@tianshu-ai/tianshu 0.3.0

package/plugins/files/dist/tools/tenant-config-helper.d.ts

@@ -0,0 +1,64 @@
+export declare class TenantConfigPathError extends Error {
+    readonly requested: string;
+    readonly code: "TENANT_CONFIG_PATH_ERROR";
+    constructor(requested: string, reason: string);
+}
+/** Absolute on-disk root for the tenant config tree.
+ *
+ *  `tenantHomeDir` is the **per-tenant** root and may be either:
+ *    - `<...>/tenants/<id>`              (preferred form)
+ *    - `<...>/tenants/<id>/workspace`    (also accepted because
+ *      `AgentToolContext.tenantHomeDir` is currently filled by
+ *      handler/agent-loop with `ctx.workspaceDir` for symmetry
+ *      with the file-plugin call sites)
+ *
+ *  Anything else — e.g. the global `~/.tianshu` root — is a
+ *  bug; the resulting path would write into a tenant-bleeding
+ *  shared location. We can't easily detect that here, so the
+ *  contract is on the caller (host wires this from
+ *  ctx.workspaceDir / similar). */
+export declare function getTenantConfigRoot(tenantHomeDir: string): string;
+/**
+ * Resolve a tool-supplied `tenant-config:///<rel>` URI (or a bare
+ * relative path) into an absolute on-disk path under the tenant
+ * config root. Throws if the path escapes the root, contains `..`,
+ * or is empty.
+ */
+export declare function resolveInTenantConfig(tenantHomeDir: string, requested: string): string;
+/** Convert an absolute path back into a `tenant-config:///<rel>`
+ *  URI for use in tool result text. Throws if `abs` is outside the
+ *  tenant-config root. */
+export declare function toTenantConfigUri(tenantHomeDir: string, abs: string): string;
+/**
+ * Decide whether the given absolute path is writable from the
+ * provided agent scope. Reads are not gated; only `tenant_config_write`
+ * / `tenant_config_edit` / `tenant_config_delete` consult this.
+ *
+ * Allowed shapes (rooted at the tenant config tree):
+ *
+ *   main agent     → `skills/...`,           `main/skills/...`
+ *   worker:<kind>  → `workers/<kind>/skills/...`
+ *
+ * The boundary is **only** the per-scope `skills/` subtree for now
+ * (i.e. shared `skills/`, `main/skills/`, `workers/<kind>/skills/`).
+ * Future surfaces (SOUL.md, MEMORY.md) would each need their own
+ * opt-in here \u2014 keeping the allow-list narrow makes accidental
+ * writes to agent personality files impossible by construction.
+ */
+export type AgentScope = {
+    kind: "main";
+} | {
+    kind: "worker";
+    workerKind: string;
+    slug?: string;
+};
+export interface WriteCheck {
+    ok: boolean;
+    /** Human-readable reason when `ok=false`. */
+    reason?: string;
+    /** Canonical scope label ("shared", "main", `worker:<kind>`) when
+     *  `ok=true`, for tool result text. */
+    scopeLabel?: string;
+}
+export declare function checkWritable(tenantHomeDir: string, abs: string, scope: AgentScope): WriteCheck;
+//# sourceMappingURL=tenant-config-helper.d.ts.map

package/plugins/files/dist/tools/tenant-config-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-helper.d.ts","sourceRoot":"","sources":["../../src/tools/tenant-config-helper.ts"],"names":[],"mappings":"AAeA,qBAAa,qBAAsB,SAAQ,KAAK;aAElB,SAAS,EAAE,MAAM;IAD7C,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAU;gBACxB,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAI9D;AAED;;;;;;;;;;;;;mCAamC;AACnC,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAoBjE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,MAAM,CAuBR;AAED;;0BAE0B;AAC1B,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,GACV,MAAM,CAQR;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2CACuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,GAChB,UAAU,CAsEZ"}

package/plugins/files/dist/tools/tenant-config-helper.js

@@ -0,0 +1,162 @@
+// Path / scope helper for the `tenant_config_*` agent tools.
+//
+// These tools operate on the tenant-shared config tree at
+// `<tenant>/workspace/_tenant/config/`. That tree houses skills and
+// (in future) other agent-facing config that the user can edit but
+// is not part of any single user's home dir.
+//
+// URI shape: `tenant-config:///<rel>` mirrors the user-workspace
+// `workspace:///<rel>` URIs the rest of the files plugin emits.
+// Path-traversal protection is identical: literal `..` segments in
+// the requested path are rejected up front, and the resolved path
+// is checked against the canonical tenant-config root.
+import path from "node:path";
+export class TenantConfigPathError extends Error {
+    requested;
+    code = "TENANT_CONFIG_PATH_ERROR";
+    constructor(requested, reason) {
+        super(`tenant-config path "${requested}" rejected: ${reason}`);
+        this.requested = requested;
+        this.name = "TenantConfigPathError";
+    }
+}
+/** Absolute on-disk root for the tenant config tree.
+ *
+ *  `tenantHomeDir` is the **per-tenant** root and may be either:
+ *    - `<...>/tenants/<id>`              (preferred form)
+ *    - `<...>/tenants/<id>/workspace`    (also accepted because
+ *      `AgentToolContext.tenantHomeDir` is currently filled by
+ *      handler/agent-loop with `ctx.workspaceDir` for symmetry
+ *      with the file-plugin call sites)
+ *
+ *  Anything else — e.g. the global `~/.tianshu` root — is a
+ *  bug; the resulting path would write into a tenant-bleeding
+ *  shared location. We can't easily detect that here, so the
+ *  contract is on the caller (host wires this from
+ *  ctx.workspaceDir / similar). */
+export function getTenantConfigRoot(tenantHomeDir) {
+    // Try `<root>/_tenant/config/` first — matches the
+    // tenantHomeDir = workspaceDir form. Fall back to
+    // `<root>/workspace/_tenant/config/` for callers passing the
+    // tenant root proper.
+    const direct = path.resolve(tenantHomeDir, "_tenant", "config");
+    const viaWorkspace = path.resolve(tenantHomeDir, "workspace", "_tenant", "config");
+    // We can't `existsSync()` here without making this fs-aware
+    // (and the helper is also used to *create* paths). Pick the
+    // workspace form when `tenantHomeDir` looks like a workspace
+    // dir already, else the via-workspace form. Heuristic: ends
+    // in `workspace` or `workspace/`.
+    const trimmed = tenantHomeDir.replace(/[/\\]+$/, "");
+    if (trimmed.endsWith("workspace"))
+        return direct;
+    return viaWorkspace;
+}
+/**
+ * Resolve a tool-supplied `tenant-config:///<rel>` URI (or a bare
+ * relative path) into an absolute on-disk path under the tenant
+ * config root. Throws if the path escapes the root, contains `..`,
+ * or is empty.
+ */
+export function resolveInTenantConfig(tenantHomeDir, requested) {
+    if (typeof requested !== "string") {
+        throw new TenantConfigPathError(String(requested), "not a string");
+    }
+    let rel = requested.replace(/\\/g, "/");
+    if (rel.startsWith("tenant-config:///")) {
+        rel = rel.slice("tenant-config:///".length);
+    }
+    else if (rel.startsWith("tenant-config://")) {
+        rel = rel.slice("tenant-config://".length);
+    }
+    else if (rel === "tenant-config:") {
+        rel = "";
+    }
+    if (rel.startsWith("/"))
+        rel = rel.slice(1);
+    const segments = rel.split("/").filter((s) => s.length > 0);
+    if (segments.some((s) => s === "..")) {
+        throw new TenantConfigPathError(requested, "contains '..' segment");
+    }
+    const root = getTenantConfigRoot(tenantHomeDir);
+    const resolved = path.resolve(root, ...segments);
+    if (resolved !== root && !resolved.startsWith(root + path.sep)) {
+        throw new TenantConfigPathError(requested, "escapes tenant-config root");
+    }
+    return resolved;
+}
+/** Convert an absolute path back into a `tenant-config:///<rel>`
+ *  URI for use in tool result text. Throws if `abs` is outside the
+ *  tenant-config root. */
+export function toTenantConfigUri(tenantHomeDir, abs) {
+    const root = getTenantConfigRoot(tenantHomeDir);
+    const rel = path.relative(root, abs).replace(/\\/g, "/");
+    if (rel.startsWith("..")) {
+        throw new TenantConfigPathError(abs, "escapes tenant-config root");
+    }
+    if (rel === "" || rel === ".")
+        return "tenant-config:///";
+    return "tenant-config:///" + rel;
+}
+export function checkWritable(tenantHomeDir, abs, scope) {
+    const root = getTenantConfigRoot(tenantHomeDir);
+    const rel = path.relative(root, abs).replace(/\\/g, "/");
+    if (rel === "" || rel === "." || rel.startsWith("..")) {
+        return { ok: false, reason: "outside tenant-config root" };
+    }
+    const segments = rel.split("/");
+    // Mirror tree (`skills/_host/...`) is a read-only window onto
+    // host- and plugin-shipped SKILL.md bundles. Writing there is
+    // pointless because the host overwrites the tree on every
+    // boot from the source-of-truth files in the plugin / host
+    // repo. Refuse explicitly so the agent gets a clear message
+    // instead of editing a doomed file.
+    if (segments[0] === "skills" && segments[1] === "_host") {
+        return {
+            ok: false,
+            reason: "skills/_host/ is a read-only mirror of host & plugin skills (overwritten on every boot). Edit the source SKILL.md in the plugin or host repo instead.",
+        };
+    }
+    // Main agent. Allowed prefixes:
+    //   skills/...                        → shared skill bundle
+    //   main/skills/...                   → main-only skill bundle
+    //   workers/<slug>/...                → author / edit any worker
+    //                                      bundle (agent.json,
+    //                                      SOUL.md, skills/, etc).
+    // Anything else (root files, future top-level surfaces) is
+    // rejected so the agent can't accidentally write SOUL/MEMORY
+    // for the tenant itself.
+    if (scope.kind === "main") {
+        if (segments[0] === "skills") {
+            return { ok: true, scopeLabel: "shared" };
+        }
+        if (segments[0] === "main" && segments[1] === "skills") {
+            return { ok: true, scopeLabel: "main" };
+        }
+        if (segments[0] === "workers" &&
+            segments[1] &&
+            segments[1].length > 0) {
+            return { ok: true, scopeLabel: `workers/${segments[1]}` };
+        }
+        return {
+            ok: false,
+            reason: "main agent may only write under skills/, main/skills/, or workers/<slug>/ in tenant-config",
+        };
+    }
+    // Worker. Strict: only the worker's own skills/ directory.
+    // Workers should not edit their own agent.json / SOUL.md (loop
+    // would self-reload mid-run). The slug is preferred because the
+    // filesystem keys off slug, not kind. If a slug isn't supplied
+    // we fall back to kind for legacy callers — mostly the
+    // existing pre-PR-A path.
+    const workerSegment = scope.slug || scope.workerKind;
+    if (segments[0] === "workers" &&
+        segments[1] === workerSegment &&
+        segments[2] === "skills") {
+        return { ok: true, scopeLabel: `worker:${workerSegment}` };
+    }
+    return {
+        ok: false,
+        reason: `worker (slug=${scope.slug ?? "—"}, kind=${scope.workerKind}) may only write under workers/${workerSegment}/skills/`,
+    };
+}
+//# sourceMappingURL=tenant-config-helper.js.map

package/plugins/files/dist/tools/tenant-config-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-helper.js","sourceRoot":"","sources":["../../src/tools/tenant-config-helper.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,0DAA0D;AAC1D,oEAAoE;AACpE,mEAAmE;AACnE,6CAA6C;AAC7C,EAAE;AACF,iEAAiE;AACjE,gEAAgE;AAChE,mEAAmE;AACnE,kEAAkE;AAClE,uDAAuD;AAEvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAElB;IADnB,IAAI,GAAG,0BAAmC,CAAC;IACpD,YAA4B,SAAiB,EAAE,MAAc;QAC3D,KAAK,CAAC,uBAAuB,SAAS,eAAe,MAAM,EAAE,CAAC,CAAC;QADrC,cAAS,GAAT,SAAS,CAAQ;QAE3C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;;;;;mCAamC;AACnC,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,mDAAmD;IACnD,kDAAkD;IAClD,6DAA6D;IAC7D,sBAAsB;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAC/B,aAAa,EACb,WAAW,EACX,SAAS,EACT,QAAQ,CACT,CAAC;IACF,4DAA4D;IAC5D,4DAA4D;IAC5D,6DAA6D;IAC7D,4DAA4D;IAC5D,kCAAkC;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,aAAqB,EACrB,SAAiB;IAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC9C,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;QACpC,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;0BAE0B;AAC1B,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,GAAW;IAEX,MAAM,IAAI,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC1D,OAAO,mBAAmB,GAAG,GAAG,CAAC;AACnC,CAAC;AA+BD,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,GAAW,EACX,KAAiB;IAEjB,MAAM,IAAI,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEhC,8DAA8D;IAC9D,8DAA8D;IAC9D,0DAA0D;IAC1D,2DAA2D;IAC3D,4DAA4D;IAC5D,oCAAoC;IACpC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,uJAAuJ;SAC1J,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,4DAA4D;IAC5D,+DAA+D;IAC/D,iEAAiE;IACjE,2DAA2D;IAC3D,+DAA+D;IAC/D,2DAA2D;IAC3D,6DAA6D;IAC7D,yBAAyB;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC;QACD,IACE,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS;YACzB,QAAQ,CAAC,CAAC,CAAC;YACX,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,4FAA4F;SAC/F,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,+DAA+D;IAC/D,gEAAgE;IAChE,+DAA+D;IAC/D,uDAAuD;IACvD,0BAA0B;IAC1B,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;IACrD,IACE,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS;QACzB,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa;QAC7B,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EACxB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,gBAAgB,KAAK,CAAC,IAAI,IAAI,GAAG,UAAU,KAAK,CAAC,UAAU,kCAAkC,aAAa,UAAU;KAC7H,CAAC;AACJ,CAAC"}

package/plugins/files/dist/tools/tenant-config-list.d.ts

@@ -0,0 +1,20 @@
+import type { Tool } from "@earendil-works/pi-ai";
+interface ListEntry {
+    name: string;
+    path: string;
+    type: "directory" | "file" | "other";
+    size: number;
+    modifiedMs: number;
+}
+export interface TenantConfigListResult {
+    ok: boolean;
+    text: string;
+    entries?: ListEntry[];
+    truncated?: boolean;
+}
+export declare function tenantConfigListSchema(): Tool;
+export declare function executeTenantConfigList(tenantHomeDir: string, args: {
+    path?: string;
+}): TenantConfigListResult;
+export {};
+//# sourceMappingURL=tenant-config-list.d.ts.map

package/plugins/files/dist/tools/tenant-config-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-list.d.ts","sourceRoot":"","sources":["../../src/tools/tenant-config-list.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAUlD,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAiB7C;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,sBAAsB,CAsExB"}

package/plugins/files/dist/tools/tenant-config-list.js

@@ -0,0 +1,95 @@
+// tenant_config_list — agent tool that lists entries inside the
+// tenant-shared config tree. The path is rooted at
+// `<tenant>/workspace/_tenant/config/` so an empty argument lists
+// the top-level layers (skills/, main/, workers/, ...).
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "typebox";
+import { resolveInTenantConfig, toTenantConfigUri, TenantConfigPathError, getTenantConfigRoot, } from "./tenant-config-helper.js";
+const MAX_ENTRIES = 5000;
+export function tenantConfigListSchema() {
+    return {
+        name: "tenant_config_list",
+        description: "List entries in the tenant-shared config tree (the root of " +
+            "every tenant_config:// path). Use this to discover skills " +
+            "under `skills/`, `main/skills/`, or `workers/<kind>/skills/` — " +
+            'the path is relative to the config root ("/" = root).',
+        parameters: Type.Object({
+            path: Type.Optional(Type.String({
+                description: 'Path under the config root (e.g. "/", "/main/skills", "tenant-config:///main/skills"). Default "/".',
+            })),
+        }),
+    };
+}
+export function executeTenantConfigList(tenantHomeDir, args) {
+    const requested = args.path ?? "/";
+    let resolved;
+    try {
+        resolved = resolveInTenantConfig(tenantHomeDir, requested);
+    }
+    catch (err) {
+        if (err instanceof TenantConfigPathError) {
+            return { ok: false, text: err.message };
+        }
+        throw err;
+    }
+    // Auto-create the root on first read so an empty `_tenant/`
+    // doesn't 404.
+    const root = getTenantConfigRoot(tenantHomeDir);
+    if (resolved === root && !fs.existsSync(resolved)) {
+        fs.mkdirSync(resolved, { recursive: true });
+    }
+    if (!fs.existsSync(resolved)) {
+        return { ok: false, text: `not found: ${requested}` };
+    }
+    const stat = fs.statSync(resolved);
+    if (!stat.isDirectory()) {
+        return { ok: false, text: `not a directory: ${requested}` };
+    }
+    const dirents = fs.readdirSync(resolved, { withFileTypes: true });
+    const truncated = dirents.length > MAX_ENTRIES;
+    const slice = dirents.slice(0, MAX_ENTRIES);
+    const entries = slice.map((d) => {
+        const full = path.join(resolved, d.name);
+        let size = 0;
+        let modifiedMs = 0;
+        try {
+            const s = fs.statSync(full);
+            size = s.size;
+            modifiedMs = s.mtimeMs;
+        }
+        catch {
+            /* swallow — broken symlinks etc. */
+        }
+        const type = d.isDirectory()
+            ? "directory"
+            : d.isFile()
+                ? "file"
+                : "other";
+        return {
+            name: d.name,
+            path: toTenantConfigUri(tenantHomeDir, full),
+            type,
+            size,
+            modifiedMs,
+        };
+    });
+    entries.sort((a, b) => {
+        if (a.type !== b.type) {
+            if (a.type === "directory")
+                return -1;
+            if (b.type === "directory")
+                return 1;
+        }
+        return a.name.localeCompare(b.name);
+    });
+    const lines = entries.map((e) => e.type === "directory" ? `${e.path}/` : `${e.path}  (${e.size} bytes)`);
+    const header = `Tenant config ${toTenantConfigUri(tenantHomeDir, resolved)} (${entries.length} ${entries.length === 1 ? "entry" : "entries"}${truncated ? ", truncated" : ""}):`;
+    return {
+        ok: true,
+        text: [header, ...lines].join("\n"),
+        entries,
+        truncated,
+    };
+}
+//# sourceMappingURL=tenant-config-list.js.map

package/plugins/files/dist/tools/tenant-config-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-list.js","sourceRoot":"","sources":["../../src/tools/tenant-config-list.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,mDAAmD;AACnD,kEAAkE;AAClE,wDAAwD;AAExD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,GAAG,IAAI,CAAC;AAiBzB,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,6DAA6D;YAC7D,4DAA4D;YAC5D,iEAAiE;YACjE,uDAAuD;QACzD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,qGAAqG;aACxG,CAAC,CACH;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,aAAqB,EACrB,IAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;IACnC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,4DAA4D;IAC5D,eAAe;IACf,MAAM,IAAI,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,SAAS,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,SAAS,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACd,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,MAAM,IAAI,GAAsB,CAAC,CAAC,WAAW,EAAE;YAC7C,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;gBACV,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,OAAO,CAAC;QACd,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC;YAC5C,IAAI;YACJ,IAAI;YACJ,UAAU;SACX,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,SAAS,CACvE,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACjL,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC"}

package/plugins/files/dist/tools/tenant-config-read.d.ts

@@ -0,0 +1,17 @@
+import type { Tool } from "@earendil-works/pi-ai";
+export declare const TC_MAX_TEXT_BYTES = 500000;
+export interface TenantConfigReadResult {
+    ok: boolean;
+    text: string;
+    binary?: boolean;
+    size?: number;
+    bytesReturned?: number;
+    nextOffset?: number;
+}
+export declare function tenantConfigReadSchema(): Tool;
+export declare function executeTenantConfigRead(tenantHomeDir: string, args: {
+    path: string;
+    offset?: number;
+    limit?: number;
+}): TenantConfigReadResult;
+//# sourceMappingURL=tenant-config-read.d.ts.map

package/plugins/files/dist/tools/tenant-config-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-read.d.ts","sourceRoot":"","sources":["../../src/tools/tenant-config-read.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAOlD,eAAO,MAAM,iBAAiB,SAAU,CAAC;AAEzC,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CA6B7C;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,sBAAsB,CAyDxB"}

package/plugins/files/dist/tools/tenant-config-read.js

@@ -0,0 +1,87 @@
+// tenant_config_read — read a file inside the tenant config tree.
+// Mirrors `read_file` but rooted at `<tenant>/workspace/_tenant/config/`.
+import fs from "node:fs";
+import { Type } from "typebox";
+import { resolveInTenantConfig, toTenantConfigUri, TenantConfigPathError, } from "./tenant-config-helper.js";
+export const TC_MAX_TEXT_BYTES = 500_000;
+export function tenantConfigReadSchema() {
+    return {
+        name: "tenant_config_read",
+        description: `Read a file from the tenant config tree (skills, etc). ` +
+            `Returns up to ${TC_MAX_TEXT_BYTES / 1000} KB per call; for ` +
+            `larger files page through with offset+limit. Path is rooted ` +
+            `at the tenant-config root, so e.g. ` +
+            `"main/skills/skill-creator/SKILL.md" or the URI form ` +
+            `"tenant-config:///main/skills/skill-creator/SKILL.md" both work.`,
+        parameters: Type.Object({
+            path: Type.String({
+                description: 'Path under the tenant-config root (or a tenant-config:/// URI).',
+            }),
+            offset: Type.Optional(Type.Integer({
+                minimum: 0,
+                description: "Byte offset to start reading from. Default 0.",
+            })),
+            limit: Type.Optional(Type.Integer({
+                minimum: 1,
+                description: `Max bytes to return. Capped at ${TC_MAX_TEXT_BYTES}.`,
+            })),
+        }),
+    };
+}
+export function executeTenantConfigRead(tenantHomeDir, args) {
+    let resolved;
+    try {
+        resolved = resolveInTenantConfig(tenantHomeDir, args.path);
+    }
+    catch (err) {
+        if (err instanceof TenantConfigPathError) {
+            return { ok: false, text: err.message };
+        }
+        throw err;
+    }
+    if (!fs.existsSync(resolved)) {
+        return { ok: false, text: `not found: ${args.path}` };
+    }
+    const stat = fs.statSync(resolved);
+    if (stat.isDirectory()) {
+        return { ok: false, text: `is a directory, not a file: ${args.path}` };
+    }
+    const offset = Math.max(0, Math.floor(args.offset ?? 0));
+    const limit = Math.max(1, Math.min(args.limit ?? TC_MAX_TEXT_BYTES, TC_MAX_TEXT_BYTES));
+    const fd = fs.openSync(resolved, "r");
+    try {
+        const buf = Buffer.alloc(limit);
+        const bytesRead = fs.readSync(fd, buf, 0, limit, offset);
+        const slice = buf.subarray(0, bytesRead);
+        const probe = slice.subarray(0, Math.min(slice.length, 4096));
+        if (probe.includes(0)) {
+            return {
+                ok: true,
+                text: `(binary file: ${stat.size} bytes; not shown)`,
+                binary: true,
+                size: stat.size,
+            };
+        }
+        const content = slice.toString("utf8");
+        const nextOffset = offset + bytesRead;
+        const more = nextOffset < stat.size;
+        const uri = toTenantConfigUri(tenantHomeDir, resolved);
+        const header = stat.size <= TC_MAX_TEXT_BYTES
+            ? `// ${uri} (${stat.size} bytes)`
+            : `// ${uri} bytes ${offset}–${nextOffset} of ${stat.size}` +
+                (more
+                    ? ` — call tenant_config_read again with offset=${nextOffset} for the next chunk`
+                    : " (final chunk)");
+        return {
+            ok: true,
+            text: `${header}\n${content}`,
+            size: stat.size,
+            bytesReturned: bytesRead,
+            nextOffset: more ? nextOffset : undefined,
+        };
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+//# sourceMappingURL=tenant-config-read.js.map

package/plugins/files/dist/tools/tenant-config-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-read.js","sourceRoot":"","sources":["../../src/tools/tenant-config-read.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,0EAA0E;AAE1E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAWzC,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,yDAAyD;YACzD,iBAAiB,iBAAiB,GAAG,IAAI,oBAAoB;YAC7D,8DAA8D;YAC9D,qCAAqC;YACrC,uDAAuD;YACvD,kEAAkE;QACpE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBAChB,WAAW,EACT,iEAAiE;aACpE,CAAC;YACF,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,OAAO,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,+CAA+C;aAC7D,CAAC,CACH;YACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,OAAO,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,kCAAkC,iBAAiB,GAAG;aACpE,CAAC,CACH;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,aAAqB,EACrB,IAAuD;IAEvD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,iBAAiB,EAAE,iBAAiB,CAAC,CAC7D,CAAC;IACF,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,iBAAiB,IAAI,CAAC,IAAI,oBAAoB;gBACpD,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QACtC,MAAM,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QACpC,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GACV,IAAI,CAAC,IAAI,IAAI,iBAAiB;YAC5B,CAAC,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,IAAI,SAAS;YAClC,CAAC,CAAC,MAAM,GAAG,UAAU,MAAM,IAAI,UAAU,OAAO,IAAI,CAAC,IAAI,EAAE;gBACzD,CAAC,IAAI;oBACH,CAAC,CAAC,gDAAgD,UAAU,qBAAqB;oBACjF,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,MAAM,KAAK,OAAO,EAAE;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAC1C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}

package/plugins/files/dist/tools/tenant-config-write.d.ts

@@ -0,0 +1,14 @@
+import type { Tool } from "@earendil-works/pi-ai";
+import { AgentScope } from "./tenant-config-helper.js";
+export interface TenantConfigWriteResult {
+    ok: boolean;
+    text: string;
+    bytesWritten?: number;
+    scope?: string;
+}
+export declare function tenantConfigWriteSchema(): Tool;
+export declare function executeTenantConfigWrite(tenantHomeDir: string, scope: AgentScope, args: {
+    path: string;
+    content: string;
+}): TenantConfigWriteResult;
+//# sourceMappingURL=tenant-config-write.d.ts.map

package/plugins/files/dist/tools/tenant-config-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-write.d.ts","sourceRoot":"","sources":["../../src/tools/tenant-config-write.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,UAAU,EAKX,MAAM,2BAA2B,CAAC;AAInC,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAwB9C;AAED,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtC,uBAAuB,CAqCzB"}

package/plugins/files/dist/tools/tenant-config-write.js

@@ -0,0 +1,78 @@
+// tenant_config_write — create / overwrite a file in the tenant
+// config tree. Write boundary is enforced by `checkWritable`:
+//
+//   main agent     → skills/...,            main/skills/...
+//   worker:<kind>  → workers/<kind>/skills/...
+//
+// Reads are unrestricted (see tenant_config_list / read), but writes
+// outside the agent's allowed scope are rejected so a worker can't
+// rewrite the main agent's skills and a misbehaved main agent can't
+// touch a worker's tree.
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "typebox";
+import { checkWritable, resolveInTenantConfig, toTenantConfigUri, TenantConfigPathError, } from "./tenant-config-helper.js";
+const MAX_WRITE_BYTES = 5_000_000; // 5 MB
+export function tenantConfigWriteSchema() {
+    return {
+        name: "tenant_config_write",
+        description: "Create or overwrite a file in the tenant config tree. The " +
+            "write boundary is scope-aware: main agents may write under " +
+            "`skills/` or `main/skills/`; workers may write only under " +
+            "`workers/<their-kind>/skills/`. Reads are unrestricted. Use " +
+            "this to author or update a SKILL.md (and its sibling files " +
+            "like scripts/foo.py, references/bar.md, assets/baz.txt).\n\n" +
+            "Guidelines:\n" +
+            "- Use `tenant_config_write` for new files or complete " +
+            "rewrites. For targeted changes to an existing file prefer " +
+            "`tenant_config_edit`.",
+        parameters: Type.Object({
+            path: Type.String({
+                description: 'Path under the tenant-config root, e.g. "main/skills/foo/SKILL.md".',
+            }),
+            content: Type.String({
+                description: "Full UTF-8 file contents to write.",
+            }),
+        }),
+    };
+}
+export function executeTenantConfigWrite(tenantHomeDir, scope, args) {
+    let resolved;
+    try {
+        resolved = resolveInTenantConfig(tenantHomeDir, args.path);
+    }
+    catch (err) {
+        if (err instanceof TenantConfigPathError) {
+            return { ok: false, text: err.message };
+        }
+        throw err;
+    }
+    const writable = checkWritable(tenantHomeDir, resolved, scope);
+    if (!writable.ok) {
+        return {
+            ok: false,
+            text: `not writable: ${writable.reason}`,
+        };
+    }
+    if (fs.existsSync(resolved) && fs.statSync(resolved).isDirectory()) {
+        return { ok: false, text: `is a directory: ${args.path}` };
+    }
+    const buf = Buffer.from(args.content, "utf8");
+    if (buf.length > MAX_WRITE_BYTES) {
+        return {
+            ok: false,
+            text: `content too large: ${buf.length} bytes > ${MAX_WRITE_BYTES} cap`,
+        };
+    }
+    fs.mkdirSync(path.dirname(resolved), { recursive: true });
+    const tmp = `${resolved}.tmp.${process.pid}.${Date.now()}`;
+    fs.writeFileSync(tmp, buf);
+    fs.renameSync(tmp, resolved);
+    return {
+        ok: true,
+        text: `wrote ${buf.length} bytes to ${toTenantConfigUri(tenantHomeDir, resolved)} [scope=${writable.scopeLabel}]`,
+        bytesWritten: buf.length,
+        scope: writable.scopeLabel,
+    };
+}
+//# sourceMappingURL=tenant-config-write.js.map

package/plugins/files/dist/tools/tenant-config-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-config-write.js","sourceRoot":"","sources":["../../src/tools/tenant-config-write.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,8DAA8D;AAC9D,EAAE;AACF,4DAA4D;AAC5D,+CAA+C;AAC/C,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,oEAAoE;AACpE,yBAAyB;AAEzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAEL,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,eAAe,GAAG,SAAS,CAAC,CAAC,OAAO;AAS1C,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,4DAA4D;YAC5D,6DAA6D;YAC7D,4DAA4D;YAC5D,8DAA8D;YAC9D,6DAA6D;YAC7D,8DAA8D;YAC9D,eAAe;YACf,wDAAwD;YACxD,4DAA4D;YAC5D,uBAAuB;QACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBAChB,WAAW,EACT,qEAAqE;aACxE,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;gBACnB,WAAW,EAAE,oCAAoC;aAClD,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,aAAqB,EACrB,KAAiB,EACjB,IAAuC;IAEvC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB,QAAQ,CAAC,MAAM,EAAE;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB,GAAG,CAAC,MAAM,YAAY,eAAe,MAAM;SACxE,CAAC;IACJ,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,SAAS,GAAG,CAAC,MAAM,aAAa,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,QAAQ,CAAC,UAAU,GAAG;QACjH,YAAY,EAAE,GAAG,CAAC,MAAM;QACxB,KAAK,EAAE,QAAQ,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC"}

package/plugins/files/dist/tools/text-shape.d.ts

@@ -0,0 +1,20 @@
+export interface ShapedSource {
+    /** File contents with any leading UTF-8 BOM removed. */
+    text: string;
+    /** True if the original bytes started with a UTF-8 BOM. */
+    hadBom: boolean;
+    /** "\r\n" if the file uses CRLF anywhere, else "\n". */
+    ending: "\n" | "\r\n";
+}
+/** Inspect a freshly-read file's contents and return the
+ *  normalised text plus shape metadata for round-tripping. */
+export declare function shapeOf(raw: string): ShapedSource;
+/** Normalise a model-supplied snippet to a target line ending.
+ *  Collapses any \r\n in the input to \n first (so mixed input is
+ *  cleaned), then expands to the target. Idempotent for already-
+ *  normalised input. */
+export declare function normaliseEnding(input: string, target: "\n" | "\r\n"): string;
+/** Re-prepend a BOM if the source had one. Always pass the
+ *  already-edited text in. */
+export declare function applyShape(text: string, source: ShapedSource): string;
+//# sourceMappingURL=text-shape.d.ts.map

package/plugins/files/dist/tools/text-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-shape.d.ts","sourceRoot":"","sources":["../../src/tools/text-shape.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC;CACvB;AAED;8DAC8D;AAC9D,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAKjD;AAED;;;wBAGwB;AACxB,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,GAAG,MAAM,GACpB,MAAM,CAIR;AAED;8BAC8B;AAC9B,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAErE"}