@zibby/skills 0.1.95 → 0.2.0

package/dist/gbrain.d.ts

@@ -1,115 +1,47 @@
-export namespace gbrainSkill {
-    let id: string;
-    let serverName: string;
-    let allowedTools: string[];
-    let meta: any;
-    let description: string;
-    let promptFragment: string;
-    /**
-     * Spawn the GENERIC skill MCP server (bin/mcp-skill.mjs) pointing at this
-     * module's gbrainSkill export — same FIXED pattern as datasetStore. Forwards
-     * the backend-auth env + every bound-store mapping the spawned process needs.
-     */
-    function resolve(): {
-        command: any;
-        args: any[];
-        env: {};
-        description: string;
-        type?: undefined;
-        alwaysLoad?: undefined;
-    } | {
-        type: string;
-        command: string;
-        args: any[];
-        env: {};
-        description: string;
-        alwaysLoad: boolean;
-    };
-    function handleToolCall(name: any, args: any): Promise<string>;
-    let tools: ({
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                docs: {
-                    type: string;
-                    description: string;
-                    items: {
-                        type: string;
-                        properties: {
-                            sourceId: {
-                                type: string;
-                                description: string;
-                            };
-                            markdown: {
-                                type: string;
-                                description: string;
-                            };
-                            deleted: {
-                                type: string;
-                                description: string;
-                            };
-                        };
-                        required: string[];
-                    };
-                };
-                store: {
-                    type: string;
-                    description: string;
-                };
-                query?: undefined;
-                topK?: undefined;
-                sourceIds?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                query: {
-                    type: string;
-                    description: string;
-                };
-                topK: {
-                    type: string;
-                    description: string;
-                };
-                store: {
-                    type: string;
-                    description: string;
-                };
-                docs?: undefined;
-                sourceIds?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                sourceIds: {
-                    type: string;
-                    description: string;
-                    items: {
-                        type: string;
-                    };
-                };
-                store: {
-                    type: string;
-                    description: string;
-                };
-                docs?: undefined;
-                query?: undefined;
-                topK?: undefined;
-            };
-            required: string[];
-        };
-    })[];
-}
+/**
+ * gbrain.js — knowledge-base (KB) skill, brokered through the control-plane.
+ *
+ * WHAT IT IS
+ * ──────────
+ * Gives an agent an ingest / query / delete surface over a per-tenant KNOWLEDGE
+ * BASE (Postgres + pgvector). The brain is persisted as a Stores-v2 store whose
+ * TYPE is the engine protocol — `postgres` — NOT `gbrain` (a product name never
+ * belongs in a store `type`; `gbrain` is only THIS skill). Naming the type after
+ * the protocol keeps the contract stable if the engine is ever swapped.
+ *
+ * ARCHITECTURE — brokered, NOT a direct sidecar dial (security)
+ * ─────────────────────────────────────────────────────────────
+ * The KB engine holds tenant data and is TOO heavy to bake into every run, so it
+ * runs as an on-demand SIDECAR. But run containers are network-isolated by design
+ * (they can reach ONLY the control-plane, never a datastore/sidecar). So this
+ * skill does NOT dial the sidecar directly. It behaves EXACTLY like the
+ * dataset-store skill: it hits the token-gated control-plane store API
+ *
+ *   POST {ZIBBY_ACCOUNT_API_URL}/datasets/stores/{storeId}/ingest {docs}
+ *   POST {ZIBBY_ACCOUNT_API_URL}/datasets/stores/{storeId}/query  {query, topK}
+ *   POST {ZIBBY_ACCOUNT_API_URL}/datasets/stores/{storeId}/delete {sourceIds}
+ *
+ * with the run's PROJECT_API_TOKEN (Bearer). The control-plane resolves +
+ * authorizes the tenant from the token, then (postgres-store.js) launches/reuses
+ * the sidecar on the ISOLATED infra network and proxies the call, deriving the
+ * sidecar's `kbId` SERVER-SIDE from (account, project, storeId). The agent never
+ * sees the sidecar URL or a kbId — the engine is never exposed to the run.
+ *
+ * STORES v2 — NAME-BASED RESOLUTION (the shared contract, same as dataset-store)
+ * ─────────────────────────────────────────────────────────────────────────────
+ * Stores are auto-provisioned at DEPLOY and resolved at runtime BY NAME via env:
+ *   - The run carries one `ZIBBY_STORE__<name> = <storeId>` per bound store.
+ *   - The agent reads the injected "AVAILABLE STORES" catalog (name + type +
+ *     description), picks one, and passes the chosen logical `store` NAME.
+ *   - That name→storeId env map is BOTH the allowlist AND the resolver.
+ * A knowledge-base agent typically has ONE postgres store bound, so `store` may
+ * be omitted and defaults to it.
+ *
+ * TIER / GATING
+ * ─────────────
+ * Tier ③ (heavy resident runtime → sidecar), but the sidecar is brokered by the
+ * control-plane (above), not dialled by the run. Fully server-side, no user
+ * connection → UNGATED. No-connection TOGGLEABLE via SKILL_META['gbrain'].
+ */
+export declare const gbrainSkill: any;
 export default gbrainSkill;

package/dist/git-write.d.ts

@@ -1,147 +1,55 @@
+/**
+ * git-write — REQUIRED, provider-agnostic git skill, NOW create-PR-capable.
+ *
+ * This is an EXTENSION of `gitSkill` (git.js): it inherits the EXACT SAME
+ * read tools (git_checkout / git_list_repos / git_explore), resolve() and
+ * handleToolCall, and ADDS provider-agnostic mutation tools —
+ * `git_open_pr` (opens a pull request / merge request off an already-pushed
+ * branch) and `git_merge_pr` (merges/accepts an open PR/MR by number) — each
+ * returning the REAL provider value (pr_url / merge sha). The ONLY
+ * gate difference (vs `git`) is the backend's integration map:
+ *
+ *   - `git`       → OPTIONAL_INTEGRATION_MAP  (deploy NOT blocked; the
+ *                   meta-skill works anonymously on public repos).
+ *   - `git-write` → REQUIRED_INTEGRATION_MAP  ({any:[github,gitlab]}) — at
+ *                   least one provider MUST be connected before deploy.
+ *
+ * Repo-MUTATING agents (push a branch / open a PR / MR) declare
+ * SKILLS.GIT_WRITE instead of SKILLS.GIT: you cannot write to a repo
+ * anonymously, so deploying with neither GitHub nor GitLab connected would
+ * leave the agent unable to push/PR. The required OR-group makes the deploy
+ * modal render "GitHub OR GitLab" as a hard requirement.
+ *
+ * Why expose create-PR THROUGH git-write rather than declaring
+ * SKILLS.GITHUB + SKILLS.GITLAB on the node? Those two skills each carry
+ * `requiresIntegration`, so declaring BOTH would force BOTH providers
+ * connected (an AND gate) — breaking the "GitHub OR GitLab" OR-group. By
+ * folding the create-PR/MR capability into git-write (whose gate is the
+ * {any:[github,gitlab]} OR-group) the agent gets a real create-PR tool with
+ * NO change to the deploy gating.
+ *
+ * `git_open_pr` does NOT reimplement the provider API calls. It detects the
+ * provider from the repoUrl and DELEGATES to the already-published, already-
+ * tested `github_create_pr` (github.js) / `gitlab_create_mr` (gitlab.js) tools
+ * — so the returned pr_url is the REAL html_url / web_url from the provider
+ * response, never a value the model could fabricate, and all the expected-
+ * business-error handling ({ success:false, skippedReason }) is inherited.
+ *
+ * Read-only clone/explore agents keep SKILLS.GIT (optional).
+ *
+ * We REUSE gitSkill's read-tool implementation (spread it) rather than
+ * duplicate the clone/explore logic — they must never drift. handleToolCall
+ * handles git_open_pr here and delegates everything else to gitSkill.
+ */
 /**
  * Detect the provider from a repo/clone URL. Returns { provider, owner, repo }
  * for github / gitlab, or null for an unrecognized host. Mirrors the
  * sentry-triage fix-node's parseRepo so the dispatch agrees with the
  * deterministic fallback path.
  */
-export function detectProvider(url: any): {
+export declare function detectProvider(url: any): {
     provider: string;
     owner: any;
     repo: any;
 };
-export const gitWriteSkill: {
-    id: string;
-    envKeys: string[];
-    promptFragment: string;
-    /**
-     * Handle git_open_pr in-process by DELEGATING to the github/gitlab skills'
-     * already-tested create tools (so the API call + real-url guarantee + the
-     * expected-business-error handling are reused, not re-implemented). Every
-     * other tool (git_checkout / git_list_repos / git_explore) is delegated to
-     * gitSkill — the read surface is unchanged.
-     */
-    handleToolCall(name: any, args: any, context: any): Promise<string>;
-    tools: ({
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                url: {
-                    type: string;
-                    description: string;
-                };
-                branch: {
-                    type: string;
-                    description: string;
-                };
-                shallow: {
-                    type: string;
-                    description: string;
-                };
-                name: {
-                    type: string;
-                    description: string;
-                };
-                repo?: undefined;
-                depth?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                url?: undefined;
-                branch?: undefined;
-                shallow?: undefined;
-                name?: undefined;
-                repo?: undefined;
-                depth?: undefined;
-            };
-            required?: undefined;
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                repo: {
-                    type: string;
-                    description: string;
-                };
-                depth: {
-                    type: string;
-                    description: string;
-                };
-                url?: undefined;
-                branch?: undefined;
-                shallow?: undefined;
-                name?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                repoUrl: {
-                    type: string;
-                    description: string;
-                };
-                head: {
-                    type: string;
-                    description: string;
-                };
-                base: {
-                    type: string;
-                    description: string;
-                };
-                title: {
-                    type: string;
-                    description: string;
-                };
-                body: {
-                    type: string;
-                    description: string;
-                };
-                number?: undefined;
-                mergeMethod?: undefined;
-            };
-            required: string[];
-        };
-    } | {
-        name: string;
-        description: string;
-        input_schema: {
-            type: string;
-            properties: {
-                repoUrl: {
-                    type: string;
-                    description: string;
-                };
-                number: {
-                    type: string;
-                    description: string;
-                };
-                mergeMethod: {
-                    type: string;
-                    enum: string[];
-                    description: string;
-                };
-                head?: undefined;
-                base?: undefined;
-                title?: undefined;
-                body?: undefined;
-            };
-            required: string[];
-        };
-    })[];
-    description: string;
-    resolve(): any;
-};
+export declare const gitWriteSkill: any;