@pasko70/pibo 1.9.8 → 1.9.9

package/skills/builtin/skill-creator/scripts/utils.py

@@ -1,47 +1,47 @@
-"""Shared utilities for skill-creator scripts."""
-
-from pathlib import Path
-
-
-
-def parse_skill_md(skill_path: Path) -> tuple[str, str, str]:
-    """Parse a SKILL.md file, returning (name, description, full_content)."""
-    content = (skill_path / "SKILL.md").read_text()
-    lines = content.split("\n")
-
-    if lines[0].strip() != "---":
-        raise ValueError("SKILL.md missing frontmatter (no opening ---)")
-
-    end_idx = None
-    for i, line in enumerate(lines[1:], start=1):
-        if line.strip() == "---":
-            end_idx = i
-            break
-
-    if end_idx is None:
-        raise ValueError("SKILL.md missing frontmatter (no closing ---)")
-
-    name = ""
-    description = ""
-    frontmatter_lines = lines[1:end_idx]
-    i = 0
-    while i < len(frontmatter_lines):
-        line = frontmatter_lines[i]
-        if line.startswith("name:"):
-            name = line[len("name:"):].strip().strip('"').strip("'")
-        elif line.startswith("description:"):
-            value = line[len("description:"):].strip()
-            # Handle YAML multiline indicators (>, |, >-, |-)
-            if value in (">", "|", ">-", "|-"):
-                continuation_lines: list[str] = []
-                i += 1
-                while i < len(frontmatter_lines) and (frontmatter_lines[i].startswith("  ") or frontmatter_lines[i].startswith("\t")):
-                    continuation_lines.append(frontmatter_lines[i].strip())
-                    i += 1
-                description = " ".join(continuation_lines)
-                continue
-            else:
-                description = value.strip('"').strip("'")
-        i += 1
-
-    return name, description, content
+"""Shared utilities for skill-creator scripts."""
+
+from pathlib import Path
+
+
+
+def parse_skill_md(skill_path: Path) -> tuple[str, str, str]:
+    """Parse a SKILL.md file, returning (name, description, full_content)."""
+    content = (skill_path / "SKILL.md").read_text()
+    lines = content.split("\n")
+
+    if lines[0].strip() != "---":
+        raise ValueError("SKILL.md missing frontmatter (no opening ---)")
+
+    end_idx = None
+    for i, line in enumerate(lines[1:], start=1):
+        if line.strip() == "---":
+            end_idx = i
+            break
+
+    if end_idx is None:
+        raise ValueError("SKILL.md missing frontmatter (no closing ---)")
+
+    name = ""
+    description = ""
+    frontmatter_lines = lines[1:end_idx]
+    i = 0
+    while i < len(frontmatter_lines):
+        line = frontmatter_lines[i]
+        if line.startswith("name:"):
+            name = line[len("name:"):].strip().strip('"').strip("'")
+        elif line.startswith("description:"):
+            value = line[len("description:"):].strip()
+            # Handle YAML multiline indicators (>, |, >-, |-)
+            if value in (">", "|", ">-", "|-"):
+                continuation_lines: list[str] = []
+                i += 1
+                while i < len(frontmatter_lines) and (frontmatter_lines[i].startswith("  ") or frontmatter_lines[i].startswith("\t")):
+                    continuation_lines.append(frontmatter_lines[i].strip())
+                    i += 1
+                description = " ".join(continuation_lines)
+                continue
+            else:
+                description = value.strip('"').strip("'")
+        i += 1
+
+    return name, description, content

package/skills/builtin/web-annotations/SKILL.md

@@ -1,93 +1,93 @@
-# Web Annotations Setup Guide
-
-## Overview
-
-Web Annotations let a user mark elements on a live web page and send structured feedback to the current Pibo Session. The agent receives precise target metadata (selector, DOM path, bounding box, source hints) instead of vague text descriptions.
-
-## How It Works
-
-1. The user opens **Web Annotations** from Chat Web (Bug icon in the header).
-2. A browser target is bound to the current Pibo Session via Chrome DevTools Protocol (CDP).
-3. An overlay is injected into the page, letting the user click elements or place pins and write notes.
-4. Annotations are stored session-scoped and can be attached to messages.
-5. The agent sees structured context and can update annotation status via tools.
-
-## Prerequisites: A CDP-enabled Browser
-
-Web Annotations requires a Chrome/Chromium instance with an active remote debugging port. Without this, the "Refresh targets" button shows an error.
-
-### Local Development (User runs `pibo gateway` or `pibo gateway:web`)
-
-The user is already in a browser viewing Chat Web, but that browser tab is the **Chat UI itself**, not the target page to annotate. The user must either:
-
-**Option A: Start Chrome with remote debugging**
-```bash
-# macOS
-/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome \
-  --remote-debugging-port=9222 \
-  --user-data-dir=/tmp/pibo-chrome-profile
-
-# Linux
-chromium --remote-debugging-port=9222 \
-  --user-data-dir=/tmp/pibo-chrome-profile
-
-# Windows
-chrome.exe --remote-debugging-port=9222
-```
-
-Then in Chat Web:
-- Open the **Web Annotations** panel (Bug icon).
-- Enter `http://localhost:9222` in the **CDP URL** field (optional if auto-detected).
-- Click **Refresh** to list targets.
-- Click **Annotate URL** and enter the page to annotate, or attach an existing tab.
-
-**Option B: Use the Browser Use daemon (if running)**
-
-If a Browser Use worker is active (e.g., for Ralph jobs), it already runs Chromium with `--remote-debugging-port`. The CDP URL may differ from the default. Check `ps aux | grep remote-debugging-port` on the server or ask the operator for the active CDP port.
-
-**Option C: Docker Compute Worker**
-
-Docker workers typically expose their browser CDP endpoint. The operator should ensure the worker's CDP port is reachable from the gateway host. The CDP URL can then be entered in the panel.
-
-### Production (Remote Server)
-
-In production, the operator should configure a persistent Chrome instance or use a managed browser pool. The CDP URL can be set as a default via config or environment variable.
-
-## Using the Overlay
-
-Once a binding is created and injected:
-
-1. **Annotate mode** (default): Hover over elements to see a blue highlight. Click an element to open a note popup.
-2. **Pin mode**: Click anywhere on the page to mark a point.
-3. Write a note and click **Submit**.
-4. Return to Chat Web. The annotation appears in the session panel.
-5. Click **Attach** on the annotation chip before sending a message.
-
-## Agent Tools
-
-When the profile selects the `web-annotation-agent-tools` capability package, these tools are available:
-
-- `web_annotations_list` – list annotations for the current session.
-- `web_annotations_get` – inspect one annotation with full target metadata.
-- `web_annotations_watch` – wait briefly for new annotations.
-- `web_annotations_acknowledge` – mark an annotation as seen.
-- `web_annotations_resolve` – mark work as complete.
-- `web_annotations_dismiss` – close an irrelevant annotation.
-
-## Troubleshooting
-
-| Symptom | Cause | Fix |
-|---------|-------|-----|
-| "CDP unavailable" or "fetch failed" | No browser with `--remote-debugging-port` is running. | Start Chrome with `--remote-debugging-port=9222` (see Option A above). |
-| "No attachable browser targets found" | Chrome is running but has no open tabs/pages. | Open a page in Chrome, or use **Annotate URL** to open one automatically. |
-| "Target not found" | The selected tab was closed. | Refresh targets and select again, or re-inject the binding. |
-| "Injection failed" | The page blocked script evaluation or the target reloaded. | Reload the page and re-inject from Chat Web. |
-| Overlay disappears after reload | The overlay is runtime-only. | Re-inject via Chat Web for the same binding. |
-| Cross-origin iframe cannot be inspected | Browser security prevents top-level overlay from accessing frame content. | Annotate the iframe element itself, or open the framed page directly. |
-
-## Important Notes
-
-- Annotations are app resources keyed by Pibo Session ID and annotated page/resource metadata. They are visible through app context access and are not partitioned by login account.
-- The overlay does **not** modify the target page permanently. It is a runtime script injection.
-- Full DOM dumps, inline screenshots, or page HTML are **not** sent to the model by default. Only bounded metadata (selector, hints, note, viewport) is included.
-- The default CDP URL is `http://127.0.0.1:56663`. If your Chrome runs on a different port, enter it in the CDP URL field.
+# Web Annotations Setup Guide
+
+## Overview
+
+Web Annotations let a user mark elements on a live web page and send structured feedback to the current Pibo Session. The agent receives precise target metadata (selector, DOM path, bounding box, source hints) instead of vague text descriptions.
+
+## How It Works
+
+1. The user opens **Web Annotations** from Chat Web (Bug icon in the header).
+2. A browser target is bound to the current Pibo Session via Chrome DevTools Protocol (CDP).
+3. An overlay is injected into the page, letting the user click elements or place pins and write notes.
+4. Annotations are stored session-scoped and can be attached to messages.
+5. The agent sees structured context and can update annotation status via tools.
+
+## Prerequisites: A CDP-enabled Browser
+
+Web Annotations requires a Chrome/Chromium instance with an active remote debugging port. Without this, the "Refresh targets" button shows an error.
+
+### Local Development (User runs `pibo gateway` or `pibo gateway:web`)
+
+The user is already in a browser viewing Chat Web, but that browser tab is the **Chat UI itself**, not the target page to annotate. The user must either:
+
+**Option A: Start Chrome with remote debugging**
+```bash
+# macOS
+/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome \
+  --remote-debugging-port=9222 \
+  --user-data-dir=/tmp/pibo-chrome-profile
+
+# Linux
+chromium --remote-debugging-port=9222 \
+  --user-data-dir=/tmp/pibo-chrome-profile
+
+# Windows
+chrome.exe --remote-debugging-port=9222
+```
+
+Then in Chat Web:
+- Open the **Web Annotations** panel (Bug icon).
+- Enter `http://localhost:9222` in the **CDP URL** field (optional if auto-detected).
+- Click **Refresh** to list targets.
+- Click **Annotate URL** and enter the page to annotate, or attach an existing tab.
+
+**Option B: Use the Browser Use daemon (if running)**
+
+If a Browser Use worker is active (e.g., for Ralph jobs), it already runs Chromium with `--remote-debugging-port`. The CDP URL may differ from the default. Check `ps aux | grep remote-debugging-port` on the server or ask the operator for the active CDP port.
+
+**Option C: Docker Compute Worker**
+
+Docker workers typically expose their browser CDP endpoint. The operator should ensure the worker's CDP port is reachable from the gateway host. The CDP URL can then be entered in the panel.
+
+### Production (Remote Server)
+
+In production, the operator should configure a persistent Chrome instance or use a managed browser pool. The CDP URL can be set as a default via config or environment variable.
+
+## Using the Overlay
+
+Once a binding is created and injected:
+
+1. **Annotate mode** (default): Hover over elements to see a blue highlight. Click an element to open a note popup.
+2. **Pin mode**: Click anywhere on the page to mark a point.
+3. Write a note and click **Submit**.
+4. Return to Chat Web. The annotation appears in the session panel.
+5. Click **Attach** on the annotation chip before sending a message.
+
+## Agent Tools
+
+When the profile selects the `web-annotation-agent-tools` capability package, these tools are available:
+
+- `web_annotations_list` – list annotations for the current session.
+- `web_annotations_get` – inspect one annotation with full target metadata.
+- `web_annotations_watch` – wait briefly for new annotations.
+- `web_annotations_acknowledge` – mark an annotation as seen.
+- `web_annotations_resolve` – mark work as complete.
+- `web_annotations_dismiss` – close an irrelevant annotation.
+
+## Troubleshooting
+
+| Symptom | Cause | Fix |
+|---------|-------|-----|
+| "CDP unavailable" or "fetch failed" | No browser with `--remote-debugging-port` is running. | Start Chrome with `--remote-debugging-port=9222` (see Option A above). |
+| "No attachable browser targets found" | Chrome is running but has no open tabs/pages. | Open a page in Chrome, or use **Annotate URL** to open one automatically. |
+| "Target not found" | The selected tab was closed. | Refresh targets and select again, or re-inject the binding. |
+| "Injection failed" | The page blocked script evaluation or the target reloaded. | Reload the page and re-inject from Chat Web. |
+| Overlay disappears after reload | The overlay is runtime-only. | Re-inject via Chat Web for the same binding. |
+| Cross-origin iframe cannot be inspected | Browser security prevents top-level overlay from accessing frame content. | Annotate the iframe element itself, or open the framed page directly. |
+
+## Important Notes
+
+- Annotations are app resources keyed by Pibo Session ID and annotated page/resource metadata. They are visible through app context access and are not partitioned by login account.
+- The overlay does **not** modify the target page permanently. It is a runtime script injection.
+- Full DOM dumps, inline screenshots, or page HTML are **not** sent to the model by default. Only bounded metadata (selector, hints, note, viewport) is included.
+- The default CDP URL is `http://127.0.0.1:56663`. If your Chrome runs on a different port, enter it in the CDP URL field.

package/src/mcp/LICENSE.mcp-cli

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/api/simple-agent-api.js

@@ -1,136 +0,0 @@
-import { randomUUID, timingSafeEqual } from "node:crypto";
-import { PiboWebHttpError, readJsonBody, responseJson } from "../web/http.js";
-const DEFAULT_SEND_MESSAGE_TIMEOUT_MS = 10 * 60 * 1000;
-function configuredApiKey(options) {
-    return options.apiKey ?? process.env.PIBO_SIMPLE_API_KEY;
-}
-function safeEqual(left, right) {
-    const leftBuffer = Buffer.from(left);
-    const rightBuffer = Buffer.from(right);
-    if (leftBuffer.length !== rightBuffer.length)
-        return false;
-    return timingSafeEqual(leftBuffer, rightBuffer);
-}
-function decodeBasicAuthCredential(value) {
-    const match = value.match(/^Basic\s+(.+)$/i);
-    if (!match)
-        return [];
-    try {
-        const decoded = Buffer.from(match[1] ?? "", "base64").toString("utf8");
-        return decoded.split(":").map((part) => part.trim()).filter(Boolean);
-    }
-    catch {
-        return [];
-    }
-}
-function requestApiKeyCandidates(request) {
-    const candidates = [];
-    const add = (value) => {
-        let trimmed = value?.trim();
-        if (!trimmed)
-            return;
-        candidates.push(trimmed);
-        while (/^(Bearer|Token)\s+/i.test(trimmed)) {
-            trimmed = trimmed.replace(/^(Bearer|Token)\s+/i, "").trim();
-            if (trimmed)
-                candidates.push(trimmed);
-        }
-    };
-    add(request.headers.get("x-api-key"));
-    add(request.headers.get("api-key"));
-    const authorization = request.headers.get("authorization")?.trim();
-    add(authorization);
-    for (const credential of decodeBasicAuthCredential(authorization ?? ""))
-        add(credential);
-    return candidates;
-}
-function requireApiKey(request, options) {
-    const expected = configuredApiKey(options);
-    if (!expected)
-        throw new PiboWebHttpError("Simple agent API key is not configured", 503);
-    const candidates = requestApiKeyCandidates(request);
-    if (!candidates.some((candidate) => safeEqual(candidate, expected))) {
-        throw new PiboWebHttpError("Invalid API key", 401);
-    }
-}
-function requireString(value, name) {
-    if (typeof value !== "string" || value.trim().length === 0) {
-        throw new PiboWebHttpError(`${name} is required`, 400);
-    }
-    return value;
-}
-function parseSendMessageBody(body) {
-    return {
-        sessionId: requireString(body.sessionId, "sessionId"),
-        message: requireString(body.message, "message"),
-    };
-}
-function awaitAgentMessage(context, input) {
-    return new Promise((resolve, reject) => {
-        let lastAssistantMessage = "";
-        let settled = false;
-        let unsubscribe;
-        const finish = (callback) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timeout);
-            unsubscribe?.();
-            callback();
-        };
-        const timeout = setTimeout(() => {
-            finish(() => reject(new PiboWebHttpError("Timed out waiting for agent response", 504)));
-        }, input.timeoutMs);
-        unsubscribe = context.subscribe((event) => {
-            if (event.piboSessionId !== input.sessionId || !("eventId" in event) || event.eventId !== input.eventId)
-                return;
-            if (event.type === "assistant_message") {
-                lastAssistantMessage = event.text;
-                return;
-            }
-            if (event.type === "session_error") {
-                finish(() => reject(new PiboWebHttpError(event.error, 500)));
-                return;
-            }
-            if (event.type === "message_finished") {
-                finish(() => resolve({ eventId: input.eventId, sessionId: input.sessionId, message: lastAssistantMessage }));
-            }
-        });
-    });
-}
-async function handleSendMessage(request, context, options) {
-    requireApiKey(request, options);
-    const input = parseSendMessageBody(await readJsonBody(request));
-    if (!context.getSession(input.sessionId)) {
-        throw new PiboWebHttpError("Unknown sessionId", 404);
-    }
-    const eventId = randomUUID();
-    const responsePromise = awaitAgentMessage(context, {
-        sessionId: input.sessionId,
-        eventId,
-        timeoutMs: options.timeoutMs ?? DEFAULT_SEND_MESSAGE_TIMEOUT_MS,
-    });
-    await context.emit({
-        type: "message",
-        piboSessionId: input.sessionId,
-        id: eventId,
-        text: input.message,
-        source: "service",
-    });
-    return responseJson(await responsePromise);
-}
-export async function handleSimpleAgentApiRequest(request, context, options = {}) {
-    const url = new URL(request.url);
-    if (url.pathname === "/api/health") {
-        if (request.method !== "GET" && request.method !== "HEAD") {
-            return responseJson({ error: "Method not allowed" }, { status: 405, headers: { allow: "GET, HEAD" } });
-        }
-        return responseJson({ status: "ok" });
-    }
-    if (url.pathname !== "/api/send-message")
-        return undefined;
-    if (request.method !== "POST") {
-        return responseJson({ error: "Method not allowed" }, { status: 405, headers: { allow: "POST" } });
-    }
-    return handleSendMessage(request, context, options);
-}

package/dist/app-context.js

@@ -1,4 +0,0 @@
-export const PIBO_APP_CONTEXT = Object.freeze({
-    kind: "app-context",
-    id: "app",
-});

package/dist/apps/chat/agent-profiles.js

@@ -1,70 +0,0 @@
-import { InitialSessionContextBuilder } from "../../core/profiles.js";
-export function createCustomAgentProfileDefinition(agent, options = {}) {
-    const shouldWarnMissingReferences = options.missingReferenceMode !== "silent";
-    return {
-        name: agent.profileName,
-        aliases: uniqueAliases([agent.id, `custom-agent:${agent.id}`, ...agent.profileAliases], agent.profileName),
-        description: agent.description || agent.displayName,
-        create(context) {
-            const builder = new InitialSessionContextBuilder(agent.profileName)
-                .withBuiltinTools(agent.builtinTools)
-                .withBuiltinToolNames(agent.builtinToolNames)
-                .withAutoContextFiles(agent.autoContextFiles)
-                .withMcpServers(agent.mcpServers)
-                .withPiPackages(agent.piPackages.map((id) => ({ id })))
-                .withToolPackages({ runControl: agent.runControl });
-            if (agent.mainModel)
-                builder.withMainModel(agent.mainModel);
-            if (agent.subagentModel)
-                builder.withSubagentModel(agent.subagentModel);
-            if (agent.thinkingLevel)
-                builder.withThinkingLevel(agent.thinkingLevel);
-            if (agent.mainThinkingLevel)
-                builder.withMainThinkingLevel(agent.mainThinkingLevel);
-            if (agent.subagentThinkingLevel)
-                builder.withSubagentThinkingLevel(agent.subagentThinkingLevel);
-            if (agent.fast !== undefined)
-                builder.withFastMode(agent.fast);
-            if (agent.mainFast !== undefined)
-                builder.withMainFastMode(agent.mainFast);
-            if (agent.subagentFast !== undefined)
-                builder.withSubagentFastMode(agent.subagentFast);
-            for (const skillName of agent.skills) {
-                try {
-                    builder.addSkill(context.getSkill(skillName));
-                }
-                catch (error) {
-                    if (!isUnknownSkillError(error, skillName))
-                        throw error;
-                    if (shouldWarnMissingReferences)
-                        console.warn(`Skipping unknown skill "${skillName}" for custom agent "${agent.profileName}"`);
-                }
-            }
-            for (const contextFileKey of agent.contextFiles) {
-                try {
-                    builder.addContextFile(context.getContextFile(contextFileKey));
-                }
-                catch (error) {
-                    if (!isUnknownContextFileError(error, contextFileKey))
-                        throw error;
-                    if (shouldWarnMissingReferences)
-                        console.warn(`Skipping unknown context file "${contextFileKey}" for custom agent "${agent.profileName}"`);
-                }
-            }
-            for (const toolName of agent.nativeTools)
-                builder.addTool(context.getTool(toolName));
-            for (const subagent of agent.subagents)
-                builder.addSubagent(subagent);
-            return builder.createSession();
-        },
-    };
-}
-function uniqueAliases(aliases, profileName) {
-    return [...new Set(aliases.filter((alias) => alias && alias !== profileName))];
-}
-function isUnknownContextFileError(error, contextFileKey) {
-    return error instanceof Error && error.message === `Unknown context file "${contextFileKey}"`;
-}
-function isUnknownSkillError(error, skillName) {
-    return error instanceof Error && error.message === `Unknown skill "${skillName}"`;
-}