crewly 1.20.105 → 1.20.107

package/config/skills/agent/core/todo-tasks/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: To Do Tasks
+description: List the tasks in one of the owner's Microsoft To Do lists — open tasks by default, --all to include completed ones (via the Microsoft grant held by Crewly Cloud). Read-only.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - what is on my to do list
+  - list microsoft to do tasks
+  - open tasks in to do
+  - outlook tasks
+tags:
+  - microsoft
+  - todo
+  - tasks
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# To Do Tasks
+
+```bash
+bash execute.sh                        # open tasks of the default list ("Tasks")
+bash execute.sh --list Groceries       # name (case-insensitive) or id
+bash execute.sh --list Work --all      # include completed tasks
+bash execute.sh --list Work --limit 20 # default 50, max 100
+```
+
+## Output
+
+```json
+{"list":{"id":"AAMk…","name":"Work"},"count":2,"tasks":[{"id":"AAMk…","title":"Send deck to Ann","status":"notStarted","importance":"high","due":"2026-10-01","note":"v3 is in Drive"},{"id":"AAMk…","title":"Book venue","status":"completed","completedAt":"2026-09-20"}]}
+```
+
+`importance` appears only when not normal; `note` is plain text, cut at
+200 characters. `hasMore: true` means the list has more tasks than the
+limit. Use the task `id` with todo-update.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Microsoft To Do (Connections → Microsoft To Do).
+Other reasons: `not_found` (unknown list / task — the message lists the
+available lists), `forbidden` (the account has no Exchange Online mailbox, or
+the organisation blocks the app), `rate_limited` (with `retryAfter` seconds),
+`validation`, `connector_forbidden` (the owner has not allowed your role).

package/config/skills/agent/core/todo-tasks/execute.sh

@@ -0,0 +1,78 @@
+#!/bin/bash
+# =============================================================================
+# todo-tasks — List the tasks of one Microsoft To Do list (open ones unless --all)
+#
+# Backed by GET /api/microsoft-todo/tasks.
+#
+# Usage:
+#   bash execute.sh                          # open tasks of the default list ("Tasks")
+#   bash execute.sh --list Groceries         # list name (case-insensitive) or id
+#   bash execute.sh --list Work --all        # include completed tasks
+#   bash execute.sh '{"list":"Work","limit":20}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh                          # open tasks of the default list ("Tasks")
+  bash execute.sh --list Groceries         # list name (case-insensitive) or id
+  bash execute.sh --list Work --all        # include completed tasks
+  bash execute.sh '{"list":"Work","limit":20}'
+
+Options:
+  --list, -l    List name (case-insensitive) or id; default: the owner's default list
+  --all         Include completed tasks
+  --limit, -n   Result cap (default 50, max 100)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")} + (if (.details | type) == "object" and .details.retryAfter then {retryAfter: .details.retryAfter} else {} end)' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+LIST=""; ALL=""; LIMIT=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --list|-l)  [ $# -ge 2 ] || error_exit "--list requires a value";  LIST="$2";  shift 2 ;;
+    --all)      ALL="1"; shift ;;
+    --limit|-n) [ $# -ge 2 ] || error_exit "--limit requires a value"; LIMIT="$2"; shift 2 ;;
+    --help|-h)  print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$LIST" ]  && LIST=$(printf '%s' "$INPUT" | jq -r '.list // empty')
+  [ -z "$ALL" ]   && ALL=$(printf '%s' "$INPUT" | jq -r 'if .all == true then "1" else empty end')
+  [ -z "$LIMIT" ] && LIMIT=$(printf '%s' "$INPUT" | jq -r '.limit // empty')
+fi
+QS=""
+[ -n "$LIST" ]  && QS="${QS}&list=$(uri "$LIST")"
+[ -n "$ALL" ]   && QS="${QS}&all=1"
+[ -n "$LIMIT" ] && QS="${QS}&limit=$(uri "$LIMIT")"
+QS="${QS#&}"
+RESPONSE=$(call GET "/microsoft-todo/tasks${QS:+?$QS}") || { printf '%s\n' "$RESPONSE"; exit 1; }
+if printf '%s' "$RESPONSE" | jq -e '.truncated == true' >/dev/null 2>&1; then printf '%s\n' "$RESPONSE"; exit 0; fi
+printf '%s' "$RESPONSE" | jq -c '{list: .data.list, count: .data.count, tasks: .data.tasks} + (if .data.hasMore then {hasMore: true} else {} end)'

package/config/skills/agent/core/todo-tasks/execute.test.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+# Tests for todo-tasks — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18831
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+LIST = {'id': 'L1', 'name': 'Groceries'}
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or 'no-grant' in json.dumps(data or {}):
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        path = self.path.split('?')[0]
+        if path == '/api/microsoft-todo/lists' and method == 'GET':
+            out = {'count': 2, 'lists': [{'id': 'L0', 'name': 'Tasks', 'isDefault': True}, LIST]}
+        elif path == '/api/microsoft-todo/lists':
+            out = {'id': 'L9', 'name': (data or {}).get('name')}
+        elif path == '/api/microsoft-todo/tasks' and method == 'GET':
+            out = {'list': LIST, 'count': 1, 'tasks': [{'id': 'T1', 'title': 'Milk', 'status': 'notStarted', 'due': '2026-10-01'}]}
+        elif path == '/api/microsoft-todo/tasks':
+            out = {'list': LIST, 'task': {'id': 'T2', 'title': (data or {}).get('title'), 'status': 'notStarted'}}
+        elif method == 'PATCH':
+            out = {'list': LIST, 'task': {'id': path.rsplit('/', 1)[1], 'title': 'Milk', 'status': 'completed'}}
+        elif method == 'DELETE':
+            out = {'list': LIST, 'taskId': path.rsplit('/', 1)[1], 'deleted': True}
+        else:
+            out = {}
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': out}).encode())
+    def _body(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        return json.loads(body or '{}')
+    def do_GET(self): self._reply('GET')
+    def do_DELETE(self): self._reply('DELETE')
+    def do_POST(self): self._reply('POST', self._body())
+    def do_PATCH(self): self._reply('PATCH', self._body())
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+last() { jq -c "$1" "$STUB_LOG"; }
+
+OUT=$(run --list "Big Shop" --all --limit 5)
+check "list: output" "$OUT" '{"list":{"id":"L1","name":"Groceries"},"count":1,"tasks":[{"id":"T1","title":"Milk","status":"notStarted","due":"2026-10-01"}]}'
+check "list: path" "$(last '.path')" '"/api/microsoft-todo/tasks?list=Big%20Shop&all=1&limit=5"'
+run >/dev/null
+check "default list: bare path" "$(last '.path')" '"/api/microsoft-todo/tasks"'
+run '{"list":"Work","all":true}' >/dev/null
+check "json input" "$(last '.path')" '"/api/microsoft-todo/tasks?list=Work&all=1"'
+OUT=$(run --list no-grant || true)
+check "not connected" "$(printf '%s' "$OUT" | jq -r .reason)" "not_connected"
+
+echo "todo-tasks: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/todo-update/SKILL.md

@@ -0,0 +1,63 @@
+---
+name: To Do Update
+description: Complete, reopen, retitle, re-date or delete a task in one of the owner's Microsoft To Do lists (via the Microsoft grant held by Crewly Cloud).
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - mark to do task done
+  - complete microsoft to do task
+  - change the due date in to do
+  - delete a to do task
+tags:
+  - microsoft
+  - todo
+  - tasks
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# To Do Update
+
+```bash
+bash execute.sh --list Groceries --task <id> --complete
+bash execute.sh --list Work --task <id> --title "Send v4 deck" --due 2026-10-03
+bash execute.sh --list Work --task <id> --due none     # clear the due date
+bash execute.sh --list Work --task <id> --reopen
+bash execute.sh --list Work --task <id> --delete       # cannot be undone
+```
+
+`--task` is the id from todo-tasks. `--list` is the list the task is in
+(name or id; the default list when omitted). Changes can be combined in one
+call; `--delete` ignores the others.
+
+## Output
+
+```json
+{"success":true,"list":"Groceries","task":{"id":"AAMk…","title":"Milk","status":"completed","completedAt":"2026-09-23"}}
+{"success":true,"deleted":true,"list":"Work","taskId":"AAMk…"}
+```
+
+Only delete when the owner asked for it; completing keeps the history.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Microsoft To Do (Connections → Microsoft To Do).
+Other reasons: `not_found` (unknown list / task — the message lists the
+available lists), `forbidden` (the account has no Exchange Online mailbox, or
+the organisation blocks the app), `rate_limited` (with `retryAfter` seconds),
+`validation`, `connector_forbidden` (the owner has not allowed your role).

package/config/skills/agent/core/todo-update/execute.sh

@@ -0,0 +1,115 @@
+#!/bin/bash
+# =============================================================================
+# todo-update — Complete, reopen, edit or delete a Microsoft To Do task
+#
+# Backed by PATCH / DELETE /api/microsoft-todo/tasks/:taskId.
+#
+# Usage:
+#   bash execute.sh --list Groceries --task <taskId> --complete
+#   bash execute.sh --list Work --task <taskId> --title "Send v4 deck" --due 2026-10-03
+#   bash execute.sh --list Work --task <taskId> --due none          # clear the due date
+#   bash execute.sh --list Work --task <taskId> --reopen
+#   bash execute.sh --list Work --task <taskId> --delete
+#   bash execute.sh '{"list":"Work","task":"AAMk…","complete":true}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --list Groceries --task <taskId> --complete
+  bash execute.sh --list Work --task <taskId> --title "Send v4 deck" --due 2026-10-03
+  bash execute.sh --list Work --task <taskId> --due none          # clear the due date
+  bash execute.sh --list Work --task <taskId> --reopen
+  bash execute.sh --list Work --task <taskId> --delete
+  bash execute.sh '{"list":"Work","task":"AAMk…","complete":true}'
+
+Options:
+  --task         Task id from todo-tasks (required)
+  --list, -l     List name (case-insensitive) or id the task is in; default: the owner's default list
+  --complete     Mark the task completed
+  --reopen       Mark a completed task not started again
+  --title        New title
+  --due          New due date YYYY-MM-DD, or "none" to clear it
+  --note         Replace the note
+  --importance   low | normal | high
+  --delete       Delete the task (cannot be undone)
+  --help | -h    Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")} + (if (.details | type) == "object" and .details.retryAfter then {retryAfter: .details.retryAfter} else {} end)' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+TASK=""; LIST=""; COMPLETE=""; TITLE=""; DUE=""; NOTE=""; IMPORTANCE=""; DELETE=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --task)       [ $# -ge 2 ] || error_exit "--task requires a value";       TASK="$2";       shift 2 ;;
+    --list|-l)    [ $# -ge 2 ] || error_exit "--list requires a value";       LIST="$2";       shift 2 ;;
+    --complete)   COMPLETE="true"; shift ;;
+    --reopen)     COMPLETE="false"; shift ;;
+    --title)      [ $# -ge 2 ] || error_exit "--title requires a value";      TITLE="$2";      shift 2 ;;
+    --due)        [ $# -ge 2 ] || error_exit "--due requires a value";        DUE="$2";        shift 2 ;;
+    --note)       [ $# -ge 2 ] || error_exit "--note requires a value";       NOTE="$2";       shift 2 ;;
+    --importance) [ $# -ge 2 ] || error_exit "--importance requires a value"; IMPORTANCE="$2"; shift 2 ;;
+    --delete)     DELETE="1"; shift ;;
+    --help|-h)    print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$TASK" ]       && TASK=$(printf '%s' "$INPUT" | jq -r '.task // .taskId // .id // empty')
+  [ -z "$LIST" ]       && LIST=$(printf '%s' "$INPUT" | jq -r '.list // empty')
+  [ -z "$COMPLETE" ]   && COMPLETE=$(printf '%s' "$INPUT" | jq -r 'if .complete == true then "true" elif .reopen == true then "false" else empty end')
+  [ -z "$TITLE" ]      && TITLE=$(printf '%s' "$INPUT" | jq -r '.title // empty')
+  [ -z "$DUE" ]        && DUE=$(printf '%s' "$INPUT" | jq -r '.due // empty')
+  [ -z "$NOTE" ]       && NOTE=$(printf '%s' "$INPUT" | jq -r '.note // empty')
+  [ -z "$IMPORTANCE" ] && IMPORTANCE=$(printf '%s' "$INPUT" | jq -r '.importance // empty')
+  [ -z "$DELETE" ]     && DELETE=$(printf '%s' "$INPUT" | jq -r 'if .delete == true then "1" else empty end')
+fi
+[ -n "$TASK" ] || error_exit "--task is required (ids come from todo-tasks)"
+if [ -n "$DELETE" ]; then
+  QS=""
+  [ -n "$LIST" ] && QS="?list=$(uri "$LIST")"
+  RESPONSE=$(call DELETE "/microsoft-todo/tasks/$(uri "$TASK")${QS}") || { printf '%s\n' "$RESPONSE"; exit 1; }
+  printf '%s' "$RESPONSE" | jq -c '{success: true, deleted: true, list: .data.list.name, taskId: .data.taskId}'
+  exit 0
+fi
+if [ -n "$DUE" ] && [ "$DUE" != "none" ] && ! [[ "$DUE" =~ ^[0-9]{4}-[0-9]{2}-[0-9]{2}$ ]]; then
+  error_exit "--due must look like 2026-10-01, or none to clear it"
+fi
+if [ -z "$COMPLETE" ] && [ -z "$TITLE" ] && [ -z "$DUE" ] && [ -z "$NOTE" ] && [ -z "$IMPORTANCE" ]; then
+  error_exit "nothing to change: give --complete, --reopen, --title, --due, --note, --importance or --delete"
+fi
+BODY=$(jq -cn --arg list "$LIST" --arg complete "$COMPLETE" --arg title "$TITLE" --arg due "$DUE" --arg note "$NOTE" --arg imp "$IMPORTANCE" \
+  '{}
+      + (if $list != "" then {list: $list} else {} end)
+      + (if $complete != "" then {complete: ($complete == "true")} else {} end)
+      + (if $title != "" then {title: $title} else {} end)
+      + (if $due == "none" then {due: null} elif $due != "" then {due: $due} else {} end)
+      + (if $note != "" then {note: $note} else {} end)
+      + (if $imp != "" then {importance: $imp} else {} end)')
+RESPONSE=$(call PATCH "/microsoft-todo/tasks/$(uri "$TASK")" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+printf '%s' "$RESPONSE" | jq -c '{success: true, list: .data.list.name, task: .data.task}'

package/config/skills/agent/core/todo-update/execute.test.sh

@@ -0,0 +1,82 @@
+#!/bin/bash
+# Tests for todo-update — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18833
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+LIST = {'id': 'L1', 'name': 'Groceries'}
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or 'no-grant' in json.dumps(data or {}):
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        path = self.path.split('?')[0]
+        if path == '/api/microsoft-todo/lists' and method == 'GET':
+            out = {'count': 2, 'lists': [{'id': 'L0', 'name': 'Tasks', 'isDefault': True}, LIST]}
+        elif path == '/api/microsoft-todo/lists':
+            out = {'id': 'L9', 'name': (data or {}).get('name')}
+        elif path == '/api/microsoft-todo/tasks' and method == 'GET':
+            out = {'list': LIST, 'count': 1, 'tasks': [{'id': 'T1', 'title': 'Milk', 'status': 'notStarted', 'due': '2026-10-01'}]}
+        elif path == '/api/microsoft-todo/tasks':
+            out = {'list': LIST, 'task': {'id': 'T2', 'title': (data or {}).get('title'), 'status': 'notStarted'}}
+        elif method == 'PATCH':
+            out = {'list': LIST, 'task': {'id': path.rsplit('/', 1)[1], 'title': 'Milk', 'status': 'completed'}}
+        elif method == 'DELETE':
+            out = {'list': LIST, 'taskId': path.rsplit('/', 1)[1], 'deleted': True}
+        else:
+            out = {}
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': out}).encode())
+    def _body(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        return json.loads(body or '{}')
+    def do_GET(self): self._reply('GET')
+    def do_DELETE(self): self._reply('DELETE')
+    def do_POST(self): self._reply('POST', self._body())
+    def do_PATCH(self): self._reply('PATCH', self._body())
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+last() { jq -c "$1" "$STUB_LOG"; }
+
+OUT=$(run --list Groceries --task "AA/k=" --complete)
+check "complete: output" "$OUT" '{"success":true,"list":"Groceries","task":{"id":"AA%2Fk%3D","title":"Milk","status":"completed"}}'
+check "complete: request" "$(last '[.method,.path,.body]')" '["PATCH","/api/microsoft-todo/tasks/AA%2Fk%3D",{"list":"Groceries","complete":true}]'
+run --task T1 --title "Oat milk" --due 2026-10-03 --importance low >/dev/null
+check "edit: body" "$(last '.body')" '{"title":"Oat milk","due":"2026-10-03","importance":"low"}'
+run --task T1 --due none --reopen >/dev/null
+check "clear due + reopen" "$(last '.body')" '{"complete":false,"due":null}'
+OUT=$(run --list Work --task T1 --delete)
+check "delete: output" "$OUT" '{"success":true,"deleted":true,"list":"Groceries","taskId":"T1"}'
+check "delete: request" "$(last '[.method,.path]')" '["DELETE","/api/microsoft-todo/tasks/T1?list=Work"]'
+run '{"list":"Work","task":"T7","complete":true}' >/dev/null
+check "json input" "$(last '[.path,.body]')" '["/api/microsoft-todo/tasks/T7",{"list":"Work","complete":true}]'
+check "task required" "$(run_err --complete | jq -r .error)" "--task is required (ids come from todo-tasks)"
+check "nothing to change" "$(run_err --task T1 | jq -r .error | cut -c1-17)" "nothing to change"
+check "bad due" "$(run_err --task T1 --due 1/10 | jq -r .error)" "--due must look like 2026-10-01, or none to clear it"
+OUT=$(run --list no-grant --task T1 --complete || true)
+check "not connected" "$(printf '%s' "$OUT" | jq -r .reason)" "not_connected"
+
+echo "todo-update: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/update-intent-task/execute.sh

@@ -69,7 +69,7 @@ fi
 # ---------------------------------------------------------------------------
 # Call backend API
 # ---------------------------------------------------------------------------
-CREWLY_PORT="${CREWLY_PORT:-8787}"
+CREWLY_PORT="${CREWLY_PORT:-${WEB_PORT:-8787}}"
 API_URL="${CREWLY_API_URL:-http://localhost:${CREWLY_PORT}}"
 
 RESPONSE=$(curl -s -w "\n%{http_code}" \

package/config/skills/agent/marketing/brand-onboarding/execute.sh

@@ -27,7 +27,7 @@ OUTPUT_DIR=$(printf '%s' "$INPUT" | jq -r '.outputDir // ""')
 PROJECT_PATH=$(printf '%s' "$INPUT" | jq -r '.projectPath // ""')
 
 # Crewly API base URL
-API_BASE="${CREWLY_API_URL:-http://localhost:3000}"
+API_BASE="${CREWLY_API_URL:-http://localhost:${WEB_PORT:-8787}}"
 
 # Local storage directory
 LOCAL_DIR="${PROJECT_PATH:-.}/.crewly/onboarding"

package/config/skills/agent/marketing/submit-for-approval/execute.sh

@@ -28,7 +28,7 @@ TEAM_ID=$(printf '%s' "$INPUT" | jq -r '.teamId // ""')
 PROJECT_PATH=$(printf '%s' "$INPUT" | jq -r '.projectPath // ""')
 
 # Crewly API base URL
-API_BASE="${CREWLY_API_URL:-http://localhost:3000}"
+API_BASE="${CREWLY_API_URL:-http://localhost:${WEB_PORT:-8787}}"
 
 case "$ACTION" in
   submit)

package/config/skills/agent/remote-browser/SOP-google-flow-video.md

@@ -131,7 +131,7 @@ bash .../remote-browser/execute.sh '{"action":"navigate","url":"https://labs.goo
 
 ```bash
 # Direct API call (bypasses execute.sh):
-curl -s -X POST http://localhost:8787/api/browser/set-file-input \
+curl -s -X POST "$CREWLY_API_URL/api/browser/set-file-input" \
   -H "Content-Type: application/json" \
   -d '{"selector":"input[type=file]","filePaths":["/tmp/image.png"]}'
 

package/config/skills/agent/remote-browser/execute.sh

@@ -42,6 +42,11 @@
 #                       call (drops the X-Agent-Session header).
 #   --active            Only meaningful with `bind-tab`: foreground
 #                       the new tab on creation.
+#   --goal <text>       What you're trying to accomplish. Sent as the
+#                       X-Agent-Goal header so the user's Chrome takeover
+#                       banner shows your objective (e.g. "Verify DMARC
+#                       setup"), not just the current tool. Overrides any
+#                       inherited CREWLY_AGENT_GOAL for this call.
 #
 # Supported actions and their parameters:
 #   status              — connection status (no params)
@@ -86,6 +91,9 @@ EXTRA_PARAMS=""
 TAB_ID=""        # --tab-id <N>: explicit override
 NO_BIND="false"  # --no-bind: drop X-Agent-Session for this call
 FOREGROUND="false" # --active: only meaningful with bind-tab
+GOAL=""          # --goal <text>: what the agent is trying to accomplish
+                 # (shown in the Chrome takeover banner). Overrides any
+                 # inherited CREWLY_AGENT_GOAL for this call.
 
 # Detect legacy JSON argument
 if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
@@ -119,6 +127,10 @@ while [[ $# -gt 0 ]]; do
       CODE="$2"
       shift 2
       ;;
+    --goal|-g)
+      GOAL="$2"
+      shift 2
+      ;;
     --params|-P)
       EXTRA_PARAMS="$2"
       shift 2
@@ -142,6 +154,11 @@ while [[ $# -gt 0 ]]; do
     --help|-h)
       echo "Usage: execute.sh --action navigate --url https://example.com"
       echo "       execute.sh '{\"action\":\"screenshot\"}'"
+      echo "       execute.sh --action navigate --url https://x.com --goal 'Check pricing'"
+      echo ""
+      echo "  --goal <text>  What you're trying to accomplish; shown in the"
+      echo "                 user's Chrome takeover banner. Recommended on the"
+      echo "                 first action of a browser task."
       echo ""
       echo "Actions: status, navigate, screenshot, read-text, click, fill, type,"
       echo "         scroll, hover, press-key, get-element, wait-for-selector,"
@@ -184,6 +201,7 @@ if [ -n "$INPUT_JSON" ]; then
   [ -z "$VALUE" ] && VALUE=$(printf '%s' "$INPUT" | jq -r '.value // empty')
   [ -z "$TEXT" ] && TEXT=$(printf '%s' "$INPUT" | jq -r '.text // empty')
   [ -z "$CODE" ] && CODE=$(printf '%s' "$INPUT" | jq -r '.code // empty')
+  [ -z "$GOAL" ] && GOAL=$(printf '%s' "$INPUT" | jq -r '.goal // empty')
   # Per-tab dispatch fields surfaced in JSON input. CLI flags win over JSON
   # (CLI is more explicit). Empty string = "not provided".
   if [ -z "$TAB_ID" ]; then
@@ -200,7 +218,7 @@ if [ -n "$INPUT_JSON" ]; then
   # Capture all extra fields from JSON input as pass-through params (strip
   # per-tab fields too — they're handled by the dedicated branches below).
   if [ -z "$EXTRA_PARAMS" ]; then
-    EXTRA_PARAMS=$(printf '%s' "$INPUT" | jq -c 'del(.action, .url, .selector, .value, .text, .code, .tabId, .noBind, .active) | if length == 0 then empty else . end' 2>/dev/null || true)
+    EXTRA_PARAMS=$(printf '%s' "$INPUT" | jq -c 'del(.action, .url, .selector, .value, .text, .code, .goal, .tabId, .noBind, .active) | if length == 0 then empty else . end' 2>/dev/null || true)
   fi
 fi
 
@@ -493,6 +511,15 @@ esac
 # X-Agent-Session header for this single call (api_call reads it from the
 # env). Using a subshell to scope the unset.
 
+# An explicit --goal (or JSON `goal`) overrides any inherited CREWLY_AGENT_GOAL
+# for this call. lib.sh::api_call reads CREWLY_AGENT_GOAL and forwards it as the
+# X-Agent-Goal header, which the backend stamps onto the browser command so the
+# Chrome takeover banner shows what the agent is doing. When --goal is absent we
+# leave CREWLY_AGENT_GOAL untouched (auto path).
+if [ -n "$GOAL" ]; then
+  export CREWLY_AGENT_GOAL="$GOAL"
+fi
+
 run_api_call() {
   if [ "$METHOD" = "GET" ]; then
     api_call GET "$ENDPOINT"
@@ -524,7 +551,12 @@ fi
 # 404 with `tab_not_found` indicates our cached tabId is stale (Extension
 # closed the tab while we weren't looking). Purge cache and retry the call
 # WITHOUT a cached tabId so the backend auto-binds a fresh one.
+#
+# Only for a CACHED tabId. A tab the caller named with --tab-id must be
+# honoured or the call fails: retrying elsewhere would quietly answer about a
+# different tab than the one asked about.
 if [ "$RESPONSE_EXIT" -ne 0 ] \
+   && [ -z "$TAB_ID" ] \
    && [ -n "$STDERR_CAPTURE" ] \
    && printf '%s' "$STDERR_CAPTURE" | grep -q '"status":404' \
    && printf '%s' "$STDERR_CAPTURE" | grep -q 'tab_not_found' \