crewly 1.20.105 → 1.20.106

package/config/skills/agent/core/todo-add/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: To Do Add
+description: Add a task to one of the owner's Microsoft To Do lists — title, optional due date, note and importance (via the Microsoft grant held by Crewly Cloud).
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - add to my to do list
+  - add a microsoft to do task
+  - remind me in to do
+  - create an outlook task
+tags:
+  - microsoft
+  - todo
+  - tasks
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# To Do Add
+
+```bash
+bash execute.sh --title "Buy milk"                     # default list ("Tasks")
+bash execute.sh --list Work --title "Send deck to Ann" --due 2026-10-01 --importance high --note "v3 is in Drive"
+```
+
+| Flag | Meaning |
+|---|---|
+| `--title` | Task title (required) |
+| `--list` | List name (case-insensitive) or id; default list when omitted |
+| `--due` | Due date `YYYY-MM-DD` |
+| `--note` | Note shown under the task |
+| `--importance` | `low` \| `normal` \| `high` |
+
+## Output
+
+```json
+{"success":true,"list":"Work","task":{"id":"AAMk…","title":"Send deck to Ann","status":"notStarted","importance":"high","due":"2026-10-01","note":"v3 is in Drive"}}
+```
+
+A list that does not exist is not created — make it with todo-lists
+`--create` first.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Microsoft To Do (Connections → Microsoft To Do).
+Other reasons: `not_found` (unknown list / task — the message lists the
+available lists), `forbidden` (the account has no Exchange Online mailbox, or
+the organisation blocks the app), `rate_limited` (with `retryAfter` seconds),
+`validation`, `connector_forbidden` (the owner has not allowed your role).

package/config/skills/agent/core/todo-add/execute.sh

@@ -0,0 +1,84 @@
+#!/bin/bash
+# =============================================================================
+# todo-add — Add a task to a Microsoft To Do list
+#
+# Backed by POST /api/microsoft-todo/tasks.
+#
+# Usage:
+#   bash execute.sh --title "Buy milk"                                  # default list
+#   bash execute.sh --list Work --title "Send deck to Ann" --due 2026-10-01 --importance high --note "v3 in Drive"
+#   bash execute.sh '{"list":"Groceries","title":"Eggs"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --title "Buy milk"                                  # default list
+  bash execute.sh --list Work --title "Send deck to Ann" --due 2026-10-01 --importance high --note "v3 in Drive"
+  bash execute.sh '{"list":"Groceries","title":"Eggs"}'
+
+Options:
+  --title, -t    Task title (required)
+  --list, -l     List name (case-insensitive) or id; default: the owner's default list
+  --due          Due date, YYYY-MM-DD
+  --note         Note text shown under the task
+  --importance   low | normal | high
+  --help | -h    Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")} + (if (.details | type) == "object" and .details.retryAfter then {retryAfter: .details.retryAfter} else {} end)' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+TITLE=""; LIST=""; DUE=""; NOTE=""; IMPORTANCE=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --title|-t)   [ $# -ge 2 ] || error_exit "--title requires a value";      TITLE="$2";      shift 2 ;;
+    --list|-l)    [ $# -ge 2 ] || error_exit "--list requires a value";       LIST="$2";       shift 2 ;;
+    --due)        [ $# -ge 2 ] || error_exit "--due requires a value";        DUE="$2";        shift 2 ;;
+    --note)       [ $# -ge 2 ] || error_exit "--note requires a value";       NOTE="$2";       shift 2 ;;
+    --importance) [ $# -ge 2 ] || error_exit "--importance requires a value"; IMPORTANCE="$2"; shift 2 ;;
+    --help|-h)    print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$TITLE" ]      && TITLE=$(printf '%s' "$INPUT" | jq -r '.title // empty')
+  [ -z "$LIST" ]       && LIST=$(printf '%s' "$INPUT" | jq -r '.list // empty')
+  [ -z "$DUE" ]        && DUE=$(printf '%s' "$INPUT" | jq -r '.due // empty')
+  [ -z "$NOTE" ]       && NOTE=$(printf '%s' "$INPUT" | jq -r '.note // empty')
+  [ -z "$IMPORTANCE" ] && IMPORTANCE=$(printf '%s' "$INPUT" | jq -r '.importance // empty')
+fi
+[ -n "$TITLE" ] || error_exit "--title is required"
+if [ -n "$DUE" ] && ! [[ "$DUE" =~ ^[0-9]{4}-[0-9]{2}-[0-9]{2}$ ]]; then error_exit "--due must look like 2026-10-01"; fi
+BODY=$(jq -cn --arg title "$TITLE" --arg list "$LIST" --arg due "$DUE" --arg note "$NOTE" --arg imp "$IMPORTANCE" \
+  '{title: $title}
+      + (if $list != "" then {list: $list} else {} end)
+      + (if $due != "" then {due: $due} else {} end)
+      + (if $note != "" then {note: $note} else {} end)
+      + (if $imp != "" then {importance: $imp} else {} end)')
+RESPONSE=$(call POST "/microsoft-todo/tasks" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+printf '%s' "$RESPONSE" | jq -c '{success: true, list: .data.list.name, task: .data.task}'

package/config/skills/agent/core/todo-add/execute.test.sh

@@ -0,0 +1,76 @@
+#!/bin/bash
+# Tests for todo-add — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18832
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+LIST = {'id': 'L1', 'name': 'Groceries'}
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or 'no-grant' in json.dumps(data or {}):
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        path = self.path.split('?')[0]
+        if path == '/api/microsoft-todo/lists' and method == 'GET':
+            out = {'count': 2, 'lists': [{'id': 'L0', 'name': 'Tasks', 'isDefault': True}, LIST]}
+        elif path == '/api/microsoft-todo/lists':
+            out = {'id': 'L9', 'name': (data or {}).get('name')}
+        elif path == '/api/microsoft-todo/tasks' and method == 'GET':
+            out = {'list': LIST, 'count': 1, 'tasks': [{'id': 'T1', 'title': 'Milk', 'status': 'notStarted', 'due': '2026-10-01'}]}
+        elif path == '/api/microsoft-todo/tasks':
+            out = {'list': LIST, 'task': {'id': 'T2', 'title': (data or {}).get('title'), 'status': 'notStarted'}}
+        elif method == 'PATCH':
+            out = {'list': LIST, 'task': {'id': path.rsplit('/', 1)[1], 'title': 'Milk', 'status': 'completed'}}
+        elif method == 'DELETE':
+            out = {'list': LIST, 'taskId': path.rsplit('/', 1)[1], 'deleted': True}
+        else:
+            out = {}
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': out}).encode())
+    def _body(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        return json.loads(body or '{}')
+    def do_GET(self): self._reply('GET')
+    def do_DELETE(self): self._reply('DELETE')
+    def do_POST(self): self._reply('POST', self._body())
+    def do_PATCH(self): self._reply('PATCH', self._body())
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+last() { jq -c "$1" "$STUB_LOG"; }
+
+OUT=$(run --list Work --title "Send deck" --due 2026-10-01 --importance high --note "v3 in Drive")
+check "add: output" "$OUT" '{"success":true,"list":"Groceries","task":{"id":"T2","title":"Send deck","status":"notStarted"}}'
+check "add: request" "$(last '[.method,.path,.body]')" '["POST","/api/microsoft-todo/tasks",{"title":"Send deck","list":"Work","due":"2026-10-01","note":"v3 in Drive","importance":"high"}]'
+run --title "Buy milk" >/dev/null
+check "add: default list omits list" "$(last '.body')" '{"title":"Buy milk"}'
+run '{"list":"Groceries","title":"Eggs"}' >/dev/null
+check "json input" "$(last '.body')" '{"title":"Eggs","list":"Groceries"}'
+check "title required" "$(run_err --list Work | jq -r .error)" "--title is required"
+check "bad due" "$(run_err --title x --due tomorrow | jq -r .error)" "--due must look like 2026-10-01"
+OUT=$(run --title no-grant || true)
+check "not connected" "$(printf '%s' "$OUT" | jq -r .reason)" "not_connected"
+
+echo "todo-add: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/todo-lists/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: To Do Lists
+description: List the owner's Microsoft To Do task lists, or create a new list (via the Microsoft grant held by Crewly Cloud).
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - microsoft to do lists
+  - which to do lists
+  - create a to do list
+  - outlook tasks lists
+tags:
+  - microsoft
+  - todo
+  - tasks
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# To Do Lists
+
+```bash
+bash execute.sh
+bash execute.sh --create "Trip to Lisbon"
+```
+
+## Output
+
+```json
+{"count":2,"lists":[{"id":"AAMk…","name":"Tasks","isDefault":true},{"id":"AAMk…","name":"Groceries","isShared":true}]}
+{"success":true,"list":{"id":"AAMk…","name":"Trip to Lisbon"}}
+```
+
+The other todo-* skills take a list **name** (case-insensitive) or id, so
+you rarely need the id. `isDefault` marks the list that answers when no
+list is named.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Microsoft To Do (Connections → Microsoft To Do).
+Other reasons: `not_found` (unknown list / task — the message lists the
+available lists), `forbidden` (the account has no Exchange Online mailbox, or
+the organisation blocks the app), `rate_limited` (with `retryAfter` seconds),
+`validation`, `connector_forbidden` (the owner has not allowed your role).

package/config/skills/agent/core/todo-lists/execute.sh

@@ -0,0 +1,70 @@
+#!/bin/bash
+# =============================================================================
+# todo-lists — List the owner's Microsoft To Do lists, or create one
+#
+# Backed by GET / POST /api/microsoft-todo/lists.
+#
+# Usage:
+#   bash execute.sh
+#   bash execute.sh --create "Trip to Lisbon"
+#   bash execute.sh '{"create":"Trip to Lisbon"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh
+  bash execute.sh --create "Trip to Lisbon"
+  bash execute.sh '{"create":"Trip to Lisbon"}'
+
+Options:
+  --create      Create a list with this name instead of listing
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")} + (if (.details | type) == "object" and .details.retryAfter then {retryAfter: .details.retryAfter} else {} end)' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+CREATE=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --create)  [ $# -ge 2 ] || error_exit "--create requires a value"; CREATE="$2"; shift 2 ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$CREATE" ] && CREATE=$(printf '%s' "$INPUT" | jq -r '.create // .name // empty')
+fi
+if [ -n "$CREATE" ]; then
+  BODY=$(jq -cn --arg name "$CREATE" '{name: $name}')
+  RESPONSE=$(call POST "/microsoft-todo/lists" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+  printf '%s' "$RESPONSE" | jq -c '{success: true, list: .data}'
+  exit 0
+fi
+RESPONSE=$(call GET "/microsoft-todo/lists") || { printf '%s\n' "$RESPONSE"; exit 1; }
+printf '%s' "$RESPONSE" | jq -c '{count: .data.count, lists: .data.lists}'

package/config/skills/agent/core/todo-lists/execute.test.sh

@@ -0,0 +1,77 @@
+#!/bin/bash
+# Tests for todo-lists — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18830
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+LIST = {'id': 'L1', 'name': 'Groceries'}
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or 'no-grant' in json.dumps(data or {}):
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        path = self.path.split('?')[0]
+        if path == '/api/microsoft-todo/lists' and method == 'GET':
+            out = {'count': 2, 'lists': [{'id': 'L0', 'name': 'Tasks', 'isDefault': True}, LIST]}
+        elif path == '/api/microsoft-todo/lists':
+            out = {'id': 'L9', 'name': (data or {}).get('name')}
+        elif path == '/api/microsoft-todo/tasks' and method == 'GET':
+            out = {'list': LIST, 'count': 1, 'tasks': [{'id': 'T1', 'title': 'Milk', 'status': 'notStarted', 'due': '2026-10-01'}]}
+        elif path == '/api/microsoft-todo/tasks':
+            out = {'list': LIST, 'task': {'id': 'T2', 'title': (data or {}).get('title'), 'status': 'notStarted'}}
+        elif method == 'PATCH':
+            out = {'list': LIST, 'task': {'id': path.rsplit('/', 1)[1], 'title': 'Milk', 'status': 'completed'}}
+        elif method == 'DELETE':
+            out = {'list': LIST, 'taskId': path.rsplit('/', 1)[1], 'deleted': True}
+        else:
+            out = {}
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': out}).encode())
+    def _body(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        return json.loads(body or '{}')
+    def do_GET(self): self._reply('GET')
+    def do_DELETE(self): self._reply('DELETE')
+    def do_POST(self): self._reply('POST', self._body())
+    def do_PATCH(self): self._reply('PATCH', self._body())
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+last() { jq -c "$1" "$STUB_LOG"; }
+
+OUT=$(run)
+check "list: output" "$OUT" '{"count":2,"lists":[{"id":"L0","name":"Tasks","isDefault":true},{"id":"L1","name":"Groceries"}]}'
+check "list: request" "$(last '[.method,.path]')" '["GET","/api/microsoft-todo/lists"]'
+OUT=$(run --create "Trip to Lisbon")
+check "create: output" "$OUT" '{"success":true,"list":{"id":"L9","name":"Trip to Lisbon"}}'
+check "create: request" "$(last '[.method,.path,.body]')" '["POST","/api/microsoft-todo/lists",{"name":"Trip to Lisbon"}]'
+run '{"create":"Holiday"}' >/dev/null
+check "json create" "$(last '.body.name')" '"Holiday"'
+OUT=$(run --create no-grant || true)
+check "not connected: reason" "$(printf '%s' "$OUT" | jq -r .reason)" "not_connected"
+check "not connected: hint" "$(printf '%s' "$OUT" | jq -r .hint)" "https://cloud/start?token=j"
+check "unknown flag" "$(run_err --bogus | jq -r .error)" "Unknown option: --bogus"
+
+echo "todo-lists: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/todo-tasks/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: To Do Tasks
+description: List the tasks in one of the owner's Microsoft To Do lists — open tasks by default, --all to include completed ones (via the Microsoft grant held by Crewly Cloud). Read-only.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - what is on my to do list
+  - list microsoft to do tasks
+  - open tasks in to do
+  - outlook tasks
+tags:
+  - microsoft
+  - todo
+  - tasks
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# To Do Tasks
+
+```bash
+bash execute.sh                        # open tasks of the default list ("Tasks")
+bash execute.sh --list Groceries       # name (case-insensitive) or id
+bash execute.sh --list Work --all      # include completed tasks
+bash execute.sh --list Work --limit 20 # default 50, max 100
+```
+
+## Output
+
+```json
+{"list":{"id":"AAMk…","name":"Work"},"count":2,"tasks":[{"id":"AAMk…","title":"Send deck to Ann","status":"notStarted","importance":"high","due":"2026-10-01","note":"v3 is in Drive"},{"id":"AAMk…","title":"Book venue","status":"completed","completedAt":"2026-09-20"}]}
+```
+
+`importance` appears only when not normal; `note` is plain text, cut at
+200 characters. `hasMore: true` means the list has more tasks than the
+limit. Use the task `id` with todo-update.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Microsoft To Do (Connections → Microsoft To Do).
+Other reasons: `not_found` (unknown list / task — the message lists the
+available lists), `forbidden` (the account has no Exchange Online mailbox, or
+the organisation blocks the app), `rate_limited` (with `retryAfter` seconds),
+`validation`, `connector_forbidden` (the owner has not allowed your role).

package/config/skills/agent/core/todo-tasks/execute.sh

@@ -0,0 +1,78 @@
+#!/bin/bash
+# =============================================================================
+# todo-tasks — List the tasks of one Microsoft To Do list (open ones unless --all)
+#
+# Backed by GET /api/microsoft-todo/tasks.
+#
+# Usage:
+#   bash execute.sh                          # open tasks of the default list ("Tasks")
+#   bash execute.sh --list Groceries         # list name (case-insensitive) or id
+#   bash execute.sh --list Work --all        # include completed tasks
+#   bash execute.sh '{"list":"Work","limit":20}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh                          # open tasks of the default list ("Tasks")
+  bash execute.sh --list Groceries         # list name (case-insensitive) or id
+  bash execute.sh --list Work --all        # include completed tasks
+  bash execute.sh '{"list":"Work","limit":20}'
+
+Options:
+  --list, -l    List name (case-insensitive) or id; default: the owner's default list
+  --all         Include completed tasks
+  --limit, -n   Result cap (default 50, max 100)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")} + (if (.details | type) == "object" and .details.retryAfter then {retryAfter: .details.retryAfter} else {} end)' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+LIST=""; ALL=""; LIMIT=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --list|-l)  [ $# -ge 2 ] || error_exit "--list requires a value";  LIST="$2";  shift 2 ;;
+    --all)      ALL="1"; shift ;;
+    --limit|-n) [ $# -ge 2 ] || error_exit "--limit requires a value"; LIMIT="$2"; shift 2 ;;
+    --help|-h)  print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$LIST" ]  && LIST=$(printf '%s' "$INPUT" | jq -r '.list // empty')
+  [ -z "$ALL" ]   && ALL=$(printf '%s' "$INPUT" | jq -r 'if .all == true then "1" else empty end')
+  [ -z "$LIMIT" ] && LIMIT=$(printf '%s' "$INPUT" | jq -r '.limit // empty')
+fi
+QS=""
+[ -n "$LIST" ]  && QS="${QS}&list=$(uri "$LIST")"
+[ -n "$ALL" ]   && QS="${QS}&all=1"
+[ -n "$LIMIT" ] && QS="${QS}&limit=$(uri "$LIMIT")"
+QS="${QS#&}"
+RESPONSE=$(call GET "/microsoft-todo/tasks${QS:+?$QS}") || { printf '%s\n' "$RESPONSE"; exit 1; }
+if printf '%s' "$RESPONSE" | jq -e '.truncated == true' >/dev/null 2>&1; then printf '%s\n' "$RESPONSE"; exit 0; fi
+printf '%s' "$RESPONSE" | jq -c '{list: .data.list, count: .data.count, tasks: .data.tasks} + (if .data.hasMore then {hasMore: true} else {} end)'

package/config/skills/agent/core/todo-tasks/execute.test.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+# Tests for todo-tasks — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18831
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+LIST = {'id': 'L1', 'name': 'Groceries'}
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or 'no-grant' in json.dumps(data or {}):
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        path = self.path.split('?')[0]
+        if path == '/api/microsoft-todo/lists' and method == 'GET':
+            out = {'count': 2, 'lists': [{'id': 'L0', 'name': 'Tasks', 'isDefault': True}, LIST]}
+        elif path == '/api/microsoft-todo/lists':
+            out = {'id': 'L9', 'name': (data or {}).get('name')}
+        elif path == '/api/microsoft-todo/tasks' and method == 'GET':
+            out = {'list': LIST, 'count': 1, 'tasks': [{'id': 'T1', 'title': 'Milk', 'status': 'notStarted', 'due': '2026-10-01'}]}
+        elif path == '/api/microsoft-todo/tasks':
+            out = {'list': LIST, 'task': {'id': 'T2', 'title': (data or {}).get('title'), 'status': 'notStarted'}}
+        elif method == 'PATCH':
+            out = {'list': LIST, 'task': {'id': path.rsplit('/', 1)[1], 'title': 'Milk', 'status': 'completed'}}
+        elif method == 'DELETE':
+            out = {'list': LIST, 'taskId': path.rsplit('/', 1)[1], 'deleted': True}
+        else:
+            out = {}
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': out}).encode())
+    def _body(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        return json.loads(body or '{}')
+    def do_GET(self): self._reply('GET')
+    def do_DELETE(self): self._reply('DELETE')
+    def do_POST(self): self._reply('POST', self._body())
+    def do_PATCH(self): self._reply('PATCH', self._body())
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+last() { jq -c "$1" "$STUB_LOG"; }
+
+OUT=$(run --list "Big Shop" --all --limit 5)
+check "list: output" "$OUT" '{"list":{"id":"L1","name":"Groceries"},"count":1,"tasks":[{"id":"T1","title":"Milk","status":"notStarted","due":"2026-10-01"}]}'
+check "list: path" "$(last '.path')" '"/api/microsoft-todo/tasks?list=Big%20Shop&all=1&limit=5"'
+run >/dev/null
+check "default list: bare path" "$(last '.path')" '"/api/microsoft-todo/tasks"'
+run '{"list":"Work","all":true}' >/dev/null
+check "json input" "$(last '.path')" '"/api/microsoft-todo/tasks?list=Work&all=1"'
+OUT=$(run --list no-grant || true)
+check "not connected" "$(printf '%s' "$OUT" | jq -r .reason)" "not_connected"
+
+echo "todo-tasks: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]