crewly 1.20.29 → 1.20.31

package/config/skills/agent/core/canva-upload/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: Canva Upload
+description: Upload a local image or video into the owner's Canva media library as an asset (via the Canva grant held by Crewly Cloud). The asset id can seed a new design with canva-create.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - upload to canva
+  - add image to canva
+  - put this video in canva
+tags:
+  - canva
+  - upload
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Canva Upload
+
+```bash
+bash execute.sh --path ./open-day.jpg --name "Open day photo"
+```
+
+## Output
+
+```json
+{"success":true,"asset":{"id":"AAB…","name":"Open day photo","thumbnailUrl":"https://…"}}
+```
+
+Limit 50 MB per file. Then `canva-create --asset <id>` starts a design
+with it, or a person drops it into an existing design in Canva.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Canva (Settings → Integrations).

package/config/skills/agent/core/canva-upload/execute.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+# =============================================================================
+# canva-upload — Upload an image or video to the owner's Canva as an asset
+#
+# Backed by POST /api/canva/assets (base64 body; the backend polls the Canva upload job).
+#
+# Usage:
+#   bash execute.sh --path ./logo.png [--name "School logo"]
+#   bash execute.sh '{"path":"./clip.mp4","name":"Open day clip"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --path ./logo.png [--name "School logo"]
+  bash execute.sh '{"path":"./clip.mp4","name":"Open day clip"}'
+
+Options:
+  --path, -p    Local image / video file (≤ 50 MB). (Not --file: reserved by the skill runner.)
+  --name        Asset name in Canva (≤ 50 chars; default: the file's basename)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s
+' "$out" | tail -n 1)"; }
+  printf '%s
+' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+FILE=""; NAME=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --path|-p) [ $# -ge 2 ] || error_exit "--path requires a value"; FILE="$2"; shift 2 ;;
+    --name)    [ $# -ge 2 ] || error_exit "--name requires a value"; NAME="$2"; shift 2 ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$FILE" ] && FILE=$(printf '%s' "$INPUT" | jq -r '.path // .file // empty')
+  [ -z "$NAME" ] && NAME=$(printf '%s' "$INPUT" | jq -r '.name // empty')
+fi
+require_param "path (--path)" "$FILE"
+[ -f "$FILE" ] || error_exit "file not found: $FILE"
+[ -z "$NAME" ] && NAME=$(basename "$FILE")
+CONTENT=$(base64 < "$FILE" | tr -d '\n')
+BODY=$(jq -cn --arg name "$NAME" --arg content "$CONTENT" '{name: $name, content: $content}')
+RESPONSE=$(call POST "/canva/assets" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), asset: .data}'

package/config/skills/agent/core/canva-upload/execute.test.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# Tests for canva-upload — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18823
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or (data or {}).get('title') == 'no-grant':
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': {'id': 'A1', 'name': data.get('name'), 'thumbnailUrl': 'https://t'}}).encode())
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+BIN="$(mktemp).png"; printf '\x89PNG\x00' > "$BIN"
+OUT=$(run --path "$BIN" --name "Logo")
+check "upload: output" "$OUT" '{"success":true,"asset":{"id":"A1","name":"Logo","thumbnailUrl":"https://t"}}'
+check "upload: body" "$(jq -c .body "$STUB_LOG")" '{"name":"Logo","content":"iVBORwA="}'
+run "{\"path\":\"$BIN\"}" >/dev/null
+check "json: default name" "$(jq -r .body.name "$STUB_LOG")" "$(basename "$BIN")"
+rm -f "$BIN"
+OUT=$(run_err --path /nonexistent || true)
+check "missing file fails" "$(printf '%s' "$OUT" | grep -c 'not found')" "1"
+
+echo "canva-upload: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/docs-read/SKILL.md

@@ -0,0 +1,50 @@
+---
+name: Docs Read
+description: Read a Google Doc as plain text — headings become `#` lines, bullets `-`, table rows `a | b` (via the Google Workspace grant held by Crewly Cloud). Accepts a document id or its URL. Read-only.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - read google doc
+  - open the doc
+  - what does the document say
+  - summarize this doc
+tags:
+  - google
+  - docs
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Docs Read
+
+```bash
+bash execute.sh --id 1AbC…
+bash execute.sh --id "https://docs.google.com/document/d/1AbC…/edit"
+```
+
+## Output
+
+```json
+{"id":"1AbC…","title":"Q3 plan","webViewLink":"https://docs.google.com/document/d/1AbC…/edit","text":"# Q3 plan\n\n- Ship…"}
+```
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Google Workspace (Settings → Integrations).
+A `403` with `reason: "google_error"` on a write means the file was not
+created by Crewly — the grant only edits files Crewly made (`drive.file`).

package/config/skills/agent/core/docs-read/execute.sh

@@ -0,0 +1,68 @@
+#!/bin/bash
+# =============================================================================
+# docs-read — Read a Google Doc as plain text (headings, bullets, tables kept)
+#
+# Backed by GET /api/google/docs/:id.
+#
+# Usage:
+#   bash execute.sh --id <documentId>
+#   bash execute.sh '{"id":"<documentId>"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --id <documentId>
+  bash execute.sh '{"id":"<documentId>"}'
+
+Options:
+  --id          Document id (from drive-search or the docs.google.com URL)
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s
+' "$out" | tail -n 1)"; }
+  printf '%s
+' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+ID=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --id)      [ $# -ge 2 ] || error_exit "--id requires a value"; ID="$2"; shift 2 ;;
+    --help|-h) print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$ID" ] && ID=$(printf '%s' "$INPUT" | jq -r '.id // .documentId // empty')
+fi
+# Accept a full docs.google.com URL too.
+ID=$(printf '%s' "$ID" | sed -E 's#.*/document/d/([^/?]+).*#\1#')
+require_param "id (--id)" "$ID"
+RESPONSE=$(call GET "/google/docs/$(uri "$ID")") || { printf '%s\n' "$RESPONSE"; exit 1; }
+if printf '%s' "$RESPONSE" | jq -e '.truncated == true' >/dev/null 2>&1; then printf '%s\n' "$RESPONSE"; exit 0; fi
+printf '%s' "$RESPONSE" | jq -c '{id: .data.id, title: .data.title, webViewLink: .data.webViewLink, text: .data.text}'

package/config/skills/agent/core/docs-read/execute.test.sh

@@ -0,0 +1,52 @@
+#!/bin/bash
+# Tests for docs-read — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18813
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or (data or {}).get('title') == 'no-grant':
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': {'id': 'd1', 'title': 'T', 'webViewLink': 'https://l', 'text': '# T body'}}).encode())
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OUT=$(run --id d1)
+check "flags: output" "$OUT" '{"id":"d1","title":"T","webViewLink":"https://l","text":"# T body"}'
+check "flags: path" "$(jq -r .path "$STUB_LOG")" "/api/google/docs/d1"
+run --id "https://docs.google.com/document/d/abc123/edit#x" >/dev/null
+check "url: id extracted" "$(jq -r .path "$STUB_LOG")" "/api/google/docs/abc123"
+run '{"documentId":"j1"}' >/dev/null
+check "json: path" "$(jq -r .path "$STUB_LOG")" "/api/google/docs/j1"
+
+echo "docs-read: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/docs-write/SKILL.md

@@ -0,0 +1,55 @@
+---
+name: Docs Write
+description: Create a Google Doc in the owner's Drive, or append text to a document Crewly created (via the Google Workspace grant held by Crewly Cloud). Writes as the owner — say what you created and share the link.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - create google doc
+  - write a doc
+  - append to the doc
+  - put this in a google doc
+tags:
+  - google
+  - docs
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Docs Write
+
+```bash
+bash execute.sh --title "Weekly summary" --text-file /tmp/summary.md
+bash execute.sh --id 1AbC… --text "Follow-ups: …"
+```
+
+## Output
+
+```json
+{"success":true,"action":"create","id":"1AbC…","title":"Weekly summary","webViewLink":"https://docs.google.com/document/d/1AbC…/edit"}
+```
+
+Text is inserted as plain paragraphs (Markdown is not rendered). Appending
+to a document the owner made outside Crewly needs the Docs write scope —
+a `403 google_error` means "create a new doc instead, or ask the owner to
+re-connect Google Workspace once the scope is enabled".
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Google Workspace (Settings → Integrations).
+A `403` with `reason: "google_error"` on a write means the file was not
+created by Crewly — the grant only edits files Crewly made (`drive.file`).

package/config/skills/agent/core/docs-write/execute.sh

@@ -0,0 +1,90 @@
+#!/bin/bash
+# =============================================================================
+# docs-write — Create a Google Doc, or append text to one Crewly created
+#
+# Backed by POST /api/google/docs (create) and POST /api/google/docs/:id/append.
+#
+# Usage:
+#   bash execute.sh --title "Meeting notes" --text "…"          # create
+#   bash execute.sh --title "Meeting notes" --text-file notes.md
+#   bash execute.sh --id <documentId> --text "…"                  # append
+#   bash execute.sh '{"title":"Meeting notes","text":"…"}'
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --title "Meeting notes" --text "…"          # create
+  bash execute.sh --title "Meeting notes" --text-file notes.md
+  bash execute.sh --id <documentId> --text "…"                  # append
+  bash execute.sh '{"title":"Meeting notes","text":"…"}'
+
+Options:
+  --title       Create a new document with this title
+  --id          Append to this document instead (must be one Crewly created, or the grant needs the Docs scope)
+  --text        Body text (plain; blank line = new paragraph)
+  --text-file   Read the body from a file
+  --help | -h   Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, reason: (.details.error // .details // .error // "unknown"), hint: (.details.hint // ""), message: (.details.message // "")}' 2>/dev/null \
+    || jq -n --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+uri() { jq -rn --arg v "$1" '$v|@uri'; }
+
+# api_call may print a one-line warning to stderr (no CREWLY_SESSION_NAME);
+# the backend answer is always the last line. On failure print the mapped
+# failure JSON (fail_from) and return 1.
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s
+' "$out" | tail -n 1)"; }
+  printf '%s
+' "$out" | tail -n 1
+}
+
+INPUT_JSON=""
+if [[ $# -gt 0 && ${1:0:1} == '{' ]]; then
+  INPUT_JSON="$1"
+  shift || true
+fi
+TITLE=""; ID=""; TEXT=""; TEXT_FILE=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --title)     [ $# -ge 2 ] || error_exit "--title requires a value";     TITLE="$2";     shift 2 ;;
+    --id)        [ $# -ge 2 ] || error_exit "--id requires a value";        ID="$2";        shift 2 ;;
+    --text)      [ $# -ge 2 ] || error_exit "--text requires a value";      TEXT="$2";      shift 2 ;;
+    --text-file) [ $# -ge 2 ] || error_exit "--text-file requires a value"; TEXT_FILE="$2"; shift 2 ;;
+    --help|-h)   print_usage; exit 0 ;;
+    *) error_exit "Unknown option: $1" ;;
+  esac
+done
+if [ -n "$INPUT_JSON" ]; then
+  INPUT=$(read_json_input "$INPUT_JSON")
+  [ -z "$TITLE" ] && TITLE=$(printf '%s' "$INPUT" | jq -r '.title // empty')
+  [ -z "$ID" ]    && ID=$(printf '%s' "$INPUT" | jq -r '.id // .documentId // empty')
+  [ -z "$TEXT" ]  && TEXT=$(printf '%s' "$INPUT" | jq -r '.text // .body // empty')
+fi
+if [ -n "$TEXT_FILE" ]; then
+  [ -f "$TEXT_FILE" ] || error_exit "text file not found: $TEXT_FILE"
+  TEXT=$(cat "$TEXT_FILE")
+fi
+ID=$(printf '%s' "$ID" | sed -E 's#.*/document/d/([^/?]+).*#\1#')
+[ -n "$TITLE" ] || [ -n "$ID" ] || error_exit "either --title (create) or --id (append) is required"
+if [ -n "$ID" ]; then
+  require_param "text (--text or --text-file)" "$TEXT"
+  BODY=$(jq -cn --arg text "$TEXT" '{text: $text}')
+  RESPONSE=$(call POST "/google/docs/$(uri "$ID")/append" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+  printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), action: "append", id: .data.id, title: .data.title, webViewLink: .data.webViewLink}'
+else
+  BODY=$(jq -cn --arg title "$TITLE" --arg text "$TEXT" '{title: $title} + (if $text != "" then {text: $text} else {} end)')
+  RESPONSE=$(call POST "/google/docs" "$BODY") || { printf '%s\n' "$RESPONSE"; exit 1; }
+  printf '%s' "$RESPONSE" | jq -c '{success: (.success // false), action: "create", id: .data.id, title: .data.title, webViewLink: .data.webViewLink}'
+fi

package/config/skills/agent/core/docs-write/execute.test.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# Tests for docs-write — run with: bash execute.test.sh
+# Python HTTP stub as the backend; asserts the request the skill sends and
+# the JSON it prints. Exit 0 on pass.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() {
+  local name="$1"; local got="$2"; local want="$3"
+  if [ "$got" = "$want" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $name"; echo "  want: $want"; echo "  got:  $got"; fi
+}
+
+PORT=18814
+STUB_LOG="$(mktemp)"; export STUB_LOG; export STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; PORT = int(os.environ['STUB_PORT'])
+class H(BaseHTTPRequestHandler):
+    def _reply(self, method, data=None):
+        open(LOG, 'w').write(json.dumps({'method': method, 'path': self.path, 'body': data}))
+        if 'no-grant' in self.path or (data or {}).get('title') == 'no-grant':
+            self.send_response(409); self.send_header('Content-Type', 'application/json'); self.end_headers()
+            self.wfile.write(json.dumps({'success': False, 'error': 'not_connected', 'message': 'no grant', 'hint': 'https://cloud/start?token=j'}).encode()); return
+        self.send_response(200); self.send_header('Content-Type', 'application/json'); self.end_headers()
+        self.wfile.write(json.dumps({'success': True, 'data': {'id': 'd9', 'title': data.get('title', 'T'), 'webViewLink': 'https://l'}}).encode())
+    def do_GET(self): self._reply('GET')
+    def do_POST(self):
+        n = int(self.headers.get('content-length', '0')); body = self.rfile.read(n).decode() if n else ''
+        self._reply('POST', json.loads(body or '{}'))
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -f "$STUB_LOG"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+
+run() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { CREWLY_API_URL="http://127.0.0.1:${PORT}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+OUT=$(run --title "Notes" --text "hello")
+check "create: output" "$OUT" '{"success":true,"action":"create","id":"d9","title":"Notes","webViewLink":"https://l"}'
+check "create: path+body" "$(jq -r '.path + " " + (.body|tojson)' "$STUB_LOG")" '/api/google/docs {"title":"Notes","text":"hello"}'
+TMP=$(mktemp); printf 'from file' > "$TMP"
+run --id "https://docs.google.com/document/d/d1/edit" --text-file "$TMP" >/dev/null
+check "append: path+body" "$(jq -r '.path + " " + (.body|tojson)' "$STUB_LOG")" '/api/google/docs/d1/append {"text":"from file"}'
+rm -f "$TMP"
+OUT=$(run_err --text "x" || true)
+check "neither title nor id fails" "$(printf '%s' "$OUT" | grep -c 'required')" "1"
+
+echo "docs-write: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/config/skills/agent/core/drive-read/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: Drive Read
+description: Read the content of a Google Drive file (via the Google Workspace grant held by Crewly Cloud): Docs → text, Sheets → CSV, Slides → text, other files downloaded (text printed, binaries saved with --out). Read-only.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - orchestrator
+  - team-leader
+  - developer
+  - operations
+  - ops
+  - sales
+  - support
+  - generalist
+triggers:
+  - read drive file
+  - open file from drive
+  - download from drive
+tags:
+  - google
+  - drive
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 60000
+---
+
+# Drive Read
+
+```bash
+bash execute.sh --id 1AbC…                        # print content (text/CSV) as JSON
+bash execute.sh --id 1AbC… --out /tmp/report.pdf  # save (binary decoded) and print metadata
+```
+
+## Output
+
+```json
+{"file":{"id":"1AbC…","name":"Q3 plan","mimeType":"application/vnd.google-apps.document","webViewLink":"https://…"},"contentType":"text/plain","encoding":"utf8","bytes":1234,"content":"…"}
+```
+
+For a Google Doc / Sheet / Slides prefer `docs-read` / `sheets-read` /
+`slides-read` — they keep structure (headings, cell grid, per-slide lines).
+Files over 10 MB are refused with a `webViewLink` to open instead.
+
+## Failures
+
+`{"success":false,"reason":"not_connected","hint":"<connect URL>"}` (exit 1)
+when the owner has not connected Google Workspace (Settings → Integrations).
+A `403` with `reason: "google_error"` on a write means the file was not
+created by Crewly — the grant only edits files Crewly made (`drive.file`).