@try-works/dsh-righthand 0.1.4 → 0.1.6

package/README.md

@@ -26,6 +26,8 @@ dsh --profile <profile> --patch ./cordis.patch.yml
 |---|---|---|
 | `rh_store_put` / `rh_store_get` / `rh_store_delete` / `rh_store_list` | store | `ctx.storageDomain` (domain KV) |
 | `rh_task_create` / `rh_task_list` / `rh_task_next` / `rh_task_update` / `rh_task_delete` | tasks | `ctx.storageDomain` (typed `righthand_tasks` domain; state machine open → done/failed) |
+| `rh_text_summarise` / `rh_text_extract` / `rh_text_classify` / `rh_text_translate` | text | `ctx.llm` (one model call per verb) |
+| `rh_weather_forecast` / `rh_weather_air` | weather | Open-Meteo (keyless), every request through the SSRF-guarded fetcher |
 | `rh_credential_describe` / `rh_credential_set` / `rh_credential_unset` | secrets | `ctx.credentials` (values never echoed) |
 | `rh_settings_get` / `rh_settings_set` | secrets | `ctx.settings` (namespace `righthand`) |
 | `rh_run` | exec | `ctx.subprocess` (collect mode, bounded output) |
@@ -81,6 +83,7 @@ canonical example of the current DSH-native form (tool-to-tool via
 | Blueprint | What it builds |
 |---|---|
 | `blueprint/daily-digest` | Collect sources, summarize, send on a schedule — extractive locally, LLM synthesis as escalation |
+| `blueprint/data-adapter` | Wrap one keyless public API as a tool family: guarded fetch, normalize, one tool per query. Worked example ships in the plugin: `rh_weather_*` |
 | `blueprint/research-radar` | Multi-source research over a rolling window (Reddit, X, YouTube, HN, Polymarket, web): score, dedupe, synthesize with citations |
 | `blueprint/web-scraper` | Fetch a page, extract title/headings/links/text, make it searchable — static HTML first, render/vision as escalation |
 | `blueprint/vision-worker` | Cloudflare Worker exposing kimi-k2.6 vision: route image requests for text-only models, return a versioned `VisionEnvelope` |

package/lib/index.d.ts

@@ -15,6 +15,8 @@
  * - store-tools:     rh_store_put/get/delete/list over ctx.storageDomain
  * - secrets-tools:   rh_credential_describe/set/unset + rh_settings_get/set
  * - task-tools:      rh_task_create/list/next/update/delete over ctx.storageDomain
+ * - text-tools:      rh_text_summarise/extract/classify/translate over ctx.llm
+ * - weather-tools:   rh_weather_forecast/air over Open-Meteo (keyless, SSRF-guarded)
  * - exec-tools:      rh_run / rh_run_bg over ctx.subprocess + ctx.jobs
  * - guard-tools:     tools/pre-execute policy (config.rules)
  * - skills:          the packaged dsh-righthand skill (ctx.skills)
@@ -27,6 +29,8 @@ import * as secretsTools from './secrets-tools.ts';
 import * as execTools from './exec-tools.ts';
 import * as guardTools from './guard-tools.ts';
 import * as taskTools from './task-tools.ts';
+import * as textTools from './text-tools.ts';
+import * as weatherTools from './weather-tools.ts';
 import * as righthandSkills from './skills.ts';
 import type { GuardRule } from './guard-tools.ts';
 export declare const name = "dsh-righthand";
@@ -44,9 +48,11 @@ export interface RighthandConfig {
  * instead of failing the whole plugin.
  */
 export declare function apply(ctx: Context, config?: RighthandConfig): void;
-export { storeTools, secretsTools, execTools, taskTools, guardTools, righthandSkills };
+export { storeTools, secretsTools, execTools, taskTools, textTools, weatherTools, guardTools, righthandSkills };
 export { SKILL_NAME, SKILL_DESCRIPTION, skillDirectory, skillBody } from './skills.ts';
 export type { GuardRule } from './guard-tools.ts';
 export { guardFactsFor } from './guard-tools.ts';
 export type { GuardFacts } from './guard-tools.ts';
+export { isBlockedIP, guardedFetch, normalizeForecast, normalizeAir } from './weather-tools.ts';
+export type { WeatherConfig, ForecastOut, AirOut } from './weather-tools.ts';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,iFAAiF;AACjF,eAAO,MAAM,MAAM,EAAE,MAAM,EAAO,CAAA;AAElC,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,IAAI,CAOtE;AAGD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,iFAAiF;AACjF,eAAO,MAAM,MAAM,EAAE,MAAM,EAAO,CAAA;AAElC,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,IAAI,CAStE;AAGD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AAC/G,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC/F,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA"}

package/lib/index.js

@@ -15,6 +15,8 @@
  * - store-tools:     rh_store_put/get/delete/list over ctx.storageDomain
  * - secrets-tools:   rh_credential_describe/set/unset + rh_settings_get/set
  * - task-tools:      rh_task_create/list/next/update/delete over ctx.storageDomain
+ * - text-tools:      rh_text_summarise/extract/classify/translate over ctx.llm
+ * - weather-tools:   rh_weather_forecast/air over Open-Meteo (keyless, SSRF-guarded)
  * - exec-tools:      rh_run / rh_run_bg over ctx.subprocess + ctx.jobs
  * - guard-tools:     tools/pre-execute policy (config.rules)
  * - skills:          the packaged dsh-righthand skill (ctx.skills)
@@ -26,6 +28,8 @@ import * as secretsTools from "./secrets-tools.js";
 import * as execTools from "./exec-tools.js";
 import * as guardTools from "./guard-tools.js";
 import * as taskTools from "./task-tools.js";
+import * as textTools from "./text-tools.js";
+import * as weatherTools from "./weather-tools.js";
 import * as righthandSkills from "./skills.js";
 export const name = 'dsh-righthand';
 /** The combined plugin needs no services itself; each child waits on its own. */
@@ -41,11 +45,14 @@ export function apply(ctx, config = {}) {
     ctx.plugin(secretsTools);
     ctx.plugin(execTools);
     ctx.plugin(taskTools);
+    ctx.plugin(textTools);
+    ctx.plugin(weatherTools);
     ctx.plugin(guardTools, { rules: config.rules ?? [] });
     ctx.plugin(righthandSkills);
 }
 // Individual modules stay importable for selective mounting.
-export { storeTools, secretsTools, execTools, taskTools, guardTools, righthandSkills };
+export { storeTools, secretsTools, execTools, taskTools, textTools, weatherTools, guardTools, righthandSkills };
 export { SKILL_NAME, SKILL_DESCRIPTION, skillDirectory, skillBody } from "./skills.js";
 export { guardFactsFor } from "./guard-tools.js";
+export { isBlockedIP, guardedFetch, normalizeForecast, normalizeAir } from "./weather-tools.js";
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAG9C,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AAEnC,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,CAAA;AAQlC;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAA0B,EAAE;IAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAA;IACrD,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;AAC7B,CAAC;AAED,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEtF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAG9C,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AAEnC,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,CAAA;AAQlC;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAA0B,EAAE;IAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAA;IACrD,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;AAC7B,CAAC;AAED,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AAC/G,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEtF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/lib/text-tools.d.ts

@@ -0,0 +1,18 @@
+/**
+ * text-tools — rh_text_* over ctx.llm.
+ * Language work at one call per verb: summarise, extract-to-JSON,
+ * classify, translate. Same prompt discipline as the digest summarizer:
+ * roles stay roles, caps are deliberate, each call's failure is contained
+ * in that call (the other tools are unaffected).
+ * @module dsh-righthand/text-tools
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "righthand-text";
+export declare const inject: string[];
+export interface TextConfig {
+    /** LLM route; defaults match the harness default model. */
+    provider?: string;
+    model?: string;
+}
+export declare function apply(ctx: Context, config?: TextConfig): void;
+//# sourceMappingURL=text-tools.d.ts.map

package/lib/text-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-tools.d.ts","sourceRoot":"","sources":["../src/text-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKlD,eAAO,MAAM,IAAI,mBAAmB,CAAA;AACpC,eAAO,MAAM,MAAM,UAAmB,CAAA;AAEtC,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AA8CD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,UAAe,GAAG,IAAI,CAoGjE"}

package/lib/text-tools.js

@@ -0,0 +1,158 @@
+/**
+ * text-tools — rh_text_* over ctx.llm.
+ * Language work at one call per verb: summarise, extract-to-JSON,
+ * classify, translate. Same prompt discipline as the digest summarizer:
+ * roles stay roles, caps are deliberate, each call's failure is contained
+ * in that call (the other tools are unaffected).
+ * @module dsh-righthand/text-tools
+ */
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { BlockAssembler, createUserMessage, deepFreeze } from '@deepseek-ai/dsh-llm';
+export const name = 'righthand-text';
+export const inject = ['tools', 'llm'];
+const DEFAULTS = { provider: 'deepseek-official', model: 'deepseek-v4-flash' };
+/** One LLM call, text in, text out. Returns the assembled text or throws. */
+async function ask(ctx, cfg, system, user, maxTokens, signal) {
+    const options = deepFreeze({
+        provider: cfg.provider,
+        model: cfg.model,
+        messages: [createUserMessage({
+                content: [{ type: 'text', text: user }],
+                source: { kind: 'plugin', plugin: 'righthand-text' },
+            })],
+        system,
+        maxTokens,
+        purpose: 'compaction',
+        signal,
+    });
+    const assembler = new BlockAssembler();
+    for await (const chunk of ctx.llm.stream(options))
+        assembler.push(chunk);
+    if (assembler.finish.kind !== 'stop')
+        throw new Error('text model call did not stop cleanly: ' + JSON.stringify(assembler.finish.kind));
+    const text = assembler.blocks().filter((b) => b.type === 'text').map((b) => b.text).join(' ').trim();
+    if (text === '')
+        throw new Error('text model call produced no text');
+    return text;
+}
+/** Extract the outermost {...} JSON object from a model reply. */
+function parseJsonWindow(text) {
+    const start = text.indexOf('{');
+    const end = text.lastIndexOf('}');
+    if (start < 0 || end <= start)
+        throw new Error('model output was not JSON');
+    return JSON.parse(text.slice(start, end + 1));
+}
+/** Summarise: plain prose, no JSON. */
+const SUMMARISE_SYSTEM = 'You summarise text. Return ONLY the summary itself - a few sentences, plain prose, no JSON, no Markdown headers, no quotes around it. Preserve the language of the input.';
+/** Extract: JSON matching a caller schema. */
+const EXTRACT_SYSTEM = 'You extract structured data from text. Return ONLY one JSON object matching the caller schema exactly - no prose, no Markdown, no code fences.';
+/** Classify: one label plus confidence, as JSON. */
+const CLASSIFY_SYSTEM = 'You classify text. Return ONLY one JSON object with exactly two keys: label (one of the given labels, verbatim) and confidence (a number from 0 to 1). No prose, no Markdown.';
+/** Translate: preserve formatting, plain prose. */
+const TRANSLATE_SYSTEM = 'You translate text. Return ONLY the translation - plain prose, no JSON, no quotes around it, preserving paragraph breaks and any Markdown or code the input contains.';
+export function apply(ctx, config = {}) {
+    const cfg = { ...DEFAULTS, ...config };
+    ctx.tools.register(defineTool({
+        name: 'rh_text_summarise',
+        description: 'Summarise text into a few sentences. One model call per invocation; the result is new prose, not extracted sentences.',
+        parameters: {
+            text: { type: 'string', required: true, description: 'The text to summarise (max ~30000 characters).' },
+            sentences: { type: 'integer', description: 'Target length in sentences (default 3).' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    summary: { type: 'string', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: value.summary }],
+        },
+        async execute(args, exec) {
+            const n = args.sentences ?? 3;
+            const summary = await ask(ctx, cfg, SUMMARISE_SYSTEM, 'Summarise this in about ' + n + ' sentences:\n\n' + args.text, 600, exec.signal);
+            return { summary };
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_text_extract',
+        description: 'Turn text into JSON matching a schema you give. The schema is a JSON Schema object; the model returns one object conforming to it, or the call fails cleanly.',
+        parameters: {
+            text: { type: 'string', required: true, description: 'The text to extract from.' },
+            schema: { type: 'json', required: true, description: 'JSON Schema the result must match, e.g. { "type": "object", "properties": { "name": { "type": "string" } }, "required": ["name"] }.' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    extracted: { type: 'json', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: JSON.stringify(value.extracted) }],
+        },
+        async execute(args, exec) {
+            const framed = 'Schema:\n' + JSON.stringify(args.schema) + '\n\nText:\n' + args.text;
+            const raw = await ask(ctx, cfg, EXTRACT_SYSTEM, framed, 800, exec.signal);
+            return { extracted: parseJsonWindow(raw) };
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_text_classify',
+        description: 'Sort text into one of the labels you give, with a confidence score from 0 to 1. The label returned is one of yours, verbatim.',
+        parameters: {
+            text: { type: 'string', required: true, description: 'The text to classify.' },
+            labels: { type: 'array', required: true, items: { type: 'string' }, description: 'The candidate labels, e.g. ["bug", "feature request", "question"].' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    label: { type: 'string', required: true },
+                    confidence: { type: 'number', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: value.label + ' (' + value.confidence + ')' }],
+        },
+        async execute(args, exec) {
+            if (args.labels.length === 0)
+                throw new Error('classify needs at least one label');
+            const framed = 'Labels: ' + JSON.stringify(args.labels) + '\n\nText:\n' + args.text;
+            const raw = await ask(ctx, cfg, CLASSIFY_SYSTEM, framed, 100, exec.signal);
+            const parsed = parseJsonWindow(raw);
+            if (typeof parsed.label !== 'string' || !args.labels.includes(parsed.label))
+                throw new Error('model returned a label outside the given set');
+            const confidence = Number(parsed.confidence);
+            if (!Number.isFinite(confidence) || confidence < 0 || confidence > 1)
+                throw new Error('model returned an invalid confidence');
+            return { label: parsed.label, confidence };
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_text_translate',
+        description: 'Translate text into another language, preserving formatting (paragraph breaks, Markdown, code).',
+        parameters: {
+            text: { type: 'string', required: true, description: 'The text to translate.' },
+            language: { type: 'string', required: true, description: 'The target language, e.g. "Spanish", "zh-CN", "Japanese".' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    translation: { type: 'string', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: value.translation }],
+        },
+        async execute(args, exec) {
+            const framed = 'Translate the following into ' + args.language + ':\n\n' + args.text;
+            const translation = await ask(ctx, cfg, TRANSLATE_SYSTEM, framed, 800, exec.signal);
+            return { translation };
+        },
+    }));
+}
+//# sourceMappingURL=text-tools.js.map

package/lib/text-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-tools.js","sourceRoot":"","sources":["../src/text-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGpF,MAAM,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAA;AACpC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;AAQtC,MAAM,QAAQ,GAAyB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;AAEpG,6EAA6E;AAC7E,KAAK,UAAU,GAAG,CAAC,GAAY,EAAE,GAAyB,EAAE,MAAc,EAAE,IAAY,EAAE,SAAiB,EAAE,MAAmB;IAC9H,MAAM,OAAO,GAAoB,UAAU,CAAC;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,CAAC,iBAAiB,CAAC;gBAC3B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACvC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE;aACrD,CAAC,CAAC;QACH,MAAM;QACN,SAAS;QACT,OAAO,EAAE,YAAY;QACrB,MAAM;KACP,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,cAAc,EAAE,CAAA;IACtC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxE,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACvI,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9G,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACpE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,kEAAkE;AAClE,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,uCAAuC;AACvC,MAAM,gBAAgB,GAAG,2KAA2K,CAAA;AAEpM,8CAA8C;AAC9C,MAAM,cAAc,GAAG,gJAAgJ,CAAA;AAEvK,oDAAoD;AACpD,MAAM,eAAe,GAAG,+KAA+K,CAAA;AAEvM,mDAAmD;AACnD,MAAM,gBAAgB,GAAG,uKAAuK,CAAA;AAEhM,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAqB,EAAE;IACzD,MAAM,GAAG,GAAyB,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAA;IAC5D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,uHAAuH;QACpI,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gDAAgD,EAAE;YACvG,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE;SACvF;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC5C;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;SAClE;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAA;YAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,0BAA0B,GAAG,CAAC,GAAG,iBAAiB,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YACvI,OAAO,EAAE,OAAO,EAAE,CAAA;QACpB,CAAC;KACF,CAAC,CAAC,CAAA;IACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,+JAA+J;QAC5K,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;YAClF,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qIAAqI,EAAE;SAC7L;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC5C;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;SACpF;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,MAAM,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,aAAa,GAAG,IAAI,CAAC,IAAI,CAAA;YACpF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YACzE,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAA;QAC5C,CAAC;KACF,CAAC,CAAC,CAAA;IACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,+HAA+H;QAC5I,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE;YAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,oEAAoE,EAAE;SACxJ;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACzC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC/C;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;SAChG;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YAClF,MAAM,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,aAAa,GAAG,IAAI,CAAC,IAAI,CAAA;YACnF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1E,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;YAC5I,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAC7H,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAA;QAC5C,CAAC;KACF,CAAC,CAAC,CAAA;IACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,iGAAiG;QAC9G,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE;YAC/E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2DAA2D,EAAE;SACvH;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAChD;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACtE;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,MAAM,MAAM,GAAG,+BAA+B,GAAG,IAAI,CAAC,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;YACpF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YACnF,OAAO,EAAE,WAAW,EAAE,CAAA;QACxB,CAAC;KACF,CAAC,CAAC,CAAA;AACL,CAAC"}

package/lib/weather-tools.d.ts

@@ -0,0 +1,68 @@
+/**
+ * weather-tools — the worked example of the keyless data-adapter recipe
+ * (blueprint/data-adapter). Two tools over Open-Meteo, a keyless API:
+ *   rh_weather_forecast — current conditions + 3-day min/max
+ *   rh_weather_air      — PM2.5 / PM10 / European AQI
+ *
+ * Every request goes through guardedFetch, the SSRF checklist from Mu's
+ * safefetch: public destinations only (loopback, private, link-local incl.
+ * the metadata address, multicast and unspecified are refused), every
+ * redirect hop revalidated, response size and time capped.
+ * @module dsh-righthand/weather-tools
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "righthand-weather";
+export declare const inject: string[];
+export interface WeatherConfig {
+    /** Endpoint URLs; defaults are Open-Meteo (keyless). Tests override these. */
+    forecastUrl?: string;
+    airUrl?: string;
+}
+/**
+ * Whether an IP must not be reached: the Mu safefetch set — loopback,
+ * RFC1918 private, ULA, link-local (169.254/16, fe80::/10 — which includes
+ * the 169.254.169.254 metadata address), multicast, and unspecified.
+ */
+export declare function isBlockedIP(ip: string): boolean;
+/**
+ * Fetch one URL with the SSRF checklist. `fetchImpl` and `resolve` are
+ * injectable for tests; production uses the globals.
+ */
+export declare function guardedFetch(url: string, deps?: {
+    fetchImpl?: typeof fetch;
+    resolve?: (host: string) => Promise<string[]>;
+}): Promise<string>;
+/**
+ * Normalize the Open-Meteo forecast response into a stable digest shape:
+ * what changed is the wire JSON; what callers see is this.
+ */
+export interface ForecastOut {
+    latitude: number;
+    longitude: number;
+    timezone: string;
+    current: {
+        time: string;
+        temperature: number;
+        windspeed: number;
+        winddirection: number;
+        weathercode: number;
+    } | null;
+    daily: {
+        time: string[];
+        temperatureMax: number[];
+        temperatureMin: number[];
+    };
+}
+export declare function normalizeForecast(json: any): ForecastOut;
+/** Normalize the Open-Meteo air-quality response. */
+export interface AirOut {
+    latitude: number;
+    longitude: number;
+    time: string;
+    pm2_5: number | null;
+    pm10: number | null;
+    aqi: number | null;
+}
+export declare function normalizeAir(json: any): AirOut;
+export declare function apply(ctx: Context, config?: WeatherConfig): void;
+//# sourceMappingURL=weather-tools.d.ts.map

package/lib/weather-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"weather-tools.d.ts","sourceRoot":"","sources":["../src/weather-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKlD,eAAO,MAAM,IAAI,sBAAsB,CAAA;AACvC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAWD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAoB/C;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAAO,GACrF,OAAO,CAAC,MAAM,CAAC,CAgCjB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACpH,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAC9E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,GAAG,GAAG,WAAW,CAmBxD;AAED,qDAAqD;AACrD,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACnB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,CAW9C;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,aAAkB,GAAG,IAAI,CAyEpE"}

package/lib/weather-tools.js

@@ -0,0 +1,208 @@
+/**
+ * weather-tools — the worked example of the keyless data-adapter recipe
+ * (blueprint/data-adapter). Two tools over Open-Meteo, a keyless API:
+ *   rh_weather_forecast — current conditions + 3-day min/max
+ *   rh_weather_air      — PM2.5 / PM10 / European AQI
+ *
+ * Every request goes through guardedFetch, the SSRF checklist from Mu's
+ * safefetch: public destinations only (loopback, private, link-local incl.
+ * the metadata address, multicast and unspecified are refused), every
+ * redirect hop revalidated, response size and time capped.
+ * @module dsh-righthand/weather-tools
+ */
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+export const name = 'righthand-weather';
+export const inject = ['tools'];
+const DEFAULTS = {
+    forecastUrl: 'https://api.open-meteo.com/v1/forecast',
+    airUrl: 'https://air-quality-api.open-meteo.com/v1/air-quality',
+};
+const MAX_BODY_BYTES = 2 * 1024 * 1024;
+const MAX_REDIRECTS = 5;
+const FETCH_TIMEOUT_MS = 10000;
+/**
+ * Whether an IP must not be reached: the Mu safefetch set — loopback,
+ * RFC1918 private, ULA, link-local (169.254/16, fe80::/10 — which includes
+ * the 169.254.169.254 metadata address), multicast, and unspecified.
+ */
+export function isBlockedIP(ip) {
+    if (ip === '')
+        return true;
+    if (isIP(ip) === 4) {
+        const [a, b] = ip.split('.').map(Number);
+        if (a === 0 || a === 10 || a === 127)
+            return true;
+        if (a === 169 && b === 254)
+            return true;
+        if (a === 172 && b >= 16 && b <= 31)
+            return true;
+        if (a === 192 && b === 168)
+            return true;
+        if (a >= 224 && a <= 239)
+            return true;
+        return false;
+    }
+    if (isIP(ip) === 6) {
+        const lower = ip.toLowerCase();
+        if (lower === '::' || lower === '::1')
+            return true;
+        if (lower.startsWith('fc') || lower.startsWith('fd'))
+            return true;
+        if (lower.startsWith('fe8') || lower.startsWith('fe9') || lower.startsWith('fea') || lower.startsWith('feb'))
+            return true;
+        if (lower.startsWith('ff'))
+            return true;
+        return false;
+    }
+    return true;
+}
+/**
+ * Fetch one URL with the SSRF checklist. `fetchImpl` and `resolve` are
+ * injectable for tests; production uses the globals.
+ */
+export async function guardedFetch(url, deps = {}) {
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const resolve = deps.resolve ?? (async (host) => (await lookup(host, { all: true })).map(a => a.address));
+    let current = url;
+    for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+        const parsed = new URL(current);
+        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:')
+            throw new Error('blocked: non-http(s) URL');
+        const ips = await resolve(parsed.hostname);
+        if (ips.length === 0 || ips.some(isBlockedIP))
+            throw new Error('blocked: destination is not a public host');
+        const res = await fetchImpl(current, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS), redirect: 'manual' });
+        if (res.status >= 300 && res.status < 400) {
+            const next = res.headers.get('location');
+            if (next === null)
+                throw new Error('blocked: redirect without location');
+            current = new URL(next, current).toString();
+            continue;
+        }
+        if (!res.ok)
+            throw new Error('HTTP ' + res.status + ' for ' + current);
+        const reader = res.body?.getReader();
+        if (reader === undefined)
+            return '';
+        const chunks = [];
+        let bytes = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            bytes += value.length;
+            if (bytes > MAX_BODY_BYTES)
+                throw new Error('response exceeds ' + MAX_BODY_BYTES + ' bytes');
+            chunks.push(value);
+        }
+        return Buffer.concat(chunks).toString('utf8');
+    }
+    throw new Error('too many redirects');
+}
+export function normalizeForecast(json) {
+    const cw = json.current_weather;
+    return {
+        latitude: Number(json.latitude ?? 0),
+        longitude: Number(json.longitude ?? 0),
+        timezone: json.timezone ?? '',
+        current: cw ? {
+            time: String(cw.time ?? ''),
+            temperature: Number(cw.temperature ?? 0),
+            windspeed: Number(cw.windspeed ?? 0),
+            winddirection: Number(cw.winddirection ?? 0),
+            weathercode: Number(cw.weathercode ?? 0),
+        } : null,
+        daily: {
+            time: (json.daily?.time ?? []).map(String),
+            temperatureMax: (json.daily?.temperature_2m_max ?? []).map(Number),
+            temperatureMin: (json.daily?.temperature_2m_min ?? []).map(Number),
+        },
+    };
+}
+export function normalizeAir(json) {
+    const c = json.current ?? {};
+    const num = (v) => (v === undefined || v === null ? null : Number(v));
+    return {
+        latitude: Number(json.latitude ?? 0),
+        longitude: Number(json.longitude ?? 0),
+        time: String(c.time ?? ''),
+        pm2_5: num(c.pm2_5),
+        pm10: num(c.pm10),
+        aqi: num(c.european_aqi),
+    };
+}
+export function apply(ctx, config = {}) {
+    const cfg = { ...DEFAULTS, ...config };
+    ctx.tools.register(defineTool({
+        name: 'rh_weather_forecast',
+        description: 'Weather forecast for a location from Open-Meteo (keyless): current conditions plus 3 days of min/max temperatures.',
+        parameters: {
+            latitude: { type: 'number', required: true, description: 'Latitude, e.g. 51.5074 for London.' },
+            longitude: { type: 'number', required: true, description: 'Longitude, e.g. -0.1278 for London.' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    latitude: { type: 'number', required: true },
+                    longitude: { type: 'number', required: true },
+                    timezone: { type: 'string', required: true },
+                    current: { type: 'json' },
+                    daily: { type: 'json', required: true },
+                },
+            },
+            render: (_args, value) => { const c = value.current; return [{ type: 'text', text: c ? (value.timezone + ': ' + c.temperature + ' C, wind ' + c.windspeed + ' km/h') : value.timezone + ': current conditions unavailable' }]; },
+        },
+        async execute(args) {
+            const url = cfg.forecastUrl
+                + '?latitude=' + args.latitude
+                + '&longitude=' + args.longitude
+                + '&current_weather=true&daily=temperature_2m_max,temperature_2m_min&forecast_days=3';
+            const body = await guardedFetch(url);
+            return normalizeForecast(JSON.parse(body));
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_weather_air',
+        description: 'Air quality at a location from Open-Meteo (keyless): PM2.5, PM10 and the European AQI.',
+        parameters: {
+            latitude: { type: 'number', required: true, description: 'Latitude.' },
+            longitude: { type: 'number', required: true, description: 'Longitude.' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    latitude: { type: 'number', required: true },
+                    longitude: { type: 'number', required: true },
+                    time: { type: 'string', required: true },
+                    pm2_5: { type: 'number' },
+                    pm10: { type: 'number' },
+                    aqi: { type: 'number' },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: 'PM2.5 ' + value.pm2_5 + ', PM10 ' + value.pm10 + ', AQI ' + value.aqi }],
+        },
+        async execute(args) {
+            const url = cfg.airUrl
+                + '?latitude=' + args.latitude
+                + '&longitude=' + args.longitude
+                + '&current=pm2_5,pm10,european_aqi';
+            const body = await guardedFetch(url);
+            const out = normalizeAir(JSON.parse(body));
+            return {
+                latitude: out.latitude,
+                longitude: out.longitude,
+                time: out.time,
+                ...out.pm2_5 !== null ? { pm2_5: out.pm2_5 } : {},
+                ...out.pm10 !== null ? { pm10: out.pm10 } : {},
+                ...out.aqi !== null ? { aqi: out.aqi } : {},
+            };
+        },
+    }));
+}
+//# sourceMappingURL=weather-tools.js.map

package/lib/weather-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"weather-tools.js","sourceRoot":"","sources":["../src/weather-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,MAAM,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAA;AACvC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AAQ/B,MAAM,QAAQ,GAA4B;IACxC,WAAW,EAAE,wCAAwC;IACrD,MAAM,EAAE,uDAAuD;CAChE,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACtC,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAE9B;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC1B,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAA;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;QAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;QAClD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACjE,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACzH,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACvC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,OAAoF,EAAE;IAEtF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;IAEjH,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC5G,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC3G,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3G,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACxC,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YACxE,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC3C,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;QACpC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,GAAiB,EAAE,CAAA;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;YACrB,IAAI,KAAK,GAAG,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,cAAc,GAAG,QAAQ,CAAC,CAAA;YAC5F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;AACvC,CAAC;AAcD,MAAM,UAAU,iBAAiB,CAAC,IAAS;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAA;IAC/B,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC;YACxC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;YACpC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,CAAC;YAC5C,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC;SACzC,CAAC,CAAC,CAAC,IAAI;QACR,KAAK,EAAE;YACL,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1C,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAClE,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;SACnE;KACF,CAAA;AACH,CAAC;AAYD,MAAM,UAAU,YAAY,CAAC,IAAS;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1B,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnB,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACjB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;KACzB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAwB,EAAE;IAC5D,MAAM,GAAG,GAA4B,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAA;IAE/D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,oHAAoH;QACjI,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oCAAoC,EAAE;YAC/F,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qCAAqC,EAAE;SAClG;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;oBACzB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;iBACxC;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,OAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,GAAG,WAAW,GAAG,CAAC,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,kCAAkC,EAAE,CAAC,CAAA,CAAC,CAAC;SACvO;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW;kBACvB,YAAY,GAAG,IAAI,CAAC,QAAQ;kBAC5B,aAAa,GAAG,IAAI,CAAC,SAAS;kBAC9B,mFAAmF,CAAA;YACvF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;YACpC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC5C,CAAC;KACF,CAAC,CAAC,CAAA;IAEH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,wFAAwF;QACrG,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;YACtE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE;SACzE;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC7C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACxC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACxB;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;SAC3H;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM;kBAClB,YAAY,GAAG,IAAI,CAAC,QAAQ;kBAC5B,aAAa,GAAG,IAAI,CAAC,SAAS;kBAC9B,kCAAkC,CAAA;YACtC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;YACpC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;YAC1C,OAAO;gBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;gBACjD,GAAG,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC9C,GAAG,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE;aAC5C,CAAA;QACH,CAAC;KACF,CAAC,CAAC,CAAA;AACL,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@try-works/dsh-righthand",
   "description": "DeepSeek Harness plugin: DSH-native righthand tools — durable KV store, credential/settings management, governed exec, and a tool guard",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

package/skills/dsh-righthand/SKILL.md

@@ -16,6 +16,8 @@ The righthand toolkit: DSH-native tools over the harness's own services. Use thi
 | secrets | `rh_credential_describe` / `rh_credential_set` / `rh_credential_unset` | `ctx.credentials` | The task must check, store, or remove a credential reference (e.g. `CLOUDFLARE_API_TOKEN`). Values are written durably and **never echoed back**. |
 | settings | `rh_settings_get` / `rh_settings_set` | `ctx.settings` (namespace `righthand`) | Reading or patching righthand settings (`accountId`, `defaultZone`, `defaultScriptPrefix`). |
 | exec | `rh_run` / `rh_run_bg` | `ctx.subprocess` + `ctx.jobs` | Running one command (argv array, no shell interpretation). `rh_run` collects bounded output; `rh_run_bg` starts an owner-scoped background job and returns its id. |
+| text | `rh_text_summarise` / `rh_text_extract` / `rh_text_classify` / `rh_text_translate` | `ctx.llm` (one model call per verb) | Language work: shorten, turn into JSON matching a schema, sort into your labels with confidence, or translate preserving formatting. |
+| weather | `rh_weather_forecast` / `rh_weather_air` | Open-Meteo (keyless) via the SSRF-guarded fetcher | Current conditions + 3-day min/max, or PM2.5/PM10/AQI, for a lat/lon. Keyless only — anything needing an API token is out of scope. |
 | guard | (policy, not a tool) | `ctx.tools` `tools/pre-execute` | Configured via plugin config `rules`; gates tools by name prefix with `allow` / `deny` / `ask` modes. |
 
 ## Store semantics
@@ -24,6 +26,19 @@ The righthand toolkit: DSH-native tools over the harness's own services. Use thi
 - `rh_store_get` returns `{ found, key, value?, updatedAt? }` — `found: false` means the key is absent, not an error.
 - Writes are durable (backend flush before commit) and serialized on one write chain; values must be JSON-serializable.
 
+## Weather semantics
+
+- Keyless only: Open-Meteo, no token. Every request goes through `guardedFetch` — public destinations only (loopback/private/link-local/multicast refused), every redirect hop revalidated, size and time capped.
+- Results are normalized to a stable shape (the wire JSON is the provider's; callers see ours).
+- Output schemas reject `null` — absent pollutant values are omitted, not null.
+
+## Text semantics
+
+- One model call per verb; each call's failure is contained (the other tools are unaffected).
+- `rh_text_extract` takes a JSON Schema and the model returns one object conforming to it — parse failures surface as a clean error, not raw prose.
+- `rh_text_classify` returns a label verbatim from the given set plus a 0–1 confidence; a label outside the set is an error.
+- Provider/model come from plugin config (`provider`/`model`, default the harness default model).
+
 ## Task semantics
 
 - One domain `righthand_tasks`: a `tasks` table keyed by generated task id (`t-...`).
@@ -53,5 +68,5 @@ Rules come from the plugin config (`rules: [{ toolPrefix, mode, ask?, destructiv
 
 ## Service availability
 
-- **web profile**: all sixteen tools register (`storageDomain` is provided by the web app rows).
+- **web profile**: all twenty-two tools register (`storageDomain` is provided by the web app rows).
 - **other profiles** (e.g. headless): the store and task families stay dormant; the other seven tools still register. The plugin never fails the boot.

package/src/index.ts

@@ -15,6 +15,8 @@
  * - store-tools:     rh_store_put/get/delete/list over ctx.storageDomain
  * - secrets-tools:   rh_credential_describe/set/unset + rh_settings_get/set
  * - task-tools:      rh_task_create/list/next/update/delete over ctx.storageDomain
+ * - text-tools:      rh_text_summarise/extract/classify/translate over ctx.llm
+ * - weather-tools:   rh_weather_forecast/air over Open-Meteo (keyless, SSRF-guarded)
  * - exec-tools:      rh_run / rh_run_bg over ctx.subprocess + ctx.jobs
  * - guard-tools:     tools/pre-execute policy (config.rules)
  * - skills:          the packaged dsh-righthand skill (ctx.skills)
@@ -28,6 +30,8 @@ import * as secretsTools from './secrets-tools.ts'
 import * as execTools from './exec-tools.ts'
 import * as guardTools from './guard-tools.ts'
 import * as taskTools from './task-tools.ts'
+import * as textTools from './text-tools.ts'
+import * as weatherTools from './weather-tools.ts'
 import * as righthandSkills from './skills.ts'
 import type { GuardRule } from './guard-tools.ts'
 
@@ -53,14 +57,18 @@ export function apply(ctx: Context, config: RighthandConfig = {}): void {
   ctx.plugin(secretsTools)
   ctx.plugin(execTools)
   ctx.plugin(taskTools)
+  ctx.plugin(textTools)
+  ctx.plugin(weatherTools)
   ctx.plugin(guardTools, { rules: config.rules ?? [] })
   ctx.plugin(righthandSkills)
 }
 
 // Individual modules stay importable for selective mounting.
-export { storeTools, secretsTools, execTools, taskTools, guardTools, righthandSkills }
+export { storeTools, secretsTools, execTools, taskTools, textTools, weatherTools, guardTools, righthandSkills }
 export { SKILL_NAME, SKILL_DESCRIPTION, skillDirectory, skillBody } from './skills.ts'
 export type { GuardRule } from './guard-tools.ts'
 export { guardFactsFor } from './guard-tools.ts'
 export type { GuardFacts } from './guard-tools.ts'
+export { isBlockedIP, guardedFetch, normalizeForecast, normalizeAir } from './weather-tools.ts'
+export type { WeatherConfig, ForecastOut, AirOut } from './weather-tools.ts'
 

package/src/text-tools.ts

@@ -0,0 +1,173 @@
+/**
+ * text-tools — rh_text_* over ctx.llm.
+ * Language work at one call per verb: summarise, extract-to-JSON,
+ * classify, translate. Same prompt discipline as the digest summarizer:
+ * roles stay roles, caps are deliberate, each call's failure is contained
+ * in that call (the other tools are unaffected).
+ * @module dsh-righthand/text-tools
+ */
+
+import type { Context } from '@deepseek-ai/cordis'
+import { defineTool } from '@deepseek-ai/dsh-tools'
+import { BlockAssembler, createUserMessage, deepFreeze } from '@deepseek-ai/dsh-llm'
+import type { GenerateOptions } from '@deepseek-ai/dsh-llm'
+
+export const name = 'righthand-text'
+export const inject = ['tools', 'llm']
+
+export interface TextConfig {
+  /** LLM route; defaults match the harness default model. */
+  provider?: string
+  model?: string
+}
+
+const DEFAULTS: Required<TextConfig> = { provider: 'deepseek-official', model: 'deepseek-v4-flash' }
+
+/** One LLM call, text in, text out. Returns the assembled text or throws. */
+async function ask(ctx: Context, cfg: Required<TextConfig>, system: string, user: string, maxTokens: number, signal: AbortSignal): Promise<string> {
+  const options: GenerateOptions = deepFreeze({
+    provider: cfg.provider,
+    model: cfg.model,
+    messages: [createUserMessage({
+      content: [{ type: 'text', text: user }],
+      source: { kind: 'plugin', plugin: 'righthand-text' },
+    })],
+    system,
+    maxTokens,
+    purpose: 'compaction',
+    signal,
+  })
+  const assembler = new BlockAssembler()
+  for await (const chunk of ctx.llm.stream(options)) assembler.push(chunk)
+  if (assembler.finish.kind !== 'stop') throw new Error('text model call did not stop cleanly: ' + JSON.stringify(assembler.finish.kind))
+  const text = assembler.blocks().filter((b: any) => b.type === 'text').map((b: any) => b.text).join(' ').trim()
+  if (text === '') throw new Error('text model call produced no text')
+  return text
+}
+
+/** Extract the outermost {...} JSON object from a model reply. */
+function parseJsonWindow(text: string): any {
+  const start = text.indexOf('{')
+  const end = text.lastIndexOf('}')
+  if (start < 0 || end <= start) throw new Error('model output was not JSON')
+  return JSON.parse(text.slice(start, end + 1))
+}
+
+/** Summarise: plain prose, no JSON. */
+const SUMMARISE_SYSTEM = 'You summarise text. Return ONLY the summary itself - a few sentences, plain prose, no JSON, no Markdown headers, no quotes around it. Preserve the language of the input.'
+
+/** Extract: JSON matching a caller schema. */
+const EXTRACT_SYSTEM = 'You extract structured data from text. Return ONLY one JSON object matching the caller schema exactly - no prose, no Markdown, no code fences.'
+
+/** Classify: one label plus confidence, as JSON. */
+const CLASSIFY_SYSTEM = 'You classify text. Return ONLY one JSON object with exactly two keys: label (one of the given labels, verbatim) and confidence (a number from 0 to 1). No prose, no Markdown.'
+
+/** Translate: preserve formatting, plain prose. */
+const TRANSLATE_SYSTEM = 'You translate text. Return ONLY the translation - plain prose, no JSON, no quotes around it, preserving paragraph breaks and any Markdown or code the input contains.'
+
+export function apply(ctx: Context, config: TextConfig = {}): void {
+  const cfg: Required<TextConfig> = { ...DEFAULTS, ...config }
+  ctx.tools.register(defineTool({
+    name: 'rh_text_summarise',
+    description: 'Summarise text into a few sentences. One model call per invocation; the result is new prose, not extracted sentences.',
+    parameters: {
+      text: { type: 'string', required: true, description: 'The text to summarise (max ~30000 characters).' },
+      sentences: { type: 'integer', description: 'Target length in sentences (default 3).' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          summary: { type: 'string', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: value.summary }],
+    },
+    async execute(args, exec) {
+      const n = args.sentences ?? 3
+      const summary = await ask(ctx, cfg, SUMMARISE_SYSTEM, 'Summarise this in about ' + n + ' sentences:\n\n' + args.text, 600, exec.signal)
+      return { summary }
+    },
+  }))
+  ctx.tools.register(defineTool({
+    name: 'rh_text_extract',
+    description: 'Turn text into JSON matching a schema you give. The schema is a JSON Schema object; the model returns one object conforming to it, or the call fails cleanly.',
+    parameters: {
+      text: { type: 'string', required: true, description: 'The text to extract from.' },
+      schema: { type: 'json', required: true, description: 'JSON Schema the result must match, e.g. { "type": "object", "properties": { "name": { "type": "string" } }, "required": ["name"] }.' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          extracted: { type: 'json', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: JSON.stringify(value.extracted) }],
+    },
+    async execute(args, exec) {
+      const framed = 'Schema:\n' + JSON.stringify(args.schema) + '\n\nText:\n' + args.text
+      const raw = await ask(ctx, cfg, EXTRACT_SYSTEM, framed, 800, exec.signal)
+      return { extracted: parseJsonWindow(raw) }
+    },
+  }))
+  ctx.tools.register(defineTool({
+    name: 'rh_text_classify',
+    description: 'Sort text into one of the labels you give, with a confidence score from 0 to 1. The label returned is one of yours, verbatim.',
+    parameters: {
+      text: { type: 'string', required: true, description: 'The text to classify.' },
+      labels: { type: 'array', required: true, items: { type: 'string' }, description: 'The candidate labels, e.g. ["bug", "feature request", "question"].' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          label: { type: 'string', required: true },
+          confidence: { type: 'number', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: value.label + ' (' + value.confidence + ')' }],
+    },
+    async execute(args, exec) {
+      if (args.labels.length === 0) throw new Error('classify needs at least one label')
+      const framed = 'Labels: ' + JSON.stringify(args.labels) + '\n\nText:\n' + args.text
+      const raw = await ask(ctx, cfg, CLASSIFY_SYSTEM, framed, 100, exec.signal)
+      const parsed = parseJsonWindow(raw)
+      if (typeof parsed.label !== 'string' || !args.labels.includes(parsed.label)) throw new Error('model returned a label outside the given set')
+      const confidence = Number(parsed.confidence)
+      if (!Number.isFinite(confidence) || confidence < 0 || confidence > 1) throw new Error('model returned an invalid confidence')
+      return { label: parsed.label, confidence }
+    },
+  }))
+  ctx.tools.register(defineTool({
+    name: 'rh_text_translate',
+    description: 'Translate text into another language, preserving formatting (paragraph breaks, Markdown, code).',
+    parameters: {
+      text: { type: 'string', required: true, description: 'The text to translate.' },
+      language: { type: 'string', required: true, description: 'The target language, e.g. "Spanish", "zh-CN", "Japanese".' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          translation: { type: 'string', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: value.translation }],
+    },
+    async execute(args, exec) {
+      const framed = 'Translate the following into ' + args.language + ':\n\n' + args.text
+      const translation = await ask(ctx, cfg, TRANSLATE_SYSTEM, framed, 800, exec.signal)
+      return { translation }
+    },
+  }))
+}
+
+
+
+
+

package/src/weather-tools.ts

@@ -0,0 +1,236 @@
+/**
+ * weather-tools — the worked example of the keyless data-adapter recipe
+ * (blueprint/data-adapter). Two tools over Open-Meteo, a keyless API:
+ *   rh_weather_forecast — current conditions + 3-day min/max
+ *   rh_weather_air      — PM2.5 / PM10 / European AQI
+ *
+ * Every request goes through guardedFetch, the SSRF checklist from Mu's
+ * safefetch: public destinations only (loopback, private, link-local incl.
+ * the metadata address, multicast and unspecified are refused), every
+ * redirect hop revalidated, response size and time capped.
+ * @module dsh-righthand/weather-tools
+ */
+
+import type { Context } from '@deepseek-ai/cordis'
+import { defineTool } from '@deepseek-ai/dsh-tools'
+import { lookup } from 'node:dns/promises'
+import { isIP } from 'node:net'
+
+export const name = 'righthand-weather'
+export const inject = ['tools']
+
+export interface WeatherConfig {
+  /** Endpoint URLs; defaults are Open-Meteo (keyless). Tests override these. */
+  forecastUrl?: string
+  airUrl?: string
+}
+
+const DEFAULTS: Required<WeatherConfig> = {
+  forecastUrl: 'https://api.open-meteo.com/v1/forecast',
+  airUrl: 'https://air-quality-api.open-meteo.com/v1/air-quality',
+}
+
+const MAX_BODY_BYTES = 2 * 1024 * 1024
+const MAX_REDIRECTS = 5
+const FETCH_TIMEOUT_MS = 10000
+
+/**
+ * Whether an IP must not be reached: the Mu safefetch set — loopback,
+ * RFC1918 private, ULA, link-local (169.254/16, fe80::/10 — which includes
+ * the 169.254.169.254 metadata address), multicast, and unspecified.
+ */
+export function isBlockedIP(ip: string): boolean {
+  if (ip === '') return true
+  if (isIP(ip) === 4) {
+    const [a, b] = ip.split('.').map(Number)
+    if (a === 0 || a === 10 || a === 127) return true
+    if (a === 169 && b === 254) return true
+    if (a === 172 && b >= 16 && b <= 31) return true
+    if (a === 192 && b === 168) return true
+    if (a >= 224 && a <= 239) return true
+    return false
+  }
+  if (isIP(ip) === 6) {
+    const lower = ip.toLowerCase()
+    if (lower === '::' || lower === '::1') return true
+    if (lower.startsWith('fc') || lower.startsWith('fd')) return true
+    if (lower.startsWith('fe8') || lower.startsWith('fe9') || lower.startsWith('fea') || lower.startsWith('feb')) return true
+    if (lower.startsWith('ff')) return true
+    return false
+  }
+  return true
+}
+
+/**
+ * Fetch one URL with the SSRF checklist. `fetchImpl` and `resolve` are
+ * injectable for tests; production uses the globals.
+ */
+export async function guardedFetch(
+  url: string,
+  deps: { fetchImpl?: typeof fetch; resolve?: (host: string) => Promise<string[]> } = {},
+): Promise<string> {
+  const fetchImpl = deps.fetchImpl ?? fetch
+  const resolve = deps.resolve ?? (async (host: string) => (await lookup(host, { all: true })).map(a => a.address))
+
+  let current = url
+  for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+    const parsed = new URL(current)
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') throw new Error('blocked: non-http(s) URL')
+    const ips = await resolve(parsed.hostname)
+    if (ips.length === 0 || ips.some(isBlockedIP)) throw new Error('blocked: destination is not a public host')
+    const res = await fetchImpl(current, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS), redirect: 'manual' })
+    if (res.status >= 300 && res.status < 400) {
+      const next = res.headers.get('location')
+      if (next === null) throw new Error('blocked: redirect without location')
+      current = new URL(next, current).toString()
+      continue
+    }
+    if (!res.ok) throw new Error('HTTP ' + res.status + ' for ' + current)
+    const reader = res.body?.getReader()
+    if (reader === undefined) return ''
+    const chunks: Uint8Array[] = []
+    let bytes = 0
+    for (;;) {
+      const { done, value } = await reader.read()
+      if (done) break
+      bytes += value.length
+      if (bytes > MAX_BODY_BYTES) throw new Error('response exceeds ' + MAX_BODY_BYTES + ' bytes')
+      chunks.push(value)
+    }
+    return Buffer.concat(chunks).toString('utf8')
+  }
+  throw new Error('too many redirects')
+}
+
+/**
+ * Normalize the Open-Meteo forecast response into a stable digest shape:
+ * what changed is the wire JSON; what callers see is this.
+ */
+export interface ForecastOut {
+  latitude: number
+  longitude: number
+  timezone: string
+  current: { time: string; temperature: number; windspeed: number; winddirection: number; weathercode: number } | null
+  daily: { time: string[]; temperatureMax: number[]; temperatureMin: number[] }
+}
+
+export function normalizeForecast(json: any): ForecastOut {
+  const cw = json.current_weather
+  return {
+    latitude: Number(json.latitude ?? 0),
+    longitude: Number(json.longitude ?? 0),
+    timezone: json.timezone ?? '',
+    current: cw ? {
+      time: String(cw.time ?? ''),
+      temperature: Number(cw.temperature ?? 0),
+      windspeed: Number(cw.windspeed ?? 0),
+      winddirection: Number(cw.winddirection ?? 0),
+      weathercode: Number(cw.weathercode ?? 0),
+    } : null,
+    daily: {
+      time: (json.daily?.time ?? []).map(String),
+      temperatureMax: (json.daily?.temperature_2m_max ?? []).map(Number),
+      temperatureMin: (json.daily?.temperature_2m_min ?? []).map(Number),
+    },
+  }
+}
+
+/** Normalize the Open-Meteo air-quality response. */
+export interface AirOut {
+  latitude: number
+  longitude: number
+  time: string
+  pm2_5: number | null
+  pm10: number | null
+  aqi: number | null
+}
+
+export function normalizeAir(json: any): AirOut {
+  const c = json.current ?? {}
+  const num = (v: unknown): number | null => (v === undefined || v === null ? null : Number(v))
+  return {
+    latitude: Number(json.latitude ?? 0),
+    longitude: Number(json.longitude ?? 0),
+    time: String(c.time ?? ''),
+    pm2_5: num(c.pm2_5),
+    pm10: num(c.pm10),
+    aqi: num(c.european_aqi),
+  }
+}
+
+export function apply(ctx: Context, config: WeatherConfig = {}): void {
+  const cfg: Required<WeatherConfig> = { ...DEFAULTS, ...config }
+
+  ctx.tools.register(defineTool({
+    name: 'rh_weather_forecast',
+    description: 'Weather forecast for a location from Open-Meteo (keyless): current conditions plus 3 days of min/max temperatures.',
+    parameters: {
+      latitude: { type: 'number', required: true, description: 'Latitude, e.g. 51.5074 for London.' },
+      longitude: { type: 'number', required: true, description: 'Longitude, e.g. -0.1278 for London.' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          latitude: { type: 'number', required: true },
+          longitude: { type: 'number', required: true },
+          timezone: { type: 'string', required: true },
+          current: { type: 'json' },
+          daily: { type: 'json', required: true },
+        },
+      },
+      render: (_args, value) => { const c = value.current as any; return [{ type: 'text', text: c ? (value.timezone + ': ' + c.temperature + ' C, wind ' + c.windspeed + ' km/h') : value.timezone + ': current conditions unavailable' }] },
+    },
+    async execute(args) {
+      const url = cfg.forecastUrl
+        + '?latitude=' + args.latitude
+        + '&longitude=' + args.longitude
+        + '&current_weather=true&daily=temperature_2m_max,temperature_2m_min&forecast_days=3'
+      const body = await guardedFetch(url)
+      return normalizeForecast(JSON.parse(body))
+    },
+  }))
+
+  ctx.tools.register(defineTool({
+    name: 'rh_weather_air',
+    description: 'Air quality at a location from Open-Meteo (keyless): PM2.5, PM10 and the European AQI.',
+    parameters: {
+      latitude: { type: 'number', required: true, description: 'Latitude.' },
+      longitude: { type: 'number', required: true, description: 'Longitude.' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          latitude: { type: 'number', required: true },
+          longitude: { type: 'number', required: true },
+          time: { type: 'string', required: true },
+          pm2_5: { type: 'number' },
+          pm10: { type: 'number' },
+          aqi: { type: 'number' },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: 'PM2.5 ' + value.pm2_5 + ', PM10 ' + value.pm10 + ', AQI ' + value.aqi }],
+    },
+    async execute(args) {
+      const url = cfg.airUrl
+        + '?latitude=' + args.latitude
+        + '&longitude=' + args.longitude
+        + '&current=pm2_5,pm10,european_aqi'
+      const body = await guardedFetch(url)
+      const out = normalizeAir(JSON.parse(body))
+      return {
+        latitude: out.latitude,
+        longitude: out.longitude,
+        time: out.time,
+        ...out.pm2_5 !== null ? { pm2_5: out.pm2_5 } : {},
+        ...out.pm10 !== null ? { pm10: out.pm10 } : {},
+        ...out.aqi !== null ? { aqi: out.aqi } : {},
+      }
+    },
+  }))
+}
+
+