abelworkflow 1.1.3 → 1.2.0

package/skills/dev-browser/dist/src/entrypoint.js

@@ -1,3 +1,4 @@
+import { isIP } from "node:net";
 export const DEFAULT_HOST = "localhost";
 const DEFAULT_PORT = 9222;
 const DEFAULT_CDP_PORT = 9223;
@@ -12,18 +13,24 @@ export function formatWsUrl(host, port, path = "") {
     return `ws://${formatHostForUrl(host)}:${port}${path}`;
 }
 export function resolveHostForProbe(host) {
-    const normalizedHost = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
-    if (normalizedHost === "0.0.0.0") {
-        return "127.0.0.1";
-    }
-    if (normalizedHost === "::") {
-        return "::1";
-    }
-    return normalizedHost;
+    return normalizeLoopbackHost(host);
+}
+export function normalizeLoopbackHost(host) {
+    const normalized = host === "[::1]" ? "::1" : host.toLowerCase();
+    if (normalized === "localhost" || normalized === "::1")
+        return normalized;
+    if (isIP(normalized) === 4 && normalized.split(".")[0] === "127")
+        return normalized;
+    throw new Error(`Invalid host: ${host}. Only loopback hosts are allowed`);
 }
 export function parseEntrypointArgs(argv, env = process.env) {
     let index = 0;
     let mode = "standalone";
+    let host = env.HOST ?? DEFAULT_HOST;
+    let port = env.PORT ?? String(DEFAULT_PORT);
+    let portLabel = env.PORT === undefined ? "port" : "PORT";
+    let cdpPort = String(DEFAULT_CDP_PORT);
+    let headless = env.HEADLESS?.trim().toLowerCase() === "true";
     const first = argv[0];
     if (first && !first.startsWith("--")) {
         if (first !== "standalone" && first !== "extension") {
@@ -32,36 +39,42 @@ export function parseEntrypointArgs(argv, env = process.env) {
         mode = first;
         index = 1;
     }
-    const args = {
-        mode,
-        host: env.HOST?.trim() || DEFAULT_HOST,
-        port: readEnvPort(env.PORT, "PORT") ?? DEFAULT_PORT,
-        cdpPort: DEFAULT_CDP_PORT,
-        headless: env.HEADLESS?.trim().toLowerCase() === "true",
-    };
     while (index < argv.length) {
         const token = argv[index++];
         switch (token) {
             case "--headless":
-                args.headless = true;
+                if (mode === "extension") {
+                    throw new Error("--headless is only valid in standalone mode");
+                }
+                headless = true;
                 break;
             case "--host":
-                args.host = readValue(argv, index - 1);
+                host = readValue(argv, index - 1);
                 index += 1;
                 break;
             case "--port":
-                args.port = parsePort(readValue(argv, index - 1), "port");
+                port = readValue(argv, index - 1);
+                portLabel = "port";
                 index += 1;
                 break;
             case "--cdp-port":
-                args.cdpPort = parsePort(readValue(argv, index - 1), "cdpPort");
+                if (mode === "extension") {
+                    throw new Error("--cdp-port is only valid in standalone mode");
+                }
+                cdpPort = readValue(argv, index - 1);
                 index += 1;
                 break;
             default:
                 throw new Error(`Unknown argument: ${token}`);
         }
     }
-    return args;
+    return {
+        mode,
+        host: normalizeLoopbackHost(host),
+        port: parsePort(port, portLabel),
+        cdpPort: parsePort(cdpPort, "cdpPort"),
+        headless,
+    };
 }
 export function formatReadinessLines(info) {
     if (info.mode === "standalone") {
@@ -84,23 +97,17 @@ export function formatReadinessLines(info) {
 }
 function readValue(argv, optionIndex) {
     const value = argv[optionIndex + 1];
-    if (!value || value.startsWith("--")) {
+    if (value === undefined || value.startsWith("--")) {
         throw new Error(`Missing value for ${argv[optionIndex]}`);
     }
     return value;
 }
 function parsePort(value, label) {
-    const port = Number.parseInt(value, 10);
-    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    if (!/^\d+$/.test(value))
+        throw new Error(`Invalid ${label}: ${value}`);
+    const port = Number(value);
+    if (port < 1 || port > 65535) {
         throw new Error(`Invalid ${label}: ${value}`);
     }
     return port;
 }
-function readEnvPort(value, label) {
-    const normalized = value?.trim();
-    if (!normalized) {
-        return undefined;
-    }
-    return parsePort(normalized, label);
-}
-//# sourceMappingURL=entrypoint.js.map

package/skills/dev-browser/dist/src/index.d.ts

@@ -1,4 +1,3 @@
 export { createStandaloneApp, createStandalonePageBackend, serve } from "./standalone.js";
 export type { DevBrowserServer } from "./standalone.js";
 export type { GetPageResponse, ListPagesResponse, ServeOptions, ServerInfoResponse, } from "./types.js";
-//# sourceMappingURL=index.d.ts.map

package/skills/dev-browser/dist/src/index.js

@@ -1,2 +1 @@
 export { createStandaloneApp, createStandalonePageBackend, serve } from "./standalone.js";
-//# sourceMappingURL=index.js.map

package/skills/dev-browser/dist/src/page-api.d.ts

@@ -22,4 +22,3 @@ export declare function createPageApi({ backend, wsEndpoint, }: {
     wsEndpoint: string;
 }): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 export {};
-//# sourceMappingURL=page-api.d.ts.map

package/skills/dev-browser/dist/src/page-api.js

@@ -101,4 +101,3 @@ function backendError(c, error) {
     }
     return c.json({ error: error instanceof Error ? error.message : "internal server error" }, 500);
 }
-//# sourceMappingURL=page-api.js.map

package/skills/dev-browser/dist/src/relay.d.ts

@@ -24,4 +24,3 @@ export declare function createExtensionPageBackend({ registry, isConnected, send
 }): PageBackend;
 export declare function serveRelay(options?: RelayOptions): Promise<RelayServer>;
 export {};
-//# sourceMappingURL=relay.d.ts.map

package/skills/dev-browser/dist/src/relay.js

@@ -1,7 +1,7 @@
 import { serve } from "@hono/node-server";
 import { createNodeWebSocket } from "@hono/node-ws";
 import { Hono } from "hono";
-import { formatHttpUrl, formatWsUrl } from "./entrypoint.js";
+import { formatHttpUrl, formatWsUrl, normalizeLoopbackHost } from "./entrypoint.js";
 import { PageBackendError, createPageApi, } from "./page-api.js";
 import { createTargetRegistry, } from "./target-registry.js";
 export const WEBSOCKET_POLICY_VIOLATION_CODE = 1008;
@@ -39,6 +39,37 @@ function isCdpCommand(value) {
         && (value.params === undefined || isRecord(value.params))
         && (value.sessionId === undefined || typeof value.sessionId === "string");
 }
+function isTargetInfo(value) {
+    return isRecord(value)
+        && typeof value.targetId === "string"
+        && typeof value.type === "string"
+        && typeof value.title === "string"
+        && typeof value.url === "string"
+        && typeof value.attached === "boolean";
+}
+function isExtensionEvent(value) {
+    if (!isRecord(value) || value.method !== "forwardCDPEvent" || !isRecord(value.params)) {
+        return false;
+    }
+    const event = value.params;
+    if (typeof event.method !== "string"
+        || (event.params !== undefined && !isRecord(event.params))
+        || (event.sessionId !== undefined && typeof event.sessionId !== "string")) {
+        return false;
+    }
+    if (event.method === "Target.attachedToTarget") {
+        return isRecord(event.params)
+            && typeof event.params.sessionId === "string"
+            && isTargetInfo(event.params.targetInfo);
+    }
+    if (event.method === "Target.detachedFromTarget") {
+        return isRecord(event.params) && typeof event.params.sessionId === "string";
+    }
+    if (event.method === "Target.targetInfoChanged") {
+        return isRecord(event.params) && isTargetInfo(event.params.targetInfo);
+    }
+    return true;
+}
 export function createExtensionPageBackend({ registry, isConnected, sendCommand, timeoutMs, }) {
     const pending = new Map();
     async function create(name) {
@@ -72,7 +103,10 @@ export function createExtensionPageBackend({ registry, isConnected, sendCommand,
         async list() {
             return registry.list();
         },
-        async getOrCreate(name) {
+        async getOrCreate(name, viewport) {
+            if (viewport) {
+                throw new PageBackendError(400, "viewport is not supported in extension mode");
+            }
             const existing = registry.getByName(name);
             if (existing)
                 return { name, targetId: existing.targetId };
@@ -118,7 +152,10 @@ export function createExtensionPageBackend({ registry, isConnected, sendCommand,
 }
 export async function serveRelay(options = {}) {
     const requestedPort = options.port ?? 9222;
-    const host = options.host ?? "127.0.0.1";
+    const host = normalizeLoopbackHost(options.host ?? "127.0.0.1");
+    if (!Number.isInteger(requestedPort) || requestedPort < 1 || requestedPort > 65535) {
+        throw new Error(`Invalid port: ${requestedPort}. Must be between 1 and 65535`);
+    }
     const targetTimeoutMs = options.targetTimeoutMs ?? 5000;
     const wsEndpoint = formatWsUrl(host, requestedPort, "/cdp");
     const registry = createTargetRegistry();
@@ -219,6 +256,12 @@ export async function serveRelay(options = {}) {
         extensionWs = null;
         closePlaywrightClients(error.message);
     }
+    function closeInvalidExtension(ws, code, reason) {
+        if (extensionWs === ws) {
+            disconnectExtension(new PageBackendError(502, reason));
+        }
+        ws.close(code, reason);
+    }
     async function sendToExtension(method, params, timeoutMs = 30_000) {
         const ws = extensionWs;
         if (!ws)
@@ -427,11 +470,11 @@ export async function serveRelay(options = {}) {
                     parsed = JSON.parse(event.data.toString());
                 }
                 catch {
-                    ws.close(1000, "Invalid JSON");
+                    closeInvalidExtension(ws, 1000, "Invalid JSON");
                     return;
                 }
                 if (!isRecord(parsed)) {
-                    ws.close(1003, "Invalid extension message");
+                    closeInvalidExtension(ws, 1003, "Invalid extension message");
                     return;
                 }
                 const message = parsed;
@@ -450,7 +493,11 @@ export async function serveRelay(options = {}) {
                 }
                 if (message.method !== "forwardCDPEvent")
                     return;
-                const { method, params, sessionId } = message.params;
+                if (!isExtensionEvent(parsed)) {
+                    closeInvalidExtension(ws, 1003, "Invalid extension message");
+                    return;
+                }
+                const { method, params, sessionId } = parsed.params;
                 if (method === "Target.attachedToTarget") {
                     const attached = params;
                     const target = {
@@ -518,4 +565,3 @@ function waitForListening(server) {
 function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }
-//# sourceMappingURL=relay.js.map

package/skills/dev-browser/dist/src/runtime.d.ts

@@ -1,7 +1,3 @@
-export interface RuntimeCommand {
-    command: string;
-    args: string[];
-}
 export interface TcpPortProbe {
     once(event: "error" | "listening", listener: () => void): this;
     listen(port: number, host: string): unknown;
@@ -27,19 +23,12 @@ export interface InvalidRuntimeDependenciesOptions {
     lockedDependencies: Record<string, string>;
     readPackageVersion: (packageJsonPath: string) => string | undefined;
 }
-export declare function getRuntimeDependencyInstallCommand(): RuntimeCommand;
-export declare function getPlaywrightInstallCommand({ skillDir, nodeExecutable, }: {
-    skillDir: string;
-    nodeExecutable?: string;
-}): RuntimeCommand;
+export declare function assertRuntimeDependenciesAvailable({ invalidDependencies, }: {
+    invalidDependencies: string[];
+}): void;
 export declare function isTcpPortInUse(port: number, host?: string, createProbe?: TcpPortProbeFactory): Promise<boolean>;
 export declare function isPlaywrightChromiumInstalled({ headless, findExecutable, exists, }: ChromiumInstallCheckOptions): boolean;
 export declare function getLockedRuntimeDependencies(lockfile: RuntimePackageLock): Record<string, string>;
 export declare function getInvalidRuntimeDependencies({ skillDir, lockedDependencies, readPackageVersion, }: InvalidRuntimeDependenciesOptions): string[];
-export declare function resolveRuntimePaths(skillDir: string): {
-    skillDir: string;
-};
 export declare function resolveImportMetaDir(moduleUrl: string): string;
 export declare function resolveSkillDirFromEntrypoint(moduleUrl: string): string;
-export declare function shouldUseShellForPackageCommands(platform: NodeJS.Platform): boolean;
-//# sourceMappingURL=runtime.d.ts.map

package/skills/dev-browser/dist/src/runtime.js

@@ -1,14 +1,11 @@
 import { createServer } from "node:net";
 import { basename, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-export function getRuntimeDependencyInstallCommand() {
-    return { command: "npm", args: ["ci", "--omit=dev"] };
-}
-export function getPlaywrightInstallCommand({ skillDir, nodeExecutable = process.execPath, }) {
-    return {
-        command: nodeExecutable,
-        args: [join(skillDir, "node_modules", "playwright", "cli.js"), "install", "chromium"],
-    };
+export function assertRuntimeDependenciesAvailable({ invalidDependencies, }) {
+    if (invalidDependencies.length === 0)
+        return;
+    throw new Error(`Runtime dependencies missing or out of date: ${invalidDependencies.join(", ")}. ` +
+        "From the dev-browser skill directory, run: npm ci --omit=dev");
 }
 export async function isTcpPortInUse(port, host = "127.0.0.1", createProbe = createServer) {
     return await new Promise((resolve) => {
@@ -38,9 +35,6 @@ export function getInvalidRuntimeDependencies({ skillDir, lockedDependencies, re
         ? []
         : [name]);
 }
-export function resolveRuntimePaths(skillDir) {
-    return { skillDir };
-}
 export function resolveImportMetaDir(moduleUrl) {
     return dirname(fileURLToPath(moduleUrl));
 }
@@ -48,7 +42,3 @@ export function resolveSkillDirFromEntrypoint(moduleUrl) {
     const parentDir = dirname(resolveImportMetaDir(moduleUrl));
     return basename(parentDir) === "dist" ? dirname(parentDir) : parentDir;
 }
-export function shouldUseShellForPackageCommands(platform) {
-    return platform === "win32";
-}
-//# sourceMappingURL=runtime.js.map

package/skills/dev-browser/dist/src/snapshot/browser-script.d.ts

@@ -20,4 +20,3 @@ export declare function getSnapshotScript(): string;
  * Clear the cached script (useful for development/testing)
  */
 export declare function clearSnapshotScriptCache(): void;
-//# sourceMappingURL=browser-script.d.ts.map

package/skills/dev-browser/dist/src/snapshot/browser-script.js

@@ -866,4 +866,3 @@ function selectSnapshotRef(ref) {
 export function clearSnapshotScriptCache() {
     cachedScript = null;
 }
-//# sourceMappingURL=browser-script.js.map

package/skills/dev-browser/dist/src/snapshot/index.d.ts

@@ -11,4 +11,3 @@
  *   // Now window.__devBrowser_getAISnapshot() and window.__devBrowser_selectSnapshotRef(ref) are available
  */
 export { getSnapshotScript, clearSnapshotScriptCache } from "./browser-script.js";
-//# sourceMappingURL=index.d.ts.map

package/skills/dev-browser/dist/src/snapshot/index.js

@@ -11,4 +11,3 @@
  *   // Now window.__devBrowser_getAISnapshot() and window.__devBrowser_selectSnapshotRef(ref) are available
  */
 export { getSnapshotScript, clearSnapshotScriptCache } from "./browser-script.js";
-//# sourceMappingURL=index.js.map

package/skills/dev-browser/dist/src/snapshot/inject.d.ts

@@ -10,4 +10,3 @@
  * - window.__devBrowserRefs: Map of ref -> Element (persists across connections)
  */
 export { getSnapshotScript, clearSnapshotScriptCache } from "./browser-script.js";
-//# sourceMappingURL=inject.d.ts.map

package/skills/dev-browser/dist/src/snapshot/inject.js

@@ -10,4 +10,3 @@
  * - window.__devBrowserRefs: Map of ref -> Element (persists across connections)
  */
 export { getSnapshotScript, clearSnapshotScriptCache } from "./browser-script.js";
-//# sourceMappingURL=inject.js.map

package/skills/dev-browser/dist/src/standalone.d.ts

@@ -29,4 +29,3 @@ export declare function createStandaloneApp({ backend, wsEndpoint, }: {
 }): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 export declare function serve(options?: ServeOptions): Promise<DevBrowserServer>;
 export type { ServeOptions } from "./types.js";
-//# sourceMappingURL=standalone.d.ts.map

package/skills/dev-browser/dist/src/standalone.js

@@ -2,7 +2,7 @@ import { once } from "node:events";
 import { serve as serveNode } from "@hono/node-server";
 import { Hono } from "hono";
 import { chromium } from "playwright";
-import { formatHttpUrl } from "./entrypoint.js";
+import { formatHttpUrl, normalizeLoopbackHost } from "./entrypoint.js";
 import { createPageApi, } from "./page-api.js";
 export function createStandalonePageBackend(context) {
     const pages = new Map();
@@ -81,7 +81,7 @@ export function createStandaloneApp({ backend, wsEndpoint, }) {
 }
 export async function serve(options = {}) {
     const port = options.port ?? 9222;
-    const host = options.host ?? "localhost";
+    const host = normalizeLoopbackHost(options.host ?? "localhost");
     const cdpPort = options.cdpPort ?? 9223;
     validatePorts(port, cdpPort);
     const context = await chromium.launchPersistentContext("", {
@@ -171,4 +171,3 @@ function closeServer(server) {
         server.close((error) => (error ? reject(error) : resolve()));
     });
 }
-//# sourceMappingURL=standalone.js.map

package/skills/dev-browser/dist/src/startup.d.ts

@@ -1,8 +1,4 @@
 import { type EntrypointArgs } from "./entrypoint.js";
-import type { RuntimeCommand } from "./runtime.js";
-export interface RuntimePaths {
-    skillDir: string;
-}
 interface StandaloneServer {
     port: number;
     wsEndpoint: string;
@@ -14,7 +10,6 @@ interface ExtensionServer {
     stop: () => Promise<void>;
 }
 export interface RunEntrypointDeps {
-    runtimePaths: RuntimePaths;
     serveStandalone: (options: {
         port: number;
         host: string;
@@ -31,11 +26,8 @@ export interface RunEntrypointDeps {
     ensureBrowser?: () => Promise<void>;
     preflightStandalone?: () => Promise<boolean>;
 }
-export interface EnsurePlaywrightChromiumDeps {
+export interface PlaywrightChromiumPreflightDeps {
     isInstalled: () => boolean;
-    installCommand: RuntimeCommand;
-    runCommand: (command: string, args: string[]) => Promise<void>;
-    log: (line: string) => void;
 }
 export interface PreflightStandaloneStartupDeps {
     checkServer: (host: string, port: number) => Promise<{
@@ -45,11 +37,10 @@ export interface PreflightStandaloneStartupDeps {
             wsEndpoint?: unknown;
         };
     }>;
-    isPortInUse: (port: number) => Promise<boolean>;
+    isPortInUse: (port: number, host: string) => Promise<boolean>;
     log: (line: string) => void;
 }
 export declare function preflightStandaloneStartup(args: EntrypointArgs, deps: PreflightStandaloneStartupDeps): Promise<boolean>;
-export declare function ensurePlaywrightChromium(deps: EnsurePlaywrightChromiumDeps): Promise<void>;
+export declare function assertPlaywrightChromiumAvailable(deps: PlaywrightChromiumPreflightDeps): void;
 export declare function runEntrypoint(args: EntrypointArgs, deps: RunEntrypointDeps): Promise<void>;
 export {};
-//# sourceMappingURL=startup.d.ts.map

package/skills/dev-browser/dist/src/startup.js

@@ -8,22 +8,19 @@ export async function preflightStandaloneStartup(args, deps) {
         deps.log(`Server already running on port ${args.port}`);
         return false;
     }
-    if (await deps.isPortInUse(args.port)) {
+    if (await deps.isPortInUse(args.port, args.host)) {
         throw new Error(`HTTP port ${args.port} is already in use. Stop the existing service or use --port.`);
     }
-    if (await deps.isPortInUse(args.cdpPort)) {
+    if (await deps.isPortInUse(args.cdpPort, "127.0.0.1")) {
         throw new Error(`CDP port ${args.cdpPort} is already in use. Close the existing browser or use --cdp-port.`);
     }
     return true;
 }
-export async function ensurePlaywrightChromium(deps) {
-    if (deps.isInstalled()) {
-        deps.log("Playwright Chromium already installed.");
+export function assertPlaywrightChromiumAvailable(deps) {
+    if (deps.isInstalled())
         return;
-    }
-    deps.log("Playwright Chromium not found. Installing (this may take a minute)...");
-    await deps.runCommand(deps.installCommand.command, deps.installCommand.args);
-    deps.log("Chromium installed successfully.");
+    throw new Error("Playwright Chromium is missing. From the dev-browser skill directory, run: " +
+        "node node_modules/playwright/cli.js install chromium");
 }
 export async function runEntrypoint(args, deps) {
     if (args.mode === "extension") {
@@ -78,4 +75,3 @@ export async function runEntrypoint(args, deps) {
         throw error;
     }
 }
-//# sourceMappingURL=startup.js.map

package/skills/dev-browser/dist/src/target-registry.d.ts

@@ -26,4 +26,3 @@ export declare function createTargetRegistry(): {
     waitForDetach: (targetId: string, timeoutMs: number) => Promise<void>;
     disconnect: (error: Error) => void;
 };
-//# sourceMappingURL=target-registry.d.ts.map

package/skills/dev-browser/dist/src/target-registry.js

@@ -132,4 +132,3 @@ function rejectAll(waiters, error) {
     }
     waiters.clear();
 }
-//# sourceMappingURL=target-registry.js.map

package/skills/dev-browser/dist/src/types.d.ts

@@ -24,4 +24,3 @@ export interface ServerInfoResponse {
     mode: "standalone" | "extension";
     extensionConnected?: boolean;
 }
-//# sourceMappingURL=types.d.ts.map

package/skills/dev-browser/dist/src/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/skills/dev-browser/package-lock.json

@@ -11,7 +11,7 @@
         "@hono/node-server": "^1.19.13",
         "@hono/node-ws": "^1.3.1",
         "hono": "^4.12.30",
-        "playwright": "^1.49.0"
+        "playwright": "^1.56.0"
       },
       "devDependencies": {
         "@types/node": "^22.0.0",

package/skills/dev-browser/package.json

@@ -13,7 +13,7 @@
     }
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "start": "node dist/scripts/start.js standalone",
     "start-server": "node dist/scripts/start.js standalone",
@@ -25,7 +25,7 @@
     "@hono/node-server": "^1.19.13",
     "@hono/node-ws": "^1.3.1",
     "hono": "^4.12.30",
-    "playwright": "^1.49.0"
+    "playwright": "^1.56.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/skills/grok-search/.env.example

@@ -1,5 +1,5 @@
 # GrokSearch 命令行工具配置
-# 将此文件复制为 .env 并填入你的配置值
+# 使用外部环境变量或已部署 Skill 的受限配置；不要在源码目录创建 .env
 
 # 必填项：Grok API 端点（OpenAI 兼容格式）
 GROK_API_URL=

package/skills/grok-search/SKILL.md

@@ -11,28 +11,26 @@ Use this skill for web search, webpage retrieval, and current-information lookup
 
 ## Rules
 
-- Always call `python "<SKILL_DIR>/scripts/groksearch_entry.py" ...`.
-- Do not call `scripts/groksearch_cli.py` directly.
-- The entrypoint auto-loads `<SKILL_DIR>/.env`.
+- Install dependencies in an environment you choose before first use: `python -m pip install -r "<SKILL_DIR>/requirements.txt"`.
+- Always call `python "<SKILL_DIR>/scripts/groksearch_cli.py" ...` from that environment.
+- Provide credentials through external environment variables. AbelWorkflow installations may use the restricted installed config at `<SKILL_DIR>/.env`; do not create a source-tree `.env`.
 - Required env: `GROK_API_URL`, `GROK_API_KEY`.
-- Optional env: `GROK_MODEL`, `GROK_DEBUG`, `GROK_RETRY_*`, `TAVILY_API_KEY`, `TAVILY_API_URL`, `TAVILY_ENABLED`, `GROKSEARCH_VENV_DIR`, `GROKSEARCH_PYTHON`, `AGENTS_SKILLS_PYTHON`.
+- Optional env: `GROK_MODEL`, `GROK_DEBUG`, `GROK_RETRY_*`, `TAVILY_API_KEY`, `TAVILY_API_URL`, `TAVILY_ENABLED`.
 - For time-sensitive answers, include source URLs and the relevant date.
 - Start with `web_search`; use `web_fetch` for page content; use `web_map` for site structure.
 
 ## Commands
 
 ```bash
-cp "<SKILL_DIR>/.env.example" "<SKILL_DIR>/.env"
+python -m pip install -r "<SKILL_DIR>/requirements.txt"
 
-python "<SKILL_DIR>/scripts/groksearch_entry.py" web_search --query "search terms" [--platform "GitHub"] [--min-results 3] [--max-results 10] [--model "grok-4.20-non-reasoning"] [--extra-sources 3]
+python "<SKILL_DIR>/scripts/groksearch_cli.py" web_search --query "search terms" [--platform "GitHub"] [--min-results 3] [--max-results 10] [--model "grok-4.20-non-reasoning"] [--extra-sources 3]
 
-python "<SKILL_DIR>/scripts/groksearch_entry.py" web_fetch --url "https://..." [--out file.md] [--fallback-grok]
+python "<SKILL_DIR>/scripts/groksearch_cli.py" web_fetch --url "https://..." [--out file.md] [--fallback-grok]
 
-python "<SKILL_DIR>/scripts/groksearch_entry.py" web_map --url "https://..." [--instructions "focus area"] [--max-depth 2] [--limit 80]
+python "<SKILL_DIR>/scripts/groksearch_cli.py" web_map --url "https://..." [--instructions "focus area"] [--max-depth 2] [--limit 80]
 
-python "<SKILL_DIR>/scripts/groksearch_entry.py" get_config_info [--no-test]
-
-python "<SKILL_DIR>/scripts/groksearch_entry.py" toggle_builtin_tools --action on|off|status [--root /path/to/project]
+python "<SKILL_DIR>/scripts/groksearch_cli.py" get_config_info [--no-test]
 ```
 
 ## Tool Routing Policy
@@ -40,8 +38,8 @@ python "<SKILL_DIR>/scripts/groksearch_entry.py" toggle_builtin_tools --action o
 
 | Scenario | Disabled | Use Instead |
 |----------|----------|-------------|
-| Web Search | `WebSearch` | CLI `web_search` via `groksearch_entry.py` |
-| Web Fetch | `WebFetch` | CLI `web_fetch` via `groksearch_entry.py` |
+| Web Search | `WebSearch` | CLI `web_search` via `groksearch_cli.py` |
+| Web Fetch | `WebFetch` | CLI `web_fetch` via `groksearch_cli.py` |
 
 ### Tool Capability Matrix
 
@@ -51,7 +49,6 @@ python "<SKILL_DIR>/scripts/groksearch_entry.py" toggle_builtin_tools --action o
 | `web_fetch` | `url`(required), `out`/`fallback_grok`(optional) | Structured Markdown |
 | `web_map` | `url`(required), `instructions`/`max_depth`/`max_breadth`/`limit`/`timeout`(optional) | JSON string |
 | `get_config_info` | `no_test`(optional) | `{api_url,status,connection_test}` |
-| `toggle_builtin_tools` | `action`(on/off/status), `root`(optional) | `{blocked,deny_list}` |
 
 ## Search Workflow
 
@@ -84,6 +81,6 @@ python "<SKILL_DIR>/scripts/groksearch_entry.py" toggle_builtin_tools --action o
 | Prohibited | Correct |
 |------------|---------|
 | No source citation | Include `Source [1](URL)` |
-| Assume current repo has `skills/grok-search` | Check global skill directories under `$HOME` first, then project-level `.claude/.codex/.agents`, then call `<SKILL_DIR>/scripts/groksearch_entry.py` |
-| Call `scripts/groksearch_cli.py` directly | Call `python scripts/groksearch_entry.py ...` |
+| Assume current repo has `skills/grok-search` | Check global skill directories under `$HOME` first, then project-level `.claude/.codex/.agents`, then call `<SKILL_DIR>/scripts/groksearch_cli.py` |
+| Expect automatic environment setup | Choose an environment and install `requirements.txt` explicitly |
 | Use built-in WebSearch/WebFetch | Use GrokSearch CLI |

package/skills/grok-search/scripts/_dotenv.py

@@ -25,7 +25,7 @@ def load_dotenv() -> bool:
                 if not key or key in seen_keys:
                     continue
                 seen_keys.add(key)
-                if not os.environ.get(key):
+                if key not in os.environ:
                     os.environ[key] = value
         return True
     except IOError: