crewly 1.20.28 → 1.20.30

package/config/skills/agent/core/drive-read/execute.sh

@@ -0,0 +1,79 @@
+#!/bin/bash
+# =============================================================================
+# drive-read — Read a Drive file's content (Docs/Sheets/Slides exported as text/CSV; other files downloaded)
+#
+# Backed by GET /api/google/drive/files/:id/content.
+#
+# Usage:
+#   bash execute.sh --id <fileId> [--out /path/to/save]
+#   bash execute.sh '{"id":"<fileId>"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --id <fileId> [--out /path/to/save]
+  bash execute.sh '{"id":"<fileId>"}'
+
+Options:
+  --id          Drive file id (required; from drive-search)
+  --out         Save the content to this path instead of printing it (binary files are decoded)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s
+' "$out" | tail -n 1)"; }
+  printf '%s
+' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+ID=""; OUT_PATH=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --id)      [ $# -ge 2 ] || error_exit "--id requires a value";  ID="$2";       shift 2 ;;
+    --out|-o)  [ $# -ge 2 ] || error_exit "--out requires a value"; OUT_PATH="$2"; shift 2 ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$ID" ]       && ID=$(printf '%s' "$INPUT" | jq -r '.id // .fileId // empty')
+  [ -z "$OUT_PATH" ] && OUT_PATH=$(printf '%s' "$INPUT" | jq -r '.out // empty')
+fi
+require_param "id (--id)" "$ID"
+RESPONSE=$(call GET "/google/drive/files/$(uri "$ID")/content") || { printf '%s\n' "$RESPONSE"; exit 1; }
+if printf '%s' "$RESPONSE" | jq -e '.truncated == true' >/dev/null 2>&1; then printf '%s\n' "$RESPONSE"; exit 0; fi
+if [ -n "$OUT_PATH" ]; then
+  ENC=$(printf '%s' "$RESPONSE" | jq -r '.data.encoding')
+  if [ "$ENC" = "base64" ]; then
+    printf '%s' "$RESPONSE" | jq -r '.data.content' | base64 -d > "$OUT_PATH"
+  else
+    printf '%s' "$RESPONSE" | jq -r '.data.content' > "$OUT_PATH"
+  fi
+  printf '%s' "$RESPONSE" | jq -c --arg p "$OUT_PATH" '{file: .data.file, contentType: .data.contentType, bytes: .data.bytes, savedTo: $p}'
+  exit 0
+fi
+printf '%s' "$RESPONSE" | jq -c '{file: .data.file, contentType: .data.contentType, encoding: .data.encoding, bytes: .data.bytes, content: .data.content}'

package/config/skills/agent/core/drive-read/execute.test.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+# Tests for drive-read — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18811
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or (data or {}).get('title') == 'no-grant':
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': {'file': {'id': 'f1', 'name': 'a.txt', 'mimeType': 'text/plain'}, 'contentType': 'text/plain', 'encoding': 'utf8', 'bytes': 2, 'content': 'hi'}}).encode())
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OUT=$(run --id "f 1")
+check "flags: output" "$OUT" '{"file":{"id":"f1","name":"a.txt","mimeType":"text/plain"},"contentType":"text/plain","encoding":"utf8","bytes":2,"content":"hi"}'
+check "flags: path" "$(jq -r .path "$STUB_LOG")" "/api/google/drive/files/f%201/content"
+TMP=$(mktemp)
+OUT=$(run '{"id":"f1"}' --out "$TMP")
+check "out: saved" "$(cat "$TMP")" "hi"
+check "out: metadata" "$OUT" "{\"file\":{\"id\":\"f1\",\"name\":\"a.txt\",\"mimeType\":\"text/plain\"},\"contentType\":\"text/plain\",\"bytes\":2,\"savedTo\":\"$TMP\"}"
+rm -f "$TMP"
+OUT=$(run_err || true)
+check "missing id fails" "$(printf '%s' "$OUT" | grep -c 'id')" "1"
+
+echo "drive-read: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/drive-search/SKILL.md

@@ -0,0 +1,55 @@
+---
+name: Drive Search
+description: Search the owner's Google Drive by text, type or folder (via the Google Workspace grant held by Crewly Cloud). Returns file ids to pass to drive-read / docs-read / sheets-read / slides-read. Read-only.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - search drive
+  - find file in drive
+  - look up a document
+  - which spreadsheet
+tags:
+  - google
+  - drive
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Drive Search
+
+```bash
+bash execute.sh --query "Q3 plan"                 # names + full text, newest first
+bash execute.sh --mime sheet --max 5              # 5 most recent spreadsheets
+bash execute.sh --folder 1AbC... --query budget   # inside one folder
+```
+
+## Output
+
+```json
+{"count":1,"files":[{"id":"1x…","name":"Q3 plan","mimeType":"application/vnd.google-apps.document","modifiedTime":"…","webViewLink":"https://…","owners":["ann@example.com"]}]}
+```
+
+`mimeType` tells you which skill reads it: `…document` → `docs-read`,
+`…spreadsheet` → `sheets-read`, `…presentation` → `slides-read`, anything
+else → `drive-read`.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Google Workspace (Settings → Integrations).
+A `403` with `reason: "google_error"` on a write means the file was not
+created by Crewly — the grant only edits files Crewly made (`drive.file`).

package/config/skills/agent/core/drive-search/execute.sh

@@ -0,0 +1,87 @@
+#!/bin/bash
+# =============================================================================
+# drive-search — Search the owner's Google Drive (read-only)
+#
+# Backed by GET /api/google/drive/files?q=&mimeType=&folderId=&max=.
+#
+# Usage:
+#   bash execute.sh --query "Q3 plan" [--mime doc|sheet|slides|pdf|folder|<mime>] [--folder <id>] [--max 20]
+#   bash execute.sh '{"query":"Q3 plan","mime":"sheet","max":20}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --query "Q3 plan" [--mime doc|sheet|slides|pdf|folder|<mime>] [--folder <id>] [--max 20]
+  bash execute.sh '{"query":"Q3 plan","mime":"sheet","max":20}'
+
+Options:
+  --query, -q   Text matched against file names and full text (empty = most recent files)
+  --mime        Restrict to a type: doc | sheet | slides | pdf | folder | any MIME type
+  --folder      Restrict to a Drive folder id
+  --max         Result cap (default 20, max 100)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s
+' "$out" | tail -n 1)"; }
+  printf '%s
+' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+QUERY=""; MIME=""; FOLDER=""; MAX=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --query|-q) [ $# -ge 2 ] || error_exit "--query requires a value"; QUERY="$2"; shift 2 ;;
+    --mime)     [ $# -ge 2 ] || error_exit "--mime requires a value";  MIME="$2";  shift 2 ;;
+    --folder)   [ $# -ge 2 ] || error_exit "--folder requires a value"; FOLDER="$2"; shift 2 ;;
+    --max|-n)   [ $# -ge 2 ] || error_exit "--max requires a value";   MAX="$2";   shift 2 ;;
+    --help|-h)  print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$QUERY" ]  && QUERY=$(printf '%s' "$INPUT" | jq -r '.query // .q // empty')
+  [ -z "$MIME" ]   && MIME=$(printf '%s' "$INPUT" | jq -r '.mime // .mimeType // empty')
+  [ -z "$FOLDER" ] && FOLDER=$(printf '%s' "$INPUT" | jq -r '.folder // .folderId // empty')
+  [ -z "$MAX" ]    && MAX=$(printf '%s' "$INPUT" | jq -r '.max // empty')
+fi
+case "$MIME" in
+  doc|docs) MIME="application/vnd.google-apps.document" ;;
+  sheet|sheets) MIME="application/vnd.google-apps.spreadsheet" ;;
+  slides|slide|presentation) MIME="application/vnd.google-apps.presentation" ;;
+  pdf) MIME="application/pdf" ;;
+  folder) MIME="application/vnd.google-apps.folder" ;;
+esac
+QS=""
+[ -n "$QUERY" ]  && QS="${QS}&q=$(uri "$QUERY")"
+[ -n "$MIME" ]   && QS="${QS}&mimeType=$(uri "$MIME")"
+[ -n "$FOLDER" ] && QS="${QS}&folderId=$(uri "$FOLDER")"
+[ -n "$MAX" ]    && QS="${QS}&max=$(uri "$MAX")"
+QS="${QS#&}"
+RESPONSE=$(call GET "/google/drive/files${QS:+?$QS}") || { printf '%s\n' "$RESPONSE"; exit 1; }
+if printf '%s' "$RESPONSE" | jq -e '.truncated == true' >/dev/null 2>&1; then printf '%s\n' "$RESPONSE"; exit 0; fi
+printf '%s' "$RESPONSE" | jq -c '{count: .data.count, files: .data.files}'

package/config/skills/agent/core/drive-search/execute.test.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# Tests for drive-search — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18810
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or (data or {}).get('title') == 'no-grant':
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': {'count': 1, 'files': [{'id': '1', 'name': 'Q3', 'mimeType': 'application/vnd.google-apps.document'}]}}).encode())
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OUT=$(run --query "Q3 plan" --mime sheet --folder f1 --max 5)
+check "flags: output" "$OUT" '{"count":1,"files":[{"id":"1","name":"Q3","mimeType":"application/vnd.google-apps.document"}]}'
+check "flags: path" "$(jq -r .path "$STUB_LOG")" "/api/google/drive/files?q=Q3%20plan&mimeType=application%2Fvnd.google-apps.spreadsheet&folderId=f1&max=5"
+run '{"query":"x"}' >/dev/null
+check "json: path" "$(jq -r .path "$STUB_LOG")" "/api/google/drive/files?q=x"
+run >/dev/null
+check "no args: bare list" "$(jq -r .path "$STUB_LOG")" "/api/google/drive/files"
+OUT=$(run --query no-grant || true)
+check "not connected" "$(printf '%s' "$OUT" | jq -r .reason)" "not_connected"
+
+echo "drive-search: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/drive-upload/SKILL.md

@@ -0,0 +1,54 @@
+---
+name: Drive Upload
+description: Upload a local file or text to the owner's Google Drive (via the Google Workspace grant held by Crewly Cloud), optionally into a folder or converted to a Google Doc/Sheet/Slides. Files Crewly uploads can later be edited by docs-write / sheets-write.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - upload to drive
+  - save to google drive
+  - put file in drive
+  - share file via drive
+tags:
+  - google
+  - drive
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Drive Upload
+
+```bash
+bash execute.sh --path ./report.pdf --folder 1Fo…            # binary-safe
+bash execute.sh --path ./notes.md --convert doc               # becomes a Google Doc
+bash execute.sh --name summary.txt --text "…" --folder 1Fo…
+```
+
+## Output
+
+```json
+{"success":true,"file":{"id":"1AbC…","name":"report.pdf","mimeType":"application/pdf","webViewLink":"https://…"}}
+```
+
+Limit: 10 MB per upload. Share the `webViewLink` with people (Drive
+permissions are the owner's — this skill does not change sharing).
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Google Workspace (Settings → Integrations).
+A `403` with `reason: "google_error"` on a write means the file was not
+created by Crewly — the grant only edits files Crewly made (`drive.file`).

package/config/skills/agent/core/drive-upload/execute.sh

@@ -0,0 +1,117 @@
+#!/bin/bash
+# =============================================================================
+# drive-upload — Upload a file (or text) to the owner's Google Drive
+#
+# Backed by POST /api/google/drive/files.
+#
+# Usage:
+#   bash execute.sh --path /path/report.pdf [--name "Report.pdf"] [--folder <id>] [--convert doc|sheet|slides]
+#   bash execute.sh --name notes.txt --text "hello" [--mime text/plain]
+#   bash execute.sh '{"name":"notes.txt","text":"hello","folder":"<id>"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --path /path/report.pdf [--name "Report.pdf"] [--folder <id>] [--convert doc|sheet|slides]
+  bash execute.sh --name notes.txt --text "hello" [--mime text/plain]
+  bash execute.sh '{"name":"notes.txt","text":"hello","folder":"<id>"}'
+
+Options:
+  --path, -p    Local file to upload (binary-safe; MIME detected from the extension).
+                (Not --file: that flag is reserved by the skill runner for JSON input.)
+  --name        Name in Drive (default: the file's basename)
+  --text        Text content instead of --path
+  --mime        MIME type override
+  --folder      Destination folder id (default: My Drive root)
+  --convert     Convert on upload: doc | sheet | slides (e.g. a .docx/.csv/.pptx becomes a Google-native file)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s
+' "$out" | tail -n 1)"; }
+  printf '%s
+' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+FILE=""; NAME=""; TEXT=""; MIME=""; FOLDER=""; CONVERT=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --path|-p) [ $# -ge 2 ] || error_exit "--path requires a value";    FILE="$2";    shift 2 ;;
+    --name)    [ $# -ge 2 ] || error_exit "--name requires a value";    NAME="$2";    shift 2 ;;
+    --text)    [ $# -ge 2 ] || error_exit "--text requires a value";    TEXT="$2";    shift 2 ;;
+    --mime)    [ $# -ge 2 ] || error_exit "--mime requires a value";    MIME="$2";    shift 2 ;;
+    --folder)  [ $# -ge 2 ] || error_exit "--folder requires a value";  FOLDER="$2";  shift 2 ;;
+    --convert) [ $# -ge 2 ] || error_exit "--convert requires a value"; CONVERT="$2"; shift 2 ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$FILE" ]    && FILE=$(printf '%s' "$INPUT" | jq -r '.path // .file // empty')
+  [ -z "$NAME" ]    && NAME=$(printf '%s' "$INPUT" | jq -r '.name // empty')
+  [ -z "$TEXT" ]    && TEXT=$(printf '%s' "$INPUT" | jq -r '.text // .content // empty')
+  [ -z "$MIME" ]    && MIME=$(printf '%s' "$INPUT" | jq -r '.mime // .mimeType // empty')
+  [ -z "$FOLDER" ]  && FOLDER=$(printf '%s' "$INPUT" | jq -r '.folder // .folderId // empty')
+  [ -z "$CONVERT" ] && CONVERT=$(printf '%s' "$INPUT" | jq -r '.convert // .convertTo // empty')
+fi
+case "$CONVERT" in
+  doc|docs) CONVERT="application/vnd.google-apps.document" ;;
+  sheet|sheets) CONVERT="application/vnd.google-apps.spreadsheet" ;;
+  slides|slide|presentation) CONVERT="application/vnd.google-apps.presentation" ;;
+esac
+mime_from_ext() {
+  case "${1##*.}" in
+    txt) echo text/plain ;; md) echo text/markdown ;; csv) echo text/csv ;; json) echo application/json ;;
+    html|htm) echo text/html ;; pdf) echo application/pdf ;; png) echo image/png ;; jpg|jpeg) echo image/jpeg ;;
+    gif) echo image/gif ;; mp4) echo video/mp4 ;; zip) echo application/zip ;;
+    docx) echo application/vnd.openxmlformats-officedocument.wordprocessingml.document ;;
+    xlsx) echo application/vnd.openxmlformats-officedocument.spreadsheetml.sheet ;;
+    pptx) echo application/vnd.openxmlformats-officedocument.presentationml.presentation ;;
+    *) echo application/octet-stream ;;
+  esac
+}
+ENCODING="utf8"; CONTENT=""
+if [ -n "$FILE" ]; then
+  [ -f "$FILE" ] || error_exit "file not found: $FILE"
+  [ -z "$NAME" ] && NAME=$(basename "$FILE")
+  [ -z "$MIME" ] && MIME=$(mime_from_ext "$FILE")
+  case "$MIME" in
+    text/*|application/json) CONTENT=$(cat "$FILE") ;;
+    *) ENCODING="base64"; CONTENT=$(base64 < "$FILE" | tr -d '\n') ;;
+  esac
+else
+  CONTENT="$TEXT"
+  [ -z "$MIME" ] && MIME="text/plain"
+fi
+require_param "name (--name or --path)" "$NAME"
+require_param "content (--path or --text)" "$CONTENT"
+BODY=$(jq -cn --arg name "$NAME" --arg content "$CONTENT" --arg enc "$ENCODING" --arg mime "$MIME" --arg folder "$FOLDER" --arg convert "$CONVERT" \
+  '{name: $name, content: $content, encoding: $enc, mimeType: $mime}
+   + (if $folder != "" then {folderId: $folder} else {} end)
+   + (if $convert != "" then {convertTo: $convert} else {} end)')
+RESPONSE=$(call POST "/google/drive/files" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), file: .data}'

package/config/skills/agent/core/drive-upload/execute.test.sh

@@ -0,0 +1,57 @@
+#!/bin/bash
+# Tests for drive-upload — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18812
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or (data or {}).get('title') == 'no-grant':
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': {'id': 'u1', 'name': data.get('name'), 'mimeType': data.get('convertTo') or data.get('mimeType'), 'webViewLink': 'https://v'}}).encode())
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+TMP="$(mktemp).md"; printf 'hello' > "$TMP"
+OUT=$(run --path "$TMP" --folder f1 --convert doc)
+check "file: output" "$OUT" "{\"success\":true,\"file\":{\"id\":\"u1\",\"name\":\"$(basename "$TMP")\",\"mimeType\":\"application/vnd.google-apps.document\",\"webViewLink\":\"https://v\"}}"
+check "file: body" "$(jq -c '.body' "$STUB_LOG")" "{\"name\":\"$(basename "$TMP")\",\"content\":\"hello\",\"encoding\":\"utf8\",\"mimeType\":\"text/markdown\",\"folderId\":\"f1\",\"convertTo\":\"application/vnd.google-apps.document\"}"
+rm -f "$TMP"
+BIN="$(mktemp).png"; printf '\x89PNG\x00' > "$BIN"
+run --path "$BIN" >/dev/null
+check "binary: base64" "$(jq -r '.body.encoding + " " + .body.content + " " + .body.mimeType' "$STUB_LOG")" "base64 iVBORwA= image/png"
+rm -f "$BIN"
+run --name a.txt --text "plain" >/dev/null
+check "text: body" "$(jq -c '.body' "$STUB_LOG")" '{"name":"a.txt","content":"plain","encoding":"utf8","mimeType":"text/plain"}'
+check "text: path" "$(jq -r .path "$STUB_LOG")" "/api/google/drive/files"
+
+echo "drive-upload: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/sheets-read/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: Sheets Read
+description: Read a range of a Google Sheet as rows (unformatted values), or list its tabs with --info (via the Google Workspace grant held by Crewly Cloud). Accepts an id or URL. Read-only.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - read spreadsheet
+  - read google sheet
+  - what is in the sheet
+  - pull rows from the sheet
+tags:
+  - google
+  - sheets
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Sheets Read
+
+```bash
+bash execute.sh --id 1AbC… --info                  # {"id","title","sheets":[{"title":"Q3",...}]}
+bash execute.sh --id 1AbC… --range "Q3!A1:D50"
+```
+
+## Output
+
+```json
+{"spreadsheetId":"1AbC…","range":"Q3!A1:D50","rowCount":2,"rows":[["name","email"],["Ann","ann@example.com"]]}
+```
+
+Rows may be ragged (trailing empty cells are omitted by Google). Numbers
+come back as numbers, dates as the sheet's formatted string.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Google Workspace (Settings → Integrations).
+A `403` with `reason: "google_error"` on a write means the file was not
+created by Crewly — the grant only edits files Crewly made (`drive.file`).