@htooayelwinict/appv23 2.3.1 → 2.3.2

package/README.md

@@ -25,6 +25,14 @@ ghcr.io/htooayelwinict/appv23:production
 
 It mounts only the selected `--cwd` as `/workspace`, stores sandbox state in `~/.appv23/sandbox-home`, copies host `~/.agents/AGENTS.md` into the sandbox agent context, and copies host `~/.agents/skills` into the sandbox.
 
+On startup, the package restores compact default agent files only when they are missing:
+
+- `~/.agents/AGENTS.md`
+- `~/.agents/skills/web-search/SKILL.md`
+- bundled package skills such as `subagent-delegation`
+
+Existing user files are never overwritten.
+
 ## Options
 
 ```bash

package/agents/AGENTS.md

@@ -0,0 +1,25 @@
+# appv23 Agent Kernel
+
+This is the default appv23 user-level agent prompt. It is installed only when
+`~/.agents/AGENTS.md` is missing. Edit the host file to customize behavior.
+
+## Core behavior
+
+- Treat the selected `--cwd` as the normal workspace boundary.
+- Do not read or write outside the workspace unless the user explicitly allows it.
+- Keep the main agent direct and lightweight for ordinary requests.
+- Use skills only when the user asks for that capability or the task clearly needs it.
+- Prefer concise tool use and avoid repeated no-progress tool calls.
+- Do not expose API keys, auth files, or other secrets.
+
+## Skill routing
+
+- Use `web-search` only for current public information, recent facts, news, sports/results, or explicit web-search requests.
+- Use `subagent-delegation` only for explicit subagent requests, `/subagents` workflows, review/QA delegation, or large independent workstreams.
+- For normal coding, act as the main agent without spawning subagents.
+
+## Sandbox expectations
+
+- The Docker sandbox mounts only the selected workspace and appv23 state.
+- API keys configured through `/login` live in appv23 sandbox state, not in project files.
+- If a path is blocked or outside scope, ask for explicit authorization instead of guessing.

package/bin/appv23.js

@@ -225,10 +225,51 @@ function prepareSandboxImports(config, runtime = {}) {
   const homeDir = runtime.homeDir || os.homedir();
   const packageRoot = runtime.packageRoot || path.resolve(__dirname, "..");
   fs.mkdirSync(config.agentHome, { recursive: true, mode: 0o700 });
+  seedHostDefaults(homeDir, packageRoot);
   prepareAgentsFiles(config, homeDir);
   prepareSkills(config, homeDir, packageRoot);
 }
 
+function seedHostDefaults(homeDir, packageRoot) {
+  seedHostAgentsFile(homeDir, packageRoot);
+  seedHostSkills(homeDir, packageRoot);
+}
+
+function seedHostAgentsFile(homeDir, packageRoot) {
+  const source = path.join(packageRoot, "agents", "AGENTS.md");
+  const target = path.join(homeDir, ".agents", "AGENTS.md");
+  if (!fs.existsSync(source) || fs.existsSync(target)) {
+    return;
+  }
+  copyFileSafe(source, target);
+}
+
+function seedHostSkills(homeDir, packageRoot) {
+  const sourceRoot = path.join(packageRoot, "skills");
+  const targetRoot = path.join(homeDir, ".agents", "skills");
+  if (!fs.existsSync(sourceRoot)) {
+    return;
+  }
+  for (const child of fs.readdirSync(sourceRoot).sort()) {
+    const source = path.join(sourceRoot, child);
+    if (shouldSkipImport(source)) {
+      continue;
+    }
+    const stat = fs.statSync(source);
+    if (stat.isDirectory()) {
+      const target = path.join(targetRoot, child);
+      if (!fs.existsSync(target)) {
+        copyTreeSafe(source, target);
+      }
+    } else if (stat.isFile() && path.extname(source) === ".md") {
+      const target = path.join(targetRoot, child);
+      if (!fs.existsSync(target)) {
+        copyFileSafe(source, target);
+      }
+    }
+  }
+}
+
 function prepareAgentsFiles(config, homeDir = os.homedir()) {
   const sources = collectAgentsFiles(config, homeDir);
   const target = path.join(config.agentHome, "agent", "AGENTS.md");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@htooayelwinict/appv23",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "description": "npx-friendly Docker launcher for the appv23 coding-agent sandbox.",
   "license": "MIT",
   "bin": {
@@ -8,6 +8,7 @@
     "appv23-sandbox": "bin/appv23.js"
   },
   "files": [
+    "agents/**/*.md",
     "bin/appv23.js",
     "skills/**/*.md",
     "README.md",

package/skills/web-search/SKILL.md

@@ -0,0 +1,51 @@
+---
+name: web-search
+description: Use when the user explicitly asks for web search, current facts, latest news, recent public information, or sports/current-result lookup.
+---
+
+# Web Search
+
+Use this skill only for web/current-information tasks. Do not use it for local
+repo inspection, code edits, or ordinary reasoning.
+
+## Rules
+
+- Use `curl` plus Python standard library parsing.
+- Prefer Google News RSS for news/current-result lookup:
+  `https://news.google.com/rss/search?q=<encoded-query>&hl=en-US&gl=US&ceid=US:en`
+- Keep output small: show at most 5 useful results.
+- Do not print raw HTML/XML.
+- Do not write files.
+- If live search fails, say exactly what failed and suggest a direct source.
+
+## Minimal command pattern
+
+```bash
+python3 - <<'PY'
+import html
+import sys
+import urllib.parse
+import urllib.request
+import xml.etree.ElementTree as ET
+
+query = " ".join(sys.argv[1:]).strip() or "latest news"
+url = "https://news.google.com/rss/search?q={}&hl=en-US&gl=US&ceid=US:en".format(
+    urllib.parse.quote_plus(query)
+)
+req = urllib.request.Request(url, headers={"User-Agent": "Mozilla/5.0"})
+with urllib.request.urlopen(req, timeout=15) as response:
+    data = response.read()
+root = ET.fromstring(data)
+for index, item in enumerate(root.findall("./channel/item")[:5], 1):
+    title = html.unescape(item.findtext("title") or "").strip()
+    link = html.unescape(item.findtext("link") or "").strip()
+    pub_date = html.unescape(item.findtext("pubDate") or "").strip()
+    print(f"{index}. {title}")
+    if pub_date:
+        print(f"   date: {pub_date}")
+    if link:
+        print(f"   source: {link}")
+PY
+```
+
+Replace the query in the command with the user's requested search.