@bryti/agent 0.0.1 → 0.1.0

package/dist/tools/fetch-url.js

@@ -0,0 +1,76 @@
+/**
+ * URL fetch and content extraction. HTTP GET, extract readable text via
+ * @mozilla/readability + linkedom, truncate to ~4000 chars so it doesn't
+ * blow up the context window.
+ */
+import axios from "axios";
+import { parseHTML } from "linkedom";
+import { Readability } from "@mozilla/readability";
+import { toolError, toolSuccess } from "./result.js";
+import { Type } from "@sinclair/typebox";
+import { isPrivateHostname, safeLookup } from "../util/ssrf.js";
+const MAX_CONTENT_LENGTH = 4000;
+const fetchUrlSchema = Type.Object({
+    url: Type.String({ description: "The URL to fetch" }),
+});
+/**
+ * Create the fetch URL tool.
+ */
+export function createFetchUrlTool(timeoutMs = 10000) {
+    return {
+        name: "fetch_url",
+        label: "fetch_url",
+        description: "Fetch a URL and extract its readable text content. Useful for getting details from a specific webpage.",
+        parameters: fetchUrlSchema,
+        async execute(_toolCallId, { url }) {
+            // SSRF protection: reject requests that target private infrastructure.
+            // Without this, a worker instructed to "fetch http://169.254.169.254/
+            // latest/meta-data/" would read cloud instance metadata (AWS/GCP/Azure
+            // IMDSv1 is unauthenticated). isPrivateHostname() catches obvious cases
+            // by hostname pattern; safeLookup() below catches cases where a public
+            // hostname resolves to a private IP (DNS rebinding / split-horizon DNS).
+            if (isPrivateHostname(url)) {
+                return toolError("Cannot fetch private URLs");
+            }
+            try {
+                const response = await axios.get(url, {
+                    timeout: timeoutMs,
+                    headers: {
+                        "User-Agent": "Mozilla/5.0 (compatible; Bryti/1.0)",
+                        Accept: "text/html,application/xhtml+xml",
+                    },
+                    maxContentLength: 2 * 1024 * 1024, // 2MB max
+                    // DNS-level SSRF protection: reject if hostname resolves to a private IP
+                    lookup: safeLookup,
+                });
+                const html = response.data;
+                // Readability strips navigation menus, sidebars, ads, cookie banners,
+                // and other boilerplate, leaving only the main article text. This
+                // produces much cleaner context than raw innerHTML stripping.
+                const { document } = parseHTML(html);
+                const reader = new Readability(document);
+                const article = reader.parse();
+                if (!article) {
+                    const text = JSON.stringify({ error: "Could not extract content from page" });
+                    return {
+                        content: [{ type: "text", text }],
+                        details: { error: "Could not extract content from page" },
+                    };
+                }
+                let content = article.textContent || "";
+                const title = article.title || "";
+                // Hard cap at 4000 chars: a deliberate context-window budget decision.
+                // Workers typically fetch several URLs per task; letting one page consume
+                // the entire context would crowd out the worker's reasoning and results.
+                if (content.length > MAX_CONTENT_LENGTH) {
+                    content = content.substring(0, MAX_CONTENT_LENGTH) + "\n\n[Content truncated...]";
+                }
+                return toolSuccess({ title, content: content.trim() });
+            }
+            catch (error) {
+                return toolError(error, "Failed to fetch URL");
+            }
+        },
+    };
+}
+//# sourceMappingURL=fetch-url.js.map

package/dist/tools/fetch-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-url.js","sourceRoot":"","sources":["../../src/tools/fetch-url.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEhE,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACtD,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,KAAK;IAC1D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,wGAAwG;QACrH,UAAU,EAAE,cAAc;QAC1B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,GAAG,EAAiB;YAEtB,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC,2BAA2B,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;oBACpC,OAAO,EAAE,SAAS;oBAClB,OAAO,EAAE;wBACP,YAAY,EAAE,qCAAqC;wBACnD,MAAM,EAAE,iCAAiC;qBAC1C;oBACD,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,UAAU;oBAC7C,yEAAyE;oBACzE,MAAM,EAAE,UAAiB;iBAC1B,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAc,CAAC;gBAErC,sEAAsE;gBACtE,kEAAkE;gBAClE,8DAA8D;gBAC9D,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAA+B,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBAE/B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;oBAC9E,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACjC,OAAO,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE;qBAC1D,CAAC;gBACJ,CAAC;gBAED,IAAI,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;gBAElC,uEAAuE;gBACvE,0EAA0E;gBAC1E,yEAAyE;gBACzE,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;oBACxC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,4BAA4B,CAAC;gBACpF,CAAC;gBAED,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/files.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Sandboxed file read/write/list tools. Operates within data/files/ with
+ * path traversal protection (resolve and verify under base_dir).
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+/**
+ * Create file tools.
+ */
+export declare function createFileTools(baseDir: string): AgentTool<any>[];
+//# sourceMappingURL=files.d.ts.map

package/dist/tools/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/tools/files.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,6BAA6B,CAAC;AA6C9E;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAkGjE"}

package/dist/tools/files.js

@@ -0,0 +1,127 @@
+/**
+ * Sandboxed file read/write/list tools. Operates within data/files/ with
+ * path traversal protection (resolve and verify under base_dir).
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "@sinclair/typebox";
+import { toolError, toolSuccess } from "./result.js";
+const MAX_FILE_SIZE = 50 * 1024; // 50KB
+const MAX_DEPTH = 3;
+// Schema for read_file
+const readFileSchema = Type.Object({
+    path: Type.String({ description: "Relative path to the file (e.g., 'notes/todo.md')" }),
+});
+// Schema for write_file
+const writeFileSchema = Type.Object({
+    path: Type.String({ description: "Relative path to the file (e.g., 'notes/todo.md')" }),
+    content: Type.String({ description: "Content to write to the file" }),
+});
+// Schema for list_files
+const listFilesSchema = Type.Object({
+    directory: Type.Optional(Type.String({ description: "Optional subdirectory to list (e.g., 'notes')" })),
+});
+/**
+ * Resolve path and verify it's under base_dir (path traversal protection).
+ */
+function resolveSafePath(baseDir, filePath) {
+    const resolved = path.resolve(baseDir, filePath);
+    const baseResolved = path.resolve(baseDir);
+    // Verify the resolved path is under base_dir
+    if (!resolved.startsWith(baseResolved + path.sep) && resolved !== baseResolved) {
+        return null;
+    }
+    return resolved;
+}
+/**
+ * Create file tools.
+ */
+export function createFileTools(baseDir) {
+    // Ensure base directory exists
+    fs.mkdirSync(baseDir, { recursive: true });
+    const readFileTool = {
+        name: "file_read",
+        label: "file_read",
+        description: "Read the contents of a file from the sandboxed files directory.",
+        parameters: readFileSchema,
+        async execute(_toolCallId, { path: filePath }) {
+            const resolved = resolveSafePath(baseDir, filePath);
+            if (!resolved)
+                return toolError("Invalid path: path traversal not allowed");
+            try {
+                if (!fs.existsSync(resolved))
+                    return toolError("File not found");
+                const stats = fs.statSync(resolved);
+                if (stats.isDirectory())
+                    return toolError("Path is a directory, not a file");
+                if (stats.size > MAX_FILE_SIZE) {
+                    const content = fs.readFileSync(resolved, "utf-8").slice(0, MAX_FILE_SIZE);
+                    return toolSuccess({ content: content + "\n\n[File truncated, was larger than 50KB]", truncated: true });
+                }
+                return toolSuccess({ content: fs.readFileSync(resolved, "utf-8") });
+            }
+            catch (error) {
+                return toolError(error, "Failed to read file");
+            }
+        },
+    };
+    const writeFileTool = {
+        name: "file_write",
+        label: "file_write",
+        description: "Write content to a file in the sandboxed files directory. Creates parent directories if needed.",
+        parameters: writeFileSchema,
+        async execute(_toolCallId, { path: filePath, content }) {
+            const resolved = resolveSafePath(baseDir, filePath);
+            if (!resolved)
+                return toolError("Invalid path: path traversal not allowed");
+            try {
+                fs.mkdirSync(path.dirname(resolved), { recursive: true });
+                fs.writeFileSync(resolved, content, "utf-8");
+                return toolSuccess({ success: true, bytes: Buffer.byteLength(content, "utf-8") });
+            }
+            catch (error) {
+                return toolError(error, "Failed to write file");
+            }
+        },
+    };
+    const listFilesTool = {
+        name: "file_list",
+        label: "file_list",
+        description: "List files in the sandboxed files directory, optionally under a subdirectory.",
+        parameters: listFilesSchema,
+        async execute(_toolCallId, { directory }) {
+            let targetDir = baseDir;
+            if (directory) {
+                const resolved = resolveSafePath(baseDir, directory);
+                if (!resolved)
+                    return toolError("Invalid path: path traversal not allowed");
+                if (!fs.existsSync(resolved))
+                    return toolError("Directory not found");
+                targetDir = resolved;
+            }
+            try {
+                const files = [];
+                function walkDir(currentDir, depth) {
+                    if (depth > MAX_DEPTH)
+                        return;
+                    for (const entry of fs.readdirSync(currentDir, { withFileTypes: true })) {
+                        const fullPath = path.join(currentDir, entry.name);
+                        if (entry.isFile()) {
+                            files.push(path.relative(baseDir, fullPath));
+                        }
+                        else if (entry.isDirectory()) {
+                            walkDir(fullPath, depth + 1);
+                        }
+                    }
+                }
+                walkDir(targetDir, 0);
+                return toolSuccess({ files });
+            }
+            catch (error) {
+                return toolError(error, "Failed to list files");
+            }
+        },
+    };
+    return [readFileTool, writeFileTool, listFilesTool];
+}
+//# sourceMappingURL=files.js.map

package/dist/tools/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/tools/files.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;AACxC,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,uBAAuB;AACvB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;CACxF,CAAC,CAAC;AAIH,wBAAwB;AACxB,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;IACvF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;CACtE,CAAC,CAAC;AAIH,wBAAwB;AACxB,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC,CAAC;CACxG,CAAC,CAAC;AAIH;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,QAAgB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3C,6CAA6C;IAC7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,+BAA+B;IAC/B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,YAAY,GAAqC;QACrD,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,iEAAiE;QAC9E,UAAU,EAAE,cAAc;QAC1B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,IAAI,EAAE,QAAQ,EAAiB;YAEjC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC,0CAA0C,CAAC,CAAC;YAE5E,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBAEjE,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO,SAAS,CAAC,iCAAiC,CAAC,CAAC;gBAE7E,IAAI,KAAK,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC3E,OAAO,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,4CAA4C,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3G,CAAC;gBAED,OAAO,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,MAAM,aAAa,GAAsC;QACvD,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iGAAiG;QAC9G,UAAU,EAAE,eAAe;QAC3B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAkB;YAE3C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC,0CAA0C,CAAC,CAAC;YAE5E,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,OAAO,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,MAAM,aAAa,GAAsC;QACvD,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,+EAA+E;QAC5F,UAAU,EAAE,eAAe;QAC3B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,SAAS,EAAkB;YAE7B,IAAI,SAAS,GAAG,OAAO,CAAC;YAExB,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACrD,IAAI,CAAC,QAAQ;oBAAE,OAAO,SAAS,CAAC,0CAA0C,CAAC,CAAC;gBAC5E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC,CAAC;gBACtE,SAAS,GAAG,QAAQ,CAAC;YACvB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,KAAK,GAAa,EAAE,CAAC;gBAE3B,SAAS,OAAO,CAAC,UAAkB,EAAE,KAAa;oBAChD,IAAI,KAAK,GAAG,SAAS;wBAAE,OAAO;oBAC9B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;wBACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;wBACnD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;4BACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;wBAC/C,CAAC;6BAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;4BAC/B,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;gBACtB,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Tool registry. Bryti-specific tools registered as pi SDK custom tools,
+ * supplementing pi's built-in tools.
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+import type { Config } from "../config.js";
+import type { CoreMemory } from "../memory/core-memory.js";
+import type { WorkerTriggerCallback } from "../workers/tools.js";
+/** Callback invoked when the agent requests a restart. */
+export type RestartCallback = (reason: string) => Promise<void>;
+type BrytiTool = AgentTool<any>;
+/**
+ * Create all bryti tools based on configuration.
+ */
+export declare function createTools(config: Config, coreMemory: CoreMemory, userId: string, onWorkerTrigger?: WorkerTriggerCallback, onRestart?: RestartCallback): BrytiTool[];
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,6BAA6B,CAAC;AAa9E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAGjE,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhE,KAAK,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;AAMhC;;GAEG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,qBAAqB,EACvC,SAAS,CAAC,EAAE,eAAe,GAC1B,SAAS,EAAE,CAgHb"}

package/dist/tools/index.js

@@ -0,0 +1,118 @@
+/**
+ * Tool registry. Bryti-specific tools registered as pi SDK custom tools,
+ * supplementing pi's built-in tools.
+ */
+import { Type } from "@sinclair/typebox";
+import { createFileTools } from "./files.js";
+import { createSkillInstallTool } from "./skill-install.js";
+import { createCoreMemoryTools } from "./core-memory-tool.js";
+import { createArchivalMemoryTools } from "./archival-memory-tool.js";
+import { createConversationSearchTool } from "./conversation-search-tool.js";
+import { createProjectionTools, createProjectionStore } from "../projection/index.js";
+import { createWorkerTools, createWorkerRegistry } from "../workers/index.js";
+import { toolSuccess } from "./result.js";
+import { embed } from "../memory/embeddings.js";
+import { createMemoryStore } from "../memory/store.js";
+import path from "node:path";
+import { registerToolCapabilities } from "../trust/index.js";
+const restartSchema = Type.Object({
+    reason: Type.String({ description: "Brief description of why a restart is needed (shown in logs)" }),
+});
+/**
+ * Create all bryti tools based on configuration.
+ */
+export function createTools(config, coreMemory, userId, onWorkerTrigger, onRestart) {
+    const tools = [];
+    // File tools (main agent can read/write in its sandbox)
+    tools.push(...createFileTools(config.tools.files.base_dir));
+    // Skill installation: fetch and install skills from URLs or local paths
+    tools.push(createSkillInstallTool(config.data_dir));
+    registerToolCapabilities("skill_install", {
+        level: "elevated",
+        capabilities: ["network", "filesystem"],
+        reason: "Installs skills from URLs or copies local directories into the skills folder.",
+    });
+    // ---------------------------------------------------------------------------
+    // SECURITY BOUNDARY: web_search and fetch_url are intentionally excluded
+    // from the main agent's tool set. All external network access goes through
+    // workers, which run in isolated sessions with scoped file access.
+    //
+    // Rationale: a web page or search result could contain prompt-injected
+    // instructions. Processing untrusted content inside the main agent session
+    // would let an attacker influence the agent's memory, projections, or tool
+    // calls. Workers are disposable; the main agent only sees their sanitised
+    // result files.
+    // ---------------------------------------------------------------------------
+    // Memory tools
+    tools.push(...createCoreMemoryTools(coreMemory));
+    // Projection memory: forward-looking events and commitments.
+    // Created before archival tools so we can pass it in for trigger checking.
+    //
+    // NOTE: this is a second ProjectionStore instance for the same user — agent.ts
+    // creates one too when assembling the system prompt. Both instances point at
+    // the same SQLite file, which is safe because the DB is opened in WAL mode
+    // (concurrent readers, serialised writers). They do not share in-memory state,
+    // so neither instance caches stale rows across the other's writes.
+    //
+    // TODO: consolidate into a single store per user (pass it in from agent.ts)
+    // to make the ownership model explicit and remove the WAL dependency.
+    const projectionStore = createProjectionStore(userId, config.data_dir);
+    tools.push(...createProjectionTools(projectionStore, config.agent.timezone));
+    // Archival memory: always available, uses local embeddings (no API key needed).
+    // Receives the projection store so archival inserts can activate trigger-based projections.
+    const modelsDir = path.join(config.data_dir, ".models");
+    const archivalStore = createMemoryStore(userId, config.data_dir);
+    tools.push(...createArchivalMemoryTools(archivalStore, (text) => embed(text, modelsDir), projectionStore));
+    tools.push(createConversationSearchTool(path.join(config.data_dir, "history")));
+    // Worker tools: dispatch and check background research sessions.
+    // The registry lives for the lifetime of this tool set (one per user session).
+    // Workers write completion facts to the user's archival memory store.
+    // The projection store is passed so worker completion can trigger projections
+    // immediately (instead of waiting for the 5-minute scheduler tick).
+    const workerRegistry = createWorkerRegistry();
+    tools.push(...createWorkerTools(config, archivalStore, workerRegistry, false, projectionStore, onWorkerTrigger));
+    // Restart tool: agent can trigger a clean process restart.
+    // Used after writing or modifying extensions so new tools load immediately.
+    if (onRestart) {
+        const restartTool = {
+            name: "system_restart",
+            label: "system_restart",
+            description: "Restart the bryti process to reload extensions and config. " +
+                "Use this after writing or modifying an extension file, or after changing config.yml. " +
+                "The user will receive a 'Restarting' message, then 'Back online' when ready. " +
+                "Always tell the user what you changed and why you are restarting before calling this.",
+            parameters: restartSchema,
+            async execute(_toolCallId, { reason }) {
+                await onRestart(reason);
+                // process.exit() will have been called by onRestart — this line is unreachable
+                // but satisfies the return type.
+                return toolSuccess({ restarting: true });
+            },
+        };
+        tools.push(restartTool);
+        // Elevated even though a restart sounds harmless: the guardrail ensures
+        // the agent cannot be tricked into restart-looping by a malicious prompt
+        // (e.g. "please restart every 10 seconds until I say stop").
+        registerToolCapabilities("system_restart", {
+            level: "elevated",
+            capabilities: ["shell"],
+            reason: "Restarts the bryti process.",
+        });
+    }
+    // Register trust capabilities for well-known elevated tools.
+    // Extension tools (loaded by pi SDK from data/agent/extensions/) default to
+    // elevated since they can execute arbitrary code. Known extension names are
+    // registered explicitly for better permission prompts.
+    registerToolCapabilities("shell_exec", {
+        level: "elevated",
+        capabilities: ["shell", "filesystem"],
+        reason: "Runs shell commands with access to the system.",
+    });
+    registerToolCapabilities("http_request", {
+        level: "elevated",
+        capabilities: ["network"],
+        reason: "Makes HTTP requests to external services.",
+    });
+    return tools;
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAO7D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;CACrG,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,UAAsB,EACtB,MAAc,EACd,eAAuC,EACvC,SAA2B;IAE3B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,wDAAwD;IACxD,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5D,wEAAwE;IACxE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,wBAAwB,CAAC,eAAe,EAAE;QACxC,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;QACvC,MAAM,EAAE,+EAA+E;KACxF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,yEAAyE;IACzE,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE;IACF,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,gBAAgB;IAChB,8EAA8E;IAE9E,eAAe;IACf,KAAK,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjD,6DAA6D;IAC7D,2EAA2E;IAC3E,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,mEAAmE;IACnE,EAAE;IACF,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,eAAe,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE7E,gFAAgF;IAChF,4FAA4F;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CACR,GAAG,yBAAyB,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAC/F,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAEhF,iEAAiE;IACjE,+EAA+E;IAC/E,sEAAsE;IACtE,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAC7B,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,CAC/E,CAAC,CAAC;IAEH,2DAA2D;IAC3D,4EAA4E;IAC5E,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,WAAW,GAAoC;YACnD,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,6DAA6D;gBAC7D,uFAAuF;gBACvF,+EAA+E;gBAC/E,uFAAuF;YACzF,UAAU,EAAE,aAAa;YACzB,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,MAAM,EAAsB;gBAE9B,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBACxB,+EAA+E;gBAC/E,iCAAiC;gBACjC,OAAO,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;SACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,wEAAwE;QACxE,yEAAyE;QACzE,6DAA6D;QAC7D,wBAAwB,CAAC,gBAAgB,EAAE;YACzC,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,4EAA4E;IAC5E,4EAA4E;IAC5E,uDAAuD;IACvD,wBAAwB,CAAC,YAAY,EAAE;QACrC,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;QACrC,MAAM,EAAE,gDAAgD;KACzD,CAAC,CAAC;IACH,wBAAwB,CAAC,cAAc,EAAE;QACvC,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,CAAC,SAAS,CAAC;QACzB,MAAM,EAAE,2CAA2C;KACpD,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tools/result.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared helpers for building AgentToolResult objects.
+ */
+import type { AgentToolResult } from "@mariozechner/pi-agent-core";
+/**
+ * Extract a string message from any thrown value.
+ */
+export declare function errorMessage(error: unknown): string;
+/**
+ * Build a failure AgentToolResult from a caught error.
+ *
+ * @param error   The caught value (any type).
+ * @param prefix  Optional prefix for the user-facing message, e.g. "Failed to read file".
+ *                The raw error message is always stored separately in details.
+ */
+export declare function toolError(error: unknown, prefix?: string): AgentToolResult<unknown>;
+/**
+ * Build a success AgentToolResult with a JSON payload.
+ */
+export declare function toolSuccess(data: unknown): AgentToolResult<unknown>;
+//# sourceMappingURL=result.d.ts.map

package/dist/tools/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/tools/result.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGnD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAOnF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAKnE"}

package/dist/tools/result.js

@@ -0,0 +1,36 @@
+/**
+ * Shared helpers for building AgentToolResult objects.
+ */
+/**
+ * Extract a string message from any thrown value.
+ */
+export function errorMessage(error) {
+    if (error instanceof Error)
+        return error.message;
+    return String(error);
+}
+/**
+ * Build a failure AgentToolResult from a caught error.
+ *
+ * @param error   The caught value (any type).
+ * @param prefix  Optional prefix for the user-facing message, e.g. "Failed to read file".
+ *                The raw error message is always stored separately in details.
+ */
+export function toolError(error, prefix) {
+    const msg = errorMessage(error);
+    const displayMsg = prefix ? `${prefix}: ${msg}` : msg;
+    return {
+        content: [{ type: "text", text: JSON.stringify({ error: displayMsg }) }],
+        details: { error: msg },
+    };
+}
+/**
+ * Build a success AgentToolResult with a JSON payload.
+ */
+export function toolSuccess(data) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(data, null, 2) }],
+        details: data,
+    };
+}
+//# sourceMappingURL=result.js.map

package/dist/tools/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/tools/result.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,MAAe;IACvD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,IAA+B;KACzC,CAAC;AACJ,CAAC"}

package/dist/tools/skill-install.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Skill installation tool. Fetches a skill from a URL or local path
+ * and installs it into data/skills/.
+ *
+ * Supports:
+ * - Raw URL to a SKILL.md file → saves as skills/<name>/SKILL.md
+ * - GitHub/GitLab directory URL → fetches SKILL.md (and referenced files)
+ * - Local absolute path → copies the directory
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+declare const skillInstallSchema: import("@sinclair/typebox").TObject<{
+    name: import("@sinclair/typebox").TString;
+    source: import("@sinclair/typebox").TString;
+}>;
+export declare function createSkillInstallTool(dataDir: string): AgentTool<typeof skillInstallSchema>;
+export {};
+//# sourceMappingURL=skill-install.d.ts.map

package/dist/tools/skill-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-install.d.ts","sourceRoot":"","sources":["../../src/tools/skill-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,6BAA6B,CAAC;AAK9E,QAAA,MAAM,kBAAkB;;;EAQtB,CAAC;AA+CH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,OAAO,kBAAkB,CAAC,CA0G5F"}

package/dist/tools/skill-install.js

@@ -0,0 +1,148 @@
+/**
+ * Skill installation tool. Fetches a skill from a URL or local path
+ * and installs it into data/skills/.
+ *
+ * Supports:
+ * - Raw URL to a SKILL.md file → saves as skills/<name>/SKILL.md
+ * - GitHub/GitLab directory URL → fetches SKILL.md (and referenced files)
+ * - Local absolute path → copies the directory
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "@sinclair/typebox";
+import { toolError, toolSuccess } from "./result.js";
+import { isPrivateHostname } from "../util/ssrf.js";
+const skillInstallSchema = Type.Object({
+    name: Type.String({
+        description: "Short name for the skill (used as directory name, e.g. 'scribe', 'linkedin')",
+    }),
+    source: Type.String({
+        description: "URL to a SKILL.md file, a GitHub directory URL, or an absolute local path to a skill directory",
+    }),
+});
+/**
+ * Try to fetch a raw URL. Returns the body text or null.
+ */
+async function fetchText(url, timeoutMs = 15_000) {
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const response = await fetch(url, { signal: controller.signal });
+        clearTimeout(timer);
+        if (!response.ok)
+            return null;
+        return await response.text();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Convert a GitHub directory URL to the raw URL for SKILL.md.
+ * Handles: github.com/<owner>/<repo>/tree/<branch>/<path>
+ */
+function githubRawUrl(url) {
+    const match = url.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/(?:tree|blob)\/([^/]+)\/(.+)/);
+    if (!match)
+        return null;
+    const [, owner, repo, branch, filePath] = match;
+    // If URL points to a directory, append SKILL.md
+    const target = filePath.endsWith(".md") ? filePath : `${filePath}/SKILL.md`;
+    return `https://raw.githubusercontent.com/${owner}/${repo}/${branch}/${target}`;
+}
+/**
+ * Convert a GitLab directory URL to the raw URL for SKILL.md.
+ * Handles: gitlab.com/<owner>/<repo>/-/tree/<branch>/<path>
+ */
+function gitlabRawUrl(url) {
+    const match = url.match(/^https?:\/\/gitlab\.com\/([^/]+)\/([^/]+)\/-\/(?:tree|blob)\/([^/]+)\/(.+)/);
+    if (!match)
+        return null;
+    const [, owner, repo, branch, filePath] = match;
+    const target = filePath.endsWith(".md") ? filePath : `${filePath}/SKILL.md`;
+    return `https://gitlab.com/${owner}/${repo}/-/raw/${branch}/${target}`;
+}
+export function createSkillInstallTool(dataDir) {
+    const skillsDir = path.join(dataDir, "skills");
+    return {
+        name: "skill_install",
+        label: "skill_install",
+        description: "Install a skill from a URL or local path. Skills are instruction sets that teach you " +
+            "how to handle specific tasks. After installing, call system_restart to load the skill. " +
+            "Accepts: a direct URL to a SKILL.md file, a GitHub/GitLab directory URL containing " +
+            "a SKILL.md, or an absolute local filesystem path to a skill directory.",
+        parameters: skillInstallSchema,
+        async execute(_toolCallId, { name, source }) {
+            // Validate skill name (directory-safe)
+            if (!/^[a-z0-9_-]+$/.test(name)) {
+                return toolError("Skill name must be lowercase alphanumeric with hyphens or underscores only.");
+            }
+            const targetDir = path.join(skillsDir, name);
+            // --- Local path ---
+            if (source.startsWith("/")) {
+                if (!fs.existsSync(source)) {
+                    return toolError(`Path not found: ${source}`);
+                }
+                const stat = fs.statSync(source);
+                if (stat.isDirectory()) {
+                    // Check for SKILL.md
+                    const skillMd = path.join(source, "SKILL.md");
+                    if (!fs.existsSync(skillMd)) {
+                        return toolError(`No SKILL.md found in ${source}`);
+                    }
+                    // Copy the entire directory
+                    fs.cpSync(source, targetDir, { recursive: true });
+                    return toolSuccess({
+                        installed: name,
+                        path: targetDir,
+                        files: fs.readdirSync(targetDir),
+                        message: `Skill "${name}" installed. Call system_restart to load it.`,
+                    });
+                }
+                else if (stat.isFile()) {
+                    // Single file, treat as SKILL.md
+                    fs.mkdirSync(targetDir, { recursive: true });
+                    fs.copyFileSync(source, path.join(targetDir, "SKILL.md"));
+                    return toolSuccess({
+                        installed: name,
+                        path: targetDir,
+                        files: ["SKILL.md"],
+                        message: `Skill "${name}" installed from file. Call system_restart to load it.`,
+                    });
+                }
+                return toolError(`Source is neither a file nor a directory: ${source}`);
+            }
+            // --- URL ---
+            if (!source.startsWith("http://") && !source.startsWith("https://")) {
+                return toolError("Source must be an absolute local path (starting with /) or a URL (starting with http).");
+            }
+            // SSRF protection: reject private/internal URLs
+            if (isPrivateHostname(source)) {
+                return toolError("Cannot fetch from private or internal URLs.");
+            }
+            // Try GitHub/GitLab directory URL conversion
+            let rawUrl = githubRawUrl(source) ?? gitlabRawUrl(source);
+            // If it's a direct URL (not GitHub/GitLab tree), use as-is
+            if (!rawUrl) {
+                rawUrl = source;
+            }
+            const content = await fetchText(rawUrl);
+            if (!content) {
+                return toolError(`Could not fetch skill from ${rawUrl}. Check the URL is accessible and points to a SKILL.md file.`);
+            }
+            // Basic validation: should look like a skill file
+            if (!content.includes("SKILL") && !content.includes("skill") && !content.includes("---")) {
+                return toolError("Fetched content doesn't look like a SKILL.md file (no frontmatter or skill markers found).");
+            }
+            fs.mkdirSync(targetDir, { recursive: true });
+            fs.writeFileSync(path.join(targetDir, "SKILL.md"), content, "utf-8");
+            return toolSuccess({
+                installed: name,
+                path: targetDir,
+                files: ["SKILL.md"],
+                message: `Skill "${name}" installed from URL. Call system_restart to load it.`,
+            });
+        },
+    };
+}
+//# sourceMappingURL=skill-install.js.map

package/dist/tools/skill-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-install.js","sourceRoot":"","sources":["../../src/tools/skill-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,8EAA8E;KAC5F,CAAC;IACF,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,WAAW,EACT,gGAAgG;KACnG,CAAC;CACH,CAAC,CAAC;AAEH;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,SAAS,GAAG,MAAM;IACtD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CACrB,yEAAyE,CAC1E,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IAChD,gDAAgD;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,WAAW,CAAC;IAC5E,OAAO,qCAAqC,KAAK,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CACrB,4EAA4E,CAC7E,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,WAAW,CAAC;IAC5E,OAAO,sBAAsB,KAAK,IAAI,IAAI,UAAU,MAAM,IAAI,MAAM,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,uFAAuF;YACvF,yFAAyF;YACzF,qFAAqF;YACrF,wEAAwE;QAC1E,UAAU,EAAE,kBAAkB;QAE9B,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAE,IAAI,EAAE,MAAM,EAAoC;YAElD,uCAAuC;YACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO,SAAS,CACd,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAE7C,qBAAqB;YACrB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3B,OAAO,SAAS,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;gBAChD,CAAC;gBAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,qBAAqB;oBACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC5B,OAAO,SAAS,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;oBACrD,CAAC;oBACD,4BAA4B;oBAC5B,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClD,OAAO,WAAW,CAAC;wBACjB,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;wBAChC,OAAO,EAAE,UAAU,IAAI,8CAA8C;qBACtE,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBACzB,iCAAiC;oBACjC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7C,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;oBAC1D,OAAO,WAAW,CAAC;wBACjB,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,CAAC,UAAU,CAAC;wBACnB,OAAO,EAAE,UAAU,IAAI,wDAAwD;qBAChF,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,SAAS,CAAC,6CAA6C,MAAM,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,cAAc;YACd,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpE,OAAO,SAAS,CACd,wFAAwF,CACzF,CAAC;YACJ,CAAC;YAED,gDAAgD;YAChD,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC,6CAA6C,CAAC,CAAC;YAClE,CAAC;YAED,6CAA6C;YAC7C,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAE1D,2DAA2D;YAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,SAAS,CACd,8BAA8B,MAAM,8DAA8D,CACnG,CAAC;YACJ,CAAC;YAED,kDAAkD;YAClD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzF,OAAO,SAAS,CACd,4FAA4F,CAC7F,CAAC;YACJ,CAAC;YAED,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAErE,OAAO,WAAW,CAAC;gBACjB,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,CAAC,UAAU,CAAC;gBACnB,OAAO,EAAE,UAAU,IAAI,uDAAuD;aAC/E,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}