@everworker/oneringai 0.1.2 → 0.1.4

package/dist/index.js

@@ -1,14 +1,14 @@
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
 import { importPKCS8, SignJWT } from 'jose';
-import * as fs15 from 'fs';
+import * as fs16 from 'fs';
 import { promises, existsSync } from 'fs';
 import { EventEmitter } from 'eventemitter3';
-import * as path3 from 'path';
+import * as path2 from 'path';
 import { join, resolve, dirname, relative, isAbsolute, normalize, extname } from 'path';
-import * as os from 'os';
+import * as os2 from 'os';
 import { homedir } from 'os';
-import OpenAI2 from 'openai';
+import OpenAI3 from 'openai';
 import Anthropic from '@anthropic-ai/sdk';
 import { GoogleGenAI } from '@google/genai';
 import 'zod/v3';
@@ -16,7 +16,7 @@ import * as z4mini from 'zod/v4-mini';
 import * as z from 'zod/v4';
 import process2 from 'process';
 import { PassThrough } from 'stream';
-import * as fs14 from 'fs/promises';
+import * as fs15 from 'fs/promises';
 import { stat, readFile, mkdir, writeFile, readdir } from 'fs/promises';
 import * as simpleIcons from 'simple-icons';
 import { exec, spawn } from 'child_process';
@@ -600,7 +600,7 @@ var init_JWTBearer = __esm({
           this.privateKey = config.privateKey;
         } else if (config.privateKeyPath) {
           try {
-            this.privateKey = fs15.readFileSync(config.privateKeyPath, "utf8");
+            this.privateKey = fs16.readFileSync(config.privateKeyPath, "utf8");
           } catch (error) {
             throw new Error(`Failed to read private key from ${config.privateKeyPath}: ${error.message}`);
           }
@@ -1250,11 +1250,11 @@ var init_Logger = __esm({
        */
       initFileStream(filePath) {
         try {
-          const dir = path3.dirname(filePath);
-          if (!fs15.existsSync(dir)) {
-            fs15.mkdirSync(dir, { recursive: true });
+          const dir = path2.dirname(filePath);
+          if (!fs16.existsSync(dir)) {
+            fs16.mkdirSync(dir, { recursive: true });
           }
-          this.fileStream = fs15.createWriteStream(filePath, {
+          this.fileStream = fs16.createWriteStream(filePath, {
             flags: "a",
             // append mode
             encoding: "utf8"
@@ -14524,12 +14524,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs18, exportName) {
+    function addFormats(ajv, list, fs17, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs18[f]);
+        ajv.addFormat(f, fs17[f]);
     }
     module.exports = exports$1 = formatsPlugin;
     Object.defineProperty(exports$1, "__esModule", { value: true });
@@ -14542,7 +14542,7 @@ var require_windows = __commonJS({
   "node_modules/isexe/windows.js"(exports$1, module) {
     module.exports = isexe;
     isexe.sync = sync;
-    var fs18 = __require("fs");
+    var fs17 = __require("fs");
     function checkPathExt(path6, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
@@ -14560,19 +14560,19 @@ var require_windows = __commonJS({
       }
       return false;
     }
-    function checkStat(stat5, path6, options) {
-      if (!stat5.isSymbolicLink() && !stat5.isFile()) {
+    function checkStat(stat6, path6, options) {
+      if (!stat6.isSymbolicLink() && !stat6.isFile()) {
         return false;
       }
       return checkPathExt(path6, options);
     }
     function isexe(path6, options, cb) {
-      fs18.stat(path6, function(er, stat5) {
-        cb(er, er ? false : checkStat(stat5, path6, options));
+      fs17.stat(path6, function(er, stat6) {
+        cb(er, er ? false : checkStat(stat6, path6, options));
       });
     }
     function sync(path6, options) {
-      return checkStat(fs18.statSync(path6), path6, options);
+      return checkStat(fs17.statSync(path6), path6, options);
     }
   }
 });
@@ -14582,22 +14582,22 @@ var require_mode = __commonJS({
   "node_modules/isexe/mode.js"(exports$1, module) {
     module.exports = isexe;
     isexe.sync = sync;
-    var fs18 = __require("fs");
+    var fs17 = __require("fs");
     function isexe(path6, options, cb) {
-      fs18.stat(path6, function(er, stat5) {
-        cb(er, er ? false : checkStat(stat5, options));
+      fs17.stat(path6, function(er, stat6) {
+        cb(er, er ? false : checkStat(stat6, options));
       });
     }
     function sync(path6, options) {
-      return checkStat(fs18.statSync(path6), options);
+      return checkStat(fs17.statSync(path6), options);
     }
-    function checkStat(stat5, options) {
-      return stat5.isFile() && checkMode(stat5, options);
+    function checkStat(stat6, options) {
+      return stat6.isFile() && checkMode(stat6, options);
     }
-    function checkMode(stat5, options) {
-      var mod = stat5.mode;
-      var uid = stat5.uid;
-      var gid = stat5.gid;
+    function checkMode(stat6, options) {
+      var mod = stat6.mode;
+      var uid = stat6.uid;
+      var gid = stat6.gid;
       var myUid = options.uid !== void 0 ? options.uid : process.getuid && process.getuid();
       var myGid = options.gid !== void 0 ? options.gid : process.getgid && process.getgid();
       var u = parseInt("100", 8);
@@ -14871,16 +14871,16 @@ var require_shebang_command = __commonJS({
 // node_modules/cross-spawn/lib/util/readShebang.js
 var require_readShebang = __commonJS({
   "node_modules/cross-spawn/lib/util/readShebang.js"(exports$1, module) {
-    var fs18 = __require("fs");
+    var fs17 = __require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd;
       try {
-        fd = fs18.openSync(command, "r");
-        fs18.readSync(fd, buffer, 0, size, 0);
-        fs18.closeSync(fd);
+        fd = fs17.openSync(command, "r");
+        fs17.readSync(fd, buffer, 0, size, 0);
+        fs17.closeSync(fd);
       } catch (e) {
       }
       return shebangCommand(buffer.toString());
@@ -15058,8 +15058,8 @@ var DEFAULT_ALLOWLIST = [
   "context_list",
   // Persistent instructions tools
   "instructions_set",
-  "instructions_append",
-  "instructions_get",
+  "instructions_remove",
+  "instructions_list",
   "instructions_clear",
   // Meta-tools (internal coordination)
   "_start_planning",
@@ -15989,13 +15989,26 @@ var ToolManager = class extends EventEmitter {
   pipeline;
   /** Optional tool context for execution (set by agent before runs) */
   _toolContext;
-  constructor() {
+  /** Hard timeout for tool execution (0 = disabled) */
+  _toolExecutionTimeout;
+  constructor(config) {
     super();
+    this._toolExecutionTimeout = config?.toolExecutionTimeout ?? 0;
     this.namespaceIndex.set("default", /* @__PURE__ */ new Set());
     this.toolLogger = logger.child({ component: "ToolManager" });
     this.pipeline = new ToolExecutionPipeline();
     this.pipeline.use(new ResultNormalizerPlugin());
   }
+  /**
+   * Get or set the hard tool execution timeout in milliseconds.
+   * 0 = disabled (relies on tool's own timeout).
+   */
+  get toolExecutionTimeout() {
+    return this._toolExecutionTimeout;
+  }
+  set toolExecutionTimeout(value) {
+    this._toolExecutionTimeout = Math.max(0, value);
+  }
   /**
    * Access the execution pipeline for plugin management.
    *
@@ -16493,7 +16506,7 @@ var ToolManager = class extends EventEmitter {
     const startTime = Date.now();
     metrics.increment("tool.executed", 1, { tool: toolName });
     try {
-      const result = await breaker.execute(async () => {
+      const executionPromise = breaker.execute(async () => {
         const toolWithContext = {
           ...registration.tool,
           execute: async (pipelineArgs) => {
@@ -16502,6 +16515,7 @@ var ToolManager = class extends EventEmitter {
         };
         return await this.pipeline.execute(toolWithContext, args);
       });
+      const result = this._toolExecutionTimeout > 0 ? await this.withHardTimeout(executionPromise, toolName, this._toolExecutionTimeout) : await executionPromise;
       const duration = Date.now() - startTime;
       this.recordExecution(toolName, duration, true);
       const resultSummary = this.summarizeResult(result);
@@ -16564,6 +16578,29 @@ var ToolManager = class extends EventEmitter {
     return this.list();
   }
   // ==========================================================================
+  // Hard Timeout
+  // ==========================================================================
+  /**
+   * Wrap a promise with a hard timeout safety net.
+   * If the promise doesn't resolve within the timeout, throws ToolExecutionError.
+   */
+  async withHardTimeout(promise, toolName, timeoutMs) {
+    let timeoutId;
+    const timeoutPromise = new Promise((_, reject) => {
+      timeoutId = setTimeout(() => {
+        reject(new ToolExecutionError(
+          toolName,
+          `Tool execution hard timeout after ${timeoutMs}ms (safety net - tool's own timeout may have failed)`
+        ));
+      }, timeoutMs);
+    });
+    try {
+      return await Promise.race([promise, timeoutPromise]);
+    } finally {
+      clearTimeout(timeoutId);
+    }
+  }
+  // ==========================================================================
   // Circuit Breaker Management
   // ==========================================================================
   /**
@@ -19633,22 +19670,45 @@ function sanitizeAgentId(agentId) {
 var FilePersistentInstructionsStorage = class {
   directory;
   filePath;
+  legacyFilePath;
   agentId;
   constructor(config) {
     this.agentId = config.agentId;
     const sanitizedId = sanitizeAgentId(config.agentId);
     const baseDir = config.baseDirectory ?? getDefaultBaseDirectory();
-    const filename = config.filename ?? "custom_instructions.md";
+    const filename = config.filename ?? "custom_instructions.json";
     this.directory = join(baseDir, sanitizedId);
     this.filePath = join(this.directory, filename);
+    this.legacyFilePath = join(this.directory, "custom_instructions.md");
   }
   /**
-   * Load instructions from file
+   * Load instruction entries from file.
+   * Falls back to legacy .md file migration if JSON not found.
    */
   async load() {
     try {
-      const content = await promises.readFile(this.filePath, "utf-8");
-      return content.trim() || null;
+      const raw = await promises.readFile(this.filePath, "utf-8");
+      const data = JSON.parse(raw);
+      if (data.version === 2 && Array.isArray(data.entries)) {
+        return data.entries.length > 0 ? data.entries : null;
+      }
+      return null;
+    } catch (error) {
+      if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) {
+        throw error;
+      }
+    }
+    try {
+      const content = await promises.readFile(this.legacyFilePath, "utf-8");
+      const trimmed = content.trim();
+      if (!trimmed) return null;
+      const now = Date.now();
+      return [{
+        id: "legacy_instructions",
+        content: trimmed,
+        createdAt: now,
+        updatedAt: now
+      }];
     } catch (error) {
       if (error instanceof Error && "code" in error && error.code === "ENOENT") {
         return null;
@@ -19657,14 +19717,19 @@ var FilePersistentInstructionsStorage = class {
     }
   }
   /**
-   * Save instructions to file
-   * Creates directory if it doesn't exist
+   * Save instruction entries to file as JSON.
+   * Creates directory if it doesn't exist.
+   * Cleans up legacy .md file if present.
    */
-  async save(content) {
+  async save(entries) {
     await this.ensureDirectory();
+    const data = {
+      version: 2,
+      entries
+    };
     const tempPath = `${this.filePath}.tmp`;
     try {
-      await promises.writeFile(tempPath, content, "utf-8");
+      await promises.writeFile(tempPath, JSON.stringify(data, null, 2), "utf-8");
       await promises.rename(tempPath, this.filePath);
     } catch (error) {
       try {
@@ -19673,9 +19738,10 @@ var FilePersistentInstructionsStorage = class {
       }
       throw error;
     }
+    await this.removeLegacyFile();
   }
   /**
-   * Delete instructions file
+   * Delete instructions file (and legacy .md if exists)
    */
   async delete() {
     try {
@@ -19685,16 +19751,22 @@ var FilePersistentInstructionsStorage = class {
         throw error;
       }
     }
+    await this.removeLegacyFile();
   }
   /**
-   * Check if instructions file exists
+   * Check if instructions file exists (JSON or legacy .md)
    */
   async exists() {
     try {
       await promises.access(this.filePath);
       return true;
     } catch {
-      return false;
+      try {
+        await promises.access(this.legacyFilePath);
+        return true;
+      } catch {
+        return false;
+      }
     }
   }
   /**
@@ -19721,58 +19793,79 @@ var FilePersistentInstructionsStorage = class {
       }
     }
   }
+  /**
+   * Remove legacy .md file if it exists
+   */
+  async removeLegacyFile() {
+    try {
+      await promises.unlink(this.legacyFilePath);
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code !== "ENOENT") {
+        console.warn(`Failed to remove legacy instructions file: ${this.legacyFilePath}`);
+      }
+    }
+  }
 };
 
 // src/core/context-nextgen/plugins/PersistentInstructionsPluginNextGen.ts
-var DEFAULT_MAX_LENGTH = 5e4;
+var DEFAULT_MAX_TOTAL_LENGTH = 5e4;
+var DEFAULT_MAX_ENTRIES = 50;
+var KEY_MAX_LENGTH = 100;
+var KEY_PATTERN = /^[a-zA-Z0-9_-]+$/;
 var PERSISTENT_INSTRUCTIONS_INSTRUCTIONS = `Persistent Instructions are stored on disk and survive across sessions.
+Each instruction is a keyed entry that can be independently managed.
 
 **To modify:**
-- \`instructions_set(content)\`: Replace all instructions
-- \`instructions_append(section)\`: Add a section
-- \`instructions_clear(confirm: true)\`: Remove all (destructive!)
+- \`instructions_set(key, content)\`: Add or update a single instruction by key
+- \`instructions_remove(key)\`: Remove a single instruction by key
+- \`instructions_list()\`: List all instructions with keys and content
+- \`instructions_clear(confirm: true)\`: Remove all instructions (destructive!)
 
 **Use for:** Agent personality, user preferences, learned rules, guidelines.`;
 var instructionsSetDefinition = {
   type: "function",
   function: {
     name: "instructions_set",
-    description: `Set or replace all custom instructions. Persists across sessions.
-IMPORTANT: This replaces ALL existing instructions.`,
+    description: `Add or update a single persistent instruction by key. Persists across sessions.
+If the key exists, it will be updated. If not, a new entry is created.`,
     parameters: {
       type: "object",
       properties: {
+        key: {
+          type: "string",
+          description: "Unique key for the instruction (alphanumeric, dash, underscore; max 100 chars)"
+        },
         content: {
           type: "string",
-          description: "Full instructions content (markdown supported)"
+          description: "Instruction content (markdown supported)"
         }
       },
-      required: ["content"]
+      required: ["key", "content"]
     }
   }
 };
-var instructionsAppendDefinition = {
+var instructionsRemoveDefinition = {
   type: "function",
   function: {
-    name: "instructions_append",
-    description: "Append a section to existing instructions.",
+    name: "instructions_remove",
+    description: "Remove a single persistent instruction by key.",
     parameters: {
       type: "object",
       properties: {
-        section: {
+        key: {
           type: "string",
-          description: "Section to append (will add newlines before)"
+          description: "Key of the instruction to remove"
         }
       },
-      required: ["section"]
+      required: ["key"]
     }
   }
 };
-var instructionsGetDefinition = {
+var instructionsListDefinition = {
   type: "function",
   function: {
-    name: "instructions_get",
-    description: "Get current custom instructions.",
+    name: "instructions_list",
+    description: "List all persistent instructions with their keys and content.",
     parameters: {
       type: "object",
       properties: {},
@@ -19784,7 +19877,7 @@ var instructionsClearDefinition = {
   type: "function",
   function: {
     name: "instructions_clear",
-    description: "Clear all custom instructions (DESTRUCTIVE). Requires confirmation.",
+    description: "Clear all persistent instructions (DESTRUCTIVE). Requires confirmation.",
     parameters: {
       type: "object",
       properties: {
@@ -19797,13 +19890,22 @@ var instructionsClearDefinition = {
     }
   }
 };
+function validateKey(key) {
+  if (typeof key !== "string") return "Key must be a string";
+  const trimmed = key.trim();
+  if (trimmed.length === 0) return "Key cannot be empty";
+  if (trimmed.length > KEY_MAX_LENGTH) return `Key exceeds maximum length (${KEY_MAX_LENGTH} chars)`;
+  if (!KEY_PATTERN.test(trimmed)) return "Key must contain only alphanumeric characters, dashes, and underscores";
+  return null;
+}
 var PersistentInstructionsPluginNextGen = class {
   name = "persistent_instructions";
-  _content = null;
+  _entries = /* @__PURE__ */ new Map();
   _initialized = false;
   _destroyed = false;
   storage;
-  maxLength;
+  maxTotalLength;
+  maxEntries;
   agentId;
   estimator = simpleTokenEstimator;
   _tokenCache = null;
@@ -19813,7 +19915,8 @@ var PersistentInstructionsPluginNextGen = class {
       throw new Error("PersistentInstructionsPluginNextGen requires agentId");
     }
     this.agentId = config.agentId;
-    this.maxLength = config.maxLength ?? DEFAULT_MAX_LENGTH;
+    this.maxTotalLength = config.maxTotalLength ?? DEFAULT_MAX_TOTAL_LENGTH;
+    this.maxEntries = config.maxEntries ?? DEFAULT_MAX_ENTRIES;
     this.storage = config.storage ?? new FilePersistentInstructionsStorage({
       agentId: config.agentId
     });
@@ -19826,14 +19929,16 @@ var PersistentInstructionsPluginNextGen = class {
   }
   async getContent() {
     await this.ensureInitialized();
-    if (!this._content) {
+    if (this._entries.size === 0) {
+      this._tokenCache = 0;
       return null;
     }
-    this._tokenCache = this.estimator.estimateTokens(this._content);
-    return this._content;
+    const rendered = this.renderContent();
+    this._tokenCache = this.estimator.estimateTokens(rendered);
+    return rendered;
   }
   getContents() {
-    return this._content;
+    return new Map(this._entries);
   }
   getTokenSize() {
     return this._tokenCache ?? 0;
@@ -19853,32 +19958,54 @@ var PersistentInstructionsPluginNextGen = class {
   getTools() {
     return [
       this.createInstructionsSetTool(),
-      this.createInstructionsAppendTool(),
-      this.createInstructionsGetTool(),
+      this.createInstructionsRemoveTool(),
+      this.createInstructionsListTool(),
       this.createInstructionsClearTool()
     ];
   }
   destroy() {
     if (this._destroyed) return;
-    this._content = null;
+    this._entries.clear();
     this._destroyed = true;
     this._tokenCache = null;
   }
   getState() {
     return {
-      content: this._content,
-      agentId: this.agentId
+      entries: Array.from(this._entries.values()),
+      agentId: this.agentId,
+      version: 2
     };
   }
   restoreState(state) {
+    if (!state || typeof state !== "object") return;
     const s = state;
-    if (!s) return;
-    this._content = s.content;
-    this._initialized = true;
-    this._tokenCache = null;
+    if ("version" in s && s.version === 2 && Array.isArray(s.entries)) {
+      this._entries.clear();
+      for (const entry of s.entries) {
+        this._entries.set(entry.id, entry);
+      }
+      this._initialized = true;
+      this._tokenCache = null;
+      return;
+    }
+    if ("content" in s) {
+      this._entries.clear();
+      const content = s.content;
+      if (content) {
+        const now = Date.now();
+        this._entries.set("legacy_instructions", {
+          id: "legacy_instructions",
+          content,
+          createdAt: now,
+          updatedAt: now
+        });
+      }
+      this._initialized = true;
+      this._tokenCache = null;
+    }
   }
   // ============================================================================
-  // Content Management
+  // Public API
   // ============================================================================
   /**
    * Initialize by loading from storage (called lazily)
@@ -19886,66 +20013,99 @@ var PersistentInstructionsPluginNextGen = class {
   async initialize() {
     if (this._initialized || this._destroyed) return;
     try {
-      this._content = await this.storage.load();
+      const entries = await this.storage.load();
+      this._entries.clear();
+      if (entries) {
+        for (const entry of entries) {
+          this._entries.set(entry.id, entry);
+        }
+      }
       this._initialized = true;
     } catch (error) {
       console.warn(`Failed to load persistent instructions for agent '${this.agentId}':`, error);
-      this._content = null;
+      this._entries.clear();
       this._initialized = true;
     }
     this._tokenCache = null;
   }
   /**
-   * Set entire instructions content (replaces existing)
+   * Add or update an instruction entry by key
    */
-  async set(content) {
+  async set(key, content) {
     this.assertNotDestroyed();
-    if (content.length > this.maxLength) {
+    await this.ensureInitialized();
+    const keyError = validateKey(key);
+    if (keyError) return false;
+    const trimmedContent = content.trim();
+    if (trimmedContent.length === 0) return false;
+    if (!this._entries.has(key) && this._entries.size >= this.maxEntries) {
       return false;
     }
-    this._content = content.trim() || null;
-    if (this._content) {
-      await this.storage.save(this._content);
-    } else {
-      await this.storage.delete();
+    const currentTotal = this.calculateTotalContentLength();
+    const existingLength = this._entries.get(key)?.content.length ?? 0;
+    const newTotal = currentTotal - existingLength + trimmedContent.length;
+    if (newTotal > this.maxTotalLength) {
+      return false;
     }
+    const now = Date.now();
+    const existing = this._entries.get(key);
+    this._entries.set(key, {
+      id: key,
+      content: trimmedContent,
+      createdAt: existing?.createdAt ?? now,
+      updatedAt: now
+    });
+    await this.persistToStorage();
     this._tokenCache = null;
     return true;
   }
   /**
-   * Append a section to existing instructions
+   * Remove an instruction entry by key
    */
-  async append(section) {
+  async remove(key) {
     this.assertNotDestroyed();
     await this.ensureInitialized();
-    const trimmedSection = section.trim();
-    if (!trimmedSection) return true;
-    const currentContent = this._content || "";
-    const newContent = currentContent ? `${currentContent}
-
-${trimmedSection}` : trimmedSection;
-    if (newContent.length > this.maxLength) {
-      return false;
+    if (!this._entries.has(key)) return false;
+    this._entries.delete(key);
+    if (this._entries.size === 0) {
+      await this.storage.delete();
+    } else {
+      await this.persistToStorage();
     }
-    this._content = newContent;
-    await this.storage.save(this._content);
     this._tokenCache = null;
     return true;
   }
   /**
-   * Get current content
+   * Get one entry by key, or all entries if no key provided
    */
-  async get() {
+  async get(key) {
     this.assertNotDestroyed();
     await this.ensureInitialized();
-    return this._content;
+    if (key !== void 0) {
+      return this._entries.get(key) ?? null;
+    }
+    if (this._entries.size === 0) return null;
+    return this.getSortedEntries();
   }
   /**
-   * Clear all instructions
+   * List metadata for all entries
+   */
+  async list() {
+    this.assertNotDestroyed();
+    await this.ensureInitialized();
+    return this.getSortedEntries().map((entry) => ({
+      key: entry.id,
+      contentLength: entry.content.length,
+      createdAt: entry.createdAt,
+      updatedAt: entry.updatedAt
+    }));
+  }
+  /**
+   * Clear all instruction entries
    */
   async clear() {
     this.assertNotDestroyed();
-    this._content = null;
+    this._entries.clear();
     await this.storage.delete();
     this._tokenCache = null;
   }
@@ -19968,6 +20128,35 @@ ${trimmedSection}` : trimmedSection;
       throw new Error("PersistentInstructionsPluginNextGen is destroyed");
     }
   }
+  /**
+   * Persist current entries to storage
+   */
+  async persistToStorage() {
+    await this.storage.save(Array.from(this._entries.values()));
+  }
+  /**
+   * Calculate total content length across all entries
+   */
+  calculateTotalContentLength() {
+    let total = 0;
+    for (const entry of this._entries.values()) {
+      total += entry.content.length;
+    }
+    return total;
+  }
+  /**
+   * Get entries sorted by createdAt (oldest first)
+   */
+  getSortedEntries() {
+    return Array.from(this._entries.values()).sort((a, b) => a.createdAt - b.createdAt);
+  }
+  /**
+   * Render all entries as markdown for context injection
+   */
+  renderContent() {
+    return this.getSortedEntries().map((entry) => `### ${entry.id}
+${entry.content}`).join("\n\n");
+  }
   // ============================================================================
   // Tool Factories
   // ============================================================================
@@ -19975,60 +20164,84 @@ ${trimmedSection}` : trimmedSection;
     return {
       definition: instructionsSetDefinition,
       execute: async (args) => {
+        const key = args.key;
         const content = args.content;
+        const keyError = validateKey(key);
+        if (keyError) {
+          return { error: keyError };
+        }
         if (!content || content.trim().length === 0) {
-          return { error: "Content cannot be empty. Use instructions_clear to remove." };
+          return { error: "Content cannot be empty. Use instructions_remove to delete an entry." };
         }
-        const success = await this.set(content);
+        const isUpdate = this._entries.has(key.trim());
+        const success = await this.set(key.trim(), content);
         if (!success) {
-          return { error: `Content exceeds maximum length (${this.maxLength} chars)` };
+          if (!isUpdate && this._entries.size >= this.maxEntries) {
+            return { error: `Maximum number of entries reached (${this.maxEntries})` };
+          }
+          return { error: `Content would exceed maximum total length (${this.maxTotalLength} chars)` };
         }
         return {
           success: true,
-          message: "Custom instructions updated",
-          length: content.length
+          message: isUpdate ? `Instruction '${key.trim()}' updated` : `Instruction '${key.trim()}' added`,
+          key: key.trim(),
+          contentLength: content.trim().length
         };
       },
       permission: { scope: "always", riskLevel: "low" },
-      describeCall: () => "set instructions"
+      describeCall: (args) => `set instruction '${args.key}'`
     };
   }
-  createInstructionsAppendTool() {
+  createInstructionsRemoveTool() {
     return {
-      definition: instructionsAppendDefinition,
+      definition: instructionsRemoveDefinition,
       execute: async (args) => {
-        const section = args.section;
-        if (!section || section.trim().length === 0) {
-          return { error: "Section cannot be empty" };
+        const key = args.key;
+        if (!key || typeof key !== "string" || key.trim().length === 0) {
+          return { error: "Key is required" };
         }
-        const success = await this.append(section);
+        const success = await this.remove(key.trim());
         if (!success) {
-          return { error: `Would exceed maximum length (${this.maxLength} chars)` };
+          return { error: `Instruction '${key.trim()}' not found` };
         }
         return {
           success: true,
-          message: "Section appended to instructions",
-          newLength: this._content?.length ?? 0
+          message: `Instruction '${key.trim()}' removed`,
+          key: key.trim()
         };
       },
       permission: { scope: "always", riskLevel: "low" },
-      describeCall: () => "append to instructions"
+      describeCall: (args) => `remove instruction '${args.key}'`
     };
   }
-  createInstructionsGetTool() {
+  createInstructionsListTool() {
     return {
-      definition: instructionsGetDefinition,
+      definition: instructionsListDefinition,
       execute: async () => {
-        const content = await this.get();
+        const entries = await this.list();
+        const all = await this.get();
+        if (entries.length === 0) {
+          return {
+            count: 0,
+            entries: [],
+            message: "(no custom instructions set)"
+          };
+        }
+        const allEntries = all;
         return {
-          hasContent: content !== null,
-          content: content ?? "(no custom instructions set)",
-          length: content?.length ?? 0,
+          count: entries.length,
+          entries: allEntries.map((e) => ({
+            key: e.id,
+            content: e.content,
+            contentLength: e.content.length,
+            createdAt: e.createdAt,
+            updatedAt: e.updatedAt
+          })),
           agentId: this.agentId
         };
       },
       permission: { scope: "always", riskLevel: "low" },
-      describeCall: () => "get instructions"
+      describeCall: () => "list instructions"
     };
   }
   createInstructionsClearTool() {
@@ -20041,7 +20254,7 @@ ${trimmedSection}` : trimmedSection;
         await this.clear();
         return {
           success: true,
-          message: "Custom instructions cleared"
+          message: "All custom instructions cleared"
         };
       },
       permission: { scope: "once", riskLevel: "medium" },
@@ -20766,7 +20979,9 @@ var AgentContextNextGen = class _AgentContextNextGen extends EventEmitter {
     this._agentId = this._config.agentId;
     this._storage = config.storage;
     this._compactionStrategy = config.compactionStrategy ?? StrategyRegistry.create(this._config.strategy);
-    this._tools = new ToolManager();
+    this._tools = new ToolManager(
+      config.toolExecutionTimeout ? { toolExecutionTimeout: config.toolExecutionTimeout } : void 0
+    );
     if (config.tools) {
       for (const tool of config.tools) {
         this._tools.register(tool);
@@ -22502,7 +22717,7 @@ var OpenAITextProvider = class extends BaseTextProvider {
   streamConverter;
   constructor(config) {
     super(config);
-    this.client = new OpenAI2({
+    this.client = new OpenAI3({
       apiKey: this.getApiKey(),
       baseURL: this.getBaseURL(),
       organization: config.organization,
@@ -24232,7 +24447,9 @@ var GoogleTextProvider = class extends BaseTextProvider {
   constructor(config) {
     super(config);
     this.client = new GoogleGenAI({
-      apiKey: this.getApiKey()
+      apiKey: this.getApiKey(),
+      // Pass custom baseURL for proxy support (e.g. when routing through EW proxy)
+      ...config.baseURL ? { httpOptions: { baseUrl: config.baseURL } } : {}
     });
     this.converter = new GoogleConverter();
     this.streamConverter = new GoogleStreamConverter();
@@ -24529,6 +24746,30 @@ var GenericOpenAIProvider = class extends OpenAITextProvider {
 };
 
 // src/core/createProvider.ts
+var VENDOR_DEFAULT_URLS = (() => {
+  const map = /* @__PURE__ */ new Map();
+  try {
+    map.set(Vendor.OpenAI, new OpenAI3({ apiKey: "_" }).baseURL);
+  } catch {
+  }
+  try {
+    map.set(Vendor.Anthropic, new Anthropic({ apiKey: "_" }).baseURL);
+  } catch {
+  }
+  map.set(Vendor.Google, "https://generativelanguage.googleapis.com");
+  map.set(Vendor.GoogleVertex, "https://us-central1-aiplatform.googleapis.com");
+  map.set(Vendor.Groq, "https://api.groq.com/openai/v1");
+  map.set(Vendor.Together, "https://api.together.xyz/v1");
+  map.set(Vendor.Perplexity, "https://api.perplexity.ai");
+  map.set(Vendor.Grok, "https://api.x.ai/v1");
+  map.set(Vendor.DeepSeek, "https://api.deepseek.com/v1");
+  map.set(Vendor.Mistral, "https://api.mistral.ai/v1");
+  map.set(Vendor.Ollama, "http://localhost:11434/v1");
+  return map;
+})();
+function getVendorDefaultBaseURL(vendor) {
+  return VENDOR_DEFAULT_URLS.get(vendor);
+}
 function createProvider(connector) {
   const injectedProvider = connector.getOptions().provider;
   if (injectedProvider && typeof injectedProvider.generate === "function") {
@@ -24563,39 +24804,15 @@ function createProvider(connector) {
       });
     // OpenAI-compatible providers (use connector.name for unique identification)
     case Vendor.Groq:
-      return new GenericOpenAIProvider(connector.name, {
-        ...config,
-        baseURL: config.baseURL || "https://api.groq.com/openai/v1"
-      });
     case Vendor.Together:
-      return new GenericOpenAIProvider(connector.name, {
-        ...config,
-        baseURL: config.baseURL || "https://api.together.xyz/v1"
-      });
     case Vendor.Perplexity:
-      return new GenericOpenAIProvider(connector.name, {
-        ...config,
-        baseURL: config.baseURL || "https://api.perplexity.ai"
-      });
     case Vendor.Grok:
-      return new GenericOpenAIProvider(connector.name, {
-        ...config,
-        baseURL: config.baseURL || "https://api.x.ai/v1"
-      });
     case Vendor.DeepSeek:
-      return new GenericOpenAIProvider(connector.name, {
-        ...config,
-        baseURL: config.baseURL || "https://api.deepseek.com/v1"
-      });
     case Vendor.Mistral:
-      return new GenericOpenAIProvider(connector.name, {
-        ...config,
-        baseURL: config.baseURL || "https://api.mistral.ai/v1"
-      });
     case Vendor.Ollama:
       return new GenericOpenAIProvider(connector.name, {
         ...config,
-        baseURL: config.baseURL || "http://localhost:11434/v1"
+        baseURL: config.baseURL || getVendorDefaultBaseURL(vendor)
       });
     case Vendor.Custom:
       if (!config.baseURL) {
@@ -24707,7 +24924,10 @@ var BaseAgent = class extends EventEmitter {
       agentId: config.name,
       // Include storage and sessionId if session config is provided
       storage: config.session?.storage,
+      // Thread tool execution timeout to ToolManager
+      toolExecutionTimeout: config.toolExecutionTimeout,
       // Subclasses can add systemPrompt via their config
+      // Note: context-level toolExecutionTimeout overrides agent-level if both set
       ...typeof config.context === "object" && config.context !== null ? config.context : {}
     };
     return AgentContextNextGen.create(contextConfig);
@@ -27179,8 +27399,8 @@ var Agent = class _Agent extends BaseAgent {
       throw new Error("Configuration file not found. Searched: " + this.DEFAULT_PATHS.join(", "));
     }
     try {
-      const fs18 = __require("fs");
-      const content = fs18.readFileSync(configPath, "utf-8");
+      const fs17 = __require("fs");
+      const content = fs17.readFileSync(configPath, "utf-8");
       let config = JSON.parse(content);
       config = this.interpolateEnvVars(config);
       this.validate(config);
@@ -27209,10 +27429,10 @@ var Agent = class _Agent extends BaseAgent {
    * Find configuration file synchronously
    */
   static findConfigSync() {
-    const fs18 = __require("fs");
+    const fs17 = __require("fs");
     for (const path6 of this.DEFAULT_PATHS) {
       try {
-        fs18.accessSync(resolve(path6));
+        fs17.accessSync(resolve(path6));
         return resolve(path6);
       } catch {
       }
@@ -33159,7 +33379,7 @@ var OpenAITTSProvider = class extends BaseMediaProvider {
   client;
   constructor(config) {
     super({ apiKey: config.auth.apiKey, ...config });
-    this.client = new OpenAI2({
+    this.client = new OpenAI3({
       apiKey: config.auth.apiKey,
       baseURL: config.baseURL,
       organization: config.organization,
@@ -33242,7 +33462,7 @@ var OpenAITTSProvider = class extends BaseMediaProvider {
    * Handle OpenAI API errors
    */
   handleError(error) {
-    if (error instanceof OpenAI2.APIError) {
+    if (error instanceof OpenAI3.APIError) {
       const status = error.status;
       const message = error.message || "Unknown OpenAI API error";
       if (status === 401) {
@@ -33274,7 +33494,7 @@ var OpenAISTTProvider = class extends BaseMediaProvider {
   client;
   constructor(config) {
     super({ apiKey: config.auth.apiKey, ...config });
-    this.client = new OpenAI2({
+    this.client = new OpenAI3({
       apiKey: config.auth.apiKey,
       baseURL: config.baseURL,
       organization: config.organization,
@@ -33376,7 +33596,7 @@ var OpenAISTTProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(audio)) {
       return new File([new Uint8Array(audio)], "audio.wav", { type: "audio/wav" });
     } else if (typeof audio === "string") {
-      return fs15.createReadStream(audio);
+      return fs16.createReadStream(audio);
     } else {
       throw new Error("Invalid audio input: must be Buffer or file path");
     }
@@ -33435,7 +33655,7 @@ var OpenAISTTProvider = class extends BaseMediaProvider {
    * Handle OpenAI API errors
    */
   handleError(error) {
-    if (error instanceof OpenAI2.APIError) {
+    if (error instanceof OpenAI3.APIError) {
       const status = error.status;
       const message = error.message || "Unknown OpenAI API error";
       if (status === 401) {
@@ -33929,7 +34149,7 @@ var TextToSpeech = class _TextToSpeech {
    */
   async toFile(text, filePath, options) {
     const response = await this.synthesize(text, options);
-    await fs14.writeFile(filePath, response.audio);
+    await fs15.writeFile(filePath, response.audio);
   }
   // ======================== Introspection Methods ========================
   /**
@@ -34277,7 +34497,7 @@ var SpeechToText = class _SpeechToText {
    * @param options - Optional transcription parameters
    */
   async transcribeFile(filePath, options) {
-    const audio = await fs14.readFile(filePath);
+    const audio = await fs15.readFile(filePath);
     return this.transcribe(audio, options);
   }
   /**
@@ -34441,7 +34661,7 @@ var OpenAIImageProvider = class extends BaseMediaProvider {
   client;
   constructor(config) {
     super({ apiKey: config.auth.apiKey, ...config });
-    this.client = new OpenAI2({
+    this.client = new OpenAI3({
       apiKey: config.auth.apiKey,
       baseURL: config.baseURL,
       organization: config.organization,
@@ -34603,7 +34823,7 @@ var OpenAIImageProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(image)) {
       return new File([new Uint8Array(image)], "image.png", { type: "image/png" });
     }
-    return fs15.createReadStream(image);
+    return fs16.createReadStream(image);
   }
   /**
    * Handle OpenAI API errors
@@ -34750,8 +34970,8 @@ var GoogleImageProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(image)) {
       imageBytes = image.toString("base64");
     } else {
-      const fs18 = await import('fs');
-      const buffer = fs18.readFileSync(image);
+      const fs17 = await import('fs');
+      const buffer = fs17.readFileSync(image);
       imageBytes = buffer.toString("base64");
     }
     return {
@@ -34801,7 +35021,7 @@ var GrokImageProvider = class extends BaseMediaProvider {
   client;
   constructor(config) {
     super({ apiKey: config.auth.apiKey, ...config });
-    this.client = new OpenAI2({
+    this.client = new OpenAI3({
       apiKey: config.auth.apiKey,
       baseURL: config.baseURL || GROK_API_BASE_URL,
       timeout: config.timeout,
@@ -34912,7 +35132,7 @@ var GrokImageProvider = class extends BaseMediaProvider {
     if (Buffer.isBuffer(image)) {
       return new File([new Uint8Array(image)], "image.png", { type: "image/png" });
     }
-    return fs15.createReadStream(image);
+    return fs16.createReadStream(image);
   }
   /**
    * Handle API errors
@@ -36114,7 +36334,7 @@ var OpenAISoraProvider = class extends BaseMediaProvider {
   client;
   constructor(config) {
     super({ apiKey: config.auth.apiKey, ...config });
-    this.client = new OpenAI2({
+    this.client = new OpenAI3({
       apiKey: config.auth.apiKey,
       baseURL: config.baseURL,
       organization: config.organization,
@@ -36362,8 +36582,8 @@ var OpenAISoraProvider = class extends BaseMediaProvider {
       return new File([new Uint8Array(image)], "input.png", { type: "image/png" });
     }
     if (!image.startsWith("http")) {
-      const fs18 = await import('fs');
-      const data = fs18.readFileSync(image);
+      const fs17 = await import('fs');
+      const data = fs17.readFileSync(image);
       return new File([new Uint8Array(data)], "input.png", { type: "image/png" });
     }
     const response = await fetch(image);
@@ -36541,7 +36761,7 @@ var GoogleVeoProvider = class extends BaseMediaProvider {
           if (video.videoBytes) {
             buffer = Buffer.from(video.videoBytes, "base64");
           } else if (video.uri) {
-            const fs18 = await import('fs/promises');
+            const fs17 = await import('fs/promises');
             const os3 = await import('os');
             const path6 = await import('path');
             const tempDir = os3.tmpdir();
@@ -36552,11 +36772,11 @@ var GoogleVeoProvider = class extends BaseMediaProvider {
                 // Pass as GeneratedVideo
                 downloadPath: tempFile
               });
-              buffer = await fs18.readFile(tempFile);
-              await fs18.unlink(tempFile).catch(() => {
+              buffer = await fs17.readFile(tempFile);
+              await fs17.unlink(tempFile).catch(() => {
               });
             } catch (downloadError) {
-              await fs18.unlink(tempFile).catch(() => {
+              await fs17.unlink(tempFile).catch(() => {
               });
               throw new ProviderError(
                 "google",
@@ -36678,8 +36898,8 @@ var GoogleVeoProvider = class extends BaseMediaProvider {
     if (image.startsWith("http://") || image.startsWith("https://")) {
       return { imageUri: image };
     }
-    const fs18 = await import('fs/promises');
-    const data = await fs18.readFile(image);
+    const fs17 = await import('fs/promises');
+    const data = await fs17.readFile(image);
     return {
       imageBytes: data.toString("base64")
     };
@@ -36986,8 +37206,8 @@ var GrokImagineProvider = class extends BaseMediaProvider {
     if (image.startsWith("http") || image.startsWith("data:")) {
       return image;
     }
-    const fs18 = await import('fs');
-    const data = fs18.readFileSync(image);
+    const fs17 = await import('fs');
+    const data = fs17.readFileSync(image);
     const base64 = data.toString("base64");
     const ext = image.split(".").pop()?.toLowerCase() || "png";
     const mimeType = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : `image/${ext}`;
@@ -40724,6 +40944,126 @@ var FileAgentDefinitionStorage = class {
 function createFileAgentDefinitionStorage(config) {
   return new FileAgentDefinitionStorage(config);
 }
+var MIME_TYPES = {
+  png: "image/png",
+  jpeg: "image/jpeg",
+  jpg: "image/jpeg",
+  webp: "image/webp",
+  gif: "image/gif",
+  mp4: "video/mp4",
+  webm: "video/webm",
+  mp3: "audio/mpeg",
+  wav: "audio/wav",
+  opus: "audio/opus",
+  ogg: "audio/ogg",
+  aac: "audio/aac",
+  flac: "audio/flac",
+  pcm: "audio/pcm"
+};
+var MEDIA_TYPE_PREFIXES = ["image", "video", "audio"];
+var FileMediaStorage = class {
+  outputDir;
+  initialized = false;
+  constructor(config) {
+    this.outputDir = config?.outputDir ?? path2.join(os2.tmpdir(), "oneringai-media");
+  }
+  async save(data, metadata) {
+    const dir = metadata.userId ? path2.join(this.outputDir, metadata.userId) : this.outputDir;
+    await fs15.mkdir(dir, { recursive: true });
+    const filename = metadata.suggestedFilename ?? this.generateFilename(metadata);
+    const filePath = path2.join(dir, filename);
+    await fs15.writeFile(filePath, data);
+    const format = metadata.format.toLowerCase();
+    const mimeType = MIME_TYPES[format] ?? "application/octet-stream";
+    return {
+      location: filePath,
+      mimeType,
+      size: data.length
+    };
+  }
+  async read(location) {
+    try {
+      return await fs15.readFile(location);
+    } catch (err) {
+      if (err.code === "ENOENT") {
+        return null;
+      }
+      throw err;
+    }
+  }
+  async delete(location) {
+    try {
+      await fs15.unlink(location);
+    } catch (err) {
+      if (err.code === "ENOENT") {
+        return;
+      }
+      throw err;
+    }
+  }
+  async exists(location) {
+    try {
+      await fs15.access(location);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  async list(options) {
+    await this.ensureDir();
+    let entries = [];
+    const files = await fs15.readdir(this.outputDir);
+    for (const file of files) {
+      const filePath = path2.join(this.outputDir, file);
+      try {
+        const stat6 = await fs15.stat(filePath);
+        if (!stat6.isFile()) continue;
+        const ext = path2.extname(file).slice(1).toLowerCase();
+        const mimeType = MIME_TYPES[ext] ?? "application/octet-stream";
+        let type;
+        for (const prefix of MEDIA_TYPE_PREFIXES) {
+          if (file.startsWith(`${prefix}_`)) {
+            type = prefix;
+            break;
+          }
+        }
+        entries.push({
+          location: filePath,
+          mimeType,
+          size: stat6.size,
+          type,
+          createdAt: stat6.birthtime
+        });
+      } catch {
+      }
+    }
+    if (options?.type) {
+      entries = entries.filter((e) => e.type === options.type);
+    }
+    entries.sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime());
+    const offset = options?.offset ?? 0;
+    const limit = options?.limit ?? entries.length;
+    return entries.slice(offset, offset + limit);
+  }
+  getPath() {
+    return this.outputDir;
+  }
+  generateFilename(metadata) {
+    const timestamp = Date.now();
+    const random2 = crypto2.randomBytes(4).toString("hex");
+    const indexSuffix = metadata.index != null ? `_${metadata.index}` : "";
+    return `${metadata.type}_${timestamp}_${random2}${indexSuffix}.${metadata.format}`;
+  }
+  async ensureDir() {
+    if (!this.initialized) {
+      await fs15.mkdir(this.outputDir, { recursive: true });
+      this.initialized = true;
+    }
+  }
+};
+function createFileMediaStorage(config) {
+  return new FileMediaStorage(config);
+}
 
 // src/capabilities/agents/StreamHelpers.ts
 var StreamHelpers = class {
@@ -41646,7 +41986,7 @@ var ConnectorTools = class {
   static createGenericAPITool(connector, options) {
     const toolName = options?.toolName ?? `${connector.name}_api`;
     const userId = options?.userId;
-    const description = options?.description ?? `Make an authenticated API call to ${connector.displayName}.` + (connector.baseURL ? ` Base URL: ${connector.baseURL}` : " Provide full URL in endpoint.");
+    const description = options?.description ?? `Make an authenticated API call to ${connector.displayName}.` + (connector.baseURL ? ` Base URL: ${connector.baseURL}.` : " Provide full URL in endpoint.") + ' IMPORTANT: For POST/PUT/PATCH requests, pass data in the "body" parameter as a JSON object, NOT as query string parameters in the endpoint URL. The body is sent as application/json.';
     return {
       definition: {
         type: "function",
@@ -41663,15 +42003,15 @@ var ConnectorTools = class {
               },
               endpoint: {
                 type: "string",
-                description: "API endpoint (relative to base URL) or full URL"
+                description: 'API endpoint path (relative to base URL) or full URL. Do NOT put request data as query parameters here for POST/PUT/PATCH \u2014 use the "body" parameter instead.'
               },
               body: {
                 type: "object",
-                description: "Request body (for POST/PUT/PATCH)"
+                description: 'JSON request body for POST/PUT/PATCH requests. ALWAYS use this for sending data (e.g., {"channel": "C123", "text": "hello"}) instead of query string parameters.'
               },
               queryParams: {
                 type: "object",
-                description: "URL query parameters"
+                description: 'URL query parameters (for filtering/pagination on GET requests). Do NOT use for POST/PUT/PATCH data \u2014 use "body" instead.'
               },
               headers: {
                 type: "object",
@@ -41736,7 +42076,10 @@ var ConnectorTools = class {
           };
         }
       },
-      describeCall: (args) => `${args.method} ${args.endpoint}`,
+      describeCall: (args) => {
+        const bodyInfo = args.body ? ` body=${JSON.stringify(args.body).slice(0, 100)}` : "";
+        return `${args.method} ${args.endpoint}${bodyInfo}`;
+      },
       permission: options?.permission ?? {
         scope: "session",
         riskLevel: "medium",
@@ -41771,8 +42114,8 @@ var FileStorage = class {
   }
   async ensureDirectory() {
     try {
-      await fs14.mkdir(this.directory, { recursive: true });
-      await fs14.chmod(this.directory, 448);
+      await fs15.mkdir(this.directory, { recursive: true });
+      await fs15.chmod(this.directory, 448);
     } catch (error) {
     }
   }
@@ -41781,20 +42124,20 @@ var FileStorage = class {
    */
   getFilePath(key) {
     const hash = crypto2.createHash("sha256").update(key).digest("hex");
-    return path3.join(this.directory, `${hash}.token`);
+    return path2.join(this.directory, `${hash}.token`);
   }
   async storeToken(key, token) {
     await this.ensureDirectory();
     const filePath = this.getFilePath(key);
     const plaintext = JSON.stringify(token);
     const encrypted = encrypt(plaintext, this.encryptionKey);
-    await fs14.writeFile(filePath, encrypted, "utf8");
-    await fs14.chmod(filePath, 384);
+    await fs15.writeFile(filePath, encrypted, "utf8");
+    await fs15.chmod(filePath, 384);
   }
   async getToken(key) {
     const filePath = this.getFilePath(key);
     try {
-      const encrypted = await fs14.readFile(filePath, "utf8");
+      const encrypted = await fs15.readFile(filePath, "utf8");
       const decrypted = decrypt(encrypted, this.encryptionKey);
       return JSON.parse(decrypted);
     } catch (error) {
@@ -41803,7 +42146,7 @@ var FileStorage = class {
       }
       console.error("Failed to read/decrypt token file:", error);
       try {
-        await fs14.unlink(filePath);
+        await fs15.unlink(filePath);
       } catch {
       }
       return null;
@@ -41812,7 +42155,7 @@ var FileStorage = class {
   async deleteToken(key) {
     const filePath = this.getFilePath(key);
     try {
-      await fs14.unlink(filePath);
+      await fs15.unlink(filePath);
     } catch (error) {
       if (error.code !== "ENOENT") {
         throw error;
@@ -41822,7 +42165,7 @@ var FileStorage = class {
   async hasToken(key) {
     const filePath = this.getFilePath(key);
     try {
-      await fs14.access(filePath);
+      await fs15.access(filePath);
       return true;
     } catch {
       return false;
@@ -41833,7 +42176,7 @@ var FileStorage = class {
    */
   async listTokens() {
     try {
-      const files = await fs14.readdir(this.directory);
+      const files = await fs15.readdir(this.directory);
       return files.filter((f) => f.endsWith(".token")).map((f) => f.replace(".token", ""));
     } catch {
       return [];
@@ -41844,10 +42187,10 @@ var FileStorage = class {
    */
   async clearAll() {
     try {
-      const files = await fs14.readdir(this.directory);
+      const files = await fs15.readdir(this.directory);
       const tokenFiles = files.filter((f) => f.endsWith(".token"));
       await Promise.all(
-        tokenFiles.map((f) => fs14.unlink(path3.join(this.directory, f)).catch(() => {
+        tokenFiles.map((f) => fs15.unlink(path2.join(this.directory, f)).catch(() => {
         }))
       );
     } catch {
@@ -42115,22 +42458,26 @@ var ConnectorConfigStore = class {
    * Encrypt secrets in ConnectorAuth based on auth type
    */
   encryptAuthSecrets(auth2) {
+    const encryptedExtra = this.encryptExtra(auth2.extra);
     switch (auth2.type) {
       case "api_key":
         return {
           ...auth2,
-          apiKey: this.encryptValue(auth2.apiKey)
+          apiKey: this.encryptValue(auth2.apiKey),
+          ...encryptedExtra ? { extra: encryptedExtra } : {}
         };
       case "oauth":
         return {
           ...auth2,
           clientSecret: auth2.clientSecret ? this.encryptValue(auth2.clientSecret) : void 0,
-          privateKey: auth2.privateKey ? this.encryptValue(auth2.privateKey) : void 0
+          privateKey: auth2.privateKey ? this.encryptValue(auth2.privateKey) : void 0,
+          ...encryptedExtra ? { extra: encryptedExtra } : {}
         };
       case "jwt":
         return {
           ...auth2,
-          privateKey: this.encryptValue(auth2.privateKey)
+          privateKey: this.encryptValue(auth2.privateKey),
+          ...encryptedExtra ? { extra: encryptedExtra } : {}
         };
       default:
         return auth2;
@@ -42140,27 +42487,53 @@ var ConnectorConfigStore = class {
    * Decrypt secrets in ConnectorAuth based on auth type
    */
   decryptAuthSecrets(auth2) {
+    const decryptedExtra = this.decryptExtra(auth2.extra);
     switch (auth2.type) {
       case "api_key":
         return {
           ...auth2,
-          apiKey: this.decryptValue(auth2.apiKey)
+          apiKey: this.decryptValue(auth2.apiKey),
+          ...decryptedExtra ? { extra: decryptedExtra } : {}
         };
       case "oauth":
         return {
           ...auth2,
           clientSecret: auth2.clientSecret ? this.decryptValue(auth2.clientSecret) : void 0,
-          privateKey: auth2.privateKey ? this.decryptValue(auth2.privateKey) : void 0
+          privateKey: auth2.privateKey ? this.decryptValue(auth2.privateKey) : void 0,
+          ...decryptedExtra ? { extra: decryptedExtra } : {}
         };
       case "jwt":
         return {
           ...auth2,
-          privateKey: this.decryptValue(auth2.privateKey)
+          privateKey: this.decryptValue(auth2.privateKey),
+          ...decryptedExtra ? { extra: decryptedExtra } : {}
         };
       default:
         return auth2;
     }
   }
+  /**
+   * Encrypt all values in an extra Record (vendor-specific credentials)
+   */
+  encryptExtra(extra) {
+    if (!extra || Object.keys(extra).length === 0) return void 0;
+    const result = {};
+    for (const [key, value] of Object.entries(extra)) {
+      result[key] = this.encryptValue(value);
+    }
+    return result;
+  }
+  /**
+   * Decrypt all values in an extra Record (vendor-specific credentials)
+   */
+  decryptExtra(extra) {
+    if (!extra || Object.keys(extra).length === 0) return void 0;
+    const result = {};
+    for (const [key, value] of Object.entries(extra)) {
+      result[key] = this.decryptValue(value);
+    }
+    return result;
+  }
   /**
    * Encrypt a single value if not already encrypted
    */
@@ -42238,20 +42611,20 @@ var FileConnectorStorage = class {
       throw new Error("FileConnectorStorage requires a directory path");
     }
     this.directory = config.directory;
-    this.indexPath = path3.join(this.directory, "_index.json");
+    this.indexPath = path2.join(this.directory, "_index.json");
   }
   async save(name, stored) {
     await this.ensureDirectory();
     const filePath = this.getFilePath(name);
     const json = JSON.stringify(stored, null, 2);
-    await fs14.writeFile(filePath, json, "utf8");
-    await fs14.chmod(filePath, 384);
+    await fs15.writeFile(filePath, json, "utf8");
+    await fs15.chmod(filePath, 384);
     await this.updateIndex(name, "add");
   }
   async get(name) {
     const filePath = this.getFilePath(name);
     try {
-      const json = await fs14.readFile(filePath, "utf8");
+      const json = await fs15.readFile(filePath, "utf8");
       return JSON.parse(json);
     } catch (error) {
       const err = error;
@@ -42264,7 +42637,7 @@ var FileConnectorStorage = class {
   async delete(name) {
     const filePath = this.getFilePath(name);
     try {
-      await fs14.unlink(filePath);
+      await fs15.unlink(filePath);
       await this.updateIndex(name, "remove");
       return true;
     } catch (error) {
@@ -42278,7 +42651,7 @@ var FileConnectorStorage = class {
   async has(name) {
     const filePath = this.getFilePath(name);
     try {
-      await fs14.access(filePath);
+      await fs15.access(filePath);
       return true;
     } catch {
       return false;
@@ -42304,13 +42677,13 @@ var FileConnectorStorage = class {
    */
   async clear() {
     try {
-      const files = await fs14.readdir(this.directory);
+      const files = await fs15.readdir(this.directory);
       const connectorFiles = files.filter(
         (f) => f.endsWith(".connector.json") || f === "_index.json"
       );
       await Promise.all(
         connectorFiles.map(
-          (f) => fs14.unlink(path3.join(this.directory, f)).catch(() => {
+          (f) => fs15.unlink(path2.join(this.directory, f)).catch(() => {
           })
         )
       );
@@ -42323,7 +42696,7 @@ var FileConnectorStorage = class {
    */
   getFilePath(name) {
     const hash = this.hashName(name);
-    return path3.join(this.directory, `${hash}.connector.json`);
+    return path2.join(this.directory, `${hash}.connector.json`);
   }
   /**
    * Hash connector name to prevent enumeration
@@ -42337,8 +42710,8 @@ var FileConnectorStorage = class {
   async ensureDirectory() {
     if (this.initialized) return;
     try {
-      await fs14.mkdir(this.directory, { recursive: true });
-      await fs14.chmod(this.directory, 448);
+      await fs15.mkdir(this.directory, { recursive: true });
+      await fs15.chmod(this.directory, 448);
       this.initialized = true;
     } catch {
       this.initialized = true;
@@ -42349,7 +42722,7 @@ var FileConnectorStorage = class {
    */
   async loadIndex() {
     try {
-      const json = await fs14.readFile(this.indexPath, "utf8");
+      const json = await fs15.readFile(this.indexPath, "utf8");
       return JSON.parse(json);
     } catch {
       return { connectors: {} };
@@ -42367,8 +42740,8 @@ var FileConnectorStorage = class {
       delete index.connectors[hash];
     }
     const json = JSON.stringify(index, null, 2);
-    await fs14.writeFile(this.indexPath, json, "utf8");
-    await fs14.chmod(this.indexPath, 384);
+    await fs15.writeFile(this.indexPath, json, "utf8");
+    await fs15.chmod(this.indexPath, 384);
   }
 };
 
@@ -42413,11 +42786,19 @@ function buildAuthConfig(authTemplate, credentials) {
     if (!credentials.apiKey) {
       throw new Error("API key is required for api_key auth");
     }
+    const standardApiKeyFields = /* @__PURE__ */ new Set(["apiKey", "headerName", "headerPrefix"]);
+    const extra = {};
+    for (const field of authTemplate.optionalFields ?? []) {
+      if (!standardApiKeyFields.has(field) && credentials[field]) {
+        extra[field] = credentials[field];
+      }
+    }
     return {
       type: "api_key",
       apiKey: credentials.apiKey,
       headerName: defaults.headerName ?? "Authorization",
-      headerPrefix: defaults.headerPrefix ?? "Bearer"
+      headerPrefix: defaults.headerPrefix ?? "Bearer",
+      ...Object.keys(extra).length > 0 ? { extra } : {}
     };
   }
   if (!authTemplate.flow) {
@@ -42687,8 +43068,9 @@ var slackTemplate = {
       id: "bot-token",
       name: "Bot Token",
       type: "api_key",
-      description: "Internal workspace bot - get from OAuth & Permissions page of your Slack app",
+      description: "Internal workspace bot - get from OAuth & Permissions page of your Slack app. For Socket Mode bots, also provide appToken and signingSecret in extra fields.",
       requiredFields: ["apiKey"],
+      optionalFields: ["appToken", "signingSecret"],
       defaults: {
         type: "api_key",
         headerName: "Authorization",
@@ -44526,14 +44908,14 @@ function createMessageWithImages(text, imageUrls, role = "user" /* USER */) {
 var execAsync = promisify(exec);
 function cleanupTempFile(filePath) {
   try {
-    if (fs15.existsSync(filePath)) {
-      fs15.unlinkSync(filePath);
+    if (fs16.existsSync(filePath)) {
+      fs16.unlinkSync(filePath);
     }
   } catch {
   }
 }
 async function readClipboardImage() {
-  const platform2 = os.platform();
+  const platform2 = os2.platform();
   try {
     switch (platform2) {
       case "darwin":
@@ -44556,7 +44938,7 @@ async function readClipboardImage() {
   }
 }
 async function readClipboardImageMac() {
-  const tempFile = path3.join(os.tmpdir(), `clipboard-${Date.now()}.png`);
+  const tempFile = path2.join(os2.tmpdir(), `clipboard-${Date.now()}.png`);
   try {
     try {
       await execAsync(`pngpaste "${tempFile}"`);
@@ -44578,7 +44960,7 @@ async function readClipboardImageMac() {
         end try
       `;
       const { stdout } = await execAsync(`osascript -e '${script}'`);
-      if (stdout.includes("success") || fs15.existsSync(tempFile)) {
+      if (stdout.includes("success") || fs16.existsSync(tempFile)) {
         return await convertFileToDataUri(tempFile);
       }
       return {
@@ -44591,18 +44973,18 @@ async function readClipboardImageMac() {
   }
 }
 async function readClipboardImageLinux() {
-  const tempFile = path3.join(os.tmpdir(), `clipboard-${Date.now()}.png`);
+  const tempFile = path2.join(os2.tmpdir(), `clipboard-${Date.now()}.png`);
   try {
     try {
       await execAsync(`xclip -selection clipboard -t image/png -o > "${tempFile}"`);
-      if (fs15.existsSync(tempFile) && fs15.statSync(tempFile).size > 0) {
+      if (fs16.existsSync(tempFile) && fs16.statSync(tempFile).size > 0) {
         return await convertFileToDataUri(tempFile);
       }
     } catch {
     }
     try {
       await execAsync(`wl-paste -t image/png > "${tempFile}"`);
-      if (fs15.existsSync(tempFile) && fs15.statSync(tempFile).size > 0) {
+      if (fs16.existsSync(tempFile) && fs16.statSync(tempFile).size > 0) {
         return await convertFileToDataUri(tempFile);
       }
     } catch {
@@ -44616,7 +44998,7 @@ async function readClipboardImageLinux() {
   }
 }
 async function readClipboardImageWindows() {
-  const tempFile = path3.join(os.tmpdir(), `clipboard-${Date.now()}.png`);
+  const tempFile = path2.join(os2.tmpdir(), `clipboard-${Date.now()}.png`);
   try {
     const psScript = `
       Add-Type -AssemblyName System.Windows.Forms;
@@ -44629,7 +45011,7 @@ async function readClipboardImageWindows() {
       }
     `;
     await execAsync(`powershell -Command "${psScript}"`);
-    if (fs15.existsSync(tempFile) && fs15.statSync(tempFile).size > 0) {
+    if (fs16.existsSync(tempFile) && fs16.statSync(tempFile).size > 0) {
       return await convertFileToDataUri(tempFile);
     }
     return {
@@ -44642,7 +45024,7 @@ async function readClipboardImageWindows() {
 }
 async function convertFileToDataUri(filePath) {
   try {
-    const imageBuffer = fs15.readFileSync(filePath);
+    const imageBuffer = fs16.readFileSync(filePath);
     const base64Image = imageBuffer.toString("base64");
     const magic = imageBuffer.slice(0, 4).toString("hex");
     let mimeType = "image/png";
@@ -44669,7 +45051,7 @@ async function convertFileToDataUri(filePath) {
   }
 }
 async function hasClipboardImage() {
-  const platform2 = os.platform();
+  const platform2 = os2.platform();
   try {
     switch (platform2) {
       case "darwin":
@@ -44887,17 +45269,24 @@ __export(tools_exports, {
   ConnectorTools: () => ConnectorTools,
   DEFAULT_FILESYSTEM_CONFIG: () => DEFAULT_FILESYSTEM_CONFIG,
   DEFAULT_SHELL_CONFIG: () => DEFAULT_SHELL_CONFIG,
-  FileMediaOutputHandler: () => FileMediaOutputHandler,
+  FileMediaOutputHandler: () => FileMediaStorage,
   ToolRegistry: () => ToolRegistry,
   bash: () => bash,
   createBashTool: () => createBashTool,
+  createCreatePRTool: () => createCreatePRTool,
   createEditFileTool: () => createEditFileTool,
   createExecuteJavaScriptTool: () => createExecuteJavaScriptTool,
+  createGetPRTool: () => createGetPRTool,
+  createGitHubReadFileTool: () => createGitHubReadFileTool,
   createGlobTool: () => createGlobTool,
   createGrepTool: () => createGrepTool,
   createImageGenerationTool: () => createImageGenerationTool,
   createListDirectoryTool: () => createListDirectoryTool,
+  createPRCommentsTool: () => createPRCommentsTool,
+  createPRFilesTool: () => createPRFilesTool,
   createReadFileTool: () => createReadFileTool,
+  createSearchCodeTool: () => createSearchCodeTool,
+  createSearchFilesTool: () => createSearchFilesTool,
   createSpeechToTextTool: () => createSpeechToTextTool,
   createTextToSpeechTool: () => createTextToSpeechTool,
   createVideoTools: () => createVideoTools,
@@ -44909,6 +45298,7 @@ __export(tools_exports, {
   getAllBuiltInTools: () => getAllBuiltInTools,
   getBackgroundOutput: () => getBackgroundOutput,
   getMediaOutputHandler: () => getMediaOutputHandler,
+  getMediaStorage: () => getMediaStorage,
   getToolByName: () => getToolByName,
   getToolCategories: () => getToolCategories,
   getToolRegistry: () => getToolRegistry,
@@ -44921,15 +45311,18 @@ __export(tools_exports, {
   jsonManipulator: () => jsonManipulator,
   killBackgroundProcess: () => killBackgroundProcess,
   listDirectory: () => listDirectory,
-  readFile: () => readFile4,
+  parseRepository: () => parseRepository,
+  readFile: () => readFile5,
+  resolveRepository: () => resolveRepository,
   setMediaOutputHandler: () => setMediaOutputHandler,
+  setMediaStorage: () => setMediaStorage,
   toolRegistry: () => toolRegistry,
   validatePath: () => validatePath,
   webFetch: () => webFetch,
   webFetchJS: () => webFetchJS,
   webScrape: () => webScrape,
   webSearch: () => webSearch,
-  writeFile: () => writeFile4
+  writeFile: () => writeFile5
 });
 var DEFAULT_FILESYSTEM_CONFIG = {
   workingDirectory: process.cwd(),
@@ -45182,7 +45575,7 @@ EXAMPLES:
     }
   };
 }
-var readFile4 = createReadFileTool();
+var readFile5 = createReadFileTool();
 function createWriteFileTool(config = {}) {
   const mergedConfig = { ...DEFAULT_FILESYSTEM_CONFIG, ...config };
   return {
@@ -45269,7 +45662,7 @@ EXAMPLES:
     }
   };
 }
-var writeFile4 = createWriteFileTool();
+var writeFile5 = createWriteFileTool();
 function createEditFileTool(config = {}) {
   const mergedConfig = { ...DEFAULT_FILESYSTEM_CONFIG, ...config };
   return {
@@ -46196,7 +46589,8 @@ EXAMPLES:
           shell: mergedConfig.shell,
           cwd: mergedConfig.workingDirectory,
           env,
-          stdio: ["pipe", "pipe", "pipe"]
+          stdio: ["pipe", "pipe", "pipe"],
+          detached: true
         });
         if (run_in_background && mergedConfig.allowBackground) {
           const bgId = generateBackgroundId();
@@ -46223,14 +46617,27 @@ EXAMPLES:
         let stdout = "";
         let stderr = "";
         let killed = false;
+        const killProcessGroup = (signal) => {
+          try {
+            if (childProcess.pid) {
+              process.kill(-childProcess.pid, signal);
+            }
+          } catch {
+            try {
+              childProcess.kill(signal);
+            } catch {
+            }
+          }
+        };
+        const GRACEFUL_KILL_WAIT_MS = 3e3;
         const timeoutId = setTimeout(() => {
           killed = true;
-          childProcess.kill("SIGTERM");
+          killProcessGroup("SIGTERM");
           setTimeout(() => {
             if (!childProcess.killed) {
-              childProcess.kill("SIGKILL");
+              killProcessGroup("SIGKILL");
             }
-          }, 5e3);
+          }, GRACEFUL_KILL_WAIT_MS);
         }, effectiveTimeout);
         childProcess.stdout.on("data", (data) => {
           stdout += data.toString();
@@ -46244,8 +46651,28 @@ EXAMPLES:
             stderr = stderr.slice(-mergedConfig.maxOutputSize);
           }
         });
-        childProcess.on("close", (code, signal) => {
+        let resolved = false;
+        const safeResolve = (result) => {
+          if (resolved) return;
+          resolved = true;
           clearTimeout(timeoutId);
+          clearTimeout(hardTimeoutId);
+          resolve4(result);
+        };
+        const HARD_TIMEOUT_GRACE_MS = 5e3;
+        const hardTimeoutId = setTimeout(() => {
+          if (!resolved) {
+            killProcessGroup("SIGKILL");
+            safeResolve({
+              success: false,
+              stdout,
+              stderr,
+              duration: Date.now() - startTime,
+              error: `Command timed out after ${effectiveTimeout}ms (hard timeout: process group did not exit)`
+            });
+          }
+        }, effectiveTimeout + GRACEFUL_KILL_WAIT_MS + HARD_TIMEOUT_GRACE_MS);
+        childProcess.on("close", (code, signal) => {
           const duration = Date.now() - startTime;
           let truncated = false;
           if (stdout.length > mergedConfig.maxOutputSize) {
@@ -46257,7 +46684,7 @@ EXAMPLES:
             truncated = true;
           }
           if (killed) {
-            resolve4({
+            safeResolve({
               success: false,
               stdout,
               stderr,
@@ -46268,7 +46695,7 @@ EXAMPLES:
               error: `Command timed out after ${effectiveTimeout}ms`
             });
           } else {
-            resolve4({
+            safeResolve({
               success: code === 0,
               stdout,
               stderr,
@@ -46281,8 +46708,7 @@ EXAMPLES:
           }
         });
         childProcess.on("error", (error) => {
-          clearTimeout(timeoutId);
-          resolve4({
+          safeResolve({
             success: false,
             error: `Failed to execute command: ${error.message}`,
             duration: Date.now() - startTime
@@ -47548,8 +47974,8 @@ async function tryNative(args, startTime, attemptedMethods) {
       method: "native",
       title: result.title,
       content: cleanContent,
-      // Note: raw HTML not available with native method (returns markdown instead)
-      markdown: args.includeMarkdown ? cleanContent : void 0,
+      // Native method already returns markdown-like content — no separate markdown field needed
+      // (would just duplicate content and waste tokens)
       qualityScore: result.qualityScore,
       durationMs: Date.now() - startTime,
       attemptedMethods,
@@ -47585,8 +48011,7 @@ async function tryJS(args, startTime, attemptedMethods) {
       method: "js",
       title: result.title,
       content: cleanContent,
-      // Note: raw HTML not available with JS method (returns markdown instead)
-      markdown: args.includeMarkdown ? cleanContent : void 0,
+      // JS method already returns markdown-like content — no separate markdown field needed
       qualityScore: result.success ? 80 : 0,
       durationMs: Date.now() - startTime,
       attemptedMethods,
@@ -47618,8 +48043,11 @@ async function tryAPI(connectorName, args, startTime, attemptedMethods) {
       includeLinks: args.includeLinks
     };
     const result = await provider.scrape(args.url, options);
-    const cleanContent = stripBase64DataUris(result.result?.content || "");
-    const cleanMarkdown = result.result?.markdown ? stripBase64DataUris(result.result.markdown) : void 0;
+    const rawContent = result.result?.content || "";
+    const rawMarkdown = result.result?.markdown;
+    const cleanContent = stripBase64DataUris(rawContent);
+    const cleanMarkdown = rawMarkdown ? stripBase64DataUris(rawMarkdown) : void 0;
+    const isDuplicate = !!cleanMarkdown && cleanContent === cleanMarkdown;
     return {
       success: result.success,
       url: args.url,
@@ -47629,7 +48057,7 @@ async function tryAPI(connectorName, args, startTime, attemptedMethods) {
       content: cleanContent,
       html: result.result?.html,
       // Keep raw HTML as-is (only used if explicitly requested)
-      markdown: cleanMarkdown,
+      markdown: isDuplicate ? void 0 : cleanMarkdown,
       metadata: result.result?.metadata,
       links: result.result?.links,
       qualityScore: result.success ? 90 : 0,
@@ -47844,68 +48272,25 @@ async function executeInVM(code, input, timeout, logs) {
   const result = await resultPromise;
   return result !== void 0 ? result : sandbox.output;
 }
-var MIME_TYPES = {
-  png: "image/png",
-  jpeg: "image/jpeg",
-  jpg: "image/jpeg",
-  webp: "image/webp",
-  gif: "image/gif",
-  mp4: "video/mp4",
-  webm: "video/webm",
-  mp3: "audio/mpeg",
-  wav: "audio/wav",
-  opus: "audio/opus",
-  ogg: "audio/ogg",
-  aac: "audio/aac",
-  flac: "audio/flac",
-  pcm: "audio/pcm"
-};
-var FileMediaOutputHandler = class {
-  outputDir;
-  initialized = false;
-  constructor(outputDir) {
-    this.outputDir = outputDir ?? path3.join(os.tmpdir(), "oneringai-media");
-  }
-  async save(data, metadata) {
-    if (!this.initialized) {
-      await fs14.mkdir(this.outputDir, { recursive: true });
-      this.initialized = true;
-    }
-    const filename = metadata.suggestedFilename ?? this.generateFilename(metadata);
-    const filePath = path3.join(this.outputDir, filename);
-    await fs14.writeFile(filePath, data);
-    const format = metadata.format.toLowerCase();
-    const mimeType = MIME_TYPES[format] ?? `application/octet-stream`;
-    return {
-      location: filePath,
-      mimeType,
-      size: data.length
-    };
-  }
-  generateFilename(metadata) {
-    const timestamp = Date.now();
-    const random2 = crypto2.randomBytes(4).toString("hex");
-    const indexSuffix = metadata.index != null ? `_${metadata.index}` : "";
-    return `${metadata.type}_${timestamp}_${random2}${indexSuffix}.${metadata.format}`;
-  }
-};
 
 // src/tools/multimedia/config.ts
-var _outputHandler = null;
-function getMediaOutputHandler() {
-  if (!_outputHandler) {
-    _outputHandler = new FileMediaOutputHandler();
+var _storage = null;
+function getMediaStorage() {
+  if (!_storage) {
+    _storage = new FileMediaStorage();
   }
-  return _outputHandler;
+  return _storage;
 }
-function setMediaOutputHandler(handler) {
-  _outputHandler = handler;
+function setMediaStorage(storage) {
+  _storage = storage;
 }
+var getMediaOutputHandler = getMediaStorage;
+var setMediaOutputHandler = setMediaStorage;
 
 // src/tools/multimedia/imageGeneration.ts
-function createImageGenerationTool(connector, outputHandler) {
+function createImageGenerationTool(connector, storage, userId) {
   const vendor = connector.vendor;
-  const handler = outputHandler ?? getMediaOutputHandler();
+  const handler = storage ?? getMediaStorage();
   const vendorModels = vendor ? getImageModelsByVendor(vendor) : [];
   const modelNames = vendorModels.map((m) => m.name);
   const properties = {
@@ -47978,8 +48363,9 @@ function createImageGenerationTool(connector, outputHandler) {
         }
       }
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       try {
+        const effectiveUserId = userId ?? context?.userId;
         const imageGen = ImageGeneration.create({ connector });
         const response = await imageGen.generate({
           prompt: args.prompt,
@@ -48010,7 +48396,8 @@ function createImageGenerationTool(connector, outputHandler) {
             format,
             model: modelName,
             vendor: vendor || "unknown",
-            index: response.data.length > 1 ? i : void 0
+            index: response.data.length > 1 ? i : void 0,
+            userId: effectiveUserId
           });
           images.push({
             location: result.location,
@@ -48037,9 +48424,9 @@ function createImageGenerationTool(connector, outputHandler) {
 
 // src/tools/multimedia/videoGeneration.ts
 var videoGenInstances = /* @__PURE__ */ new Map();
-function createVideoTools(connector, outputHandler) {
+function createVideoTools(connector, storage, userId) {
   const vendor = connector.vendor;
-  const handler = outputHandler ?? getMediaOutputHandler();
+  const handler = storage ?? getMediaStorage();
   const vendorModels = vendor ? getVideoModelsByVendor(vendor) : [];
   const modelNames = vendorModels.map((m) => m.name);
   const generateProperties = {
@@ -48103,7 +48490,7 @@ function createVideoTools(connector, outputHandler) {
         }
       }
     },
-    execute: async (args) => {
+    execute: async (args, _context) => {
       try {
         const videoGen = VideoGeneration.create({ connector });
         const response = await videoGen.generate({
@@ -48152,8 +48539,9 @@ function createVideoTools(connector, outputHandler) {
         }
       }
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       try {
+        const effectiveUserId = userId ?? context?.userId;
         let videoGen = videoGenInstances.get(args.jobId);
         if (!videoGen) {
           videoGen = VideoGeneration.create({ connector });
@@ -48179,7 +48567,8 @@ function createVideoTools(connector, outputHandler) {
               type: "video",
               format,
               model: modelName,
-              vendor: vendor || "unknown"
+              vendor: vendor || "unknown",
+              userId: effectiveUserId
             });
             videoGenInstances.delete(args.jobId);
             return {
@@ -48227,9 +48616,9 @@ function createVideoTools(connector, outputHandler) {
 }
 
 // src/tools/multimedia/textToSpeech.ts
-function createTextToSpeechTool(connector, outputHandler) {
+function createTextToSpeechTool(connector, storage, userId) {
   const vendor = connector.vendor;
-  const handler = outputHandler ?? getMediaOutputHandler();
+  const handler = storage ?? getMediaStorage();
   const vendorModels = vendor ? getTTSModelsByVendor(vendor) : [];
   const modelNames = vendorModels.map((m) => m.name);
   const properties = {
@@ -48290,8 +48679,9 @@ function createTextToSpeechTool(connector, outputHandler) {
         }
       }
     },
-    execute: async (args) => {
+    execute: async (args, context) => {
       try {
+        const effectiveUserId = userId ?? context?.userId;
         const tts = TextToSpeech.create({
           connector,
           model: args.model,
@@ -48305,7 +48695,8 @@ function createTextToSpeechTool(connector, outputHandler) {
           type: "audio",
           format,
           model: args.model || modelNames[0] || "unknown",
-          vendor: vendor || "unknown"
+          vendor: vendor || "unknown",
+          userId: effectiveUserId
         });
         return {
           success: true,
@@ -48328,14 +48719,17 @@ function createTextToSpeechTool(connector, outputHandler) {
     }
   };
 }
-function createSpeechToTextTool(connector) {
+
+// src/tools/multimedia/speechToText.ts
+function createSpeechToTextTool(connector, storage, _userId) {
   const vendor = connector.vendor;
+  const handler = storage ?? getMediaStorage();
   const vendorModels = vendor ? getSTTModelsByVendor(vendor) : [];
   const modelNames = vendorModels.map((m) => m.name);
   const properties = {
-    audioFilePath: {
+    audioSource: {
       type: "string",
-      description: "Path to the audio file to transcribe"
+      description: "Path or location of the audio file to transcribe (file path, storage location, etc.)"
     }
   };
   if (modelNames.length > 0) {
@@ -48363,13 +48757,19 @@ function createSpeechToTextTool(connector) {
         parameters: {
           type: "object",
           properties,
-          required: ["audioFilePath"]
+          required: ["audioSource"]
         }
       }
     },
-    execute: async (args) => {
+    execute: async (args, _context) => {
       try {
-        const audioBuffer = await fs14.readFile(args.audioFilePath);
+        const audioBuffer = await handler.read(args.audioSource);
+        if (!audioBuffer) {
+          return {
+            success: false,
+            error: `Audio not found at: ${args.audioSource}`
+          };
+        }
         const stt = SpeechToText.create({
           connector,
           model: args.model,
@@ -48391,7 +48791,7 @@ function createSpeechToTextTool(connector) {
         };
       }
     },
-    describeCall: (args) => args.audioFilePath,
+    describeCall: (args) => args.audioSource,
     permission: {
       scope: "session",
       riskLevel: "low",
@@ -48406,21 +48806,22 @@ var VENDOR_CAPABILITIES = {
   [Vendor.Google]: ["image", "video", "tts"],
   [Vendor.Grok]: ["image", "video"]
 };
-function registerMultimediaTools() {
+function registerMultimediaTools(storage) {
   for (const [vendor, capabilities] of Object.entries(VENDOR_CAPABILITIES)) {
-    ConnectorTools.registerService(vendor, (connector, _userId) => {
+    ConnectorTools.registerService(vendor, (connector, userId) => {
+      const handler = getMediaStorage();
       const tools = [];
       if (capabilities.includes("image")) {
-        tools.push(createImageGenerationTool(connector));
+        tools.push(createImageGenerationTool(connector, handler, userId));
       }
       if (capabilities.includes("video")) {
-        tools.push(...createVideoTools(connector));
+        tools.push(...createVideoTools(connector, handler, userId));
       }
       if (capabilities.includes("tts")) {
-        tools.push(createTextToSpeechTool(connector));
+        tools.push(createTextToSpeechTool(connector, handler, userId));
       }
       if (capabilities.includes("stt")) {
-        tools.push(createSpeechToTextTool(connector));
+        tools.push(createSpeechToTextTool(connector, handler));
       }
       return tools;
     });
@@ -48430,6 +48831,851 @@ function registerMultimediaTools() {
 // src/tools/multimedia/index.ts
 registerMultimediaTools();
 
+// src/tools/github/types.ts
+function parseRepository(input) {
+  if (!input || input.trim().length === 0) {
+    throw new Error("Repository cannot be empty");
+  }
+  const trimmed = input.trim();
+  try {
+    const url2 = new URL(trimmed);
+    if (url2.hostname === "github.com" || url2.hostname === "www.github.com") {
+      const segments = url2.pathname.split("/").filter(Boolean);
+      if (segments.length >= 2) {
+        return { owner: segments[0], repo: segments[1].replace(/\.git$/, "") };
+      }
+    }
+  } catch {
+  }
+  const parts = trimmed.split("/");
+  if (parts.length === 2 && parts[0].length > 0 && parts[1].length > 0) {
+    return { owner: parts[0], repo: parts[1] };
+  }
+  throw new Error(
+    `Invalid repository format: "${input}". Expected "owner/repo" or "https://github.com/owner/repo"`
+  );
+}
+function resolveRepository(repository, connector) {
+  const repoStr = repository ?? connector.getOptions().defaultRepository;
+  if (!repoStr) {
+    return {
+      success: false,
+      error: 'No repository specified. Provide a "repository" parameter (e.g., "owner/repo") or configure defaultRepository on the connector.'
+    };
+  }
+  try {
+    return { success: true, repo: parseRepository(repoStr) };
+  } catch (err) {
+    return { success: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+var GitHubAPIError = class extends Error {
+  constructor(status, statusText, body) {
+    const msg = typeof body === "object" && body !== null && "message" in body ? body.message : statusText;
+    super(`GitHub API error ${status}: ${msg}`);
+    this.status = status;
+    this.statusText = statusText;
+    this.body = body;
+    this.name = "GitHubAPIError";
+  }
+};
+async function githubFetch(connector, endpoint, options) {
+  let url2 = endpoint;
+  if (options?.queryParams && Object.keys(options.queryParams).length > 0) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(options.queryParams)) {
+      params.append(key, String(value));
+    }
+    url2 += (url2.includes("?") ? "&" : "?") + params.toString();
+  }
+  const headers = {
+    "Accept": options?.accept ?? "application/vnd.github+json",
+    "X-GitHub-Api-Version": "2022-11-28"
+  };
+  if (options?.body) {
+    headers["Content-Type"] = "application/json";
+  }
+  const response = await connector.fetch(
+    url2,
+    {
+      method: options?.method ?? "GET",
+      headers,
+      body: options?.body ? JSON.stringify(options.body) : void 0
+    },
+    options?.userId
+  );
+  const text = await response.text();
+  let data;
+  try {
+    data = JSON.parse(text);
+  } catch {
+    data = text;
+  }
+  if (!response.ok) {
+    throw new GitHubAPIError(response.status, response.statusText, data);
+  }
+  return data;
+}
+
+// src/tools/github/searchFiles.ts
+function matchGlobPattern2(pattern, filePath) {
+  let regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "{{GLOBSTAR}}").replace(/\*/g, "[^/]*").replace(/\?/g, ".").replace(/\{\{GLOBSTAR\}\}/g, ".*");
+  regexPattern = "^" + regexPattern + "$";
+  try {
+    const regex = new RegExp(regexPattern);
+    return regex.test(filePath);
+  } catch {
+    return false;
+  }
+}
+function createSearchFilesTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "search_files",
+        description: `Search for files by name/path pattern in a GitHub repository.
+
+USAGE:
+- Supports glob patterns like "**/*.ts", "src/**/*.tsx"
+- Returns matching file paths sorted alphabetically
+- Uses the repository's file tree for fast matching
+
+PATTERN SYNTAX:
+- * matches any characters except /
+- ** matches any characters including /
+- ? matches a single character
+
+EXAMPLES:
+- Find all TypeScript files: { "pattern": "**/*.ts" }
+- Find files in src: { "pattern": "src/**/*.{ts,tsx}" }
+- Find package.json: { "pattern": "**/package.json" }
+- Search specific branch: { "pattern": "**/*.ts", "ref": "develop" }`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            pattern: {
+              type: "string",
+              description: 'Glob pattern to match files (e.g., "**/*.ts", "src/**/*.tsx")'
+            },
+            ref: {
+              type: "string",
+              description: "Branch, tag, or commit SHA. Defaults to the repository's default branch."
+            }
+          },
+          required: ["pattern"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [args.pattern];
+      if (args.repository) parts.push(`in ${args.repository}`);
+      if (args.ref) parts.push(`@${args.ref}`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "low",
+      approvalMessage: `Search files in a GitHub repository via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        let ref = args.ref;
+        if (!ref) {
+          const repoInfo = await githubFetch(
+            connector,
+            `/repos/${owner}/${repo}`,
+            { userId }
+          );
+          ref = repoInfo.default_branch;
+        }
+        const tree = await githubFetch(
+          connector,
+          `/repos/${owner}/${repo}/git/trees/${ref}?recursive=1`,
+          { userId }
+        );
+        const matching = tree.tree.filter(
+          (entry) => entry.type === "blob" && matchGlobPattern2(args.pattern, entry.path)
+        ).map((entry) => ({
+          path: entry.path,
+          size: entry.size ?? 0,
+          type: entry.type
+        })).sort((a, b) => a.path.localeCompare(b.path));
+        return {
+          success: true,
+          files: matching,
+          count: matching.length,
+          truncated: tree.truncated
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to search files: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/searchCode.ts
+function createSearchCodeTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "search_code",
+        description: `Search for code content across a GitHub repository.
+
+USAGE:
+- Search by keyword, function name, class name, or any text
+- Filter by language, path, or file extension
+- Returns matching files with text fragments showing context
+
+RATE LIMITS:
+- GitHub's code search API is limited to 30 requests per minute
+- Results may be incomplete for very large repositories
+
+EXAMPLES:
+- Find function: { "query": "function handleAuth", "language": "typescript" }
+- Find imports: { "query": "import React", "extension": "tsx" }
+- Search in path: { "query": "TODO", "path": "src/utils" }
+- Limit results: { "query": "console.log", "limit": 10 }`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            query: {
+              type: "string",
+              description: "Search query \u2014 keyword, function name, or any text to find in code"
+            },
+            language: {
+              type: "string",
+              description: 'Filter by programming language (e.g., "typescript", "python", "go")'
+            },
+            path: {
+              type: "string",
+              description: 'Filter by file path prefix (e.g., "src/", "lib/utils")'
+            },
+            extension: {
+              type: "string",
+              description: 'Filter by file extension without dot (e.g., "ts", "py", "go")'
+            },
+            limit: {
+              type: "number",
+              description: "Maximum number of results (default: 30, max: 100)"
+            }
+          },
+          required: ["query"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [`"${args.query}"`];
+      if (args.language) parts.push(`lang:${args.language}`);
+      if (args.repository) parts.push(`in ${args.repository}`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "low",
+      approvalMessage: `Search code in a GitHub repository via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        const qualifiers = [`repo:${owner}/${repo}`];
+        if (args.language) qualifiers.push(`language:${args.language}`);
+        if (args.path) qualifiers.push(`path:${args.path}`);
+        if (args.extension) qualifiers.push(`extension:${args.extension}`);
+        const q = `${args.query} ${qualifiers.join(" ")}`;
+        const perPage = Math.min(args.limit ?? 30, 100);
+        const result = await githubFetch(
+          connector,
+          `/search/code`,
+          {
+            userId,
+            // Request text-match fragments
+            accept: "application/vnd.github.text-match+json",
+            queryParams: { q, per_page: perPage }
+          }
+        );
+        const matches = result.items.map((item) => ({
+          file: item.path,
+          fragment: item.text_matches?.[0]?.fragment
+        }));
+        return {
+          success: true,
+          matches,
+          count: result.total_count,
+          truncated: result.incomplete_results || result.total_count > perPage
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to search code: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/readFile.ts
+function createGitHubReadFileTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "read_file",
+        description: `Read file content from a GitHub repository.
+
+USAGE:
+- Reads a file and returns content with line numbers
+- Supports line range selection with offset/limit for large files
+- By default reads up to 2000 lines from the beginning
+
+EXAMPLES:
+- Read entire file: { "path": "src/index.ts" }
+- Read specific branch: { "path": "README.md", "ref": "develop" }
+- Read lines 100-200: { "path": "src/app.ts", "offset": 100, "limit": 100 }
+- Specific repo: { "repository": "owner/repo", "path": "package.json" }
+
+NOTE: Files larger than 1MB are fetched via the Git Blob API. Very large files (>5MB) may be truncated.`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            path: {
+              type: "string",
+              description: 'File path within the repository (e.g., "src/index.ts")'
+            },
+            ref: {
+              type: "string",
+              description: "Branch, tag, or commit SHA. Defaults to the repository's default branch."
+            },
+            offset: {
+              type: "number",
+              description: "Line number to start reading from (1-indexed). Only provide if the file is too large."
+            },
+            limit: {
+              type: "number",
+              description: "Number of lines to read (default: 2000). Only provide if the file is too large."
+            }
+          },
+          required: ["path"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [args.path];
+      if (args.repository) parts.push(`in ${args.repository}`);
+      if (args.ref) parts.push(`@${args.ref}`);
+      if (args.offset && args.limit) parts.push(`[lines ${args.offset}-${args.offset + args.limit}]`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "low",
+      approvalMessage: `Read a file from a GitHub repository via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        let fileContent;
+        let fileSha;
+        let fileSize;
+        const refParam = args.ref ? `?ref=${encodeURIComponent(args.ref)}` : "";
+        const contentResp = await githubFetch(
+          connector,
+          `/repos/${owner}/${repo}/contents/${args.path}${refParam}`,
+          { userId }
+        );
+        if (contentResp.type !== "file") {
+          return {
+            success: false,
+            error: `Path is not a file: ${args.path} (type: ${contentResp.type}). Use search_files to explore the repository.`,
+            path: args.path
+          };
+        }
+        fileSha = contentResp.sha;
+        fileSize = contentResp.size;
+        if (contentResp.content && contentResp.encoding === "base64") {
+          fileContent = Buffer.from(contentResp.content, "base64").toString("utf-8");
+        } else if (contentResp.git_url) {
+          const blob = await githubFetch(
+            connector,
+            contentResp.git_url,
+            { userId }
+          );
+          fileContent = Buffer.from(blob.content, "base64").toString("utf-8");
+          fileSize = blob.size;
+        } else {
+          return {
+            success: false,
+            error: `Cannot read file content: ${args.path} (no content or git_url in response)`,
+            path: args.path
+          };
+        }
+        const offset = args.offset ?? 1;
+        const limit = args.limit ?? 2e3;
+        const allLines = fileContent.split("\n");
+        const totalLines = allLines.length;
+        const startIndex = Math.max(0, offset - 1);
+        const endIndex = Math.min(totalLines, startIndex + limit);
+        const selectedLines = allLines.slice(startIndex, endIndex);
+        const lineNumberWidth = String(endIndex).length;
+        const formattedLines = selectedLines.map((line, i) => {
+          const lineNum = startIndex + i + 1;
+          const paddedNum = String(lineNum).padStart(lineNumberWidth, " ");
+          const truncatedLine = line.length > 2e3 ? line.substring(0, 2e3) + "..." : line;
+          return `${paddedNum}	${truncatedLine}`;
+        });
+        const truncated = endIndex < totalLines;
+        const result = formattedLines.join("\n");
+        return {
+          success: true,
+          content: result,
+          path: args.path,
+          size: fileSize,
+          lines: totalLines,
+          truncated,
+          sha: fileSha
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to read file: ${error instanceof Error ? error.message : String(error)}`,
+          path: args.path
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/getPR.ts
+function createGetPRTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "get_pr",
+        description: `Get full details of a pull request from a GitHub repository.
+
+Returns: title, description, state, author, labels, reviewers, merge status, branches, file stats, and more.
+
+EXAMPLES:
+- Get PR: { "pull_number": 123 }
+- Specific repo: { "repository": "owner/repo", "pull_number": 456 }`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            pull_number: {
+              type: "number",
+              description: "Pull request number"
+            }
+          },
+          required: ["pull_number"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [`#${args.pull_number}`];
+      if (args.repository) parts.push(`in ${args.repository}`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "low",
+      approvalMessage: `Get pull request details from GitHub via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        const pr = await githubFetch(
+          connector,
+          `/repos/${owner}/${repo}/pulls/${args.pull_number}`,
+          { userId }
+        );
+        return {
+          success: true,
+          data: {
+            number: pr.number,
+            title: pr.title,
+            body: pr.body,
+            state: pr.state,
+            draft: pr.draft,
+            author: pr.user.login,
+            labels: pr.labels.map((l) => l.name),
+            reviewers: pr.requested_reviewers.map((r) => r.login),
+            mergeable: pr.mergeable,
+            head: pr.head.ref,
+            base: pr.base.ref,
+            url: pr.html_url,
+            created_at: pr.created_at,
+            updated_at: pr.updated_at,
+            additions: pr.additions,
+            deletions: pr.deletions,
+            changed_files: pr.changed_files
+          }
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to get PR: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/prFiles.ts
+function createPRFilesTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "pr_files",
+        description: `Get the files changed in a pull request with diffs.
+
+Returns: filename, status (added/modified/removed/renamed), additions, deletions, and patch (diff) content for each file.
+
+EXAMPLES:
+- Get files: { "pull_number": 123 }
+- Specific repo: { "repository": "owner/repo", "pull_number": 456 }
+
+NOTE: Very large diffs may be truncated by GitHub. Patch content may be absent for binary files.`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            pull_number: {
+              type: "number",
+              description: "Pull request number"
+            }
+          },
+          required: ["pull_number"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [`files for #${args.pull_number}`];
+      if (args.repository) parts.push(`in ${args.repository}`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "low",
+      approvalMessage: `Get PR changed files from GitHub via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        const files = await githubFetch(
+          connector,
+          `/repos/${owner}/${repo}/pulls/${args.pull_number}/files`,
+          {
+            userId,
+            queryParams: { per_page: 100 }
+          }
+        );
+        return {
+          success: true,
+          files: files.map((f) => ({
+            filename: f.filename,
+            status: f.status,
+            additions: f.additions,
+            deletions: f.deletions,
+            changes: f.changes,
+            patch: f.patch
+          })),
+          count: files.length
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to get PR files: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/prComments.ts
+function createPRCommentsTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "pr_comments",
+        description: `Get all comments and reviews on a pull request.
+
+Returns a unified list of:
+- **review_comment**: Line-level comments on specific code (includes file path and line number)
+- **review**: Full reviews (approve/request changes/comment)
+- **comment**: General comments on the PR (issue-level)
+
+All entries are sorted by creation date (oldest first).
+
+EXAMPLES:
+- Get comments: { "pull_number": 123 }
+- Specific repo: { "repository": "owner/repo", "pull_number": 456 }`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            pull_number: {
+              type: "number",
+              description: "Pull request number"
+            }
+          },
+          required: ["pull_number"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [`comments for #${args.pull_number}`];
+      if (args.repository) parts.push(`in ${args.repository}`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "low",
+      approvalMessage: `Get PR comments and reviews from GitHub via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        const basePath = `/repos/${owner}/${repo}`;
+        const queryOpts = { userId, queryParams: { per_page: 100 } };
+        const [reviewComments, reviews, issueComments] = await Promise.all([
+          githubFetch(
+            connector,
+            `${basePath}/pulls/${args.pull_number}/comments`,
+            queryOpts
+          ),
+          githubFetch(
+            connector,
+            `${basePath}/pulls/${args.pull_number}/reviews`,
+            queryOpts
+          ),
+          githubFetch(
+            connector,
+            `${basePath}/issues/${args.pull_number}/comments`,
+            queryOpts
+          )
+        ]);
+        const allComments = [];
+        for (const rc of reviewComments) {
+          allComments.push({
+            id: rc.id,
+            type: "review_comment",
+            author: rc.user.login,
+            body: rc.body,
+            created_at: rc.created_at,
+            path: rc.path,
+            line: rc.line ?? rc.original_line ?? void 0
+          });
+        }
+        for (const r of reviews) {
+          if (!r.body && r.state === "APPROVED") continue;
+          allComments.push({
+            id: r.id,
+            type: "review",
+            author: r.user.login,
+            body: r.body || `[${r.state}]`,
+            created_at: r.submitted_at,
+            state: r.state
+          });
+        }
+        for (const ic of issueComments) {
+          allComments.push({
+            id: ic.id,
+            type: "comment",
+            author: ic.user.login,
+            body: ic.body,
+            created_at: ic.created_at
+          });
+        }
+        allComments.sort(
+          (a, b) => new Date(a.created_at).getTime() - new Date(b.created_at).getTime()
+        );
+        return {
+          success: true,
+          comments: allComments,
+          count: allComments.length
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to get PR comments: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/createPR.ts
+function createCreatePRTool(connector, userId) {
+  return {
+    definition: {
+      type: "function",
+      function: {
+        name: "create_pr",
+        description: `Create a pull request on a GitHub repository.
+
+USAGE:
+- Specify source branch (head) and target branch (base)
+- Optionally create as draft
+
+EXAMPLES:
+- Create PR: { "title": "Add feature", "head": "feature-branch", "base": "main" }
+- Draft PR: { "title": "WIP: Refactor", "head": "refactor", "base": "develop", "draft": true }
+- With body: { "title": "Fix bug #42", "body": "Fixes the login issue\\n\\n## Changes\\n- Fixed auth flow", "head": "fix/42", "base": "main" }`,
+        parameters: {
+          type: "object",
+          properties: {
+            repository: {
+              type: "string",
+              description: 'Repository in "owner/repo" format or full GitHub URL. Optional if connector has a default repository.'
+            },
+            title: {
+              type: "string",
+              description: "Pull request title"
+            },
+            body: {
+              type: "string",
+              description: "Pull request description/body (Markdown supported)"
+            },
+            head: {
+              type: "string",
+              description: "Source branch name (the branch with your changes)"
+            },
+            base: {
+              type: "string",
+              description: 'Target branch name (the branch you want to merge into, e.g., "main")'
+            },
+            draft: {
+              type: "boolean",
+              description: "Create as a draft pull request (default: false)"
+            }
+          },
+          required: ["title", "head", "base"]
+        }
+      }
+    },
+    describeCall: (args) => {
+      const parts = [args.title];
+      if (args.repository) parts.push(`in ${args.repository}`);
+      return parts.join(" ");
+    },
+    permission: {
+      scope: "session",
+      riskLevel: "medium",
+      approvalMessage: `Create a pull request on GitHub via ${connector.displayName}`
+    },
+    execute: async (args) => {
+      const resolved = resolveRepository(args.repository, connector);
+      if (!resolved.success) {
+        return { success: false, error: resolved.error };
+      }
+      const { owner, repo } = resolved.repo;
+      try {
+        const pr = await githubFetch(
+          connector,
+          `/repos/${owner}/${repo}/pulls`,
+          {
+            method: "POST",
+            userId,
+            body: {
+              title: args.title,
+              body: args.body,
+              head: args.head,
+              base: args.base,
+              draft: args.draft ?? false
+            }
+          }
+        );
+        return {
+          success: true,
+          data: {
+            number: pr.number,
+            url: pr.html_url,
+            state: pr.state,
+            title: pr.title
+          }
+        };
+      } catch (error) {
+        return {
+          success: false,
+          error: `Failed to create PR: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+  };
+}
+
+// src/tools/github/register.ts
+function registerGitHubTools() {
+  ConnectorTools.registerService("github", (connector, userId) => {
+    return [
+      createSearchFilesTool(connector, userId),
+      createSearchCodeTool(connector, userId),
+      createGitHubReadFileTool(connector, userId),
+      createGetPRTool(connector, userId),
+      createPRFilesTool(connector, userId),
+      createPRCommentsTool(connector, userId),
+      createCreatePRTool(connector, userId)
+    ];
+  });
+}
+
+// src/tools/github/index.ts
+registerGitHubTools();
+
 // src/tools/registry.generated.ts
 var toolRegistry = [
   {
@@ -48483,7 +49729,7 @@ var toolRegistry = [
     displayName: "Read File",
     category: "filesystem",
     description: "Read content from a file on the local filesystem.",
-    tool: readFile4,
+    tool: readFile5,
     safeByDefault: true
   },
   {
@@ -48492,7 +49738,7 @@ var toolRegistry = [
     displayName: "Write File",
     category: "filesystem",
     description: "Write content to a file on the local filesystem.",
-    tool: writeFile4,
+    tool: writeFile5,
     safeByDefault: false
   },
   {
@@ -48721,8 +49967,8 @@ var ToolRegistry = class {
 
 // src/tools/index.ts
 var developerTools = [
-  readFile4,
-  writeFile4,
+  readFile5,
+  writeFile5,
   editFile,
   glob,
   grep,
@@ -48909,6 +50155,6 @@ REMEMBER: Keep it conversational, ask one question at a time, and only output th
   }
 };
 
-export { AGENT_DEFINITION_FORMAT_VERSION, AIError, APPROVAL_STATE_VERSION, Agent, AgentContextNextGen, ApproximateTokenEstimator, BaseMediaProvider, BasePluginNextGen, BaseProvider, BaseTextProvider, BraveProvider, CONNECTOR_CONFIG_VERSION, CONTEXT_SESSION_FORMAT_VERSION, CheckpointManager, CircuitBreaker, CircuitOpenError, Connector, ConnectorConfigStore, ConnectorTools, ConsoleMetrics, ContentType, ContextOverflowError, DEFAULT_ALLOWLIST, DEFAULT_BACKOFF_CONFIG, DEFAULT_BASE_DELAY_MS, DEFAULT_CHECKPOINT_STRATEGY, DEFAULT_CIRCUIT_BREAKER_CONFIG, DEFAULT_CONFIG2 as DEFAULT_CONFIG, DEFAULT_CONNECTOR_TIMEOUT, DEFAULT_CONTEXT_CONFIG, DEFAULT_FEATURES, DEFAULT_FILESYSTEM_CONFIG, DEFAULT_HISTORY_MANAGER_CONFIG, DEFAULT_MAX_DELAY_MS, DEFAULT_MAX_RETRIES, DEFAULT_MEMORY_CONFIG, DEFAULT_PERMISSION_CONFIG, DEFAULT_RATE_LIMITER_CONFIG, DEFAULT_RETRYABLE_STATUSES, DEFAULT_SHELL_CONFIG, DefaultCompactionStrategy, DependencyCycleError, ErrorHandler, ExecutionContext, ExternalDependencyHandler, FileAgentDefinitionStorage, FileConnectorStorage, FileContextStorage, FileMediaOutputHandler, FilePersistentInstructionsStorage, FileStorage, FrameworkLogger, HookManager, IMAGE_MODELS, IMAGE_MODEL_REGISTRY, ImageGeneration, InContextMemoryPluginNextGen, InMemoryAgentStateStorage, InMemoryHistoryStorage, InMemoryMetrics, InMemoryPlanStorage, InMemoryStorage, InvalidConfigError, InvalidToolArgumentsError, LLM_MODELS, LoggingPlugin, MCPClient, MCPConnectionError, MCPError, MCPProtocolError, MCPRegistry, MCPResourceError, MCPTimeoutError, MCPToolError, MEMORY_PRIORITY_VALUES, MODEL_REGISTRY, MemoryConnectorStorage, MemoryEvictionCompactor, MemoryStorage, MessageBuilder, MessageRole, ModelNotSupportedError, NoOpMetrics, OAuthManager, ParallelTasksError, PersistentInstructionsPluginNextGen, PlanningAgent, ProviderAuthError, ProviderConfigAgent, ProviderContextLengthError, ProviderError, ProviderErrorMapper, ProviderNotFoundError, ProviderRateLimitError, RapidAPIProvider, RateLimitError, SERVICE_DEFINITIONS, SERVICE_INFO, SERVICE_URL_PATTERNS, SIMPLE_ICONS_CDN, STT_MODELS, STT_MODEL_REGISTRY, ScopedConnectorRegistry, ScrapeProvider, SearchProvider, SerperProvider, Services, SpeechToText, StrategyRegistry, StreamEventType, StreamHelpers, StreamState, SummarizeCompactor, TERMINAL_TASK_STATUSES, TTS_MODELS, TTS_MODEL_REGISTRY, TaskTimeoutError, TaskValidationError, TavilyProvider, TextToSpeech, TokenBucketRateLimiter, ToolCallState, ToolExecutionError, ToolExecutionPipeline, ToolManager, ToolNotFoundError, ToolPermissionManager, ToolRegistry, ToolTimeoutError, TruncateCompactor, VENDORS, VENDOR_ICON_MAP, VIDEO_MODELS, VIDEO_MODEL_REGISTRY, Vendor, VideoGeneration, WorkingMemory, WorkingMemoryPluginNextGen, addJitter, allVendorTemplates, assertNotDestroyed, authenticatedFetch, backoffSequence, backoffWait, bash, buildAuthConfig, buildEndpointWithQuery, buildQueryString, calculateBackoff, calculateCost, calculateEntrySize, calculateImageCost, calculateSTTCost, calculateTTSCost, calculateVideoCost, canTaskExecute, createAgentStorage, createAuthenticatedFetch, createBashTool, createConnectorFromTemplate, createEditFileTool, createEstimator, createExecuteJavaScriptTool, createFileAgentDefinitionStorage, createFileContextStorage, createGlobTool, createGrepTool, createImageGenerationTool, createImageProvider, createListDirectoryTool, createMessageWithImages, createMetricsCollector, createPlan, createProvider, createReadFileTool, createSpeechToTextTool, createTask, createTextMessage, createTextToSpeechTool, createVideoProvider, createVideoTools, createWriteFileTool, defaultDescribeCall, detectDependencyCycle, detectServiceFromURL, developerTools, editFile, evaluateCondition, extractJSON, extractJSONField, extractNumber, findConnectorByServiceTypes, forPlan, forTasks, generateEncryptionKey, generateSimplePlan, generateWebAPITool, getActiveImageModels, getActiveModels, getActiveSTTModels, getActiveTTSModels, getActiveVideoModels, getAllBuiltInTools, getAllServiceIds, getAllVendorLogos, getAllVendorTemplates, getBackgroundOutput, getConnectorTools, getCredentialsSetupURL, getDocsURL, getImageModelInfo, getImageModelsByVendor, getImageModelsWithFeature, getMediaOutputHandler, getModelInfo, getModelsByVendor, getNextExecutableTasks, getRegisteredScrapeProviders, getSTTModelInfo, getSTTModelsByVendor, getSTTModelsWithFeature, getServiceDefinition, getServiceInfo, getServicesByCategory, getTTSModelInfo, getTTSModelsByVendor, getTTSModelsWithFeature, getTaskDependencies, getToolByName, getToolCallDescription, getToolCategories, getToolRegistry, getToolsByCategory, getToolsRequiringConnector, getVendorAuthTemplate, getVendorColor, getVendorInfo, getVendorLogo, getVendorLogoCdnUrl, getVendorLogoSvg, getVendorTemplate, getVideoModelInfo, getVideoModelsByVendor, getVideoModelsWithAudio, getVideoModelsWithFeature, glob, globalErrorHandler, grep, hasClipboardImage, hasVendorLogo, isBlockedCommand, isErrorEvent, isExcludedExtension, isKnownService, isOutputTextDelta, isResponseComplete, isSimpleScope, isStreamEvent, isTaskAwareScope, isTaskBlocked, isTerminalMemoryStatus, isTerminalStatus, isToolCallArgumentsDelta, isToolCallArgumentsDone, isToolCallStart, isVendor, killBackgroundProcess, listConnectorsByServiceTypes, listDirectory, listVendorIds, listVendors, listVendorsByAuthType, listVendorsByCategory, listVendorsWithLogos, logger, metrics, readClipboardImage, readFile4 as readFile, registerScrapeProvider, resolveConnector, resolveDependencies, retryWithBackoff, scopeEquals, scopeMatches, setMediaOutputHandler, setMetricsCollector, simpleTokenEstimator, toConnectorOptions, toolRegistry, tools_exports as tools, updateTaskStatus, validatePath, writeFile4 as writeFile };
+export { AGENT_DEFINITION_FORMAT_VERSION, AIError, APPROVAL_STATE_VERSION, Agent, AgentContextNextGen, ApproximateTokenEstimator, BaseMediaProvider, BasePluginNextGen, BaseProvider, BaseTextProvider, BraveProvider, CONNECTOR_CONFIG_VERSION, CONTEXT_SESSION_FORMAT_VERSION, CheckpointManager, CircuitBreaker, CircuitOpenError, Connector, ConnectorConfigStore, ConnectorTools, ConsoleMetrics, ContentType, ContextOverflowError, DEFAULT_ALLOWLIST, DEFAULT_BACKOFF_CONFIG, DEFAULT_BASE_DELAY_MS, DEFAULT_CHECKPOINT_STRATEGY, DEFAULT_CIRCUIT_BREAKER_CONFIG, DEFAULT_CONFIG2 as DEFAULT_CONFIG, DEFAULT_CONNECTOR_TIMEOUT, DEFAULT_CONTEXT_CONFIG, DEFAULT_FEATURES, DEFAULT_FILESYSTEM_CONFIG, DEFAULT_HISTORY_MANAGER_CONFIG, DEFAULT_MAX_DELAY_MS, DEFAULT_MAX_RETRIES, DEFAULT_MEMORY_CONFIG, DEFAULT_PERMISSION_CONFIG, DEFAULT_RATE_LIMITER_CONFIG, DEFAULT_RETRYABLE_STATUSES, DEFAULT_SHELL_CONFIG, DefaultCompactionStrategy, DependencyCycleError, ErrorHandler, ExecutionContext, ExternalDependencyHandler, FileAgentDefinitionStorage, FileConnectorStorage, FileContextStorage, FileMediaStorage as FileMediaOutputHandler, FileMediaStorage, FilePersistentInstructionsStorage, FileStorage, FrameworkLogger, HookManager, IMAGE_MODELS, IMAGE_MODEL_REGISTRY, ImageGeneration, InContextMemoryPluginNextGen, InMemoryAgentStateStorage, InMemoryHistoryStorage, InMemoryMetrics, InMemoryPlanStorage, InMemoryStorage, InvalidConfigError, InvalidToolArgumentsError, LLM_MODELS, LoggingPlugin, MCPClient, MCPConnectionError, MCPError, MCPProtocolError, MCPRegistry, MCPResourceError, MCPTimeoutError, MCPToolError, MEMORY_PRIORITY_VALUES, MODEL_REGISTRY, MemoryConnectorStorage, MemoryEvictionCompactor, MemoryStorage, MessageBuilder, MessageRole, ModelNotSupportedError, NoOpMetrics, OAuthManager, ParallelTasksError, PersistentInstructionsPluginNextGen, PlanningAgent, ProviderAuthError, ProviderConfigAgent, ProviderContextLengthError, ProviderError, ProviderErrorMapper, ProviderNotFoundError, ProviderRateLimitError, RapidAPIProvider, RateLimitError, SERVICE_DEFINITIONS, SERVICE_INFO, SERVICE_URL_PATTERNS, SIMPLE_ICONS_CDN, STT_MODELS, STT_MODEL_REGISTRY, ScopedConnectorRegistry, ScrapeProvider, SearchProvider, SerperProvider, Services, SpeechToText, StrategyRegistry, StreamEventType, StreamHelpers, StreamState, SummarizeCompactor, TERMINAL_TASK_STATUSES, TTS_MODELS, TTS_MODEL_REGISTRY, TaskTimeoutError, TaskValidationError, TavilyProvider, TextToSpeech, TokenBucketRateLimiter, ToolCallState, ToolExecutionError, ToolExecutionPipeline, ToolManager, ToolNotFoundError, ToolPermissionManager, ToolRegistry, ToolTimeoutError, TruncateCompactor, VENDORS, VENDOR_ICON_MAP, VIDEO_MODELS, VIDEO_MODEL_REGISTRY, Vendor, VideoGeneration, WorkingMemory, WorkingMemoryPluginNextGen, addJitter, allVendorTemplates, assertNotDestroyed, authenticatedFetch, backoffSequence, backoffWait, bash, buildAuthConfig, buildEndpointWithQuery, buildQueryString, calculateBackoff, calculateCost, calculateEntrySize, calculateImageCost, calculateSTTCost, calculateTTSCost, calculateVideoCost, canTaskExecute, createAgentStorage, createAuthenticatedFetch, createBashTool, createConnectorFromTemplate, createCreatePRTool, createEditFileTool, createEstimator, createExecuteJavaScriptTool, createFileAgentDefinitionStorage, createFileContextStorage, createFileMediaStorage, createGetPRTool, createGitHubReadFileTool, createGlobTool, createGrepTool, createImageGenerationTool, createImageProvider, createListDirectoryTool, createMessageWithImages, createMetricsCollector, createPRCommentsTool, createPRFilesTool, createPlan, createProvider, createReadFileTool, createSearchCodeTool, createSearchFilesTool, createSpeechToTextTool, createTask, createTextMessage, createTextToSpeechTool, createVideoProvider, createVideoTools, createWriteFileTool, defaultDescribeCall, detectDependencyCycle, detectServiceFromURL, developerTools, editFile, evaluateCondition, extractJSON, extractJSONField, extractNumber, findConnectorByServiceTypes, forPlan, forTasks, generateEncryptionKey, generateSimplePlan, generateWebAPITool, getActiveImageModels, getActiveModels, getActiveSTTModels, getActiveTTSModels, getActiveVideoModels, getAllBuiltInTools, getAllServiceIds, getAllVendorLogos, getAllVendorTemplates, getBackgroundOutput, getConnectorTools, getCredentialsSetupURL, getDocsURL, getImageModelInfo, getImageModelsByVendor, getImageModelsWithFeature, getMediaOutputHandler, getMediaStorage, getModelInfo, getModelsByVendor, getNextExecutableTasks, getRegisteredScrapeProviders, getSTTModelInfo, getSTTModelsByVendor, getSTTModelsWithFeature, getServiceDefinition, getServiceInfo, getServicesByCategory, getTTSModelInfo, getTTSModelsByVendor, getTTSModelsWithFeature, getTaskDependencies, getToolByName, getToolCallDescription, getToolCategories, getToolRegistry, getToolsByCategory, getToolsRequiringConnector, getVendorAuthTemplate, getVendorColor, getVendorDefaultBaseURL, getVendorInfo, getVendorLogo, getVendorLogoCdnUrl, getVendorLogoSvg, getVendorTemplate, getVideoModelInfo, getVideoModelsByVendor, getVideoModelsWithAudio, getVideoModelsWithFeature, glob, globalErrorHandler, grep, hasClipboardImage, hasVendorLogo, isBlockedCommand, isErrorEvent, isExcludedExtension, isKnownService, isOutputTextDelta, isResponseComplete, isSimpleScope, isStreamEvent, isTaskAwareScope, isTaskBlocked, isTerminalMemoryStatus, isTerminalStatus, isToolCallArgumentsDelta, isToolCallArgumentsDone, isToolCallStart, isVendor, killBackgroundProcess, listConnectorsByServiceTypes, listDirectory, listVendorIds, listVendors, listVendorsByAuthType, listVendorsByCategory, listVendorsWithLogos, logger, metrics, parseRepository, readClipboardImage, readFile5 as readFile, registerScrapeProvider, resolveConnector, resolveDependencies, resolveRepository, retryWithBackoff, scopeEquals, scopeMatches, setMediaOutputHandler, setMediaStorage, setMetricsCollector, simpleTokenEstimator, toConnectorOptions, toolRegistry, tools_exports as tools, updateTaskStatus, validatePath, writeFile5 as writeFile };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map