pilotswarm-sdk 0.5.11 → 0.5.13

package/dist/agent-loader.d.ts

@@ -34,6 +34,8 @@ export interface AgentConfig {
     description?: string;
     prompt: string;
     tools?: string[] | null;
+    /** Skill names to preload from the session's configured skill directories. */
+    skills?: string[];
     /** If true, this is a system agent started automatically by workers. */
     system?: boolean;
     /** Deterministic ID slug for system agents (e.g. "sweeper"). Used to derive a fixed session UUID. */

package/dist/agent-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-loader.d.ts","sourceRoot":"","sources":["../src/agent-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYpD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAclF;AAID,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qGAAqG;IACrG,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oIAAoI;IACpI,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,WAAW,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;IAC/E;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAyHD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAiE/D"}
+{"version":3,"file":"agent-loader.d.ts","sourceRoot":"","sources":["../src/agent-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYpD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAclF;AAID,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qGAAqG;IACrG,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oIAAoI;IACpI,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,WAAW,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;IAC/E;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAmID;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAkE/D"}

package/dist/agent-loader.js

@@ -62,7 +62,7 @@ export function systemChildAgentUUID(parentSessionId, slug) {
 // ─── Frontmatter Parser ─────────────────────────────────────────
 /**
  * Parse YAML frontmatter from an .agent.md file.
- * Handles simple `key: value` pairs and YAML list syntax for `tools`.
+ * Handles simple `key: value` pairs and YAML list syntax for `tools` and `skills`.
  */
 function parseAgentFrontmatter(content) {
     const meta = {};
@@ -109,10 +109,18 @@ function parseAgentFrontmatter(content) {
             }
         }
         // YAML list item (e.g. "  - view")
-        if (trimmed.startsWith("- ") && currentKey === "tools") {
-            if (!meta.tools)
-                meta.tools = [];
-            meta.tools.push(trimmed.slice(2).trim());
+        if (trimmed.startsWith("- ") && (currentKey === "tools" || currentKey === "skills")) {
+            const item = trimmed.slice(2).trim();
+            if (currentKey === "tools") {
+                if (!meta.tools)
+                    meta.tools = [];
+                meta.tools.push(item);
+            }
+            else {
+                if (!meta.skills)
+                    meta.skills = [];
+                meta.skills.push(item);
+            }
             continue;
         }
         // Key-value pair
@@ -158,6 +166,12 @@ function parseAgentFrontmatter(content) {
             // Will be followed by list items
             meta.tools = [];
         }
+        else if (key === "skills" && value) {
+            meta.skills = value.replace(/[\[\]]/g, "").split(",").map(s => s.trim()).filter(Boolean);
+        }
+        else if (key === "skills" && !value) {
+            meta.skills = [];
+        }
         else if ((key === "splash" || key === "splashMobile" || key === "initialPrompt") && (value === "|" || value === ">")) {
             // YAML block scalar (| literal, > folded)
             currentBlockStyle = value;
@@ -216,6 +230,7 @@ export function loadAgentFiles(agentsDir) {
                 description: meta.description,
                 prompt: body,
                 tools: meta.tools && meta.tools.length > 0 ? meta.tools : null,
+                skills: meta.skills && meta.skills.length > 0 ? meta.skills : undefined,
                 system: meta.system,
                 id: meta.id,
                 title: meta.title,

package/dist/agent-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-loader.js","sourceRoot":"","sources":["../src/agent-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,mEAAmE;AAEnE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,0BAA0B,CAAC;SAClC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO;QACH,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACrB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,eAAuB,EAAE,IAAY;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,gCAAgC,CAAC;SACxC,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO;QACH,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACrB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAoDD,mEAAmE;AAEnE;;;GAGG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAI1C,MAAM,IAAI,GAAgR,EAAE,CAAC;IAE7R,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB;IACnE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,cAAc,GAAoB,IAAI,CAAC;IAC3C,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAE5C,MAAM,cAAc,GAAG,GAAG,EAAE;QACxB,IAAI,cAAc,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,IAAI,UAAU,KAAK,QAAQ;gBAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;iBAC1C,IAAI,UAAU,KAAK,cAAc;gBAAE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;iBAC3D,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;gBACtC,sDAAsD;gBACtD,IAAI,CAAC,aAAa,GAAG,iBAAiB,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1F,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,iBAAiB,GAAG,IAAI,CAAC;QAC7B,CAAC;IACL,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,0DAA0D;QAC1D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC1B,qCAAqC;YACrC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,cAAc,EAAE,CAAC;gBACjB,0CAA0C;YAC9C,CAAC;iBAAM,CAAC;gBACJ,oDAAoD;gBACpD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClE,SAAS;YACb,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,SAAS;QACb,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,UAAU,GAAG,GAAG,CAAC;QAEjB,IAAI,GAAG,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;aACjC,IAAI,GAAG,KAAK,aAAa;YAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;aACpD,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC;aACrD,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC;aACvD,IAAI,GAAG,KAAK,WAAW;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,KAAK,MAAM,CAAC;aAC3D,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;aAClC,IAAI,GAAG,KAAK,OAAO;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;aACxC,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;aAC1C,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;aACI,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;aAC5C,IAAI,GAAG,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC;YAChC,oCAAoC;YACpC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5F,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,iCAAiC;YACjC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,eAAe,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;YACrH,0CAA0C;YAC1C,iBAAiB,GAAG,KAAK,CAAC;YAC1B,cAAc,GAAG,EAAE,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,cAAc,EAAE,CAAC;IAEjB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,uBAAuB;IAC3E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,mEAAmE;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAEnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAEtD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACb,wDAAwD;gBACxD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,qBAAqB,CAAC,CAAC;gBACzE,SAAS;YACb,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,+BAA+B,IAAI,CAAC,aAAa,6BAA6B,CAAC,CAAC;gBAClI,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO;gBACP,SAAS,EAAE,OAAO;gBAClB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE,QAAQ;aACvB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,yGAAyG,CAAC,CAAC;YACxJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,+GAA+G,CAAC,CAAC;YAC9J,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"agent-loader.js","sourceRoot":"","sources":["../src/agent-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,mEAAmE;AAEnE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,0BAA0B,CAAC;SAClC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO;QACH,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACrB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,eAAuB,EAAE,IAAY;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,gCAAgC,CAAC;SACxC,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO;QACH,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACrB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAsDD,mEAAmE;AAEnE;;;GAGG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAI1C,MAAM,IAAI,GAAmS,EAAE,CAAC;IAEhT,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB;IACnE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,cAAc,GAAoB,IAAI,CAAC;IAC3C,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAE5C,MAAM,cAAc,GAAG,GAAG,EAAE;QACxB,IAAI,cAAc,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,IAAI,UAAU,KAAK,QAAQ;gBAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;iBAC1C,IAAI,UAAU,KAAK,cAAc;gBAAE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;iBAC3D,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;gBACtC,sDAAsD;gBACtD,IAAI,CAAC,aAAa,GAAG,iBAAiB,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1F,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,iBAAiB,GAAG,IAAI,CAAC;QAC7B,CAAC;IACL,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,0DAA0D;QAC1D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC1B,qCAAqC;YACrC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,cAAc,EAAE,CAAC;gBACjB,0CAA0C;YAC9C,CAAC;iBAAM,CAAC;gBACJ,oDAAoD;gBACpD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClE,SAAS;YACb,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,SAAS;QACb,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,UAAU,GAAG,GAAG,CAAC;QAEjB,IAAI,GAAG,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;aACjC,IAAI,GAAG,KAAK,aAAa;YAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;aACpD,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC;aACrD,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC;aACvD,IAAI,GAAG,KAAK,WAAW;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,KAAK,MAAM,CAAC;aAC3D,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;aAClC,IAAI,GAAG,KAAK,OAAO;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;aACxC,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;aAC1C,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;aACI,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;aAC5C,IAAI,GAAG,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC;YAChC,oCAAoC;YACpC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5F,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,iCAAiC;YACjC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACpB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,eAAe,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;YACrH,0CAA0C;YAC1C,iBAAiB,GAAG,KAAK,CAAC;YAC1B,cAAc,GAAG,EAAE,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,cAAc,EAAE,CAAC;IAEjB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,uBAAuB;IAC3E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,mEAAmE;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAEnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAEtD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACb,wDAAwD;gBACxD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,qBAAqB,CAAC,CAAC;gBACzE,SAAS;YACb,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,+BAA+B,IAAI,CAAC,aAAa,6BAA6B,CAAC,CAAC;gBAClI,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC9D,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACvE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO;gBACP,SAAS,EAAE,OAAO;gBAClB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE,QAAQ;aACvB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,yGAAyG,CAAC,CAAC;YACxJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,+GAA+G,CAAC,CAAC;YAC9J,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/artifact-tools.d.ts

@@ -1,18 +1,26 @@
 /**
- * Artifact Tools — allow agents to read/write markdown files via Azure Blob Storage.
+ * Artifact Tools — agent-facing surface over the artifact store.
  *
- * Three tools:
- *   - `write_artifact` — upload a file to blob storage
- *   - `read_artifact`  — read a file from another session's artifacts
- *   - `export_artifact` — return an artifact:// URI for TUI on-demand download
+ * Three tools, consolidated along the source/destination axis so the model's
+ * mental picture stays "read and write":
  *
- * Plus a discovery tool:
- *   - `list_artifacts`  — list files in a session's artifact folder
+ *   - `write_artifact` — store bytes from exactly one of three sources:
+ *       content       (inline, model-authored — the only path where bytes
+ *                      transit the context window)
+ *       fromFile      (worker-local path → streamed; zero payload tokens)
+ *       fromArtifact  (server-side copy from another session, with optional
+ *                      SHA-256 precondition)
+ *   - `read_artifact` — fetch metadata (`metaOnly`), stream to a worker-local
+ *       file (`toFile`), or return content inline (utf-8 or base64, bounded).
+ *   - `list_artifacts` — discovery, with full provenance metadata.
  *
- * Agents communicate via artifacts: Agent A writes, Agent B reads.
- * For TUI download, the agent calls `export_artifact` which returns an
- * `artifact://sessionId/filename` URI. The TUI detects these URIs and
- * lets the user download on demand from blob storage directly.
+ * Every result carries { sha256, sizeBytes, contentType, isBinary,
+ * artifactLink, … } so provenance verification never requires a transfer.
+ *
+ * DESIGN RULE (born from the 2026-07-12 Diagon Alley incident): the model is
+ * a control plane, not a wire. Payloads that already exist as bytes must move
+ * via `fromFile` / `fromArtifact` / `toFile`, never by being reproduced as
+ * model tokens. Inline reads are size-guarded for the same reason.
  *
  * @module
  * @internal
@@ -20,11 +28,9 @@
 import type { Tool } from "@github/copilot-sdk";
 import type { ArtifactStore } from "./session-store.js";
 /**
- * Create artifact tools bound to the given artifact store.
- *
- * The store can be Azure Blob (SessionBlobStore) or local filesystem
- * (FilesystemArtifactStore). The `sessionId` for write/export operations
- * is injected by the tool handler via the session context.
+ * Create the artifact tools bound to the given store. The store can be Azure
+ * Blob (SessionBlobStore) or local filesystem (FilesystemArtifactStore); the
+ * `sessionId` for writes is injected via the session context.
  */
 export declare function createArtifactTools(opts: {
     blobStore: ArtifactStore;

package/dist/artifact-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-tools.d.ts","sourceRoot":"","sources":["../src/artifact-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,aAAa,CAAC;CAC5B,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAgNd"}
+{"version":3,"file":"artifact-tools.d.ts","sourceRoot":"","sources":["../src/artifact-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA6DxD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,aAAa,CAAC;CAC5B,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAoUd"}

package/dist/artifact-tools.js

@@ -1,132 +1,327 @@
 /**
- * Artifact Tools — allow agents to read/write markdown files via Azure Blob Storage.
+ * Artifact Tools — agent-facing surface over the artifact store.
  *
- * Three tools:
- *   - `write_artifact` — upload a file to blob storage
- *   - `read_artifact`  — read a file from another session's artifacts
- *   - `export_artifact` — return an artifact:// URI for TUI on-demand download
+ * Three tools, consolidated along the source/destination axis so the model's
+ * mental picture stays "read and write":
  *
- * Plus a discovery tool:
- *   - `list_artifacts`  — list files in a session's artifact folder
+ *   - `write_artifact` — store bytes from exactly one of three sources:
+ *       content       (inline, model-authored — the only path where bytes
+ *                      transit the context window)
+ *       fromFile      (worker-local path → streamed; zero payload tokens)
+ *       fromArtifact  (server-side copy from another session, with optional
+ *                      SHA-256 precondition)
+ *   - `read_artifact` — fetch metadata (`metaOnly`), stream to a worker-local
+ *       file (`toFile`), or return content inline (utf-8 or base64, bounded).
+ *   - `list_artifacts` — discovery, with full provenance metadata.
  *
- * Agents communicate via artifacts: Agent A writes, Agent B reads.
- * For TUI download, the agent calls `export_artifact` which returns an
- * `artifact://sessionId/filename` URI. The TUI detects these URIs and
- * lets the user download on demand from blob storage directly.
+ * Every result carries { sha256, sizeBytes, contentType, isBinary,
+ * artifactLink, … } so provenance verification never requires a transfer.
+ *
+ * DESIGN RULE (born from the 2026-07-12 Diagon Alley incident): the model is
+ * a control plane, not a wire. Payloads that already exist as bytes must move
+ * via `fromFile` / `fromArtifact` / `toFile`, never by being reproduced as
+ * model tokens. Inline reads are size-guarded for the same reason.
  *
  * @module
  * @internal
  */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
 import { defineTool } from "@github/copilot-sdk";
+const INLINE_READ_DEFAULT_BYTES = 65_536;
+const INLINE_READ_MAX_BYTES = 262_144;
+function artifactLink(sessionId, filename) {
+    return `artifact://${sessionId}/${filename}`;
+}
+function toolError(code, message, hint) {
+    return JSON.stringify({ error: code, message, ...(hint ? { hint } : {}) });
+}
 /**
- * Create artifact tools bound to the given artifact store.
- *
- * The store can be Azure Blob (SessionBlobStore) or local filesystem
- * (FilesystemArtifactStore). The `sessionId` for write/export operations
- * is injected by the tool handler via the session context.
+ * Worker-local paths handed to fromFile/toFile are jailed to a set of allowed
+ * roots (default: the process working directory and the OS temp dir, where
+ * session `bash` work lands). Symlink escapes are rejected via realpath.
+ */
+function allowedFileRoots() {
+    const configured = (process.env.PILOTSWARM_ARTIFACT_FILE_ROOTS || "")
+        .split(path.delimiter)
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+    const roots = configured.length > 0 ? configured : [process.cwd(), os.tmpdir()];
+    return roots.map((root) => {
+        const resolved = path.resolve(root);
+        try {
+            return fs.realpathSync(resolved);
+        }
+        catch {
+            return resolved;
+        }
+    });
+}
+function resolveJailedPath(candidate, mustExist) {
+    const resolved = path.resolve(String(candidate || ""));
+    // realpath the deepest existing ancestor so symlinks can't tunnel out.
+    let probe = mustExist ? resolved : path.dirname(resolved);
+    while (!fs.existsSync(probe)) {
+        const parent = path.dirname(probe);
+        if (parent === probe)
+            break;
+        probe = parent;
+    }
+    let real;
+    try {
+        real = fs.realpathSync(probe);
+    }
+    catch {
+        return { error: `Path is not accessible: ${candidate}` };
+    }
+    const effective = mustExist ? real : path.join(real, path.relative(probe, resolved));
+    const roots = allowedFileRoots();
+    const inJail = roots.some((root) => effective === root || effective.startsWith(root + path.sep));
+    if (!inJail) {
+        return { error: `Path is outside the allowed roots (${roots.join(", ")}): ${candidate}` };
+    }
+    if (mustExist && !fs.existsSync(effective)) {
+        return { error: `File not found: ${candidate}` };
+    }
+    return { path: effective };
+}
+/**
+ * Create the artifact tools bound to the given store. The store can be Azure
+ * Blob (SessionBlobStore) or local filesystem (FilesystemArtifactStore); the
+ * `sessionId` for writes is injected via the session context.
  */
 export function createArtifactTools(opts) {
     const { blobStore } = opts;
     // ── write_artifact ─────────────────────────────────────────
     const writeTool = defineTool("write_artifact", {
-        description: "Write a file (typically markdown) to shared blob storage. " +
-            "Other agents can read it via `read_artifact`. " +
-            "To make it downloadable by the TUI user, call `export_artifact` afterwards.\n\n" +
-            "The file is stored under the current session's artifact folder. " +
-            "Maximum file size: 1MB.",
+        description: "Write an artifact from EXACTLY ONE of three sources: inline `content` (text you are authoring), " +
+            "`fromFile` (a worker-local file path — streamed server-side, use this for anything that already " +
+            "exists as a file, especially binaries and archives), or `fromArtifact` (server-side copy from " +
+            "another session's artifact, optionally verified against an expected SHA-256). " +
+            "Returns full metadata including sha256 and an artifact:// link — include the link in your " +
+            "response when the user should see it. Never read a file just to re-send its bytes as `content`; " +
+            "pass the path via `fromFile` instead.",
         parameters: {
             type: "object",
             properties: {
                 filename: {
                     type: "string",
-                    description: "Filename including extension, e.g. 'report.md' or 'analysis.json'. " +
-                        "No path separators allowed.",
+                    description: "Destination filename, e.g. 'report.md'. No path separators. " +
+                        "Optional for fromFile/fromArtifact (defaults to the source basename).",
                 },
                 content: {
                     type: "string",
-                    description: "The full file content to write.",
+                    description: "Inline content to write (source 1 of 3). Max 1MB.",
+                },
+                encoding: {
+                    type: "string",
+                    enum: ["utf-8", "base64"],
+                    description: "Encoding of `content`. Default 'utf-8'; 'base64' for small binary payloads.",
+                },
+                fromFile: {
+                    type: "string",
+                    description: "Worker-local file path to upload (source 2 of 3). Streamed — bytes never enter " +
+                        "the conversation. Preferred for files created with bash/tar/build steps.",
+                },
+                fromArtifact: {
+                    type: "object",
+                    description: "Copy another session's artifact server-side (source 3 of 3). " +
+                        "Bytes move store-to-store.",
+                    properties: {
+                        sessionId: { type: "string", description: "Session that owns the source artifact." },
+                        filename: { type: "string", description: "Source artifact filename." },
+                        expectedSha256: {
+                            type: "string",
+                            description: "Optional precondition: fail with SHA_MISMATCH if the copied bytes hash differently.",
+                        },
+                    },
+                    required: ["sessionId", "filename"],
                 },
                 contentType: {
                     type: "string",
-                    description: "MIME type. Default: 'text/markdown'. Use 'application/json' for JSON, etc.",
+                    description: "MIME type. Default: 'text/markdown' for inline text; sniffed for fromFile.",
                 },
                 content_type: {
                     type: "string",
                     description: "Alias for contentType. Supported for compatibility; contentType is preferred.",
                 },
-                encoding: {
-                    type: "string",
-                    enum: ["utf-8", "base64"],
-                    description: "Encoding for the content field. Default: 'utf-8'. Use 'base64' for binary artifacts.",
+                pin: {
+                    type: "boolean",
+                    description: "Pin the artifact so it survives session cleanup (deliverables).",
                 },
             },
-            required: ["filename", "content"],
+            required: [],
         },
         handler: async (params, context) => {
             const sessionId = context?.durableSessionId;
             if (!sessionId) {
-                return JSON.stringify({ error: "No session context — cannot determine artifact path." });
+                return toolError("NO_SESSION_CONTEXT", "No session context — cannot determine artifact path.");
+            }
+            const sources = [params.content !== undefined, !!params.fromFile, !!params.fromArtifact]
+                .filter(Boolean).length;
+            if (sources !== 1) {
+                return toolError("EXCLUSIVE_SOURCE", `write_artifact needs exactly one byte source; you provided ${sources}.`, "Pass exactly one of: content (inline text), fromFile (worker-local path), fromArtifact ({sessionId, filename}).");
             }
+            const contentType = params.contentType ?? params.content_type;
+            const pinned = params.pin === true;
             try {
-                const metadata = await blobStore.uploadArtifact(sessionId, params.filename, params.content, params.contentType ?? params.content_type, { encoding: params.encoding });
+                if (params.fromFile) {
+                    const jailed = resolveJailedPath(params.fromFile, true);
+                    if (jailed.error)
+                        return toolError("PATH_OUTSIDE_WORKDIR", jailed.error);
+                    const filename = params.filename || path.basename(jailed.path);
+                    const metadata = await blobStore.uploadArtifactFromFile(sessionId, filename, jailed.path, contentType, { pinned });
+                    return JSON.stringify({
+                        success: true,
+                        sessionId,
+                        ...metadata,
+                        artifactLink: artifactLink(sessionId, metadata.filename),
+                    });
+                }
+                if (params.fromArtifact) {
+                    const from = params.fromArtifact;
+                    const filename = params.filename || path.basename(from.filename);
+                    const metadata = await blobStore.copyArtifact(from.sessionId, from.filename, sessionId, filename, { pinned });
+                    if (from.expectedSha256 && metadata.sha256 !== from.expectedSha256) {
+                        await blobStore.deleteArtifact(sessionId, metadata.filename);
+                        return toolError("SHA_MISMATCH", `Copied bytes hash ${metadata.sha256}, expected ${from.expectedSha256}. The copy was deleted.`, "The source artifact is not the bytes you believed. Re-verify the source with read_artifact({metaOnly: true}).");
+                    }
+                    return JSON.stringify({
+                        success: true,
+                        sessionId,
+                        ...metadata,
+                        artifactLink: artifactLink(sessionId, metadata.filename),
+                    });
+                }
+                if (!params.filename) {
+                    return toolError("FILENAME_REQUIRED", "filename is required when writing inline content.");
+                }
+                const metadata = await blobStore.uploadArtifact(sessionId, params.filename, params.content, contentType, { encoding: params.encoding, pinned });
                 return JSON.stringify({
                     success: true,
                     sessionId,
                     ...metadata,
+                    artifactLink: artifactLink(sessionId, metadata.filename),
                 });
             }
             catch (err) {
-                return JSON.stringify({ error: err.message });
+                return toolError(err?.code || "ARTIFACT_WRITE_FAILED", err.message);
             }
         },
     });
     // ── read_artifact ──────────────────────────────────────────
     const readTool = defineTool("read_artifact", {
-        description: "Read a file from any session's artifact storage. " +
-            "Use this to read files written by other agents via `write_artifact`. " +
-            "You need the session ID and filename.",
+        description: "Read a session artifact (yours or another session's). Three modes: default returns text content " +
+            "inline (bounded by maxBytes, use offset to page); `toFile` streams the artifact to a worker-local " +
+            "path without the bytes entering the conversation (REQUIRED for large or binary artifacts you want " +
+            "to process with bash); `metaOnly` returns just metadata (size, sha256, contentType) — use it to " +
+            "verify provenance cheaply. Small binary artifacts can be read inline with encoding='base64'.",
         parameters: {
             type: "object",
             properties: {
                 sessionId: {
                     type: "string",
-                    description: "The session ID that owns the artifact. Use your own session ID for your own files, " +
-                        "or another agent's session ID to read their files.",
+                    description: "The session that owns the artifact (your own session ID for your files).",
                 },
-                filename: {
+                filename: { type: "string", description: "The artifact filename, e.g. 'report.md'." },
+                metaOnly: {
+                    type: "boolean",
+                    description: "Return metadata only — no content transfer.",
+                },
+                toFile: {
                     type: "string",
-                    description: "The filename to read, e.g. 'report.md'.",
+                    description: "Write the artifact to this worker-local path instead of returning content. " +
+                        "Zero context cost; works for any size and any content type.",
+                },
+                encoding: {
+                    type: "string",
+                    enum: ["utf-8", "base64"],
+                    description: "Inline content encoding. 'base64' permits reading small binary artifacts inline.",
+                },
+                maxBytes: {
+                    type: "number",
+                    description: `Max bytes returned inline (default ${INLINE_READ_DEFAULT_BYTES}, hard cap ${INLINE_READ_MAX_BYTES}). Result sets truncated=true when the artifact is larger.`,
+                },
+                offset: {
+                    type: "number",
+                    description: "Byte offset for inline reads — page through large text artifacts.",
                 },
             },
             required: ["sessionId", "filename"],
         },
         handler: async (params) => {
+            if (params.metaOnly && params.toFile) {
+                return toolError("EXCLUSIVE_MODE", "metaOnly and toFile are mutually exclusive.", "Use metaOnly for metadata, toFile to materialize bytes, or neither for inline content.");
+            }
             try {
-                const content = await blobStore.downloadArtifactText(params.sessionId, params.filename);
+                if (params.metaOnly) {
+                    const metadata = await blobStore.statArtifact(params.sessionId, params.filename);
+                    if (!metadata) {
+                        return toolError("ARTIFACT_NOT_FOUND", `Artifact not found: ${params.filename} in session ${params.sessionId}`);
+                    }
+                    return JSON.stringify({
+                        success: true,
+                        sessionId: params.sessionId,
+                        ...metadata,
+                        artifactLink: artifactLink(params.sessionId, metadata.filename),
+                    });
+                }
+                if (params.toFile) {
+                    const jailed = resolveJailedPath(params.toFile, false);
+                    if (jailed.error)
+                        return toolError("PATH_OUTSIDE_WORKDIR", jailed.error);
+                    const result = await blobStore.downloadArtifact(params.sessionId, params.filename);
+                    fs.mkdirSync(path.dirname(jailed.path), { recursive: true });
+                    fs.writeFileSync(jailed.path, result.body);
+                    const { body: _body, ...metadata } = result;
+                    return JSON.stringify({
+                        success: true,
+                        sessionId: params.sessionId,
+                        path: jailed.path,
+                        ...metadata,
+                        sha256: metadata.sha256 || crypto.createHash("sha256").update(result.body).digest("hex"),
+                        artifactLink: artifactLink(params.sessionId, metadata.filename),
+                    });
+                }
+                const result = await blobStore.downloadArtifact(params.sessionId, params.filename);
+                const encoding = params.encoding || "utf-8";
+                if (result.isBinary && encoding !== "base64") {
+                    return JSON.stringify({
+                        error: "ARTIFACT_IS_BINARY",
+                        message: `Artifact '${params.filename}' is binary (${result.contentType}, ${result.sizeBytes} bytes) and cannot be returned as text.`,
+                        hint: "Use toFile to materialize it on the worker filesystem, or encoding='base64' if it is small enough to inspect inline.",
+                        contentType: result.contentType,
+                        sizeBytes: result.sizeBytes,
+                    });
+                }
+                const maxBytes = Math.min(Math.max(1, Math.floor(params.maxBytes ?? INLINE_READ_DEFAULT_BYTES)), INLINE_READ_MAX_BYTES);
+                const offset = Math.max(0, Math.floor(params.offset ?? 0));
+                const slice = result.body.subarray(offset, offset + maxBytes);
+                const truncated = offset > 0 || offset + slice.length < result.body.length;
+                const { body: _body, ...metadata } = result;
                 return JSON.stringify({
                     success: true,
                     sessionId: params.sessionId,
-                    filename: params.filename,
-                    content,
-                    sizeBytes: content.length,
+                    ...metadata,
+                    sha256: metadata.sha256 || crypto.createHash("sha256").update(result.body).digest("hex"),
+                    content: slice.toString(encoding === "base64" ? "base64" : "utf8"),
+                    truncated,
+                    ...(truncated ? { range: { offset, length: slice.length } } : {}),
+                    artifactLink: artifactLink(params.sessionId, metadata.filename),
                 });
             }
             catch (err) {
-                if (err?.code === "ARTIFACT_IS_BINARY") {
-                    return JSON.stringify({
-                        error: "ARTIFACT_IS_BINARY",
-                        contentType: err.contentType,
-                        sizeBytes: err.sizeBytes,
-                    });
-                }
-                return JSON.stringify({ error: err.message });
+                return toolError(err?.code || "ARTIFACT_READ_FAILED", err.message);
             }
         },
     });
     // ── list_artifacts ─────────────────────────────────────────
     const listTool = defineTool("list_artifacts", {
-        description: "List all artifact files in a session's storage folder. " +
-            "Returns filenames that can be read with `read_artifact`.",
+        description: "List all artifact files in a session's storage folder, with full metadata " +
+            "(sizeBytes, contentType, sha256, pinned). Returns filenames that can be read " +
+            "with `read_artifact`.",
         parameters: {
             type: "object",
             properties: {
@@ -141,7 +336,7 @@ export function createArtifactTools(opts) {
         handler: async (params, context) => {
             const targetId = params.sessionId || context?.durableSessionId;
             if (!targetId) {
-                return JSON.stringify({ error: "No session ID provided or available from context." });
+                return toolError("NO_SESSION_CONTEXT", "No session ID provided or available from context.");
             }
             try {
                 const files = await blobStore.listArtifacts(targetId);
@@ -154,53 +349,10 @@ export function createArtifactTools(opts) {
                 });
             }
             catch (err) {
-                return JSON.stringify({ error: err.message });
-            }
-        },
-    });
-    // ── export_artifact ────────────────────────────────────────
-    const exportTool = defineTool("export_artifact", {
-        description: "Make a file available for the TUI user to download. " +
-            "Returns an artifact:// link that the TUI renders as a clickable download. " +
-            "You MUST include the returned artifact:// link in your response text " +
-            "so the user can see and download it.\n\n" +
-            "You must have written the file with `write_artifact` first.",
-        parameters: {
-            type: "object",
-            properties: {
-                filename: {
-                    type: "string",
-                    description: "The filename to export, e.g. 'report.md'.",
-                },
-            },
-            required: ["filename"],
-        },
-        handler: async (params, context) => {
-            const sessionId = context?.durableSessionId;
-            if (!sessionId) {
-                return JSON.stringify({ error: "No session context — cannot determine artifact path." });
-            }
-            try {
-                // Verify the file exists
-                const exists = await blobStore.artifactExists(sessionId, params.filename);
-                if (!exists) {
-                    return JSON.stringify({
-                        error: `Artifact '${params.filename}' not found. Write it first with write_artifact.`,
-                    });
-                }
-                const artifactUri = `artifact://${sessionId}/${params.filename}`;
-                return JSON.stringify({
-                    success: true,
-                    filename: params.filename,
-                    artifactLink: artifactUri,
-                    message: "Include the artifactLink in your response. The TUI will render it as a downloadable link.",
-                });
-            }
-            catch (err) {
-                return JSON.stringify({ error: err.message });
+                return toolError(err?.code || "ARTIFACT_LIST_FAILED", err.message);
             }
         },
     });
-    return [writeTool, readTool, listTool, exportTool];
+    return [writeTool, readTool, listTool];
 }
 //# sourceMappingURL=artifact-tools.js.map