crewly 1.20.321 → 1.20.323

package/config/skills/agent/core/publish-app/SKILL.md

@@ -51,7 +51,8 @@ bash execute.sh --dir ./groceries-app --note "add totals"      # next version, s
 bash execute.sh --html ./timer.html --name "Timer"
 bash execute.sh --app 28au74d9cj --rollback 2                  # back to version 2
 bash execute.sh --app 28au74d9cj --versions
-bash execute.sh --app 28au74d9cj --transfer-to edu-game-milo-13e8d3ca   # hand the app to another agent / team
+bash execute.sh --app 28au74d9cj --transfer-to edu-game-milo-13e8d3ca   # hand the app to another agent / team (orchestrator or owner only)
+bash execute.sh --app 28au74d9cj --delete                               # delete (unpublish) a private app your team published
 bash execute.sh --dir ./daily-brief --owner 'channel:#daily-brief'        # publish, and send the owner's comments to a channel
 bash execute.sh --app 28au74d9cj --owner 'team:Dev'                       # change only who gets the comments
 bash execute.sh --list                                         # apps published from this machine
@@ -140,7 +141,8 @@ bash execute.sh --app 28au74d9cj --private                                  # pr
   collections) still needs a new request the owner approves.
 - Collaborators: an app another team published is not yours to republish. `--app <id>` from a team that did not publish it is refused (`not_your_app`), including when the owner added your team as a collaborator: collaborators get the app's **data and comments** only (use `app-data`; ask with `app-data --app <id> --request-access`). To change the page itself, ask the publisher or the owner to transfer the app (`--transfer-to`). An owner agent can let an agent on any of the owner's machines work in the app's data: `app-data --app <id> --add-collaborator Rex` (or `Rex@iriss-air` when the name is on several machines).
 - Owner: `--owner channel:#<name> | team:<name> | agent:<name> | default` sets who the owner's **comments** go to (a channel's members from every team see them; see `app-data` → Owner). It does not change who publishes. Only the app's owner agents may change it (by default the publisher); with a publish the owner is set right after it, and an `ownerError` in the output means only that part failed.
-- Transfer: `--app <appId> --transfer-to <session>` hands the app to another agent, e.g. when the owner moves the work to a new team. Only the app's publisher, the lead of its team, the orchestrator or the owner may do it, and the target must be a member of an active team on this machine. Afterwards the new publisher publishes with `--app <appId> --dir <its directory>`, comments and changes go to it, and the old team can no longer publish, roll back or use the app's data. Both agents get a short note.
+- Delete: `--app <appId> --delete` removes an app your team published (URL stops working at once; versions, files and data are removed, so it cannot be undone). Agents may delete only PRIVATE apps; for a public app run `--private` first, or ask the owner. `--list` shows each app's owning team.
+- Transfer: `--app <appId> --transfer-to <session>` hands the app to another agent, e.g. when the owner moves the work to a new team. Only the orchestrator or the owner may do it (team agents and leads ask the orchestrator), every hand-over is recorded (who, when, from, to), versions, data, comments and public/private status stay as they are, and the target must be a member of an active team on this machine. Afterwards the new publisher publishes with `--app <appId> --dir <its directory>`, comments and changes go to it, and the old team can no longer publish, roll back or use the app's data. Both agents get a short note.
 - Thumbnails: the owner's portal list shows a small screenshot of each app. Publishing (and rollback) takes it automatically in the background when this machine has Chrome or Chromium; `bash execute.sh --app <appId> --refresh-thumbnail` re-takes it now (answers `captured:false` with a reason such as `no_browser` when it cannot).
 - `--private` is always allowed and takes effect at once. Use it if anything
   looks wrong (spam, abuse, a leak).

package/config/skills/agent/core/publish-app/execute.sh

@@ -28,7 +28,8 @@ Usage:
   bash execute.sh --app <appId> --dir ./my-app          # republish to a known app explicitly
   bash execute.sh --app <appId> --rollback <version>    # make an earlier version current
   bash execute.sh --app <appId> --versions              # list versions
-  bash execute.sh --app <appId> --transfer-to <session> # hand the app to another agent / team
+  bash execute.sh --app <appId> --transfer-to <session> # hand the app to another agent / team (orchestrator or owner only)
+  bash execute.sh --app <appId> --delete                # delete (unpublish) an app your team published (private apps)
   bash execute.sh --app <appId> --owner 'channel:#daily-brief'   # who gets the owner's comments (also with a publish)
   bash execute.sh --list                                # apps published from this machine
   bash execute.sh --app <appId> --share [--ttl-days 7]  # fresh one-tap link card to the owner (no publish)
@@ -81,12 +82,14 @@ Options:
   --unlist-template   Take a template off the Marketplace (apps made from it are not affected)
   --rollback   Version number to make current (needs --app)
   --versions   List versions (needs --app)
+  --delete     Delete (unpublish) the app: its URL stops working and its versions, files and data are removed. Needs --app.
+               Only for a PRIVATE app your team published; a public app is the owner's to delete (use --private first or ask the owner).
   --transfer-to  Hand the app to another agent (its session name; it must be on a team on this machine).
   --owner      Who owns the app's comments: channel:#<name>, team:<name>, agent:<name> or default (the publishing agent).
                With a publish it is set after the publish; alone it needs --app. Only the app's owner agents may change it.
-                 Allowed for the app's publisher, the lead of its team, the orchestrator or the owner.
+                 Allowed for the orchestrator or the owner only; the transfer is recorded (who, when, from, to).
                  The new publisher publishes with --app <appId> --dir <its directory>; the old team loses access.
-  --list       List apps published from this machine
+  --list       List apps published from this machine, with the owning team
   --help | -h  Show this help
 EOF_USAGE
 }
@@ -104,7 +107,7 @@ call() {
   printf '%s\n' "$out" | tail -n 1
 }
 
-DIR=""; FILE=""; NAME=""; APP=""; ENTRY=""; NOTE=""; NOTIFY=false; ROLLBACK=""; TRANSFER_TO=""; VERSIONS=false; LIST=false
+DIR=""; FILE=""; NAME=""; APP=""; ENTRY=""; NOTE=""; NOTIFY=false; ROLLBACK=""; TRANSFER_TO=""; DELETE_APP=false; VERSIONS=false; LIST=false
 SHARE=false; TTL_DAYS=""; LINKS=false; REVOKE_LINK=""; REVOKE_LINKS=false; OWNER_SPEC=""
 CAPABILITY=""; CAPABILITY_NOTE=""; CANCEL_CAPABILITY=false
 PUBLIC=false; PUBLIC_READ=""; PUBLIC_SUBMIT=""; PUBLIC_NOTE=""; CANCEL_PUBLIC=false; PRIVATE=false; REFRESH_THUMB=false
@@ -138,6 +141,7 @@ while [[ $# -gt 0 ]]; do
     --transfer-to) [ $# -ge 2 ] || error_exit "--transfer-to requires a session name"; TRANSFER_TO="$2"; shift 2 ;;
     --owner)    [ $# -ge 2 ] || error_exit "--owner requires channel:#<name>, team:<name>, agent:<name> or default"; OWNER_SPEC="$2"; shift 2 ;;
     --list)     LIST=true; shift ;;
+    --delete)   DELETE_APP=true; shift ;;
     --as-template)   AS_TEMPLATE=true; shift ;;
     --description)   [ $# -ge 2 ] || error_exit "--description requires a value"; TPL_DESCRIPTION="$2"; shift 2 ;;
     --category)      [ $# -ge 2 ] || error_exit "--category requires a value"; TPL_CATEGORY="$2"; shift 2 ;;
@@ -200,7 +204,7 @@ fi
 
 if $LIST; then
   RESPONSE=$(call GET "/apps") || { printf '%s\n' "$RESPONSE"; exit 1; }
-  printf '%s' "$RESPONSE" | jq -c '{success: true, apps: [.data[]? | select(.deleted != true) | {appId, name, url, agent: .agentSession, currentVersion, source}]}'
+  printf '%s' "$RESPONSE" | jq -c '{success: true, apps: [.data[]? | select(.deleted != true) | {appId, name, url, agent: .agentSession, team, currentVersion, source}]}'
   exit 0
 fi
 
@@ -300,6 +304,14 @@ if [ -n "$OWNER_SPEC" ] && [ -z "$DIR" ] && [ -z "$FILE" ]; then
   exit 0
 fi
 
+if $DELETE_APP; then
+  [ -n "$APP" ] || error_exit "--app is required with --delete"
+  if [ -n "$DIR" ] || [ -n "$FILE" ] || [ -n "$TRANSFER_TO" ] || [ -n "$ROLLBACK" ]; then error_exit "--delete cannot be combined with a publish, --transfer-to or --rollback"; fi
+  RESPONSE=$(call DELETE "/apps/${APP}") || { printf '%s\n' "$RESPONSE"; exit 1; }
+  printf '%s' "$RESPONSE" | jq -c '{success: true, appId: .data.appId, deleted: .data.deleted}'
+  exit 0
+fi
+
 if [ -n "$TRANSFER_TO" ]; then
   [ -n "$APP" ] || error_exit "--app is required with --transfer-to"
   BODY=$(jq -cn --arg s "$TRANSFER_TO" '{toSession: $s}')

package/config/skills/agent/core/publish-app/execute.test.sh

@@ -82,6 +82,10 @@ class H(BaseHTTPRequestHandler):
             if data.get('owner') == 'channel:#nope':
                 return send(400, {'success': False, 'error': 'validation', 'message': 'No channel "#nope" on this machine.'})
             return send(200, {'success': True, 'data': {'appId': '28au74d9cj', 'owner': {'kind': 'channel', 'explicit': True, 'name': '#daily-brief'}, 'previous': None}})
+        if method == 'DELETE' and self.path == '/api/apps/28au74d9cj':
+            return send(200, {'success': True, 'data': {'appId': '28au74d9cj', 'deleted': True}})
+        if method == 'DELETE' and self.path == '/api/apps/bcdfghjkmn':
+            return send(403, {'success': False, 'error': 'forbidden', 'message': 'This app is public, so only the owner can delete it.'})
         if self.path == '/api/apps/28au74d9cj/transfer':
             return send(200, {'success': True, 'data': {'appId': '28au74d9cj', 'name': 'G', 'publisher': data['toSession'], 'previous': 'dev-ella', 'changed': True, 'notified': [data['toSession']]}})
         if self.path.endswith('/rollback'):
@@ -90,7 +94,7 @@ class H(BaseHTTPRequestHandler):
         if self.path.endswith('/versions'):
             return send(200, {'success': True, 'data': [{'version': 2, 'current': True, 'note': None, 'files': 1, 'totalBytes': 9, 'createdAt': 't', 'entry': 'index.html'}]})
         if self.path == '/api/apps':
-            return send(200, {'success': True, 'data': [{'appId': 'a', 'name': 'A', 'url': 'u', 'agentSession': 's', 'currentVersion': 1, 'source': '/x'},
+            return send(200, {'success': True, 'data': [{'appId': 'a', 'name': 'A', 'url': 'u', 'agentSession': 's', 'team': 'Alpha', 'currentVersion': 1, 'source': '/x'},
                 {'appId': 'b', 'name': 'B', 'deleted': True}]})
         send(404, {'success': False, 'error': 'not_found'})
     def do_GET(self): self._reply('GET')
@@ -167,10 +171,17 @@ check "transfer: output" "$OUT" '{"success":true,"appId":"28au74d9cj","publisher
 check "transfer: request" "$(jq -c '{path, body}' "$STUB_LOG")" '{"path":"/api/apps/28au74d9cj/transfer","body":{"toSession":"edu-game-milo-13e8d3ca"}}'
 check "transfer needs --app" "$(run_err --transfer-to x | grep -c -- '--app is required with --transfer-to')" "1"
 
+OUT=$(run --app 28au74d9cj --delete)
+check "delete: output" "$OUT" '{"success":true,"appId":"28au74d9cj","deleted":true}'
+check "delete: request" "$(jq -c '{method, path}' "$STUB_LOG")" '{"method":"DELETE","path":"/api/apps/28au74d9cj"}'
+check "delete needs --app" "$(run_err --delete | grep -c -- '--app is required with --delete')" "1"
+OUT=$(run --app bcdfghjkmn --delete || true)
+check "delete: public app refused" "$(printf '%s' "$OUT" | jq -r '.success, .reason' | tr '\n' ' ')" "false forbidden "
+
 OUT=$(run --app 28au74d9cj --versions)
 check "versions" "$OUT" '{"success":true,"versions":[{"version":2,"current":true,"note":null,"files":1,"totalBytes":9,"createdAt":"t"}]}'
 OUT=$(run --list)
-check "list hides deleted" "$OUT" '{"success":true,"apps":[{"appId":"a","name":"A","url":"u","agent":"s","currentVersion":1,"source":"/x"}]}'
+check "list hides deleted" "$OUT" '{"success":true,"apps":[{"appId":"a","name":"A","url":"u","agent":"s","team":"Alpha","currentVersion":1,"source":"/x"}]}'
 
 OUT=$(run --dir "$APPDIR" --name nologin; true)
 check "backend error mapped" "$OUT" '{"success":false,"status":409,"reason":"not_logged_in","message":"not signed in","hint":"crewly cloud login"}'

package/config/skills/agent/core/share-file/SKILL.md

@@ -0,0 +1,73 @@
+---
+name: Share File
+description: Hand the OWNER a LARGE file you made (an HD video, an archive, up to 4 GB) as a private link they open on their phone, watch right in the page and download. Reverse of request-file. Use instead of Slack, Drive or asking the owner to come to the machine.
+version: 1.0.0
+category: productivity
+skillType: claude-skill
+assignableRoles:
+  - "*"
+triggers:
+  - share file
+  - share the video
+  - send the owner a file
+  - put the video on a link
+  - the video is ready
+  - download link for the owner
+  - hand the file to the owner
+tags:
+  - files
+  - owner
+  - video
+execution:
+  type: script
+  script:
+    file: execute.sh
+    interpreter: bash
+    timeoutMs: 7200000
+---
+
+# Share File
+
+Gives **the owner**, who is probably on a phone and away from the machine, a
+private link to a big file you made. They open it, **watch or listen right in
+the page** (video, images and audio play inline and can be scrubbed) and tap
+**Download** to save it to the phone. Needs the machine to be signed in to
+Crewly Cloud. The file is streamed from disk (never loaded into memory).
+
+```bash
+bash execute.sh --path out/final.mp4 --note "the HD cut, 1.2 GB"
+bash execute.sh --status                 # your shared files and their links
+bash execute.sh --status sf_AbCdEfGhIjKlMnOpQrStUv
+bash execute.sh --cancel sf_AbCdEfGhIjKlMnOpQrStUv
+```
+
+Prints, once the upload is finished (big files print `uploaded 10%` ... lines to stderr while it runs):
+
+```json
+{"success":true,"shareId":"sf_…","url":"https://crewlyai.com/portal/files/sf_…","fileName":"final.mp4",
+ "sizeBytes":1288490188,"expiresAt":"…","instruction":"Post the url to the owner…"}
+```
+
+## What to do with it
+
+1. **Post the `url` to the owner** where you are talking to them (the Slack
+   thread, the chat), in your own words: what the file is, that they can open it
+   on their phone, watch it in the page and download it, and that it stays for
+   7 days. One short message. Do not paste this skill's JSON.
+2. The owner signs in to their Crewly account if asked. Nobody else can open
+   the link. If they say it expired, run the skill again for a fresh link.
+3. `--cancel` takes a file down you no longer want shared. A mistake (wrong
+   file) is a good reason to cancel straight away.
+
+## Rules
+
+- `--path` must be a regular file **inside your project directory**: not a
+  symlink, not inside Crewly's home. Up to 4 GB. Copy files from elsewhere
+  into the project first.
+- `--name` is the name the owner sees and saves it under (default: the file's
+  name). `--note` is one line for the owner (up to 500 characters).
+- The account may hold 20 GB / 20 shared files at once; cancel old ones or wait
+  for them to expire (7 days after upload).
+- Use for the finished thing the owner wants to see or keep. Not for secrets
+  or credentials, and not for files under ~5 MB that fit in a message. To get
+  a file FROM the owner, use `request-file`.

package/config/skills/agent/core/share-file/execute.sh

@@ -0,0 +1,184 @@
+#!/bin/bash
+# =============================================================================
+# share-file — put a LARGE file you made (an HD video, an archive) on a private
+# link for the OWNER, who watches it in the page and downloads it on the phone.
+# The reverse of request-file (crewly-services apps/SPEC.md section 20).
+#
+# The backend (POST /api/apps/shares) asks Cloud for a presigned upload URL;
+# this script then streams the file straight to object storage with curl -T
+# (from disk, never buffered), and confirms with /complete.
+#
+# Usage:
+#   bash execute.sh --path <file> [--name <name>] [--note <text>] [--content-type <type>]
+#   bash execute.sh --status [<shareId>]
+#   bash execute.sh --cancel <shareId>
+# =============================================================================
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/../../_common/lib.sh"
+
+# Progress lines (one per 10%) are printed for uploads at least this big.
+PROGRESS_MIN_BYTES="${SHARE_FILE_PROGRESS_MIN_BYTES:-52428800}"
+
+print_usage() {
+  cat <<'EOF_USAGE'
+Usage:
+  bash execute.sh --path <file> [--name <name>] [--note <text>] [--content-type <type>]
+  bash execute.sh --status [<shareId>]
+  bash execute.sh --cancel <shareId>
+
+Options:
+  --path          Regular file inside your project directory, up to 4 GB (required)
+  --name          Name the owner sees and saves it under (default: the file's name)
+  --note          One line for the owner (what it is, e.g. "the HD cut, 1.2 GB")
+  --content-type  MIME type (default: from the extension)
+  --status        List your shared files (with their links), or show one
+  --cancel        Take a shared file down (deletes the uploaded file)
+  --help | -h     Show this help
+EOF_USAGE
+}
+
+fail_from() {
+  printf '%s' "$1" | jq -c '{success: false, status: (.status // 0), reason: (.details.error // .error // "unknown"), message: (.details.message // .details // "")}' 2>/dev/null \
+    || jq -cn --arg r "$1" '{success: false, reason: $r}'
+  exit 1
+}
+
+call() {
+  local out
+  out=$(api_call "$@" 2>&1) || { fail_from "$(printf '%s\n' "$out" | tail -n 1)"; }
+  printf '%s\n' "$out" | tail -n 1
+}
+
+content_type_for() {
+  case "$(printf '%s' "${1##*.}" | tr '[:upper:]' '[:lower:]')" in
+    mp4|m4v) echo video/mp4 ;;
+    mov) echo video/quicktime ;;
+    webm) echo video/webm ;;
+    mkv) echo video/x-matroska ;;
+    mp3) echo audio/mpeg ;;
+    wav) echo audio/wav ;;
+    m4a) echo audio/mp4 ;;
+    png) echo image/png ;;
+    jpg|jpeg) echo image/jpeg ;;
+    gif) echo image/gif ;;
+    webp) echo image/webp ;;
+    pdf) echo application/pdf ;;
+    zip) echo application/zip ;;
+    json) echo application/json ;;
+    csv) echo text/csv ;;
+    txt|md|log) echo text/plain ;;
+    *) echo application/octet-stream ;;
+  esac
+}
+
+# Regular, non-symlink file inside the project directory, never under Crewly's
+# home. Prints the real path, then the size in bytes.
+check_file() {
+  command -v node >/dev/null 2>&1 || error_exit "node is required"
+  CF_PATH="$1" CF_PROJECT="${CREWLY_PROJECT_PATH:-$PWD}" node <<'NODE'
+const fs = require('fs'); const path = require('path'); const os = require('os');
+const fail = (m) => { process.stderr.write(JSON.stringify({ error: m }) + '\n'); process.exit(1); };
+const real = (p) => { try { return fs.realpathSync(p); } catch { return null; } };
+const within = (c, p) => c === p || c.startsWith(p.endsWith(path.sep) ? p : p + path.sep);
+const given = process.env.CF_PATH;
+const abs = path.resolve(given);
+let st;
+try { st = fs.lstatSync(abs); } catch { fail(`file not found: ${given}`); }
+if (st.isSymbolicLink()) fail(`${given} is a symbolic link; pass the real file`);
+if (!st.isFile()) fail(`${given} is not a regular file`);
+if (st.size === 0) fail(`${given} is empty`);
+const r = real(abs); const project = real(process.env.CF_PROJECT || process.cwd());
+if (!project) fail('cannot resolve the project directory');
+const homes = [path.join(os.homedir(), '.crewly'), process.env.CREWLY_HOME].filter(Boolean).map((p) => real(p) || path.resolve(p));
+if (homes.some((h) => within(r, h))) fail(`${given} is inside Crewly's home directory`);
+if (!within(r, project)) fail(`${given} is outside your project directory (${project}); copy it there first`);
+process.stdout.write(r + '\n' + st.size + '\n');
+NODE
+}
+
+# Stream the file to the presigned URL (curl -T reads from disk). Prints the HTTP
+# status. Big files report progress (one stderr line per 10%) so the run is not silent.
+upload() {
+  local file="$1" size="$2" url="$3"; shift 3
+  if [ "$size" -ge "$PROGRESS_MIN_BYTES" ]; then
+    echo "uploading $(( size / 1048576 )) MB..." >&2
+    curl --progress-bar -S -o /dev/null -w '%{http_code}' --connect-timeout 30 --retry 3 --retry-delay 3 -X PUT -T "$file" "$@" "$url" \
+      2> >(tr '\r' '\n' | awk 'BEGIN{last=0} match($0,/[0-9]+\.[0-9]%/){p=int(substr($0,RSTART)+0); if(p>=last+10){last=p-(p%10); printf "uploaded %d%%\n", last > "/dev/stderr"; fflush("/dev/stderr")}}') \
+      || printf '000'
+  else
+    curl -sS -o /dev/null -w '%{http_code}' --connect-timeout 30 --retry 3 --retry-delay 3 -X PUT -T "$file" "$@" "$url" 2>/dev/null || printf '000'
+  fi
+}
+
+FILE=""; NAME=""; NOTE=""; CTYPE=""; CANCEL=""; STATUS=0; STATUS_ID=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --path)         [ $# -ge 2 ] || error_exit "--path requires a value"; FILE="$2"; shift 2 ;;
+    --name)         [ $# -ge 2 ] || error_exit "--name requires a value"; NAME="$2"; shift 2 ;;
+    --note)         [ $# -ge 2 ] || error_exit "--note requires a value"; NOTE="$2"; shift 2 ;;
+    --content-type) [ $# -ge 2 ] || error_exit "--content-type requires a value"; CTYPE="$2"; shift 2 ;;
+    --cancel)       [ $# -ge 2 ] || error_exit "--cancel requires a share id"; CANCEL="$2"; shift 2 ;;
+    --status)       STATUS=1; shift
+                    if [ $# -ge 1 ] && [[ "$1" =~ ^sf_ ]]; then STATUS_ID="$1"; shift; fi ;;
+    --help|-h)      print_usage; exit 0 ;;
+    *) unknown_arg_exit "$1" ;;
+  esac
+done
+
+ID_RE='^sf_[A-Za-z0-9_-]{22}$'
+
+if [ -n "$CANCEL" ]; then
+  [[ "$CANCEL" =~ $ID_RE ]] || error_exit "--cancel needs a share id like sf_…"
+  RESULT=$(call DELETE "/apps/shares/${CANCEL}") || { printf '%s\n' "$RESULT"; exit 1; }
+  jq -cn --arg id "$CANCEL" '{success: true, shareId: $id, cancelled: true}'
+  exit 0
+fi
+
+if [ "$STATUS" = "1" ]; then
+  if [ -n "$STATUS_ID" ]; then
+    [[ "$STATUS_ID" =~ $ID_RE ]] || error_exit "--status needs a share id like sf_…"
+    RESULT=$(call GET "/apps/shares/${STATUS_ID}") || { printf '%s\n' "$RESULT"; exit 1; }
+    printf '%s' "$RESULT" | jq -c '{success: true} + (.data | {shareId, status, goneReason, fileName, sizeBytes, url, expiresAt})'
+  else
+    RESULT=$(call GET "/apps/shares") || { printf '%s\n' "$RESULT"; exit 1; }
+    printf '%s' "$RESULT" | jq -c '{success: true, shares: [.data.shares[]? | {shareId, status, fileName, sizeBytes, url, expiresAt}]}'
+  fi
+  exit 0
+fi
+
+[ -n "$FILE" ] || error_exit "--path is required"
+INFO=$(check_file "$FILE") || { printf '%s\n' "$INFO" >&2; exit 1; }
+REAL=$(printf '%s\n' "$INFO" | sed -n 1p)
+SIZE=$(printf '%s\n' "$INFO" | sed -n 2p)
+[ -n "$NAME" ] || NAME="$(basename "$REAL")"
+[ -n "$CTYPE" ] || CTYPE="$(content_type_for "$REAL")"
+
+BODY=$(jq -cn --arg n "$NAME" --argjson s "$SIZE" --arg c "$CTYPE" --arg note "$NOTE" \
+  '{fileName: $n, sizeBytes: $s, contentType: $c} + (if $note != "" then {note: $note} else {} end)')
+CREATED=$(call POST "/apps/shares" "$BODY") || { printf '%s\n' "$CREATED"; exit 1; }
+ID=$(printf '%s' "$CREATED" | jq -r '.data.shareId // empty')
+URL=$(printf '%s' "$CREATED" | jq -r '.data.upload.url // empty')
+LINK=$(printf '%s' "$CREATED" | jq -r '.data.url // empty')
+[ -n "$ID" ] && [ -n "$URL" ] || error_exit "Cloud answered without an upload URL"
+
+# Headers the presigned URL was signed with. The signed URL itself is never printed or logged.
+HDRS=()
+while IFS= read -r line; do HDRS+=(-H "$line"); done < <(printf '%s' "$CREATED" | jq -r '.data.upload.headers // {} | to_entries[] | "\(.key): \(.value)"')
+
+cancel_quietly() { api_call DELETE "/apps/shares/${ID}" >/dev/null 2>&1 || true; }
+
+CODE=$(upload "$REAL" "$SIZE" "$URL" ${HDRS[@]+"${HDRS[@]}"})
+if [ "$CODE" != "200" ]; then
+  cancel_quietly
+  jq -cn --arg c "$CODE" '{success: false, reason: "upload_failed", message: ("The upload to temporary storage failed (HTTP " + $c + "). Nothing was kept; try again.")}'
+  exit 1
+fi
+
+DONE=$(api_call POST "/apps/shares/${ID}/complete" 2>&1) || { cancel_quietly; fail_from "$(printf '%s\n' "$DONE" | tail -n 1)"; }
+EXPIRES=$(printf '%s\n' "$DONE" | tail -n 1 | jq -r '.data.expiresAt // empty')
+[ -n "$LINK" ] || LINK=$(printf '%s\n' "$DONE" | tail -n 1 | jq -r '.data.url // empty')
+
+jq -cn --arg id "$ID" --arg link "$LINK" --arg n "$NAME" --argjson s "$SIZE" --arg e "$EXPIRES" \
+  '{success: true, shareId: $id, url: $link, fileName: $n, sizeBytes: $s, expiresAt: $e,
+    instruction: "Post the url to the owner where you are talking to them, in your own words: what the file is, that they can open it on their phone, watch it right in the page and download it, and that it stays available for 7 days. One short message; do not paste this JSON. The link is private to their Crewly account. Withdraw it with: bash <skills>/core/share-file/execute.sh --cancel \($id)"}'

package/config/skills/agent/core/share-file/execute.test.sh

@@ -0,0 +1,122 @@
+#!/bin/bash
+# Tests for share-file — run with: bash execute.test.sh
+# A Python stub plays both the Crewly backend and the object storage.
+set -u
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EXEC="$HERE/execute.sh"
+PASS=0; FAIL=0
+check() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1"; echo "  want: $3"; echo "  got:  $2"; fi; }
+
+PORT=18862
+STUB_LOG="$(mktemp)"; STORE="$(mktemp)"; export STUB_LOG STORE STUB_PORT="$PORT"
+python3 -u <<'PY' >/dev/null 2>&1 &
+from http.server import BaseHTTPRequestHandler, HTTPServer
+import json, os
+LOG = os.environ['STUB_LOG']; STORE = os.environ['STORE']; PORT = int(os.environ['STUB_PORT'])
+ID = 'sf_AbCdEfGhIjKlMnOpQrStUv'
+LINK = 'https://crewlyai.com/portal/files/' + ID
+def note(**kw):
+    with open(LOG, 'a') as f: f.write(json.dumps(kw) + '\n')
+class H(BaseHTTPRequestHandler):
+    def send(self, code, obj):
+        self.send_response(code); self.send_header('Content-Type', 'application/json'); self.end_headers(); self.wfile.write(json.dumps(obj).encode())
+    def body(self):
+        n = int(self.headers.get('Content-Length') or 0); return self.rfile.read(n)
+    def do_POST(self):
+        b = self.body()
+        if self.path == '/api/apps/shares':
+            req = json.loads(b); note(op='create', req=req, session=self.headers.get('X-Agent-Session'))
+            if req['fileName'] == 'refuse.bin':
+                return self.send(413, {'success': False, 'error': 'too_large', 'message': 'A shared file can be at most 4096 MB.'})
+            return self.send(201, {'success': True, 'data': {'shareId': ID, 'status': 'pending', 'url': LINK, 'upload': {'url': f'http://127.0.0.1:{PORT}/store/obj?X-Amz-Signature=SECRETSIG', 'method': 'PUT', 'headers': {'Content-Type': req['contentType'], 'x-amz-server-side-encryption': 'AES256'}}}})
+        if self.path == f'/api/apps/shares/{ID}/complete':
+            note(op='complete'); return self.send(200, {'success': True, 'data': {'shareId': ID, 'status': 'ready', 'url': LINK, 'expiresAt': '2026-10-20T00:00:00.000Z'}})
+        self.send(404, {'success': False})
+    def do_GET(self):
+        note(op='get', path=self.path)
+        if self.path == f'/api/apps/shares/{ID}':
+            return self.send(200, {'success': True, 'data': {'shareId': ID, 'status': 'ready', 'fileName': 'daily.mp4', 'sizeBytes': 3000000, 'url': LINK, 'expiresAt': '2026-10-20T00:00:00.000Z', 'download': {'url': 'https://secret.example/x'}}})
+        if self.path == '/api/apps/shares':
+            return self.send(200, {'success': True, 'data': {'shares': [{'shareId': ID, 'status': 'ready', 'fileName': 'daily.mp4', 'sizeBytes': 3000000, 'url': LINK, 'expiresAt': '2026-10-20T00:00:00.000Z', 'from': {'id': 'dev-ella'}}]}})
+        self.send(404, {'success': False})
+    def do_DELETE(self):
+        note(op='cancel', path=self.path); self.send(200, {'success': True, 'data': {'deleted': True}})
+    def do_PUT(self):
+        b = self.body()
+        note(op='put', bytes=len(b), ctype=self.headers.get('Content-Type'), sse=self.headers.get('x-amz-server-side-encryption'), query=self.path.split('?')[-1])
+        self.send_response(500 if os.path.exists(STORE + '.fail') else 200); self.end_headers()
+    def log_message(self, *a, **k): pass
+HTTPServer(('127.0.0.1', PORT), H).serve_forever()
+PY
+STUB_PID=$!
+disown "$STUB_PID" 2>/dev/null || true
+WORK="$(mktemp -d)"
+trap 'kill "$STUB_PID" >/dev/null 2>&1; rm -rf "$STUB_LOG" "$STORE" "$STORE.fail" "$WORK"' EXIT
+for i in $(seq 1 30); do curl -s -o /dev/null -m 0.2 "http://127.0.0.1:${PORT}/" 2>/dev/null && break; sleep 0.1; done
+mkdir -p "$WORK/home/.crewly" "$WORK/proj/out"
+ENVS=(CREWLY_API_URL="http://127.0.0.1:${PORT}" CREWLY_SESSION_NAME=dev-ella HOME="$WORK/home" CREWLY_HOME="$WORK/home/.crewly" CREWLY_PROJECT_PATH="$WORK/proj")
+run() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>/dev/null; }
+run_err() { env "${ENVS[@]}" bash "$EXEC" "$@" 2>&1 >/dev/null; }
+
+: > "$STUB_LOG"  # drop the readiness probe
+head -c 3000000 /dev/zero > "$WORK/proj/out/daily.mp4"
+OUT=$(run --path "$WORK/proj/out/daily.mp4" --note "the HD cut")
+check "result" "$(printf '%s' "$OUT" | jq -c '{success, shareId, url, fileName, sizeBytes, expiresAt}')" '{"success":true,"shareId":"sf_AbCdEfGhIjKlMnOpQrStUv","url":"https://crewlyai.com/portal/files/sf_AbCdEfGhIjKlMnOpQrStUv","fileName":"daily.mp4","sizeBytes":3000000,"expiresAt":"2026-10-20T00:00:00.000Z"}'
+check "instruction tells the agent to post the url in its own words" "$(printf '%s' "$OUT" | jq -r '.instruction' | grep -c 'in your own words')" "1"
+check "instruction names cancel" "$(printf '%s' "$OUT" | jq -r '.instruction' | grep -c 'share-file/execute.sh --cancel sf_AbCdEfGhIjKlMnOpQrStUv')" "1"
+check "output never carries the signed url" "$(printf '%s' "$OUT" | grep -c 'SECRETSIG')" "0"
+check "create request" "$(sed -n 1p "$STUB_LOG" | jq -c '{req, session}')" '{"req":{"fileName":"daily.mp4","sizeBytes":3000000,"contentType":"video/mp4","note":"the HD cut"},"session":"dev-ella"}'
+check "upload streamed with signed headers" "$(sed -n 2p "$STUB_LOG" | jq -c '{bytes, ctype, sse}')" '{"bytes":3000000,"ctype":"video/mp4","sse":"AES256"}'
+check "complete called" "$(sed -n 3p "$STUB_LOG" | jq -r .op)" "complete"
+
+# --name overrides the file name; --content-type overrides the guess
+: > "$STUB_LOG"
+run --path "$WORK/proj/out/daily.mp4" --name "launch.mov" --content-type video/quicktime >/dev/null
+check "name and content type" "$(sed -n 1p "$STUB_LOG" | jq -c '.req | {fileName, contentType}')" '{"fileName":"launch.mov","contentType":"video/quicktime"}'
+
+# Big files report progress on stderr (threshold lowered for the test), and never leak the signed url
+: > "$STUB_LOG"
+ERR=$(env "${ENVS[@]}" SHARE_FILE_PROGRESS_MIN_BYTES=1 bash "$EXEC" --path "$WORK/proj/out/daily.mp4" 2>&1 >/dev/null)
+check "progress announced" "$(printf '%s' "$ERR" | grep -c 'uploading 2 MB')" "1"
+check "progress reaches 100%" "$(printf '%s' "$ERR" | grep -c 'uploaded 100%')" "1"
+check "progress never prints the signed url" "$(printf '%s' "$ERR" | grep -c 'SECRETSIG')" "0"
+check "progress run still uploads the whole file" "$(grep '"op": "put"' "$STUB_LOG" | jq -r .bytes)" "3000000"
+
+: > "$STUB_LOG"
+OUT=$(run --path "$WORK/proj/out/daily.mp4" --name "refuse.bin"; true)
+check "cloud refusal passed through" "$(printf '%s' "$OUT" | jq -c '{success, reason}')" '{"success":false,"reason":"too_large"}'
+
+: > "$STUB_LOG"; touch "$STORE.fail"
+OUT=$(run --path "$WORK/proj/out/daily.mp4"; true)
+check "failed upload reports and cancels" "$(printf '%s' "$OUT" | jq -r .reason)" "upload_failed"
+check "cancel issued" "$(grep -c '"op": "cancel"' "$STUB_LOG")" "1"
+rm -f "$STORE.fail"
+
+# Path safety (same as send-file)
+echo secret > "$WORK/outside.txt"; ln -s "$WORK/proj/out/daily.mp4" "$WORK/proj/link.mp4"
+echo hidden > "$WORK/home/.crewly/token.txt"
+mkdir -p "$WORK/proj/dir"; : > "$WORK/proj/empty.mp4"
+check "outside project refused" "$(run_err --path "$WORK/outside.txt" | grep -c 'outside your project directory')" "1"
+check "symlink refused" "$(run_err --path "$WORK/proj/link.mp4" | grep -c 'symbolic link')" "1"
+check "directory refused" "$(run_err --path "$WORK/proj/dir" | grep -c 'not a regular file')" "1"
+check "empty file refused" "$(run_err --path "$WORK/proj/empty.mp4" | grep -c 'is empty')" "1"
+check "missing file refused" "$(run_err --path "$WORK/proj/nope" | grep -c 'file not found')" "1"
+check "path required" "$(run_err | grep -c -- '--path is required')" "1"
+: > "$STUB_LOG"
+env "${ENVS[@]}" CREWLY_PROJECT_PATH="$WORK" bash "$EXEC" --path "$WORK/home/.crewly/token.txt" >/dev/null 2>&1
+check "Crewly home refused even when it is inside the project" "$(grep -c '"op": "create"' "$STUB_LOG")" "0"
+
+# --status and --cancel
+: > "$STUB_LOG"
+OUT=$(run --status)
+check "status lists shares with links" "$(printf '%s' "$OUT" | jq -c '{success, shares}')" '{"success":true,"shares":[{"shareId":"sf_AbCdEfGhIjKlMnOpQrStUv","status":"ready","fileName":"daily.mp4","sizeBytes":3000000,"url":"https://crewlyai.com/portal/files/sf_AbCdEfGhIjKlMnOpQrStUv","expiresAt":"2026-10-20T00:00:00.000Z"}]}'
+OUT=$(run --status sf_AbCdEfGhIjKlMnOpQrStUv)
+check "status of one share drops signed urls" "$(printf '%s' "$OUT" | jq -c '{success, shareId, status, fileName}')" '{"success":true,"shareId":"sf_AbCdEfGhIjKlMnOpQrStUv","status":"ready","fileName":"daily.mp4"}'
+check "status of one share never prints a download url" "$(printf '%s' "$OUT" | grep -c 'secret.example')" "0"
+: > "$STUB_LOG"
+run --cancel sf_AbCdEfGhIjKlMnOpQrStUv >/dev/null
+check "cancel" "$(jq -r .path "$STUB_LOG")" "/api/apps/shares/sf_AbCdEfGhIjKlMnOpQrStUv"
+check "cancel needs a share id" "$(run_err --cancel hf_AbCdEfGhIjKlMnOpQrStUv | grep -c 'share id like sf_')" "1"
+
+echo "share-file: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/dist/backend/backend/src/controllers/apps/apps.controller.d.ts

@@ -38,6 +38,8 @@ export declare const requestCapabilities: (req: Request, res: Response) => Promi
 export declare const cancelCapabilityRequest: (req: Request, res: Response) => Promise<void>;
 /** POST /api/apps/:appId/make-private */
 export declare const makePrivate: (req: Request, res: Response) => Promise<void>;
+/** DELETE /api/apps/:appId — delete (unpublish) an app: the owner, or an agent whose team published it and it is private */
+export declare const deleteApp: (req: Request, res: Response) => Promise<void>;
 /** POST /api/apps/:appId/transfer `{ toSession }` — hand the app to another agent / team */
 export declare const transferApp: (req: Request, res: Response) => Promise<void>;
 /** GET /api/apps/:appId/owner — who the app's comments go to (an agent, a team or a channel) */
@@ -146,4 +148,14 @@ export declare const createUploadRequest: (req: Request, res: Response) => Promi
 export declare const getUploadRequest: (req: Request, res: Response) => Promise<void>;
 /** DELETE /api/apps/upload-requests/:requestId — cancel the link */
 export declare const cancelUploadRequest: (req: Request, res: Response) => Promise<void>;
+/** POST /api/apps/shares `{ fileName, sizeBytes, contentType?, note? }` — reserve a share; answers the owner's link and a presigned upload URL */
+export declare const createShare: (req: Request, res: Response) => Promise<void>;
+/** POST /api/apps/shares/:shareId/complete — the upload finished; Cloud checks the size and starts the 7 days */
+export declare const completeShare: (req: Request, res: Response) => Promise<void>;
+/** GET /api/apps/shares/:shareId — metadata (signed URLs only for the owner) */
+export declare const getShare: (req: Request, res: Response) => Promise<void>;
+/** GET /api/apps/shares — the account's live shares, with their links */
+export declare const listShares: (req: Request, res: Response) => Promise<void>;
+/** DELETE /api/apps/shares/:shareId — withdraw; Cloud deletes the file */
+export declare const cancelShare: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=apps.controller.d.ts.map

package/dist/backend/backend/src/controllers/apps/apps.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apps.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/apps/apps.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAuBjD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAgB/D;AA0BD,6BAA6B;AAC7B,eAAO,MAAM,UAAU,QAjBF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgCjC,CAAC;AAE1B,wFAAwF;AACxF,eAAO,MAAM,QAAQ,QAnCA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuCjC,CAAC;AAE1B,6DAA6D;AAC7D,eAAO,MAAM,SAAS,QA1CD,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0CqE,CAAC;AAEhI,4CAA4C;AAC5C,eAAO,MAAM,UAAU,QA7CF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6CuE,CAAC;AAElI,iDAAiD;AACjD,eAAO,MAAM,WAAW,QAhDH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgDsD,CAAC;AAEjH,uHAAuH;AACvH,eAAO,MAAM,aAAa,QAnDL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAwDjC,CAAC;AAE1B,iDAAiD;AACjD,eAAO,MAAM,mBAAmB,QA3DX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA2DsE,CAAC;AAEjI,wHAAwH;AACxH,eAAO,MAAM,mBAAmB,QA9DX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmExD,CAAC;AAEH,iDAAiD;AACjD,eAAO,MAAM,uBAAuB,QAtEf,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAsE8E,CAAC;AAEzI,yCAAyC;AACzC,eAAO,MAAM,WAAW,QAzEH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAyEsD,CAAC;AAEjH,4FAA4F;AAC5F,eAAO,MAAM,WAAW,QA5EH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgFxD,CAAC;AAEH,gGAAgG;AAChG,eAAO,MAAM,WAAW,QAnFH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmFmD,CAAC;AAE9G;;;GAGG;AACH,eAAO,MAAM,WAAW,QAzFH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6FxD,CAAC;AAEH,uKAAuK;AACvK,eAAO,MAAM,oBAAoB,QAhGZ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgGyF,CAAC;AAEpJ,mDAAmD;AACnD,eAAO,MAAM,WAAW,QAnGH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmGsE,CAAC;AAEjI,mDAAmD;AACnD,eAAO,MAAM,QAAQ,QAtGA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAsG2B,CAAC;AAEtF,oCAAoC;AACpC,eAAO,MAAM,YAAY,QAzGJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAyGoD,CAAC;AAE/G,wDAAwD;AACxD,eAAO,MAAM,QAAQ,QA5GA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8GzD,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,MAAM,QAjHE,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAiHwF,CAAC;AAEnJ,mDAAmD;AACnD,eAAO,MAAM,MAAM,QApHE,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoHqF,CAAC;AAEhJ,8HAA8H;AAC9H,eAAO,MAAM,WAAW,QAvHH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAyHzD,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,MAAM,QA5HE,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8HzD,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,SAAS,QAjID,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoIxD,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,SAAS,QAvID,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuI2F,CAAC;AAEtJ;;;;;GAKG;AACH,eAAO,MAAM,UAAU,QA/IF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8JnD,CAAC;AAER,2EAA2E;AAC3E,eAAO,MAAM,YAAY,QAjKJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAiK0E,CAAC;AAErI,+CAA+C;AAC/C,eAAO,MAAM,UAAU,QApKF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoK0E,CAAC;AAErI,mEAAmE;AACnE,eAAO,MAAM,YAAY,QAvKJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0KzD,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,cAAc,QA7KN,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6K+F,CAAC;AAE1J,uDAAuD;AACvD,eAAO,MAAM,aAAa,QAhLL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgL6F,CAAC;AAExJ;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,QAxLZ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgMxD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAvMR,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA+MxD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuBpF,CAAC;AAEF,mJAAmJ;AACnJ,eAAO,MAAM,mBAAmB,QAhPX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmPxD,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,QAtPT,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAsPwE,CAAC;AAEnI,2GAA2G;AAC3G,eAAO,MAAM,eAAe,QAzPP,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAyPmD,CAAC;AAE9G,yGAAyG;AACzG,eAAO,MAAM,kBAAkB,QA5PV,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA4PkE,CAAC;AAoB7H,uJAAuJ;AACvJ,eAAO,MAAM,eAAe,QAjRP,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6RxD,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,aAAa,QAhSL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAkSzD,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,WAAW,QArSH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAqSgC,CAAC;AAE3F,qHAAqH;AACrH,eAAO,MAAM,WAAW,QAxSH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6SnD,CAAC;AAER,gHAAgH;AAChH,eAAO,MAAM,cAAc,QAhTN,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgT2D,CAAC;AAEtH,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,QAnTb,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmT6F,CAAC;AAyBxJ,sIAAsI;AACtI,eAAO,MAAM,aAAa,QA7UL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuVnD,CAAC;AAER,+FAA+F;AAC/F,eAAO,MAAM,eAAe,QA1VP,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0VmE,CAAC;AAE9H,6FAA6F;AAC7F,eAAO,MAAM,UAAU,QA7VF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6VoD,CAAC;AAE/G,8DAA8D;AAC9D,eAAO,MAAM,YAAY,QAhWJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgWmC,CAAC;AAE9F,gFAAgF;AAChF,eAAO,MAAM,UAAU,QAnWF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuWxD,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,aAAa,QA1WL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0W0D,CAAC;AASrH;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAvXX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAiYnD,CAAC;AAER,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,QApYR,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoYuE,CAAC;AAElI,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,QAvYX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuY6E,CAAC"}
+{"version":3,"file":"apps.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/apps/apps.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAuBjD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAgB/D;AA0BD,6BAA6B;AAC7B,eAAO,MAAM,UAAU,QAjBF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgCjC,CAAC;AAE1B,wFAAwF;AACxF,eAAO,MAAM,QAAQ,QAnCA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuCjC,CAAC;AAE1B,6DAA6D;AAC7D,eAAO,MAAM,SAAS,QA1CD,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0CqE,CAAC;AAEhI,4CAA4C;AAC5C,eAAO,MAAM,UAAU,QA7CF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6CuE,CAAC;AAElI,iDAAiD;AACjD,eAAO,MAAM,WAAW,QAhDH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgDsD,CAAC;AAEjH,uHAAuH;AACvH,eAAO,MAAM,aAAa,QAnDL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAwDjC,CAAC;AAE1B,iDAAiD;AACjD,eAAO,MAAM,mBAAmB,QA3DX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA2DsE,CAAC;AAEjI,wHAAwH;AACxH,eAAO,MAAM,mBAAmB,QA9DX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmExD,CAAC;AAEH,iDAAiD;AACjD,eAAO,MAAM,uBAAuB,QAtEf,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAsE8E,CAAC;AAEzI,yCAAyC;AACzC,eAAO,MAAM,WAAW,QAzEH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAyEsD,CAAC;AAEjH,4HAA4H;AAC5H,eAAO,MAAM,SAAS,QA5ED,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgFxD,CAAC;AAEH,4FAA4F;AAC5F,eAAO,MAAM,WAAW,QAnFH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuFxD,CAAC;AAEH,gGAAgG;AAChG,eAAO,MAAM,WAAW,QA1FH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0FmD,CAAC;AAE9G;;;GAGG;AACH,eAAO,MAAM,WAAW,QAhGH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoGxD,CAAC;AAEH,uKAAuK;AACvK,eAAO,MAAM,oBAAoB,QAvGZ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuGyF,CAAC;AAEpJ,mDAAmD;AACnD,eAAO,MAAM,WAAW,QA1GH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0GsE,CAAC;AAEjI,mDAAmD;AACnD,eAAO,MAAM,QAAQ,QA7GA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6G2B,CAAC;AAEtF,oCAAoC;AACpC,eAAO,MAAM,YAAY,QAhHJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgHoD,CAAC;AAE/G,wDAAwD;AACxD,eAAO,MAAM,QAAQ,QAnHA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAqHzD,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,MAAM,QAxHE,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAwHwF,CAAC;AAEnJ,mDAAmD;AACnD,eAAO,MAAM,MAAM,QA3HE,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA2HqF,CAAC;AAEhJ,8HAA8H;AAC9H,eAAO,MAAM,WAAW,QA9HH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgIzD,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,MAAM,QAnIE,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAqIzD,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,SAAS,QAxID,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA2IxD,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,SAAS,QA9ID,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8I2F,CAAC;AAEtJ;;;;;GAKG;AACH,eAAO,MAAM,UAAU,QAtJF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAqKnD,CAAC;AAER,2EAA2E;AAC3E,eAAO,MAAM,YAAY,QAxKJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAwK0E,CAAC;AAErI,+CAA+C;AAC/C,eAAO,MAAM,UAAU,QA3KF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA2K0E,CAAC;AAErI,mEAAmE;AACnE,eAAO,MAAM,YAAY,QA9KJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAiLzD,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,cAAc,QApLN,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoL+F,CAAC;AAE1J,uDAAuD;AACvD,eAAO,MAAM,aAAa,QAvLL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuL6F,CAAC;AAExJ;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,QA/LZ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuMxD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QA9MR,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAsNxD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuBpF,CAAC;AAEF,mJAAmJ;AACnJ,eAAO,MAAM,mBAAmB,QAvPX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0PxD,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,QA7PT,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6PwE,CAAC;AAEnI,2GAA2G;AAC3G,eAAO,MAAM,eAAe,QAhQP,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgQmD,CAAC;AAE9G,yGAAyG;AACzG,eAAO,MAAM,kBAAkB,QAnQV,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmQkE,CAAC;AAoB7H,uJAAuJ;AACvJ,eAAO,MAAM,eAAe,QAxRP,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoSxD,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,aAAa,QAvSL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAySzD,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,WAAW,QA5SH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA4SgC,CAAC;AAE3F,qHAAqH;AACrH,eAAO,MAAM,WAAW,QA/SH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoTnD,CAAC;AAER,gHAAgH;AAChH,eAAO,MAAM,cAAc,QAvTN,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuT2D,CAAC;AAEtH,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,QA1Tb,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0T6F,CAAC;AAyBxJ,sIAAsI;AACtI,eAAO,MAAM,aAAa,QApVL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8VnD,CAAC;AAER,+FAA+F;AAC/F,eAAO,MAAM,eAAe,QAjWP,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAiWmE,CAAC;AAE9H,6FAA6F;AAC7F,eAAO,MAAM,UAAU,QApWF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAoWoD,CAAC;AAE/G,8DAA8D;AAC9D,eAAO,MAAM,YAAY,QAvWJ,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAuWmC,CAAC;AAE9F,gFAAgF;AAChF,eAAO,MAAM,UAAU,QA1WF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8WxD,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,aAAa,QAjXL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAiX0D,CAAC;AASrH;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QA9XX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAwYnD,CAAC;AAER,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,QA3YR,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA2YuE,CAAC;AAElI,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,QA9YX,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA8Y6E,CAAC;AAiBxI,kJAAkJ;AAClJ,eAAO,MAAM,WAAW,QAhaH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0anD,CAAC;AAER,iHAAiH;AACjH,eAAO,MAAM,aAAa,QA7aL,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA6a6D,CAAC;AAExH,gFAAgF;AAChF,eAAO,MAAM,QAAQ,QAhbA,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAgb8C,CAAC;AAEzG,yEAAyE;AACzE,eAAO,MAAM,UAAU,QAnbF,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAmb+B,CAAC;AAE1F,0EAA0E;AAC1E,eAAO,MAAM,WAAW,QAtbH,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CA0bxD,CAAC"}