@agent-native/core 0.14.8 → 0.15.1

package/dist/templates/workspace-core/.agents/skills/voice-transcription/SKILL.md

@@ -0,0 +1,124 @@
+---
+name: voice-transcription
+description: >-
+  Framework-wide voice dictation in the agent sidebar composer. Use when
+  changing composer microphone UX, the transcribe-voice route, or the
+  Voice Transcription settings section. Covers transcription-source routing,
+  cleanup routing, Google realtime gating, and the voice transcription
+  application-state keys.
+---
+
+# Voice Transcription
+
+Click-to-toggle microphone inside the sidebar composer turns speech into
+text. Users configure live transcription separately from AI cleanup in
+Settings → Voice Transcription. The feature is available in every template
+that renders `TiptapComposer`.
+
+## UX rules
+
+- **Always show the mic alongside the send button.** Cursor replaces send
+  with mic when the composer is empty; their users complain. We keep both
+  visible — Lovable does the same.
+- **Click-to-toggle, not push-to-talk.** More forgiving in a sidebar, avoids
+  host-app hotkey clashes. Keyboard shortcut is `Cmd/Ctrl+Shift+M` and
+  `Escape` cancels mid-recording.
+- **Transcript lands in the composer, editable, never auto-sent.** Insert at
+  the caret via `editor.chain().focus().insertContent(text).run()`.
+- **No CSS transitions for the recording state.** Framework rule; use static
+  brand color (`#625DF5`) instead of pulses.
+- **Icon:** Tabler `IconMicrophone` (idle) / `IconPlayerStopFilled` (recording).
+  Never use a sparkle or robot icon.
+- **Errors via inline alert or toast, never `window.alert`.**
+
+## Source And Cleanup
+
+Settings must keep these as separate choices:
+
+- **Live transcription source**: `mac-native`, `google-realtime`, or `batch`.
+- **AI cleanup**: independent off/on toggle. Cleanup uses Builder Gemini first
+  when hosted Gemini is configured, then BYOK Gemini (`GEMINI_API_KEY`).
+  Gemini cleanup/title/summary generation is not a live STT source.
+
+`application_state["voice-transcription-prefs"]` stores
+`{ transcriptionMode, provider, instructions }`. The legacy `provider` field
+is still written for old clients and batch provider preferences:
+
+| Value             | Meaning                                                        | Needs key                    |
+| ----------------- | -------------------------------------------------------------- | ---------------------------- |
+| `mac-native`      | Native macOS/Tauri speech path; web clients normalize to browser-native where needed | No                           |
+| `google-realtime` | Dedicated WebSocket → Google Speech-to-Text gRPC `StreamingRecognize` path | `GOOGLE_APPLICATION_CREDENTIALS` |
+| `batch`           | Upload audio after stop through the existing batch route       | Builder/Gemini/Groq/OpenAI depending on fallback |
+| `auto` provider   | Existing batch fallback chain                                  | Any configured batch provider |
+| `builder-gemini`  | Builder Gemini Flash-Lite batch/cleanup preference             | hosted Gemini provider connected |
+| `gemini`          | Direct Google Gemini BYOK batch/cleanup preference             | `GEMINI_API_KEY`             |
+| `groq`            | Groq Whisper batch preference                                  | `GROQ_API_KEY`               |
+| `openai`          | OpenAI Whisper batch preference                                | `OPENAI_API_KEY`             |
+| `browser`         | Legacy native/browser live speech preference                   | No                           |
+
+Default behavior:
+
+- The shared web settings/composer default to Batch / `auto`.
+- Dedicated macOS Tauri-native surfaces may save `mac-native`, but do not
+  assume the shared React settings default to it.
+- Old stored `builder` values are treated as `builder-gemini`.
+- Old stored `browser` values are treated as `mac-native`.
+- Saved `google-realtime` preferences must never hit `/_agent-native/transcribe-voice`. They go through the dedicated session bridge `POST /_agent-native/transcribe-stream/session`, which mints an opaque ai-services websocket session and keeps the Google service-account JSON off the client.
+- In the current bridge, the Google option is only actually ready when both the user's `GOOGLE_APPLICATION_CREDENTIALS` secret exists and Builder is connected, because the framework mints the managed ai-services session with Builder auth before streaming begins.
+
+## Where the pieces live
+
+| File                                                                  | Purpose                                             |
+| --------------------------------------------------------------------- | --------------------------------------------------- |
+| `packages/core/src/client/composer/useVoiceDictation.ts`              | Provider-routing hook (MediaRecorder / Web Speech)  |
+| `packages/core/src/client/composer/VoiceButton.tsx`                   | Mic button + live amplitude + cancel overlay        |
+| `packages/core/src/client/composer/TiptapComposer.tsx`                | Wires the hook, insertion, and keyboard shortcut    |
+| `packages/core/src/client/settings/VoiceTranscriptionSection.tsx`     | Live source + cleanup controls in sidebar settings  |
+| `packages/core/src/client/transcription/BuilderTranscriptionCta.tsx`  | CTA shown when Builder account isn't connected      |
+| `packages/core/src/client/transcription/use-live-transcription.ts`    | Web Speech live-transcription hook for recordings   |
+| `packages/core/src/server/transcribe-voice.ts`                        | Route handler (routes to Builder/Gemini/Groq/Whisper) |
+| `packages/core/src/transcription/builder-transcription.ts`            | Builder proxy transcription client                  |
+| `packages/core/src/secrets/register-framework-secrets.ts`             | Framework-level provider key registration           |
+
+## Key resolution (server)
+
+`transcribe-voice.ts` is batch-only. Do not add realtime streaming to this
+route. Google Speech-to-Text realtime uses a dedicated audio-frame protocol:
+client audio frames → `/_agent-native/transcribe-stream/session` →
+ai-services WebSocket → Google gRPC `StreamingRecognize` → partial / final
+transcript events. Use the canonical docs URL:
+https://cloud.google.com/speech-to-text/v2/docs/streaming-recognize
+
+Batch routing is based on the user's provider preference:
+
+1. If `builder-gemini` and `resolveHasBuilderPrivateKey()` → calls `transcribeWithBuilder({ model: "gemini-3-1-flash-lite" })` via Builder proxy, or uses Builder Gemini Flash-Lite to clean up a live native/browser transcript when the desktop client sends text instead of audio.
+2. If `builder` and `resolveHasBuilderPrivateKey()` → legacy alias; prefer `builder-gemini`.
+3. If `gemini` → resolves `GEMINI_API_KEY` and calls the direct Google Gemini path.
+4. If `groq` → resolves `GROQ_API_KEY` and calls Groq's Whisper-compatible endpoint.
+5. If `openai` → resolves `OPENAI_API_KEY`:
+   - `readAppSecret({ key: "OPENAI_API_KEY", scope: "user", scopeId: session.email })` — user's encrypted secret.
+   - `resolveCredential("OPENAI_API_KEY")` — env var + SQL settings fallback.
+
+In auto mode / no preference, the route tries Builder Gemini Flash-Lite first
+when Builder is connected, then Gemini BYOK, Groq, and OpenAI.
+When a request includes `instructions`, pass them through to the selected LLM
+provider. Gemini uses them in the transcription prompt, Builder receives them
+as transcription/cleanup instructions, and Whisper-compatible providers receive
+them as provider prompt/context.
+
+Never hardcode a shared key. Never log the value. Never echo it back to the
+client.
+
+## Overriding per-template
+
+Templates can:
+- **Disable the mic**: pass `voiceEnabled={false}` to `TiptapComposer`.
+- **Replace the button**: wrap `TiptapComposer` and render your own `extraActionButton` (the framework mic sits between `extraActionButton` and the send button).
+- **Pre-register provider keys as `required: true`**: call `registerRequiredSecret(...)` from your own server plugin when a template needs a specific BYOK provider in onboarding.
+
+## Don'ts
+
+- Don't call transcription providers from the client — go through `/_agent-native/transcribe-voice` so the user's secret stays server-side.
+- Don't remove the cancel affordance — mic permission abuse paranoia is real.
+- Don't auto-submit the transcript — users always edit before sending.
+- Don't copy Cursor's "hide send when empty" pattern — it confuses users.

package/dist/templates/workspace-core/AGENTS.md

@@ -11,12 +11,22 @@ agent should know.
 
 ## Shared Conventions
 
+- All AI/LLM behavior goes through the app's agent chat. UI and server code
+  must not call model providers, AI SDK `generateText()` / `streamText()`, or
+  other inline LLM APIs directly. Use `sendToAgentChat()` for local app-agent
+  work, and read `.agents/skills/delegate-to-agent/SKILL.md` before building
+  agent-driven UI or "AI" features.
 - Put shared code in `packages/shared` only when multiple apps need it.
 - Keep app-specific screens, actions, state, and skills inside `apps/<app>`.
 - Store shared runtime configuration in the workspace root `.env`; use
   `apps/<app>/.env` only for app-specific overrides.
 - Prefer framework defaults until the workspace has a real custom rule,
   component, plugin, action, or skill to share.
+- Keep the Workspace files view for user-authored or user-requested resources.
+  Agents may create hidden `agent_scratch` resources for temporary working
+  notes, scripts, task plans, or intermediate outputs, but should promote them
+  to normal workspace visibility only when the user explicitly asks to keep or
+  manage the file.
 
 ## Adding Apps
 
@@ -33,6 +43,10 @@ Do not implement a new app by adding a route, page, component, or file to
 `apps/starter` or another existing app unless the user explicitly asks to modify
 that existing app.
 
+Dispatch vault access is workspace-wide by default: every saved vault key is
+available to every workspace app. Only create or request per-app vault grants
+when Dispatch's vault access setting is switched to manual mode.
+
 Workspace apps are discovered from `apps/<app-name>/package.json`. There is no
 separate workspace app registry to edit for Dispatch to list the app. Use
 relative workspace links like `/<app-name>` and never hardcode `localhost`,
@@ -42,7 +56,8 @@ port. React Router apps must preserve `APP_BASE_PATH` / `VITE_APP_BASE_PATH` in
 `app/entry.client.tsx` via `appBasePath()` so the app hydrates correctly when
 mounted at `/<app-name>`. Use the framework/template UI stack for standard UI:
 shadcn/ui components and `@tabler/icons-react`. Do not add `lucide-react` or
-another icon library.
+another icon library. Read `.agents/skills/shadcn-ui/SKILL.md` before adding,
+updating, or debugging shadcn components.
 
 In local development, run
 `pnpm exec agent-native create <app-name> --template=<template>` from the

package/dist/templates/workspace-root/AGENTS.md

@@ -3,6 +3,27 @@
 These instructions apply at the workspace root. App-specific behavior belongs
 in `apps/<app>/AGENTS.md`; shared cross-app behavior belongs in
 `packages/shared/AGENTS.md` or `packages/shared/.agents/skills/`.
+The root `.agents/skills` path points at the shared package's skills so local
+coding agents can discover the same workspace-wide guidance from the root.
+
+## Core Agent Rule
+
+- All AI/LLM behavior goes through the app's agent chat. UI and server code
+  must not call model providers, AI SDK `generateText()` / `streamText()`, or
+  other inline LLM APIs directly. Use `sendToAgentChat()` for local app-agent
+  work, and read `packages/shared/.agents/skills/delegate-to-agent/SKILL.md`
+  before building agent-driven UI or "AI" features.
+
+## Workspace Resources
+
+- The Workspace files view is for user-authored or user-requested resources
+  they intentionally add, edit, or manage.
+- Agents may use hidden `agent_scratch` resources for temporary working notes,
+  scripts, task plans, or intermediate outputs. Keep those scratch files hidden
+  by default and promote them only when the user explicitly asks to keep or
+  manage the file.
+- Durable instructions, skills, jobs, memories, custom agents, and files the
+  user explicitly asked to save belong in normal workspace visibility.
 
 ## Workspace Scope
 
@@ -26,6 +47,9 @@ in `apps/<app>/AGENTS.md`; shared cross-app behavior belongs in
   `/<app-id>`.
 - When a user explicitly asks for a new app or workspace app, create the
   separate workspace app.
+- Dispatch vault access is workspace-wide by default: every saved vault key is
+  available to every workspace app. Only create or request per-app vault grants
+  when Dispatch's vault access setting is switched to manual mode.
 - Do not satisfy a new-app request by adding a route, page, component, or file
   to `apps/starter` or another existing app unless the user explicitly asks to
   modify that existing app.
@@ -44,6 +68,15 @@ in `apps/<app>/AGENTS.md`; shared cross-app behavior belongs in
   base template improvements continue to flow automatically.
 - Workspace apps are discovered from `apps/<app-id>/package.json`. There is no
   separate workspace app registry to edit for Dispatch to list the app.
+- Always save a concise, human-readable `description` in the generated app's
+  `apps/<app-id>/package.json`. Dispatch lists and A2A connected-agent context
+  use the app name plus this description so other agents understand what the app
+  does. Dispatch users can later edit the displayed name/description from the
+  Apps page without changing source.
+- All sibling workspace apps are accessible by default over A2A through
+  `call-agent`. Agents receive a compact list of available app names and
+  descriptions in prompt context; use tool search or app-specific actions only
+  when more detail is needed.
 - Use relative workspace links like `/<app-id>`. Never hardcode
   `localhost`, `127.0.0.1`, `8080`, `8100`, or any dev port in app cards,
   instructions, redirects, or navigation; the active workspace gateway/browser
@@ -53,6 +86,8 @@ in `apps/<app>/AGENTS.md`; shared cross-app behavior belongs in
   when mounted at `/<app-id>`.
 - Use the framework/template UI stack for standard UI: shadcn/ui components and
   `@tabler/icons-react`. Do not add `lucide-react` or another icon library.
+  Read `packages/shared/.agents/skills/shadcn-ui/SKILL.md` before adding,
+  updating, or debugging shadcn components.
 - In local development, scaffold the app from the workspace root with
   `pnpm exec agent-native create <app-id> --template=<template>`. In production
   Dispatch posts the request to Builder branch creation; the Builder branch

package/dist/templates/workspace-root/README.md

@@ -33,6 +33,9 @@ Apps don't need any configuration to opt in. Discovery happens via the
 `agent-native.workspaceCore` field in this root `package.json`, which names
 the shared package (`@{{APP_NAME}}/shared`).
 
+The workspace root also links `.agents/skills` to the shared package so coding
+agents launched from the root can discover the same workspace-wide skills.
+
 ## Getting started
 
 ```bash
@@ -49,6 +52,10 @@ watches `apps/`, so newly-created apps are detected without restarting
 links should stay relative, such as `/starter` or `/<app-id>`; do not hardcode
 localhost or dev ports because the active gateway origin owns the port.
 
+Dispatch vault keys are workspace-wide by default: every saved vault key is
+available to every workspace app and can be synced from Dispatch. Switch the
+Vault page to manual access only when you need explicit per-app key grants.
+
 ## Workspace org identity
 
 Set these root `.env` values before production deploys or when repairing

package/dist/tools/actions.d.ts

@@ -0,0 +1,3 @@
+import type { ActionEntry } from "../agent/production-agent.js";
+export declare function createToolActionEntries(): Record<string, ActionEntry>;
+//# sourceMappingURL=actions.d.ts.map

package/dist/tools/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/tools/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAYhE,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAiRrE"}

package/dist/tools/actions.js

@@ -0,0 +1,272 @@
+import { createTool, getTool, updateTool, updateToolContent } from "./store.js";
+import { addToolSlotTarget, installToolSlot, uninstallToolSlot, listToolsForSlot, listSlotsForTool, } from "./slots/store.js";
+export function createToolActionEntries() {
+    return {
+        "create-tool": {
+            tool: {
+                description: "Create a sandboxed Alpine.js mini-app tool. Use this when the user asks to create, build, or make a tool/widget/dashboard/calculator. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), toolFetch(), and toolData.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        name: {
+                            type: "string",
+                            description: 'Short display name for the tool. Do not include "app" — e.g. name a todo app "Todos", a weather app "Weather".',
+                        },
+                        description: {
+                            type: "string",
+                            description: "One-sentence summary of what the tool does.",
+                        },
+                        content: {
+                            type: "string",
+                            description: "Self-contained Alpine.js HTML body snippet. The iframe body has no padding, so add p-4 or p-6 to the outermost element. Use semantic Tailwind colors (bg-background, text-foreground, bg-primary, etc.) for native theming. Do not include a full app build, React code, or source files.",
+                        },
+                        icon: {
+                            type: "string",
+                            description: "Optional icon name or short label.",
+                        },
+                    },
+                    required: ["name", "content"],
+                },
+            },
+            run: async (args) => {
+                const name = String(args?.name ?? "").trim();
+                const content = String(args?.content ?? "").trim();
+                if (!name)
+                    return "Error: name is required.";
+                if (!content)
+                    return "Error: content is required.";
+                const tool = await createTool({
+                    name,
+                    description: String(args?.description ?? "").trim(),
+                    content,
+                    icon: args?.icon ? String(args.icon) : undefined,
+                });
+                return {
+                    ok: true,
+                    tool,
+                    next: `Navigate to /tools/${tool.id} or use the navigate action with --view=tools --toolId=${tool.id}.`,
+                };
+            },
+        },
+        "update-tool": {
+            tool: {
+                description: "Update an existing sandboxed Alpine.js mini-app tool. Prefer patches for surgical edits; use full content replacement only when necessary.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        id: {
+                            type: "string",
+                            description: "Tool id to update.",
+                        },
+                        name: {
+                            type: "string",
+                            description: "Optional new display name.",
+                        },
+                        description: {
+                            type: "string",
+                            description: "Optional new description.",
+                        },
+                        content: {
+                            type: "string",
+                            description: "Optional full replacement Alpine.js HTML body snippet.",
+                        },
+                        patches: {
+                            type: "string",
+                            description: 'Optional JSON array of { "find": "...", "replace": "..." } patches to apply to the current content.',
+                        },
+                        icon: {
+                            type: "string",
+                            description: "Optional icon name or short label.",
+                        },
+                        visibility: {
+                            type: "string",
+                            description: "Optional sharing visibility.",
+                            enum: ["private", "org", "public"],
+                        },
+                    },
+                    required: ["id"],
+                },
+            },
+            run: async (args) => {
+                const id = String(args?.id ?? "").trim();
+                if (!id)
+                    return "Error: id is required.";
+                let result = null;
+                if (args?.content !== undefined || args?.patches !== undefined) {
+                    const patches = parsePatches(args.patches);
+                    if (args?.patches !== undefined && !patches) {
+                        return "Error: patches must be a JSON array of { find, replace } objects.";
+                    }
+                    result = await updateToolContent(id, {
+                        content: args?.content !== undefined ? String(args.content) : undefined,
+                        patches,
+                    });
+                }
+                const meta = {};
+                if (args?.name !== undefined)
+                    meta.name = String(args.name).trim();
+                if (args?.description !== undefined) {
+                    meta.description = String(args.description).trim();
+                }
+                if (args?.icon !== undefined)
+                    meta.icon = String(args.icon);
+                if (args?.visibility !== undefined) {
+                    meta.visibility = String(args.visibility);
+                }
+                if (Object.keys(meta).length > 0) {
+                    result = await updateTool(id, meta);
+                }
+                if (!result)
+                    result = await getTool(id);
+                if (!result)
+                    return `Error: tool not found: ${id}`;
+                return { ok: true, tool: result };
+            },
+        },
+        "add-tool-slot-target": {
+            tool: {
+                description: 'Declare that a tool can render in a UI extension-point slot of an app (e.g. "mail.contact-sidebar.bottom"). Apps drop ExtensionSlot components in their UI; this action registers a tool as installable into one of those slots. Slot IDs follow the convention <app>.<area>.<position>. Caller must have editor access to the tool.',
+                parameters: {
+                    type: "object",
+                    properties: {
+                        toolId: { type: "string", description: "Tool id." },
+                        slotId: {
+                            type: "string",
+                            description: 'Slot identifier — e.g. "mail.contact-sidebar.bottom".',
+                        },
+                        config: {
+                            type: "string",
+                            description: "Optional JSON string with slot-specific config (defaults, hints, etc.).",
+                        },
+                    },
+                    required: ["toolId", "slotId"],
+                },
+            },
+            run: async (args) => {
+                const toolId = String(args?.toolId ?? "").trim();
+                const slotId = String(args?.slotId ?? "").trim();
+                if (!toolId)
+                    return "Error: toolId is required.";
+                if (!slotId)
+                    return "Error: slotId is required.";
+                const row = await addToolSlotTarget(toolId, slotId, args?.config ? String(args.config) : undefined);
+                return { ok: true, slot: row };
+            },
+        },
+        "install-extension": {
+            tool: {
+                description: "Install a tool as a widget in an extension-point slot for the current user. The tool must already declare the slot via add-tool-slot-target. Per-user installation — only affects the calling user's view. Use after creating a tool that targets a slot, or when the user asks to add an existing widget to a slot.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        toolId: { type: "string", description: "Tool id to install." },
+                        slotId: {
+                            type: "string",
+                            description: 'Slot identifier — e.g. "mail.contact-sidebar.bottom".',
+                        },
+                        position: {
+                            type: "number",
+                            description: "Optional integer position within the slot (lower = earlier). Defaults to end.",
+                        },
+                        config: {
+                            type: "string",
+                            description: "Optional JSON string with per-install config (overrides, settings).",
+                        },
+                    },
+                    required: ["toolId", "slotId"],
+                },
+            },
+            run: async (args) => {
+                const toolId = String(args?.toolId ?? "").trim();
+                const slotId = String(args?.slotId ?? "").trim();
+                if (!toolId)
+                    return "Error: toolId is required.";
+                if (!slotId)
+                    return "Error: slotId is required.";
+                const position = args?.position !== undefined && args.position !== null
+                    ? Number(args.position)
+                    : undefined;
+                const row = await installToolSlot(toolId, slotId, {
+                    position: Number.isFinite(position) ? position : undefined,
+                    config: args?.config ? String(args.config) : undefined,
+                });
+                return { ok: true, install: row };
+            },
+        },
+        "uninstall-extension": {
+            tool: {
+                description: "Remove a tool from an extension-point slot for the current user. Does not delete the tool itself.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        toolId: { type: "string", description: "Tool id." },
+                        slotId: { type: "string", description: "Slot identifier." },
+                    },
+                    required: ["toolId", "slotId"],
+                },
+            },
+            run: async (args) => {
+                const toolId = String(args?.toolId ?? "").trim();
+                const slotId = String(args?.slotId ?? "").trim();
+                if (!toolId)
+                    return "Error: toolId is required.";
+                if (!slotId)
+                    return "Error: slotId is required.";
+                await uninstallToolSlot(toolId, slotId);
+                return { ok: true };
+            },
+        },
+        "list-tools-for-slot": {
+            tool: {
+                description: "List tools the current user has access to that declare a given extension-point slot. Use to discover what's available to install into a slot the user mentioned.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        slotId: { type: "string", description: "Slot identifier." },
+                    },
+                    required: ["slotId"],
+                },
+            },
+            run: async (args) => {
+                const slotId = String(args?.slotId ?? "").trim();
+                if (!slotId)
+                    return "Error: slotId is required.";
+                return { tools: await listToolsForSlot(slotId) };
+            },
+            readOnly: true,
+        },
+        "list-tool-slots": {
+            tool: {
+                description: "List the extension-point slots a specific tool declares it can render in. Caller must have viewer access to the tool.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        toolId: { type: "string", description: "Tool id." },
+                    },
+                    required: ["toolId"],
+                },
+            },
+            run: async (args) => {
+                const toolId = String(args?.toolId ?? "").trim();
+                if (!toolId)
+                    return "Error: toolId is required.";
+                return { slots: await listSlotsForTool(toolId) };
+            },
+            readOnly: true,
+        },
+    };
+}
+function parsePatches(value) {
+    if (value === undefined)
+        return undefined;
+    const parsed = typeof value === "string" ? JSON.parse(value) : value;
+    if (!Array.isArray(parsed))
+        return undefined;
+    if (parsed.some((patch) => !patch ||
+        typeof patch.find !== "string" ||
+        typeof patch.replace !== "string")) {
+        return undefined;
+    }
+    return parsed;
+}
+//# sourceMappingURL=actions.js.map

package/dist/tools/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/tools/actions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,aAAa,EAAE;YACb,IAAI,EAAE;gBACJ,WAAW,EACT,8RAA8R;gBAChS,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;yBACnH;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,6CAA6C;yBAC3D;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2RAA2R;yBAC9R;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oCAAoC;yBAClD;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI;oBAAE,OAAO,0BAA0B,CAAC;gBAC7C,IAAI,CAAC,OAAO;oBAAE,OAAO,6BAA6B,CAAC;gBAEnD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;oBAC5B,IAAI;oBACJ,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBACnD,OAAO;oBACP,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;iBACjD,CAAC,CAAC;gBAEH,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,IAAI;oBACJ,IAAI,EAAE,sBAAsB,IAAI,CAAC,EAAE,0DAA0D,IAAI,CAAC,EAAE,GAAG;iBACxG,CAAC;YACJ,CAAC;SACF;QAED,aAAa,EAAE;YACb,IAAI,EAAE;gBACJ,WAAW,EACT,4IAA4I;gBAC9I,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE;4BACF,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oBAAoB;yBAClC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,4BAA4B;yBAC1C;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,2BAA2B;yBACzC;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wDAAwD;yBAC3D;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qGAAqG;yBACxG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,oCAAoC;yBAClD;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;4BAC3C,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;yBACnC;qBACF;oBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;iBACjB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,CAAC,EAAE;oBAAE,OAAO,wBAAwB,CAAC;gBAEzC,IAAI,MAAM,GAAG,IAAI,CAAC;gBAClB,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC/D,MAAM,OAAO,GAAG,YAAY,CAAE,IAAY,CAAC,OAAO,CAAC,CAAC;oBACpD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;wBAC5C,OAAO,mEAAmE,CAAC;oBAC7E,CAAC;oBACD,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;wBACnC,OAAO,EACL,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;wBAChE,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,GAA2B,EAAE,CAAC;gBACxC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;oBACpC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,CAAC;gBACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAW,CAAC,CAAC;gBAC7C,CAAC;gBAED,IAAI,CAAC,MAAM;oBAAE,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM;oBAAE,OAAO,0BAA0B,EAAE,EAAE,CAAC;gBACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACpC,CAAC;SACF;QAED,sBAAsB,EAAE;YACtB,IAAI,EAAE;gBACJ,WAAW,EACT,sUAAsU;gBACxU,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;wBACnD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,yEAAyE;yBAC5E;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;iBAC/B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,MAAM,EACN,MAAM,EACN,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/C,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACjC,CAAC;SACF;QAED,mBAAmB,EAAE;YACnB,IAAI,EAAE;gBACJ,WAAW,EACT,sTAAsT;gBACxT,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;wBAC9D,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+EAA+E;yBAClF;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qEAAqE;yBACxE;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;iBAC/B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,QAAQ,GACZ,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;oBACpD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACvB,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE;oBAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACpE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;iBACvD,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACpC,CAAC;SACF;QAED,qBAAqB,EAAE;YACrB,IAAI,EAAE;gBACJ,WAAW,EACT,mGAAmG;gBACrG,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;wBACnD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC5D;oBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;iBAC/B;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF;QAED,qBAAqB,EAAE;YACrB,IAAI,EAAE;gBACJ,WAAW,EACT,kKAAkK;gBACpK,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC5D;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,CAAC;YACD,QAAQ,EAAE,IAAI;SACf;QAED,iBAAiB,EAAE;YACjB,IAAI,EAAE;gBACJ,WAAW,EACT,uHAAuH;gBACzH,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;qBACpD;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM;oBAAE,OAAO,4BAA4B,CAAC;gBACjD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,CAAC;YACD,QAAQ,EAAE,IAAI;SACf;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK;QACN,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CACpC,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { ActionEntry } from \"../agent/production-agent.js\";\nimport { createTool, getTool, updateTool, updateToolContent } from \"./store.js\";\nimport {\n  addToolSlotTarget,\n  installToolSlot,\n  uninstallToolSlot,\n  listToolsForSlot,\n  listSlotsForTool,\n} from \"./slots/store.js\";\n\ntype ToolPatch = { find: string; replace: string };\n\nexport function createToolActionEntries(): Record<string, ActionEntry> {\n  return {\n    \"create-tool\": {\n      tool: {\n        description:\n          \"Create a sandboxed Alpine.js mini-app tool. Use this when the user asks to create, build, or make a tool/widget/dashboard/calculator. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), toolFetch(), and toolData.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            name: {\n              type: \"string\",\n              description:\n                'Short display name for the tool. Do not include \"app\" — e.g. name a todo app \"Todos\", a weather app \"Weather\".',\n            },\n            description: {\n              type: \"string\",\n              description: \"One-sentence summary of what the tool does.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Self-contained Alpine.js HTML body snippet. The iframe body has no padding, so add p-4 or p-6 to the outermost element. Use semantic Tailwind colors (bg-background, text-foreground, bg-primary, etc.) for native theming. Do not include a full app build, React code, or source files.\",\n            },\n            icon: {\n              type: \"string\",\n              description: \"Optional icon name or short label.\",\n            },\n          },\n          required: [\"name\", \"content\"],\n        },\n      },\n      run: async (args) => {\n        const name = String(args?.name ?? \"\").trim();\n        const content = String(args?.content ?? \"\").trim();\n        if (!name) return \"Error: name is required.\";\n        if (!content) return \"Error: content is required.\";\n\n        const tool = await createTool({\n          name,\n          description: String(args?.description ?? \"\").trim(),\n          content,\n          icon: args?.icon ? String(args.icon) : undefined,\n        });\n\n        return {\n          ok: true,\n          tool,\n          next: `Navigate to /tools/${tool.id} or use the navigate action with --view=tools --toolId=${tool.id}.`,\n        };\n      },\n    },\n\n    \"update-tool\": {\n      tool: {\n        description:\n          \"Update an existing sandboxed Alpine.js mini-app tool. Prefer patches for surgical edits; use full content replacement only when necessary.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"Tool id to update.\",\n            },\n            name: {\n              type: \"string\",\n              description: \"Optional new display name.\",\n            },\n            description: {\n              type: \"string\",\n              description: \"Optional new description.\",\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Optional full replacement Alpine.js HTML body snippet.\",\n            },\n            patches: {\n              type: \"string\",\n              description:\n                'Optional JSON array of { \"find\": \"...\", \"replace\": \"...\" } patches to apply to the current content.',\n            },\n            icon: {\n              type: \"string\",\n              description: \"Optional icon name or short label.\",\n            },\n            visibility: {\n              type: \"string\",\n              description: \"Optional sharing visibility.\",\n              enum: [\"private\", \"org\", \"public\"],\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      run: async (args) => {\n        const id = String(args?.id ?? \"\").trim();\n        if (!id) return \"Error: id is required.\";\n\n        let result = null;\n        if (args?.content !== undefined || args?.patches !== undefined) {\n          const patches = parsePatches((args as any).patches);\n          if (args?.patches !== undefined && !patches) {\n            return \"Error: patches must be a JSON array of { find, replace } objects.\";\n          }\n          result = await updateToolContent(id, {\n            content:\n              args?.content !== undefined ? String(args.content) : undefined,\n            patches,\n          });\n        }\n\n        const meta: Record<string, string> = {};\n        if (args?.name !== undefined) meta.name = String(args.name).trim();\n        if (args?.description !== undefined) {\n          meta.description = String(args.description).trim();\n        }\n        if (args?.icon !== undefined) meta.icon = String(args.icon);\n        if (args?.visibility !== undefined) {\n          meta.visibility = String(args.visibility);\n        }\n        if (Object.keys(meta).length > 0) {\n          result = await updateTool(id, meta as any);\n        }\n\n        if (!result) result = await getTool(id);\n        if (!result) return `Error: tool not found: ${id}`;\n        return { ok: true, tool: result };\n      },\n    },\n\n    \"add-tool-slot-target\": {\n      tool: {\n        description:\n          'Declare that a tool can render in a UI extension-point slot of an app (e.g. \"mail.contact-sidebar.bottom\"). Apps drop ExtensionSlot components in their UI; this action registers a tool as installable into one of those slots. Slot IDs follow the convention <app>.<area>.<position>. Caller must have editor access to the tool.',\n        parameters: {\n          type: \"object\",\n          properties: {\n            toolId: { type: \"string\", description: \"Tool id.\" },\n            slotId: {\n              type: \"string\",\n              description:\n                'Slot identifier — e.g. \"mail.contact-sidebar.bottom\".',\n            },\n            config: {\n              type: \"string\",\n              description:\n                \"Optional JSON string with slot-specific config (defaults, hints, etc.).\",\n            },\n          },\n          required: [\"toolId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const toolId = String(args?.toolId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!toolId) return \"Error: toolId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        const row = await addToolSlotTarget(\n          toolId,\n          slotId,\n          args?.config ? String(args.config) : undefined,\n        );\n        return { ok: true, slot: row };\n      },\n    },\n\n    \"install-extension\": {\n      tool: {\n        description:\n          \"Install a tool as a widget in an extension-point slot for the current user. The tool must already declare the slot via add-tool-slot-target. Per-user installation — only affects the calling user's view. Use after creating a tool that targets a slot, or when the user asks to add an existing widget to a slot.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            toolId: { type: \"string\", description: \"Tool id to install.\" },\n            slotId: {\n              type: \"string\",\n              description:\n                'Slot identifier — e.g. \"mail.contact-sidebar.bottom\".',\n            },\n            position: {\n              type: \"number\",\n              description:\n                \"Optional integer position within the slot (lower = earlier). Defaults to end.\",\n            },\n            config: {\n              type: \"string\",\n              description:\n                \"Optional JSON string with per-install config (overrides, settings).\",\n            },\n          },\n          required: [\"toolId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const toolId = String(args?.toolId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!toolId) return \"Error: toolId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        const position =\n          args?.position !== undefined && args.position !== null\n            ? Number(args.position)\n            : undefined;\n        const row = await installToolSlot(toolId, slotId, {\n          position: Number.isFinite(position as number) ? position : undefined,\n          config: args?.config ? String(args.config) : undefined,\n        });\n        return { ok: true, install: row };\n      },\n    },\n\n    \"uninstall-extension\": {\n      tool: {\n        description:\n          \"Remove a tool from an extension-point slot for the current user. Does not delete the tool itself.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            toolId: { type: \"string\", description: \"Tool id.\" },\n            slotId: { type: \"string\", description: \"Slot identifier.\" },\n          },\n          required: [\"toolId\", \"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const toolId = String(args?.toolId ?? \"\").trim();\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!toolId) return \"Error: toolId is required.\";\n        if (!slotId) return \"Error: slotId is required.\";\n        await uninstallToolSlot(toolId, slotId);\n        return { ok: true };\n      },\n    },\n\n    \"list-tools-for-slot\": {\n      tool: {\n        description:\n          \"List tools the current user has access to that declare a given extension-point slot. Use to discover what's available to install into a slot the user mentioned.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            slotId: { type: \"string\", description: \"Slot identifier.\" },\n          },\n          required: [\"slotId\"],\n        },\n      },\n      run: async (args) => {\n        const slotId = String(args?.slotId ?? \"\").trim();\n        if (!slotId) return \"Error: slotId is required.\";\n        return { tools: await listToolsForSlot(slotId) };\n      },\n      readOnly: true,\n    },\n\n    \"list-tool-slots\": {\n      tool: {\n        description:\n          \"List the extension-point slots a specific tool declares it can render in. Caller must have viewer access to the tool.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            toolId: { type: \"string\", description: \"Tool id.\" },\n          },\n          required: [\"toolId\"],\n        },\n      },\n      run: async (args) => {\n        const toolId = String(args?.toolId ?? \"\").trim();\n        if (!toolId) return \"Error: toolId is required.\";\n        return { slots: await listSlotsForTool(toolId) };\n      },\n      readOnly: true,\n    },\n  };\n}\n\nfunction parsePatches(value: unknown): ToolPatch[] | undefined {\n  if (value === undefined) return undefined;\n  const parsed = typeof value === \"string\" ? JSON.parse(value) : value;\n  if (!Array.isArray(parsed)) return undefined;\n  if (\n    parsed.some(\n      (patch) =>\n        !patch ||\n        typeof patch.find !== \"string\" ||\n        typeof patch.replace !== \"string\",\n    )\n  ) {\n    return undefined;\n  }\n  return parsed;\n}\n"]}

package/dist/tools/fetch-tool.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Fetch tool — outbound HTTP for automations and agent use.
+ *
+ * Supports ${keys.NAME} reference substitution in URL, headers, and body.
+ * Values are resolved server-side AFTER the model emits the tool call —
+ * the raw secret never enters the model's context.
+ */
+import type { ActionEntry } from "../agent/production-agent.js";
+export interface FetchToolOptions {
+    /** Resolve ${keys.NAME} references. Injected by the plugin at setup time. */
+    resolveKeys?: (text: string) => Promise<{
+        resolved: string;
+        usedKeys: string[];
+        secretValues?: string[];
+    }>;
+    /** Validate URL against per-key allowlists. */
+    validateUrl?: (url: string, usedKeys: string[]) => Promise<boolean>;
+}
+/**
+ * Create the fetch tool entry for the agent tool registry.
+ */
+export declare function createFetchToolEntry(opts?: FetchToolOptions): Record<string, ActionEntry>;
+//# sourceMappingURL=fetch-tool.d.ts.map

package/dist/tools/fetch-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-tool.d.ts","sourceRoot":"","sources":["../../src/tools/fetch-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAchE,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACtC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC,CAAC;IACH,+CAA+C;IAC/C,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,GAAE,gBAAqB,GAC1B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAgM7B"}