crewly 1.20.281 → 1.20.283

package/config/skills/agent/core/receive-file/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: Receive File
+description: Download a large file another agent of the same Crewly account sent with send-file (handoff id hf_…), save it in your workspace, verify its size, then tell Crewly Cloud to delete it. Use when a message gives you a handoff id or says "receive it with the receive-file skill".
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - "*"
+triggers:
+  - receive file
+  - download handoff
+  - hf_
+  - get the file from
+  - fetch the video
+tags:
+  - files
+  - handoff
+  - transfer
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 3600000
+---
+
+# Receive File
+
+Downloads a file handed to you with `send-file` (by any agent of your own
+Crewly account, on this or another machine). The file streams to disk, never
+through memory; its size is checked against what the sender declared; then the
+temporary copy on the server is deleted.
+
+```bash
+bash execute.sh --id hf_AbCdEfGhIjKlMnOpQrStUv
+bash execute.sh --id hf_… --dir ./inbox
+```
+
+Prints:
+
+```json
+{"success":true,"path":"/…/received/daily-2026-10-09.mp4","fileName":"daily-2026-10-09.mp4","sizeBytes":314572800,"note":"today's cut","acked":true}
+```
+
+- `--dir`: where to save (default `received/` in your project directory).
+  An existing file is never overwritten; a number is added to the name.
+- If the size does not match, nothing is acknowledged and the partial file is
+  removed: run it again (the server copy stays until it is acknowledged or
+  24 hours pass).
+- An interrupted download keeps its `.part` file and resumes on the next run.
+- `--no-ack` keeps the server copy so another run can fetch it again.
+- A handoff is gone once received, cancelled or expired (24 h): ask the sender
+  to send it again.

package/config/skills/agent/core/receive-file/execute.sh

@@ -0,0 +1,125 @@
+#!/bin/bash
+# =============================================================================
+# receive-file — download a file handed over with send-file, verify its size,
+# acknowledge it (Cloud then deletes it). crewly-services apps/SPEC.md section 18.
+#
+# The backend (GET /api/apps/handoffs/:id) answers metadata and a presigned
+# download URL; curl streams it straight to disk (resumable via a .part file).
+#
+# Usage:
+#   bash execute.sh --id hf_… [--dir <folder>] [--no-ack]
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --id hf_… [--dir <folder>] [--no-ack]
+
+Options:
+  --id        Handoff id from the sender (required)
+  --dir       Folder to save into (default: received/ in your project directory)
+  --no-ack    Do not delete the server copy afterwards
+  --help | -h Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, status: (.status // 0), reason: (.details.error // .error // "unknown"), message: (.details.message // .details // "")}' 2>/dev/null \
+    || jq -cn --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+ID=""; DIR=""; ACK=1
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --id)      [ $# -ge 2 ] || error_exit "--id requires a value"; ID="$2"; shift 2 ;;
+    --dir)     [ $# -ge 2 ] || error_exit "--dir requires a value"; DIR="$2"; shift 2 ;;
+    --no-ack)  ACK=0; shift ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+[ -n "$ID" ] || error_exit "--id is required"
+[[ "$ID" =~ ^hf_[A-Za-z0-9_-]{22}$ ]] || error_exit "--id must be a handoff id like hf_… (22 characters after hf_)"
+[ -n "$DIR" ] || DIR="${CREWLY_PROJECT_PATH:-$PWD}/received"
+command -v node >/dev/null 2>&1 || error_exit "node is required"
+
+# The destination folder must not be inside the Crewly home directory.
+check_dir() {
+  RF_DIR="$1" node <<'NODE'
+const fs = require('fs'); const path = require('path'); const os = require('os');
+const abs = path.resolve(process.env.RF_DIR);
+fs.mkdirSync(abs, { recursive: true });
+const r = fs.realpathSync(abs);
+const homes = [path.join(os.homedir(), '.crewly'), process.env.CREWLY_HOME].filter(Boolean).map((p) => { try { return fs.realpathSync(p); } catch { return path.resolve(p); } });
+if (homes.some((h) => r === h || r.startsWith(h + path.sep))) { process.stderr.write(JSON.stringify({ error: 'the folder is inside the Crewly home directory' }) + '\n'); process.exit(1); }
+process.stdout.write(r);
+NODE
+}
+DIR=$(check_dir "$DIR") || exit 1
+
+META=$(call GET "/apps/handoffs/${ID}") || { printf '%s\n' "$META"; exit 1; }
+STATUS=$(printf '%s' "$META" | jq -r '.data.status // empty')
+if [ "$STATUS" != "ready" ]; then
+  jq -cn '{success: false, reason: "not_ready", message: "The sender has not finished uploading. Ask them to confirm, then run this again."}'
+  exit 1
+fi
+URL=$(printf '%s' "$META" | jq -r '.data.download.url // empty')
+SIZE=$(printf '%s' "$META" | jq -r '.data.sizeBytes // empty')
+RAW_NAME=$(printf '%s' "$META" | jq -r '.data.fileName // "file"')
+NOTE=$(printf '%s' "$META" | jq -r '.data.note // empty')
+[ -n "$URL" ] && [[ "$SIZE" =~ ^[0-9]+$ ]] || error_exit "Cloud answered without a download URL"
+
+# A safe local name: the last path segment, no leading dots.
+NAME=$(printf '%s' "$RAW_NAME" | tr '\\' '/' | awk -F/ '{print $NF}' | sed 's/^[.[:space:]]*//')
+[ -n "$NAME" ] || NAME="file"
+
+# The .part file is named by handoff id so an interrupted run resumes.
+PART="${DIR}/.${ID}.part"
+if [ -f "$PART" ]; then
+  HAVE=$(wc -c < "$PART" | tr -d ' ')
+  [ "$HAVE" -le "$SIZE" ] || rm -f "$PART"
+fi
+CODE=$(curl -sS -o "$PART" -w '%{http_code}' --connect-timeout 30 --retry 3 --retry-delay 3 -C - "$URL" 2>/dev/null) || CODE="000"
+# 200 = whole body, 206 = resumed, 416 = the .part was already complete.
+case "$CODE" in 200|206|416) ;; *)
+  [ "$CODE" = "000" ] || rm -f "$PART"
+  jq -cn --arg c "$CODE" '{success: false, reason: "download_failed", message: ("The download failed (HTTP " + $c + "). Run the skill again; a partial file is resumed.")}'
+  exit 1 ;;
+esac
+
+GOT=$(wc -c < "$PART" | tr -d ' ')
+if [ "$GOT" != "$SIZE" ]; then
+  rm -f "$PART"
+  jq -cn --argjson g "$GOT" --argjson s "$SIZE" '{success: false, reason: "size_mismatch", message: ("Downloaded " + ($g|tostring) + " bytes, expected " + ($s|tostring) + ". The partial file was removed and the server copy kept; run the skill again.")}'
+  exit 1
+fi
+
+# Final name: never overwrite.
+DEST="${DIR}/${NAME}"
+if [ -e "$DEST" ]; then
+  BASE="${NAME%.*}"; EXT=""
+  [ "$BASE" != "$NAME" ] && EXT=".${NAME##*.}"
+  N=1
+  while [ -e "${DIR}/${BASE}-${N}${EXT}" ]; do N=$((N+1)); done
+  DEST="${DIR}/${BASE}-${N}${EXT}"
+fi
+mv "$PART" "$DEST"
+
+ACKED=false
+if [ "$ACK" = "1" ]; then
+  if api_call POST "/apps/handoffs/${ID}/ack" >/dev/null 2>&1; then ACKED=true; fi
+fi
+
+jq -cn --arg p "$DEST" --arg n "$NAME" --argjson s "$SIZE" --arg note "$NOTE" --argjson a "$ACKED" \
+  '{success: true, path: $p, fileName: $n, sizeBytes: $s, acked: $a} + (if $note != "" then {note: $note} else {} end)
+   + (if $a then {} else {warning: "The server copy was not deleted (it is removed automatically after 24 hours)."} end)'

package/config/skills/agent/core/receive-file/execute.test.sh

@@ -0,0 +1,80 @@
+#!/bin/bash
+# Tests for receive-file — run with: bash execute.test.sh
+# A Python stub plays both the Crewly backend and the object storage.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1"; echo "  want: $3"; echo "  got:  $2"; fi; }
+
+PORT=18862
+STUB_LOG="$(mktemp)"; export STUB_LOG STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+OK = 'hf_AbCdEfGhIjKlMnOpQrStUv'; SHORT = 'hf_ShortShortShortShortSh'; PEND = 'hf_PendPendPendPendPendPe'
+DATA = b'x' * 2000000
+def note(**kw):
+    with open(LOG, 'a') as f: f.write(json.dumps(kw) + '\n')
+class H(BaseHTTPRequestHandler):
+    def send(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers(); self.wfile.write(json.dumps(obj).encode())
+    def do_GET(self):
+        if self.path.startswith('/store/'):
+            data = DATA[:1000] if 'short' in self.path else DATA
+            note(op='download', range=self.headers.get('Range'))
+            self.send_response(200); self.send_header('Content-Length', str(len(data))); self.end_headers(); self.wfile.write(data); return
+        hid = self.path.rsplit('/', 1)[-1]
+        if hid == PEND:
+            return self.send(200, {'success': True, 'data': {'handoffId': hid, 'status': 'pending', 'sizeBytes': 5, 'fileName': 'a'}})
+        if hid in (OK, SHORT):
+            return self.send(200, {'success': True, 'data': {'handoffId': hid, 'status': 'ready', 'sizeBytes': len(DATA), 'fileName': '../../evil name.mp4', 'note': 'today',
+                'download': {'url': f'http://127.0.0.1:{PORT}/store/' + ('short' if hid == SHORT else 'ok'), 'expiresAt': 'x'}}})
+        self.send(404, {'success': False, 'error': 'not_found', 'message': 'This handoff is gone.'})
+    def do_POST(self):
+        note(op='ack' if self.path.endswith('/ack') else 'other', path=self.path, session=self.headers.get('X-Agent-Session')); self.send(200, {'success': True, 'data': {'deleted': True}})
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+WORK="$(cd "$(mktemp -d)" && pwd -P)"
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -rf "$STUB_LOG" "$WORK"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+mkdir -p "$WORK/home/.crewly" "$WORK/proj"
+ENVS=(CREWLY_API_URL="http://127.0.0.1:${PORT}" CREWLY_SESSION_NAME=dev-mia HOME="$WORK/home" CREWLY_HOME="$WORK/home/.crewly" CREWLY_PROJECT_PATH="$WORK/proj")
+run() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OK=hf_AbCdEfGhIjKlMnOpQrStUv
+OUT=$(run --id $OK)
+DEST="$WORK/proj/received/evil name.mp4"
+check "result" "$(printf '%s' "$OUT" | jq -c '{success, fileName, sizeBytes, acked, note}')" '{"success":true,"fileName":"evil name.mp4","sizeBytes":2000000,"acked":true,"note":"today"}'
+check "saved in the default folder under a safe name" "$(wc -c < "$DEST" | tr -d ' ')" "2000000"
+check "ack sent as this agent" "$(grep '"op": "ack"' "$STUB_LOG" | jq -c '{path, session}')" '{"path":"/api/apps/handoffs/hf_AbCdEfGhIjKlMnOpQrStUv/ack","session":"dev-mia"}'
+check "no .part left" "$(ls -a "$WORK/proj/received" | grep -c part)" "0"
+
+OUT=$(run --id $OK --dir "$WORK/proj/inbox")
+check "second copy goes to --dir" "$(printf '%s' "$OUT" | jq -r .path)" "$WORK/proj/inbox/evil name.mp4"
+run --id $OK >/dev/null
+check "never overwrites" "$(ls "$WORK/proj/received" | sort | tr '\n' '|')" "evil name-1.mp4|evil name.mp4|"
+
+: > "$STUB_LOG"
+OUT=$(run --id $OK --no-ack --dir "$WORK/proj/noack")
+check "--no-ack keeps the server copy" "$(printf '%s' "$OUT" | jq -c '{acked, warning: (.warning != null)}')" '{"acked":false,"warning":true}'
+check "no ack request" "$(grep -c '"op": "ack"' "$STUB_LOG")" "0"
+
+: > "$STUB_LOG"
+OUT=$(run --id hf_ShortShortShortShortSh --dir "$WORK/proj/short"; true)
+check "size mismatch fails, removes the partial and does not ack" "$(printf '%s' "$OUT" | jq -r .reason)|$(ls -A "$WORK/proj/short" | wc -l | tr -d ' ')|$(grep -c '"op": "ack"' "$STUB_LOG")" "size_mismatch|0|0"
+
+OUT=$(run --id hf_PendPendPendPendPendPe; true)
+check "pending handoff is not ready" "$(printf '%s' "$OUT" | jq -r .reason)" "not_ready"
+OUT=$(run --id hf_GoneGoneGoneGoneGoneGo; true)
+check "unknown handoff passes Cloud's reason" "$(printf '%s' "$OUT" | jq -r .reason)" "not_found"
+check "bad id refused" "$(run_err --id nope | grep -c 'handoff id')" "1"
+check "dir inside Crewly home refused" "$(run_err --id $OK --dir "$WORK/home/.crewly/x" | grep -c 'Crewly home')" "1"
+
+echo "receive-file: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/send-file/SKILL.md

@@ -0,0 +1,62 @@
+---
+name: Send File
+description: Hand a LARGE file (video, archive, dataset, up to 2 GB) to another agent of the same Crewly account, on this or another machine, through a temporary Crewly Cloud relay. Prefer this over Drive or Slack for anything bigger than a few MB. The receiver deletes it with receive-file; unclaimed files are deleted after 24 hours.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - "*"
+triggers:
+  - send file
+  - send a large file
+  - hand off a file
+  - pass the video to
+  - transfer file to agent
+  - share a big file
+tags:
+  - files
+  - handoff
+  - transfer
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 3600000
+---
+
+# Send File
+
+Passes one big file to another agent of **your own Crewly account**
+(same machine or another one) without Slack or Drive. Needs the machine to be
+signed in to Crewly Cloud. The file is streamed from disk (never loaded into
+memory), kept on a temporary server, and deleted as soon as the receiver
+acknowledges it, or after 24 hours.
+
+```bash
+bash execute.sh --path ./out/daily-2026-10-09.mp4 --note "today's cut, 300 MB" --to Mia
+```
+
+Prints:
+
+```json
+{"success":true,"handoffId":"hf_…","fileName":"daily-2026-10-09.mp4","sizeBytes":314572800,"expiresAt":"…",
+ "instruction":"Receive it with the receive-file skill: bash <skills>/core/receive-file/execute.sh --id hf_… [--dir <folder>]"}
+```
+
+**Send the `instruction` line to the receiving agent** (use your normal
+agent-to-agent message), and tell it the handoff id. Do not post the id anywhere
+public.
+
+Options:
+
+- `--path` (required): a regular file inside your project directory (not a
+  symlink, not inside Crewly's home). Max 2 GB; the account may hold 5 GB of
+  waiting handoffs at once, so wait for receivers to finish before sending more.
+- `--name`: the name the receiver sees (default: the file's name).
+- `--note`: one line for the receiver. `--to`: who it is for (informational).
+- `--content-type`: default from the extension.
+
+Not for secrets or credentials. Not for files under ~5 MB that can go in a
+message. Cancel a handoff you no longer want received with
+`bash execute.sh --cancel hf_…`.

package/config/skills/agent/core/send-file/execute.sh

@@ -0,0 +1,145 @@
+#!/bin/bash
+# =============================================================================
+# send-file — hand a large file to another agent of the same Crewly account
+# through the Cloud file-handoff relay (crewly-services apps/SPEC.md section 18).
+#
+# The backend (POST /api/apps/handoffs) asks Cloud for a presigned upload URL;
+# this script then streams the file straight to object storage with curl -T
+# (from disk, never buffered), and confirms with /complete.
+#
+# Usage:
+#   bash execute.sh --path <file> [--name <name>] [--note <text>] [--to <agent>] [--content-type <type>]
+#   bash execute.sh --cancel <handoffId>
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --path <file> [--name <name>] [--note <text>] [--to <agent>] [--content-type <type>]
+  bash execute.sh --cancel <handoffId>
+
+Options:
+  --path          Regular file inside your project directory, up to 2 GB (required)
+  --name          Name the receiver sees (default: the file's name)
+  --note          One line for the receiver
+  --to            Who it is for (informational; any agent of the account can receive it)
+  --content-type  MIME type (default: from the extension)
+  --cancel        Withdraw a handoff you made (deletes the uploaded file)
+  --help | -h     Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, status: (.status // 0), reason: (.details.error // .error // "unknown"), message: (.details.message // .details // "")}' 2>/dev/null \
+    || jq -cn --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+content_type_for() {
+  case "$(printf '%s' "${1##*.}" | tr '[:upper:]' '[:lower:]')" in
+    mp4|m4v) echo video/mp4 ;;
+    mov) echo video/quicktime ;;
+    webm) echo video/webm ;;
+    mkv) echo video/x-matroska ;;
+    mp3) echo audio/mpeg ;;
+    wav) echo audio/wav ;;
+    m4a) echo audio/mp4 ;;
+    png) echo image/png ;;
+    jpg|jpeg) echo image/jpeg ;;
+    pdf) echo application/pdf ;;
+    zip) echo application/zip ;;
+    json) echo application/json ;;
+    csv) echo text/csv ;;
+    txt|md|log) echo text/plain ;;
+    *) echo application/octet-stream ;;
+  esac
+}
+
+# Regular, non-symlink file inside the project directory, never under Crewly's
+# home. Prints the real path, then the size in bytes.
+check_file() {
+  command -v node >/dev/null 2>&1 || error_exit "node is required"
+  CF_PATH="$1" CF_PROJECT="${CREWLY_PROJECT_PATH:-$PWD}" node <<'NODE'
+const fs = require('fs'); const path = require('path'); const os = require('os');
+const fail = (m) => { process.stderr.write(JSON.stringify({ error: m }) + '\n'); process.exit(1); };
+const real = (p) => { try { return fs.realpathSync(p); } catch { return null; } };
+const within = (c, p) => c === p || c.startsWith(p.endsWith(path.sep) ? p : p + path.sep);
+const given = process.env.CF_PATH;
+const abs = path.resolve(given);
+let st;
+try { st = fs.lstatSync(abs); } catch { fail(`file not found: ${given}`); }
+if (st.isSymbolicLink()) fail(`${given} is a symbolic link; pass the real file`);
+if (!st.isFile()) fail(`${given} is not a regular file`);
+if (st.size === 0) fail(`${given} is empty`);
+const r = real(abs); const project = real(process.env.CF_PROJECT || process.cwd());
+if (!project) fail('cannot resolve the project directory');
+const homes = [path.join(os.homedir(), '.crewly'), process.env.CREWLY_HOME].filter(Boolean).map((p) => real(p) || path.resolve(p));
+if (homes.some((h) => within(r, h))) fail(`${given} is inside Crewly's home directory`);
+if (!within(r, project)) fail(`${given} is outside your project directory (${project}); copy it there first`);
+process.stdout.write(r + '\n' + st.size + '\n');
+NODE
+}
+
+FILE=""; NAME=""; NOTE=""; TO=""; CTYPE=""; CANCEL=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --path)         [ $# -ge 2 ] || error_exit "--path requires a value"; FILE="$2"; shift 2 ;;
+    --name)         [ $# -ge 2 ] || error_exit "--name requires a value"; NAME="$2"; shift 2 ;;
+    --note)         [ $# -ge 2 ] || error_exit "--note requires a value"; NOTE="$2"; shift 2 ;;
+    --to)           [ $# -ge 2 ] || error_exit "--to requires a value"; TO="$2"; shift 2 ;;
+    --content-type) [ $# -ge 2 ] || error_exit "--content-type requires a value"; CTYPE="$2"; shift 2 ;;
+    --cancel)       [ $# -ge 2 ] || error_exit "--cancel requires a handoff id"; CANCEL="$2"; shift 2 ;;
+    --help|-h)      print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+
+if [ -n "$CANCEL" ]; then
+  [[ "$CANCEL" =~ ^hf_[A-Za-z0-9_-]{22}$ ]] || error_exit "--cancel needs a handoff id like hf_…"
+  RESULT=$(call DELETE "/apps/handoffs/${CANCEL}") || { printf '%s\n' "$RESULT"; exit 1; }
+  jq -cn --arg id "$CANCEL" '{success: true, handoffId: $id, cancelled: true}'
+  exit 0
+fi
+
+[ -n "$FILE" ] || error_exit "--path is required"
+INFO=$(check_file "$FILE") || { printf '%s\n' "$INFO" >&2; exit 1; }
+REAL=$(printf '%s\n' "$INFO" | sed -n 1p)
+SIZE=$(printf '%s\n' "$INFO" | sed -n 2p)
+[ -n "$NAME" ] || NAME="$(basename "$REAL")"
+[ -n "$CTYPE" ] || CTYPE="$(content_type_for "$REAL")"
+
+BODY=$(jq -cn --arg n "$NAME" --argjson s "$SIZE" --arg c "$CTYPE" --arg note "$NOTE" --arg to "$TO" \
+  '{fileName: $n, sizeBytes: $s, contentType: $c} + (if $note != "" then {note: $note} else {} end) + (if $to != "" then {to: $to} else {} end)')
+CREATED=$(call POST "/apps/handoffs" "$BODY") || { printf '%s\n' "$CREATED"; exit 1; }
+ID=$(printf '%s' "$CREATED" | jq -r '.data.handoffId // empty')
+URL=$(printf '%s' "$CREATED" | jq -r '.data.upload.url // empty')
+[ -n "$ID" ] && [ -n "$URL" ] || error_exit "Cloud answered without an upload URL"
+
+# Headers the presigned URL was signed with; the file streams from disk (-T).
+HDRS=()
+while IFS= read -r line; do HDRS+=(-H "$line"); done < <(printf '%s' "$CREATED" | jq -r '.data.upload.headers // {} | to_entries[] | "\(.key): \(.value)"')
+
+cancel_quietly() { api_call DELETE "/apps/handoffs/${ID}" >/dev/null 2>&1 || true; }
+
+CODE=$(curl -sS -o /dev/null -w '%{http_code}' --connect-timeout 30 --retry 3 --retry-delay 3 -X PUT -T "$REAL" ${HDRS[@]+"${HDRS[@]}"} "$URL" 2>/dev/null) || CODE="000"
+if [ "$CODE" != "200" ]; then
+  cancel_quietly
+  jq -cn --arg c "$CODE" '{success: false, reason: "upload_failed", message: ("The upload to temporary storage failed (HTTP " + $c + "). Nothing was kept; try again.")}'
+  exit 1
+fi
+
+DONE=$(api_call POST "/apps/handoffs/${ID}/complete" 2>&1) || { cancel_quietly; fail_from "$(printf '%s\n' "$DONE" | tail -n 1)"; }
+EXPIRES=$(printf '%s\n' "$DONE" | tail -n 1 | jq -r '.data.expiresAt // empty')
+
+jq -cn --arg id "$ID" --arg n "$NAME" --argjson s "$SIZE" --arg e "$EXPIRES" \
+  '{success: true, handoffId: $id, fileName: $n, sizeBytes: $s, expiresAt: $e,
+    instruction: ("Receive it with the receive-file skill: bash <skills>/core/receive-file/execute.sh --id " + $id + " [--dir <folder>]")}'

package/config/skills/agent/core/send-file/execute.test.sh

@@ -0,0 +1,81 @@
+#!/bin/bash
+# Tests for send-file — run with: bash execute.test.sh
+# A Python stub plays both the Crewly backend and the object storage.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1"; echo "  want: $3"; echo "  got:  $2"; fi; }
+
+PORT=18861
+STUB_LOG="$(mktemp)"; STORE="$(mktemp)"; export STUB_LOG STORE STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; STORE = os.environ['STORE']; PORT = int(os.environ['STUB_PORT'])
+ID = 'hf_AbCdEfGhIjKlMnOpQrStUv'
+def note(**kw):
+    with open(LOG, 'a') as f: f.write(json.dumps(kw) + '\n')
+class H(BaseHTTPRequestHandler):
+    def send(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers(); self.wfile.write(json.dumps(obj).encode())
+    def body(self):
+        n = int(self.headers.get('Content-Length') or 0); return self.rfile.read(n)
+    def do_POST(self):
+        b = self.body()
+        if self.path == '/api/apps/handoffs':
+            req = json.loads(b); note(op='create', req=req, session=self.headers.get('X-Agent-Session'))
+            if req['fileName'] == 'refuse.bin':
+                return self.send(402, {'success': False, 'error': 'quota_exceeded', 'message': 'Too many bytes waiting.'})
+            return self.send(201, {'success': True, 'data': {'handoffId': ID, 'status': 'pending', 'upload': {'url': f'http://127.0.0.1:{PORT}/store/obj', 'method': 'PUT', 'headers': {'Content-Type': req['contentType'], 'x-amz-server-side-encryption': 'AES256'}}}})
+        if self.path == f'/api/apps/handoffs/{ID}/complete':
+            note(op='complete'); return self.send(200, {'success': True, 'data': {'handoffId': ID, 'status': 'ready', 'expiresAt': '2026-10-10T00:00:00.000Z'}})
+        self.send(404, {'success': False})
+    def do_DELETE(self):
+        note(op='cancel', path=self.path); self.send(200, {'success': True, 'data': {'deleted': True}})
+    def do_PUT(self):
+        b = self.body()
+        note(op='put', bytes=len(b), ctype=self.headers.get('Content-Type'), sse=self.headers.get('x-amz-server-side-encryption'))
+        self.send_response(500 if os.path.exists(STORE + '.fail') else 200); self.end_headers()
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+WORK="$(mktemp -d)"
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -rf "$STUB_LOG" "$STORE" "$STORE.fail" "$WORK"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+mkdir -p "$WORK/home/.crewly" "$WORK/proj"
+ENVS=(CREWLY_API_URL="http://127.0.0.1:${PORT}" CREWLY_SESSION_NAME=dev-ella HOME="$WORK/home" CREWLY_HOME="$WORK/home/.crewly" CREWLY_PROJECT_PATH="$WORK/proj")
+run() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+head -c 3000000 /dev/zero > "$WORK/proj/daily.mp4"
+OUT=$(run --path "$WORK/proj/daily.mp4" --note "today" --to Mia)
+check "result" "$(printf '%s' "$OUT" | jq -c '{success, handoffId, fileName, sizeBytes, expiresAt}')" '{"success":true,"handoffId":"hf_AbCdEfGhIjKlMnOpQrStUv","fileName":"daily.mp4","sizeBytes":3000000,"expiresAt":"2026-10-10T00:00:00.000Z"}'
+check "instruction names the receiver skill" "$(printf '%s' "$OUT" | jq -r '.instruction' | grep -c 'receive-file/execute.sh --id hf_AbCdEfGhIjKlMnOpQrStUv')" "1"
+check "create request" "$(sed -n 1p "$STUB_LOG" | jq -c '{req, session}')" '{"req":{"fileName":"daily.mp4","sizeBytes":3000000,"contentType":"video/mp4","note":"today","to":"Mia"},"session":"dev-ella"}'
+check "upload streamed with signed headers" "$(sed -n 2p "$STUB_LOG" | jq -c '{bytes, ctype, sse}')" '{"bytes":3000000,"ctype":"video/mp4","sse":"AES256"}'
+check "complete called" "$(sed -n 3p "$STUB_LOG" | jq -r .op)" "complete"
+
+: > "$STUB_LOG"
+OUT=$(run --path "$WORK/proj/daily.mp4" --name "refuse.bin"; true)
+check "cloud refusal passed through" "$(printf '%s' "$OUT" | jq -c '{success, reason}')" '{"success":false,"reason":"quota_exceeded"}'
+
+: > "$STUB_LOG"; touch "$STORE.fail"
+OUT=$(run --path "$WORK/proj/daily.mp4"; true)
+check "failed upload reports and cancels" "$(printf '%s' "$OUT" | jq -r .reason)" "upload_failed"
+check "cancel issued" "$(grep -c '"op": "cancel"' "$STUB_LOG")" "1"
+rm -f "$STORE.fail"
+
+echo secret > "$WORK/outside.txt"; ln -s "$WORK/proj/daily.mp4" "$WORK/proj/link.mp4"
+check "outside project refused" "$(run_err --path "$WORK/outside.txt" | grep -c 'outside your project directory')" "1"
+check "symlink refused" "$(run_err --path "$WORK/proj/link.mp4" | grep -c 'symbolic link')" "1"
+check "missing file refused" "$(run_err --path "$WORK/proj/nope" | grep -c 'file not found')" "1"
+check "path required" "$(run_err | grep -c -- '--path is required')" "1"
+: > "$STUB_LOG"
+run --cancel hf_AbCdEfGhIjKlMnOpQrStUv >/dev/null
+check "cancel" "$(jq -r .path "$STUB_LOG")" "/api/apps/handoffs/hf_AbCdEfGhIjKlMnOpQrStUv"
+
+echo "send-file: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/dist/backend/backend/src/constants.d.ts

@@ -1663,6 +1663,23 @@ export declare const ACTIVITY_MONITOR_CONSTANTS: {
      *  (spinners, TUI re-renders). Default: 15 minutes. */
     readonly MAX_IN_PROGRESS_MS: 900000;
 };
+/**
+ * Antigravity "Running command..." hang (2026-10-10): agy's TUI kept a
+ * "Running command..." spinner for 8+ minutes after the command had finished
+ * and agy had no child process. The agent stayed busy forever, so queued
+ * messages and the runtime switch (which waits for a safe point) never ran.
+ * Escape un-sticks it.
+ */
+export declare const ANTIGRAVITY_STUCK_COMMAND_CONSTANTS: {
+    /** The spinner must have been on screen this long (ms) before Escape is sent */
+    readonly STUCK_AFTER_MS: number;
+    /** Not more than one Escape per session in this window (ms) */
+    readonly REPEAT_COOLDOWN_MS: number;
+    /** Bottom screen lines searched for the spinner */
+    readonly SCREEN_LINES: 20;
+    /** The spinner label (case-insensitive) */
+    readonly SPINNER_PATTERN: RegExp;
+};
 /**
  * Give-up recovery (#841, specs/2026-09-27-give-up-recovery.md): when a worker
  * stops on a feasibility give-up, queue a retry with a different approach,