand: the one this instance can build embeds the Cloud session token.
+# button opens the Cloud portal's Google page (no token in the link, and it
+# never expires). Never build an authorization link by hand.
 #
 # Usage:
-#   bash execute.sh --product gmail --channel chat-abc123
+#   bash execute.sh --product gmail [--channel chat-abc123] [--account me@x.com] [--resend]
 # =============================================================================
 set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -16,32 +16,49 @@ source "${SCRIPT_DIR}/../../_common/lib.sh"
 print_usage() {
   cat <<'EOF_USAGE'
 Usage:
-  bash execute.sh --product <gmail|calendar|drive> --channel <chat-channel-id>
+  bash execute.sh --product <gmail|calendar|drive> [--channel <id>] [--account <email>] [--resend]
 
 Options:
   --product   Which Google product needs access (required)
-  --channel   The chat channel you are answering in — the id in [CHAT:…] (required)
+  --channel   The id in the [CHAT:...] / [SLACK-THREAD:...] header of the message you are
+              answering. Optional: without it (or if it cannot be resolved) the card goes
+              where you are working, else the owner's DM.
+  --account   Google account to reconnect, when it matters
+  --resend    The owner said the last card did not work; every call posts a fresh card
+              (accepted for clarity, the flag changes nothing)
 EOF_USAGE
 }
 
 PRODUCT=""
 CHANNEL=""
+ACCOUNT=""
 while [ $# -gt 0 ]; do
   case "$1" in
     --product) PRODUCT="${2:-}"; shift 2 ;;
     --channel) CHANNEL="${2:-}"; shift 2 ;;
+    --account) ACCOUNT="${2:-}"; shift 2 ;;
+    --resend) shift ;;
     -h|--help) print_usage; exit 0 ;;
     *) echo "Unknown option: $1" >&2; print_usage >&2; exit 2 ;;
   esac
 done
 
-if [ -z "$PRODUCT" ] || [ -z "$CHANNEL" ]; then
-  echo "Both --product and --channel are required." >&2
+if [ -z "$PRODUCT" ]; then
+  echo "--product is required." >&2
   print_usage >&2
   exit 2
 fi
 
-BODY=$(printf '{"product":"%s","channelId":"%s"}' "$PRODUCT" "$CHANNEL")
+# Values go into JSON by hand (no jq dependency): refuse anything that could break out.
+for v in "$PRODUCT" "$CHANNEL" "$ACCOUNT"; do
+  case "$v" in
+    *[\"\\]*|*$'\n'*) echo "Arguments must not contain quotes, backslashes or newlines." >&2; exit 2 ;;
+  esac
+done
+BODY=$(printf '{"product":"%s"' "$PRODUCT")
+[ -n "$CHANNEL" ] && BODY="${BODY},$(printf '"channelId":"%s"' "$CHANNEL")"
+[ -n "$ACCOUNT" ] && BODY="${BODY},$(printf '"account":"%s"' "$ACCOUNT")"
+BODY="${BODY}}"
 RESPONSE=$(api_call POST "/google/connect-card" "$BODY" 2>&1) || {
   echo "$RESPONSE" >&2
   exit 1

package/config/skills/agent/core/sheets-read/SKILL.md

@@ -48,13 +48,15 @@ come back as numbers, dates as the sheet's formatted string.
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/sheets-write/SKILL.md

@@ -51,13 +51,15 @@ the owner made outside Crewly needs the Sheets write scope (`403 google_error`).
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/slides-create/SKILL.md

@@ -56,13 +56,15 @@ For designed decks (brand templates, images, video) use the Canva skills.
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/config/skills/agent/core/slides-read/SKILL.md

@@ -44,13 +44,15 @@ bash execute.sh --id 1AbC…
 ## Failures
 
 `{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
-when the owner has not connected Google Workspace (Settings → Integrations).
+when the owner has not connected Google Workspace. Run the `google-connect` skill
+to post the owner a one-tap card in Slack (never send them to Crewly settings or
+the Connections page — they are usually on a phone). Manual fallback: https://crewlyai.com/portal/integrations/google.
 A `403` with `reason: "google_error"` on a write means the file was not
 created by Crewly — the grant only edits files Crewly made (`drive.file`).
 
 ## Choosing a Google account
 
-Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever you marked default on the Connections page). Name one explicitly when it matters:
+Several Google accounts can be connected at once. Without `--account` the call uses the default one (the first you connected, or whichever the owner marked default). Name one explicitly when it matters:
 
 ```bash
 bash execute.sh --account work@company.com ...

package/dist/backend/backend/src/constants.d.ts

@@ -4717,12 +4717,21 @@ export declare const GOOGLE_WORKSPACE_CONSTANTS: {
      * for want of a scope, or because the grant expired / was revoked.
      */
     readonly REAUTH: {
-        /** At most one card per product + Google account in this window (ms) */
-        readonly CARD_THROTTLE_MS: number;
-        /** How often to check whether the owner reconnected (ms) */
+        /**
+         * A card that went out less than this long ago is not repeated for the
+         * same product + Google account (concurrent failures share one card);
+         * after it, a new failure posts a fresh card unless the owner has
+         * reconnected (ms)
+         */
+        readonly CARD_RESEND_AFTER_MS: number;
+        /** First wait between looks at Cloud for the reconnect (ms) */
         readonly POLL_INTERVAL_MS: 30000;
-        /** Keep checking this long after the card's link expires (consent may still be finishing) (ms) */
-        readonly POLL_GRACE_MS: number;
+        /** The wait grows by this factor after each look... */
+        readonly POLL_BACKOFF_FACTOR: 1.5;
+        /** ...up to this ceiling (ms) */
+        readonly POLL_MAX_INTERVAL_MS: number;
+        /** The card link never expires, so keep watching for the reconnect this long (ms) */
+        readonly WATCH_MS: number;
         /** Give up posting the card after this long, so the skill call is not held (ms) */
         readonly POST_TIMEOUT_MS: 8000;
     };
@@ -4738,6 +4747,12 @@ export declare const GOOGLE_WORKSPACE_CONSTANTS: {
     readonly SLIDES_MAX_SLIDES: 60;
     /** Dashboard path the Cloud consent flow returns to */
     readonly SETTINGS_RETURN_PATH: "/connections?platform=google-workspace";
+    /**
+     * Cloud portal page that starts Google consent. It mints the consent
+     * ticket when the owner opens it, so a link to it never expires and
+     * carries no credential. Query: `products=<csv>&account=<email>&auto=1`.
+     */
+    readonly PORTAL_CONNECT_PATH: "/portal/integrations/google";
     /** Metadata headers requested on Gmail search hits */
     readonly GMAIL_SEARCH_HEADERS: readonly ["From", "To", "Subject", "Date"];
     /** RFC 2045 line width for base64 message bodies */
@@ -5664,7 +5679,7 @@ export declare const TICKET_CONSTANTS: {
         readonly DONE_REACTION: "white_check_mark";
         /**
          * Receipts are off (owner, 2026-09-24): tickets are Crewly's own record
-         * of the work — no 🎫 / ✅ / 「已记成 TKT-…」 in the owner's conversations.
+         * of the work — no 🎫 / ✅ / "Recorded as TKT-…" in the owner's conversations.
          */
         readonly ENABLED: false;
     };
@@ -5741,7 +5756,7 @@ export declare const TICKET_CONSTANTS: {
         /** 「打回 <reason>」 — send it back; group 2 is the reason */
         readonly REJECT_PATTERN: RegExp;
         /** Reason recorded when 打回 came without one */
-        readonly REJECT_NO_REASON: "（未写原因）";
+        readonly REJECT_NO_REASON: "(no reason given)";
         /** WorkItem title for a rework sent from the board */
         readonly REWORK_TITLE: (tkt: string) => string;
     };
@@ -6100,7 +6115,7 @@ export declare const ONBOARDING_CONSTANTS: {
     /** Longest first task accepted */
     readonly FIRST_TASK_MAX_LENGTH: 4000;
     /** First line of the message the orchestrator receives for a first task */
-    readonly FIRST_TASK_HEADER: "[初始设置 · 第一件事]";
+    readonly FIRST_TASK_HEADER: "[Initial setup · first task]";
     /** Chat metadata `source` of a first task sent from setup */
     readonly FIRST_TASK_SOURCE: "onboarding_first_task";
     /** Query parameter that opens `/setup` at a step (e.g. `/setup?step=cloud`) */
@@ -6170,7 +6185,7 @@ export declare const BUNDLE_CONSTANTS: {
     /** Chat metadata `source` of a first-week task */
     readonly FIRST_WEEK_SOURCE: "bundle_first_week";
     /** First line of a first-week task the orchestrator receives */
-    readonly FIRST_WEEK_HEADER: "[成套方案 · 第一周]";
+    readonly FIRST_WEEK_HEADER: "[Solution bundle · week one]";
     /** How often the backend delivers due first-week tasks and resumes waiting deployments */
     readonly TICK_INTERVAL_MS: number;
     /** How often `crewly deploy-bundle` polls a running backend's job */