@aksp/opencrew 1.6.2 → 1.7.0

package/templates/skills/image-ai-generator/scripts/generate.py

@@ -4,14 +4,16 @@ Image Generator — opencrew Skill
 Generates images via Openrouter API using AI image models.
 
 Usage:
-  # Single image
-  python3 generate.py --prompt "description" --output "path/to/image.jpg" --mode test
+  # Single image (the prompt is read from a UTF-8 text file, never typed in the command)
+  python3 generate.py --prompt-file "path/to/prompt.txt" --output "path/to/image.jpg" --mode test
 
   # Single image with reference (logo/mascot)
-  python3 generate.py --prompt "description" --output "path/to/image.jpg" --reference "path/to/logo.png" --mode production
+  python3 generate.py --prompt-file "path/to/prompt.txt" --output "path/to/image.jpg" --reference "path/to/logo.png" --mode production
 
-  # Batch (JSON file with list of {prompt, output} objects)
+  # Batch (UTF-8 JSON file with list of {prompt, output} objects)
   python3 generate.py --batch "path/to/batch.json" --mode production
+
+--prompt "text" is still accepted (legacy): the shell may rewrite $, quotes and backticks in it.
 """
 
 import argparse
@@ -32,6 +34,42 @@ MODELS = {
 API_URL = "https://openrouter.ai/api/v1/chat/completions"
 
 
+def fail(message):
+    """Tell the user what went wrong and exit with code 1, without a traceback."""
+    print(message, file=sys.stderr)
+    sys.exit(1)
+
+
+def read_prompt_file(path):
+    """Read the prompt from a UTF-8 text file (BOM accepted); it never goes through the shell."""
+    if not os.path.isfile(path):
+        fail(f"Arquivo de prompt não encontrado: {path}")
+    try:
+        with open(path, "r", encoding="utf-8-sig") as f:
+            prompt = f.read().strip()
+    except (OSError, ValueError) as e:
+        fail(f"Não consegui ler o arquivo de prompt {path}: {e}. Grave o arquivo em UTF-8.")
+    if not prompt:
+        fail(f"O arquivo de prompt está vazio: {path}")
+    return prompt
+
+
+def read_batch(path):
+    """Read the batch list from a UTF-8 JSON file (BOM accepted)."""
+    try:
+        with open(path, "r", encoding="utf-8-sig") as f:
+            batch = json.load(f)
+    except (OSError, ValueError) as e:
+        fail(f"Não consegui ler o lote {path}: {e}. Grave o arquivo em UTF-8.")
+    ok = isinstance(batch, list) and all(
+        isinstance(i, dict) and all(isinstance(i.get(k), str) and i[k].strip() for k in ("prompt", "output"))
+        for i in batch
+    )
+    if not ok:
+        fail(f'O lote {path} tem de ser uma lista de itens com "prompt" e "output". Nada foi gerado.')
+    return batch
+
+
 def load_api_key():
     """Load OPENROUTER_API_KEY from environment."""
     key = os.environ.get("OPENROUTER_API_KEY")
@@ -130,7 +168,8 @@ def generate_image(prompt, output_path, mode, api_key, reference_image=None):
 
 def main():
     parser = argparse.ArgumentParser(description="Generate images via Openrouter API")
-    parser.add_argument("--prompt", help="Text prompt for single image generation")
+    parser.add_argument("--prompt-file", help="UTF-8 text file with the prompt for single image generation")
+    parser.add_argument("--prompt", help="Legacy: prompt typed in the command (use --prompt-file)")
     parser.add_argument("--output", help="Output file path for single image")
     parser.add_argument("--batch", help="Path to JSON batch file")
     parser.add_argument("--mode", choices=["test", "production"], default="test",
@@ -138,8 +177,13 @@ def main():
     parser.add_argument("--reference", help="Path to reference image to include in the prompt")
     args = parser.parse_args()
 
-    if not args.prompt and not args.batch:
-        parser.error("Either --prompt or --batch is required")
+    if args.prompt_file and args.batch:
+        fail("Use só um: --prompt-file ou --batch.")
+    if not (args.prompt_file or args.prompt or args.batch):
+        parser.error("Either --prompt-file or --batch is required")
+    # The input files are read first: a bad file stops here, before the key and any API call.
+    items = read_batch(args.batch) if args.batch else None
+    prompt = read_prompt_file(args.prompt_file) if args.prompt_file else args.prompt
 
     api_key = load_api_key()
     model = MODELS[args.mode]
@@ -147,8 +191,6 @@ def main():
 
     if args.batch:
         # Batch mode
-        with open(args.batch, "r") as f:
-            items = json.load(f)
         print(f"Generating {len(items)} images...\n")
         success = 0
         for i, item in enumerate(items, 1):
@@ -167,7 +209,7 @@ def main():
         if not args.output:
             parser.error("--output is required for single image generation")
         print(f"Generating: {os.path.basename(args.output)}...")
-        ok = generate_image(args.prompt, args.output, args.mode, api_key, reference_image=args.reference)
+        ok = generate_image(prompt, args.output, args.mode, api_key, reference_image=args.reference)
         sys.exit(0 if ok else 1)
 
 

package/templates/skills/instagram-publisher/SKILL.md

@@ -74,6 +74,10 @@ and is **never** retried automatically.
 
 - Images: JPEG only (`.jpg`/`.jpeg`), 2-10 per carousel, inside `crews/*/output/` — the
   script refuses anything else before uploading
+- File names: the image paths and the caption file follow the safe-name rule (nome seguro) of
+  `_opencrew/core/runner.pipeline.md` — letters, digits, space and `. _ - / \ : ( )`. With any
+  other character (a comma included: it splits the `--images` list) do not run the command: ask
+  the user to rename the file
 - Images are hosted on imgBB for 24h only (enough for Instagram to fetch them)
 - Caption: max 2200 characters
 - Requires Instagram Business account (not Personal or Creator)

package/templates/skills/opencrew-skill-creator/references/skill-format.md

@@ -14,6 +14,7 @@ Every opencrew skill consists of a `SKILL.md` file with YAML frontmatter and a M
 | `version` | Yes | Semver version string (e.g., `1.0.0`) |
 | `categories` | No | Classification tags array (e.g., `["social-media", "content"]`) |
 | `env` | No | Required environment variable names array |
+| `side_effects` | No | `irreversible` for a skill that publishes or sends (a post, an e-mail). Its body must then show a preview, wait for a confirmation word and make one single call, never repeated after a failure. A skill that only costs money does not use it |
 
 ### Type: mcp
 

package/templates/skills/resend/SKILL.md

@@ -19,6 +19,7 @@ mcp:
   command: npx
   args: ["-y", "resend-mcp"]
   transport: stdio
+side_effects: irreversible
 env:
   - RESEND_API_KEY
 categories: [email, automation, communication]
@@ -34,17 +35,53 @@ so the crew only needs to compose the content and call the MCP tools.
 
 ## Instructions
 
+### Confirmation (before any send, schedule or delete)
+
+Sending is **irreversible**: an e-mail cannot be taken back once it leaves. The rule below is
+about the **action**, whatever the tool is called on the server: before ANY call that sends,
+schedules or deletes, follow this order. The messages to the user are in PT-BR, as written here.
+
+1. Prepare **from**, **to**, **subject**, **body** (HTML or plain text) and attachments. Call no
+   sending tool yet.
+2. **Preview (prévia)** — show the user exactly this, filled in:
+   ```
+   Vou enviar este e-mail:
+   De: {remetente}
+   Para: {N} destinatário(s): {até 10 endereços}… e mais {N-10}
+   Assunto: {assunto}
+   Início do texto: {3 primeiras linhas}
+   Anexos: {nomes}, ou nenhum
+   Quando: agora, ou agendado para {data e hora}
+   Para enviar, responda com a palavra enviar. Qualquer outra resposta cancela.
+   ```
+   (`{N}` is the total of recipients — to, CC and BCC; in a batch, of all the e-mails together.
+   List at most 10 addresses; "… e mais {N-10}" only when there are more. `Quando`: write `agora`
+   or `agendado para …`. `Anexos`: the file names, or `nenhum`.)
+3. Wait for the word **enviar**. Any other answer — including silence, "ok" or "sim" — cancels:
+   say "Nenhum e-mail foi enviado." and stop.
+4. Only after the word: make **one single call** — `send_email` for one e-mail,
+   `batch_send_emails` for a batch.
+5. On success: check the response for the `id` (one per item in a batch) and save it to the step
+   output file immediately.
+6. On failure, timeout or missing answer: do NOT repeat the call again, in this step or in a retry.
+   Tell the user: "⚠️ Não recebi a confirmação do Resend. O e-mail pode já ter sido enviado.
+   Confira no painel antes de tentar de novo. Não vou repetir sozinho."
+7. One confirmation is worth one send. If this step runs again in the same run (a retry, or back
+   from a rejected review), show the preview again, after this line: "Este passo já tentou enviar
+   nesta execução. Confira se saiu antes de confirmar de novo." — and wait for the word.
+8. A call that **deletes** (removing a contact or a domain) follows the same order with its own
+   word: "Vou apagar isto: {o que será apagado}. Para apagar, responda com a palavra apagar.
+   Qualquer outra resposta cancela." Any other answer: "Nada foi apagado."
+
 ### Sending a single email
 
-1. Prepare **from**, **to**, **subject**, and **body** (HTML or plain text).
-2. Call the Resend MCP `send_email` tool.
-3. Check the response for a successful `id` — that confirms the email was queued.
+Fields: **from**, **to**, **subject** and **body**; a successful `id` in the response confirms the
+e-mail was queued.
 
 ### Sending a batch
 
-1. Build an array of email objects (same fields as single send).
-2. Call the Resend MCP `batch_send_emails` tool.
-3. Each item in the response will have its own `id` or error.
+Build an array of email objects (same fields as single send). Each item in the response has its
+own `id` or error — report both; never send the failed ones again on your own.
 
 ### Attachments
 
@@ -52,25 +89,27 @@ Pass attachments as an array with `filename`, `path` (local file), `url`, or `co
 
 ### Scheduling
 
-Include a `scheduled_at` field (ISO 8601 datetime) to schedule future delivery.
+Include a `scheduled_at` field (ISO 8601 datetime) to schedule future delivery. A scheduled e-mail
+asks for the same preview and the same word, with the date and time on the `Quando` line.
 
 ## Best practices
 
 - Validate **from** against a verified domain before sending — Resend rejects unverified senders.
 - Keep subject lines under 80 characters for better deliverability.
 - For batch sends, group by shared content to reduce payload size.
-- Always check the response for errors and surface them to the user rather than silently failing.
+- Always check the response for errors and surface them to the user rather than silently failing
+  — and never by sending again.
 - When composing HTML emails, keep the markup simple — most email clients ignore complex CSS.
 
 ## Available operations
 
-- **Send Email** — Single email with HTML/text body, attachments, CC/BCC, reply-to
-- **Batch Send** — Multiple emails in one call
-- **Schedule Email** — Queue an email for future delivery
+- **Send Email** — Single email with HTML/text body, attachments, CC/BCC, reply-to (only after the word)
+- **Batch Send** — Multiple emails in one call (only after the word)
+- **Schedule Email** — Queue an email for future delivery (only after the word)
 - **List/Get Emails** — Check delivery status of sent emails
 - **Cancel Email** — Cancel a scheduled email before it sends
-- **Manage Contacts** — Create, list, update, and remove contacts from audiences
-- **Manage Domains** — Add and verify sender domains
+- **Manage Contacts** — Create, list, update, and remove contacts from audiences (removing asks for the word `apagar`)
+- **Manage Domains** — Add and verify sender domains (removing asks for the word `apagar`)
 
 ## Setup