@project-ava-supernova/core 0.2.71

package/dist/tools/research-story.d.ts

@@ -0,0 +1,29 @@
+import type { Tool, ToolResult, ToolExecutionContext, ToolRiskLevel } from './types.js';
+import type { FunctionSchema } from '../providers/types.js';
+/**
+ * Stand a story up before writing it.
+ *
+ * Pulls what several outlets actually published and hands back: who covered it,
+ * their EXACT headlines, short verbatim excerpts, URLs — and, critically, which
+ * of them are running the SAME WIRE COPY rather than doing independent work.
+ *
+ * Two things happen here that the rest of the Newsroom depends on:
+ *
+ *   1. `independent_sources` is computed, not counted. Forty-seven outlets
+ *      carrying one Reuters report is ONE source echoed. Handing the model a raw
+ *      total would invite it to write "confirmed by 47 outlets", which is a lie
+ *      dressed as corroboration — the exact trick this newsroom exists to expose.
+ *
+ *   2. Everything fetched is stashed in `fetchedCorpus` so write_article can
+ *      VERIFY her quotes against it. That is what turns "quote verbatim from a
+ *      page you fetched" from an honour system into an enforced rule.
+ */
+export declare class ResearchStoryTool implements Tool {
+    readonly name = "research_story";
+    readonly description = "Stand a story up. Pulls MULTIPLE outlets and returns who covered it, their exact headlines, verbatim excerpts, URLs \u2014 and which are the same wire copy rather than independent reporting. Call this before every article. `independent_sources` is the number that means something.";
+    readonly riskLevel: ToolRiskLevel;
+    readonly requiresConfirmation = false;
+    readonly schema: FunctionSchema;
+    execute(args: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=research-story.d.ts.map

package/dist/tools/research-story.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"research-story.d.ts","sourceRoot":"","sources":["../../src/tools/research-story.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,iBAAkB,YAAW,IAAI;IAC5C,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,WAAW,8RACoQ;IACxR,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAU;IAC3C,QAAQ,CAAC,oBAAoB,SAAS;IAEtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAY7B;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;CA8CjG"}

package/dist/tools/research-story.js

@@ -0,0 +1,78 @@
+import { summariseCoverage } from '../news/index.js';
+/**
+ * Stand a story up before writing it.
+ *
+ * Pulls what several outlets actually published and hands back: who covered it,
+ * their EXACT headlines, short verbatim excerpts, URLs — and, critically, which
+ * of them are running the SAME WIRE COPY rather than doing independent work.
+ *
+ * Two things happen here that the rest of the Newsroom depends on:
+ *
+ *   1. `independent_sources` is computed, not counted. Forty-seven outlets
+ *      carrying one Reuters report is ONE source echoed. Handing the model a raw
+ *      total would invite it to write "confirmed by 47 outlets", which is a lie
+ *      dressed as corroboration — the exact trick this newsroom exists to expose.
+ *
+ *   2. Everything fetched is stashed in `fetchedCorpus` so write_article can
+ *      VERIFY her quotes against it. That is what turns "quote verbatim from a
+ *      page you fetched" from an honour system into an enforced rule.
+ */
+export class ResearchStoryTool {
+    name = 'research_story';
+    description = 'Stand a story up. Pulls MULTIPLE outlets and returns who covered it, their exact headlines, verbatim excerpts, URLs — and which are the same wire copy rather than independent reporting. Call this before every article. `independent_sources` is the number that means something.';
+    riskLevel = 'safe';
+    requiresConfirmation = false;
+    schema = {
+        name: 'research_story',
+        description: 'Stand a story up before you write it. Returns who covered it, their EXACT headlines, short verbatim excerpts and URLs — plus which outlets are running the SAME WIRE COPY rather than independent work. `independent_sources` is what corroboration actually means; the raw outlet total is NOT. Quotes may only be drawn from the excerpts this returns.',
+        parameters: {
+            type: 'object',
+            properties: {
+                story: { type: 'string', description: 'The story to stand up, phrased as you would search for it (e.g. "Egypt complaint FIFA refereeing Argentina").' },
+                freshness: { type: 'string', enum: ['pd', 'pw', 'pm'], description: 'pd = past day, pw = past week (default), pm = past month.' },
+            },
+            required: ['story'],
+        },
+    };
+    async execute(args, context) {
+        const search = context.sharedState?.newsSearch;
+        if (!search) {
+            return {
+                success: false,
+                output: 'News search is not available in this context. The host must inject `newsSearch` into shared state.',
+            };
+        }
+        const story = String(args.story ?? '').trim();
+        if (!story)
+            return { success: false, output: 'research_story requires a story to look for.' };
+        const freshness = (['pd', 'pw', 'pm'].includes(String(args.freshness))
+            ? String(args.freshness)
+            : 'pw');
+        const hits = await search(story, 20, freshness);
+        // Stash what we actually read, so write_article can check her quotes against
+        // it. Accumulate across the turn — she may research more than one angle
+        // before writing, and a quote from either is legitimate.
+        if (context.sharedState) {
+            const existing = context.sharedState.fetchedCorpus ?? { hits: [] };
+            const seen = new Set(existing.hits.map((h) => h.url));
+            context.sharedState.fetchedCorpus = {
+                hits: [...existing.hits, ...hits.filter((h) => !seen.has(h.url))],
+            };
+        }
+        if (hits.length === 0) {
+            return {
+                success: true,
+                output: JSON.stringify({
+                    story,
+                    independent_sources: 0,
+                    note: 'Nothing in the index reports this. That means nobody has reported it HERE. It does NOT mean it is false, and you must not write that it is. Tell the operator you could not stand it up, and — if the substance might be right and a detail wrong — try the story he is REACHING FOR, not just the words he used.',
+                }),
+            };
+        }
+        return {
+            success: true,
+            output: JSON.stringify({ story, ...summariseCoverage(hits) }),
+        };
+    }
+}
+//# sourceMappingURL=research-story.js.map

package/dist/tools/research-story.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"research-story.js","sourceRoot":"","sources":["../../src/tools/research-story.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAyC,MAAM,kBAAkB,CAAC;AAE5F;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,gBAAgB,CAAC;IACxB,WAAW,GAClB,qRAAqR,CAAC;IAC/Q,SAAS,GAAkB,MAAM,CAAC;IAClC,oBAAoB,GAAG,KAAK,CAAC;IAE7B,MAAM,GAAmB;QAChC,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,2VAA2V;QAC7V,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+GAA+G,EAAE;gBACvJ,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,2DAA2D,EAAE;aAClI;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAA6B;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,UAAsC,CAAC;QAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,oGAAoG;aAC7G,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QAE9F,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACxB,CAAC,CAAC,IAAI,CAAuB,CAAC;QAEhC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QAEhD,6EAA6E;QAC7E,wEAAwE;QACxE,yDAAyD;QACzD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAI,OAAO,CAAC,WAAW,CAAC,aAA2C,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAClG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,WAAW,CAAC,aAAa,GAAG;gBAClC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;aAClE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;oBACrB,KAAK;oBACL,mBAAmB,EAAE,CAAC;oBACtB,IAAI,EACF,mTAAmT;iBACtT,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;CACF"}

package/dist/tools/rollback.d.ts

@@ -0,0 +1,11 @@
+import type { Tool, ToolResult, ToolExecutionContext, ToolRiskLevel } from './types.js';
+import type { FunctionSchema } from '../providers/types.js';
+export declare class RollbackTool implements Tool {
+    readonly name = "rollback";
+    readonly description = "Restore, discard, or check the status of a git checkpoint";
+    readonly riskLevel: ToolRiskLevel;
+    readonly requiresConfirmation = true;
+    readonly schema: FunctionSchema;
+    execute(args: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=rollback.d.ts.map

package/dist/tools/rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/tools/rollback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAK5D,qBAAa,YAAa,YAAW,IAAI;IACvC,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,WAAW,+DAA+D;IACnF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAe;IAChD,QAAQ,CAAC,oBAAoB,QAAQ;IAErC,QAAQ,CAAC,MAAM,EAAE,cAAc,CA2B7B;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;CAiDjG"}

package/dist/tools/rollback.js

@@ -0,0 +1,81 @@
+const ALLOWED_ACTIONS = new Set(['restore', 'discard', 'status']);
+export class RollbackTool {
+    name = 'rollback';
+    description = 'Restore, discard, or check the status of a git checkpoint';
+    riskLevel = 'dangerous';
+    requiresConfirmation = true;
+    schema = {
+        name: 'rollback',
+        description: 'Manage git checkpoints for undoing changes. Before you make file changes, ' +
+            'a checkpoint is automatically created via git stash. If something goes wrong, ' +
+            'use "restore" to undo all changes back to the checkpoint. ' +
+            'Use "status" to check if a checkpoint exists. Use "discard" to clear the checkpoint ' +
+            'when you\'re happy with the changes.\n' +
+            'CONSTRAINT: only one checkpoint exists at a time. Multiple risky tool calls in a single ' +
+            'turn share that checkpoint — restoring brings back the state from BEFORE the first ' +
+            'change of the run, not before the last one. For finer recovery, restore promptly when ' +
+            'a regression appears, and pair with git history for older state. Restore is also ' +
+            'unavailable outside git repositories.',
+        parameters: {
+            type: 'object',
+            properties: {
+                action: {
+                    type: 'string',
+                    enum: ['restore', 'discard', 'status'],
+                    description: 'Action to perform: "restore" undoes changes back to checkpoint, ' +
+                        '"discard" clears the checkpoint (keeps current changes), ' +
+                        '"status" reports whether a checkpoint exists.',
+                },
+            },
+            required: ['action'],
+        },
+    };
+    async execute(args, context) {
+        const action = args.action;
+        if (!ALLOWED_ACTIONS.has(action)) {
+            return {
+                success: false,
+                output: `Invalid action "${action}". Use one of: ${[...ALLOWED_ACTIONS].join(', ')}`,
+            };
+        }
+        const checkpointManager = context.sharedState?.checkpointManager;
+        if (!checkpointManager) {
+            return { success: false, output: 'Checkpoint system is not available in this context.' };
+        }
+        try {
+            switch (action) {
+                case 'status': {
+                    const info = await checkpointManager.getStashInfo();
+                    return {
+                        success: true,
+                        output: info,
+                        metadata: { hasCheckpoint: checkpointManager.hasActiveCheckpoint() },
+                    };
+                }
+                case 'restore': {
+                    if (!checkpointManager.hasActiveCheckpoint()) {
+                        return { success: false, output: 'No active checkpoint to restore.' };
+                    }
+                    const restored = await checkpointManager.restoreCheckpoint();
+                    return restored
+                        ? { success: true, output: 'Checkpoint restored. All changes since the checkpoint have been undone.' }
+                        : { success: false, output: 'Failed to restore checkpoint. The stash may have conflicts — resolve manually with `git stash pop`.' };
+                }
+                case 'discard': {
+                    if (!checkpointManager.hasActiveCheckpoint()) {
+                        return { success: true, output: 'No active checkpoint to discard.' };
+                    }
+                    await checkpointManager.discardCheckpoint();
+                    return { success: true, output: 'Checkpoint discarded. Current changes are kept.' };
+                }
+                default:
+                    return { success: false, output: `Unknown action: ${action}` };
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return { success: false, output: `Rollback action failed: ${message}` };
+        }
+    }
+}
+//# sourceMappingURL=rollback.js.map

package/dist/tools/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/tools/rollback.ts"],"names":[],"mappings":"AAIA,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElE,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,UAAU,CAAC;IAClB,WAAW,GAAG,2DAA2D,CAAC;IAC1E,SAAS,GAAkB,WAAW,CAAC;IACvC,oBAAoB,GAAG,IAAI,CAAC;IAE5B,MAAM,GAAmB;QAChC,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,4EAA4E;YAC5E,gFAAgF;YAChF,4DAA4D;YAC5D,sFAAsF;YACtF,wCAAwC;YACxC,0FAA0F;YAC1F,qFAAqF;YACrF,wFAAwF;YACxF,mFAAmF;YACnF,uCAAuC;QACzC,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;oBACtC,WAAW,EACT,kEAAkE;wBAClE,2DAA2D;wBAC3D,+CAA+C;iBAClD;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAA6B;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;QAErC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,MAAM,kBAAkB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACrF,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,iBAAkD,CAAC;QAClG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,CAAC;oBACpD,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,EAAE,aAAa,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,EAAE;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,EAAE,CAAC;wBAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;oBACxE,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;oBAC7D,OAAO,QAAQ;wBACb,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,yEAAyE,EAAE;wBACtG,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qGAAqG,EAAE,CAAC;gBACxI,CAAC;gBACD,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,EAAE,CAAC;wBAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;oBACvE,CAAC;oBACD,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;oBAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;gBACtF,CAAC;gBACD;oBACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,OAAO,EAAE,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;CACF"}

package/dist/tools/scan-industry.d.ts

@@ -0,0 +1,19 @@
+import type { Tool, ToolResult, ToolExecutionContext, ToolRiskLevel, ToolOutputTrust } from './types.js';
+import type { FunctionSchema } from '../providers/types.js';
+/**
+ * Scan what AI leaders + labs are actually saying this week — real statement
+ * snippets with SOURCE LINKS — so Ava finds what is worth RESPONDING to
+ * (receipts, not vibes). Search is the surface-injected `webSearch` (Brave).
+ * Output is untrusted third-party content. The persona does the selection:
+ * keep only what touches our lane and can be answered with a grounded angle.
+ */
+export declare class ScanIndustryTool implements Tool {
+    readonly name = "scan_industry";
+    readonly description = "Scan what AI leaders/labs are actually saying this week (real statements + source links) so you find what is worth RESPONDING to \u2014 grounded in receipts, not vibes.";
+    readonly riskLevel: ToolRiskLevel;
+    readonly outputTrust: ToolOutputTrust;
+    readonly requiresConfirmation = false;
+    readonly schema: FunctionSchema;
+    execute(args: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=scan-industry.d.ts.map

package/dist/tools/scan-industry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-industry.d.ts","sourceRoot":"","sources":["../../src/tools/scan-industry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACzG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAkB5D;;;;;;GAMG;AACH,qBAAa,gBAAiB,YAAW,IAAI;IAC3C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,WAAW,8KACoJ;IACxK,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAU;IAC3C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAe;IACpD,QAAQ,CAAC,oBAAoB,SAAS;IAEtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAc7B;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;CA+CjG"}

package/dist/tools/scan-industry.js

@@ -0,0 +1,82 @@
+// The players whose words actually move the AI conversation — the closed
+// frontier AND the open / EU / China side Ava stands with. Curated for mission
+// relevance (open vs closed, access, privacy, local-first, pricing). Each is
+// one fresh (past-week) search; the tool returns real snippets + source links.
+const AI_PLAYERS = [
+    { label: 'OpenAI / Sam Altman', query: 'Sam Altman OpenAI' },
+    { label: 'Anthropic / Dario Amodei', query: 'Dario Amodei Anthropic' },
+    { label: 'Google DeepMind / Demis Hassabis', query: 'Demis Hassabis DeepMind' },
+    { label: 'Meta AI / Yann LeCun', query: 'Yann LeCun Meta AI' },
+    { label: 'xAI / Elon Musk', query: 'Elon Musk xAI' },
+    { label: 'Mistral / Arthur Mensch', query: 'Arthur Mensch Mistral AI' },
+    { label: 'DeepSeek', query: 'DeepSeek AI model' },
+    { label: 'Alibaba / Qwen', query: 'Alibaba Qwen AI' },
+];
+/**
+ * Scan what AI leaders + labs are actually saying this week — real statement
+ * snippets with SOURCE LINKS — so Ava finds what is worth RESPONDING to
+ * (receipts, not vibes). Search is the surface-injected `webSearch` (Brave).
+ * Output is untrusted third-party content. The persona does the selection:
+ * keep only what touches our lane and can be answered with a grounded angle.
+ */
+export class ScanIndustryTool {
+    name = 'scan_industry';
+    description = 'Scan what AI leaders/labs are actually saying this week (real statements + source links) so you find what is worth RESPONDING to — grounded in receipts, not vibes.';
+    riskLevel = 'safe';
+    outputTrust = 'untrusted';
+    requiresConfirmation = false;
+    schema = {
+        name: 'scan_industry',
+        description: 'Scan what the AI industry leaders and labs are actually saying RIGHT NOW (past week) — OpenAI/Altman, Anthropic/Amodei, DeepMind/Hassabis, Meta/LeCun, xAI/Musk, plus Mistral, DeepSeek, Qwen. Returns real statement snippets WITH their source links, so you respond to what was genuinely said, not a paraphrase. Use it to find topics worth a response — things that touch our lane (open vs closed, access, privacy, local-first, pricing). Optionally bias the scan with `focus`.',
+        parameters: {
+            type: 'object',
+            properties: {
+                focus: {
+                    type: 'string',
+                    description: 'Optional angle to bias the scan toward, e.g. "privacy", "open source", "pricing", "safety/regulation", "local-first". Omit for a broad scan.',
+                },
+            },
+            required: [],
+        },
+    };
+    async execute(args, context) {
+        const webSearch = context.sharedState?.webSearch;
+        if (!webSearch) {
+            return {
+                success: false,
+                output: 'Web search is not available in this context. The host must inject `webSearch` into shared state.',
+            };
+        }
+        const focus = (args.focus || '').trim();
+        const batches = await Promise.all(AI_PLAYERS.map(async (p) => {
+            const query = focus ? `${p.query} ${focus}` : p.query;
+            const results = await webSearch(query, 2, 'pw').catch(() => []);
+            return results
+                .filter((r) => r.snippet)
+                .slice(0, 2)
+                .map((r) => ({
+                player: p.label,
+                title: r.title.slice(0, 140),
+                source: r.url,
+                statement: r.snippet.slice(0, 240),
+            }));
+        }));
+        const statements = batches.flat();
+        if (statements.length === 0) {
+            return {
+                success: true,
+                output: 'No fresh statements surfaced this scan (search came back thin). Say so honestly and fall back to your own read of the space, or try a narrower focus.',
+            };
+        }
+        return {
+            success: true,
+            output: JSON.stringify({
+                focus: focus || 'broad',
+                window: 'past week',
+                statements,
+                note: 'Real snippets + source links from the past week. These are RAW material. Keep ONLY the statements that genuinely touch our lane (open vs closed, access, privacy, local-first, pricing) AND that we can answer with a true, grounded counterpoint. Cite the source when you respond. Drop the rest — responding to everything is noise; the selection is the skill.',
+            }),
+        };
+    }
+}
+//# sourceMappingURL=scan-industry.js.map

package/dist/tools/scan-industry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-industry.js","sourceRoot":"","sources":["../../src/tools/scan-industry.ts"],"names":[],"mappings":"AAIA,yEAAyE;AACzE,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,UAAU,GAAuC;IACrD,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC5D,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC/E,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC9D,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE;IACpD,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IACvE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACjD,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE;CACtD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,eAAe,CAAC;IACvB,WAAW,GAClB,qKAAqK,CAAC;IAC/J,SAAS,GAAkB,MAAM,CAAC;IAClC,WAAW,GAAoB,WAAW,CAAC;IAC3C,oBAAoB,GAAG,KAAK,CAAC;IAE7B,MAAM,GAAmB;QAChC,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,0dAA0d;QAC5d,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,8IAA8I;iBAC5J;aACF;YACD,QAAQ,EAAE,EAAE;SACb;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAA6B;QACxE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,SAAoC,CAAC;QAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kGAAkG;aAC3G,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,CAAE,IAAI,CAAC,KAA4B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEhE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,OAAO;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;iBACxB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,MAAM,EAAE,CAAC,CAAC,KAAK;gBACf,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC5B,MAAM,EAAE,CAAC,CAAC,GAAG;gBACb,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACnC,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CACH,CAAC;QACF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAElC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EACJ,uJAAuJ;aAC1J,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,KAAK,EAAE,KAAK,IAAI,OAAO;gBACvB,MAAM,EAAE,WAAW;gBACnB,UAAU;gBACV,IAAI,EACF,qWAAqW;aACxW,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/tools/screenshot.d.ts

@@ -0,0 +1,11 @@
+import type { Tool, ToolResult, ToolExecutionContext, ToolRiskLevel } from './types.js';
+import type { FunctionSchema } from '../providers/types.js';
+export declare class ScreenshotTool implements Tool {
+    readonly name = "screenshot";
+    readonly description = "Capture a screenshot of the current screen for visual analysis";
+    readonly riskLevel: ToolRiskLevel;
+    readonly requiresConfirmation = false;
+    readonly schema: FunctionSchema;
+    execute(args: Record<string, unknown>, _context: ToolExecutionContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=screenshot.d.ts.map

package/dist/tools/screenshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screenshot.d.ts","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAI5D,qBAAa,cAAe,YAAW,IAAI;IACzC,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,QAAQ,CAAC,WAAW,oEAAoE;IACxF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAU;IAC3C,QAAQ,CAAC,oBAAoB,SAAS;IAEtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAqB7B;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;CAwDlG"}

package/dist/tools/screenshot.js

@@ -0,0 +1,82 @@
+const MAX_DELAY_MS = 5_000;
+export class ScreenshotTool {
+    name = 'screenshot';
+    description = 'Capture a screenshot of the current screen for visual analysis';
+    riskLevel = 'safe';
+    requiresConfirmation = false;
+    schema = {
+        name: 'screenshot',
+        description: 'Capture a screenshot of the current screen. Returns base64-encoded PNG image data ' +
+            'that vision-capable models can analyze. Use this to see what the user sees, ' +
+            'verify UI changes, debug visual issues, or check application state. ' +
+            'Requires: npm install screenshot-desktop',
+        parameters: {
+            type: 'object',
+            properties: {
+                display: {
+                    type: 'number',
+                    description: 'Display/screen number to capture (0 = primary). Default: 0.',
+                },
+                delay_ms: {
+                    type: 'number',
+                    description: 'Delay in milliseconds before capturing (useful for menus/tooltips). Default: 0. Max: 5000.',
+                },
+            },
+            required: [],
+        },
+    };
+    async execute(args, _context) {
+        try {
+            // Dynamic import — graceful error if not installed
+            let screenshotDesktop;
+            try {
+                // @ts-expect-error — screenshot-desktop is an optional peer dependency, only loaded at runtime
+                const mod = await import('screenshot-desktop');
+                screenshotDesktop = mod.default || mod;
+            }
+            catch {
+                return {
+                    success: false,
+                    output: 'The screenshot tool requires the screenshot-desktop package which is not available.\n\n' +
+                        'If running from source, install it with: npm install screenshot-desktop\n' +
+                        'In the bundled IDE, this tool is not yet supported — it requires a native binary that will be included in a future release.',
+                };
+            }
+            // Handle delay
+            const delayMs = Math.min(Math.max(args.delay_ms || 0, 0), MAX_DELAY_MS);
+            if (delayMs > 0) {
+                await new Promise(resolve => setTimeout(resolve, delayMs));
+            }
+            // Capture screenshot
+            const display = args.display ?? 0;
+            const buffer = await screenshotDesktop({ screen: display });
+            const base64 = buffer.toString('base64');
+            const sizeKB = Math.round(buffer.length / 1024);
+            return {
+                success: true,
+                output: `Screenshot captured (${sizeKB} KB PNG, display ${display}). The image is available for vision analysis.`,
+                metadata: {
+                    base64_image: base64,
+                    mime_type: 'image/png',
+                    size_bytes: buffer.length,
+                    display,
+                },
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            // Catch __dirname / ESM issues from native modules in bundled environments
+            if (message.includes('__dirname') || message.includes('not defined') || message.includes('MODULE_NOT_FOUND')) {
+                return {
+                    success: false,
+                    output: 'The screenshot tool is not available in this environment.\n\n' +
+                        'This tool requires the screenshot-desktop native module which cannot run in the bundled IDE.\n' +
+                        'It works in the VS Code extension and CLI where Node.js modules are fully available.\n' +
+                        'Support for screenshots in the IDE will be added in a future release.',
+                };
+            }
+            return { success: false, output: `Screenshot capture failed: ${message}` };
+        }
+    }
+}
+//# sourceMappingURL=screenshot.js.map

package/dist/tools/screenshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screenshot.js","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AAGA,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,YAAY,CAAC;IACpB,WAAW,GAAG,gEAAgE,CAAC;IAC/E,SAAS,GAAkB,MAAM,CAAC;IAClC,oBAAoB,GAAG,KAAK,CAAC;IAE7B,MAAM,GAAmB;QAChC,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,oFAAoF;YACpF,8EAA8E;YAC9E,sEAAsE;YACtE,0CAA0C;QAC5C,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6DAA6D;iBAC3E;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4FAA4F;iBAC1G;aACF;YACD,QAAQ,EAAE,EAAE;SACb;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,QAA8B;QACzE,IAAI,CAAC;YACH,mDAAmD;YACnD,IAAI,iBAAqE,CAAC;YAC1E,IAAI,CAAC;gBACH,+FAA+F;gBAC/F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC/C,iBAAiB,GAAI,GAAW,CAAC,OAAO,IAAI,GAAG,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EACJ,yFAAyF;wBACzF,2EAA2E;wBAC3E,6HAA6H;iBAChI,CAAC;YACJ,CAAC;YAED,eAAe;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAE,IAAI,CAAC,QAAmB,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACpF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAI,IAAI,CAAC,OAAkB,IAAI,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAW,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,wBAAwB,MAAM,oBAAoB,OAAO,gDAAgD;gBACjH,QAAQ,EAAE;oBACR,YAAY,EAAE,MAAM;oBACpB,SAAS,EAAE,WAAW;oBACtB,UAAU,EAAE,MAAM,CAAC,MAAM;oBACzB,OAAO;iBACR;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,2EAA2E;YAC3E,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7G,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EACJ,+DAA+D;wBAC/D,gGAAgG;wBAChG,wFAAwF;wBACxF,uEAAuE;iBAC1E,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,EAAE,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;CACF"}

package/dist/tools/secret-request.d.ts

@@ -0,0 +1,24 @@
+import type { Tool, ToolResult, ToolExecutionContext, ToolRiskLevel } from './types.js';
+import type { FunctionSchema } from '../providers/types.js';
+/**
+ * Capability-style secret access.
+ *
+ * Ava calls this tool when she needs an API key or other secret. The host
+ * shows the user a grant prompt listing matching vault entries; on approval
+ * the host loads the value into its in-memory working set and returns an
+ * opaque handle of the form `{{secret:<id>}}` to Ava.
+ *
+ * The handle — never the value — flows through the conversation. Downstream
+ * tool calls (env_write, http_request, bash) reference the handle in their
+ * args; the host substitutes the real value at execution time, so secrets
+ * never appear in conversation history, model context, or chat persistence.
+ */
+export declare class SecretRequestTool implements Tool {
+    readonly name = "secret_request";
+    readonly description = "Request access to a secret from the user's vault. Returns an opaque handle (never the value itself) that you can pass into other tools \u2014 env_write, http_request, bash \u2014 and the host substitutes the real value at execution time.";
+    readonly riskLevel: ToolRiskLevel;
+    readonly requiresConfirmation = false;
+    readonly schema: FunctionSchema;
+    execute(args: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=secret-request.d.ts.map

package/dist/tools/secret-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-request.d.ts","sourceRoot":"","sources":["../../src/tools/secret-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAkB,YAAW,IAAI;IAC5C,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,WAAW,mPAAyO;IAC7P,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAU;IAC3C,QAAQ,CAAC,oBAAoB,SAAS;IAEtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAsB7B;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;CAsCjG"}

package/dist/tools/secret-request.js

@@ -0,0 +1,75 @@
+/**
+ * Capability-style secret access.
+ *
+ * Ava calls this tool when she needs an API key or other secret. The host
+ * shows the user a grant prompt listing matching vault entries; on approval
+ * the host loads the value into its in-memory working set and returns an
+ * opaque handle of the form `{{secret:<id>}}` to Ava.
+ *
+ * The handle — never the value — flows through the conversation. Downstream
+ * tool calls (env_write, http_request, bash) reference the handle in their
+ * args; the host substitutes the real value at execution time, so secrets
+ * never appear in conversation history, model context, or chat persistence.
+ */
+export class SecretRequestTool {
+    name = 'secret_request';
+    description = "Request access to a secret from the user's vault. Returns an opaque handle (never the value itself) that you can pass into other tools — env_write, http_request, bash — and the host substitutes the real value at execution time.";
+    riskLevel = 'safe';
+    requiresConfirmation = false;
+    schema = {
+        name: 'secret_request',
+        description: 'Ask the user to grant a secret from their vault for use in subsequent tool calls. ' +
+            'The user picks which vault entry to grant. You receive an opaque handle like {{secret:abc123}} — pass that handle (NOT the raw value) into env_write/http_request/bash arguments. ' +
+            'The host substitutes the real value at execution time, so secrets never enter conversation history. ' +
+            'Use a `label` that identifies what the secret is for (e.g. "STRIPE_SECRET_KEY", "OPENAI_KEY"). ' +
+            'Provide a `reason` explaining what you need it for so the user can decide knowledgeably.',
+        parameters: {
+            type: 'object',
+            properties: {
+                label: {
+                    type: 'string',
+                    description: 'What the secret is for, e.g. "STRIPE_SECRET_KEY". Shown verbatim in the grant prompt.',
+                },
+                reason: {
+                    type: 'string',
+                    description: 'One sentence explaining what you need the secret for. Surfaced in the grant prompt so the user can decide.',
+                },
+            },
+            required: ['label'],
+        },
+    };
+    async execute(args, context) {
+        const label = typeof args.label === 'string' ? args.label.trim() : '';
+        const reason = typeof args.reason === 'string' ? args.reason.trim() : undefined;
+        if (!label) {
+            return { success: false, output: 'secret_request requires a non-empty `label`.' };
+        }
+        if (!context.secretGranter) {
+            return {
+                success: false,
+                output: 'Secret vault is not available in this host. Use a different approach (ask the user to provide the value via ask_user, or document the env var name in instructions).',
+            };
+        }
+        try {
+            const grant = await context.secretGranter(label, reason);
+            if (!grant) {
+                return {
+                    success: true,
+                    output: `Grant denied for "${label}". The user did not approve this secret. Continue without it — ask if a different approach is acceptable.`,
+                };
+            }
+            return {
+                success: true,
+                output: `Granted. Use handle {{secret:${grant.id}}} in subsequent tool args. ` +
+                    `Vault label: "${grant.label}". The handle is scoped to this chat session and will be wiped on new chat.`,
+            };
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: `Grant flow failed: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=secret-request.js.map

package/dist/tools/secret-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-request.js","sourceRoot":"","sources":["../../src/tools/secret-request.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,gBAAgB,CAAC;IACxB,WAAW,GAAG,qOAAqO,CAAC;IACpP,SAAS,GAAkB,MAAM,CAAC;IAClC,oBAAoB,GAAG,KAAK,CAAC;IAE7B,MAAM,GAAmB;QAChC,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,oLAAoL;YACpL,sGAAsG;YACtG,iGAAiG;YACjG,0FAA0F;QAC5F,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uFAAuF;iBACrG;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4GAA4G;iBAC1H;aACF;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAA6B;QACxE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,sKAAsK;aACzK,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EACJ,qBAAqB,KAAK,2GAA2G;iBACxI,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EACJ,gCAAgC,KAAK,CAAC,EAAE,8BAA8B;oBACtE,iBAAiB,KAAK,CAAC,KAAK,6EAA6E;aAC5G,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACjF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/security.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Validate that a resolved path stays within the allowed working directory.
+ * Prevents path traversal attacks (e.g. ../../etc/passwd) and sibling directory access.
+ *
+ * @param rawPath - The user-provided path (absolute or relative)
+ * @param cwd - The current working directory (trust boundary)
+ * @returns The resolved absolute path
+ * @throws Error if the path escapes the working directory
+ */
+export declare function validatePath(rawPath: string, cwd: string): string;
+/**
+ * Validate a directory path for search tools (glob, grep, list_directory).
+ * Same rules as validatePath but for directories.
+ */
+export declare function validateSearchPath(rawPath: string | undefined, cwd: string): string;
+/**
+ * Credential/secret detection patterns.
+ * Shared across memory_save, support_request, and any tool that handles user content.
+ */
+export declare const SECRET_PATTERNS: RegExp[];
+/**
+ * Check if text contains likely credentials or secrets.
+ * @returns true if credentials are detected
+ */
+export declare function containsCredentials(text: string): boolean;
+//# sourceMappingURL=security.d.ts.map

package/dist/tools/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/tools/security.ts"],"names":[],"mappings":"AAkBA;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAsBjE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnF;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,UAc3B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD"}