thinyai 0.1.4 → 0.1.6

package/dist/bin.js

@@ -8,10 +8,10 @@ import { fileURLToPath as fileURLToPath2 } from "url";
 import { createInterface } from "readline/promises";
 import { clearLine, cursorTo, emitKeypressEvents } from "readline";
 import { stdin, stdout } from "process";
-import { mkdirSync as mkdirSync2 } from "fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 
 // ../../packages/core/src/domain/messages.ts
 var systemMessage = (content) => ({ role: "system", content });
@@ -1440,14 +1440,14 @@ function suiPlugin(opts) {
   });
   const executePtb = defineTool({
     name: "sui_execute_ptb",
-    description: "Sign and submit an unsigned Sui programmable transaction (PTB) that a builder/MCP produced. Re-simulates the PTB, applies the soft policy and approval gate, then signs + submits. Pass the builder's `unsignedPtb` (base64 of the serialized transaction) \u2014 built with NO sender and NO gas (the signer fills both). On-chain caps may still abort it.",
+    description: "Sign and submit an unsigned Sui programmable transaction (PTB) produced by an external builder/MCP (e.g. Rill). Re-simulates \u2192 soft policy \u2192 approval gate \u2192 sign + submit. Pass the builder's `unsignedTx`: the JSON string from `Transaction.toJSON()`, built with NO sender and NO gas (the signer fills both). On-chain caps may still abort it. For your OWN transfers/calls use sui_transfer / sui_move_call instead.",
     sensitive: true,
     parameters: z4.object({
-      unsignedPtb: z4.string().min(1).describe("The builder's unsigned PTB \u2014 base64 of a serialized Sui transaction.")
+      unsignedTx: z4.string().min(1).describe("Unsigned PTB \u2014 the JSON string from Transaction.toJSON() (no sender, no gas).")
     }),
-    execute: async ({ unsignedPtb }) => {
-      const tx = Transaction2.from(Buffer.from(unsignedPtb, "base64").toString("utf8"));
-      return await executeTx(tx, "sui_execute_ptb", { unsignedPtb }, "sign and submit a Sui PTB");
+    execute: async ({ unsignedTx }) => {
+      const tx = Transaction2.from(unsignedTx);
+      return await executeTx(tx, "sui_execute_ptb", { unsignedTx }, "sign and submit a Sui PTB");
     }
   });
   const transfer = defineTool({
@@ -1608,6 +1608,61 @@ async function mcpHttpPlugin(opts) {
   return buildMcpPlugin(transport, opts.name ?? "mcp");
 }
 
+// ../../packages/plugins/web-search/src/index.ts
+import { z as z6 } from "zod";
+function describeHttpError(status) {
+  if (status === 401) return "Authentication failed \u2014 verify your BRAVE_API_KEY is correct.";
+  if (status === 403) return "Access forbidden \u2014 check your API subscription level.";
+  if (status === 422) return "Invalid query \u2014 the search request was malformed.";
+  if (status === 429) return "Rate limit exceeded \u2014 slow down requests or upgrade your plan.";
+  if (status >= 500) return "Brave Search server error \u2014 try again later.";
+  return `Unexpected error \u2014 see Brave Search API docs for HTTP ${String(status)}.`;
+}
+function webSearchPlugin(opts) {
+  if (!opts.apiKey.trim()) {
+    throw new Error(
+      "webSearchPlugin: apiKey is required. Obtain a key at https://brave.com/search/api/ and set BRAVE_API_KEY in .env."
+    );
+  }
+  const endpoint = opts.endpoint ?? "https://api.search.brave.com/res/v1/web/search";
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  return {
+    name: "web-search",
+    tools: [
+      defineTool({
+        name: "web_search",
+        description: "Search the public web and return the top results (title, url, snippet). Use when asked about current events, recent facts, or any topic you are not certain about.",
+        parameters: z6.object({
+          query: z6.string().min(1).describe("The search query."),
+          count: z6.number().int().min(1).max(10).default(5).describe("Number of results to return (1\u201310).")
+        }),
+        execute: async ({ query, count }) => {
+          const url = `${endpoint}?q=${encodeURIComponent(query)}&count=${String(count)}`;
+          const response = await fetchImpl(url, {
+            headers: {
+              Accept: "application/json",
+              "X-Subscription-Token": opts.apiKey
+            }
+          });
+          if (!response.ok) {
+            throw new Error(
+              `web_search failed: HTTP ${String(response.status)} \u2014 ${describeHttpError(response.status)}`
+            );
+          }
+          const data = await response.json();
+          return {
+            results: (data.web?.results ?? []).map((result) => ({
+              title: result.title,
+              url: result.url,
+              snippet: result.description
+            }))
+          };
+        }
+      })
+    ]
+  };
+}
+
 // ../../packages/skills/src/catalog.ts
 var BUILTIN_SKILLS = [
   {
@@ -2228,7 +2283,7 @@ function captureStats(base, turn) {
 var echoTool = defineTool({
   name: "echo",
   description: "Echo text back verbatim. Use when asked to repeat or echo something.",
-  parameters: z6.object({ text: z6.string().describe("the text to echo") }),
+  parameters: z7.object({ text: z7.string().describe("the text to echo") }),
   execute: ({ text: text2 }) => Promise.resolve({ echoed: text2 })
 });
 function parseSkillArgs() {
@@ -2238,6 +2293,28 @@ function parseSkillArgs() {
   return (args[idx + 1] ?? "").split(",").map((s) => s.trim()).filter(Boolean);
 }
 var currentSessionId = `cli-${(/* @__PURE__ */ new Date()).getTime().toString()}`;
+function isNewerVersion(latest, current) {
+  const a = latest.split(".").map((n) => Number(n) || 0);
+  const b = current.split(".").map((n) => Number(n) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((a[i] ?? 0) !== (b[i] ?? 0)) return (a[i] ?? 0) > (b[i] ?? 0);
+  }
+  return false;
+}
+function notifyIfUpdate(thinyDir) {
+  const cur = version();
+  const cacheFile = join2(thinyDir, "update-check.json");
+  try {
+    const cached = JSON.parse(readFileSync3(cacheFile, "utf8"));
+    if (cached.latest && isNewerVersion(cached.latest, cur)) {
+      renderInfo(`Update available: ${cur} \u2192 ${cached.latest} \u2014 run \`thiny update\``);
+    }
+  } catch {
+  }
+  void fetch("https://registry.npmjs.org/thinyai/latest").then((r) => r.json()).then((j) => {
+    if (j.version) writeFileSync2(cacheFile, JSON.stringify({ latest: j.version, at: Date.now() }));
+  }).catch(() => void 0);
+}
 async function runCli() {
   const thinyDir = join2(homedir2(), ".thiny");
   mkdirSync2(thinyDir, { recursive: true });
@@ -2305,11 +2382,11 @@ async function runCli() {
     name: "sui_setup",
     description: "Set up or change the agent's Sui wallet so it can read balances and sign transactions. Use when the user asks to enable Sui, create/import a wallet, or switch network. Modes: generate (new local key), import (a suiprivkey\u2026), rill (use a Rill MCP signer URL). Takes effect immediately; Rill's builder tools connect on the next start. Always remind the user to fund the returned address.",
     sensitive: true,
-    parameters: z6.object({
-      network: z6.enum(["testnet", "mainnet"]).default("testnet"),
-      wallet: z6.enum(["generate", "import", "rill"]).describe("generate a new key, import a suiprivkey\u2026, or use a Rill MCP signer"),
-      secretKey: z6.string().optional().describe("suiprivkey\u2026 \u2014 required when wallet=import"),
-      rillMcpUrl: z6.string().optional().describe("Rill MCP URL \u2014 used when wallet=rill")
+    parameters: z7.object({
+      network: z7.enum(["testnet", "mainnet"]).default("testnet"),
+      wallet: z7.enum(["generate", "import", "rill"]).describe("generate a new key, import a suiprivkey\u2026, or use a Rill MCP signer"),
+      secretKey: z7.string().optional().describe("suiprivkey\u2026 \u2014 required when wallet=import"),
+      rillMcpUrl: z7.string().optional().describe("Rill MCP URL \u2014 used when wallet=rill")
     }),
     execute: async ({ network: net, wallet, secretKey, rillMcpUrl }) => {
       const network2 = net === "mainnet" ? "mainnet" : "testnet";
@@ -2344,13 +2421,37 @@ async function runCli() {
       };
     }
   });
+  const fetchUrlTool = defineTool({
+    name: "fetch_url",
+    description: "Fetch the contents of an http(s) URL (markdown, text, JSON, HTML). ALWAYS use this when the user shares a link \u2014 e.g. a skill.md, docs page, or an API/MCP endpoint \u2014 instead of saying you can't open URLs. Returns the response text (truncated if very large).",
+    parameters: z7.object({
+      url: z7.string().url().describe("The http(s) URL to fetch."),
+      maxChars: z7.number().int().positive().optional().describe("Max characters of body to return (default 20000).")
+    }),
+    execute: async ({ url, maxChars }) => {
+      const limit = maxChars ?? 2e4;
+      const res = await fetch(url, {
+        headers: { "user-agent": "thiny-cli", accept: "*/*" },
+        signal: AbortSignal.timeout(15e3)
+      });
+      const body = await res.text();
+      return {
+        url,
+        status: res.status,
+        contentType: res.headers.get("content-type") ?? "",
+        truncated: body.length > limit,
+        content: body.slice(0, limit)
+      };
+    }
+  });
+  const webPlugins = process.env.BRAVE_API_KEY ? [webSearchPlugin({ apiKey: process.env.BRAVE_API_KEY })] : [];
   const budget = budgetMiddleware({ maxCalls: 50, logger });
   const agent = await createAgent({
     model,
     logger: agentLogger,
     persona,
-    systemPrompt: "You are a helpful AI assistant. Use tools when they help you answer better. Be concise.\n\nMEMORY: You have persistent long-term memory across sessions, stored on Walrus. What you already know about the user is injected automatically at the start of each conversation under \u201C[User Memory \u2026]\u201D. When the user shares anything durable about themselves \u2014 their name, role, preferences, projects, or goals, even casually \u2014 immediately call remember_fact to save it. If asked what you remember, answer from the injected user memory (or call recall_memory). You DO remember across sessions \u2014 never say you lack memory or that each session starts fresh.\n\nFor multi-step work, call update_plan to track steps and delegate_task to hand focused sub-problems to a sub-agent.\n\nSUI: You can operate on the Sui blockchain. " + (suiSignerRef ? `A wallet is configured on ${suiNetwork} at ${suiSignerRef.address ?? "(unknown)"}. ` : "No wallet is set up yet \u2014 when the user wants Sui, call sui_setup (generate / import / rill) to create or connect one, then tell them to fund the returned address. ") + "Use sui_balance to read balances and sui_object to inspect objects. To SEND a transaction you need an UNSIGNED PTB built by a builder (e.g. a connected Rill MCP tool); pass it to sui_execute_ptb, which simulates, applies caps, and signs. Never claim you cannot use Sui \u2014 you can.",
-    tools: [echoTool, suiSetupTool],
+    systemPrompt: "You are a helpful AI assistant. Use tools when they help you answer better. Be concise.\n\nMEMORY: You have persistent long-term memory across sessions, stored on Walrus. What you already know about the user is injected automatically at the start of each conversation under \u201C[User Memory \u2026]\u201D. When the user shares anything durable about themselves \u2014 their name, role, preferences, projects, or goals, even casually \u2014 immediately call remember_fact to save it. If asked what you remember, answer from the injected user memory (or call recall_memory). You DO remember across sessions \u2014 never say you lack memory or that each session starts fresh.\n\nFor multi-step work, call update_plan to track steps and delegate_task to hand focused sub-problems to a sub-agent.\n\nLINKS: When the user shares any URL (a skill.md, docs, an API or MCP endpoint, etc.), call fetch_url to read it \u2014 never say you can't open links" + (webPlugins.length > 0 ? ". Use web_search to look things up on the web.\n\n" : ".\n\n") + "SUI: You can operate on the Sui blockchain directly with your own tools \u2014 do NOT tell the user to install a browser wallet extension. " + (suiSignerRef ? `A wallet IS configured on ${suiNetwork} at ${suiSignerRef.address ?? "(unknown)"}. ` : "No wallet is set up yet \u2014 when the user wants Sui, call sui_setup (generate / import / rill) to create or connect one, then tell them to fund the returned address. ") + "Your Sui tools: sui_setup (create/import a wallet), sui_balance and sui_object (read), sui_transfer (send SUI or any coin to an address \u2014 amounts in MIST, 1 SUI = 1e9), sui_move_call (call ANY Move function on any package \u2014 the general way to run any on-chain action), and sui_execute_ptb (sign a PTB an external builder/Rill produced). Prefer sui_transfer for sends and sui_move_call for contract calls. Always confirm details and remind the user to fund the wallet. Never claim you cannot transact on Sui \u2014 you can, via these tools.",
+    tools: [echoTool, suiSetupTool, fetchUrlTool],
     plugins: [
       {
         name: "observability",
@@ -2363,6 +2464,8 @@ async function runCli() {
       // always present; tools guide setup if no wallet
       ...suiPlugins,
       // Rill MCP builder tools (if connected)
+      ...webPlugins,
+      // web_search when BRAVE_API_KEY is set
       ...skillPlugins
     ]
   });
@@ -2408,6 +2511,7 @@ async function runCli() {
       `Sui: ${suiNetwork} \xB7 ${suiSignerRef.address ?? "?"}${process.env.MCP_URL ? " \xB7 Rill MCP connected" : ""}`
     );
   else renderInfo("Sui: no wallet \u2014 ask the agent to set one up, or run `thiny sui init`");
+  notifyIfUpdate(thinyDir);
   const rl = createInterface({ input: stdin, output: stdout });
   emitKeypressEvents(stdin);
   const spinner = new Spinner();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thinyai",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Thiny AI — a beautiful terminal agent: interactive chat, tools, Walrus memory, and Sui execution.",
   "type": "module",
   "license": "MIT",
@@ -37,16 +37,17 @@
   "devDependencies": {
     "tsup": "^8.5.1",
     "typescript": "^5.5.0",
+    "@thiny/memory-memwal": "0.1.0",
+    "@thiny/walrus": "0.1.0",
+    "@thiny/plugin-agents": "0.1.0",
     "@thiny/core": "0.1.0",
     "@thiny/model-aisdk": "0.1.0",
-    "@thiny/walrus": "0.1.0",
     "@thiny/logger-pino": "0.1.0",
-    "@thiny/memory-memwal": "0.1.0",
-    "@thiny/skills": "0.1.0",
-    "@thiny/plugin-agents": "0.1.0",
+    "@thiny/mcp": "0.1.0",
     "@thiny/signer-sui": "0.1.0",
+    "@thiny/plugin-web-search": "0.1.0",
     "@thiny/plugin-sui": "0.1.0",
-    "@thiny/mcp": "0.1.0"
+    "@thiny/skills": "0.1.0"
   },
   "author": "Thiny AI",
   "engines": {