@lazyingart/agintiflow 0.8.12 → 0.9.0

package/src/model-client.js

@@ -1,6 +1,7 @@
 import OpenAI from "openai";
 import { normalizeWrapperName, wrapperStatusText } from "./tool-wrappers.js";
 import { getTaskProfile } from "./task-profiles.js";
+import { listAuxiliarySkills } from "./auxiliary-tools.js";
 
 export function createClient(config) {
   if (config.provider === "mock") {
@@ -137,6 +138,18 @@ function mockCanvasToolForGoal(goal = "") {
   });
 }
 
+function mockAuxiliaryToolForGoal(goal = "") {
+  const text = String(goal || "").toLowerCase();
+  if (!/\b(image|picture|photo|illustration|cover|poster|logo|generate art|draw a)\b/.test(text)) return null;
+  return mockToolCall("generate_image", {
+    prompt: `Mock image generation request: ${goal}`,
+    outputDir: "artifacts/images/mock-image",
+    outputStem: "mock-image",
+    aspectRatio: "1:1",
+    dryRun: true,
+  });
+}
+
 function mockChatResponse(content, toolCalls = []) {
   return {
     choices: [
@@ -186,6 +199,11 @@ export async function createPlan(client, config, state) {
           config.allowWrapperTools
             ? `Agent wrappers are enabled. Use the selected wrapper only: ${normalizeWrapperName(config.preferredWrapper)}. Status: ${wrapperStatusText()}.`
             : "",
+          config.allowAuxiliaryTools
+            ? `Auxiliary skills are enabled: ${listAuxiliarySkills()
+                .map((skill) => `${skill.id} via ${skill.toolName} (${skill.available ? "key available" : `needs ${skill.keyName}`})`)
+                .join(", ")}. For raster image generation requests, plan to use generate_image when a GRSAI key is available; otherwise ask the user to run /auxilliary grsai or aginti login grsai.`
+            : "Auxiliary skills are disabled for this run.",
           `Task profile: ${taskProfile.label}. ${taskProfile.prompt}`,
           "A canvas/artifacts tunnel is available through send_to_canvas. Use it when an output should be highlighted visually, such as screenshots, image files, important markdown, diffs, or generated artifact paths. It is optional for ordinary text answers.",
           "Work like a practical coding agent: inspect when useful, edit with file tools, run safe checks when they add confidence, and keep outputs inside the workspace.",
@@ -514,6 +532,35 @@ export async function requestNextStep(client, config, messages) {
     });
   }
 
+  if (config.allowAuxiliaryTools) {
+    tools.splice(-1, 0, {
+      type: "function",
+      function: {
+        name: "generate_image",
+        description:
+          "Generate a raster image artifact through the optional GRS AI Nano Banana image-generation skill. Use for user requests that explicitly need a real image/photo/illustration/cover/poster/logo concept rather than SVG/code-native graphics. Saves prompt, redacted payload, manifest, and downloaded images in the workspace. If the GRSAI key is missing, ask the user to run /auxilliary grsai or aginti login grsai.",
+        parameters: {
+          type: "object",
+          properties: {
+            prompt: { type: "string", description: "Detailed image-generation prompt." },
+            outputDir: { type: "string", description: "Workspace-relative output directory. Defaults to artifacts/images/<timestamp>." },
+            outputStem: { type: "string", description: "Filename stem for downloaded images." },
+            aspectRatio: { type: "string", description: "Aspect ratio such as 1:1, 16:9, 2:3, or 3:2." },
+            imageSize: { type: "string", description: "Image size such as 1K, 2K, or 4K." },
+            model: { type: "string", description: "Image model. Defaults to nano-banana-2." },
+            referenceImages: {
+              type: "array",
+              items: { type: "string" },
+              description: "Optional workspace-relative image paths, HTTPS URLs, or data URLs.",
+            },
+          },
+          required: ["prompt"],
+          additionalProperties: false,
+        },
+      },
+    });
+  }
+
   tools.splice(-1, 0, {
     type: "function",
     function: {
@@ -590,6 +637,13 @@ export async function requestNextStep(client, config, messages) {
       }
     }
 
+    if (config.allowAuxiliaryTools) {
+      const auxiliaryTool = mockAuxiliaryToolForGoal(config.goal);
+      if (auxiliaryTool) {
+        return mockChatResponse("Mock mode will exercise an auxiliary skill tool in dry-run mode.", [auxiliaryTool]);
+      }
+    }
+
     const canvasTool = mockCanvasToolForGoal(config.goal);
     if (canvasTool) {
       return mockChatResponse("Mock mode will publish a canvas artifact for the UI tunnel.", [canvasTool]);

package/src/project.js

@@ -15,6 +15,8 @@ const LOCAL_ENV_KEYS = new Set([
   "DEEPSEEK_FAST_MODEL",
   "DEEPSEEK_PRO_MODEL",
   "OPENAI_DEFAULT_MODEL",
+  "GRSAI",
+  "GRSAI_API_KEY",
 ]);
 
 export function resolveProjectRoot(input = process.cwd()) {
@@ -27,6 +29,7 @@ export function projectPaths(projectRoot = process.cwd()) {
     root,
     controlDir: path.join(root, ".aginti"),
     envPath: path.join(root, ".aginti", ".env"),
+    rootEnvPath: path.join(root, ".env"),
     envExamplePath: path.join(root, ".aginti", ".env.example"),
     controlReadmePath: path.join(root, ".aginti", "README.md"),
     notesDir: path.join(root, "notes"),
@@ -59,19 +62,24 @@ export function parseEnvText(text = "") {
 
 export function loadProjectEnv(projectRoot = process.cwd(), { override = false } = {}) {
   const paths = projectPaths(projectRoot);
-  let loaded = false;
-  try {
-    const parsed = parseEnvText(fs.readFileSync(paths.envPath, "utf8"));
-    for (const [key, value] of Object.entries(parsed)) {
-      if (override || !process.env[key]) process.env[key] = value;
+  const envPaths = [paths.rootEnvPath, paths.envPath];
+  const loadedPaths = [];
+  for (const envPath of envPaths) {
+    try {
+      const parsed = parseEnvText(fs.readFileSync(envPath, "utf8"));
+      if (Object.keys(parsed).length === 0) continue;
+      for (const [key, value] of Object.entries(parsed)) {
+        if (override || !process.env[key]) process.env[key] = value;
+      }
+      loadedPaths.push(envPath);
+    } catch {
+      // Ignore missing or unreadable optional local env files.
     }
-    loaded = true;
-  } catch {
-    loaded = false;
   }
   return {
-    loaded,
+    loaded: loadedPaths.length > 0,
     path: paths.envPath,
+    paths: loadedPaths,
   };
 }
 
@@ -137,6 +145,7 @@ export async function initProject(projectRoot = process.cwd()) {
       "# Copy values into .aginti/.env. Never commit real secrets.",
       "DEEPSEEK_API_KEY=",
       "OPENAI_API_KEY=",
+      "GRSAI=",
       "DEEPSEEK_FAST_MODEL=deepseek-v4-flash",
       "DEEPSEEK_PRO_MODEL=deepseek-v4-pro",
       "",
@@ -153,6 +162,8 @@ export async function initProject(projectRoot = process.cwd()) {
   );
 
   const gitignore = await ensureLine(paths.gitignorePath, [
+    ".env",
+    ".env.*",
     ".aginti/.env",
     ".aginti/.env.*",
     "!.aginti/.env.example",
@@ -177,21 +188,31 @@ export function providerKeyStatus(projectRoot = process.cwd()) {
   return {
     openai: Boolean(process.env.OPENAI_API_KEY || process.env.LLM_API_KEY),
     deepseek: Boolean(process.env.DEEPSEEK_API_KEY || process.env.LLM_API_KEY),
+    grsai: Boolean(process.env.GRSAI || process.env.GRSAI_API_KEY),
     mock: true,
     localEnv: env.loaded,
     localEnvPath: env.path,
     envVars: {
       openai: ["OPENAI_API_KEY", "LLM_API_KEY"],
       deepseek: ["DEEPSEEK_API_KEY", "LLM_API_KEY"],
+      grsai: ["GRSAI", "GRSAI_API_KEY"],
     },
   };
 }
 
 export async function setProviderKey(projectRoot, provider, value) {
   const normalizedProvider = String(provider || "").toLowerCase();
-  const keyName = normalizedProvider === "openai" ? "OPENAI_API_KEY" : "DEEPSEEK_API_KEY";
-  if (!["deepseek", "openai"].includes(normalizedProvider)) {
-    throw new Error("Provider must be deepseek or openai.");
+  const aliases = {
+    auxiliary: "grsai",
+    auxilliary: "grsai",
+    image: "grsai",
+    imagegen: "grsai",
+  };
+  const canonicalProvider = aliases[normalizedProvider] || normalizedProvider;
+  const keyName =
+    canonicalProvider === "openai" ? "OPENAI_API_KEY" : canonicalProvider === "grsai" ? "GRSAI" : "DEEPSEEK_API_KEY";
+  if (!["deepseek", "openai", "grsai"].includes(canonicalProvider)) {
+    throw new Error("Provider must be deepseek, openai, or grsai.");
   }
 
   const keyValue = String(value || "").trim();
@@ -220,7 +241,7 @@ export async function setProviderKey(projectRoot, provider, value) {
   loadProjectEnv(projectRoot, { override: true });
   return {
     ok: true,
-    provider: normalizedProvider,
+    provider: canonicalProvider,
     keyName,
     path: paths.envPath,
   };
@@ -324,6 +345,7 @@ export async function doctorReport(projectRoot, packageVersion, config) {
     keys: {
       openai: keyStatus.openai,
       deepseek: keyStatus.deepseek,
+      grsai: keyStatus.grsai,
       mock: true,
     },
     sandbox: dockerStatus,

package/src/redaction.js

@@ -2,7 +2,7 @@ const SECRET_PATTERNS = [
   /\bsk-[A-Za-z0-9_-]{16,}\b/g,
   /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
   /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
-  /((?:api[_-]?key|token|secret|password|passwd|npm_token|_authToken)\s*[:=]\s*)[^\s"'`]+/gi,
+  /((?:api[_-]?key|token|secret|password|passwd|npm_token|_authToken|grsai)\s*[:=]\s*)[^\s"'`]+/gi,
   /(\/\/registry\.npmjs\.org\/:_authToken=)[^\s"'`]+/gi,
   /(Authorization:\s*Bearer\s+)[^\s"'`]+/gi,
 ];

package/src/task-profiles.js

@@ -55,6 +55,13 @@ export const TASK_PROFILES = {
       "For website/app tasks, create or inspect real site files, preview with workspace preview tools, add local checks when useful, and use the configured sandbox/package policy for dependencies.",
     tools: ["files", "shell", "canvas", "sandbox"],
   },
+  image: {
+    id: "image",
+    label: "Image generation",
+    prompt:
+      "For raster image, cover, poster, illustration, photo, and logo-concept tasks, write a clear visual prompt, use generate_image when the optional GRS AI key is available, save outputs under artifacts/images, and send the selected image to the canvas. If the key is missing, ask the user to run /auxilliary grsai or aginti login grsai.",
+    tools: ["auxiliary:image_generation", "files", "canvas"],
+  },
   aaps: {
     id: "aaps",
     label: "AAPS",

package/src/workspace-tools.js

@@ -110,8 +110,10 @@ function isSensitivePath(relativePath) {
   const segments = pathSegments(relativePath);
   const basename = segments.at(-1) || "";
   const lowerBase = basename.toLowerCase();
+  const lowerSegments = segments.map((segment) => segment.toLowerCase());
   const lowerPath = normalizeRelative(relativePath).toLowerCase();
   if (segments.includes(".git")) return true;
+  if (lowerSegments.some((segment) => segment === ".env" || segment.startsWith(".env."))) return true;
   if (lowerBase === ".env" || lowerBase.startsWith(".env.")) return true;
   if (SENSITIVE_BASENAMES.has(lowerBase)) return true;
   if (SENSITIVE_EXTENSIONS.has(path.extname(lowerBase))) return true;

package/web.js

@@ -141,6 +141,8 @@ function normalizePreferencePayload(body = {}, current = db.getPreferences()) {
     taskProfile: normalizeTaskProfile(body.taskProfile || current.taskProfile || "auto"),
     allowShellTool: typeof body.allowShellTool === "boolean" ? body.allowShellTool : Boolean(current.allowShellTool),
     allowFileTools: typeof body.allowFileTools === "boolean" ? body.allowFileTools : current.allowFileTools !== false,
+    allowAuxiliaryTools:
+      typeof body.allowAuxiliaryTools === "boolean" ? body.allowAuxiliaryTools : current.allowAuxiliaryTools !== false,
     allowWrapperTools:
       typeof body.allowWrapperTools === "boolean" ? body.allowWrapperTools : Boolean(current.allowWrapperTools),
     preferredWrapper: normalizeWrapperName(body.preferredWrapper || current.preferredWrapper || "codex"),
@@ -183,6 +185,7 @@ function publicKeyStatus(projectRoot = baseDir) {
   return {
     openai: status.openai,
     deepseek: status.deepseek,
+    grsai: status.grsai,
     mock: true,
     localEnv: status.localEnv,
     envVars: status.envVars,
@@ -217,6 +220,7 @@ function buildRunConfig(body, overrides = {}) {
       allowDestructive: merged.allowDestructive,
       allowShellTool: merged.allowShellTool,
       allowFileTools: merged.allowFileTools,
+      allowAuxiliaryTools: merged.allowAuxiliaryTools,
       allowWrapperTools: merged.allowWrapperTools,
       preferredWrapper: merged.preferredWrapper,
       wrapperTimeoutMs: merged.wrapperTimeoutMs,