@symerian/symi 3.0.20 → 3.0.22

package/docs/automation/poll.md

@@ -1,61 +0,0 @@
----
-summary: "Poll sending via gateway + CLI"
-read_when:
-  - Adding or modifying poll support
-  - Debugging poll sends from the CLI or gateway
-title: "Polls"
----
-
-# Polls
-
-## Supported channels
-
-- WhatsApp (web channel)
-- MS Teams (Adaptive Cards)
-
-## CLI
-
-```bash
-# WhatsApp
-symi message poll --target +15555550123 \
-  --poll-question "Lunch today?" --poll-option "Yes" --poll-option "No" --poll-option "Maybe"
-symi message poll --target 123456789@g.us \
-  --poll-question "Meeting time?" --poll-option "10am" --poll-option "2pm" --poll-option "4pm" --poll-multi
-
-  --poll-question "Snack?" --poll-option "Pizza" --poll-option "Sushi"
-  --poll-question "Plan?" --poll-option "A" --poll-option "B" --poll-duration-hours 48
-
-# MS Teams
-symi message poll --channel msteams --target conversation:19:abc@thread.tacv2 \
-  --poll-question "Lunch?" --poll-option "Pizza" --poll-option "Sushi"
-```
-
-Options:
-
-- `--poll-multi`: allow selecting multiple options
-
-## Gateway RPC
-
-Method: `poll`
-
-Params:
-
-- `to` (string, required)
-- `question` (string, required)
-- `options` (string[], required)
-- `maxSelections` (number, optional)
-- `durationHours` (number, optional)
-- `channel` (string, optional, default: `whatsapp`)
-- `idempotencyKey` (string, required)
-
-## Channel differences
-
-- WhatsApp: 2-12 options, `maxSelections` must be within option count, ignores `durationHours`.
-- MS Teams: Adaptive Card polls (Symi-managed). No native poll API; `durationHours` is ignored.
-
-## Agent tool (Message)
-
-Use the `message` tool with `poll` action (`to`, `pollQuestion`, `pollOption`, optional `pollMulti`, `pollDurationHours`, `channel`).
-
-Teams polls are rendered as Adaptive Cards and require the gateway to stay online
-to record votes in `~/.symi/msteams-polls.json`.

package/docs/automation/troubleshooting.md

@@ -1,122 +0,0 @@
----
-summary: "Troubleshoot cron and heartbeat scheduling and delivery"
-read_when:
-  - Cron did not run
-  - Cron ran but no message was delivered
-  - Heartbeat seems silent or skipped
-title: "Automation Troubleshooting"
----
-
-# Automation troubleshooting
-
-Use this page for scheduler and delivery issues (`cron` + `heartbeat`).
-
-## Command ladder
-
-```bash
-symi status
-symi gateway status
-symi logs --follow
-symi doctor
-symi channels status --probe
-```
-
-Then run automation checks:
-
-```bash
-symi cron status
-symi cron list
-symi system heartbeat last
-```
-
-## Cron not firing
-
-```bash
-symi cron status
-symi cron list
-symi cron runs --id <jobId> --limit 20
-symi logs --follow
-```
-
-Good output looks like:
-
-- `cron status` reports enabled and a future `nextWakeAtMs`.
-- Job is enabled and has a valid schedule/timezone.
-- `cron runs` shows `ok` or explicit skip reason.
-
-Common signatures:
-
-- `cron: scheduler disabled; jobs will not run automatically` → cron disabled in config/env.
-- `cron: timer tick failed` → scheduler tick crashed; inspect surrounding stack/log context.
-- `reason: not-due` in run output → manual run called without `--force` and job not due yet.
-
-## Cron fired but no delivery
-
-```bash
-symi cron runs --id <jobId> --limit 20
-symi cron list
-symi channels status --probe
-symi logs --follow
-```
-
-Good output looks like:
-
-- Run status is `ok`.
-- Delivery mode/target are set for isolated jobs.
-- Channel probe reports target channel connected.
-
-Common signatures:
-
-- Run succeeded but delivery mode is `none` → no external message is expected.
-- Delivery target missing/invalid (`channel`/`to`) → run may succeed internally but skip outbound.
-- Channel auth errors (`unauthorized`, `missing_scope`, `Forbidden`) → delivery blocked by channel credentials/permissions.
-
-## Heartbeat suppressed or skipped
-
-```bash
-symi system heartbeat last
-symi logs --follow
-symi config get agents.defaults.heartbeat
-symi channels status --probe
-```
-
-Good output looks like:
-
-- Heartbeat enabled with non-zero interval.
-- Last heartbeat result is `ran` (or skip reason is understood).
-
-Common signatures:
-
-- `heartbeat skipped` with `reason=quiet-hours` → outside `activeHours`.
-- `requests-in-flight` → main lane busy; heartbeat deferred.
-- `empty-heartbeat-file` → interval heartbeat skipped because `SYMIPULSE.md` has no actionable content and no tagged cron event is queued.
-- `alerts-disabled` → visibility settings suppress outbound heartbeat messages.
-
-## Timezone and activeHours gotchas
-
-```bash
-symi config get agents.defaults.heartbeat.activeHours
-symi config get agents.defaults.heartbeat.activeHours.timezone
-symi config get agents.defaults.userTimezone || echo "agents.defaults.userTimezone not set"
-symi cron list
-symi logs --follow
-```
-
-Quick rules:
-
-- `Config path not found: agents.defaults.userTimezone` means the key is unset; heartbeat falls back to host timezone (or `activeHours.timezone` if set).
-- Cron without `--tz` uses gateway host timezone.
-- Heartbeat `activeHours` uses configured timezone resolution (`user`, `local`, or explicit IANA tz).
-- ISO timestamps without timezone are treated as UTC for cron `at` schedules.
-
-Common signatures:
-
-- Jobs run at the wrong wall-clock time after host timezone changes.
-- Heartbeat always skipped during your daytime because `activeHours.timezone` is wrong.
-
-Related:
-
-- [/automation/cron-jobs](/automation/cron-jobs)
-- [/gateway/heartbeat](/gateway/heartbeat)
-- [/automation/cron-vs-heartbeat](/automation/cron-vs-heartbeat)
-- [/concepts/timezone](/concepts/timezone)

package/docs/automation/webhook.md

@@ -1,213 +0,0 @@
----
-summary: "Webhook ingress for wake and isolated agent runs"
-read_when:
-  - Adding or changing webhook endpoints
-  - Wiring external systems into Symi
-title: "Webhooks"
----
-
-# Webhooks
-
-Gateway can expose a small HTTP webhook endpoint for external triggers.
-
-## Enable
-
-```json5
-{
-  hooks: {
-    enabled: true,
-    token: "shared-secret",
-    path: "/hooks",
-    // Optional: restrict explicit `agentId` routing to this allowlist.
-    // Omit or include "*" to allow any agent.
-    // Set [] to deny all explicit `agentId` routing.
-    allowedAgentIds: ["hooks", "main"],
-  },
-}
-```
-
-Notes:
-
-- `hooks.token` is required when `hooks.enabled=true`.
-- `hooks.path` defaults to `/hooks`.
-
-## Auth
-
-Every request must include the hook token. Prefer headers:
-
-- `Authorization: Bearer <token>` (recommended)
-- `x-symi-token: <token>`
-- Query-string tokens are rejected (`?token=...` returns `400`).
-
-## Endpoints
-
-### `POST /hooks/wake`
-
-Payload:
-
-```json
-{ "text": "System line", "mode": "now" }
-```
-
-- `text` **required** (string): The description of the event (e.g., "New email received").
-- `mode` optional (`now` | `next-heartbeat`): Whether to trigger an immediate heartbeat (default `now`) or wait for the next periodic check.
-
-Effect:
-
-- Enqueues a system event for the **main** session
-- If `mode=now`, triggers an immediate heartbeat
-
-### `POST /hooks/agent`
-
-Payload:
-
-```json
-{
-  "message": "Run this",
-  "name": "Email",
-  "agentId": "hooks",
-  "sessionKey": "hook:email:msg-123",
-  "wakeMode": "now",
-  "deliver": true,
-  "channel": "last",
-  "to": "+15551234567",
-  "model": "openai/gpt-5.2-mini",
-  "thinking": "low",
-  "timeoutSeconds": 120
-}
-```
-
-- `message` **required** (string): The prompt or message for the agent to process.
-- `name` optional (string): Human-readable name for the hook (e.g., "GitHub"), used as a prefix in session summaries.
-- `agentId` optional (string): Route this hook to a specific agent. Unknown IDs fall back to the default agent. When set, the hook runs using the resolved agent's workspace and configuration.
-- `sessionKey` optional (string): The key used to identify the agent's session. By default this field is rejected unless `hooks.allowRequestSessionKey=true`.
-- `wakeMode` optional (`now` | `next-heartbeat`): Whether to trigger an immediate heartbeat (default `now`) or wait for the next periodic check.
-- `deliver` optional (boolean): If `true`, the agent's response will be sent to the messaging channel. Defaults to `true`. Responses that are only heartbeat acknowledgments are automatically skipped.
-- `model` optional (string): Model override (e.g., `anthropic/claude-3-5-sonnet` or an alias). Must be in the allowed model list if restricted.
-- `thinking` optional (string): Thinking level override (e.g., `low`, `medium`, `high`).
-- `timeoutSeconds` optional (number): Maximum duration for the agent run in seconds.
-
-Effect:
-
-- Runs an **isolated** agent turn (own session key)
-- Always posts a summary into the **main** session
-- If `wakeMode=now`, triggers an immediate heartbeat
-
-## Session key policy (breaking change)
-
-`/hooks/agent` payload `sessionKey` overrides are disabled by default.
-
-- Recommended: set a fixed `hooks.defaultSessionKey` and keep request overrides off.
-- Optional: allow request overrides only when needed, and restrict prefixes.
-
-Recommended config:
-
-```json5
-{
-  hooks: {
-    enabled: true,
-    token: "${SYMI_HOOKS_TOKEN}",
-    defaultSessionKey: "hook:ingress",
-    allowRequestSessionKey: false,
-    allowedSessionKeyPrefixes: ["hook:"],
-  },
-}
-```
-
-Compatibility config (legacy behavior):
-
-```json5
-{
-  hooks: {
-    enabled: true,
-    token: "${SYMI_HOOKS_TOKEN}",
-    allowRequestSessionKey: true,
-    allowedSessionKeyPrefixes: ["hook:"], // strongly recommended
-  },
-}
-```
-
-### `POST /hooks/<name>` (mapped)
-
-Custom hook names are resolved via `hooks.mappings` (see configuration). A mapping can
-turn arbitrary payloads into `wake` or `agent` actions, with optional templates or
-code transforms.
-
-Mapping options (summary):
-
-- `hooks.presets: ["gmail"]` enables the built-in Gmail mapping.
-- `hooks.mappings` lets you define `match`, `action`, and templates in config.
-- `hooks.transformsDir` + `transform.module` loads a JS/TS module for custom logic.
-  - `hooks.transformsDir` (if set) must stay within the transforms root under your Symi config directory (typically `~/.symi/hooks/transforms`).
-  - `transform.module` must resolve within the effective transforms directory (traversal/escape paths are rejected).
-- Use `match.source` to keep a generic ingest endpoint (payload-driven routing).
-- TS transforms require a TS loader (e.g. `bun` or `tsx`) or precompiled `.js` at runtime.
-- Set `deliver: true` + `channel`/`to` on mappings to route replies to a chat surface
-  (`channel` defaults to `last` and falls back to WhatsApp).
-- `agentId` routes the hook to a specific agent; unknown IDs fall back to the default agent.
-- `hooks.allowedAgentIds` restricts explicit `agentId` routing. Omit it (or include `*`) to allow any agent. Set `[]` to deny explicit `agentId` routing.
-- `hooks.defaultSessionKey` sets the default session for hook agent runs when no explicit key is provided.
-- `hooks.allowRequestSessionKey` controls whether `/hooks/agent` payloads may set `sessionKey` (default: `false`).
-- `hooks.allowedSessionKeyPrefixes` optionally restricts explicit `sessionKey` values from request payloads and mappings.
-- `allowUnsafeExternalContent: true` disables the external content safety wrapper for that hook
-  (dangerous; only for trusted internal sources).
-- `symi webhooks gmail setup` writes `hooks.gmail` config for `symi webhooks gmail run`.
-  See [Gmail Pub/Sub](/automation/gmail-pubsub) for the full Gmail watch flow.
-
-## Responses
-
-- `200` for `/hooks/wake`
-- `202` for `/hooks/agent` (async run started)
-- `401` on auth failure
-- `429` after repeated auth failures from the same client (check `Retry-After`)
-- `400` on invalid payload
-- `413` on oversized payloads
-
-## Examples
-
-```bash
-curl -X POST http://127.0.0.1:18789/hooks/wake \
-  -H 'Authorization: Bearer SECRET' \
-  -H 'Content-Type: application/json' \
-  -d '{"text":"New email received","mode":"now"}'
-```
-
-```bash
-curl -X POST http://127.0.0.1:18789/hooks/agent \
-  -H 'x-symi-token: SECRET' \
-  -H 'Content-Type: application/json' \
-  -d '{"message":"Summarize inbox","name":"Email","wakeMode":"next-heartbeat"}'
-```
-
-### Use a different model
-
-Add `model` to the agent payload (or mapping) to override the model for that run:
-
-```bash
-curl -X POST http://127.0.0.1:18789/hooks/agent \
-  -H 'x-symi-token: SECRET' \
-  -H 'Content-Type: application/json' \
-  -d '{"message":"Summarize inbox","name":"Email","model":"openai/gpt-5.2-mini"}'
-```
-
-If you enforce `agents.defaults.models`, make sure the override model is included there.
-
-```bash
-curl -X POST http://127.0.0.1:18789/hooks/gmail \
-  -H 'Authorization: Bearer SECRET' \
-  -H 'Content-Type: application/json' \
-  -d '{"source":"gmail","messages":[{"from":"Ada","subject":"Hello","snippet":"Hi"}]}'
-```
-
-## Security
-
-- Keep hook endpoints behind loopback, tailnet, or trusted reverse proxy.
-- Use a dedicated hook token; do not reuse gateway auth tokens.
-- Repeated auth failures are rate-limited per client address to slow brute-force attempts.
-- If you use multi-agent routing, set `hooks.allowedAgentIds` to limit explicit `agentId` selection.
-- Keep `hooks.allowRequestSessionKey=false` unless you require caller-selected sessions.
-- If you enable request `sessionKey`, restrict `hooks.allowedSessionKeyPrefixes` (for example, `["hook:"]`).
-- Avoid including sensitive raw payloads in webhook logs.
-- Hook payloads are treated as untrusted and wrapped with safety boundaries by default.
-  If you must disable this for a specific hook, set `allowUnsafeExternalContent: true`
-  in that hook's mapping (dangerous).

package/docs/brave-search.md

@@ -1,41 +0,0 @@
----
-summary: "Brave Search API setup for web_search"
-read_when:
-  - You want to use Brave Search for web_search
-  - You need a BRAVE_API_KEY or plan details
-title: "Brave Search"
----
-
-# Brave Search API
-
-Symi uses Brave Search as the default provider for `web_search`.
-
-## Get an API key
-
-1. Create a Brave Search API account at [https://brave.com/search/api/](https://brave.com/search/api/)
-2. In the dashboard, choose the **Data for Search** plan and generate an API key.
-3. Store the key in config (recommended) or set `BRAVE_API_KEY` in the Gateway environment.
-
-## Config example
-
-```json5
-{
-  tools: {
-    web: {
-      search: {
-        provider: "brave",
-        apiKey: "BRAVE_API_KEY_HERE",
-        maxResults: 5,
-        timeoutSeconds: 30,
-      },
-    },
-  },
-}
-```
-
-## Notes
-
-- The Data for AI plan is **not** compatible with `web_search`.
-- Brave provides a free tier plus paid plans; check the Brave API portal for current limits.
-
-See [Web tools](/tools/web) for the full web_search configuration.

package/docs/capabilities.md

@@ -1,151 +0,0 @@
-# Symi Capabilities Index
-
-_Auto-generated by `scripts/build-capabilities-index.ts` — do not hand-edit._
-
-Symi version: `2.9.5`
-Generated: 2026-04-29T03:08:28.906Z
-
-Stage 4 of the prompt-reduction plan moves capability documentation
-out of the system prompt and into versioned content (skills, tool
-descriptions, runtime guards). This index is the single artifact
-engineering and compliance review for capability deltas — PRs that
-change a skill, plugin, or tool surface will show up here.
-
-## Skills
-
-Bundled skills are loaded on-demand via `skill_search` (Stage 3.3) or
-auto-loaded via `skills.autoLoadInline` config (Stage 2.2). Triggers
-drive the keyword-matching used by the prompt builder's auto-injection
-block (Stage 3.5).
-
-**62 bundled skills.**
-
-| Skill                 | Description                                                                                                                                                                                              | Triggers                                                                   |
-| --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------- |
-| `1password`           | Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.                     | 1password                                                                  |
-| `apple-notes`         | Manage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks Symi to add a note, list notes, search notes, or manage note folders.  | apple-notes, apple, notes                                                  |
-| `apple-reminders`     | Manage Apple Reminders via remindctl CLI (list, add, edit, complete, delete). Supports lists, date filters, and JSON/plain output.                                                                       | apple-reminders, apple, reminders                                          |
-| `bear-notes`          | Create, search, and manage Bear notes via grizzly CLI.                                                                                                                                                   | bear-notes, bear, notes                                                    |
-| `blogwatcher`         | Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI.                                                                                                                                  | blogwatcher                                                                |
-| `blucli`              | BluOS CLI (blu) for discovery, playback, grouping, and volume.                                                                                                                                           | blucli                                                                     |
-| `bluebubbles`         | Use when you need to send or manage iMessages via BlueBubbles (recommended iMessage integration). Calls go through the generic message tool with channel="bluebubbles".                                  | bluebubbles                                                                |
-| `camsnap`             | Capture frames or clips from RTSP/ONVIF cameras.                                                                                                                                                         | camsnap                                                                    |
-| `canvas`              | Display HTML content on connected Symi nodes (Mac app, iOS, Android). Use for games, visualizations, dashboards, generated HTML, and interactive demos.                                                  | canvas, display, html, visualize, dashboard, demo                          |
-| `channel-routing`     | Messaging conventions and channel routing rules. Reply in current session auto-routes to the source channel; cross-session messaging via sessions_send; sub-agent orchestration via subagents tool; syst | message, messaging, channel, route, routing, send, sessions_send, subagent |
-| `coding-agent`        | "Delegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (spawn in temp dir), (3) refactoring large co | coding-agent, coding, agent                                                |
-| `connect-email`       | Connect a user's email account (Outlook 365 or Gmail) to Symi. Use when the user asks to connect, link, set up, configure, or troubleshoot email — including any mention of "my email", "work email", "o | connect-email, connect, email                                              |
-| `document-generation` | Generate Word (.docx), Excel (.xlsx), PowerPoint (.pptx), and PDF documents via npm packages bundled with Symi. Write a short Node.js script (.cjs for CommonJS), execute via exec with host=gateway. Us | document, docx, xlsx, pptx, pdf, word, excel, powerpoint                   |
-| `eightctl`            | Control Eight Sleep pods (status, temperature, alarms, schedules).                                                                                                                                       | eightctl                                                                   |
-| `food-order`          | Reorder Foodora orders + track ETA/status with ordercli. Never confirm without explicit user approval. Triggers: order food, reorder, track ETA.                                                         | food-order, food, order                                                    |
-| `gemini`              | Gemini CLI for one-shot Q&A, summaries, and generation.                                                                                                                                                  | gemini                                                                     |
-| `gh-issues`           | "Fetch GitHub issues, spawn sub-agents to implement fixes and open PRs, then monitor and address PR review comments. Usage: /gh-issues [owner/repo] [--label bug] [--limit 5] [--milestone v1.0] [--assi | gh-issues, gh, issues                                                      |
-| `gifgrep`             | Search GIF providers with CLI/TUI, download results, and extract stills/sheets.                                                                                                                          | gifgrep                                                                    |
-| `github`              | "GitHub operations via `gh` CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) vie | github                                                                     |
-| `gog`                 | Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.                                                                                                                             | gog                                                                        |
-| `goplaces`            | Query Google Places API (New) via the goplaces CLI for text search, place details, resolve, and reviews. Use for human-friendly place lookup or JSON output for scripts.                                 | goplaces                                                                   |
-| `healthcheck`         | Host security hardening and risk-tolerance configuration for Symi deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, Symi cron schedul | healthcheck                                                                |
-| `himalaya`            | "CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MI | himalaya                                                                   |
-| `imsg`                | iMessage/SMS CLI for listing chats, history, and sending messages via Messages.app.                                                                                                                      | imsg                                                                       |
-| `long-task`           | Run long operations (deep scans, brute-forces, big builds, exhaustive enumeration) without hitting the agent-turn timeout. Detaches the command with setsid+nohup and schedules a cron monitor that poll | long-task, long, task                                                      |
-| `mcporter`            | Use the mcporter CLI to list, configure, auth, and call MCP servers/tools directly (HTTP or stdio), including ad-hoc servers, config edits, and CLI/type generation.                                     | mcporter                                                                   |
-| `model-usage`         | Use CodexBar CLI local cost usage to summarize per-model usage for Codex or Claude, including the current (most recent) model or a full model breakdown. Trigger when asked for model-level usage/cost d | model-usage, model, usage                                                  |
-| `nano-banana-pro`     | Generate or edit images via Gemini 3 Pro Image (Nano Banana Pro).                                                                                                                                        | nano-banana-pro, nano, banana, pro                                         |
-| `nano-pdf`            | Edit PDFs with natural-language instructions using the nano-pdf CLI.                                                                                                                                     | nano-pdf, nano, pdf                                                        |
-| `notion`              | Notion API for creating and managing pages, databases, and blocks.                                                                                                                                       | notion                                                                     |
-| `obsidian`            | Work with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli.                                                                                                                          | obsidian                                                                   |
-| `openai-image-gen`    | Batch-generate images via OpenAI Images API. Random prompt sampler + `index.html` gallery.                                                                                                               | openai-image-gen, openai, image, gen                                       |
-| `openai-whisper`      | Local speech-to-text with the Whisper CLI (no API key).                                                                                                                                                  | openai-whisper, openai, whisper                                            |
-| `openai-whisper-api`  | Transcribe audio via OpenAI Audio Transcriptions API (Whisper).                                                                                                                                          | openai-whisper-api, openai, whisper, api                                   |
-| `openhue`             | Control Philips Hue lights and scenes via the OpenHue CLI.                                                                                                                                               | openhue                                                                    |
-| `oracle`              | Best practices for using the oracle CLI (prompt + file bundling, engines, sessions, and file attachment patterns).                                                                                       | oracle                                                                     |
-| `ordercli`            | Foodora-only CLI for checking past orders and active order status (Deliveroo WIP).                                                                                                                       | ordercli                                                                   |
-| `peekaboo`            | Capture and automate macOS UI with the Peekaboo CLI.                                                                                                                                                     | peekaboo                                                                   |
-| `reactions-extensive` | Liberal reaction policy for channels configured in EXTENSIVE reactions mode. React naturally — acknowledge messages with appropriate emojis, express sentiment, react to interesting content or notable  | reactions, react, emoji, extensive-reactions                               |
-| `reactions-minimal`   | Sparing reaction policy for channels configured in MINIMAL reactions mode. React only when truly relevant — important user requests, genuine sentiment, never routine messages or your own replies. Guid | reactions, react, emoji, minimal-reactions                                 |
-| `safe-edit`           | Best practices for the edit tool plus recovery patterns when oldText doesn't match. Read before editing, use shortest unique snippets, prefer distinctive lines, never skip past a failed match. Loaded  | edit, oldtext, recovery, match, failed, wrong, snippet, hallucinated       |
-| `sag`                 | ElevenLabs text-to-speech with mac-style say UX.                                                                                                                                                         | sag                                                                        |
-| `session-logs`        | Search and analyze your own session logs (older/parent conversations) using jq.                                                                                                                          | session-logs, session, logs                                                |
-| `sherpa-onnx-tts`     | Local text-to-speech via sherpa-onnx (offline, no cloud)                                                                                                                                                 | sherpa-onnx-tts, sherpa, onnx, tts                                         |
-| `skill-creator`       | Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.                                                                                 | skill-creator, skill, creator                                              |
-| `slack`               | Use when you need to control Slack from Symi via the slack tool, including reacting to messages or pinning/unpinning items in Slack channels or DMs.                                                     | slack                                                                      |
-| `songsee`             | Generate spectrograms and feature-panel visualizations from audio with the songsee CLI.                                                                                                                  | songsee                                                                    |
-| `sonoscli`            | Control Sonos speakers (discover/status/play/volume/group).                                                                                                                                              | sonoscli                                                                   |
-| `spotify-player`      | Terminal Spotify playback/search via spogo (preferred) or spotify_player.                                                                                                                                | spotify-player, spotify, player                                            |
-| `summarize`           | Summarize or extract text/transcripts from URLs, podcasts, and local files (great fallback for “transcribe this YouTube/video”).                                                                         | summarize                                                                  |
-| `symihub`             | Use the SymiHub CLI to search, install, update, and publish agent skills from symihub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or p | symihub                                                                    |
-| `things-mac`          | Manage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user asks Symi to add a task to Things, list inbox | things-mac, things, mac                                                    |
-| `tmux`                | Remote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.                                                                                                        | tmux                                                                       |
-| `tool-narration`      | When and how to narrate tool calls. Default to silence on routine, low-risk tool calls; narrate only when it adds value (multi-step work, sensitive actions, complex problems, or explicit user request) | narrate, narration, tool-call, verbose, explain                            |
-| `trello`              | Manage Trello boards, lists, and cards via the Trello REST API.                                                                                                                                          | trello                                                                     |
-| `verify-output`       | Structured verification pass before delivering code, scripts, configurations, or any technical artifact. Re-read request, check each requirement against output, actually run the code, include tests wh | verify, verification, test, deliver, ship, check, validate, review         |
-| `video-frames`        | Extract frames or short clips from videos using ffmpeg.                                                                                                                                                  | video-frames, video, frames                                                |
-| `voice-call`          | Start voice calls via the Symi voice-call plugin.                                                                                                                                                        | voice-call, voice, call                                                    |
-| `wacli`               | Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).                                                                                    | wacli                                                                      |
-| `weather`             | "Get current weather and forecasts via wttr.in or Open-Meteo. Use when: user asks about weather, temperature, or forecasts for any location. NOT for: historical weather data, severe weather alerts, or | weather                                                                    |
-| `xurl`                | A CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interac | xurl                                                                       |
-
-## Extensions / Plugins
-
-Bundled extension packages. Channel adapters, memory backends, and
-auth providers all live here. Each ships its own `package.json`.
-
-**33 bundled extensions/plugins.**
-
-| Extension                 | Version | Description                                                                                           |
-| ------------------------- | ------- | ----------------------------------------------------------------------------------------------------- |
-| `bluebubbles`             | 2.9.4   | Symi BlueBubbles channel plugin                                                                       |
-| `copilot-proxy`           | 2.9.4   | Symi Copilot Proxy provider plugin                                                                    |
-| `diagnostics-otel`        | 2.9.4   | Symi diagnostics OpenTelemetry exporter                                                               |
-| `feishu`                  | 2.9.4   | Symi Feishu/Lark channel plugin (community maintained by @m1heng)                                     |
-| `google-antigravity-auth` | 2.9.4   | Symi Google Antigravity OAuth provider plugin                                                         |
-| `google-gemini-cli-auth`  | 2.9.4   | Symi Gemini CLI OAuth provider plugin                                                                 |
-| `googlechat`              | 2.9.4   | Symi Google Chat channel plugin                                                                       |
-| `imessage`                | 2.9.4   | Symi iMessage channel plugin                                                                          |
-| `irc`                     | 2.9.4   | Symi IRC channel plugin                                                                               |
-| `learning-loop`           | 2.9.4   | Closed-loop learning extension with deterministic quality scoring and vector-indexed learning storage |
-| `line`                    | 2.9.4   | Symi LINE channel plugin                                                                              |
-| `llm-task`                | 2.9.4   | Symi JSON-only LLM task plugin                                                                        |
-| `matrix`                  | 2.9.4   | Symi Matrix channel plugin                                                                            |
-| `mattermost`              | 2.9.4   | Symi Mattermost channel plugin                                                                        |
-| `memory-core`             | 2.9.4   | Symi core memory search plugin                                                                        |
-| `memory-lancedb`          | 2.9.4   | Symi LanceDB-backed long-term memory plugin with auto-recall/capture                                  |
-| `minimax-portal-auth`     | 2.9.4   | Symi MiniMax Portal OAuth provider plugin                                                             |
-| `msteams`                 | 2.9.4   | Symi Microsoft Teams channel plugin                                                                   |
-| `nextcloud-talk`          | 2.9.4   | Symi Nextcloud Talk channel plugin                                                                    |
-| `nostr`                   | 2.9.4   | Symi Nostr channel plugin for NIP-04 encrypted DMs                                                    |
-| `open-prose`              | 2.9.4   | OpenProse VM skill pack plugin (slash command + telemetry).                                           |
-| `outlook`                 | 2.9.4   | Symi Outlook 365 email integration via Microsoft Graph API                                            |
-| `pipeline`                | 2.9.4   | Pipeline workflow tool plugin (typed pipelines + resumable approvals)                                 |
-| `signal`                  | 2.9.4   | Symi Signal channel plugin                                                                            |
-| `slack`                   | 2.9.4   | Symi Slack channel plugin                                                                             |
-| `telegram`                | 2.9.4   | Symi Telegram channel plugin                                                                          |
-| `tlon`                    | 2.9.4   | Symi Tlon/Urbit channel plugin                                                                        |
-| `twitch`                  | 2.9.4   | Symi Twitch channel plugin                                                                            |
-| `voice-call`              | 2.9.4   | Symi voice-call plugin                                                                                |
-| `whatsapp`                | 2.9.4   | Symi WhatsApp channel plugin                                                                          |
-| `zalo`                    | 2.9.4   | Symi Zalo channel plugin                                                                              |
-| `zalouser`                | 2.9.4   | Symi Zalo Personal Account plugin via zca-cli                                                         |
-
-## Behaviour rules enforced by runtime
-
-Rules that left the system prompt and now enforce in code:
-
-| Rule                                             | Enforcement                                                              | Stage   |
-| ------------------------------------------------ | ------------------------------------------------------------------------ | ------- |
-| `NO_REPLY` / `SYMIPULSE_OK` strict-match drop    | `src/gateway/outbound-filter.ts`                                         | 1.1     |
-| Reply-tag tolerant parsing + auto-injection      | `src/utils/directive-tags.ts` + `src/auto-reply/reply/reply-payloads.ts` | 1.2     |
-| Edit refuses unread files                        | `src/agents/pi-tools.read-edit-guard.ts`                                 | 1.3     |
-| Self-update requires `userRequestAcknowledgment` | `src/agents/tools/gateway-tool.ts`                                       | 1.4     |
-| Tool palette token budget audit                  | `src/agents/pi-tools.palette-size.test.ts`                               | 2.3     |
-| Per-profile `promptAdditions` shared constants   | `src/config/model-profiles-builtin.ts`                                   | 2.4     |
-| `skill_search` JIT discovery tool                | `src/agents/tools/skill-search-tool.ts`                                  | 3.3     |
-| Anchor list + auto-injection blocks              | `src/agents/system-prompt-skills-jit.ts`                                 | 3.4/3.5 |
-| `compactMode` section deletions                  | `src/agents/system-prompt.ts`                                            | 4.5     |
-
-## Reproducing this artifact
-
-```bash
-pnpm tsx scripts/build-capabilities-index.ts
-```
-
-Run after any change to skills, extensions, or runtime behavior rules.