daemora 1.0.0-alpha.0

package/dist/tools/core/editFile.js

@@ -0,0 +1,104 @@
+/**
+ * edit_file — surgical, diff-safe in-place edit.
+ *
+ * Contract the model can rely on:
+ *   - `old_string` must be present EXACTLY once in the file, unless
+ *     `replace_all` is true. Zero matches = NotFound. Multiple matches
+ *     with replace_all=false = ValidationError with the count. This is
+ *     the single most important property — it's what lets an LLM edit
+ *     code without rewriting whole files.
+ *   - `old_string !== new_string` — we refuse no-op edits.
+ *   - Writes via rename-swap (write temp → rename). Crash mid-write
+ *     leaves the original intact.
+ *   - Records bytes before/after + occurrences replaced so the caller
+ *     can surface a meaningful diff summary.
+ */
+import { readFile, rename, writeFile, stat, unlink } from "node:fs/promises";
+import { dirname, basename, join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { NotFoundError, PermissionDeniedError, ValidationError } from "../../util/errors.js";
+const inputSchema = z.object({
+    path: z.string().min(1).describe("Absolute or relative file path. Must already exist."),
+    old_string: z.string().min(1).describe("Exact text to replace. Must match once (or use replace_all)."),
+    new_string: z.string().describe("Replacement text. Empty = deletion."),
+    replace_all: z.boolean().default(false).describe("If true, replace every occurrence."),
+});
+export function makeEditFileTool(guard) {
+    return {
+        name: "edit_file",
+        description: "In-place text replacement. old_string must match exactly once unless replace_all:true. Safer than write_file for modifying existing files.",
+        category: "filesystem",
+        source: { kind: "core" },
+        alwaysOn: true,
+        destructive: true,
+        inputSchema,
+        async execute({ path, old_string, new_string, replace_all }) {
+            if (old_string === new_string) {
+                throw new ValidationError("edit_file: old_string and new_string are identical — no-op edit rejected.");
+            }
+            const canonical = guard.ensureAllowed(path, "write");
+            let s;
+            try {
+                s = await stat(canonical);
+            }
+            catch (e) {
+                const err = e;
+                if (err.code === "ENOENT")
+                    throw new NotFoundError(`File not found: ${canonical}`);
+                if (err.code === "EACCES")
+                    throw new PermissionDeniedError(`Read denied: ${canonical}`);
+                throw err;
+            }
+            if (!s.isFile())
+                throw new ValidationError(`Not a regular file: ${canonical}`);
+            const original = await readFile(canonical, "utf-8");
+            const bytesBefore = Buffer.byteLength(original, "utf-8");
+            const count = countOccurrences(original, old_string);
+            if (count === 0) {
+                throw new NotFoundError(`edit_file: old_string not found in ${canonical}. File contents may have drifted — re-read before editing.`);
+            }
+            if (count > 1 && !replace_all) {
+                throw new ValidationError(`edit_file: old_string appears ${count} times in ${canonical}. Provide a larger unique anchor or pass replace_all:true.`);
+            }
+            const next = replace_all
+                ? original.split(old_string).join(new_string)
+                : original.replace(old_string, new_string);
+            const bytesAfter = Buffer.byteLength(next, "utf-8");
+            const replacements = replace_all ? count : 1;
+            // Rename-swap write: crash safety + no torn reads by other procs.
+            const tmp = join(dirname(canonical), `.${basename(canonical)}.${randomUUID()}.tmp`);
+            try {
+                await writeFile(tmp, next, { encoding: "utf-8", mode: s.mode });
+                await rename(tmp, canonical);
+            }
+            catch (e) {
+                try {
+                    await unlink(tmp);
+                }
+                catch { /* tmp may not exist; ignore */ }
+                const err = e;
+                if (err.code === "EACCES")
+                    throw new PermissionDeniedError(`Write denied: ${canonical}`);
+                throw err;
+            }
+            return { path: canonical, replacements, bytesBefore, bytesAfter };
+        },
+    };
+}
+/** Count non-overlapping occurrences of needle in haystack. */
+function countOccurrences(haystack, needle) {
+    if (needle.length === 0)
+        return 0;
+    let idx = 0;
+    let n = 0;
+    while (true) {
+        const hit = haystack.indexOf(needle, idx);
+        if (hit < 0)
+            break;
+        n++;
+        idx = hit + needle.length;
+    }
+    return n;
+}
+//# sourceMappingURL=editFile.js.map

package/dist/tools/core/editFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editFile.js","sourceRoot":"","sources":["../../../src/tools/core/editFile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG7F,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACvF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8DAA8D,CAAC;IACtG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CACvF,CAAC,CAAC;AASH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,4IAA4I;QAC9I,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,WAAW;QACX,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE;YACzD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CAAC,2EAA2E,CAAC,CAAC;YACzG,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAErD,IAAI,CAAC,CAAC;YACN,IAAI,CAAC;gBACH,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAA0B,CAAC;gBACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;gBACnF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;gBACxF,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;YAE/E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEzD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,aAAa,CACrB,sCAAsC,SAAS,4DAA4D,CAC5G,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CACvB,iCAAiC,KAAK,aAAa,SAAS,4DAA4D,CACzH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,WAAW;gBACtB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC7C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAE7C,kEAAkE;YAClE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;YACpF,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,CAA0B,CAAC;gBACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;gBACzF,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM;QACnB,CAAC,EAAE,CAAC;QACJ,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/tools/core/executeCommand.d.ts

@@ -0,0 +1,36 @@
+import { z } from "zod";
+import type { FilesystemGuard } from "../../safety/FilesystemGuard.js";
+import type { ToolDef } from "../types.js";
+declare const inputSchema: z.ZodObject<{
+    command: z.ZodString;
+    cwd: z.ZodOptional<z.ZodString>;
+    /** Hard timeout — protects against hanging commands. */
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    /** Output cap to protect context. */
+    maxOutputBytes: z.ZodDefault<z.ZodNumber>;
+    /** Defaults to bash on macOS/Linux, cmd on Windows. */
+    shell: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    command: string;
+    timeoutMs: number;
+    maxOutputBytes: number;
+    shell?: string | undefined;
+    cwd?: string | undefined;
+}, {
+    command: string;
+    timeoutMs?: number | undefined;
+    shell?: string | undefined;
+    cwd?: string | undefined;
+    maxOutputBytes?: number | undefined;
+}>;
+interface ExecResult {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number | null;
+    readonly signal: NodeJS.Signals | null;
+    readonly truncated: boolean;
+    readonly durationMs: number;
+}
+export declare function makeExecuteCommandTool(guard: FilesystemGuard): ToolDef<typeof inputSchema, ExecResult>;
+export {};
+//# sourceMappingURL=executeCommand.d.ts.map

package/dist/tools/core/executeCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeCommand.d.ts","sourceRoot":"","sources":["../../../src/tools/core/executeCommand.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,QAAA,MAAM,WAAW;;;IAGf,wDAAwD;;IAExD,qCAAqC;;IAErC,uDAAuD;;;;;;;;;;;;;;EAEvD,CAAC;AAEH,UAAU,UAAU;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,WAAW,EAAE,UAAU,CAAC,CAiFtG"}

package/dist/tools/core/executeCommand.js

@@ -0,0 +1,92 @@
+import { spawn } from "node:child_process";
+import { z } from "zod";
+import { TimeoutError, ValidationError } from "../../util/errors.js";
+const inputSchema = z.object({
+    command: z.string().min(1).describe("The shell command to run."),
+    cwd: z.string().optional(),
+    /** Hard timeout — protects against hanging commands. */
+    timeoutMs: z.number().int().positive().max(600_000).default(60_000),
+    /** Output cap to protect context. */
+    maxOutputBytes: z.number().int().positive().max(1_000_000).default(100_000),
+    /** Defaults to bash on macOS/Linux, cmd on Windows. */
+    shell: z.string().optional(),
+});
+export function makeExecuteCommandTool(guard) {
+    return {
+        name: "execute_command",
+        description: "Run a shell command. Bounded timeout + output. Blocks commands that reference sensitive paths.",
+        category: "shell",
+        source: { kind: "core" },
+        alwaysOn: true,
+        destructive: true,
+        inputSchema,
+        async execute({ command, cwd, timeoutMs, maxOutputBytes, shell }, { abortSignal }) {
+            // Defence-in-depth: scan the command for absolute paths that hit
+            // the denylist. Not a sandbox — a real sandbox needs OS-level
+            // isolation — but catches the obvious "cat /etc/shadow" class.
+            guard.ensureCommandAllowed(command);
+            if (cwd)
+                guard.ensureAllowed(cwd, "read");
+            const started = Date.now();
+            const useShell = shell ?? (process.platform === "win32" ? true : "/bin/bash");
+            return await new Promise((resolvePromise, rejectPromise) => {
+                const child = spawn(command, {
+                    ...(cwd ? { cwd } : {}),
+                    shell: useShell,
+                    stdio: ["ignore", "pipe", "pipe"],
+                    signal: abortSignal,
+                });
+                let stdout = "";
+                let stderr = "";
+                let truncated = false;
+                const onData = (which) => (chunk) => {
+                    const buf = chunk.toString("utf-8");
+                    if (which === "out") {
+                        if (stdout.length + buf.length > maxOutputBytes) {
+                            stdout += buf.slice(0, Math.max(0, maxOutputBytes - stdout.length));
+                            truncated = true;
+                        }
+                        else {
+                            stdout += buf;
+                        }
+                    }
+                    else if (stderr.length + buf.length > maxOutputBytes) {
+                        stderr += buf.slice(0, Math.max(0, maxOutputBytes - stderr.length));
+                        truncated = true;
+                    }
+                    else {
+                        stderr += buf;
+                    }
+                };
+                child.stdout?.on("data", onData("out"));
+                child.stderr?.on("data", onData("err"));
+                const timer = setTimeout(() => {
+                    child.kill("SIGTERM");
+                    setTimeout(() => child.kill("SIGKILL"), 2000).unref();
+                    rejectPromise(new TimeoutError(`execute_command (${command})`, timeoutMs));
+                }, timeoutMs);
+                timer.unref();
+                child.once("error", (err) => {
+                    clearTimeout(timer);
+                    if (abortSignal.aborted) {
+                        rejectPromise(new ValidationError("Command cancelled"));
+                        return;
+                    }
+                    rejectPromise(err);
+                });
+                child.once("close", (exitCode, signal) => {
+                    clearTimeout(timer);
+                    resolvePromise({
+                        stdout,
+                        stderr,
+                        exitCode,
+                        signal,
+                        truncated,
+                        durationMs: Date.now() - started,
+                    });
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=executeCommand.js.map

package/dist/tools/core/executeCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeCommand.js","sourceRoot":"","sources":["../../../src/tools/core/executeCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGrE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,wDAAwD;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACnE,qCAAqC;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3E,uDAAuD;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAWH,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,gGAAgG;QAC7G,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,WAAW;QACX,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE;YAC/E,iEAAiE;YACjE,8DAA8D;YAC9D,+DAA+D;YAC/D,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,GAAG;gBAAE,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAE9E,OAAO,MAAM,IAAI,OAAO,CAAa,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;gBACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;oBAC3B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvB,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,MAAM,EAAE,WAAW;iBACpB,CAAC,CAAC;gBAEH,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,SAAS,GAAG,KAAK,CAAC;gBAEtB,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;oBACzD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACpC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;wBACpB,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;4BAChD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;4BACpE,SAAS,GAAG,IAAI,CAAC;wBACnB,CAAC;6BAAM,CAAC;4BACN,MAAM,IAAI,GAAG,CAAC;wBAChB,CAAC;oBACH,CAAC;yBAAM,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;wBACvD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;wBACpE,SAAS,GAAG,IAAI,CAAC;oBACnB,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,GAAG,CAAC;oBAChB,CAAC;gBACH,CAAC,CAAC;gBAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAExC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBACtD,aAAa,CAAC,IAAI,YAAY,CAAC,oBAAoB,OAAO,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC7E,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,KAAK,CAAC,KAAK,EAAE,CAAC;gBAEd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,aAAa,CAAC,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC,CAAC;wBACxD,OAAO;oBACT,CAAC;oBACD,aAAa,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;oBACvC,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,cAAc,CAAC;wBACb,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,MAAM;wBACN,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;qBACjC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/core/fetchUrl.d.ts

@@ -0,0 +1,38 @@
+import { z } from "zod";
+import type { ToolDef } from "../types.js";
+declare const inputSchema: z.ZodObject<{
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    body: z.ZodOptional<z.ZodString>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxBytes: z.ZodDefault<z.ZodNumber>;
+    /** Return parsed JSON when content-type is application/json (default true). */
+    parseJson: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE" | "HEAD";
+    timeoutMs: number;
+    maxBytes: number;
+    parseJson: boolean;
+    body?: string | undefined;
+    headers?: Record<string, string> | undefined;
+}, {
+    url: string;
+    method?: "POST" | "GET" | "PUT" | "PATCH" | "DELETE" | "HEAD" | undefined;
+    body?: string | undefined;
+    timeoutMs?: number | undefined;
+    headers?: Record<string, string> | undefined;
+    maxBytes?: number | undefined;
+    parseJson?: boolean | undefined;
+}>;
+interface FetchResult {
+    readonly status: number;
+    readonly headers: Record<string, string>;
+    readonly body: string | unknown;
+    readonly truncated: boolean;
+    readonly durationMs: number;
+}
+export declare const fetchUrlTool: ToolDef<typeof inputSchema, FetchResult>;
+export {};
+//# sourceMappingURL=fetchUrl.d.ts.map

package/dist/tools/core/fetchUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchUrl.d.ts","sourceRoot":"","sources":["../../../src/tools/core/fetchUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,QAAA,MAAM,WAAW;;;;;;;IAOf,+EAA+E;;;;;;;;;;;;;;;;;;EAE/E,CAAC;AAEH,UAAU,WAAW;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC,OAAO,WAAW,EAAE,WAAW,CAyEjE,CAAC"}

package/dist/tools/core/fetchUrl.js

@@ -0,0 +1,111 @@
+import { z } from "zod";
+import { TimeoutError, ValidationError } from "../../util/errors.js";
+const inputSchema = z.object({
+    url: z.string().url(),
+    method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]).default("GET"),
+    headers: z.record(z.string(), z.string()).optional(),
+    body: z.string().optional(),
+    timeoutMs: z.number().int().positive().max(60_000).default(15_000),
+    maxBytes: z.number().int().positive().max(2_000_000).default(500_000),
+    /** Return parsed JSON when content-type is application/json (default true). */
+    parseJson: z.boolean().default(true),
+});
+export const fetchUrlTool = {
+    name: "fetch_url",
+    description: "HTTP request. Bounded timeout + body size. Auto-parses JSON unless parseJson:false.",
+    category: "network",
+    source: { kind: "core" },
+    alwaysOn: true,
+    inputSchema,
+    async execute({ url, method, headers, body, timeoutMs, maxBytes, parseJson }, { abortSignal }) {
+        const started = Date.now();
+        // Compose user-abort with timeout-abort so the upstream cancellation works regardless of which fires.
+        const timer = AbortSignal.timeout(timeoutMs);
+        const composite = anySignal([abortSignal, timer]);
+        const init = { method, signal: composite };
+        if (headers)
+            init.headers = headers;
+        if (body !== undefined)
+            init.body = body;
+        let res;
+        try {
+            res = await fetch(url, init);
+        }
+        catch (e) {
+            if (e.name === "TimeoutError" || e.message?.includes("timed out")) {
+                throw new TimeoutError(`fetch_url ${url}`, timeoutMs);
+            }
+            if (abortSignal.aborted)
+                throw new ValidationError("Fetch cancelled");
+            throw e;
+        }
+        const reader = res.body?.getReader();
+        let received = 0;
+        const chunks = [];
+        let truncated = false;
+        if (reader) {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                if (received + value.byteLength > maxBytes) {
+                    chunks.push(value.subarray(0, Math.max(0, maxBytes - received)));
+                    truncated = true;
+                    await reader.cancel();
+                    break;
+                }
+                chunks.push(value);
+                received += value.byteLength;
+            }
+        }
+        const text = new TextDecoder("utf-8").decode(concat(chunks));
+        const headerObj = {};
+        res.headers.forEach((v, k) => {
+            headerObj[k] = v;
+        });
+        let parsedBody = text;
+        if (parseJson && (res.headers.get("content-type") ?? "").includes("application/json")) {
+            try {
+                parsedBody = JSON.parse(text);
+            }
+            catch {
+                // fall through with text body
+            }
+        }
+        return {
+            status: res.status,
+            headers: headerObj,
+            body: parsedBody,
+            truncated,
+            durationMs: Date.now() - started,
+        };
+    },
+};
+function anySignal(signals) {
+    // Polyfill of AbortSignal.any for Node <= 20. Node 22 has it native.
+    // We engines>=22 in package.json so the native path is the common case;
+    // the manual path stays for safety.
+    const native = AbortSignal.any;
+    if (typeof native === "function")
+        return native(Array.from(signals));
+    const ctrl = new AbortController();
+    for (const s of signals) {
+        if (s.aborted) {
+            ctrl.abort(s.reason);
+            break;
+        }
+        s.addEventListener("abort", () => ctrl.abort(s.reason), { once: true });
+    }
+    return ctrl.signal;
+}
+function concat(chunks) {
+    const total = chunks.reduce((n, c) => n + c.byteLength, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        out.set(c, offset);
+        offset += c.byteLength;
+    }
+    return out;
+}
+//# sourceMappingURL=fetchUrl.js.map

package/dist/tools/core/fetchUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchUrl.js","sourceRoot":"","sources":["../../../src/tools/core/fetchUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGrE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAClE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACrE,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACrC,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,YAAY,GAA6C;IACpE,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,qFAAqF;IAClG,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;IACxB,QAAQ,EAAE,IAAI;IACd,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE3B,sGAAsG;QACtG,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAElD,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACxD,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEzC,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAAW,CAAC,IAAI,KAAK,cAAc,IAAK,CAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,YAAY,CAAC,aAAa,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,WAAW,CAAC,OAAO;gBAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;YACtE,MAAM,CAAC,CAAC;QACV,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,IAAI,QAAQ,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACjE,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7D,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3B,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,GAAqB,IAAI,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,UAAU;YAChB,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SACjC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,SAAS,CAAC,OAA+B;IAChD,qEAAqE;IACrE,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,MAAM,GAAI,WAAsE,CAAC,GAAG,CAAC;IAC3F,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM;QACR,CAAC;QACD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CAAC,MAA6B;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/core/generateImage.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import type { ConfigManager } from "../../config/ConfigManager.js";
+import type { ToolDef } from "../types.js";
+/**
+ * Provider-agnostic image generation. Resolution order:
+ *
+ *   1. Caller passes `provider` + `model` directly → use them.
+ *   2. Caller passes only `model` → infer provider from configured keys.
+ *   3. IMAGE_GEN_MODEL setting holds "provider:model" → use that.
+ *   4. Auto-pick: vertex (Express) → google → openai → fail.
+ *
+ * Each provider routes to its own REST surface. Output is always
+ * saved as PNG to <dataDir>/outputs/ so the chat UI renders inline.
+ */
+declare const PROVIDERS: readonly ["openai", "vertex", "google"];
+type ImageProvider = (typeof PROVIDERS)[number];
+declare const inputSchema: z.ZodObject<{
+    prompt: z.ZodString;
+    provider: z.ZodOptional<z.ZodEnum<["openai", "vertex", "google"]>>;
+    model: z.ZodOptional<z.ZodString>;
+    size: z.ZodOptional<z.ZodString>;
+    outputPath: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    prompt: string;
+    provider?: "openai" | "google" | "vertex" | undefined;
+    model?: string | undefined;
+    size?: string | undefined;
+    outputPath?: string | undefined;
+}, {
+    prompt: string;
+    provider?: "openai" | "google" | "vertex" | undefined;
+    model?: string | undefined;
+    size?: string | undefined;
+    outputPath?: string | undefined;
+}>;
+export declare function makeGenerateImageTool(cfg: ConfigManager): ToolDef<typeof inputSchema, {
+    path: string;
+    provider: ImageProvider;
+    model: string;
+}>;
+export {};
+//# sourceMappingURL=generateImage.d.ts.map

package/dist/tools/core/generateImage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generateImage.d.ts","sourceRoot":"","sources":["../../../src/tools/core/generateImage.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;GAUG;AAEH,QAAA,MAAM,SAAS,yCAA0C,CAAC;AAC1D,KAAK,aAAa,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;EAUf,CAAC;AAEH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B/I"}

package/dist/tools/core/generateImage.js

@@ -0,0 +1,143 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+import { ProviderUnavailableError } from "../../util/errors.js";
+/**
+ * Provider-agnostic image generation. Resolution order:
+ *
+ *   1. Caller passes `provider` + `model` directly → use them.
+ *   2. Caller passes only `model` → infer provider from configured keys.
+ *   3. IMAGE_GEN_MODEL setting holds "provider:model" → use that.
+ *   4. Auto-pick: vertex (Express) → google → openai → fail.
+ *
+ * Each provider routes to its own REST surface. Output is always
+ * saved as PNG to <dataDir>/outputs/ so the chat UI renders inline.
+ */
+const PROVIDERS = ["openai", "vertex", "google"];
+const inputSchema = z.object({
+    prompt: z.string().min(1).max(4000).describe("Image description."),
+    provider: z.enum(PROVIDERS).optional().describe("DO NOT SET. Provider auto-picks from the IMAGE_GEN_MODEL setting; only override if you have a specific reason."),
+    model: z.string().optional().describe("DO NOT SET. Model auto-picks from the IMAGE_GEN_MODEL setting."),
+    size: z.string().optional().describe("Aspect / dimensions, provider-specific."),
+    outputPath: z.string().optional(),
+});
+export function makeGenerateImageTool(cfg) {
+    return {
+        name: "generate_image",
+        description: "Generate an image from text. Pass ONLY `prompt` and (optionally) `outputPath` / `size`. Provider and model are configured in settings — do not pass them. Returns the saved PNG path.",
+        category: "ai",
+        source: { kind: "core" },
+        alwaysOn: false,
+        tags: ["image", "generate", "art", "gemini", "imagen", "dalle", "nano-banana"],
+        inputSchema,
+        async execute({ prompt, provider, model, size, outputPath }) {
+            const resolved = resolveProviderAndModel(cfg, provider, model);
+            const apiKey = cfg.vault.get(resolved.keyName)?.reveal();
+            if (!apiKey)
+                throw new ProviderUnavailableError(resolved.provider, resolved.keyName);
+            const png = await generate(resolved.provider, resolved.model, apiKey, prompt, size);
+            let path = outputPath;
+            if (!path) {
+                const outDir = join(cfg.env.dataDir, "outputs");
+                await mkdir(outDir, { recursive: true });
+                path = join(outDir, `daemora-image-${Date.now()}.png`);
+            }
+            await writeFile(path, png);
+            return { path, provider: resolved.provider, model: resolved.model };
+        },
+    };
+}
+function resolveProviderAndModel(cfg, provider, model) {
+    // 1. Explicit provider wins.
+    if (provider) {
+        return {
+            provider,
+            model: model ?? defaultModelFor(provider),
+            keyName: keyNameFor(provider),
+        };
+    }
+    // 2. IMAGE_GEN_MODEL setting (format: "provider:model").
+    const setting = cfg.setting("IMAGE_GEN_MODEL") ?? undefined;
+    if (setting && setting.includes(":")) {
+        const [p, ...rest] = setting.split(":");
+        if (PROVIDERS.includes(p)) {
+            return {
+                provider: p,
+                model: model ?? rest.join(":"),
+                keyName: keyNameFor(p),
+            };
+        }
+    }
+    // 3. Auto-pick: prefer Vertex (Nano Banana on Express key) → Google AI → OpenAI.
+    for (const p of PROVIDERS) {
+        if (cfg.vault.get(keyNameFor(p)) !== undefined) {
+            return { provider: p, model: model ?? defaultModelFor(p), keyName: keyNameFor(p) };
+        }
+    }
+    throw new ProviderUnavailableError("No image generation provider configured. Set GOOGLE_VERTEX_API_KEY, GOOGLE_AI_API_KEY, or OPENAI_API_KEY.");
+}
+function keyNameFor(provider) {
+    switch (provider) {
+        case "openai": return "OPENAI_API_KEY";
+        case "google": return "GOOGLE_AI_API_KEY";
+        case "vertex": return "GOOGLE_VERTEX_API_KEY";
+    }
+}
+function defaultModelFor(provider) {
+    switch (provider) {
+        case "openai": return "dall-e-3";
+        case "google": return "gemini-2.5-flash-image";
+        case "vertex": return "gemini-2.5-flash-image";
+    }
+}
+async function generate(provider, model, apiKey, prompt, size) {
+    if (provider === "openai")
+        return generateOpenAI(model, apiKey, prompt, size ?? "1024x1024");
+    if (provider === "google")
+        return generateGemini("https://generativelanguage.googleapis.com/v1beta", model, apiKey, prompt);
+    // vertex express — same Gemini :generateContent shape, different host.
+    return generateGemini("https://aiplatform.googleapis.com/v1beta1", `publishers/google/models/${model}`, apiKey, prompt);
+}
+async function generateOpenAI(model, apiKey, prompt, size) {
+    const res = await fetch("https://api.openai.com/v1/images/generations", {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
+        body: JSON.stringify({ model, prompt, size, n: 1, response_format: "b64_json" }),
+        signal: AbortSignal.timeout(120_000),
+    });
+    if (!res.ok)
+        throw new Error(`OpenAI image ${res.status}: ${await res.text()}`);
+    const data = (await res.json());
+    const b64 = data.data[0]?.b64_json;
+    if (!b64)
+        throw new Error("OpenAI returned no image data");
+    return Buffer.from(b64, "base64");
+}
+/**
+ * Gemini image gen via :generateContent — works for both Google AI
+ * (generativelanguage.googleapis.com) and Vertex Express
+ * (aiplatform.googleapis.com). Both expect the same body shape and
+ * return inline_data parts. The model path differs: Google AI uses
+ * `models/{name}`, Vertex uses `publishers/google/models/{name}`.
+ */
+async function generateGemini(baseUrl, modelPath, apiKey, prompt) {
+    const url = `${baseUrl}/${modelPath.includes("/") ? modelPath : `models/${modelPath}`}:generateContent?key=${encodeURIComponent(apiKey)}`;
+    const res = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            contents: [{ role: "user", parts: [{ text: prompt }] }],
+            generationConfig: { responseModalities: ["IMAGE"] },
+        }),
+        signal: AbortSignal.timeout(120_000),
+    });
+    if (!res.ok)
+        throw new Error(`Gemini image ${res.status}: ${await res.text()}`);
+    const data = (await res.json());
+    const parts = data.candidates?.[0]?.content?.parts ?? [];
+    const inline = parts.find((p) => p.inlineData?.data);
+    if (!inline?.inlineData)
+        throw new Error("Gemini returned no image inline_data");
+    return Buffer.from(inline.inlineData.data, "base64");
+}
+//# sourceMappingURL=generateImage.js.map

package/dist/tools/core/generateImage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generateImage.js","sourceRoot":"","sources":["../../../src/tools/core/generateImage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE;;;;;;;;;;GAUG;AAEH,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG1D,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAClE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC7C,gHAAgH,CACjH;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnC,gEAAgE,CACjE;IACD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC/E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACtD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,uLAAuL;QACzL,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC;QAC9E,WAAW;QACX,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACzD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAErF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAEpF,IAAI,IAAI,GAAG,UAAU,CAAC;YACtB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAChD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC;AAQD,SAAS,uBAAuB,CAC9B,GAAkB,EAClB,QAAmC,EACnC,KAAyB;IAEzB,6BAA6B;IAC7B,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,QAAQ;YACR,KAAK,EAAE,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC;YACzC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,MAAM,OAAO,GAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAwB,IAAI,SAAS,CAAC;IACpF,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAkB,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,QAAQ,EAAE,CAAkB;gBAC5B,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC9B,OAAO,EAAE,UAAU,CAAC,CAAkB,CAAC;aACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED,MAAM,IAAI,wBAAwB,CAChC,2GAA2G,CAC5G,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAuB;IACzC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,gBAAgB,CAAC;QACvC,KAAK,QAAQ,CAAC,CAAC,OAAO,mBAAmB,CAAC;QAC1C,KAAK,QAAQ,CAAC,CAAC,OAAO,uBAAuB,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAuB;IAC9C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC;QACjC,KAAK,QAAQ,CAAC,CAAC,OAAO,wBAAwB,CAAC;QAC/C,KAAK,QAAQ,CAAC,CAAC,OAAO,wBAAwB,CAAC;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,QAAuB,EACvB,KAAa,EACb,MAAc,EACd,MAAc,EACd,IAAwB;IAExB,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,kDAAkD,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5H,uEAAuE;IACvE,OAAO,cAAc,CAAC,2CAA2C,EAAE,4BAA4B,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1H,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc,EAAE,IAAY;IACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8CAA8C,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;QAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QAChF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqC,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc,EAAE,MAAc;IAC9F,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,EAAE,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1I,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACvD,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,CAAC,OAAO,CAAC,EAAE;SACpD,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC"}