crewly 1.13.1 → 1.14.1

package/config/skills/agent/xiaoyuzhoufm-transcript/execute.sh

@@ -1,58 +1,49 @@
 #!/bin/bash
-# 小宇宙 Podcast Transcript — Extract and transcribe podcast episodes
+# 小宇宙 Podcast Transcript — fetch an episode and transcribe it.
 #
-# Pipeline: URL → HTML → audio URL → download → ffmpeg split → Gemini per-chunk → merge
+# Pipeline: URL → HTML → audio URL → download → transcribe-audio (Whisper)
 #
-# Long podcasts (>15min) are split into 10-minute chunks via ffmpeg,
-# each chunk is uploaded and transcribed separately, then merged.
+# This skill owns the 小宇宙 part: resolving an episode URL to its audio and
+# labelling the result. Transcription itself is delegated to the
+# `transcribe-audio` skill, so there is exactly one Whisper integration in the
+# repo to maintain and this skill inherits its engine selection (local
+# whisper.cpp by default, OpenAI Whisper API as fallback).
 #
 # Usage:
 #   bash execute.sh '{"url":"https://www.xiaoyuzhoufm.com/episode/69bbc8ea3c625cc5ae21b461"}'
 #   bash execute.sh '{"url":"...","outputFile":"/path/to/transcript.md"}'
 #   bash execute.sh '{"audioFile":"/path/to/local.m4a"}'
+#   bash execute.sh '{"url":"...","engine":"openai"}'
 #
-# Requires: GEMINI_API_KEY, ffmpeg, curl, jq
+# Requires: curl, jq, and whatever `transcribe-audio` needs (ffmpeg + a Whisper
+# engine). No API key is needed on the default local path.
 
 set -euo pipefail
 
-# ── Configuration ──────────────────────────────────────────────────────────────
-MODEL="${GEMINI_MODEL:-gemini-2.0-flash}"
-GEMINI_API_BASE="https://generativelanguage.googleapis.com"
-GEMINI_UPLOAD_URL="${GEMINI_API_BASE}/upload/v1beta/files"
-GEMINI_CONTENT_URL="${GEMINI_API_BASE}/v1beta/models/${MODEL}:generateContent"
-MAX_WAIT_SECONDS=300
-CHUNK_DURATION_SECONDS=600  # 10 minutes per chunk
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+TRANSCRIBE_SKILL="${SCRIPT_DIR}/../transcribe-audio/execute.sh"
+UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
 
 # ── Input parsing ──────────────────────────────────────────────────────────────
 INPUT="${1:-}"
 if [ -z "$INPUT" ]; then
-  echo '{"success":false,"error":"Usage: execute.sh \u0027{\"url\":\"https://www.xiaoyuzhoufm.com/episode/...\"}\u0027"}'
+  echo '{"success":false,"error":"Usage: execute.sh '{\"url\":\"https://www.xiaoyuzhoufm.com/episode/...\"}'"}'
   exit 1
 fi
 
-URL=$(echo "$INPUT" | jq -r '.url // empty')
-AUDIO_FILE=$(echo "$INPUT" | jq -r '.audioFile // empty')
-OUTPUT_FILE=$(echo "$INPUT" | jq -r '.outputFile // empty')
-LANGUAGE=$(echo "$INPUT" | jq -r '.language // "auto"')
+URL=$(printf '%s' "$INPUT" | jq -r '.url // empty')
+AUDIO_FILE=$(printf '%s' "$INPUT" | jq -r '.audioFile // empty')
+OUTPUT_FILE=$(printf '%s' "$INPUT" | jq -r '.outputFile // empty')
+LANGUAGE=$(printf '%s' "$INPUT" | jq -r '.language // "auto"')
+ENGINE=$(printf '%s' "$INPUT" | jq -r '.engine // "auto"')
 
 if [ -z "$URL" ] && [ -z "$AUDIO_FILE" ]; then
   echo '{"success":false,"error":"Either url or audioFile is required"}'
   exit 1
 fi
 
-# ── Dependency check ───────────────────────────────────────────────────────────
-if ! command -v ffmpeg >/dev/null 2>&1; then
-  echo '{"success":false,"error":"ffmpeg is required but not installed. Install via: brew install ffmpeg"}'
-  exit 1
-fi
-
-# ── API key resolution ─────────────────────────────────────────────────────────
-if [ -z "${GEMINI_API_KEY:-}" ]; then
-  GEMINI_API_KEY=$(curl -sf "http://localhost:8787/api/settings" 2>/dev/null \
-    | jq -r '.data.apiKeys.global.gemini // empty' 2>/dev/null || true)
-fi
-if [ -z "${GEMINI_API_KEY:-}" ]; then
-  echo '{"success":false,"error":"GEMINI_API_KEY not set. Set via environment or Settings > API Keys."}'
+if [ ! -f "$TRANSCRIBE_SKILL" ]; then
+  echo "{\"success\":false,\"error\":$(printf '%s' "transcribe-audio skill not found at ${TRANSCRIBE_SKILL}" | jq -Rs .)}"
   exit 1
 fi
 
@@ -61,17 +52,16 @@ TMPDIR_WORK=$(mktemp -d /tmp/xiaoyuzhoufm-XXXXXX)
 cleanup() { rm -rf "$TMPDIR_WORK"; }
 trap cleanup EXIT
 
-# ── Step 1: Extract audio URL from 小宇宙 page ────────────────────────────────
+# ── Step 1: Resolve the episode URL to a downloadable audio file ───────────────
 TITLE="Unknown Episode"
 AUDIO_URL=""
+DOWNLOADED=0
 
 if [ -n "$URL" ] && [ -z "$AUDIO_FILE" ]; then
   echo '{"status":"fetching","message":"Fetching episode page..."}' >&2
 
   HTML_FILE="${TMPDIR_WORK}/page.html"
-  curl -sL -o "$HTML_FILE" \
-    -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" \
-    "$URL" 2>/dev/null
+  curl -sL -o "$HTML_FILE" -H "$UA" "$URL" 2>/dev/null || true
 
   if [ ! -s "$HTML_FILE" ]; then
     echo '{"success":false,"error":"Failed to fetch episode page"}'
@@ -93,198 +83,70 @@ if [ -n "$URL" ] && [ -z "$AUDIO_FILE" ]; then
     exit 1
   fi
 
-  echo "{\"status\":\"downloading\",\"message\":\"Downloading audio...\",\"title\":$(echo "$TITLE" | jq -Rs .)}" >&2
+  echo "{\"status\":\"downloading\",\"message\":\"Downloading audio...\",\"title\":$(printf '%s' "$TITLE" | jq -Rs .)}" >&2
 
   AUDIO_FILE="${TMPDIR_WORK}/audio.m4a"
-  curl -sL -o "$AUDIO_FILE" \
-    -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" \
-    -H "Referer: https://www.xiaoyuzhoufm.com/" \
-    "$AUDIO_URL" 2>/dev/null
+  curl -sL -o "$AUDIO_FILE" -H "$UA" "$AUDIO_URL"
+  DOWNLOADED=1
 
   if [ ! -s "$AUDIO_FILE" ]; then
-    echo '{"success":false,"error":"Failed to download audio file"}'
+    echo '{"success":false,"error":"Audio download produced an empty file"}'
     exit 1
   fi
-  AUDIO_SIZE=$(wc -c < "$AUDIO_FILE" | tr -d ' ')
-  echo "{\"status\":\"downloaded\",\"message\":\"Audio downloaded (${AUDIO_SIZE} bytes)\"}" >&2
-fi
-
-if [ ! -f "$AUDIO_FILE" ]; then
-  echo "{\"success\":false,\"error\":\"Audio file not found: ${AUDIO_FILE}\"}"
-  exit 1
-fi
-
-# ── Step 2: Get duration and split into chunks ─────────────────────────────────
-DURATION_SECS=$(ffprobe -v quiet -show_entries format=duration -of csv=p=0 "$AUDIO_FILE" 2>/dev/null | cut -d. -f1)
-DURATION_SECS=${DURATION_SECS:-0}
-
-CHUNKS_DIR="${TMPDIR_WORK}/chunks"
-mkdir -p "$CHUNKS_DIR"
-
-if [ "$DURATION_SECS" -gt "$CHUNK_DURATION_SECONDS" ]; then
-  NUM_CHUNKS=$(( (DURATION_SECS + CHUNK_DURATION_SECONDS - 1) / CHUNK_DURATION_SECONDS ))
-  echo "{\"status\":\"splitting\",\"message\":\"Splitting ${DURATION_SECS}s audio into ${NUM_CHUNKS} chunks of ${CHUNK_DURATION_SECONDS}s...\"}" >&2
-
-  ffmpeg -i "$AUDIO_FILE" -f segment -segment_time "$CHUNK_DURATION_SECONDS" \
-    -c copy -reset_timestamps 1 \
-    "${CHUNKS_DIR}/chunk_%03d.m4a" 2>/dev/null
-
-  CHUNK_FILES=$(ls "${CHUNKS_DIR}"/chunk_*.m4a 2>/dev/null | sort)
+  echo "{\"status\":\"downloaded\",\"message\":\"Audio downloaded ($(wc -c < "$AUDIO_FILE" | tr -d ' ') bytes)\"}" >&2
 else
-  # Short audio — single chunk
-  cp "$AUDIO_FILE" "${CHUNKS_DIR}/chunk_000.m4a"
-  CHUNK_FILES="${CHUNKS_DIR}/chunk_000.m4a"
-  NUM_CHUNKS=1
-  echo "{\"status\":\"splitting\",\"message\":\"Short audio (${DURATION_SECS}s), no splitting needed.\"}" >&2
+  if [ ! -f "$AUDIO_FILE" ]; then
+    echo "{\"success\":false,\"error\":$(printf '%s' "Audio file not found: ${AUDIO_FILE}" | jq -Rs .)}"
+    exit 1
+  fi
+  TITLE=$(basename "$AUDIO_FILE")
 fi
 
-# ── Helpers: upload + transcribe a single chunk ────────────────────────────────
-
-# Determine MIME type from file extension
-get_mime() {
-  case "${1##*.}" in
-    mp3) echo "audio/mpeg" ;; m4a) echo "audio/mp4" ;; aac) echo "audio/aac" ;;
-    ogg) echo "audio/ogg" ;; wav) echo "audio/wav" ;; *) echo "audio/mp4" ;;
-  esac
-}
-
-upload_and_wait() {
-  local filepath="$1"
-  local mime_type="$2"
-  local file_size
-  file_size=$(wc -c < "$filepath" | tr -d ' ')
-  local display_name
-  display_name=$(basename "$filepath")
-
-  # Resumable upload: init
-  local init_resp
-  init_resp=$(curl -s -D- -X POST \
-    "${GEMINI_UPLOAD_URL}?key=${GEMINI_API_KEY}" \
-    -H "X-Goog-Upload-Protocol: resumable" \
-    -H "X-Goog-Upload-Command: start" \
-    -H "X-Goog-Upload-Header-Content-Length: ${file_size}" \
-    -H "X-Goog-Upload-Header-Content-Type: ${mime_type}" \
-    -H "Content-Type: application/json" \
-    -d "{\"file\":{\"display_name\":\"${display_name}\"}}" 2>&1)
-
-  local upload_url
-  upload_url=$(echo "$init_resp" | grep -i 'x-goog-upload-url:' | sed 's/.*: //' | tr -d '\r')
-  [ -z "$upload_url" ] && { echo ""; return 1; }
-
-  # Resumable upload: send bytes
-  local upload_resp
-  upload_resp=$(curl -s -X POST "$upload_url" \
-    -H "X-Goog-Upload-Offset: 0" \
-    -H "X-Goog-Upload-Command: upload, finalize" \
-    -H "Content-Type: ${mime_type}" \
-    --data-binary "@${filepath}" 2>&1)
-
-  local file_uri file_name
-  file_uri=$(echo "$upload_resp" | jq -r '.file.uri // empty' 2>/dev/null)
-  file_name=$(echo "$upload_resp" | jq -r '.file.name // empty' 2>/dev/null)
-  [ -z "$file_uri" ] && { echo ""; return 1; }
-
-  # Poll until ACTIVE
-  local state="PROCESSING" waited=0
-  while [ "$state" = "PROCESSING" ] && [ "$waited" -lt "$MAX_WAIT_SECONDS" ]; do
-    sleep 3
-    waited=$((waited + 3))
-    state=$(curl -s "${GEMINI_API_BASE}/v1beta/${file_name}?key=${GEMINI_API_KEY}" \
-      | jq -r '.state // "PROCESSING"' 2>/dev/null)
-  done
-
-  [ "$state" != "ACTIVE" ] && { echo ""; return 1; }
-  echo "$file_uri"
-}
-
-transcribe_chunk() {
-  local file_uri="$1"
-  local mime_type="$2"
-  local chunk_index="$3"
-  local total_chunks="$4"
-
-  local lang_hint=""
-  [ "$LANGUAGE" != "auto" ] && lang_hint="The audio is in ${LANGUAGE}. "
-
-  local prompt="${lang_hint}Transcribe this audio segment (chunk $((chunk_index+1)) of ${total_chunks}). Output the full transcript preserving speaker turns. Format:
-
-**Speaker Name/Label:** text spoken...
-
-Use Speaker 1, Speaker 2 etc if names unknown. Maintain original language. Add [MM:SS] timestamps at topic changes (relative to this chunk start)."
+# ── Step 2: Transcribe via the shared Whisper skill ────────────────────────────
+# The inner skill emits progress on stderr (passed through) and its result JSON
+# on stdout. It handles normalization, engine selection and long-file chunking,
+# so none of that is duplicated here.
+echo '{"status":"transcribing","message":"Handing off to transcribe-audio (Whisper)..."}' >&2
 
-  local req_file="${TMPDIR_WORK}/req_${chunk_index}.json"
-  cat > "$req_file" <<ENDJSON
-{
-  "contents": [{"parts": [
-    {"text": $(echo "$prompt" | jq -Rs .)},
-    {"file_data": {"mime_type": "${mime_type}", "file_uri": "${file_uri}"}}
-  ]}],
-  "generationConfig": {"temperature": 0.1, "maxOutputTokens": 32768}
-}
-ENDJSON
-
-  local resp
-  resp=$(curl -s --max-time 300 -X POST \
-    "${GEMINI_CONTENT_URL}?key=${GEMINI_API_KEY}" \
-    -H "Content-Type: application/json" \
-    -d "@${req_file}" 2>&1)
-
-  local err_msg
-  err_msg=$(echo "$resp" | jq -r '.error.message // empty' 2>/dev/null)
-  [ -n "$err_msg" ] && { echo "[Transcription error: ${err_msg}]"; return 0; }
+TRANSCRIBE_IN=$(jq -nc \
+  --arg audioFile "$AUDIO_FILE" \
+  --arg language "$LANGUAGE" \
+  --arg engine "$ENGINE" \
+  '{audioFile:$audioFile, language:$language, engine:$engine}')
 
-  echo "$resp" | jq -r '.candidates[0].content.parts[0].text // "[No transcript for this chunk]"' 2>/dev/null
+RESULT_JSON=$(bash "$TRANSCRIBE_SKILL" "$TRANSCRIBE_IN") || {
+  echo '{"success":false,"error":"transcribe-audio failed — see stderr for the engine error"}'
+  exit 1
 }
 
-# ── Step 3: Upload and transcribe each chunk ───────────────────────────────────
-FULL_TRANSCRIPT=""
-CHUNK_INDEX=0
-TOTAL_CHUNKS=$(echo "$CHUNK_FILES" | wc -w | tr -d ' ')
-
-for chunk_file in $CHUNK_FILES; do
-  CHUNK_INDEX_DISPLAY=$((CHUNK_INDEX + 1))
-  echo "{\"status\":\"transcribing\",\"message\":\"Chunk ${CHUNK_INDEX_DISPLAY}/${TOTAL_CHUNKS}: uploading...\"}" >&2
-
-  MIME=$(get_mime "$chunk_file")
-  FILE_URI=$(upload_and_wait "$chunk_file" "$MIME")
-
-  if [ -z "$FILE_URI" ]; then
-    echo "{\"status\":\"error\",\"message\":\"Chunk ${CHUNK_INDEX_DISPLAY} upload/processing failed, skipping\"}" >&2
-    FULL_TRANSCRIPT="${FULL_TRANSCRIPT}
-
----
-[Chunk ${CHUNK_INDEX_DISPLAY} failed to process]
----
-"
-    CHUNK_INDEX=$((CHUNK_INDEX + 1))
-    continue
-  fi
-
-  echo "{\"status\":\"transcribing\",\"message\":\"Chunk ${CHUNK_INDEX_DISPLAY}/${TOTAL_CHUNKS}: transcribing...\"}" >&2
-  CHUNK_TEXT=$(transcribe_chunk "$FILE_URI" "$MIME" "$CHUNK_INDEX" "$TOTAL_CHUNKS")
-
-  # Add time offset header for multi-chunk
-  if [ "$TOTAL_CHUNKS" -gt 1 ]; then
-    OFFSET_MINS=$(( CHUNK_INDEX * CHUNK_DURATION_SECONDS / 60 ))
-    FULL_TRANSCRIPT="${FULL_TRANSCRIPT}
-
---- Segment ${CHUNK_INDEX_DISPLAY} (from ${OFFSET_MINS}:00) ---
-
-${CHUNK_TEXT}"
-  else
-    FULL_TRANSCRIPT="$CHUNK_TEXT"
-  fi
+if [ "$(printf '%s' "$RESULT_JSON" | jq -r '.success // false')" != "true" ]; then
+  ERR=$(printf '%s' "$RESULT_JSON" | jq -r '.error // "transcribe-audio reported failure"')
+  echo "{\"success\":false,\"error\":$(printf '%s' "$ERR" | jq -Rs .)}"
+  exit 1
+fi
 
-  CHUNK_INDEX=$((CHUNK_INDEX + 1))
-  echo "{\"status\":\"transcribing\",\"message\":\"Chunk ${CHUNK_INDEX_DISPLAY}/${TOTAL_CHUNKS}: done.\"}" >&2
-done
+ENGINE_LABEL=$(printf '%s' "$RESULT_JSON" | jq -r '.engine // "whisper"')
+LANG_OUT=$(printf '%s' "$RESULT_JSON" | jq -r '.language // "unknown"')
+DURATION=$(printf '%s' "$RESULT_JSON" | jq -r '.durationSec // 0')
+FULL_TEXT=$(printf '%s' "$RESULT_JSON" | jq -r '.text // ""')
 
-if [ -z "$FULL_TRANSCRIPT" ]; then
-  echo '{"success":false,"error":"All chunks failed to transcribe"}'
+if [ -z "$FULL_TEXT" ]; then
+  echo '{"success":false,"error":"Transcription returned no text"}'
   exit 1
 fi
 
-# ── Step 4: Output ─────────────────────────────────────────────────────────────
+# Segment lines with HH:MM:SS stamps — easier to scan in a 90-minute episode
+# than the raw seconds the inner skill emits.
+TRANSCRIPT_BODY=$(printf '%s' "$RESULT_JSON" | jq -r '
+  (.segments // [])[]
+  | (.start | floor) as $s
+  | "[\($s / 3600 | floor | tostring | if length < 2 then "0" + . else . end):" +
+    "\(($s % 3600) / 60 | floor | tostring | if length < 2 then "0" + . else . end):" +
+    "\($s % 60 | tostring | if length < 2 then "0" + . else . end)] \(.text)"
+')
+[ -z "$TRANSCRIPT_BODY" ] && TRANSCRIPT_BODY="$FULL_TEXT"
+
+# ── Step 3: Output ─────────────────────────────────────────────────────────────
 if [ -n "$OUTPUT_FILE" ]; then
   mkdir -p "$(dirname "$OUTPUT_FILE")"
   cat > "$OUTPUT_FILE" <<ENDMD
@@ -292,15 +154,21 @@ if [ -n "$OUTPUT_FILE" ]; then
 
 > Source: ${URL:-local file}
 > Transcribed: $(date -u +"%Y-%m-%dT%H:%M:%SZ")
-> Model: ${MODEL}
-> Duration: ${DURATION_SECS}s (${TOTAL_CHUNKS} chunks)
+> Engine: ${ENGINE_LABEL} (language: ${LANG_OUT})
+> Duration: ${DURATION}s
 
 ---
 
-${FULL_TRANSCRIPT}
+${TRANSCRIPT_BODY}
 ENDMD
-  echo "{\"status\":\"saved\",\"message\":\"Transcript saved to ${OUTPUT_FILE}\"}" >&2
+  echo "{\"status\":\"saved\",\"message\":$(printf '%s' "Transcript saved to ${OUTPUT_FILE}" | jq -Rs .)}" >&2
 fi
 
-TRANSCRIPT_LENGTH=${#FULL_TRANSCRIPT}
-echo "{\"success\":true,\"title\":$(echo "$TITLE" | jq -Rs .),\"url\":$(echo "${URL:-}" | jq -Rs .),\"audioUrl\":$(echo "${AUDIO_URL:-}" | jq -Rs .),\"model\":\"${MODEL}\",\"duration\":${DURATION_SECS},\"chunks\":${TOTAL_CHUNKS},\"transcriptLength\":${TRANSCRIPT_LENGTH},\"transcript\":$(echo "$FULL_TRANSCRIPT" | jq -Rs .)}"
+printf '%s' "$RESULT_JSON" | jq -c \
+  --arg title "$TITLE" \
+  --arg url "${URL:-}" \
+  --arg audioUrl "${AUDIO_URL:-}" \
+  --arg transcript "$TRANSCRIPT_BODY" \
+  '{success:true, title:$title, url:$url, audioUrl:$audioUrl,
+    engine:.engine, language:.language, duration:.durationSec,
+    transcriptLength:($transcript | length), transcript:$transcript}'

package/config/skills/agent/xiaoyuzhoufm-transcript/skill.json

@@ -1,10 +1,10 @@
 {
   "name": "xiaoyuzhoufm-transcript",
   "displayName": "小宇宙 Podcast Transcript",
-  "description": "Extract and transcribe 小宇宙 podcast episodes using Gemini Audio API. Supports speaker identification and timestamps.",
+  "description": "Resolve a 小宇宙 episode URL to its audio and transcribe it with Whisper (local whisper.cpp by default, OpenAI Whisper API as fallback). Segment-level timestamps.",
   "category": "content",
   "assignableRoles": ["*"],
-  "version": "1.0.0",
+  "version": "2.0.0",
   "author": "Crewly Team",
-  "requires": ["GEMINI_API_KEY"]
+  "requires": []
 }

package/config/skills/orchestrator/get-team-status/SKILL.md

@@ -34,7 +34,11 @@ bash config/skills/orchestrator/get-team-status/execute.sh
 
 ## Parameters
 
-None required.
+None required. Output is **compact by default** (team id/name/projectIds and
+each member's name, sessionName, role, runtimeType, agentStatus,
+workingStatus, readyAt). Pass `--full` (or `'{"full":true}'`) for the raw
+`/teams` payload including system prompts — it is large, so only ask for it
+when you need a specific field.
 
 ## Output
 

package/config/skills/orchestrator/get-team-status/execute.sh

@@ -1,7 +1,33 @@
 #!/bin/bash
-# Get status of all teams and their agents
+# Get status of all teams and their agents.
+#
+# Compact by default (2026-09-16): the raw /teams payload carries every
+# member's system prompt, and on a workspace with a few teams that is ~50 KB
+# per call — all of which stays in the orchestrator's context for the rest of
+# the session. Pass --full (or {"full":true}) when a specific field is needed.
 set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 source "${SCRIPT_DIR}/../_common/lib.sh"
 
-api_call GET "/teams"
+FULL="false"
+for arg in "$@"; do
+  case "$arg" in
+    --full) FULL="true" ;;
+    \{*) printf '%s' "$arg" | jq -e '.full == true' >/dev/null 2>&1 && FULL="true" ;;
+  esac
+done
+
+RAW=$(api_call GET "/teams")
+
+if [ "$FULL" = "true" ]; then
+  printf '%s\n' "$RAW"
+  exit 0
+fi
+
+printf '%s' "$RAW" | jq '
+  def compact_member: {name, sessionName, role, runtimeType, agentStatus, workingStatus, readyAt};
+  def compact_team: {id, name, projectIds, memberCount: ((.members // []) | length), members: [(.members // [])[] | compact_member]};
+  if type == "array" then map(compact_team)
+  elif (.data | type) == "array" then .data |= map(compact_team)
+  elif .members then compact_team
+  else . end'

package/config/slack-app-manifest.json

@@ -21,7 +21,13 @@
         "im:history",
         "mpim:history",
         "users:read",
-        "reactions:write"
+        "reactions:write",
+        "channels:read",
+        "channels:manage",
+        "channels:join",
+        "chat:write.customize",
+        "chat:write.public",
+        "im:write"
       ]
     }
   },

package/dist/backend/backend/src/config/oauth.config.d.ts

@@ -1,33 +1,107 @@
 /**
  * Google OAuth Configuration
  *
- * Shared constants for the Google OAuth flows that piggyback on the Gemini
- * CLI Workspace extension's published OAuth app. Defining these here lets
- * the REST controller (URL-builder) and the helper (refresh client) stay in
- * sync on client_id / redirect_uri / endpoints.
+ * Crewly can acquire Google Workspace credentials through either of two OAuth
+ * applications, and this module is the single place that decides which:
  *
- * These values come from the Gemini CLI Workspace extension's
- * `workspace-server/src/utils/config.ts` — using the same client_id
- * + redirect_uri lets us avoid the 7-day testing-mode grant expiry.
+ * - **crewly** — Crewly's own published OAuth app, brokered by Crewly Cloud.
+ *   The authorization code lands on a Crewly-owned HTTPS redirect and Cloud
+ *   exchanges it, so the client_secret lives only on the server and never
+ *   ships with OSS. Selected by setting {@link CREWLY_GOOGLE_CLIENT_ID_ENV}.
+ *
+ * - **gemini-cli** — the fallback, and what every install used before Crewly
+ *   had its own app: piggybacking on the Google Workspace extension for Gemini
+ *   CLI (https://github.com/gemini-cli-extensions/workspace). Borrowing a
+ *   published app avoided both the 7-day testing-mode grant expiry and the
+ *   need to hold a client_secret, at the cost of depending on someone else's
+ *   OAuth app and refresh function.
+ *
+ * The fallback is deliberate, not vestigial: an install that has not been
+ * pointed at Crewly's app keeps working exactly as before, and a self-hoster
+ * who wants to depend on neither can point these variables at a GCP project
+ * of their own.
  *
  * @module config/oauth.config
  */
-/** OAuth client_id for the Gemini CLI Workspace extension's published app. */
-export declare const GOOGLE_OAUTH_CLIENT_ID = "338689075775-o75k922vn5fdl18qergr96rp8g63e4d7.apps.googleusercontent.com";
-/** Redirect URI the Gemini CLI Workspace cloud function is registered for. */
-export declare const GOOGLE_OAUTH_REDIRECT_URI = "https://google-workspace-extension.geminicli.com";
+/** Env var that, when set, switches the Workspace flow to Crewly's own app. */
+export declare const CREWLY_GOOGLE_CLIENT_ID_ENV = "CREWLY_GOOGLE_CLIENT_ID";
+/** Env var overriding where Google sends the authorization code. */
+export declare const CREWLY_GOOGLE_REDIRECT_URI_ENV = "CREWLY_GOOGLE_REDIRECT_URI";
+/** Env var overriding the endpoint that exchanges a refresh token. */
+export declare const CREWLY_GOOGLE_REFRESH_URL_ENV = "CREWLY_GOOGLE_REFRESH_URL";
 /** Base URL of Google's OAuth 2.0 authorization endpoint. */
 export declare const GOOGLE_OAUTH_AUTH_BASE = "https://accounts.google.com/o/oauth2/v2/auth";
-/** Cloud Function base URL where the extension's `/refreshToken` lives. */
-export declare const GEMINI_CLI_CLOUD_FUNCTION_URL = "https://google-workspace-extension.geminicli.com";
-/** Path on the cloud function used for token refresh calls. */
-export declare const GEMINI_CLI_REFRESH_PATH = "/refreshToken";
 /** Google's userinfo endpoint — used to resolve an OAuth token's account email. */
 export declare const GOOGLE_USERINFO_ENDPOINT = "https://www.googleapis.com/oauth2/v3/userinfo";
+/** Path on the Gemini CLI cloud function used for token refresh calls. */
+export declare const GEMINI_CLI_REFRESH_PATH = "/refreshToken";
+/** Cloud Function base URL where the Gemini CLI extension's `/refreshToken` lives. */
+export declare const GEMINI_CLI_CLOUD_FUNCTION_URL = "https://google-workspace-extension.geminicli.com";
+/** Which OAuth application a Workspace credential was (or will be) issued by. */
+export type GoogleOAuthProvider = 'crewly' | 'gemini-cli';
+/** Everything the authorize/refresh paths need to talk to one OAuth app. */
+export interface GoogleOAuthApp {
+    /** Which application this is. */
+    provider: GoogleOAuthProvider;
+    /** OAuth client_id presented on the consent URL. */
+    clientId: string;
+    /** Where Google sends the authorization code. */
+    redirectUri: string;
+    /**
+     * Endpoint that trades a refresh_token for a fresh access_token.
+     *
+     * Neither provider needs a client_secret on this side: 'crewly' posts to
+     * Crewly Cloud, which holds the secret; 'gemini-cli' posts to the
+     * extension's cloud function, which holds theirs.
+     */
+    refreshUrl: string;
+    /** Scopes requested when the caller does not specify their own. */
+    defaultScopes: readonly string[];
+}
 /**
- * Default scope set for a broad Workspace grant — covers the common Gmail,
- * Drive, Docs, Calendar, and Photos read paths used by marketplace skills.
- * Callers of `/oauth/google/start` may override via the request body.
+ * Scopes registered on Crewly's own OAuth consent screen (GCP project
+ * `crewlyai`, registered 2026-09-07).
+ *
+ * Requesting a scope the consent screen does not declare fails, so this list
+ * and the console must move together. `photoslibrary.readonly` is absent on
+ * purpose — the Photos Library API is not enabled on the project, and it is a
+ * restricted scope that would widen the eventual CASA assessment for a feature
+ * nothing asks for yet.
+ */
+export declare const CREWLY_GOOGLE_SCOPES: readonly string[];
+/**
+ * Scopes the Gemini CLI Workspace extension's consent screen declares.
+ *
+ * Kept as-is, including `photoslibrary.readonly`, because these grants were
+ * issued against their app: narrowing the list would silently drop an
+ * already-working capability for installs still on the fallback.
+ */
+export declare const GEMINI_CLI_GOOGLE_SCOPES: readonly string[];
+/** The borrowed Gemini CLI Workspace extension app. */
+export declare const GEMINI_CLI_OAUTH_APP: GoogleOAuthApp;
+/**
+ * Resolve the OAuth app this install should use.
+ *
+ * Reads the environment on every call rather than at import time so that a
+ * process which loads its `.env` after module resolution — and a test that
+ * sets a variable per case — both see the value they set.
+ *
+ * @returns The active app; {@link GEMINI_CLI_OAUTH_APP} when Crewly's own
+ *   client_id is not configured.
+ *
+ * @example
+ * ```ts
+ * const app = resolveGoogleOAuthApp();
+ * if (app.provider === 'crewly') { ... }
+ * ```
  */
-export declare const DEFAULT_GOOGLE_SCOPES: readonly string[];
+export declare function resolveGoogleOAuthApp(): GoogleOAuthApp;
+/** client_id of the active OAuth app. */
+export declare function googleOAuthClientId(): string;
+/** Redirect URI of the active OAuth app. */
+export declare function googleOAuthRedirectUri(): string;
+/** Refresh endpoint of the active OAuth app. */
+export declare function googleOAuthRefreshUrl(): string;
+/** Default scopes of the active OAuth app. */
+export declare function defaultGoogleScopes(): readonly string[];
 //# sourceMappingURL=oauth.config.d.ts.map

package/dist/backend/backend/src/config/oauth.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.config.d.ts","sourceRoot":"","sources":["../../../../../backend/src/config/oauth.config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,6EACyC,CAAC;AAE7E,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,qDACc,CAAC;AAErD,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,iDACa,CAAC;AAEjD,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,qDACU,CAAC;AAErD,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,kDACY,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAYlD,CAAC"}
+{"version":3,"file":"oauth.config.d.ts","sourceRoot":"","sources":["../../../../../backend/src/config/oauth.config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE,oEAAoE;AACpE,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAE3E,sEAAsE;AACtE,eAAO,MAAM,6BAA6B,8BAA8B,CAAC;AAMzE,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,iDACa,CAAC;AAEjD,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,kDACY,CAAC;AAElD,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AAEvD,sFAAsF;AACtF,eAAO,MAAM,6BAA6B,qDACU,CAAC;AASrD,iFAAiF;AACjF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE1D,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAWjD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAGrD,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,EAAE,cAOlC,CAAC;AAaF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,IAAI,cAAc,CAetD;AAMD,yCAAyC;AACzC,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,4CAA4C;AAC5C,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,gDAAgD;AAChD,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,8CAA8C;AAC9C,wBAAgB,mBAAmB,IAAI,SAAS,MAAM,EAAE,CAEvD"}