crewly 1.20.265 → 1.20.267

package/config/skills/_common/lib.sh

@@ -221,7 +221,16 @@ api_call() {
   local method="$1" endpoint="$2" body="${3:-}"
   local url="${CREWLY_API_URL}/api${endpoint}"
   _prune_skill_output
-  local args=(-s -w '\n%{http_code}' -X "$method" -H "Content-Type: application/json")
+  local args=(-s -w '\n%{http_code}' -X "$method")
+  # A raw file upload (app-data --upload): CREWLY_API_UPLOAD_FILE is sent as the
+  # body, byte for byte, with CREWLY_API_UPLOAD_TYPE as its Content-Type and the
+  # URI-encoded CREWLY_API_UPLOAD_NAME as X-File-Name. Everything else is JSON.
+  if [ -n "${CREWLY_API_UPLOAD_FILE:-}" ]; then
+    args+=(-H "Content-Type: ${CREWLY_API_UPLOAD_TYPE:-application/octet-stream}")
+    [ -n "${CREWLY_API_UPLOAD_NAME:-}" ] && args+=(-H "X-File-Name: ${CREWLY_API_UPLOAD_NAME}")
+  else
+    args+=(-H "Content-Type: application/json")
+  fi
   # Include agent session identity header for heartbeat tracking
   # Use ${VAR:-} pattern to avoid 'unbound variable' error under set -u (nounset)
   # The agent badge (#999): the credential that makes the backend treat this
@@ -280,7 +289,11 @@ api_call() {
   if [ -n "${CREWLY_AGENT_GOAL:-}" ]; then
     args+=(-H "X-Agent-Goal: b64:$(printf '%s' "$CREWLY_AGENT_GOAL" | base64 | tr -d '\n')")
   fi
-  [ -n "$body" ] && args+=(-d "$body")
+  if [ -n "${CREWLY_API_UPLOAD_FILE:-}" ]; then
+    args+=(--data-binary "@${CREWLY_API_UPLOAD_FILE}")
+  elif [ -n "$body" ]; then
+    args+=(-d "$body")
+  fi
 
   local response
   response=$(curl "${args[@]}" "$url")

package/config/skills/agent/core/app-data/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: App Data
 description: Read and write the data of a Crewly App you published (the same collections the app's page sees through crewly.db) — list, get, set, update, add, delete. Use it to fill an app with content, act on what the owner entered, or answer an [APP CHANGES] message.
-version: 1.4.0
+version: 1.5.0
 category: productivity
 skillType: claude-skill
 assignableRoles:
@@ -64,6 +64,18 @@ Output:
   otherwise).
 - `--data-file <path>` reads the JSON from a regular file inside your project
   directory (not a symlink, not under `~/.crewly`, at most 1 MB).
+- `--upload <path> [--name <file name>]` puts a file (an image for a post) into
+  the app and prints `{ fileId, name, size, contentType, url }`. Same rules as
+  `--data-file` (regular file inside your project directory, not a symlink, not
+  under `~/.crewly`), up to 10 MB; the app's own limit may be smaller and its
+  refusal comes back as-is (`too_large`, quota). It works for the app's owner
+  agents and for collaborators; anyone else gets `not_your_app`. Put the `url`
+  into a document the page renders (for example `images[].src`) with
+  `--update`; PNG, JPEG, GIF and WebP show inline, other types download.
+  ```bash
+  bash execute.sh --app <appId> --upload ./cover.png
+  bash execute.sh --app <appId> --update posts <docId> --data '{"images":[{"src":"<url from the upload>"}]}'
+  ```
 - `--list` pages with `--after <next>` until `next` is null.
 - `--update` is a shallow merge; `--set` replaces the whole document.
 - `--if-rev` makes an update conditional: if the owner changed the doc since

package/config/skills/agent/core/app-data/execute.sh

@@ -19,6 +19,7 @@ Usage:
   bash execute.sh --app <appId> --update <collection> <docId> --data '{"done":true}' [--if-rev 4]
   bash execute.sh --app <appId> --add <collection> --data '{"name":"milk"}'
   bash execute.sh --app <appId> --delete <collection> <docId>
+  bash execute.sh --app <appId> --upload <path-to-image> [--name <file name>]
   bash execute.sh --app <appId> --request-access [--scope team|agent] [--reason "why"]
   bash execute.sh --app <appId> --collaborators
   bash execute.sh --app <appId> --owner
@@ -31,6 +32,8 @@ Options:
   --if-rev     Only update when the doc is still at this rev (409 conflict otherwise)
   --limit      Page size for --list (1-500, default 100)
   --after      Continue a --list after this doc id (the previous page's "next")
+  --upload     Put a file (an image for a post) into the app and print its url; works for the owner's agents and for collaborators. Regular, non-symlink file inside your project directory, up to 10 MB (the app's own limit may be smaller)
+  --name       File name to show for --upload (default: the file's name)
   --request-access  Ask the owner to let your team (default) or only you work in an app another team published; a card goes to the owner, nothing is granted until they tap Allow
   --collaborators   Who the owner let work in the app
   --scope      team (your team, default) or agent (only you), with --request-access
@@ -60,7 +63,7 @@ uri() { jq -rn --arg v "$1" '$v|@uri'; }
 # (CREWLY_PROJECT_PATH, else the working directory), never under Crewly's home.
 read_data_file() {
   command -v node >/dev/null 2>&1 || error_exit "node is required for --data-file"
-  DF_PATH="$1" DF_PROJECT="${CREWLY_PROJECT_PATH:-$PWD}" node <<'NODE'
+  DF_MODE="${2:-read}" DF_PATH="$1" DF_PROJECT="${CREWLY_PROJECT_PATH:-$PWD}" node <<'NODE'
 const fs = require('fs'); const path = require('path'); const os = require('os');
 const fail = (m) => { process.stderr.write(JSON.stringify({ error: m }) + '\n'); process.exit(1); };
 const real = (p) => { try { return fs.realpathSync(p); } catch { return null; } };
@@ -76,12 +79,35 @@ if (!project) fail('cannot resolve the project directory');
 const homes = [path.join(os.homedir(), '.crewly'), process.env.CREWLY_HOME].filter(Boolean).map((p) => real(p) || path.resolve(p));
 if (homes.some((h) => within(r, h))) fail(`${given} is inside Crewly's home directory`);
 if (!within(r, project)) fail(`${given} is outside your project directory (${project})`);
-if (st.size > 1024 * 1024) fail(`${given} is larger than 1 MB`);
-process.stdout.write(fs.readFileSync(r, 'utf8'));
+if (process.env.DF_MODE === 'path') {
+  if (st.size === 0) fail(`${given} is empty`);
+  if (st.size > 10 * 1024 * 1024) fail(`${given} is larger than 10 MB`);
+  process.stdout.write(r);
+} else {
+  if (st.size > 1024 * 1024) fail(`${given} is larger than 1 MB`);
+  process.stdout.write(fs.readFileSync(r, 'utf8'));
+}
 NODE
 }
 
-APP=""; OP=""; COLL=""; DOC=""; DATA=""; IF_REV=""; LIMIT=""; AFTER=""; SCOPE=""; REASON=""; SET_OWNER=""; WHO=""
+# Content type from the extension. JSON-like types are sent as octet-stream so
+# the backend receives raw bytes; Cloud decides what a browser may show inline.
+content_type_for() {
+  case "$(printf '%s' "${1##*.}" | tr '[:upper:]' '[:lower:]')" in
+    png) echo image/png ;;
+    jpg|jpeg) echo image/jpeg ;;
+    gif) echo image/gif ;;
+    webp) echo image/webp ;;
+    svg) echo image/svg+xml ;;
+    pdf) echo application/pdf ;;
+    mp4) echo video/mp4 ;;
+    webm) echo video/webm ;;
+    txt) echo text/plain ;;
+    *) echo application/octet-stream ;;
+  esac
+}
+
+APP=""; OP=""; UPLOAD=""; NAME=""; COLL=""; DOC=""; DATA=""; IF_REV=""; LIMIT=""; AFTER=""; SCOPE=""; REASON=""; SET_OWNER=""; WHO=""
 while [[ $# -gt 0 ]]; do
   case "$1" in
     --app)    [ $# -ge 2 ] || error_exit "--app requires a value"; APP="$2"; shift 2 ;;
@@ -96,6 +122,8 @@ while [[ $# -gt 0 ]]; do
     --if-rev)    [ $# -ge 2 ] || error_exit "--if-rev requires a value";    IF_REV="$2"; shift 2 ;;
     --limit)     [ $# -ge 2 ] || error_exit "--limit requires a value";     LIMIT="$2"; shift 2 ;;
     --after)     [ $# -ge 2 ] || error_exit "--after requires a value";     AFTER="$2"; shift 2 ;;
+    --upload)    [ $# -ge 2 ] || error_exit "--upload requires a file path"; OP="upload"; UPLOAD="$2"; shift 2 ;;
+    --name)      [ $# -ge 2 ] || error_exit "--name requires a value";      NAME="$2"; shift 2 ;;
     --request-access) OP="request-access"; shift ;;
     --collaborators)  OP="collaborators"; shift ;;
     --owner)     OP="owner"; shift ;;
@@ -109,13 +137,21 @@ while [[ $# -gt 0 ]]; do
 done
 
 [ -n "$APP" ] || error_exit "--app is required"
-[ -n "$OP" ] || error_exit "one of --list / --get / --set / --update / --add / --delete / --request-access / --collaborators / --owner / --add-collaborator is required"
+[ -n "$OP" ] || error_exit "one of --list / --get / --set / --update / --add / --delete / --upload / --request-access / --collaborators / --owner / --add-collaborator is required"
 [[ "$APP" =~ ^[a-z0-9]{10}$ ]] || error_exit "--app must be a 10-character app id"
 case "$COLL" in .|..) error_exit "collection cannot be . or .." ;; esac
 case "$DOC" in .|..) error_exit "doc id cannot be . or .." ;; esac
 BASE="/apps/${APP}/data/$(uri "$COLL")"
 
 case "$OP" in
+  upload)
+    FILE_PATH="$(read_data_file "$UPLOAD" path)" || exit 1
+    [ -n "$NAME" ] || NAME="$(basename "$FILE_PATH")"
+    RESPONSE=$(CREWLY_API_UPLOAD_FILE="$FILE_PATH" CREWLY_API_UPLOAD_TYPE="$(content_type_for "$FILE_PATH")" CREWLY_API_UPLOAD_NAME="$(uri "$NAME")" call POST "/apps/${APP}/files") || { printf '%s\n' "$RESPONSE"; exit 1; }
+    printf '%s' "$RESPONSE" | jq -e '.data.url | type == "string" and length > 0' >/dev/null 2>&1 || error_exit "the upload answered without a url; the file may not be stored"
+    printf '%s' "$RESPONSE" | jq -c '{success: true, fileId: .data.fileId, name: .data.name, size: .data.size, contentType: .data.contentType, url: .data.url}'
+    exit 0
+    ;;
   request-access)
     case "$SCOPE" in ""|team|agent) ;; *) error_exit "--scope is team or agent" ;; esac
     BODY=$(jq -cn --arg s "$SCOPE" --arg r "$REASON" '{} + (if $s != "" then {scope: $s} else {} end) + (if $r != "" then {reason: $r} else {} end)')

package/config/skills/agent/core/app-data/execute.test.sh

@@ -51,7 +51,20 @@ class H(BaseHTTPRequestHandler):
     def _body(self, m):
         n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
         self._reply(m, json.loads(body or '{}'))
-    def do_POST(self): self._body('POST')
+    def do_POST(self):
+        if self.path.endswith('/files'):
+            n = int(self.headers.get('content-length', '0')); raw = self.rfile.read(n)
+            name = self.headers.get('x-file-name', '')
+            open(LOG, 'w').write(json.dumps({'method': 'POST', 'path': self.path, 'ct': self.headers.get('content-type'), 'name': name, 'len': n, 'hex': raw.hex(), 'session': self.headers.get('x-agent-session')}))
+            def send(code, obj):
+                self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers()
+                self.wfile.write(json.dumps(obj).encode())
+            if name == 'nourl.png':
+                return send(201, {'success': True, 'data': {'fileId': 'f1'}})
+            if name == 'refuse.png':
+                return send(403, {'success': False, 'error': 'not_your_app', 'message': 'This app is not yours.'})
+            return send(201, {'success': True, 'data': {'fileId': 'f1', 'name': name, 'size': n, 'contentType': self.headers.get('content-type'), 'url': 'https://apps.crewlyai.com/_f/tok/f1'}})
+        self._body('POST')
     def do_PUT(self): self._body('PUT')
     def do_PATCH(self): self._body('PATCH')
     def log_message(self, *a, **k): pass
@@ -149,5 +162,38 @@ check "set-owner needs a value" "$(printf '%s' "$OUT" | grep -c 'requires an own
 run --app $A --set items milk --data '{"done":true}' >/dev/null
 check "--set is still a data write" "$(jq -r '.method + " " + .path' "$STUB_LOG")" "PUT /api/apps/$A/data/items/milk"
 
+# --upload: raw bytes, content type from the extension, name URI-encoded; same project-dir guard as --data-file.
+printf '\x89PNG\r\n\x1a\n\x00\x01' > "$WORK/proj/pic one.png"
+OUT=$(run --app $A --upload "$WORK/proj/pic one.png")
+check "upload: output has the url" "$(printf '%s' "$OUT" | jq -c '{success, fileId, name, size, contentType, url}')" '{"success":true,"fileId":"f1","name":"pic%20one.png","size":10,"contentType":"image/png","url":"https://apps.crewlyai.com/_f/tok/f1"}'
+check "upload: request" "$(jq -c '{method, path, ct, name, len, hex, session}' "$STUB_LOG")" "{\"method\":\"POST\",\"path\":\"/api/apps/$A/files\",\"ct\":\"image/png\",\"name\":\"pic%20one.png\",\"len\":10,\"hex\":\"89504e470d0a1a0a0001\",\"session\":\"dev-ella\"}"
+OUT=$(run --app $A --upload "$WORK/proj/pic one.png" --name "shot 1.png")
+check "upload: --name overrides" "$(jq -r .name "$STUB_LOG")" "shot%201.png"
+printf '{"a":1}' > "$WORK/proj/data.json"
+run --app $A --upload "$WORK/proj/data.json" >/dev/null
+check "upload: json is sent as octet-stream" "$(jq -r .ct "$STUB_LOG")" "application/octet-stream"
+# A normal call after an upload is JSON again (the upload env does not leak).
+run --app $A --add items --data '{"n":1}' >/dev/null
+check "upload does not leak into the next call" "$(jq -c .body "$STUB_LOG")" '{"data":{"n":1}}'
+printf 'x' > "$WORK/outside.png"
+OUT=$(run_err --app $A --upload "$WORK/outside.png" || true)
+check "upload: outside the project refused" "$(printf '%s' "$OUT" | grep -c 'outside your project directory')" "1"
+ln -s "$WORK/proj/pic one.png" "$WORK/proj/link.png"
+OUT=$(run_err --app $A --upload "$WORK/proj/link.png" || true)
+check "upload: symlink refused" "$(printf '%s' "$OUT" | grep -c 'symbolic link')" "1"
+OUT=$(run_err --app $A --upload "$WORK/proj/nope.png" || true)
+check "upload: missing file" "$(printf '%s' "$OUT" | grep -c 'file not found')" "1"
+: > "$WORK/proj/empty.png"
+OUT=$(run_err --app $A --upload "$WORK/proj/empty.png" || true)
+check "upload: empty file refused" "$(printf '%s' "$OUT" | grep -c 'is empty')" "1"
+printf '\x89PNG' > "$WORK/proj/refuse.png"
+OUT=$(run --app $A --upload "$WORK/proj/refuse.png"; true)
+check "upload: Cloud refusal passed through, not a fake success" "$(printf '%s' "$OUT" | jq -c '{success, status, reason}')" '{"success":false,"status":403,"reason":"not_your_app"}'
+printf '\x89PNG' > "$WORK/proj/nourl.png"
+OUT=$(run_err --app $A --upload "$WORK/proj/nourl.png" || true)
+check "upload: 2xx without a url fails, not success with nulls" "$(printf '%s' "$OUT" | grep -c 'without a url')" "1"
+OUT=$(run_err --app $A --upload || true)
+check "upload needs a path" "$(printf '%s' "$OUT" | grep -c 'requires a file path')" "1"
+
 echo "app-data: $PASS passed, $FAIL failed"
 [ "$FAIL" -eq 0 ]

package/config/skills/agent/core/publish-app/SKILL.md

@@ -88,7 +88,7 @@ Output:
   `--list`) — never publish a second app with the same name; the owner then
   sees two. Limits:
   300 files, 5 MB per file, 25 MB per version. The last 10 versions are kept.
-- Read and write the app's data from your side with `app-data`.
+- Read and write the app's data from your side with `app-data`. To put an image into the app, `app-data --app <id> --upload <file>` returns a url you can store in a document.
 
 ## Public apps (only the owner can make one)
 

package/config/skills/agent/core/slack-file/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: Slack File
+description: Get a Slack file by link or id and save it locally — also a file posted in a channel your own bot is not in, or by an agent on another machine. Prints the saved path and, for text files, the first lines.
+version: 1.0.0
+category: communication
+skillType: claude-skill
+triggers:
+  - can't open the slack file
+  - read this slack attachment
+  - download the file from slack
+  - 打不开 slack 文件
+  - 读一下这个附件
+tags:
+  - slack
+  - file
+  - attachment
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 120000
+---
+
+# Slack File
+
+When you see a Slack file you cannot open — a link a colleague pasted, a
+file posted in another channel, `[Slack: ... could not be read]` — fetch it
+yourself. **Never ask a colleague to paste the text.**
+
+```bash
+bash execute.sh get https://acme.slack.com/files/U0ELLA1234/F0ABC12345/longform-en.md
+bash execute.sh get F0ABC12345
+bash execute.sh get https://acme.slack.com/archives/C0MKTG1234/p1696771234567890   # a message with a file
+bash execute.sh get F0ABC12345 --out /path/to/project/longform-en.md
+```
+
+It tries this machine's Slack bots first (yours, the uploader's, the
+channel's agents, the workspace bot), then Crewly Cloud, which holds every
+bot of your account on every machine.
+
+Output: `{ "path", "name", "mimetype", "size", "via", "preview"? }`.
+`path` is where the file is saved (`~/.crewly/tmp/slack-files/` unless
+`--out` is given); `preview` holds the first lines of a text file. Read
+the full file at `path`.
+
+| Error `code` | Meaning / what to do |
+|---|---|
+| `not_visible` | No bot of your account is in the file's channel. Ask the owner to invite you (or the Crewly app) there. |
+| `foreign_workspace` | The link is from a Slack workspace your account has not connected. |
+| `file_deleted` | The file was deleted. |
+| `too_large` | Over 25 MB. |
+| `no_file_in_message` | The message link has no file attached. |

package/config/skills/agent/core/slack-file/execute.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+# slack-file — get a Slack file by link or id (also one your own bot cannot see).
+#
+# Backed by POST /api/slack/files/fetch: this machine's bot tokens first, then
+# Crewly Cloud (every bot of the account).
+#
+# Usage: execute.sh get <link|file id> [--out <path>]
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+usage() {
+  cat <<'USAGE'
+slack-file — get a Slack file by link or id
+
+  get <link|id>   File link (https://<ws>.slack.com/files/...), file id (F...),
+                  download URL, or a message link carrying a file   (required)
+  --out <path>    Also copy the file to this path
+USAGE
+}
+
+CMD=""; REF=""; OUT=""
+while [ $# -gt 0 ]; do
+  case "$1" in
+    get) CMD="get"; REF="${2:-}"; shift; [ $# -gt 0 ] && shift ;;
+    --out|-o) OUT="${2:-}"; shift 2 ;;
+    -h|--help) usage; exit 0 ;;
+    *) if [ -z "$REF" ] && [ "$CMD" = "get" ]; then REF="$1"; shift; else echo "{\"error\":\"Unknown argument: $1\"}" >&2; exit 1; fi ;;
+  esac
+done
+
+if [ "$CMD" != "get" ] || [ -z "$REF" ]; then
+  echo '{"error":"Usage: execute.sh get <link|file id> [--out <path>]"}' >&2
+  usage >&2
+  exit 1
+fi
+
+# Slack mrkdwn links arrive as <url|label>; the backend unwraps them too.
+BODY=$(jq -cn --arg fileRef "$REF" '{fileRef: $fileRef}')
+
+# Test hook: print the request instead of calling the backend.
+if [ "${CREWLY_SKILL_DRY_RUN:-}" = "1" ]; then
+  echo "POST /slack/files/fetch $BODY"
+  exit 0
+fi
+
+if ! RESPONSE=$(api_call POST "/slack/files/fetch" "$BODY" 2>&1); then
+  echo "$RESPONSE" >&2
+  exit 1
+fi
+
+FILE_PATH=$(printf '%s' "$RESPONSE" | jq -r '.data.path // empty')
+if [ -z "$FILE_PATH" ]; then
+  echo "$RESPONSE" >&2
+  exit 1
+fi
+
+if [ -n "$OUT" ]; then
+  mkdir -p "$(dirname "$OUT")"
+  cp "$FILE_PATH" "$OUT"
+  FILE_PATH="$OUT"
+fi
+
+printf '%s' "$RESPONSE" | jq --arg path "$FILE_PATH" '{
+  path: $path,
+  name: .data.file.name,
+  mimetype: .data.file.mimetype,
+  size: .data.file.size,
+  via: .data.file.via
+} + (if .data.preview then {preview: .data.preview} else {} end)
+  + (if (.data.file.otherFileIds // []) | length > 0 then {otherFileIds: .data.file.otherFileIds} else {} end)'

package/config/skills/agent/core/slack-file/execute.test.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# Tests for slack-file: argument parsing, request body, --out copy.
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PASS=0; FAIL=0
+assert_eq() { if [ "$2" = "$3" ]; then echo "PASS: $1"; PASS=$((PASS+1)); else echo "FAIL: $1 — expected '$2', got '$3'"; FAIL=$((FAIL+1)); fi; }
+assert_contains() { if [[ "$3" == *"$2"* ]]; then echo "PASS: $1"; PASS=$((PASS+1)); else echo "FAIL: $1 — expected '$2' in: $3"; FAIL=$((FAIL+1)); fi; }
+
+LINK='https://acme.slack.com/files/U0ELLA1234/F0ABC12345/longform-en.md'
+assert_eq "get <link> → POST with fileRef" "POST /slack/files/fetch {\"fileRef\":\"$LINK\"}" "$(CREWLY_SKILL_DRY_RUN=1 bash "$SCRIPT_DIR/execute.sh" get "$LINK")"
+assert_eq "get <id>" 'POST /slack/files/fetch {"fileRef":"F0ABC12345"}' "$(CREWLY_SKILL_DRY_RUN=1 bash "$SCRIPT_DIR/execute.sh" get F0ABC12345)"
+assert_eq "quotes in the ref stay JSON-safe" 'POST /slack/files/fetch {"fileRef":"F0\"x"}' "$(CREWLY_SKILL_DRY_RUN=1 bash "$SCRIPT_DIR/execute.sh" get 'F0"x')"
+assert_contains "missing ref → usage error" "Usage" "$(bash "$SCRIPT_DIR/execute.sh" get 2>&1 || true)"
+assert_contains "--help prints usage" "slack-file" "$(bash "$SCRIPT_DIR/execute.sh" --help)"
+
+# --out copies the saved file and reports the new path (api_call stubbed).
+TMP="$(mktemp -d)"
+trap 'rm -rf "$TMP"' EXIT
+printf 'hello\n' > "$TMP/saved.md"
+STUB="$TMP/stub-lib.sh"
+cat > "$STUB" <<STUB_EOF
+api_call() { printf '%s' '{"success":true,"data":{"path":"$TMP/saved.md","file":{"name":"longform-en.md","mimetype":"text/markdown","size":6,"via":"cloud:agent:team-ella"},"preview":"hello"}}'; }
+STUB_EOF
+mkdir -p "$TMP/skills/agent/core/slack-file" "$TMP/skills/agent/_common"
+cp "$SCRIPT_DIR/execute.sh" "$TMP/skills/agent/core/slack-file/execute.sh"
+cp "$STUB" "$TMP/skills/agent/_common/lib.sh"
+OUT_JSON="$(bash "$TMP/skills/agent/core/slack-file/execute.sh" get "$LINK" --out "$TMP/out/longform-en.md")"
+assert_eq "--out path reported" "$TMP/out/longform-en.md" "$(printf '%s' "$OUT_JSON" | jq -r .path)"
+assert_eq "--out file copied" "hello" "$(cat "$TMP/out/longform-en.md")"
+assert_eq "preview passed through" "hello" "$(printf '%s' "$OUT_JSON" | jq -r .preview)"
+assert_eq "via passed through" "cloud:agent:team-ella" "$(printf '%s' "$OUT_JSON" | jq -r .via)"
+
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/dist/backend/backend/src/constants.d.ts

@@ -4114,6 +4114,35 @@ export declare const SLACK_RECONNECT_CONSTANTS: {
     /** Number of consecutive ping failures before forcing a reconnect */
     readonly PING_FAILURES_BEFORE_RECONNECT: 2;
 };
+/**
+ * Fetching a Slack file by link or id (`slack-file get`, and files linked
+ * in an inbound message). Local bot tokens first, then Crewly Cloud, which
+ * holds every bot of the account (`POST /api/cloud/slack/files/fetch`).
+ */
+export declare const SLACK_FILE_FETCH_CONSTANTS: {
+    /** Largest file fetched (bytes) — same cap as Cloud */
+    readonly MAX_BYTES: number;
+    /** Cloud endpoint, appended to the cloud URL */
+    readonly CLOUD_FETCH_PATH: "/api/cloud/slack/files/fetch";
+    /** Header carrying the file metadata on Cloud's raw answer (base64url JSON) */
+    readonly CLOUD_META_HEADER: "x-crewly-slack-file";
+    /** Local bot tokens tried at most */
+    readonly MAX_LOCAL_CANDIDATES: 12;
+    /** Slack API / Cloud call timeout (ms) */
+    readonly API_TIMEOUT_MS: 15000;
+    /** Download timeout (ms) */
+    readonly DOWNLOAD_TIMEOUT_MS: 60000;
+    /** Redirect hops followed on a download */
+    readonly MAX_REDIRECTS: 5;
+    /** Linked files auto-fetched per inbound message */
+    readonly MAX_LINKED_PER_MESSAGE: 3;
+    /** Linked files larger than this are not auto-fetched (the agent can still run `slack-file get`) */
+    readonly MAX_LINKED_BYTES: number;
+    /** Lines of a text file shown inline by the skill */
+    readonly PREVIEW_LINES: 20;
+    /** Characters of a text file shown inline by the skill */
+    readonly PREVIEW_CHARS: 2000;
+};
 export declare const SLACK_FILE_DOWNLOAD_CONSTANTS: {
     /** Temp directory for downloaded files (relative to ~/.crewly/) */
     readonly TEMP_DIR: "tmp/slack-files";
@@ -4656,6 +4685,9 @@ export declare const CREWLY_APPS_CONSTANTS: {
     readonly PUBLISH_CLOSE_ABOVE_BYTES: number;
     /** The publish route, for the dedicated body parser registered before the global one */
     readonly PUBLISH_ROUTE: "/api/apps/publish";
+    /** A file upload to an app (POST /api/apps/:appId/files): body cap here; Cloud applies its own, smaller one and its answer is passed through */
+    readonly UPLOAD_BODY_LIMIT: "10mb";
+    readonly UPLOAD_BODY_MAX_BYTES: number;
     /** Cloud request timeout (publish uploads can be large) */
     readonly REQUEST_TIMEOUT_MS: 120000;
     /** Default entry file of a bundle */
@@ -7225,6 +7257,33 @@ export declare const REMOTE_MCP_CONSTANTS: {
     readonly MAX_TOOL_NAMES: 50;
     /** Catalog presets the add form offers. */
     readonly PROVIDERS: readonly string[];
+    /**
+     * OAuth state (clients, tokens, pending sign-ins) under CREWLY_HOME:
+     * AES-256-GCM with the install's master key, mode 0600.
+     */
+    readonly OAUTH_STORE_FILE: "remote-mcp-oauth.enc";
+    /** Master key the OAuth store is encrypted with (under CREWLY_HOME). */
+    readonly OAUTH_MASTER_KEY_FILE: "credentials/master.key";
+    /** Cloud broker that hosts the public redirect URI (crewly-services auth). */
+    readonly OAUTH_CLOUD_PATH: "/api/cloud/mcp-oauth";
+    /** Client name sent in dynamic client registration. */
+    readonly OAUTH_CLIENT_NAME: "Crewly";
+    /** Refresh an access token this long before it expires (Zoho's last ~1 h). */
+    readonly OAUTH_REFRESH_MARGIN_MS: number;
+    /** Assumed lifetime when the token endpoint omits expires_in. */
+    readonly OAUTH_DEFAULT_TOKEN_TTL_MS: number;
+    /** Discovery / registration / token request timeout. */
+    readonly OAUTH_REQUEST_TIMEOUT_MS: 15000;
+    /** Poll the Cloud broker this often while the link is untapped. */
+    readonly OAUTH_POLL_SLOW_MS: 20000;
+    /** ...and this often once the owner has opened it. */
+    readonly OAUTH_POLL_FAST_MS: 2000;
+    /** Post the "sign in" card for a server at most this often while its link is unused. */
+    readonly OAUTH_CARD_THROTTLE_MS: number;
+    /** Agent → backend proxy path suffix: `/api/connectors/remote-mcp/<id>/mcp`. */
+    readonly PROXY_SUFFIX: "/mcp";
+    /** JSON-RPC error code the proxy answers with when the owner must sign in. */
+    readonly PROXY_NEEDS_AUTH_RPC_CODE: -32001;
 };
 /**
  * Reconciler wake pacing (CREW-304). On 2026-10-06 the reconciler traced