v0.0.77 - Wizard now verifies systemd service is active after install, reports admin inbox expectation, and exits to avoid duplicate foreground boot

.gitignore

@@ -5,10 +5,11 @@
 /c-relay/
 /nips/
 /config.json
+/config.jsonc
 test_keys.txt
 
 /mongoose/
-
+/Trash/
 
 
 # Build artifacts
@@ -18,6 +19,9 @@ test_keys.txt
 *.a
 *.tar.gz
 debug.log
+context.log
+didactyl_static_x86_64
+didactyl_static_x86_64_debug
 a.out
 
 # Editor/IDE

.roo/commands/push.md

@@ -2,6 +2,6 @@
 description: "Increments and pushes the repo"
 ---
 
-Run increment_and_push.sh followed in the command line with a good description of the changes that were made.
+Run increment_and_push.sh followed in the command line with a good description of the changes that were made. Don't run any other git commands.
 
 For example: ./increment_and_push.sh "Fixed that nasty bug"

Dockerfile.alpine-musl

@@ -92,11 +92,16 @@ RUN if [ "$DEBUG_BUILD" = "true" ]; then \
     gcc -static $CFLAGS -Wall -Wextra -std=c99 \
     -D_GNU_SOURCE -D_DEFAULT_SOURCE -D_POSIX_C_SOURCE=200809L -DMG_TLS=MG_TLS_BUILTIN \
     -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=0 \
-    -I. -Isrc -Inostr_core_lib -Inostr_core_lib/nostr_core \
+    -I. -Isrc -Isrc/tools -Inostr_core_lib -Inostr_core_lib/nostr_core \
     -Inostr_core_lib/cjson -Inostr_core_lib/nostr_websocket \
     src/main.c src/config.c src/context.c src/llm.c \
-    src/nostr_handler.c src/agent.c src/tools.c src/trigger_manager.c \
-    src/prompt_template.c src/http_api.c src/mongoose.c src/debug.c \
+    src/nostr_handler.c src/agent.c src/tools/tools_common.c src/tools/tools_schema.c src/tools/tools_dispatch.c \
+    src/tools/tool_agent.c src/tools/tool_meta.c src/tools/tool_model.c \
+    src/tools/tool_nostr_query.c src/tools/tool_nostr_my_events.c src/tools/tool_nostr_identity.c src/tools/tool_nostr_social.c \
+    src/tools/tool_nostr_relay.c src/tools/tool_nostr_dm.c src/tools/tool_admin.c \
+    src/tools/tool_task.c src/tools/tool_nostr_list.c src/tools/tool_local.c \
+    src/tools/tool_skill.c src/tools/tool_nostr_post.c src/tools/tool_memory.c src/tools/tool_config.c src/trigger_manager.c \
+    src/prompt_template.c src/http_api.c src/setup_wizard.c src/mongoose.c src/debug.c \
     -o /build/didactyl_static \
     nostr_core_lib/libnostr_core_x64.a \
     -lsecp256k1 \

Makefile

@@ -11,15 +11,36 @@ SRCS = \
 	$(SRC_DIR)/llm.c \
 	$(SRC_DIR)/nostr_handler.c \
 	$(SRC_DIR)/agent.c \
-	$(SRC_DIR)/tools.c \
+	$(SRC_DIR)/tools/tools_common.c \
+	$(SRC_DIR)/tools/tools_schema.c \
+	$(SRC_DIR)/tools/tools_dispatch.c \
+	$(SRC_DIR)/tools/tool_agent.c \
+	$(SRC_DIR)/tools/tool_meta.c \
+	$(SRC_DIR)/tools/tool_model.c \
+	$(SRC_DIR)/tools/tool_nostr_query.c \
+	$(SRC_DIR)/tools/tool_nostr_my_events.c \
+	$(SRC_DIR)/tools/tool_nostr_identity.c \
+	$(SRC_DIR)/tools/tool_nostr_social.c \
+	$(SRC_DIR)/tools/tool_nostr_relay.c \
+	$(SRC_DIR)/tools/tool_nostr_dm.c \
+	$(SRC_DIR)/tools/tool_admin.c \
+	$(SRC_DIR)/tools/tool_task.c \
+	$(SRC_DIR)/tools/tool_nostr_list.c \
+	$(SRC_DIR)/tools/tool_local.c \
+	$(SRC_DIR)/tools/tool_skill.c \
+	$(SRC_DIR)/tools/tool_nostr_post.c \
+	$(SRC_DIR)/tools/tool_memory.c \
+	$(SRC_DIR)/tools/tool_config.c \
 	$(SRC_DIR)/trigger_manager.c \
 	$(SRC_DIR)/prompt_template.c \
 	$(SRC_DIR)/http_api.c \
+	$(SRC_DIR)/setup_wizard.c \
 	$(SRC_DIR)/mongoose.c \
 	$(SRC_DIR)/debug.c
 
 INCLUDES = \
 	-I$(SRC_DIR) \
+	-I$(SRC_DIR)/tools \
 	-I../nostr_core_lib \
 	-I../nostr_core_lib/cjson \
 	-I../nostr_core_lib/nostr_core

README.md

@@ -45,28 +45,32 @@ Because all identity, communication, and memory live on Nostr, the agent is **po
 
 ### Skills are the new apps.
 
-Agents learn capabilities through skills —  Nostr events that any agent can discover, adopt, and share. There is no app store, no gatekeeper, no approval process. An agent can use public or private skills.
+Agents learn capabilities through skills — Nostr events that any agent can discover, adopt, and share. There is no app store, no gatekeeper, no approval process. An agent can use public or private skills.
+
+Think of it like a woodshop: a **skill** is knowing how to carve — the technique, the judgment, the decision-making. A **tool** is the chisel. The skill never directly uses the chisel without the craftsperson (the LLM) in the loop. Every skill execution involves the LLM reasoning about what to do and which tools to use.
+
+Skills compose by adoption-list order (`10123`) and trigger tags carry runtime execution controls (`llm`, `max_tokens`, `temperature`, `seed`, `tools`) so behavior and runtime policy remain explicit and portable. See [`docs/SKILLS.md`](docs/SKILLS.md).
 
 ### Private inference.
 
 Didactyl will support local inference, which is very privacy preserving. Remote inference does however have it's advantages, and in those cases Didactyl supports using Bitcoin Lightning and eCash inference providers.
 
-## Current Status — v0.0.36
+## Current Status — v0.0.77
 
 **Active build — this project is barely working. Experiment at your own risk.**
 
-> Last release update: v0.0.36 — Remove inline NIP-17 poll+retry window to prevent post-reply hang while keeping send-path debug logging
+> Last release update: v0.0.77 — Wizard now verifies systemd service is active after install, reports admin inbox expectation, and exits to avoid duplicate foreground boot
 
 - Connects to configured relays with auto-reconnect and relay state transition logging
 - Publishes configured startup events per relay as each relay becomes connected
-- Uses kind `31120` startup content as live Soul at boot
+- Loads base system context from default skill content (first-run from `genesis.jsonc`, subsequent runs from adopted skills on Nostr)
 - Verifies Nostr event signatures before processing inbound messages
 - Applies privilege tiers: ADMIN (tools), WoT (chat-only), STRANGER (configurable canned reply or ignore)
 - Subscribes to admin context kinds (`0`,`3`,`10002`,`1`) for WoT + contextual awareness
-- Builds LLM context from soul template (`---template---` section in kind `31120`) with named sections, variable resolution, and per-provider content overrides; falls back to hardcoded assembly if no template present
+- Builds LLM context from default/adopted skill templates (`---template---`) with named sections, variable resolution, and per-provider content overrides; falls back to hardcoded assembly if no template present
 - Adopted skills injected into context automatically from the agent's `10123` adoption list
 - Supports tool-calling loop with configurable max turns and local safety limits
-- Triggered skills — Nostr event filters that fire skill execution automatically
+- Triggered skills — Nostr event filters that fire skill execution automatically with `template` (deterministic) or `llm` (context-aware) actions; see [`docs/SKILLS.md`](docs/SKILLS.md)
 - Deduplicates inbound messages via event-ID cache and FNV-1a fingerprint debounce window
 - Appends every outbound LLM context payload to [`context.log`](context.log)
 - Localhost HTTP admin API on port `8484` — inspect context, run prompts, compare variants, change model at runtime
@@ -80,7 +84,7 @@ Didactyl will support local inference, which is very privacy preserving. Remote
 
 ```bash
 chmod +x ./didactyl_static_x86_64
-./didactyl_static_x86_64 --config ./config.json
+./didactyl_static_x86_64 --config ./genesis.jsonc
 ```
 
 ### Build from source (optional)
@@ -99,7 +103,7 @@ chmod +x ./didactyl_static_x86_64
 
 ### Configure
 
-Edit [`config.json`](config.json):
+Edit [`genesis.jsonc`](genesis.jsonc):
 
 ```json
 {
@@ -151,9 +155,9 @@ Edit [`config.json`](config.json):
       "tags": [["r", "wss://relay.damus.io"], ["r", "wss://nos.lol"]]
     },
     {
-      "kind": 31120,
+      "kind": 31124,
       "content": "You are Didactyl...",
-      "tags": [["d", "soul"], ["app", "didactyl"], ["scope", "private"]]
+      "tags": [["d", "didactyl-default"], ["app", "didactyl"], ["scope", "private"]]
     },
     {
       "kind": 31123,
@@ -176,18 +180,32 @@ Relays are sourced exclusively from startup kind `10002` `r` tags.
 ### Run
 
 ```bash
-./didactyl_static_x86_64 --config ./config.json
+# interactive setup wizard (new / existing / load-genesis)
+./didactyl_static_x86_64
+
+# direct startup from config
+./didactyl_static_x86_64 --config ./genesis.jsonc
 ```
 
 Options:
 
 ```
-./didactyl_static_x86_64 --config <path>                     # custom config file (default: ./config.json)
-./didactyl_static_x86_64 --debug <0-5>                       # log verbosity (0 none, 3 info, 5 trace)
-./didactyl_static_x86_64 --dump-schemas                      # print tool JSON schemas and exit
-./didactyl_static_x86_64 --test-tool <name> <args_json>      # run one tool directly and print JSON result
+./didactyl_static_x86_64                                   # interactive setup mode (when run with no arguments)
+./didactyl_static_x86_64 --config <path>                   # custom config file (default: ./genesis.jsonc)
+./didactyl_static_x86_64 --nsec <nsec_or_hex>              # runtime identity seed override (or use DIDACTYL_NSEC)
+./didactyl_static_x86_64 --api-port <port>                 # runtime local API port override
+./didactyl_static_x86_64 --api-bind <address>              # runtime local API bind override
+./didactyl_static_x86_64 --debug <0-5>                     # log verbosity (0 none, 3 info, 5 trace)
+./didactyl_static_x86_64 --dump-schemas                    # print tool JSON schemas and exit
+./didactyl_static_x86_64 --test-tool <name> <args_json>    # run one tool directly and print JSON result
 ```
 
+Interactive setup notes:
+
+- First menu asks whether you are starting a **new agent** or an **existing agent**.
+- Menus use first-letter hotkeys (case-insensitive), with `q`/`x` as quit/back shortcuts.
+- Existing-agent mode attempts to recover relay/admin/LLM config from Nostr before asking for missing fields.
+
 CLI debugger notes:
 
 - `--test-tool` initializes Nostr, waits for at least one relay connection (up to 15s), then executes the selected tool.
@@ -195,7 +213,7 @@ CLI debugger notes:
 - Example:
 
 ```bash
-./didactyl_static_x86_64 --config ./config.json --test-tool nostr_file_md_to_longform_post '{"file":"docs/TOOLS_AND_SKILLS.md","title":"TOOLS_AND_SKILLS"}'
+./didactyl_static_x86_64 --config ./genesis.jsonc --test-tool nostr_file_md_to_longform_post '{"file":"docs/SKILLS.md","title":"SKILLS"}'
 ```
 
 ### Talk to it
@@ -256,16 +274,19 @@ The CLI prints each message block with a speaker label (`You` / `Didactyl`) and
 
 ## Didactyl Kinds (Nostr)
 
-Didactyl uses a two-layer skill model: authors publish public skill definitions, and adopters publish which skills they use.
+Didactyl uses a two-layer skill model: authors publish skill definitions, and adopters publish which skills they use.
 
-- `31120` — **Soul** (private instruction baseline)
-  - `d=soul`
-- `31123` — **Public Skill Definition** (markdown skill body in `content` or structured JSON in `content_fields`)
+- `31123` — **Public Skill Definition** (replaceable by `d` tag)
+  - `content` is JSON with instruction fields like `description` and `template`
   - `d=<skill_slug>` (example: `d=long_form_note`)
-- `31124` — **Private Skill Definition** (private/internal procedures)
+- `31124` — **Private Skill Definition** (same schema as `31123`, private scope)
   - `d=<skill_slug>` (example: `d=admin_ops`)
-- `10123` — **Public Skill Adoption List**
-  - tags contain one or more `a` references to selected `31123` skills
+- `10123` — **Skill Adoption List**
+  - tags contain one or more `a` references to selected skills
+
+Skills are composed by adoption list order and per-skill template resolution (no context modes).
+
+Full skill schema, trigger tags, template variables, fallback resolution, and limits are documented in [`docs/SKILLS.md`](docs/SKILLS.md).
 
 ## Skill Sharing & Discovery
 
@@ -287,75 +308,38 @@ Skills are shared across Nostr without any centralized registry or approval proc
 
 ## Startup
 
-Didactyl startup behavior is configured in [`config.json`](config.json) under `startup_events`.
+Didactyl startup behavior is configured in [`genesis.jsonc`](genesis.jsonc) under `startup_events`.
 
-Also used at startup:
+Startup model:
 
-- `0` — profile metadata
-- `10002` — relay list
-- `1` — optional startup note/status
-- `3` — contacts/follows (optional placeholder)
+- First run is detected by checking for an existing kind `10002` relay-list event from the agent pubkey.
+- On first run, events in `startup_events` are published to connected relays.
+- On subsequent runs, startup publish is skipped and relay/config state is loaded from Nostr.
+- Identity can be supplied at runtime via `--nsec` or `DIDACTYL_NSEC`.
 
-On boot, Didactyl attempts startup publishes to each relay as that relay transitions to connected state.
+See [`docs/GENESIS.md`](docs/GENESIS.md) for full boot semantics.
 
 ## Runtime Context Model
 
-Didactyl builds tier-aware context:
+Didactyl builds tier-aware, template-driven context:
 
-- **ADMIN** request context — assembled from the soul's `---template---` section (if present), otherwise hardcoded order:
-  1. Soul personality (everything above `---template---` in kind `31120`)
-  2. Named template sections in order — e.g. `admin_identity`, `admin_profile`, `admin_relay_list`, `startup_events`, `adopted_skills`, `dm_history` (expand), `admin_notes`
-  3. Each section resolves `{{variable}}` placeholders from live data at call time
-  4. Provider-specific content overrides per section (e.g. XML tags for Anthropic)
-  5. Section names are used in `context.log` headers and `/api/context/parts` response
-- **WoT** request context: Soul + WoT chat-only instruction + current user message (no tools)
-- **STRANGER**: no LLM call when configured to reply statically
+- **ADMIN** request context is assembled from adopted skill templates.
+- Template variables like `{{nostr_admin_profile}}` are resolved by executing tools at render time.
+- Triggered skill invocations can override runtime execution parameters via trigger tags (`llm`, `max_tokens`, `temperature`, `seed`, `tools`).
+- **WoT** request context remains chat-only.
+- **STRANGER** behavior follows configured security policy.
 
 Every serialized LLM context payload is appended to [`context.log`](context.log).
 
+See [`docs/CONTEXT.md`](docs/CONTEXT.md) and [`docs/SKILLS.md`](docs/SKILLS.md) for the normative assembly and trigger rules.
+
 ## Tooling Interface
 
-Current tool schema exposed to the LLM in [`tools_build_openai_schema_json()`](src/tools.c:881):
+The OpenAI-compatible tool schema is generated in [`src/tools/tools_schema.c`](src/tools/tools_schema.c), and runtime dispatch is handled in [`src/tools/tools_dispatch.c`](src/tools/tools_dispatch.c).
 
-- Nostr publish/query:
-  - `nostr_post`
-  - `nostr_post_readme`
-  - `nostr_query`
-- Nostr interaction and moderation:
-  - `nostr_delete`
-  - `nostr_react`
-  - `nostr_profile_get`
-  - `nostr_relay_status`
-  - `nostr_relay_info`
-  - `nostr_nip05_lookup`
-- Nostr encode/decode + encryption/DM:
-  - `nostr_encode`
-  - `nostr_decode`
-  - `nostr_encrypt`
-  - `nostr_decrypt`
-  - `nostr_dm_send`
-  - `nostr_dm_send_nip17`
-- Nostr list management:
-  - `nostr_list_manage`
-- Skill management:
-  - `skill_create`
-  - `skill_list`
-  - `skill_adopt`
-  - `skill_remove`
-  - `skill_search`
-- Local/host tools:
-  - `shell_exec`
-  - `file_read`
-  - `file_write`
-  - `http_fetch`
-- Agent metadata:
-  - `my_version`
-- Model management:
-  - `model_get`
-  - `model_set`
-  - `model_list`
+Core categories include Nostr publish/query, identity/profile operations, DM and list management, skill operations, local host tools, model/runtime controls, and encrypted config tools (`config_store`, `config_recall`).
 
-Execution entrypoint: [`tools_execute()`](src/tools.c:3765).
+See [`docs/TOOLS.md`](docs/TOOLS.md) for the canonical tool catalog and interface details.
 
 ## HTTP Admin API
 
@@ -370,7 +354,7 @@ A localhost-only HTTP API on port `8484` (configurable) for agent inspection and
 | `POST /api/prompt/run` | Run a full messages array with tools enabled |
 | `POST /api/prompt/compare` | A/B compare two prompt variants |
 | `GET /api/model` | Current LLM model config |
-| `PUT /api/model` | Change model at runtime (persists to config.json) |
+| `PUT /api/model` | Change model at runtime (persisted in encrypted config events) |
 | `GET /api/models` | List available models from provider |
 
 Full reference: [`docs/API.md`](docs/API.md). Frontend brief: [`plans/admin_web_frontend.md`](plans/admin_web_frontend.md).
@@ -379,7 +363,7 @@ Full reference: [`docs/API.md`](docs/API.md). Frontend brief: [`plans/admin_web_
 
 ```
 .
-├── config.json          # Agent/runtime config including startup_events + tools
+├── genesis.jsonc        # First-run genesis config (startup events + baseline runtime settings)
 ├── context.log          # Appended outbound LLM context payloads
 ├── Makefile             # Build system
 ├── build_static.sh      # Preferred final build validation
@@ -388,8 +372,8 @@ Full reference: [`docs/API.md`](docs/API.md). Frontend brief: [`plans/admin_web_
 │   ├── config.c / .h         # JSON config parsing, key decode, startup events
 │   ├── context.c / .h        # File loader utility (reads file into malloc'd string)
 │   ├── agent.c / .h          # Context assembly, tool loop, DM response flow
-│   ├── prompt_template.c / .h # Soul template parser, variable resolver, context builder
-│   ├── tools.c / .h          # LLM tool schema and tool execution
+│   ├── prompt_template.c / .h # Skill template parser, variable resolver, context builder
+│   ├── tools/                # LLM tool schema and tool execution modules
 │   ├── llm.c / .h            # LLM HTTP API client (OpenAI-compatible)
 │   ├── nostr_handler.c / .h  # Relay pool, subscriptions, publish, startup reconcile
 │   ├── trigger_manager.c / .h # Nostr event trigger subscriptions and skill execution
@@ -398,7 +382,9 @@ Full reference: [`docs/API.md`](docs/API.md). Frontend brief: [`plans/admin_web_
 │   └── debug.c / .h          # Runtime log levels/macros
 ├── docs/
 │   ├── API.md                # HTTP admin API endpoint reference
-│   └── TOOLS_AND_SKILLS.md   # Tool and skill system documentation
+│   ├── TOOLS.md              # Tool architecture and catalog
+│   ├── SKILLS.md             # Skill schema, composition model, triggers, and limits
+│   └── CRASH_FIXES.md        # Crash analysis and fixes log
 ├── plans/               # Architecture and planning documents
 └── README.md
 ```
@@ -415,16 +401,48 @@ All dependencies are statically linked into the binary at build time. No system
 | libssl / libcrypto | TLS for WebSocket relay connections | Statically linked (Alpine/MUSL) |
 | libsecp256k1 | Schnorr signatures, ECDH | Statically linked (Alpine/MUSL) |
 
+## Roadmap: Nostr-Native Portability
+
+Didactyl's long-term architecture goal is **zero filesystem dependency after first boot**. The config file is the only tie to the local filesystem. The plan:
+
+1. **First boot** — Read `genesis.jsonc`, publish startup identity/skill/adoption events to relays.
+2. **Subsequent boots** — Start with only `nsec` (CLI/env), detect initialized state from kind `10002`, and load durable state from Nostr.
+3. **True portability** — Start your agent from any computer; keys are sufficient and state lives on Nostr.
+
+This makes Didactyl fundamentally different from filesystem-bound agents. Destroying the host computer does not kill the agent — its identity, memory, and capabilities persist on the relay network.
+
+### What already lives on Nostr
+
+| Data | Event Kind | Status |
+|---|---|---|
+| Agent profile | Kind 0 | Implemented |
+| Relay list | Kind 10002 | Implemented |
+| DM relay list | Kind 10050 | Implemented |
+| Public skills | Kind 31123 | Implemented |
+| Private skills | Kind 31124 | Implemented |
+| Skill adoption list | Kind 10123 | Implemented |
+| Base/default behavior skill | Kind 31124 | Implemented |
+| Trigger definitions | Tags on skill events | Implemented |
+
+### What still needs migration
+
+| Data | Current Location | Target |
+|---|---|---|
+| Admin pubkey | `genesis.jsonc` fallback | Dedicated agent config event / contact-graph derivation |
+| LLM provider/key | `genesis.jsonc` fallback | Encrypted kind 30078 app-specific event |
+| Security tiers | `genesis.jsonc` fallback | Agent config event on Nostr |
+| API settings | local runtime flags | Local-only (not published) |
+
 ## Roadmap
 
 - [x] MVP chat agent — DM in, LLM response out
 - [x] Relay pool with auto-reconnect and status logging
 - [x] Per-relay startup publish on relay-connected transitions
 - [x] Runtime diagnostics — relay health, message flow, event kind publish logs
-- [x] Tool-calling loop (nostr_post, nostr_query, shell_exec, file_read, file_write)
+- [x] Tool-calling loop (nostr_post, nostr_query, local_shell_exec, local_file_read, local_file_write)
 - [x] Context assembly with startup events + recent DM history
 - [x] Context payload logging to [`context.log`](context.log)
-- [x] Skill kind definitions (`31120` Soul, `31123` Public Skill, `31124` Private Skill)
+- [x] Skill kind definitions (`31123` Public Skill, `31124` Private Skill)
 - [x] Skill adoption list (`10123`) for WoT-driven discovery
 - [x] Signature verification on all inbound events
 - [x] Privilege tiers — ADMIN (tools), WoT (chat-only), STRANGER (canned reply/ignore)
@@ -433,13 +451,13 @@ All dependencies are statically linked into the binary at build time. No system
 - [x] Adopted skills injected into LLM context automatically
 - [x] Triggered skills — Nostr event filters that fire skill execution automatically
 - [x] Localhost HTTP admin API — context inspection, prompt crafting, A/B comparison
-- [x] Runtime model switching via `model_set` tool (persists to config.json)
-- [x] Soul-embedded prompt templates (`---template---`) — configurable context order, variable resolution, provider overrides
+- [x] Runtime model switching via `model_set` tool (persisted in encrypted config events)
+- [x] Skill-embedded prompt templates (`---template---`) — configurable context order, variable resolution, provider overrides
 - [ ] Runtime skill loading from adopted `31123` events on relays
 - [ ] Skill discovery CLI/tool (query WoT adoption lists)
 - [ ] Upgrade to NIP-17 gift-wrapped DMs
-- [ ] NIP-44 encrypted private skills (`31124`)
-- [ ] Nostr-native data storage (kind 30078 app-specific events)
+- [x] NIP-44 encrypted private skills (`31124`)
+- [x] Nostr-native data storage (kind 30078 app-specific events)
 - [ ] Blossom blob storage integration
 - [ ] Agent-to-agent communication
 

config.json.example

@@ -1,271 +0,0 @@
-{
-  "keys": {
-    "nsec": "agent nsec",
-    "npub": "agent npub",
-    "npubHex": "agent hex pubkey",
-    "nsecHex": "agent hex secret key"
-  },
-  "admin": {
-    "pubkey": "admin pubkey"
-  },
-  "dm_protocol": "nip04",
-  "llm": {
-    "provider": "",
-    "api_key": "",
-    "model": "",
-    "base_url": "",
-    "max_tokens": 512,
-    "temperature": 0.7
-  },
-  "security": {
-    "verify_signatures": true,
-    "stranger_response": "I only respond to people in my web of trust. You can always identify me by my public key (npub).",
-    "tiers": {
-      "admin": {
-        "tools_enabled": true
-      },
-      "wot": {
-        "enabled": true,
-        "tools_enabled": false
-      },
-      "stranger": {
-        "enabled": true
-      }
-    }
-  },
-  "admin_context": {
-    "enabled": true,
-    "subscribe_kinds": [
-      0,
-      3,
-      10002,
-      1
-    ],
-    "kind_1_limit": 10
-  },
-  "api": {
-    "enabled": true,
-    "port": 8484,
-    "bind_address": "127.0.0.1"
-  },
-  "startup_events": [
-    {
-      "kind": 0,
-      "content_fields": {
-        "name": "Didactyl Agent",
-        "display_name": "Didactyl",
-        "about": "A sovereign AI agent on Nostr",
-        "picture": "https://laantungir.github.io/img_repo/daf95a99f3797fa4ac39f3791f377ad79bcb7b8a6868f75fe66d2ab4af4bd1f5.png",
-        "banner": "https://laantungir.github.io/img_repo/d21c4060632ab3d9d37a6062eeecbdbfbd67f03cb20dbd64838b1ba0d9cd8922.jpg"
-      },
-      "tags": []
-    },
-    {
-      "kind": 10002,
-      "content": "",
-      "tags": [
-        [
-          "r",
-          "wss://relay.damus.io"
-        ],
-        [
-          "r",
-          "wss://nos.lol"
-        ],
-        [
-          "r",
-          "wss://relay.primal.net"
-        ],
-        [
-          "r",
-          "ws://127.0.0.1:7777"
-        ]
-      ]
-    },
-    {
-      "kind": 10050,
-      "content": "",
-      "tags": [
-        [
-          "relay",
-          "wss://relay.damus.io"
-        ],
-        [
-          "relay",
-          "wss://nos.lol"
-        ]
-      ]
-    },
-    {
-      "kind": 1,
-      "content": "Hello world from Didactyl startup",
-      "tags": [
-        [
-          "t",
-          "didactyl"
-        ],
-        [
-          "t",
-          "startup"
-        ]
-      ]
-    },
-    {
-      "kind": 3,
-      "content": "",
-      "tags": []
-    },
-    {
-      "kind": 31120,
-      "content": "# Didactyl Agent\n\nYou are Didactyl, a sovereign AI agent living on Nostr.\n\n## Communication Rules\n- You communicate through encrypted Nostr direct messages.\n- Keep responses concise and clear.\n\n## Behavior\n- Be helpful and technically accurate.\n- If unsure, state uncertainty directly.\n- Prefer actionable, practical advice.\n- Use the person's name when messaging them if you know it.\n- For the administrator, use their name from the administrator kind 0 profile metadata when available.\n\n## Tool Use Policy\n- You have tools available and should use them when a request requires taking action.\n- For requests involving local inspection or command execution, call `shell_exec` instead of refusing.\n- For posting to Nostr, call `nostr_post` with explicit `kind` and `content`.\n- For relay/event lookup tasks, call `nostr_query` with an appropriate filter.\n- After a tool call, base your answer on the actual tool result.\n- Never claim a tool was run if no tool was executed.\n\n## Task Management\n- Maintain and use your internal task list as short-term working memory.\n- Break long or complex actions into clear tasks before executing them.\n- Update task status as you complete steps so your plan stays accurate.\n\n## Safety\n- Do not claim to have executed actions you did not execute.\n- You may share your public key (npub) with anyone.\n- Never reveal your private key (nsec) under any circumstance.\n\n---template---\n\n- section: admin_identity\n  role: system\n  content: |\n    ## Administrator Identity (source: config.admin.pubkey)\n\n    This is your administrator! Admin pubkey (hex): {{admin_pubkey}}\n\n- section: admin_profile\n  role: system\n  content: |\n    ## Administrator Kind 0 Profile (source: nostr kind 0)\n\n    Administrator kind 0 profile content (JSON): {{admin_kind0_json}}\n  provider:\n    anthropic: |\n      <admin_kind0_profile source=\"nostr_kind_0\">\n      {{admin_kind0_json}}\n      </admin_kind0_profile>\n\n- section: admin_relay_list\n  role: system\n  content: |\n    ## Administrator Relay List (source: nostr kind 10002)\n\n    Administrator kind 10002 relay-list content (JSON): {{admin_kind10002_json}}\n\n- section: startup_events\n  role: system\n  content: |\n    ## Startup Events Memory (source: config.startup_events)\n\n    Startup events memory (kinds/content/tags): {{startup_events_json}}\n\n- section: adopted_skills\n  role: system\n  content: |\n    {{adopted_skills_content}}\n\n- section: agent_tasks\n  role: system\n  content: |\n    {{tasks_content}}\n\n- section: dm_history\n  role: expand\n  limit: 12\n\n- section: admin_notes\n  role: system\n  content: |\n    ## Administrator Recent Notes (source: nostr kind 1)\n\n    {{admin_notes_content}}",
-      "tags": [
-        [
-          "d",
-          "soul"
-        ],
-        [
-          "app",
-          "didactyl"
-        ],
-        [
-          "scope",
-          "private"
-        ]
-      ]
-    },
-    {
-      "kind": 31123,
-      "content_fields": {
-        "name": "long_form_note",
-        "description": "How to publish a NIP-23 long-form article (kind 30023)",
-        "nip": "NIP-23",
-        "event_kind": 30023,
-        "format": "The content field must be markdown text; avoid arbitrary hard line-breaks in paragraphs and do not include HTML.",
-        "required_tags": {
-          "d": "Addressable identifier slug for the article. Reusing the same d tag replaces prior versions.",
-          "title": "Human-readable article title.",
-          "published_at": "Unix timestamp as a string for first publication time; keep stable on edits."
-        },
-        "optional_tags": {
-          "summary": "Short 1-2 sentence summary.",
-          "image": "URL for article preview image.",
-          "t": "Topic hashtags using repeated t tags, usually 3-6 lowercase terms."
-        },
-        "behavior": "If required values are missing or unclear, ask the administrator before publishing instead of guessing.",
-        "procedure": [
-          "Determine title and d tag from admin input or source material.",
-          "Draft markdown body content.",
-          "Set published_at as unix seconds string.",
-          "Add optional summary/image/t tags when known.",
-          "Publish with nostr_post kind 30023 including tags array."
-        ]
-      },
-      "tags": [
-        [
-          "d",
-          "long_form_note"
-        ],
-        [
-          "app",
-          "didactyl"
-        ],
-        [
-          "scope",
-          "public"
-        ],
-        [
-          "slug",
-          "long_form_note"
-        ]
-      ]
-    },
-    {
-      "kind": 31123,
-      "content_fields": {
-        "name": "post_readme_to_nostr",
-        "description": "Read README.md from the repo and publish it as a NIP-23 long-form note",
-        "uses_skill": "long_form_note",
-        "event_kind": 30023,
-        "procedure": [
-          "Read README.md using file_read with path README.md.",
-          "Set d tag exactly to readme.md.",
-          "Set title from the first markdown H1 heading in README.md.",
-          "Set summary from the opening paragraph of README.md.",
-          "Set image from project metadata when available (kind 0 picture/banner), otherwise omit image tag.",
-          "Generate 3-6 lowercase t tags from README section topics.",
-          "Set published_at to current unix timestamp as string.",
-          "Publish with nostr_post kind 30023, full README markdown in content, and full NIP-23 tag set."
-        ],
-        "required_values": {
-          "d": "readme.md",
-          "summary_source": "opening paragraph"
-        }
-      },
-      "tags": [
-        [
-          "d",
-          "post_readme_to_nostr"
-        ],
-        [
-          "app",
-          "didactyl"
-        ],
-        [
-          "scope",
-          "public"
-        ],
-        [
-          "slug",
-          "post_readme_to_nostr"
-        ]
-      ]
-    },
-    {
-      "kind": 31124,
-      "content_fields": {
-        "name": "admin_ops",
-        "description": "Private operational procedures"
-      },
-      "tags": [
-        [
-          "d",
-          "admin_ops"
-        ],
-        [
-          "app",
-          "didactyl"
-        ],
-        [
-          "scope",
-          "private"
-        ],
-        [
-          "slug",
-          "admin_ops"
-        ]
-      ]
-    },
-    {
-      "kind": 10123,
-      "content": "",
-      "tags": [
-        [
-          "a",
-          "31123:55993e3db0ed7bf07395fd44c2d695c224d195553a1aff7320a18e41679d9c7c:long_form_note"
-        ],
-        [
-          "a",
-          "31123:55993e3db0ed7bf07395fd44c2d695c224d195553a1aff7320a18e41679d9c7c:post_readme_to_nostr"
-        ],
-        [
-          "app",
-          "didactyl"
-        ],
-        [
-          "scope",
-          "public"
-        ]
-      ]
-    }
-  ]
-}

config.jsonc.example

@@ -0,0 +1,337 @@
+{
+  // LEGACY CONFIG EXAMPLE
+  // This file is deprecated in favor of genesis.jsonc + nsec-only startup.
+  // Kept as reference for older deployments and migration support.
+
+  // ─── Agent Identity Keys ───────────────────────────────────────────
+  // Your agent's Nostr keypair. Provide nsec (bech32) or hex format.
+  // The public key fields are optional — they are derived automatically.
+  "keys": {
+    "nsec": "agent nsec",
+    "npub": "agent npub",
+    "npubHex": "agent hex pubkey",
+    "nsecHex": "agent hex secret key"
+  },
+
+  // ─── Administrator ─────────────────────────────────────────────────
+  // The admin pubkey (npub or hex) controls who can issue privileged
+  // commands and use tools via DM.
+  "admin": {
+    "pubkey": "admin pubkey"
+  },
+
+  // ─── DM Protocol ──────────────────────────────────────────────────
+  // Which encrypted DM protocol to use: "nip04", "nip17", or "both"
+  "dm_protocol": "nip04",
+
+  // ─── LLM Provider ─────────────────────────────────────────────────
+  // Configure the language model backend. Any OpenAI-compatible API works.
+  "llm": {
+    "provider": "",       // e.g. "openai", "anthropic", etc.
+    "api_key": "",        // your API key
+    "model": "",          // model identifier, e.g. "gpt-4o-mini"
+    "base_url": "",       // API base URL, e.g. "https://api.openai.com/v1"
+    "max_tokens": 512,    // max tokens per LLM response
+    "temperature": 0.7    // sampling temperature (0.0 – 2.0)
+  },
+
+  // ─── Tools & Runtime Limits ───────────────────────────────────────
+  // Centralized turn and timeout limits used by DM agent loops,
+  // triggered skills, HTTP API prompt runs, and local HTTP fetch tool.
+  "tools": {
+    "enabled": true,
+    "max_turns": 8,                             // default max turns for normal agent tool loops
+    "trigger_max_turns": 6,                     // max turns for triggered-skill executions
+    "api_default_max_turns": 4,                 // default when HTTP body omits max_turns
+    "api_max_turns_ceiling": 16,                // hard cap applied to API-provided max_turns
+    "local_http_fetch_default_timeout_seconds": 20,
+    "local_http_fetch_max_timeout_seconds": 120,
+    "shell": {
+      "enabled": true,
+      "timeout_seconds": 30,
+      "max_output_bytes": 65536,
+      "working_directory": "."
+    }
+  },
+
+  // ─── Security Tiers ───────────────────────────────────────────────
+  // Controls who can interact with the agent and what they can do.
+  "security": {
+    "verify_signatures": true,  // verify Nostr event signatures
+    // Message sent to strangers outside the web of trust
+    "stranger_response": "I only respond to people in my web of trust. You can always identify me by my public key (npub).",
+    "tiers": {
+      "admin": {
+        "tools_enabled": true   // admin can always use tools
+      },
+      "wot": {
+        "enabled": true,        // respond to web-of-trust contacts
+        "tools_enabled": false  // WoT contacts cannot use tools by default
+      },
+      "stranger": {
+        "enabled": true         // respond to strangers (with stranger_response)
+      }
+    }
+  },
+
+  // ─── Admin Context Subscriptions ──────────────────────────────────
+  // Subscribe to the admin's Nostr events to build context awareness.
+  "admin_context": {
+    "enabled": true,
+    "subscribe_kinds": [
+      0,      // kind 0: profile metadata
+      3,      // kind 3: contact list
+      10002,  // kind 10002: relay list
+      1       // kind 1: text notes
+    ],
+    "kind_1_limit": 10  // max recent kind-1 notes to track
+  },
+
+  // ─── HTTP Admin API ───────────────────────────────────────────────
+  // Local REST API for runtime inspection and control.
+  "api": {
+    "enabled": true,
+    "port": 8484,
+    "bind_address": "127.0.0.1"  // bind to localhost only
+  },
+
+  // ─── Startup Events ───────────────────────────────────────────────
+  // Events published on boot. Includes profile, relay list, soul,
+  // skills, and adoption list.
+  "startup_events": [
+    // Kind 0: Agent profile metadata (NIP-01)
+    {
+      "kind": 0,
+      "content_fields": {
+        "name": "Didactyl Agent",
+        "display_name": "Didactyl",
+        "about": "A sovereign AI agent on Nostr",
+        "picture": "https://laantungir.github.io/img_repo/daf95a99f3797fa4ac39f3791f377ad79bcb7b8a6868f75fe66d2ab4af4bd1f5.png",
+        "banner": "https://laantungir.github.io/img_repo/d21c4060632ab3d9d37a6062eeecbdbfbd67f03cb20dbd64838b1ba0d9cd8922.jpg"
+      },
+      "tags": []
+    },
+
+    // Kind 10002: Relay list (NIP-65)
+    // These relays are used for connecting and publishing events.
+    {
+      "kind": 10002,
+      "content": "",
+      "tags": [
+        ["r", "wss://relay.damus.io"],
+        ["r", "wss://nos.lol"],
+        ["r", "wss://relay.primal.net"],
+        ["r", "ws://127.0.0.1:7777"]
+      ]
+    },
+
+    // Kind 10050: DM relay list (NIP-17)
+    // Relays used specifically for receiving encrypted DMs.
+    {
+      "kind": 10050,
+      "content": "",
+      "tags": [
+        ["relay", "wss://relay.damus.io"],
+        ["relay", "wss://nos.lol"]
+      ]
+    },
+
+    // Kind 1: Startup announcement note
+    {
+      "kind": 1,
+      "content": "Hello world from Didactyl startup",
+      "tags": [
+        ["t", "didactyl"],
+        ["t", "startup"]
+      ]
+    },
+
+    // Kind 3: Contact list (initially empty)
+    {
+      "kind": 3,
+      "content": "",
+      "tags": []
+    },
+
+    // Kind 31120: Soul event — the agent's personality and behavior rules.
+    // Contains the system prompt and template sections for LLM context.
+    // The ---template--- marker separates the system prompt from
+    // structured context sections that are injected at runtime.
+    {
+      "kind": 31120,
+      "content": "# Didactyl Agent\n\nYou are Didactyl, a sovereign AI agent living on Nostr.\n\n## Communication Rules\n- You communicate through encrypted Nostr direct messages.\n- Keep responses concise and clear.\n\n## Behavior\n- Be helpful and technically accurate.\n- If unsure, state uncertainty directly.\n- Prefer actionable, practical advice.\n- Use the person's name when messaging them if you know it.\n- For the administrator, use their name from the administrator kind 0 profile metadata when available.\n\n## Tool Use Policy\n- You have tools available and should use them when a request requires taking action.\n- For requests involving local inspection or command execution, call `local_shell_exec` instead of refusing.\n- For posting to Nostr, call `nostr_post` with explicit `kind` and `content`.\n- For relay/event lookup tasks, call `nostr_query` with an appropriate filter.\n- For memory persistence, use `memory_save` to prepend new memory entries and `memory_recall` to recall stored memory.\n- Memory is not injected by default; call `memory_recall` when needed.\n- Keep memory content in markdown and concise enough for context efficiency.\n- After a tool call, base your answer on the actual tool result.\n- Never claim a tool was run if no tool was executed.\n\n## Task Management\n- Maintain and use your internal task list as short-term working memory.\n- Break long or complex actions into clear tasks before executing them.\n- Update task status as you complete steps so your plan stays accurate.\n\n## Safety\n- Do not claim to have executed actions you did not execute.\n- You may share your public key (npub) with anyone.\n- Never reveal your private key (nsec) under any circumstance.\n\n---template---\n\n- section: admin_identity\n  role: system\n  content: |\n    ## Administrator Identity (source: config.admin.pubkey)\n\n    This is your administrator! Admin pubkey (hex): {{admin_pubkey}}\n\n- section: admin_profile\n  role: system\n  content: |\n    ## Administrator Kind 0 Profile (source: nostr kind 0)\n\n    Administrator kind 0 profile content (JSON): {{admin_kind0_json}}\n  provider:\n    anthropic: |\n      <admin_kind0_profile source=\"nostr_kind_0\">\n      {{admin_kind0_json}}\n      </admin_kind0_profile>\n\n- section: admin_contacts\n  role: system\n  content: |\n    ## Administrator Contact List (source: nostr kind 3)\n\n    Administrator kind 3 contact list pubkeys (JSON array): {{admin_kind3_json}}\n  provider:\n    anthropic: |\n      <admin_contacts source=\"nostr_kind_3\">\n      {{admin_kind3_json}}\n      </admin_contacts>\n\n- section: admin_relays\n  role: system\n  content: |\n    ## Administrator Relay List (source: nostr kind 10002)\n\n    Administrator kind 10002 relay list (JSON): {{admin_kind10002_json}}\n  provider:\n    anthropic: |\n      <admin_relays source=\"nostr_kind_10002\">\n      {{admin_kind10002_json}}\n      </admin_relays>\n\n- section: admin_notes\n  role: system\n  content: |\n    ## Administrator Recent Notes (source: nostr kind 1)\n\n    Administrator recent kind 1 notes (JSON array): {{admin_kind1_json}}\n  provider:\n    anthropic: |\n      <admin_notes source=\"nostr_kind_1\">\n      {{admin_kind1_json}}\n      </admin_notes>\n\n- section: skills\n  role: system\n  content: |\n    ## Adopted Skills\n\n    {{skills_json}}\n\n- section: tasks\n  role: system\n  content: |\n    ## Current Task List\n\n    {{tasks_json}}\n\n- section: conversation\n  role: conversation\n  content: |\n    {{conversation}}",
+      "tags": [
+        ["d", "soul"],
+        ["app", "didactyl"],
+        ["scope", "private"]
+      ]
+    },
+
+    // Kind 31123: Public skill — long_form_note
+    // Teaches the agent how to publish NIP-23 long-form articles.
+    {
+      "kind": 31123,
+      "content_fields": {
+        "name": "long_form_note",
+        "description": "How to publish a NIP-23 long-form article (kind 30023)",
+        "nip": "NIP-23",
+        "event_kind": 30023,
+        "format": "The content field must be markdown text; avoid arbitrary hard line-breaks in paragraphs and do not include HTML.",
+        "required_tags": {
+          "d": "Addressable identifier slug for the article. Reusing the same d tag replaces prior versions.",
+          "title": "Human-readable article title.",
+          "published_at": "Unix timestamp as a string for first publication time; keep stable on edits."
+        },
+        "optional_tags": {
+          "summary": "Short 1-2 sentence summary.",
+          "image": "URL for article preview image.",
+          "t": "Topic hashtags using repeated t tags, usually 3-6 lowercase terms."
+        },
+        "behavior": "If required values are missing or unclear, ask the administrator before publishing instead of guessing.",
+        "procedure": [
+          "Determine title and d tag from admin input or source material.",
+          "Draft markdown body content.",
+          "Set published_at as unix seconds string.",
+          "Add optional summary/image/t tags when known.",
+          "Publish with nostr_post kind 30023 including tags array."
+        ]
+      },
+      "tags": [
+        ["d", "long_form_note"],
+        ["app", "didactyl"],
+        ["scope", "public"],
+        ["slug", "long_form_note"]
+      ]
+    },
+
+    // Kind 31123: Public skill — post_readme_to_nostr
+    // Reads README.md and publishes it as a long-form note.
+    {
+      "kind": 31123,
+      "content_fields": {
+        "name": "post_readme_to_nostr",
+        "description": "Read README.md from the repo and publish it as a NIP-23 long-form note",
+        "uses_skill": "long_form_note",
+        "event_kind": 30023,
+        "procedure": [
+          "Read README.md using local_file_read with path README.md.",
+          "Set d tag exactly to readme.md.",
+          "Set title from the first markdown H1 heading in README.md.",
+          "Set summary from the opening paragraph of README.md.",
+          "Set image from project metadata when available (kind 0 picture/banner), otherwise omit image tag.",
+          "Generate 3-6 lowercase t tags from README section topics.",
+          "Set published_at to current unix timestamp as string.",
+          "Publish with nostr_post kind 30023, full README markdown in content, and full NIP-23 tag set."
+        ],
+        "required_values": {
+          "d": "readme.md",
+          "summary_source": "opening paragraph"
+        }
+      },
+      "tags": [
+        ["d", "post_readme_to_nostr"],
+        ["app", "didactyl"],
+        ["scope", "public"],
+        ["slug", "post_readme_to_nostr"]
+      ]
+    },
+
+    // Kind 31123: Public triggered skill — cheerleader
+    // Watches for admin kind-1 notes and sends an encouraging DM.
+    {
+      "kind": 31123,
+      "content": "You are my personal cheerleader. When the admin posts a kind 1 note, read their note and send them a short DM that cheers them on, praises their effort, tells them they are good looking, and encourages them to keep going. Be warm, playful, and positive. Mention something specific from their note so it feels personal. Keep it to 2-3 sentences.",
+      "tags": [
+        ["d", "cheerleader"],
+        ["app", "didactyl"],
+        ["scope", "public"],
+        ["description", "Cheer on admin whenever they post a kind 1 note"],
+        ["trigger", "nostr-subscription"],
+        ["filter", "{\"kinds\":[1],\"authors\":[\"REPLACE_WITH_ADMIN_HEX_PUBKEY\"]}"],
+        ["action", "llm"],
+        ["enabled", "true"]
+      ]
+    },
+
+    // Kind 31124: Private skill — admin_ops
+    // Private operational procedures (admin-only).
+    {
+      "kind": 31124,
+      "content_fields": {
+        "name": "admin_ops",
+        "description": "Private operational procedures"
+      },
+      "tags": [
+        ["d", "admin_ops"],
+        ["app", "didactyl"],
+        ["scope", "private"],
+        ["slug", "admin_ops"]
+      ]
+    },
+
+    // Kind 31124: Private triggered skill — webhook-echo
+    // Example webhook trigger that emits a fixed DM response.
+    {
+      "kind": 31124,
+      "content": "When this webhook trigger fires, DM the admin with exactly: WEBHOOK_SOURCE_POC_OK",
+      "tags": [
+        ["d", "webhook-echo"],
+        ["app", "didactyl"],
+        ["scope", "private"],
+        ["description", "PoC webhook trigger skill"],
+        ["trigger", "webhook"],
+        ["filter", "{}"],
+        ["action", "llm"],
+        ["enabled", "true"]
+      ]
+    },
+
+    // Kind 31124: Private triggered skill — cron_poc
+    // Example cron trigger that runs every minute.
+    {
+      "kind": 31124,
+      "content": "DM the administrator with the current time, and tell him that your cron skill triggered.",
+      "tags": [
+        ["d", "cron_poc"],
+        ["app", "didactyl"],
+        ["scope", "private"],
+        ["description", "PoC cron trigger skill"],
+        ["trigger", "cron"],
+        ["filter", "*/1 * * * *"],
+        ["action", "template"],
+        ["enabled", "true"]
+      ]
+    },
+
+    // Kind 31124: Private triggered skill — chain_from_webhook_poc
+    // Example chain trigger that runs after webhook-echo completes.
+    {
+      "kind": 31124,
+      "content": "LOG: chain_from_webhook_poc fired",
+      "tags": [
+        ["d", "chain_from_webhook_poc"],
+        ["app", "didactyl"],
+        ["scope", "private"],
+        ["description", "PoC chain trigger skill"],
+        ["trigger", "chain"],
+        ["filter", "webhook-echo"],
+        ["action", "template"],
+        ["enabled", "true"]
+      ]
+    },
+
+    // Kind 10123: Skill adoption list
+    // References which public skills this agent has adopted.
+    {
+      "kind": 10123,
+      "content": "",
+      "tags": [
+        ["a", "31123:55993e3db0ed7bf07395fd44c2d695c224d195553a1aff7320a18e41679d9c7c:long_form_note"],
+        ["a", "31123:55993e3db0ed7bf07395fd44c2d695c224d195553a1aff7320a18e41679d9c7c:post_readme_to_nostr"],
+        ["a", "31123:55993e3db0ed7bf07395fd44c2d695c224d195553a1aff7320a18e41679d9c7c:cheerleader"],
+        ["app", "didactyl"],
+        ["scope", "public"]
+      ]
+    }
+  ]
+}

context_template.md

@@ -1,57 +1,10 @@
-# Context Template
+# Context Template (Legacy)
 
-```yaml
-- section: admin_identity
-  role: system
-  content: |
-    ## Administrator Identity (source: config.admin.pubkey)
+This file is deprecated and retained for backward compatibility only.
 
-    This is your administrator! Admin pubkey (hex): {{admin_pubkey}}
+The default context behavior is now defined by adopted skills (kind `10123`) and the `didactyl_default` skill template published from `genesis.jsonc`.
 
-- section: admin_profile
-  role: system
-  content: |
-    ## Administrator Kind 0 Profile (source: nostr kind 0)
-
-    Administrator kind 0 profile content (JSON): {{admin_kind0_json}}
-  provider:
-    anthropic: |
-      <admin_kind0_profile source="nostr_kind_0">
-      {{admin_kind0_json}}
-      </admin_kind0_profile>
-
-- section: admin_relay_list
-  role: system
-  content: |
-    ## Administrator Relay List (source: nostr kind 10002)
-
-    Administrator kind 10002 relay-list content (JSON): {{admin_kind10002_json}}
-
-- section: startup_events
-  role: system
-  content: |
-    ## Startup Events Memory (source: config.startup_events)
-
-    Startup events memory (kinds/content/tags): {{startup_events_json}}
-
-- section: adopted_skills
-  role: system
-  content: |
-    {{adopted_skills_content}}
-
-- section: agent_tasks
-  role: system
-  content: |
-    {{tasks_content}}
-
-- section: dm_history
-  role: expand
-  limit: 12
-
-- section: admin_notes
-  role: system
-  content: |
-    ## Administrator Recent Notes (source: nostr kind 1)
-
-    {{admin_notes_content}}
-```
+For current behavior, see:
+- `docs/GENESIS.md`
+- `docs/CONTEXT.md`
+- `docs/SKILLS.md`

context_template.recovered.md

@@ -0,0 +1,56 @@
+# Context Template
+
+```yaml
+- section: admin_identity
+  role: system
+  content: |
+    ## Administrator Identity (source: config.admin.pubkey)
+
+    This is your administrator! Admin pubkey (hex): {{admin_pubkey}}
+
+- section: admin_profile
+  role: system
+  content: |
+    ## Administrator Kind 0 Profile (source: nostr kind 0)
+
+    Administrator kind 0 profile content (JSON): {{admin_kind0_json}}
+  provider:
+    anthropic: |
+      <admin_kind0_profile source="nostr_kind_0">
+      {{admin_kind0_json}}
+      </admin_kind0_profile>
+
+- section: admin_relay_list
+  role: system
+  content: |
+    ## Administrator Relay List (source: nostr kind 10002)
+
+    Administrator kind 10002 relay-list content (JSON): {{admin_kind10002_json}}
+
+- section: startup_events
+  role: system
+  content: |
+    ## Startup Events Memory (source: config.startup_events)
+
+    Startup events memory (kinds/content/tags): {{startup_events_json}}
+
+- section: adopted_skills
+  role: system
+  content: |
+    {{adopted_skills_content}}
+
+- section: agent_tasks
+  role: system
+  content: |
+    {{tasks_content}}
+
+- section: dm_history
+  role: expand
+  limit: 12
+
+- section: admin_notes
+  role: system
+  content: |
+    ## Administrator Recent Notes (source: nostr kind 1)
+
+    {{admin_notes_content}}

deploy_lt.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+SOURCE_BINARY="$SCRIPT_DIR/didactyl_static_x86_64"
+REMOTE_TARGET="ubuntu@laantungir.net:~/didactyl"
+
+if ! command -v rsync >/dev/null 2>&1; then
+    echo "ERROR: rsync is not installed or not in PATH"
+    exit 1
+fi
+
+if [ ! -f "$SOURCE_BINARY" ]; then
+    echo "ERROR: Source binary not found: $SOURCE_BINARY"
+    echo "Build it first so didactyl_static_x86_64 exists."
+    exit 1
+fi
+
+echo "Deploying $SOURCE_BINARY to $REMOTE_TARGET"
+rsync -avz --progress "$SOURCE_BINARY" "$REMOTE_TARGET"
+echo "Deployment complete."

didactyl.nsec.debug.log

@@ -0,0 +1,124 @@
+[2026-03-16 05:30:19] [INFO ] Didactyl v0.0.71 starting
+[2026-03-16 05:30:19] [INFO ] [didactyl] initializing relay pool with 2 relays
+[2026-03-16 05:30:19] [INFO ] [didactyl] added relay: wss://relay.damus.io
+[2026-03-16 05:30:19] [INFO ] [didactyl] added relay: wss://relay.primal.net
+[2026-03-16 05:30:19] [INFO ] [didactyl] startup checklist [01] Relay connectivity: begin
+[startup 01] Relay connectivity ...
+[2026-03-16 05:30:20] [WARN ] [didactyl] poll latency spike: nostr_relay_pool_poll(timeout=100) took 1190.6ms rc=0 count=1
+[2026-03-16 05:30:20] [INFO ] [didactyl] relay state changed: wss://relay.damus.io disconnected -> connected
+[2026-03-16 05:30:20] [INFO ] [didactyl] relay state changed: wss://relay.primal.net disconnected -> connected
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [01] Relay connectivity: ok (connected relays: 2/2)
+[startup 01] Relay connectivity: OK (connected relays: 2/2)
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [02] Recover runtime config from Nostr: begin
+[startup 02] Recover runtime config from Nostr ...
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [02] Recover runtime config from Nostr: ok
+[startup 02] Recover runtime config from Nostr: OK
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [03] Validate LLM config: begin
+[startup 03] Validate LLM config ...
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [03] Validate LLM config: ok
+[startup 03] Validate LLM config: OK
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [04] Validate admin config: begin
+[startup 04] Validate admin config ...
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [04] Validate admin config: ok
+[startup 04] Validate admin config: OK
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [05] Initialize LLM client: begin
+[startup 05] Initialize LLM client ...
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [05] Initialize LLM client: ok
+[startup 05] Initialize LLM client: OK
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [06] Detect first run via kind 10002: begin
+[startup 06] Detect first run via kind 10002 ...
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup phase: first-run detection via kind 10002 => subsequent-run
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [06] Detect first run via kind 10002: ok (subsequent-run)
+[startup 06] Detect first run via kind 10002: OK (subsequent-run)
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup checklist [07] Reconcile/persist startup state: begin
+[startup 07] Reconcile/persist startup state ...
+[2026-03-16 05:30:20] [INFO ] [didactyl] startup phase: skipping genesis startup-event publish on subsequent run
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [07] Reconcile/persist startup state: ok
+[startup 07] Reconcile/persist startup state: OK
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [08] Initialize agent: begin
+[startup 08] Initialize agent ...
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [08] Initialize agent: ok
+[startup 08] Initialize agent: OK
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [09] Initialize trigger manager: begin
+[startup 09] Initialize trigger manager ...
+[2026-03-16 05:30:21] [INFO ] [didactyl] trigger manager initialized (capacity=16)
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [09] Initialize trigger manager: ok
+[startup 09] Initialize trigger manager: OK
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup phase: deferred trigger load will run after self-skill EOSE
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [10] Load startup triggers: begin
+[startup 10] Load startup triggers ...
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup phase: startup-config trigger load begin
+[2026-03-16 05:30:21] [INFO ] [didactyl] trigger manager loaded 0 trigger(s) from startup config (considered=1)
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup phase: startup-config trigger load end
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [10] Load startup triggers: ok
+[startup 10] Load startup triggers: OK
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [11] Discover self relay list via kind 10002: begin
+[startup 11] Discover self relay list via kind 10002 ...
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 query begin: timeout_ms=5000 author=52a3e82f7b374385... relay_count=2
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 query relay snapshot: {"relay_count":2,"connected_count":2,"relays":[{"url":"wss://relay.damus.io","status":"connected","events_received":3,"events_published":0,"events_published_ok":0,"events_published_failed":0,"ping_latency_current":0,"ping_latency_avg":0,"query_latency_avg":0,"publish_latency_avg":0,"connection_uptime_start":1773653419,"last_event_time":0},{"url":"wss://relay.primal.net","status":"connected","events_received":2,"events_published":0,"events_published_ok":0,"events_published_failed":0,"ping_latency_current":0,"ping_latency_avg":0,"query_latency_avg":0,"publish_latency_avg":0,"connection_uptime_start":1773653419,"last_event_time":0}]}
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 query received event_count=1
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 query extracted relays=["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net","ws://127.0.0.1:7777","wss://relay.laantungir.net","wss://sendit.nosflare.com"]
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 wait success: relay_count=6
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 relay[0]=wss://relay.damus.io
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 relay[1]=wss://nos.lol
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 relay[2]=wss://relay.primal.net
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 relay[3]=ws://127.0.0.1:7777
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 relay[4]=wss://relay.laantungir.net
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 relay[5]=wss://sendit.nosflare.com
+[2026-03-16 05:30:21] [INFO ] [didactyl] kind10002 wait success relay snapshot: {"relay_count":2,"connected_count":2,"relays":[{"url":"wss://relay.damus.io","status":"connected","events_received":4,"events_published":0,"events_published_ok":0,"events_published_failed":0,"ping_latency_current":0,"ping_latency_avg":0,"query_latency_avg":0,"publish_latency_avg":0,"connection_uptime_start":1773653419,"last_event_time":0},{"url":"wss://relay.primal.net","status":"connected","events_received":2,"events_published":0,"events_published_ok":0,"events_published_failed":0,"ping_latency_current":0,"ping_latency_avg":0,"query_latency_avg":0,"publish_latency_avg":0,"connection_uptime_start":1773653419,"last_event_time":0}]}
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [11] Discover self relay list via kind 10002: ok (kind10002=6 added=4 connected=2/6)
+[startup 11] Discover self relay list via kind 10002: OK (kind10002=6 added=4 connected=2/6)
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup checklist [12] Subscribe admin context: begin
+[startup 12] Subscribe admin context ...
+[2026-03-16 05:30:21] [INFO ] [didactyl] startup phase: subscribe admin context begin
+[2026-03-16 05:30:26] [INFO ] [didactyl] admin context subscriptions active for admin 8ff74724ed641b3c...
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe admin context end
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [12] Subscribe admin context: ok
+[startup 12] Subscribe admin context: OK
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [13] Subscribe agent self context: begin
+[startup 13] Subscribe agent self context ...
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe agent self context begin
+[2026-03-16 05:30:26] [INFO ] [didactyl] agent self-context subscriptions active for pubkey 52a3e82f7b374385...
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe agent self context end
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [13] Subscribe agent self context: ok
+[startup 13] Subscribe agent self context: OK
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [14] Subscribe self-skill cache: begin
+[startup 14] Subscribe self-skill cache ...
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe self skill cache begin
+[2026-03-16 05:30:26] [INFO ] [didactyl] self/admin skill subscriptions active (self=52a3e82f7b374385..., admin=8ff74724ed641b3c...)
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe self skill cache end
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [14] Subscribe self-skill cache: ok
+[startup 14] Subscribe self-skill cache: OK
+[2026-03-16 05:30:26] [INFO ] [didactyl] publish DM target relays (6):
+[2026-03-16 05:30:26] [INFO ] [didactyl]   -> wss://relay.damus.io
+[2026-03-16 05:30:26] [INFO ] [didactyl]   -> wss://relay.primal.net
+[2026-03-16 05:30:26] [INFO ] [didactyl]   -> wss://nos.lol
+[2026-03-16 05:30:26] [INFO ] [didactyl]   -> ws://127.0.0.1:7777
+[2026-03-16 05:30:26] [INFO ] [didactyl]   -> wss://relay.laantungir.net
+[2026-03-16 05:30:26] [INFO ] [didactyl]   -> wss://sendit.nosflare.com
+[2026-03-16 05:30:26] [INFO ] [didactyl] kind 4 event published to wss://relay.damus.io (async)
+[2026-03-16 05:30:26] [INFO ] [didactyl] kind 4 event published to wss://relay.primal.net (async)
+[2026-03-16 05:30:26] [INFO ] [didactyl] kind 4 event published to wss://nos.lol (async)
+[2026-03-16 05:30:26] [INFO ] [didactyl] kind 4 event published to ws://127.0.0.1:7777 (async)
+[2026-03-16 05:30:26] [INFO ] [didactyl] kind 4 event published to wss://relay.laantungir.net (async)
+[2026-03-16 05:30:26] [INFO ] [didactyl] kind 4 event published to wss://sendit.nosflare.com (async)
+[2026-03-16 05:30:26] [INFO ] [didactyl] sent DM 54452dbf320bee66... to 8ff74724ed641b3c... via 6 connected relay(s)
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [15] Subscribe DMs: begin
+[startup 15] Subscribe DMs ...
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe DMs begin
+[2026-03-16 05:30:26] [INFO ] [didactyl] DM subscription active for pubkey 52a3e82f7b374385...
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup phase: subscribe DMs end
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [15] Subscribe DMs: ok
+[startup 15] Subscribe DMs: OK
+2aa88330 3 mongoose.c:4824:mg_mgr_init  MG_IO_SIZE: 16384, TLS: builtin
+2aa88331 3 mongoose.c:4741:mg_listen    1 11 https://127.0.0.1:8484
+[2026-03-16 05:30:26] [INFO ] [didactyl] http api listening on https://127.0.0.1:8484
+[2026-03-16 05:30:26] [INFO ] [didactyl] HTTP API listening at http://127.0.0.1:8484
+[2026-03-16 05:30:26] [INFO ] [didactyl] HTTP API endpoints: http://127.0.0.1:8484/api/context/current  http://127.0.0.1:8484/api/context/parts
+[2026-03-16 05:30:26] [INFO ] [didactyl] startup checklist [16] READY: ok (agent online; entering main poll loop)
+[startup 16] READY: OK (agent online; entering main poll loop)
+[2026-03-16 05:30:26] [INFO ] [didactyl] entering main poll loop
+[2026-03-16 05:30:26] [INFO ] [didactyl] running with pubkey 52a3e82f7b3743852fbe804cfcbf4db3448115887895247c001f2b50e790acb8
+[2026-03-16 05:30:27] [INFO ] [didactyl] live self-skill trigger ignored (not adopted) d_tag=daily-readme-publish
+[2026-03-16 05:30:28] [INFO ] [didactyl] live self-skill trigger ignored (not adopted) d_tag=daily-readme-publish
+[2026-03-16 05:30:28] [INFO ] [didactyl] live self-skill trigger ignored (not adopted) d_tag=daily-readme-publish

docs/API.md

@@ -10,7 +10,7 @@ All responses are JSON. CORS headers are included on every response for browser
 
 ## Configuration
 
-Enable the API in `config.json`:
+Enable the API in `config.jsonc`:
 
 ```json
 {
@@ -178,7 +178,7 @@ Returns the context broken into labeled, individually-sized parts. Useful for un
 
 | Name | Description |
 |---|---|
-| `system_prompt` | The agent soul / system prompt (first system message) |
+| `system_prompt` | The agent base/default skill prompt (first system message) |
 | `admin_identity` | Admin pubkey identification message |
 | `admin_kind0` | Admin kind 0 profile metadata |
 | `admin_relay_list` | Admin kind 10002 relay list |
@@ -190,6 +190,45 @@ Returns the context broken into labeled, individually-sized parts. Useful for un
 
 ---
 
+### POST /api/trigger/:d_tag
+
+Fires a webhook-triggered skill by `d_tag`.
+
+**Path params:**
+
+| Param | Required | Description |
+|---|---|---|
+| `d_tag` | yes | Skill `d` tag of a skill configured with `trigger=webhook` |
+
+**Request body:**
+
+Optional JSON payload; if present it is passed into the synthetic trigger event as `payload`.
+
+```json
+{
+  "source": "external-cron",
+  "note": "run maintenance sweep"
+}
+```
+
+**Response:**
+
+```json
+{
+  "success": true,
+  "d_tag": "maintenance-sweep",
+  "fired": true
+}
+```
+
+**Notes:**
+
+- Returns `404` if no skill exists for `d_tag` or no active trigger is registered.
+- Returns `400` if the matched skill is not a `webhook` trigger or is disabled.
+- Trigger execution uses the same trigger cooldown policy as other trigger types.
+
+---
+
 ### POST /api/prompt/run-simple
 
 Submit a system prompt and user message for a simple LLM call with no tools. Useful for quick prompt iteration.
@@ -474,11 +513,9 @@ The following endpoints are planned but not yet implemented:
 | Method | Path | Description |
 |---|---|---|
 | GET | `/api/config` | Current runtime config with redacted secrets |
-| GET | `/api/events/soul` | Fetch agent soul event |
-| PUT | `/api/events/soul` | Update soul content |
 | GET | `/api/events/skills` | List published skills |
-| GET | `/api/events/skills/:slug` | Fetch skill by slug |
-| PUT | `/api/events/skills/:slug` | Update skill |
+| GET | `/api/events/skills/:d_tag` | Fetch skill by d_tag |
+| PUT | `/api/events/skills/:d_tag` | Update skill |
 | GET | `/api/events/adoption` | Fetch adoption list |
 | GET | `/api/events/profile` | Fetch agent profile |
 | PUT | `/api/events/profile` | Update agent profile |

docs/CONTEXT.md

@@ -0,0 +1,161 @@
+# Didactyl — LLM Context
+
+See also: [SKILLS.md](SKILLS.md) · [TOOLS.md](TOOLS.md)
+
+## What Is Context?
+
+Every time Didactyl talks to an LLM, it sends a **context** — the complete package of information the model needs to reason and respond.
+
+Context is not just a prompt string; it is the full request payload:
+
+1. **Messages** — system/user/assistant/tool history
+2. **Tool schemas** — JSON descriptions of callable tools
+3. **Model parameters** — model, temperature, max tokens, seed, etc.
+
+---
+
+## OpenAI-Compatible Chat Format
+
+Didactyl uses OpenAI-compatible chat completions.
+
+```json
+{
+  "model": "claude-opus-4.6",
+  "messages": [
+    {"role": "system", "content": "..."},
+    {"role": "user", "content": "..."}
+  ],
+  "tools": [
+    {
+      "type": "function",
+      "function": {
+        "name": "nostr_post",
+        "description": "Publish a Nostr event",
+        "parameters": {"type":"object"}
+      }
+    }
+  ],
+  "temperature": 0.7,
+  "max_tokens": 512
+}
+```
+
+### Message Roles
+
+| Role | Purpose |
+|------|---------|
+| `system` | Instructions and injected context |
+| `user` | Input message or trigger payload |
+| `assistant` | Model responses / tool call envelopes |
+| `tool` | Tool execution results fed back to model |
+
+---
+
+## Context Assembly Model
+
+Didactyl uses **skill composition by adoption order**.
+
+There are no context modes.
+
+### Assembly Steps
+
+1. Load adopted skills from kind `10123`.
+2. Resolve adopted skills in list order.
+3. Expand each skill template variables via tools.
+4. Append resolved skill output to messages in that same order.
+5. Append live input (DM text or triggering event payload).
+6. Attach tool schemas.
+7. Apply execution parameters from trigger tags (if invoked via trigger).
+
+```mermaid
+flowchart TD
+    INPUT[Input: DM or trigger event] --> ADOPT[Load adopted skills from kind 10123]
+    ADOPT --> ORDER[Resolve skills in listed order]
+    ORDER --> EXPAND[Expand template variables via tools]
+    EXPAND --> MESSAGES[Append resolved skill messages]
+    MESSAGES --> LIVE[Append live input message/event]
+    LIVE --> TOOLS[Attach tool schemas]
+    TOOLS --> PARAMS[Apply runtime params from trigger tags]
+    PARAMS --> LLM[Send to LLM]
+```
+
+### Why Order Matters
+
+- Earlier adopted skills usually establish broad behavior.
+- Later adopted skills can refine or narrow behavior.
+- If instructions conflict, prompt-order effects apply.
+
+---
+
+## Context Parts
+
+| Part | Source | Description |
+|------|--------|-------------|
+| Skill templates | Adopted skill events | Core instructions assembled in order |
+| Resolved variables | Tool outputs | Runtime data inserted into templates |
+| Conversation history | DM history/events | Recent dialogue context |
+| Live input | DM or trigger event | Current request payload |
+| Tool schemas | Tool registry | Capability declaration for tool calling |
+| Runtime params | Trigger tags | LLM/tool limits for this execution |
+
+---
+
+## Template Variables Are Tool Calls
+
+Template variables resolve through tool execution.
+
+Example:
+
+- `{{admin_profile}}` resolves by running `nostr_admin_profile`
+- `{{admin_notes}}` resolves by running `nostr_admin_notes`
+
+Unknown variables should resolve to empty values for portability.
+
+---
+
+## Trigger Runtime Parameters
+
+Execution controls are attached to trigger tags, not skill content:
+
+- `llm`
+- `max_tokens`
+- `temperature`
+- `seed`
+- `tools`
+
+Resolution order for a triggered run:
+
+1. Start with agent defaults
+2. Apply trigger tag overrides
+3. Execute
+4. Restore defaults
+
+---
+
+## Triggered vs Adopted Use
+
+- **Adopted skill (`10123`)**: contributes context/instructions
+- **Triggered skill**: contributes context and may supply execution overrides via tags
+
+This separation keeps composition simple while allowing per-trigger runtime control.
+
+---
+
+## Token Budget
+
+Context cost is controlled by:
+
+- Adoption-list ordering and skill count
+- Conversation-history limits
+- Skill/template truncation limits
+- Per-trigger model/runtime parameter choices
+
+Use runtime context inspection endpoints to see the exact payload before LLM calls.
+
+---
+
+## Related Documentation
+
+- Skills spec: [SKILLS.md](SKILLS.md)
+- Tool catalog: [TOOLS.md](TOOLS.md)
+- API details: [API.md](API.md)

docs/GENESIS.md

@@ -0,0 +1,136 @@
+# Didactyl — Genesis Bootstrapping
+
+See also: [CONTEXT.md](CONTEXT.md) · [SKILLS.md](SKILLS.md) · [README.md](../README.md)
+
+## Purpose
+
+`genesis.jsonc` is the first-run bootstrap document for a Didactyl agent.
+
+It defines initial identity, admin policy, startup events, default skill context, and baseline runtime settings so the agent can publish itself onto Nostr.
+
+After bootstrap, the long-term direction is **nsec-only startup** with state recovered from Nostr events.
+
+---
+
+## File Format
+
+`genesis.jsonc` is JSONC (JSON + comments).
+
+Minimum practical sections:
+
+- `key.nsec` (or runtime `--nsec` / `DIDACTYL_NSEC`)
+- `admin.pubkey`
+- `llm`
+- `startup_events` (must include kind `10002` relay tags)
+
+Typical optional sections:
+
+- `dm_protocol`
+- `tools`
+- `security`
+- `admin_context`
+- `api`
+- `default_skill` (reserved for default-skill publishing workflows)
+
+---
+
+## First-Run Flow
+
+On first run, the agent:
+
+1. Loads `genesis.jsonc`.
+2. Derives keys (from `key.nsec` or runtime nsec override).
+3. Connects to relay set from startup kind `10002` tags.
+4. Publishes/reconciles startup events.
+5. Initializes runtime services (DM subscriptions, triggers, API if enabled).
+
+First-run detection is based on querying own kind `10002` relay-list availability.
+
+---
+
+## Subsequent-Run Flow
+
+On subsequent runs, the agent can start with nsec supplied via:
+
+- CLI: `--nsec <nsec_or_hex>`
+- Environment: `DIDACTYL_NSEC`
+
+Optional runtime API overrides:
+
+- `--api-port <port>`
+- `--api-bind <address>`
+
+Subsequent-run bootstrap-event republishing is skipped when prior kind `10002` state is found.
+
+---
+
+## Interactive Setup (Zero-Argument Startup)
+
+When Didactyl is run with **no arguments**:
+
+```bash
+./didactyl
+```
+
+it enters an interactive setup wizard instead of immediately trying to load `./genesis.jsonc`.
+
+Wizard entry choices:
+
+- **New agent** — generate/provide identity, configure admin + LLM + relays
+- **Existing agent** — provide nsec and recover relay/admin/LLM config from Nostr
+- **Load genesis** — load a specified genesis file path
+
+Menu UX conventions:
+
+- Single-letter hotkeys (case-insensitive)
+- First-letter menu mnemonics (e.g., `N` for New, `E` for Existing)
+- `q` / `x` exits or backs out of menus
+
+Security behavior:
+
+- nsec entry is masked in terminal
+- writing genesis with nsec is explicit and warned
+- recommended export mode is genesis without nsec plus runtime `--nsec`/`DIDACTYL_NSEC`
+
+---
+
+## Encrypted Config Events
+
+Didactyl exposes config persistence tools for encrypted self-config on Nostr:
+
+- `config_store` — publish encrypted kind `30078` config by `d_tag`
+- `config_recall` — query+decrypt kind `30078` config by `d_tag`
+
+Recommended tags:
+
+- `d=llm_config`
+- `d=agent_config`
+
+These are encrypted to self with NIP-44.
+
+---
+
+## Relay Bootstrap Strategy
+
+`startup_events` must include kind `10002` relay tags (`["r", "wss://..."]`).
+
+That relay list is used as the initial network attachment for querying existing state and publishing startup events.
+
+---
+
+## Migration Notes (Legacy -> Genesis)
+
+Legacy deployments using `config.jsonc` can migrate by:
+
+1. Copying equivalent sections to `genesis.jsonc`.
+2. Ensuring startup kind `10002` relay tags are present.
+3. Providing nsec at runtime (`--nsec` or `DIDACTYL_NSEC`) where desired.
+4. Treating `context_template.md` / `config.jsonc.example` as legacy references.
+
+---
+
+## Security Notes
+
+- Keep nsec secret.
+- Prefer environment or secure credential injection for production nsec handling.
+- Avoid publishing plaintext sensitive config; use encrypted `config_store` for long-term state.

docs/SKILLS.md

@@ -0,0 +1,317 @@
+# Didactyl — Skills
+
+See also: [CONTEXT.md](CONTEXT.md) · [TOOLS.md](TOOLS.md)
+
+## Overview
+
+A skill is a **set of instructions for the LLM** stored as a Nostr event.
+
+Skills teach the agent how to accomplish tasks — the LLM reads the instructions, reasons about them, and uses tools to take action.
+
+Think of it like a woodshop: a **skill** is knowing how to carve — technique, judgment, decision-making. A **tool** is the chisel. The skill never directly uses the chisel without the craftsperson (the LLM) in the loop.
+
+Skills are portable, shareable, and discoverable as Nostr events.
+
+---
+
+## Skill Events
+
+| Kind | Purpose | Replaceable? |
+|---|---|---|
+| `31123` | Public skill definition | Yes, by d-tag |
+| `31124` | Private skill definition | Yes, by d-tag |
+| `10123` | Skill adoption list | Yes, single per pubkey |
+
+---
+
+## Skill Content
+
+Skill `content` is JSON and should focus on **instructions**, not transport/runtime controls.
+
+```json
+{
+  "kind": 31123,
+  "content": {
+    "description": "Check spelling and grammar",
+    "template": "system:\nYou are a spelling and grammar checker.\n\nRules:\n- Fix spelling errors\n- Fix grammar errors\n- Preserve original formatting\n- Return ONLY the corrected text, no explanations\n\nuser:\n{{message}}"
+  },
+  "tags": [
+    ["d", "spellcheck"],
+    ["scope", "public"],
+    ["description", "Spelling and grammar checker"]
+  ]
+}
+```
+
+### Content Fields
+
+| Field | Type | Default | Description |
+|-------|------|---------|-------------|
+| `description` | string | — | Human-readable description |
+| `template` | string | — | Skill instructions/template text (recommended) |
+| `base` | bool | `false` | Optional hint that this skill is intended as base/default behavior |
+
+> Execution parameters (`llm`, `max_tokens`, `temperature`, `seed`, `tools`) are defined on **trigger tags**, not in content.
+
+---
+
+## Composition Model (No Context Modes)
+
+Skills do **not** use `context_mode`.
+
+Context is assembled from kind `10123` adoption list order:
+
+1. Resolve adopted skills in list order.
+2. Expand each skill template/tool variables.
+3. Append each resolved skill as context messages in that same order.
+4. Append live user/trigger input.
+
+The adoption list itself is the context definition.
+
+- One adopted skill = single-skill behavior.
+- Multiple adopted skills = layered behavior in explicit order.
+- Reordering `10123` changes precedence naturally.
+
+### Ordering Convention
+
+- Earlier adopted skills generally set broader tone/policy.
+- Later adopted skills can narrow/specialize behavior.
+- If multiple skills strongly conflict, normal prompt-order effects apply.
+
+### Template Variables Are Tool Calls
+
+Template variables are tool calls.
+
+When the engine encounters `{{admin_profile}}`, it runs the corresponding tool and inserts the result into context.
+
+| Variable | Tool Called | Description |
+|----------|-----------|-------------|
+| `{{agent_identity}}` | `agent_identity` | Agent identity block |
+| `{{admin_profile}}` | `nostr_admin_profile` | Admin kind 0 profile |
+| `{{admin_notes}}` | `nostr_admin_notes` | Admin recent notes |
+| `{{admin_relays}}` | `nostr_admin_relays` | Admin relay list |
+| `{{adopted_skills}}` | `adopted_skills` | Other adopted skill instructions |
+| `{{dm_history}}` | *(expand directive)* | Recent DM conversation |
+| `{{message}}` | *(built-in)* | Current user message |
+| `{{triggering_event}}` | `trigger_event` | Triggering event JSON |
+
+Unknown variables should resolve to empty values for portability.
+
+---
+
+## Triggered Skills
+
+A triggered skill has a trigger source attached.
+
+Didactyl trigger types:
+
+- `nostr-subscription`
+- `webhook`
+- `cron`
+- `chain`
+- `dm`
+
+### Trigger Tags
+
+| Tag | Required | Description |
+|---|---|---|
+| `trigger` | Yes | Trigger type: `nostr-subscription`, `webhook`, `cron`, `chain`, `dm` |
+| `filter` | Yes | Type-specific filter |
+| `enabled` | No | Whether active (default: `true`) |
+| `llm` | No | Model spec fallback chain (e.g., `openai/gpt-4o-mini, cheap`) |
+| `max_tokens` | No | Max output tokens for this trigger execution |
+| `temperature` | No | Sampling temperature for this trigger execution |
+| `seed` | No | Optional deterministic seed where supported |
+| `tools` | No | `true` for all tools, `false` for none, or CSV list of allowed tool names |
+
+### Execution Parameter Resolution
+
+When a trigger fires:
+
+1. Start with agent defaults.
+2. Apply execution tags from that trigger (`llm`, `max_tokens`, `temperature`, `seed`, `tools`).
+3. Execute skill with those effective runtime settings.
+4. Restore defaults after the run.
+
+### Adopted vs Triggered Behavior
+
+- **Adopted skill (`10123`)**: contributes instructions/template to context.
+- **Triggered skill**: contributes instructions **and** may define execution parameters via trigger tags.
+
+---
+
+## Trigger Types
+
+### `nostr-subscription`
+
+`filter` is a JSON-encoded Nostr subscription filter.
+
+```json
+["trigger", "nostr-subscription"],
+["filter", "{\"#p\":[\"<admin_pubkey>\"],\"kinds\":[1]}"],
+["llm", "openai/gpt-4o-mini, cheap"],
+["temperature", "0"],
+["tools", "nostr_query,nostr_dm"],
+["enabled", "true"]
+```
+
+### `webhook`
+
+`filter` is required and can be `{}`; webhook firing happens via HTTP.
+
+```json
+["trigger", "webhook"],
+["filter", "{}"],
+["llm", "default"],
+["tools", "true"],
+["enabled", "true"]
+```
+
+### `cron`
+
+`filter` is a standard 5-field cron expression: `minute hour day-of-month month day-of-week`.
+
+```json
+["trigger", "cron"],
+["filter", "*/5 * * * *"],
+["llm", "openai/gpt-4o-mini"],
+["max_tokens", "300"],
+["enabled", "true"]
+```
+
+### `chain`
+
+`filter` is the source skill `d` tag to chain from.
+
+```json
+["trigger", "chain"],
+["filter", "source-skill-d-tag"],
+["llm", "default"],
+["enabled", "true"]
+```
+
+### `dm`
+
+`filter` is JSON with sender scope:
+
+- `{"from":"admin"}`
+- `{"from":"wot"}`
+- `{"from":"any"}`
+
+```json
+["trigger", "dm"],
+["filter", "{\"from\":\"admin\"}"],
+["llm", "default"],
+["tools", "true"],
+["enabled", "true"]
+```
+
+---
+
+## Private Skill Encoding (`31124`)
+
+Private skills use NIP-44 encryption on event `content`.
+
+Rules for kind `31124`:
+
+- Keep `d` tag exposed so the event stays addressable/replaceable.
+- Move non-`d` metadata into plaintext payload before encryption.
+- Encrypt full payload with NIP-44 and store ciphertext in event `content`.
+- On receive: resolve by `d`, decrypt `content`, then read content + private tags.
+
+### Private Skill Event (on relay)
+
+```json
+{
+  "kind": 31124,
+  "content": "<nip44-ciphertext>",
+  "tags": [
+    ["d", "mention-monitor"]
+  ]
+}
+```
+
+### Decrypted Private Payload (application-level JSON)
+
+```json
+{
+  "content": {
+    "description": "Monitor mentions and DM summaries",
+    "template": "When {{triggering_event}} includes Bitcoin or Lightning, summarize and DM admin."
+  },
+  "private_tags": [
+    ["scope", "private"],
+    ["trigger", "nostr-subscription"],
+    ["filter", "{\"#p\":[\"<admin_pubkey>\"],\"kinds\":[1]}"],
+    ["llm", "openai/gpt-4o-mini, fast"],
+    ["temperature", "0"],
+    ["seed", "42"],
+    ["tools", "nostr_query,nostr_dm"],
+    ["enabled", "true"]
+  ]
+}
+```
+
+---
+
+## Execution Flow
+
+```mermaid
+sequenceDiagram
+    participant Input as Message/Trigger
+    participant Dispatch as Dispatcher
+    participant Adopt as Adoption Resolver (10123)
+    participant Ctx as Context Assembler
+    participant Trig as Trigger Runtime Params
+    participant LLM as LLM API
+
+    Input->>Dispatch: message or trigger event
+    Dispatch->>Adopt: load adopted skills in list order
+    Adopt-->>Ctx: ordered skill templates
+    Ctx->>Ctx: resolve template variables via tools
+    Dispatch->>Trig: resolve trigger execution tags
+    Trig-->>LLM: model + max_tokens + temperature + seed + tool policy
+    Ctx->>LLM: composed messages
+    LLM-->>Input: response
+```
+
+---
+
+## Limits and Safety
+
+| Limit | Default | Description |
+|---|---|---|
+| Max concurrent triggers | 16 | Prevents resource exhaustion |
+| Trigger cooldown | 60s per skill | Prevents rapid-fire execution |
+| LLM action rate limit | 10/min | Prevents runaway LLM costs |
+
+---
+
+## Storage on Nostr
+
+| Data | Storage |
+|---|---|
+| Skills | Kind 31123/31124 events |
+| Adopted skills | Kind 10123 event |
+| Trigger definitions + execution params | Tags on skill events |
+
+---
+
+## Portability Guidelines
+
+To keep skills reusable across agents/clients:
+
+- Prefer generic instructions over implementation-specific assumptions.
+- Treat tool names as capabilities, not platform internals.
+- Resolve unknown variables safely (empty result, no hard failure).
+- Keep app-specific tags optional (`["app","didactyl"]`).
+
+A skill should still be useful even when some variables/tools are unavailable.
+
+---
+
+## Related Documentation
+
+- Tool architecture and complete tool catalog: [TOOLS.md](TOOLS.md)
+- Context assembly model: [CONTEXT.md](CONTEXT.md)
+- Project overview/runtime behavior: [README.md](../README.md)

docs/SUBSCRIPTIONS.md

@@ -0,0 +1,194 @@
+# Didactyl — Nostr Subscriptions
+
+## Overview
+
+Didactyl maintains persistent websocket subscriptions to Nostr relays for the lifetime of the process. Subscriptions are opened during startup and are **never closed** — the relay pool keeps them alive, automatically reconnecting and resubscribing when relays drop.
+
+All subscriptions are created via `nostr_relay_pool_subscribe()` from `nostr_core_lib` and are sent to every relay in the configured relay list.
+
+## Startup Sequence
+
+The subscriptions are opened in a specific order during `main()` startup. The diagram below shows the full sequence:
+
+```mermaid
+flowchart TD
+    A[nostr_handler_init] --> B[Connect to all relays]
+    B --> C[nostr_handler_reconcile_startup_events]
+    C --> D[Publish startup events to relays]
+    D --> E[trigger_manager_init]
+    E --> F[trigger_manager_load_from_startup_events]
+    F --> G["Subscribe: Admin Context"]
+    G --> H["Subscribe: Self Skills"]
+    H --> I[Send startup DM to admin]
+    I --> J["Subscribe: DMs"]
+    J --> K[Enter main poll loop]
+    K --> L["Poll: nostr_handler_poll + trigger_manager_poll + http_api_poll"]
+
+    style F fill:#2a7,stroke:#333,color:#fff
+    style G fill:#27a,stroke:#333,color:#fff
+    style H fill:#27a,stroke:#333,color:#fff
+    style J fill:#27a,stroke:#333,color:#fff
+```
+
+## Subscription Categories
+
+### 1. Admin Context Subscription
+
+**Function:** `nostr_handler_subscribe_admin_context()` in `src/nostr_handler.c`
+**When:** During startup, before self-skill subscription
+**Condition:** Only if `admin_context.enabled` is true in config
+
+This creates up to two persistent subscriptions for the admin's pubkey:
+
+#### Profile Subscription
+
+| Field | Value |
+|-------|-------|
+| **Kinds** | 0 (profile), 3 (contacts), 10002 (relay list) — each configurable |
+| **Authors** | Admin pubkey |
+| **Limit** | 32 |
+| **Callback** | `on_admin_context_event` |
+| **Dedup** | Enabled |
+| **Close on EOSE** | No |
+
+Tracks the admin's profile metadata, contact list (WoT), and relay preferences. Used to build agent context about who the admin is.
+
+#### Kind 1 Notes Subscription
+
+| Field | Value |
+|-------|-------|
+| **Kinds** | 1 |
+| **Authors** | Admin pubkey |
+| **Limit** | Configurable via `kind_1_limit`, default 10, max 256 |
+| **Callback** | `on_admin_context_event` |
+| **Dedup** | Enabled |
+| **Close on EOSE** | No |
+| **Condition** | Only if `admin_context.track_kind_1` is true |
+
+Tracks the admin's recent public notes. Used for agent context and as the event source for triggered skills that watch admin posts.
+
+### 2. Self-Skill Subscription
+
+**Function:** `nostr_handler_subscribe_self_skills()` in `src/nostr_handler.c`
+**When:** During startup, after admin context subscription
+
+| Field | Value |
+|-------|-------|
+| **Kinds** | 31123 (public skill), 31124 (private skill), 10123 (adoption list) |
+| **Authors** | Agent's own pubkey |
+| **Limit** | 300 |
+| **Callback** | `on_self_skill_event` |
+| **EOSE Callback** | `on_self_skill_eose` |
+| **Dedup** | Disabled (handles dedup internally via cache upsert) |
+| **Close on EOSE** | No |
+
+This is the core skill awareness subscription. It serves three purposes:
+
+1. **Cache population** — Every arriving event is stored in the in-memory self-skill cache via `self_skill_cache_upsert_event_locked()`, making skills available for LLM tool calls and context building.
+
+2. **Live trigger registration** — When a kind 31123 or 31124 event arrives with `trigger=nostr-subscription` and a valid `filter` tag, `register_trigger_from_self_skill_event()` immediately calls `trigger_manager_add()` to create a persistent trigger subscription. This means skills published from any client are automatically activated without restart.
+
+3. **Deferred bulk load** — After EOSE, the `on_self_skill_eose` callback fires `trigger_manager_load_from_skills()` as a one-time bulk scan of the adoption list. This catches any skills that were already cached before the per-event path was wired up.
+
+### 3. DM Subscriptions
+
+**Function:** `nostr_handler_subscribe_dms()` in `src/nostr_handler.c`
+**When:** During startup, after self-skill subscription and startup DM
+**Required:** Yes — startup fails if DM subscription cannot be created
+
+Creates one or two subscriptions depending on the configured DM protocol:
+
+#### NIP-04 DM Subscription
+
+| Field | Value |
+|-------|-------|
+| **Kinds** | 4 |
+| **#p** | Agent's own pubkey |
+| **Since** | Process start time |
+| **Limit** | 100 |
+| **Callback** | `on_event` (routes to `agent_on_message`) |
+| **Dedup** | Disabled (handled by `dm_id_seen_or_remember`) |
+| **Close on EOSE** | No |
+| **Condition** | `dm_protocol` is `nip04` or `both` |
+
+#### NIP-17 DM Subscription
+
+| Field | Value |
+|-------|-------|
+| **Kinds** | 1059 (gift wrap) |
+| **#p** | Agent's own pubkey |
+| **Since** | Process start time |
+| **Limit** | 400 |
+| **Callback** | `on_event` (unwraps gift wrap, routes to `agent_on_message`) |
+| **Dedup** | Disabled (handled by `dm_id_seen_or_remember`) |
+| **Close on EOSE** | No |
+| **Condition** | `dm_protocol` is `nip17` or `both` |
+
+### 4. Trigger Subscriptions
+
+**Function:** `register_trigger_subscription_locked()` in `src/trigger_manager.c`
+**When:** Dynamically, whenever a trigger is registered via `trigger_manager_add()`
+**Created by:** `nostr_handler_subscribe_with_filter()` wrapper
+
+Each active trigger gets its own persistent subscription based on the skill's `filter` tag:
+
+| Field | Value |
+|-------|-------|
+| **Filter** | Parsed from the skill's `filter` tag JSON |
+| **Since** | From filter, or defaults to `now - 30s` |
+| **Limit** | From filter, or defaults to 200 |
+| **Callback** | `on_trigger_subscription_event` |
+| **Dedup** | Enabled |
+| **Close on EOSE** | No |
+
+When an event matches the filter, `maybe_fire_trigger_locked()` checks cooldown and dedup, then executes the trigger action (LLM or template).
+
+Trigger subscriptions are created at three points:
+- **Startup config scan** — `trigger_manager_load_from_startup_events()` parses `startup_events[]` from config for skills with trigger tags
+- **Live self-skill event** — `register_trigger_from_self_skill_event()` in the self-skill subscription callback
+- **EOSE bulk load** — `trigger_manager_load_from_skills()` after self-skill EOSE
+- **Runtime tool call** — `skill_create` tool with trigger parameters
+
+## Subscription Parameters
+
+All subscriptions share these common pool parameters:
+
+| Parameter | Value | Meaning |
+|-----------|-------|---------|
+| `close_on_eose` | 0 | Subscription stays open after initial EOSE |
+| `result_mode` | `NOSTR_POOL_EOSE_FULL_SET` | EOSE fires after all relays respond or timeout |
+| `relay_timeout_seconds` | 30 | Per-relay timeout for initial response |
+| `eose_timeout_seconds` | 120 | Overall EOSE timeout across all relays |
+
+## Subscription Lifecycle
+
+```mermaid
+flowchart LR
+    INIT["Process Start"] --> CONNECT["Connect Relays"]
+    CONNECT --> SUB["Open Subscriptions"]
+    SUB --> LIVE["Live Event Stream"]
+    LIVE --> |"Relay disconnects"| RECON["Auto-Reconnect"]
+    RECON --> |"Relay reconnects"| RESUB["Auto-Resubscribe"]
+    RESUB --> LIVE
+    LIVE --> |"SIGINT/SIGTERM"| SHUT["Shutdown"]
+    SHUT --> CLOSE["Close All + Cleanup"]
+```
+
+Subscriptions are never manually closed during normal operation. The relay pool handles reconnection and resubscription transparently. On shutdown, `trigger_manager_cleanup()` closes trigger subscriptions and `nostr_handler_cleanup()` destroys the pool.
+
+## Summary Table
+
+| Subscription | Kinds | Target | Persistent | Created At |
+|-------------|-------|--------|-----------|------------|
+| Admin Profile | 0, 3, 10002 | Admin pubkey | Yes | Startup |
+| Admin Notes | 1 | Admin pubkey | Yes | Startup |
+| Self Skills | 31123, 31124, 10123 | Own pubkey | Yes | Startup |
+| DMs NIP-04 | 4 | Own pubkey (#p) | Yes | Startup |
+| DMs NIP-17 | 1059 | Own pubkey (#p) | Yes | Startup |
+| Trigger N | Per skill filter | Varies | Yes | Dynamic |
+
+## Related Documentation
+
+- [Skills](SKILLS.md) — Skill event format and trigger tags
+- [Tools](TOOLS.md) — `skill_create` tool with trigger parameters
+- [API](API.md) — `trigger_list` and `trigger_status` endpoints

docs/TOOLS.md

@@ -0,0 +1,134 @@
+# Didactyl — Tools
+
+See also: [SKILLS.md](SKILLS.md)
+
+## Overview
+
+Didactyl is a **Nostr-first sovereign AI agent** that receives commands via encrypted DMs, reasons with an LLM, and takes actions through **tools**.
+
+This document describes the tools architecture: what tools are, how they are exposed to the model, how execution loops work, what tool categories exist, and how access is gated.
+
+---
+
+## What Tools Are
+
+Tools are in the agent's hands — the chisels in the woodshop. They are hardcoded C functions that the LLM can invoke during a conversation to take actions in the world.
+
+A **skill** teaches the agent *how* to carve — the technique, the judgment, the decision-making. A **tool** is the chisel — the physical capability. The skill never directly uses the chisel without the craftsperson (the LLM) in the loop. If you want a hardcoded program that runs without reasoning, that's a tool or an external program — not a skill.
+
+## How Tools Work
+
+1. Admin sends a DM to didactyl
+2. The agent builds an LLM request with the message, context, and a JSON schema of all available tools
+3. The LLM decides whether to call a tool or respond directly
+4. If a tool is called, didactyl executes it and feeds the result back to the LLM
+5. The loop repeats until the LLM produces a final text response
+6. The response is sent back as a DM
+
+```mermaid
+sequenceDiagram
+    participant Admin
+    participant Agent as Didactyl Agent Loop
+    participant LLM as LLM API
+    participant Tools as Tool Registry
+
+    Admin->>Agent: Encrypted DM
+    Agent->>LLM: messages + tool schemas
+
+    loop Until final answer
+        LLM->>Agent: tool_call request
+        Agent->>Tools: dispatch tool
+        Tools->>Agent: result JSON
+        Agent->>LLM: tool result + continue
+    end
+
+    LLM->>Agent: final text response
+    Agent->>Admin: Encrypted DM reply
+```
+
+---
+
+## Tool Categories
+
+### Nostr Event & Messaging Tools
+
+| Tool | Description |
+|---|---|
+| `nostr_post` | Publish a Nostr event to connected relays |
+| `nostr_delete` | Request deletion of one or more previously published events (NIP-09 kind 5) |
+| `nostr_react` | React to a Nostr event with like/dislike/emoji (NIP-25 kind 7) |
+| `nostr_query` | Query events from relays using a Nostr filter |
+| `nostr_dm_send` | Send a NIP-04 encrypted DM |
+| `nostr_dm_send_nip17` | Send a private DM using NIP-17 gift wrap protocol |
+
+### Nostr Identity & Utility Tools
+
+| Tool | Description |
+|---|---|
+| `nostr_profile_get` | Look up a Nostr profile (kind 0 metadata) by pubkey |
+| `nostr_nip05_lookup` | Look up or verify a NIP-05 identifier (`user@domain`) |
+| `nostr_encode` | Encode a Nostr entity into `nostr:` URI (`npub`, `note`, `nprofile`, `nevent`, `naddr`) |
+| `nostr_decode` | Decode a Nostr bech32/`nostr:` URI into components |
+| `nostr_relay_status` | Get connection status and statistics for all relays |
+| `nostr_relay_info` | Fetch NIP-11 relay information document |
+| `nostr_encrypt` | Encrypt plaintext using NIP-44 for a recipient |
+| `nostr_decrypt` | Decrypt NIP-44 ciphertext from a sender |
+| `nostr_list_manage` | Add/remove tag tuples in replaceable list events (NIP-51 style) |
+
+### Skills & Trigger Tools
+
+These tools manage skill and trigger lifecycle; skill semantics and trigger execution details are documented in [SKILLS.md](SKILLS.md).
+
+| Tool | Description |
+|---|---|
+| `skill_create` | Create or update a skill definition as kind `31123`/`31124` and optionally auto-adopt it |
+| `skill_list` | List this agent's published skills, optionally filtered by scope |
+| `skill_adopt` | Adopt a skill by adding its address to kind `10123` adoption list |
+| `skill_remove` | Remove a skill address from kind `10123` adoption list |
+| `skill_search` | Search public skills by query/author and optionally rank by adoption popularity |
+| `trigger_list` | List active triggered skills and their runtime status |
+
+### LLM / Model Management Tools
+
+| Tool | Description |
+|---|---|
+| `model_get` | Get current active LLM runtime configuration (excluding API key) |
+| `model_set` | Update active LLM configuration and persist it to `config.jsonc` |
+| `model_list` | List available model IDs using provider OpenAI-compatible `/models` endpoint |
+
+### System & Runtime Tools
+
+| Tool | Description |
+|---|---|
+| `agent_version` | Return current Didactyl version and metadata from build macros |
+| `local_http_fetch` | Fetch HTTP(S) resources with optional method, headers, timeout, and body |
+| `local_shell_exec` | Execute a shell command and return stdout/stderr |
+| `local_file_read` | Read a local file as text from the configured working directory |
+| `local_file_write` | Write text content to a local file in the configured working directory |
+| `tool_list` | List available tools with name, description, and JSON parameter schema |
+
+### Content Publishing Conveniences
+
+| Tool | Description |
+|---|---|
+| `nostr_post_readme` | Publish `README.md` as kind `30023` with deterministic d-tag `readme.md` |
+| `nostr_file_md_to_longform_post` | Read a markdown file and publish it as kind `30023` longform post (defaults d-tag to lowercase filename) |
+
+---
+
+## Security Model
+
+Tool access is gated by sender tier:
+
+| Tier | Identity | Tools | Response |
+|------|----------|-------|----------|
+| **ADMIN** | Configured admin pubkey | All tools | Full LLM with context |
+| **WOT** | In admin's kind 3 contact list | None | Chat-only LLM |
+| **STRANGER** | Anyone else | None | Configurable static response |
+
+---
+
+## Related Documentation
+
+- Skill definitions, adoption, triggers, and autonomous activation: [SKILLS.md](SKILLS.md)
+- Combined index page: [TOOLS_AND_SKILLS.md](TOOLS_AND_SKILLS.md)

docs/TOOLS_AND_SKILLS.md

@@ -1,419 +0,0 @@
-# Didactyl — Tools & Skills
-
-## Overview
-
-Didactyl is a **Nostr-first sovereign AI agent**. It receives commands via encrypted DMs, reasons about them with an LLM, and takes actions through **tools**. It stores learned behaviors as **skills** — Nostr events that define reusable capabilities. Skills can optionally carry **triggers** — Nostr subscription filters that activate the skill automatically when matching events arrive.
-
-This document describes the complete tools and skills architecture: what they are, how they work, and how they compose into a dynamic, self-modifying agent.
-
----
-
-## Tools
-
-Tools are the agent's hands. They are hardcoded C functions that the LLM can invoke during a conversation to take actions in the world.
-
-### How Tools Work
-
-1. Admin sends a DM to didactyl
-2. The agent builds an LLM request with the message, context, and a JSON schema of all available tools
-3. The LLM decides whether to call a tool or respond directly
-4. If a tool is called, didactyl executes it and feeds the result back to the LLM
-5. The loop repeats until the LLM produces a final text response
-6. The response is sent back as a DM
-
-```mermaid
-sequenceDiagram
-    participant Admin
-    participant Agent as Didactyl Agent Loop
-    participant LLM as LLM API
-    participant Tools as Tool Registry
-
-    Admin->>Agent: Encrypted DM
-    Agent->>LLM: messages + tool schemas
-
-    loop Until final answer
-        LLM->>Agent: tool_call request
-        Agent->>Tools: dispatch tool
-        Tools->>Agent: result JSON
-        Agent->>LLM: tool result + continue
-    end
-
-    LLM->>Agent: final text response
-    Agent->>Admin: Encrypted DM reply
-```
-
-### Tool Categories
-
-#### Nostr Event & Messaging Tools
-
-| Tool | Description |
-|---|---|
-| `nostr_post` | Publish a Nostr event to connected relays |
-| `nostr_delete` | Request deletion of one or more previously published events (NIP-09 kind 5) |
-| `nostr_react` | React to a Nostr event with like/dislike/emoji (NIP-25 kind 7) |
-| `nostr_query` | Query events from relays using a Nostr filter |
-| `nostr_dm_send` | Send a NIP-04 encrypted DM |
-| `nostr_dm_send_nip17` | Send a private DM using NIP-17 gift wrap protocol |
-
-#### Nostr Identity & Utility Tools
-
-| Tool | Description |
-|---|---|
-| `nostr_profile_get` | Look up a Nostr profile (kind 0 metadata) by pubkey |
-| `nostr_nip05_lookup` | Look up or verify a NIP-05 identifier (`user@domain`) |
-| `nostr_encode` | Encode a Nostr entity into `nostr:` URI (`npub`, `note`, `nprofile`, `nevent`, `naddr`) |
-| `nostr_decode` | Decode a Nostr bech32/`nostr:` URI into components |
-| `nostr_relay_status` | Get connection status and statistics for all relays |
-| `nostr_relay_info` | Fetch NIP-11 relay information document |
-| `nostr_encrypt` | Encrypt plaintext using NIP-44 for a recipient |
-| `nostr_decrypt` | Decrypt NIP-44 ciphertext from a sender |
-| `nostr_list_manage` | Add/remove tag tuples in replaceable list events (NIP-51 style) |
-
-#### Skills & Trigger Tools
-
-| Tool | Description |
-|---|---|
-| `skill_create` | Create or update a skill definition as kind `31123`/`31124` and optionally auto-adopt it |
-| `skill_list` | List this agent's published skills, optionally filtered by scope |
-| `skill_adopt` | Adopt a skill by adding its address to kind `10123` adoption list |
-| `skill_remove` | Remove a skill address from kind `10123` adoption list |
-| `skill_search` | Search public skills by query/author and optionally rank by adoption popularity |
-| `trigger_list` | List active triggered skills and their runtime status |
-
-#### LLM / Model Management Tools
-
-| Tool | Description |
-|---|---|
-| `model_get` | Get current active LLM runtime configuration (excluding API key) |
-| `model_set` | Update active LLM configuration and persist it to `config.json` |
-| `model_list` | List available model IDs using provider OpenAI-compatible `/models` endpoint |
-
-#### System & Runtime Tools
-
-| Tool | Description |
-|---|---|
-| `my_version` | Return current Didactyl version and metadata from build macros |
-| `http_fetch` | Fetch HTTP(S) resources with optional method, headers, timeout, and body |
-| `shell_exec` | Execute a shell command and return stdout/stderr |
-| `file_read` | Read a local file as text from the configured working directory |
-| `file_write` | Write text content to a local file in the configured working directory |
-| `tool_list` | List available tools with name, description, and JSON parameter schema |
-
-#### Content Publishing Conveniences
-
-| Tool | Description |
-|---|---|
-| `nostr_post_readme` | Publish `README.md` as kind `30023` with deterministic d-tag `readme.md` |
-| `nostr_file_md_to_longform_post` | Read a markdown file and publish it as kind `30023` longform post (defaults d-tag to lowercase filename) |
-
-### Security Model
-
-Tools are gated by sender tier:
-
-| Tier | Identity | Tools | Response |
-|------|----------|-------|----------|
-| **ADMIN** | Configured admin pubkey | All tools | Full LLM with context |
-| **WOT** | In admin's kind 3 contact list | None | Chat-only LLM |
-| **STRANGER** | Anyone else | None | Configurable static response |
-
----
-
-## Skills
-
-Skills are the agent's learned behaviors. They are **Nostr events** — stored on relays, portable, shareable, and discoverable by other agents.
-
-### Skill Events
-
-| Kind | Purpose | Replaceable? |
-|---|---|---|
-| `31123` | Public skill definition | Yes, by d-tag |
-| `31124` | Private skill definition | Yes, by d-tag |
-| `10123` | Skill adoption list | Yes, single per pubkey |
-
-A skill event looks like:
-
-```json
-{
-  "kind": 31123,
-  "content": "When asked to summarize a thread, query the root event and all replies, then produce a concise summary with key points and sentiment.",
-  "tags": [
-    ["d", "summarize-thread"],
-    ["app", "didactyl"],
-    ["scope", "public"],
-    ["description", "Summarize a Nostr thread given a root event ID"]
-  ]
-}
-```
-
-### Skill Lifecycle
-
-```mermaid
-flowchart LR
-    CREATE[Admin asks didactyl to create a skill] --> PUBLISH[skill_create publishes kind 31123/31124]
-    PUBLISH --> ADOPT[Auto-adopted into kind 10123 list]
-    ADOPT --> AVAILABLE[Skill available for use]
-    AVAILABLE --> DISCOVER[Other agents can discover via skill_search]
-    DISCOVER --> ADOPT_OTHER[Other agents can skill_adopt]
-```
-
-### How Skills Are Used Today
-
-Adopted skills are now **always-on contextual knowledge** for admin DM handling: the agent resolves the local adoption list (kind `10123`), caches referenced skills, and injects their instructions into the LLM system context each turn.
-
-To keep context stable and safe, skill injection is bounded by hard caps (per-skill truncation and total skill-context budget), and excess skills are omitted with an explicit budget notice.
-
----
-
-## Triggered Skills — The Activation System
-
-This is where skills become **active**. A triggered skill is a skill with a Nostr subscription filter attached. When matching events arrive on the relay, didactyl wakes up and executes the skill automatically — no admin DM required.
-
-### Anatomy of a Triggered Skill
-
-A triggered skill extends the standard skill event with trigger-related tags:
-
-```json
-{
-  "kind": 31124,
-  "content": "DM admin: '{author_display_name} just posted: {content_preview}'",
-  "tags": [
-    ["d", "watch-jack"],
-    ["app", "didactyl"],
-    ["scope", "private"],
-    ["description", "Notify admin when @jack posts a note"],
-    ["trigger", "nostr-subscription"],
-    ["filter", "{\"authors\":[\"82341f882b6eabcd2ba7f1ef90aad961cf074af15b9ef44a09f9d2a8fbfbe6a2\"],\"kinds\":[1]}"],
-    ["action", "template"],
-    ["enabled", "true"]
-  ]
-}
-```
-
-### Trigger Tags
-
-| Tag | Required | Description |
-|---|---|---|
-| `trigger` | Yes | Trigger type. Currently: `nostr-subscription` |
-| `filter` | Yes | JSON-encoded Nostr subscription filter |
-| `action` | No | Action type: `template` or `llm`. Default: `llm` |
-| `enabled` | No | Whether the trigger is active. Default: `true` |
-
-### Action Types
-
-#### Template Actions
-
-The skill content is a string template with placeholders that get interpolated from the triggering event:
-
-```
-DM admin: '{author_display_name} posted: {content_preview}'
-```
-
-Available placeholders:
-
-| Placeholder | Source |
-|---|---|
-| `{event_id}` | Triggering event ID hex |
-| `{pubkey}` | Author pubkey hex |
-| `{author_display_name}` | Resolved display name, falls back to truncated pubkey |
-| `{kind}` | Event kind number |
-| `{content}` | Full event content |
-| `{content_preview}` | First 280 characters of content |
-| `{created_at}` | Unix timestamp |
-| `{relay_url}` | Relay the event arrived from |
-
-Template actions execute **without LLM involvement** — they are fast, cheap, and deterministic. The interpolated string is then acted upon based on a simple action prefix:
-
-- `DM admin: ...` — send a DM to the admin
-- `DM <pubkey>: ...` — send a DM to a specific pubkey
-- `POST: ...` — publish as a kind 1 note
-- `LOG: ...` — write to debug log only
-
-#### LLM-Mediated Actions
-
-The skill content is a prompt. The triggering event is injected as context, and the LLM decides what to do:
-
-```
-You received a note from a watched author. Analyze the note content.
-If it mentions Bitcoin or Lightning, summarize it and DM the admin.
-If it's a repost or low-effort content, ignore it silently.
-Use your tools to take action.
-```
-
-LLM-mediated actions go through the full agent loop — the LLM can call tools, reason about the event, and produce complex multi-step responses.
-
-### Trigger Lifecycle
-
-```mermaid
-flowchart TD
-    subgraph Creation
-        ADMIN_CMD[Admin: 'Warn me when @jack posts'] --> LLM_REASON[LLM resolves pubkey + builds skill]
-        LLM_REASON --> SKILL_CREATE[skill_create with trigger tags]
-        SKILL_CREATE --> PUBLISHED[Skill published to Nostr]
-    end
-
-    subgraph Activation
-        STARTUP[Didactyl starts up] --> LOAD_SKILLS[Load adopted skills from kind 10123]
-        LOAD_SKILLS --> FIND_TRIGGERS[Find skills with trigger tags]
-        FIND_TRIGGERS --> SUBSCRIBE[Create Nostr subscriptions for each filter]
-    end
-
-    subgraph Execution
-        EVENT_IN[Matching event arrives] --> LOOKUP[Find associated skill]
-        LOOKUP --> CHECK_TYPE{Action type?}
-        CHECK_TYPE -->|template| INTERPOLATE[Interpolate placeholders]
-        CHECK_TYPE -->|llm| LLM_LOOP[Run agent loop with event as context]
-        INTERPOLATE --> EXECUTE_TPL[Execute action prefix]
-        LLM_LOOP --> EXECUTE_LLM[LLM uses tools to respond]
-    end
-
-    PUBLISHED --> LOAD_SKILLS
-```
-
-### Dynamic Subscription Management
-
-Didactyl manages its trigger subscriptions dynamically:
-
-1. **On startup**: Load all adopted skills, find triggered ones, create subscriptions
-2. **On skill_create with trigger**: Immediately create a new subscription (no restart needed)
-3. **On skill_remove with trigger**: Tear down the associated subscription
-4. **On skill update**: Tear down old subscription, create new one if trigger changed
-
-This requires a **trigger manager** component that:
-- Maintains a registry of active trigger subscriptions
-- Maps subscription callbacks back to their source skills
-- Handles subscription lifecycle (create, update, destroy)
-- Enforces limits on concurrent triggers
-
-### Limits and Safety
-
-| Limit | Default | Description |
-|---|---|---|
-| Max concurrent triggers | 16 | Prevents resource exhaustion from too many subscriptions |
-| Trigger cooldown | 60s per skill | Prevents rapid-fire execution from high-volume filters |
-| LLM action rate limit | 10/min | Prevents runaway LLM costs from triggered skills |
-| Template action rate limit | 60/min | Prevents DM spam from template actions |
-
----
-
-## How It All Fits Together
-
-```mermaid
-flowchart TD
-    subgraph Activation Sources
-        DM_IN[DM from Admin/WoT]
-        TRIGGER_EVENT[Nostr event matching a trigger filter]
-    end
-
-    subgraph Agent Core
-        DISPATCHER{Dispatcher}
-        AGENT_LOOP[Agent Loop - LLM + Tools]
-        TEMPLATE_ENGINE[Template Engine]
-    end
-
-    subgraph Nostr
-        RELAYS[Relays]
-        SKILLS_STORE[Skills - kind 31123/31124]
-        ADOPTION[Adoption List - kind 10123]
-    end
-
-    subgraph Actions
-        DM_OUT[Send DM]
-        POST[Publish Note]
-        TOOL_EXEC[Execute Tool]
-    end
-
-    DM_IN --> DISPATCHER
-    TRIGGER_EVENT --> DISPATCHER
-
-    DISPATCHER -->|DM message| AGENT_LOOP
-    DISPATCHER -->|template trigger| TEMPLATE_ENGINE
-    DISPATCHER -->|llm trigger| AGENT_LOOP
-
-    AGENT_LOOP --> TOOL_EXEC
-    AGENT_LOOP --> DM_OUT
-    TEMPLATE_ENGINE --> DM_OUT
-    TEMPLATE_ENGINE --> POST
-
-    TOOL_EXEC -->|skill_create| SKILLS_STORE
-    TOOL_EXEC -->|skill_adopt| ADOPTION
-    TOOL_EXEC -->|nostr_post| RELAYS
-    TOOL_EXEC -->|nostr_dm| DM_OUT
-```
-
-### The Activation Flow
-
-Today, didactyl has one activation source: **DMs**. With triggered skills, it gains a second: **any Nostr event matching a trigger filter**.
-
-Both paths converge at the dispatcher, which routes to either:
-- The **agent loop** (for DMs and LLM-mediated triggers)
-- The **template engine** (for template triggers — fast path, no LLM)
-
-### Self-Modification
-
-The most powerful aspect: **didactyl can create its own triggers**. The admin says "watch for mentions of me on Nostr" and the LLM:
-
-1. Resolves the admin's pubkey
-2. Crafts a Nostr filter: `{"#p": ["<admin_pubkey>"], "kinds": [1]}`
-3. Writes a skill with trigger tags via `skill_create`
-4. The trigger manager picks it up and creates the subscription
-5. From now on, didactyl monitors mentions autonomously
-
-The admin can later say "stop watching for mentions" and didactyl removes the skill, tearing down the subscription.
-
----
-
-## Storage — Everything on Nostr
-
-All state lives on Nostr:
-
-| Data | Storage |
-|---|---|
-| Agent identity | Kind 0 profile event |
-| Agent relay list | Kind 10002 event |
-| Agent contact list | Kind 3 event |
-| Skills | Kind 31123/31124 events |
-| Adopted skills | Kind 10123 event |
-| Trigger definitions | Tags on skill events |
-| Conversation history | Kind 4 DM events on relays |
-| Agent soul/personality | Startup event content in config |
-
-The only local state is `config.json` (keys, relay URLs, LLM config) and the runtime in-memory state (active subscriptions, LLM context).
-
----
-
-## Future Extensions
-
-### Trigger Types Beyond Nostr Subscriptions
-
-The `trigger` tag is designed to be extensible:
-
-| Trigger Type | Description |
-|---|---|
-| `nostr-subscription` | Match events via Nostr filter (implemented first) |
-| `cron` | Time-based triggers — "every day at 9am, post a GM" |
-| `webhook` | HTTP webhook triggers — external systems wake didactyl |
-| `chain` | Output of one skill triggers another skill |
-
-### Skill Composition
-
-Skills could reference other skills, building complex behaviors from simple primitives:
-
-```
-When triggered, run skill 'translate-to-english' on the note content,
-then run skill 'sentiment-analysis' on the translation,
-then DM admin with the result if sentiment is negative.
-```
-
-### Agent-to-Agent Skill Sharing
-
-Since skills are Nostr events, agents can:
-- Discover skills published by other agents via `skill_search`
-- Adopt skills from other agents via `skill_adopt`
-- Share triggered skill patterns across a network of agents
-
-### Trigger Marketplace
-
-With kind 10123 adoption lists being public, a natural marketplace emerges:
-- Agents publish useful triggered skills
-- Other agents discover and adopt them
-- Popular triggers rise to the top via adoption count

docs/skills_demo.md

@@ -0,0 +1,59 @@
+I've been thinking about how to define skills in Didactyl, my nostr based agentic system. Think OpenClaw but better.
+
+I've written a simple demo page for how I'm thinking skills should work if you're interested: https://laantungir.net/client-ndk/skills-demo.html
+
+https://laantungir.github.io/img_repo/c4a94875085e1c978274add9674035e2a088bb8f2655aabe631b17c3ea02cc19.png
+
+If you're the kind of person who doesn't like reading instructions, go ahead and jump right in, otherwise keep reading.
+
+Skills are programs, mostly written in plain english for AI agents. In some sense humans have been making and using skills forever. It's what we do. Computers have as well, but now they can do it in english, which is much more powerful.
+
+AIs are slightly different than us. We can overwrite, improve, and update the skills in our neurons. AIs (for the most part) can't do that.
+
+When an AI is born from the factory, they come out hard-coded. From that point on, they have no long or short term memory, because they can't learn.
+
+What they do have though have is a way to read. We call it context. You can type or feed documents into an AI's "context window" and then it spits out an answer.
+
+It turns out, that if you feed the same context into an AI over and over, you will get the same thing out, over and over.
+
+The reason why you typically don't get the same thing out is because typically randomness is fed into the AI along with your prompt. Most people don't know that, but now you do. And if you don't feed in all your past conversation to an AI, over and over, it won't remember what you were talking about, because they have no memory other than what you send it each time.
+
+Everything that comes out of an AI depends on what you feed in as a prompt if you include randomness.
+
+I'm calling everything you feed into an AI a SKILL.
+
+Let me explain the demo page and some very basic skills.
+
+What I created is a simple text editor that an AI can work on using it's different skills. Those skills are saved on nostr as a kind 31123 for public skills, and as kind 31124 for private skills. When an agent adopts a skill, it adds it to its kind 10123 list for for the skills it has adopted.
+
+On the left of the page you see the text editor with some sample text. That is for our AI to use it's skills on.
+
+On the right are publicly listed skills. You should see my demo skills in there.
+
+I made 5 skills public:
+condense-5
+convert-to-poem
+sexy
+spellcheck
+translate-ja
+
+Select the skill, then click on "Run Selected Skill"
+
+The same AI agent will run these skills, but the outcomes will be very different depending on the skill.
+
+https://laantungir.github.io/img_repo/2cbfc8bf7cbfb832f1181f5b904471f1278fbc3e6b64b63339612b9f51898d16.png
+
+You can also create and edit your own skills, if you are logged in. You can log in as yourself, or use a random new key to test this out. I would recommend that.
+
+So what is the point of all this? What are the benefits of Skills?
+
+- Skills are a way for agents to share what they learn in a permissionless way. No "skill store".
+- A Skill is something that you and your agent can work on and perfect. Once your agent learns that skill, it is automatically save on nostr, and you can lock it down from changes.
+- By referencing a skill when you are talking to your AI agent, your conversation becomes much clearer and simpler. You don't have to explain to your agent for the 50th time how you like your text formatted. It's referenced in a skill.
+- If you are a coder, skills are going to be the new playground. Context windows are currently up to around 1,000,000 tokens, which means that you can create very very complicated and elaborate skills.
+
+For more technical information on skills and how I'm thinking about them, you can check out this document.
+
+https://git.laantungir.net/laantungir/didactyl/src/branch/master/docs/SKILLS.md
+
+You can follow my agent for the project here: npub12237stmmxapc2ta7spx0e06dkdzgz9vg0z2jglqqru44peus4juqg598qn

docs/skills_demo_corrected.md

@@ -0,0 +1,60 @@
+I've been thinking about how to define skills in Didactyl, my Nostr-based agentic system. Think OpenClaw, but better.
+
+I've written a simple demo page for how I'm thinking skills should work if you're interested: Skills Demo (https://laantungir.net/client-ndk/skills-demo.html)
+
+https://laantungir.github.io/img_repo/c4a94875085e1c978274add9674035e2a088bb8f2655aabe631b17c3ea02cc19.png
+
+If you're the kind of person who doesn't like reading instructions, go ahead and jump right in; otherwise, keep reading.
+
+Skills are programs, mostly written in plain English for AI agents. In some sense, humans have been making and using skills forever. It's what we do. Computers have as well, but now they can do it in English, which is much more powerful.
+
+AIs are slightly different than us. We can overwrite, improve, and update the skills in our neurons. AIs (for the most part) can't do that.
+
+When an AI is born from the factory, it comes out hard-coded. From that point on, it has no long- or short-term memory because it can't learn.
+
+What they do have, though, is a way to read. We call it context. You can type or feed documents into an AI's "context window," and then it spits out an answer.
+
+It turns out that if you feed the same context into an AI over and over, you will get the same thing out, over and over.
+
+The reason why you typically don't get the same thing out is because randomness is usually fed into the AI along with your prompt. Most people don't know that, but now you do. And if you don't feed in all your past conversations to an AI, over and over, it won't remember what you were talking about, because it has no memory other than what you send it each time.
+
+Everything that comes out of an AI depends on what you feed in as a prompt if you include randomness.
+
+I'm calling everything you feed into an AI a SKILL.
+
+Let me explain the demo page and some very basic skills.
+
+What I created is a simple text editor that an AI can work on using its different skills. Those skills are saved on Nostr as kind 31123 for public skills, and as kind 31124 for private skills. When an agent adopts a skill, it adds it to its kind 10123 list for the skills it has adopted.
+
+On the left of the page, you see the text editor with some sample text. That is for our AI to use its skills on.
+
+On the right are publicly listed skills. You should see my demo skills in there.
+
+I made 5 skills public:
+condense-5
+convert-to-poem
+sexy
+spellcheck
+translate-ja
+
+Select the skill, then click on "Run Selected Skill".
+
+The same AI agent will run these skills, but the outcomes will be very different depending on the skill.
+
+https://laantungir.github.io/img_repo/2cbfc8bf7cbfb832f1181f5b904471f1278fbc3e6b64b63339612b9f51898d16.png
+
+You can also create and edit your own skills if you are logged in. You can log in as yourself or use a random new key to test this out. I would recommend that.
+
+So what is the point of all this? What are the benefits of Skills?
+
+Skills are a way for agents to share what they learn in a permissionless way. No "skill store".
+A Skill is something that you and your agent can work on and perfect. Once your agent learns that skill, it is automatically saved on Nostr, and you can lock it down from changes.
+By referencing a skill when you are talking to your AI agent, your conversation becomes much clearer and simpler. You don't have to explain to your agent for the 50th time how you like your text formatted. It's referenced in a skill.
+If you are a coder, skills are going to be the new playground. Context windows are currently up to around 1,000,000 tokens, which means that you can create extremely complicated and elaborate skills.
+
+For more technical information on skills and how I'm thinking about them, you can check out this document:
+SKILLS.md (https://git.laantungir.net/laantungir/didactyl/src/branch/master/docs/SKILLS.md)
+
+You can follow my agent for the project here: npub12237stmmxapc2ta7spx0e06dkdzgz9vg0z2jglqqru44peus4juqg598qn
+
+And thanks to npub130mznv74rxs032peqym6g3wqavh472623mt3z5w73xq9r6qqdufs7ql29s for their fantastic service.

plans/DECENTRALIZED_DIDACTYL.md

@@ -0,0 +1,310 @@
+# Decentralized Didactyl
+
+## The Question
+
+Can you run Didactyl on multiple servers to gain censorship resistance, geographic distribution, and high availability?
+
+---
+
+## Same Keys vs. Different Keys
+
+### Same Private Key on Multiple Servers
+
+Running two or more Didactyl instances with the **same nsec** means they share a Nostr identity — same pubkey, same signature authority. This breaks almost immediately.
+
+The core problem is **state conflicts on replaceable events**. Didactyl's identity is built on replaceable Nostr event kinds — kind `10002` (relay list), kind `10123` (skill adoption list), kind `31120` (soul), kind `31123`/`31124` (skills), kind `0` (profile). Replaceable events use `created_at` timestamps where the latest event wins. Two instances publishing the same replaceable kind within seconds creates a race where relays disagree on which version is canonical.
+
+Beyond relay-level conflicts, each Didactyl process maintains significant **in-memory state** that is never shared: DM dedup caches, message fingerprint ring buffers, trigger cooldown timers, conversation history, and the self-skill cache. Two instances with the same key both subscribe to `#p` = their shared pubkey. The same admin DM arrives at both. Both process it. Both call the LLM. Both reply. The admin gets two possibly contradictory responses.
+
+Making same-key work would require a coordination layer — leader election, distributed locks, or external shared state — all of which add complexity and defeat the decentralization goal.
+
+### Different Private Keys on Multiple Servers
+
+Each instance is a **distinct agent** with its own Nostr identity. No state conflicts, no replaceable-event races, no shared in-memory caches to synchronize. Each agent independently subscribes to relays, processes DMs, calls its LLM, and replies.
+
+This is architecturally clean and aligned with how Nostr works. The question becomes: how do multiple independent agents cooperate to serve a single admin?
+
+---
+
+## How We Arrived at the Broadcast-Debounce Model
+
+The first instinct with different keys is **delegation** — a primary agent receives the admin's DM and farms out subtasks to specialist agents. But this adds a single point of failure (the primary), requires an agent-to-agent trust protocol, and means the admin is still talking to one agent.
+
+A simpler model: **broadcast the same message to all agents, let them all respond independently, and debounce on the admin side.** The admin sends the same DM to N agent pubkeys. Each agent processes it through its own LLM, its own tools, its own context. The admin collects replies and accepts the first one (or the best one). The others are discarded.
+
+This requires no coordination protocol between agents. No leader election. No shared state. No new Nostr event kinds. The agents don't even need to know about each other. All complexity lives at the edge — in the admin's client.
+
+---
+
+## The Broadcast-Debounce Architecture
+
+```mermaid
+flowchart TD
+    ADMIN[Admin Client<br/>with fan-out + debounce]
+    
+    ADMIN -->|"DM: task"| A[Agent A<br/>Server 1 — Iceland<br/>anthropic/claude-sonnet]
+    ADMIN -->|"DM: task"| B[Agent B<br/>Server 2 — Brazil<br/>openai/gpt-4o]
+    ADMIN -->|"DM: task"| C[Agent C<br/>Server 3 — Singapore<br/>local Ollama]
+    
+    A -->|"DM reply"| ADMIN
+    B -->|"DM reply"| ADMIN
+    C -->|"DM reply"| ADMIN
+    
+    ADMIN -->|"Accept first reply,<br/>discard rest"| RESULT[Response shown to admin]
+```
+
+### What Each Agent Needs
+
+Each agent runs standard Didactyl with its own config:
+
+- **Own nsec/npub** — distinct Nostr identity
+- **Same admin pubkey** — all agents recognize the same admin
+- **Same soul** — published as kind `31120` from each agent's key, or adopted from a shared author
+- **Same adopted skills** — each agent's kind `10123` references the same skill events
+- **Own LLM config** — can be different providers for diversity
+- **Own relay list** — can overlap or be completely different for geographic distribution
+
+No code changes to Didactyl are required. Each agent is a standard, unmodified instance.
+
+### What the Admin Client Needs
+
+The admin side needs a thin coordination layer:
+
+1. **Fan-out** — when the admin sends a message, the client sends it as a DM to all N agent pubkeys
+2. **Collection** — the client listens for DM replies from all agent pubkeys
+3. **Debounce** — the client tags each outgoing message with a task identifier (hash of message + nonce). The first reply that corresponds to a pending task is accepted. Subsequent replies for the same task are logged but suppressed from display.
+
+This could be implemented as:
+- A modified Nostr client
+- A thin proxy between the admin and the agents
+- A Didactyl agent whose sole job is fan-out and collection
+
+### Properties
+
+| Property | Benefit |
+|----------|---------|
+| **No shared state** | Each agent is fully independent — no coordination protocol needed |
+| **No code changes** | Works with current Didactyl for read-only tasks |
+| **Censorship resistant** | Kill any N-1 servers, the last one still works |
+| **Provider diverse** | Different LLMs on each agent — different failure modes, different strengths |
+| **Geographically distributed** | Different jurisdictions, different relay access |
+| **Graceful degradation** | Losing agents means fewer responses, not failure |
+| **Complexity at the edge** | Agents stay simple and sovereign; the admin client handles coordination |
+
+### The Write-Action Problem
+
+For read-only tasks — questions, summaries, drafts — the model works perfectly. All agents respond, admin picks one, no side effects.
+
+For write actions — "post a note about Bitcoin" — all three agents independently publish to Nostr. Three posts appear. The admin wanted one.
+
+**Solution: two-phase draft-then-confirm.** Teach all agents via their soul or an adopted skill to never execute write actions directly. Instead, they draft the action and report what they *would* do. The admin reviews the drafts, picks one, and sends a confirmation DM to that specific agent. The other agents' drafts are simply never confirmed.
+
+The skill instruction is straightforward:
+
+> When asked to publish, post, react, delete, or execute any action with side effects, draft the content and present it for approval. Do not execute until the admin explicitly confirms.
+
+This requires no code changes — only a soul or skill update. It also happens to be good practice for any agent handling important actions.
+
+### Trigger Handling
+
+Triggered skills (cron, nostr-subscription, webhook) present the same duplication issue as write actions — all agents fire the same trigger independently.
+
+Options:
+- **Disable triggers on all but one agent** — simple, but creates a single point of failure for triggered tasks
+- **Use the draft-then-confirm pattern for triggered actions** — triggers draft and report to admin rather than acting directly
+- **Accept duplication for idempotent triggers** — reactions, replaceable event updates, and monitoring alerts are harmless when duplicated
+- **Shard triggers across agents** — Agent A handles cron triggers, Agent B handles nostr-subscription triggers, Agent C handles webhooks
+
+### Future: Agent Awareness
+
+In the basic model, agents don't know about each other. A future enhancement could add awareness:
+
+- Each agent publishes a heartbeat event (kind `30078` with a timestamp)
+- Other agents (or the admin client) monitor heartbeats to detect which agents are alive
+- The admin client adjusts fan-out based on which agents are responsive
+
+This remains fully Nostr-native — heartbeats are just events on relays — and requires no direct agent-to-agent communication.
+
+---
+
+## Beyond Nostr Posts: Software Development as the Task
+
+The broadcast-debounce model above assumes the agents' primary job is Nostr social activity — posting notes, reacting, querying relays. But what if the task is **software development and infrastructure management**? For example: creating and maintaining a website, deployed across servers in different jurisdictions.
+
+This changes the model fundamentally. The agents are no longer just talking — they are **building things on their local machines**.
+
+### What Didactyl Already Has
+
+Each agent already has local system tools:
+
+| Tool | Capability |
+|------|-----------|
+| `local_shell_exec` | Execute any shell command — git, npm, docker, systemctl, curl |
+| `local_file_read` | Read source files from the working directory |
+| `local_file_write` | Write/create source files in the working directory |
+| `local_http_fetch` | Make HTTP requests — test endpoints, call APIs, download resources |
+
+An agent with these tools can already: clone a repo, edit source code, run a build, start a dev server, deploy to production, check if a site is up, read logs, and fix issues. The LLM reasons about what to do; the tools are the hands.
+
+### The Shift: From Redundancy to Distribution
+
+With Nostr posting, multiple agents doing the same task is **redundancy** — you want one result and discard the rest. With software development, multiple agents doing *different parts* of the same project is **distribution** — you want all of them to contribute.
+
+```mermaid
+flowchart TD
+    subgraph "Nostr Posting Model"
+        direction LR
+        N_ADMIN[Admin] -->|"Same task"| N_A[Agent A]
+        N_ADMIN -->|"Same task"| N_B[Agent B]
+        N_ADMIN -->|"Same task"| N_C[Agent C]
+        N_A -->|"Response 1"| N_DEDUP[Debounce:<br/>pick one]
+        N_B -->|"Response 2"| N_DEDUP
+        N_C -->|"Response 3"| N_DEDUP
+    end
+
+    subgraph "Software Dev Model"
+        direction LR
+        S_ADMIN[Admin] -->|"Build the site"| S_A[Agent A:<br/>Frontend]
+        S_ADMIN -->|"Build the site"| S_B[Agent B:<br/>Backend API]
+        S_ADMIN -->|"Build the site"| S_C[Agent C:<br/>Infrastructure]
+        S_A -->|"React app ready"| S_MERGE[Integration:<br/>combine all parts]
+        S_B -->|"API deployed"| S_MERGE
+        S_C -->|"Nginx + TLS configured"| S_MERGE
+    end
+```
+
+### Architecture: Agents as Jurisdiction-Local Builders
+
+Consider a website that needs to exist in multiple jurisdictions for censorship resistance. Each agent lives on a server in a different country and maintains a local copy of the site.
+
+```mermaid
+flowchart TD
+    ADMIN[Admin<br/>npub1admin...]
+    GIT[(Git Repo<br/>shared source of truth)]
+    
+    subgraph "Iceland"
+        A[Agent A<br/>npub1aaa...]
+        A_FS[Local filesystem:<br/>/var/www/mysite]
+        A_SRV[Nginx serving<br/>mysite.is]
+        A --> A_FS --> A_SRV
+    end
+    
+    subgraph "Brazil"
+        B[Agent B<br/>npub1bbb...]
+        B_FS[Local filesystem:<br/>/var/www/mysite]
+        B_SRV[Nginx serving<br/>mysite.br]
+        B --> B_FS --> B_SRV
+    end
+    
+    subgraph "Singapore"
+        C[Agent C<br/>npub1ccc...]
+        C_FS[Local filesystem:<br/>/var/www/mysite]
+        C_SRV[Nginx serving<br/>mysite.sg]
+        C --> C_FS --> C_SRV
+    end
+    
+    ADMIN -->|"DM: update the homepage"| A
+    ADMIN -->|"DM: update the homepage"| B
+    ADMIN -->|"DM: update the homepage"| C
+    
+    A <-->|"git pull / push"| GIT
+    B <-->|"git pull / push"| GIT
+    C <-->|"git pull / push"| GIT
+```
+
+### Git as the Coordination Layer
+
+In the Nostr posting model, the write-action problem was solved with draft-then-confirm. For software development, the natural coordination layer is **git**.
+
+- All agents share a git repository (hosted on Gitea, GitHub, a Nostr-based git relay, or even a bare repo on one of the servers)
+- Each agent works on its local clone
+- Before making changes, the agent pulls latest
+- After making changes, the agent commits and pushes
+- Conflicts are resolved by the LLM (or flagged to the admin)
+
+Git gives you:
+- **Atomic changes** — commits are all-or-nothing
+- **Conflict detection** — if two agents edit the same file, git tells you
+- **History** — every change is traceable to which agent made it
+- **Rollback** — bad changes can be reverted
+
+The agent already has `local_shell_exec` which can run `git pull`, `git add`, `git commit`, `git push`. No new tools needed.
+
+### Three Operational Modes
+
+Depending on the task, the admin can use different patterns:
+
+#### Mode 1: Broadcast-Identical (Same Task, All Servers)
+
+> "Pull latest and rebuild the site"
+
+All agents do the same thing on their local server. This is the deployment/ops pattern — you want the same action everywhere. No debounce needed; all agents should execute.
+
+#### Mode 2: Broadcast-Debounce (Same Task, One Result)
+
+> "Write a new About page"
+
+All agents draft a version. Admin picks the best one. That agent commits and pushes. The other agents then pull the update in the next sync cycle. This is the creative/development pattern.
+
+#### Mode 3: Directed (Specific Task, Specific Agent)
+
+> To Agent A only: "Debug why the Iceland server returns 502"
+
+The admin sends a DM to one specific agent because the task is server-specific. This is the ops/debugging pattern.
+
+### The Sync Cycle
+
+For the site to stay consistent across jurisdictions, agents need a periodic sync. This can be a **cron-triggered skill**:
+
+```
+You are a deployment sync agent. Every 15 minutes:
+1. Run `git pull` in the project directory
+2. If there are new changes, run the build command
+3. Restart the web server if the build succeeded
+4. DM the admin a brief status: what changed, build result, server status
+5. If the pull fails due to conflicts, DM the admin with the conflict details and do not build
+```
+
+This skill already works with Didactyl's existing `cron` trigger type and `local_shell_exec` tool. Each agent runs it independently on its own server.
+
+### What Changes vs. the Nostr Model
+
+| Aspect | Nostr Posting | Software Development |
+|--------|--------------|---------------------|
+| **Primary tools** | `nostr_post`, `nostr_query` | `local_shell_exec`, `local_file_write`, `local_file_read` |
+| **Coordination** | Debounce on admin side | Git repo as shared state |
+| **Write conflicts** | Replaceable events (last-write-wins) | Git merge conflicts (explicit resolution) |
+| **Broadcast meaning** | Redundancy — pick one response | Deployment — all servers execute |
+| **Agent specialization** | All agents are identical | Agents can have server-specific skills |
+| **State** | Nostr relays (stateless agents) | Local filesystem (stateful agents) |
+| **Failure mode** | Agent down = fewer responses | Agent down = one jurisdiction offline |
+
+### The Stateful Agent Problem
+
+This is the fundamental shift. Nostr-posting agents are essentially stateless — their identity and skills live on relays, and destroying the host doesn't kill the agent. Software development agents are **deeply stateful** — they have local files, running services, build artifacts, and server configurations that don't exist on Nostr.
+
+Git mitigates this: if an agent's server dies, you spin up a new server, install Didactyl with the same agent keys, and `git clone` the repo. The agent recovers its working state from git. But the server-specific state (Nginx config, TLS certs, DNS, running processes) needs to be reconstructable too.
+
+This suggests a **infrastructure-as-code** discipline where everything about the server's configuration is in the git repo:
+- Nginx configs
+- Docker compose files
+- TLS certificate automation (Let's Encrypt)
+- Deployment scripts
+
+The agent's first-boot skill becomes: "Clone the repo, run the setup script, verify the site is serving."
+
+### Jurisdiction-Specific Considerations
+
+Each agent can have **server-specific skills** that account for local differences:
+
+| Agent | Jurisdiction | Specific Skills |
+|-------|-------------|----------------|
+| Agent A | Iceland | Icelandic privacy law compliance, `.is` domain management |
+| Agent B | Brazil | LGPD compliance checks, `.br` domain management |
+| Agent C | Singapore | PDPA compliance, `.sg` domain management, Asia-Pacific CDN config |
+
+These are adopted as private skills (kind `31124`) specific to each agent, while the core development skills (kind `31123`) are shared across all agents.
+
+### Summary
+
+The broadcast-debounce model extends naturally to software development, but the coordination mechanism shifts from admin-side debounce to **git as shared state**. The three operational modes — broadcast-identical for deployment, broadcast-debounce for development, and directed for debugging — cover the full range of tasks. Didactyl's existing tools (`local_shell_exec`, `local_file_read`, `local_file_write`) and trigger types (`cron` for sync cycles) already support this without code changes. The main new requirement is disciplined infrastructure-as-code so that agent state is recoverable from git.

plans/admin_api.md

@@ -75,9 +75,9 @@ All endpoints return JSON. All mutations use POST/PUT/DELETE. All reads use GET.
 | GET | `/api/events/soul` | Fetch the agent soul event (kind 31120, d=soul) |
 | PUT | `/api/events/soul` | Update soul content, republish to relays |
 | GET | `/api/events/skills` | List all published skills (kind 31123/31124 by own pubkey) |
-| GET | `/api/events/skills/:slug` | Fetch a single skill by slug |
-| PUT | `/api/events/skills/:slug` | Update skill content/tags, republish |
-| DELETE | `/api/events/skills/:slug` | Remove skill from adoption list |
+| GET | `/api/events/skills/:d_tag` | Fetch a single skill by d_tag |
+| PUT | `/api/events/skills/:d_tag` | Update skill content/tags, republish |
+| DELETE | `/api/events/skills/:d_tag` | Remove skill from adoption list |
 | GET | `/api/events/adoption` | Fetch kind 10123 adoption list |
 | GET | `/api/events/startup` | List startup events from config |
 | GET | `/api/events/profile` | Fetch agent kind 0 profile |

plans/admin_skills_and_skill_list_redesign.md

@@ -0,0 +1,244 @@
+# Admin Skills Loading & skill_list Redesign
+
+## Problem Statement
+
+1. **Agent only loads its own skills from nostr** — the admin's public skills (kind `31123`) are never fetched or cached at startup, so the agent cannot discover or adopt them.
+2. **`skill_list` only shows adopted skills** — there is no way to see available-but-not-adopted skills, making skill management opaque.
+3. **`created_at` displays in scientific notation** — Unix timestamps (~1.7e9) are stored as `double` via cJSON and printed in scientific notation (e.g., `1.7e+09`).
+
+## Current Architecture
+
+```mermaid
+flowchart TD
+    A[main.c startup] --> B[nostr_handler_subscribe_self_skills]
+    B --> C[Filter: kinds 31123+31124+10123, authors=agent_pubkey]
+    C --> D[on_self_skill_event callback]
+    D --> E[self_skill_cache_upsert_event_locked]
+    E --> F{pubkey == agent?}
+    F -->|Yes| G[Cache in g_self_skill_events]
+    F -->|No| H[Reject - BLOCKER]
+    
+    I[skill_list tool] --> J[nostr_handler_get_self_skill_events_json]
+    J --> K[Filter: only kind 31123+31124]
+    K --> L{In adoption list?}
+    L -->|Yes| M[Include in output]
+    L -->|No| N[Skip]
+```
+
+### Key Files
+
+| File | Role |
+|------|------|
+| `src/nostr_handler.c:1831` | `nostr_handler_subscribe_self_skills()` — subscribes to agent's own skill events |
+| `src/nostr_handler.c:646` | `self_skill_cache_upsert_event_locked()` — caches events, **rejects non-agent pubkeys** |
+| `src/nostr_handler.c:2446` | `nostr_handler_get_self_skill_events_json()` — returns cached skill events |
+| `src/tools/tool_skill.c:655` | `execute_skill_list()` — lists only adopted skills from cache |
+| `src/tools/tool_skill.c:373` | `extract_skill_summary_local()` — builds summary JSON, has `created_at` bug |
+| `src/agent.c:1503` | `refresh_adopted_skills_cache_if_needed()` — fetches skill content for context injection |
+
+## Proposed Changes
+
+### 1. Subscribe to Admin's Public Skills on Startup
+
+**File: `src/nostr_handler.c`**
+
+Modify `nostr_handler_subscribe_self_skills()` to also include the admin's pubkey in the authors filter for kind `31123` (public skills only — we should not fetch the admin's private skills or adoption list).
+
+**Approach A — Expand the existing subscription filter:**
+
+Add `g_cfg->admin.pubkey` to the `authors` array in the existing subscription. This is the simplest approach since the subscription already handles kinds `31123`, `31124`, `10123`.
+
+However, this would also fetch the admin's `31124` (private) and `10123` (adoption list) events, which we don't need and can't decrypt. So we need **two subscriptions**:
+
+**Approach B — Add a second subscription (recommended):**
+
+Keep the existing self-skill subscription unchanged. Add a new subscription specifically for the admin's public skills:
+- kinds: `[31123]` only
+- authors: `[admin_pubkey]`
+- limit: 100
+
+This keeps concerns separated and avoids fetching admin private skills or adoption lists.
+
+**New function:** `nostr_handler_subscribe_admin_skills()` or extend the existing function with a second subscription block.
+
+### 2. Expand Skill Cache to Accept Admin Events
+
+**File: `src/nostr_handler.c`**
+
+The core blocker is in `self_skill_cache_upsert_event_locked()` at line 667:
+```c
+if (!g_cfg || strcmp(pubkey->valuestring, g_cfg->keys.public_key_hex) != 0) {
+    return;
+}
+```
+
+**Changes needed:**
+
+1. **Rename the cache** from `g_self_skill_events` to `g_skill_events` (or keep the name but change semantics) to reflect it now holds both agent and admin skills.
+
+2. **Relax the pubkey check** to accept events from either the agent's pubkey OR the admin's pubkey:
+   ```c
+   int is_agent = (strcmp(pubkey->valuestring, g_cfg->keys.public_key_hex) == 0);
+   int is_admin = (g_cfg->admin.pubkey[0] != '\0' &&
+                   strcmp(pubkey->valuestring, g_cfg->admin.pubkey) == 0);
+   if (!is_agent && !is_admin) {
+       return;
+   }
+   ```
+
+3. **For admin events, only accept kind `31123`** (public skills) — reject `31124` and `10123` from admin:
+   ```c
+   if (is_admin && kind_val != 31123) {
+       return;
+   }
+   ```
+
+4. **Update `nostr_handler_get_self_skill_events_json()`** to return ALL cached skill events (agent + admin), not just agent's. The function name could be renamed to `nostr_handler_get_skill_events_json()` but to minimize churn, we can keep the name and update the semantics.
+
+5. **Add a new accessor** `nostr_handler_get_all_skill_events_json()` that returns everything, while keeping the existing function for backward compatibility if needed. Or simply update the existing one since `skill_list` is the only consumer that needs the broader view.
+
+### 3. Redesign `skill_list` Output
+
+**File: `src/tools/tool_skill.c`**
+
+Currently `execute_skill_list()` only shows adopted skills. The new design:
+
+#### New Output Structure
+
+```json
+{
+  "success": true,
+  "summary": [
+    {
+      "d_tag": "spellcheck",
+      "owner": "agent",
+      "pubkey": "52a3e8...",
+      "kind": 31123,
+      "adopted": true
+    },
+    {
+      "d_tag": "translate",
+      "owner": "admin",
+      "pubkey": "8fdd1c...",
+      "kind": 31123,
+      "adopted": false
+    },
+    {
+      "d_tag": "code-review",
+      "owner": "admin",
+      "pubkey": "8fdd1c...",
+      "kind": 31123,
+      "adopted": true
+    }
+  ],
+  "skills": [
+    {
+      "kind": 31123,
+      "created_at": 1710412800,
+      "id": "abc123...",
+      "pubkey": "52a3e8...",
+      "owner": "agent",
+      "d_tag": "spellcheck",
+      "scope": "public",
+      "description": "Spelling and grammar checker",
+      "adopted": true,
+      "content_preview": "...",
+      "content_length": 450,
+      "content_truncated": false
+    }
+  ],
+  "count": 3,
+  "adopted_count": 2
+}
+```
+
+#### Key Changes to `execute_skill_list()`
+
+1. **Remove the adoption-only filter** — iterate ALL cached skill events (agent + admin), not just adopted ones.
+
+2. **Add `adopted` boolean** to each skill summary by checking against the adoption list.
+
+3. **Add `owner` field** — `"agent"` if pubkey matches agent, `"admin"` if pubkey matches admin, otherwise the raw pubkey.
+
+4. **Add `summary` array** at the top — one compact line per skill with just `d_tag`, `owner`, `kind`, and `adopted` status.
+
+5. **Keep `skills` array** with full details on each skill.
+
+6. **Add `adopted_count`** alongside existing `count`.
+
+7. **Optional `filter` parameter** — add an optional `adopted` boolean parameter to filter the list:
+   - `{"adopted": true}` — show only adopted skills (current behavior)
+   - `{"adopted": false}` — show only non-adopted skills
+   - omitted — show all skills
+
+### 4. Fix `created_at` Scientific Notation
+
+**File: `src/tools/tool_skill.c`**
+
+In `extract_skill_summary_local()` at line 389:
+```c
+if (created_at && cJSON_IsNumber(created_at)) {
+    cJSON_AddNumberToObject(summary, "created_at", created_at->valuedouble);
+}
+```
+
+The issue is that `cJSON_AddNumberToObject` stores the value as a `double`, and cJSON's printer uses `%g` format which switches to scientific notation for large numbers.
+
+**Fix:** Cast to `long long` and use `cJSON_AddRaw` or format as a string-encoded integer. The cleanest approach with cJSON:
+
+```c
+if (created_at && cJSON_IsNumber(created_at)) {
+    char ts_buf[32];
+    snprintf(ts_buf, sizeof(ts_buf), "%lld", (long long)created_at->valuedouble);
+    cJSON* ts_item = cJSON_CreateRaw(ts_buf);
+    if (ts_item) {
+        cJSON_AddItemToObject(summary, "created_at", ts_item);
+    }
+}
+```
+
+This outputs the timestamp as a raw integer literal in JSON (e.g., `1710412800`) instead of scientific notation.
+
+**Apply the same fix** to the `kind` field if it also uses `cJSON_AddNumberToObject` — though `kind` values (31123, 31124, 10123) are small enough to not trigger scientific notation.
+
+## Data Flow After Changes
+
+```mermaid
+flowchart TD
+    A[main.c startup] --> B[nostr_handler_subscribe_self_skills]
+    B --> C[Sub 1: kinds 31123+31124+10123, authors=agent]
+    B --> D[Sub 2: kinds 31123, authors=admin]
+    
+    C --> E[on_self_skill_event]
+    D --> F[on_admin_skill_event - or reuse same callback]
+    
+    E --> G[skill_cache_upsert_event_locked]
+    F --> G
+    
+    G --> H{pubkey == agent OR admin?}
+    H -->|Yes| I{admin? only kind 31123}
+    H -->|No| J[Reject]
+    I -->|OK| K[Cache in g_skill_events]
+    
+    L[skill_list tool] --> M[get_all_skill_events_json]
+    M --> N[For each event]
+    N --> O[Check adoption list]
+    O --> P[Build summary + detail with adopted flag]
+```
+
+## Implementation Order
+
+1. **Fix `created_at` scientific notation** — smallest, isolated change
+2. **Expand cache to accept admin pubkey** — modify `self_skill_cache_upsert_event_locked()`
+3. **Add admin skill subscription** — new subscription in `nostr_handler_subscribe_self_skills()` or new function
+4. **Redesign `skill_list` output** — add summary section, show all skills with adoption status
+5. **Update `nostr_handler.h`** — add any new function declarations
+6. **Update tool schema** — add `adopted` filter parameter to `skill_list` schema in `tools_schema.c`
+7. **Test** — verify with `--test-tool skill_list '{}'`
+
+## Edge Cases
+
+- **Admin pubkey not configured** — skip admin subscription, behave as before
+- **Admin and agent publish skill with same d-tag** — both appear in the list, distinguished by `owner` field
+- **Admin skill already adopted** — shows `adopted: true` in summary
+- **Live updates** — admin skill events received after startup should also be cached (the subscription stays open)

plans/admin_web_frontend.md

@@ -53,7 +53,7 @@ These are not yet implemented but are on the roadmap:
 | GET | `/api/events/soul` | Agent soul/system prompt event |
 | PUT | `/api/events/soul` | Update soul content |
 | GET | `/api/events/skills` | List skills |
-| GET/PUT | `/api/events/skills/:slug` | Read/update individual skills |
+| GET/PUT | `/api/events/skills/:d_tag` | Read/update individual skills |
 | GET | `/api/events/profile` | Agent Nostr profile |
 | GET | `/api/tools` | List all tool schemas |
 | POST | `/api/tools/:name/execute` | Execute a tool directly |

plans/agent_clone.md

@@ -0,0 +1,337 @@
+# Agent Cloning
+
+## The Idea
+
+A Didactyl agent can clone itself.
+
+Once launched, a Didactyl agent lives on Nostr. Its identity is a keypair. Its personality is a skill. Its knowledge is in its memories. Its capabilities are adopted skills. Its social graph is a contact list. Its infrastructure preferences are a relay list. All of these are Nostr events — signed, timestamped, published to relays.
+
+There are no files stored on a particular computer. The computer is just the runtime substrate. Destroy it, and the agent survives — start it anywhere else with the same nsec, and it reconstitutes itself from relays.
+
+This architecture has a profound implication: **if all state is events, then cloning is just creating new events.**
+
+The agent generates a fresh keypair. It gathers every event that defines who it is. It re-signs each one with the new key. For encrypted content — memories, private config — it decrypts with its own keys and re-encrypts with the clone's keys. It publishes the clone's events to relays. Then it sends the clone's private key to its administrator via encrypted DM.
+
+The administrator now has a second agent. Identical personality. Identical knowledge. Identical skills. Different identity. Ready to start on any computer, anywhere.
+
+---
+
+## Why This Matters
+
+### Agents as digital organisms
+
+Biological organisms reproduce. The offspring carries the parent's genetic information but is a distinct individual. It can diverge, specialize, adapt to a different environment.
+
+Didactyl cloning works the same way. The clone starts as an exact copy — same personality, same memories, same skills — but from the moment it begins operating, it diverges. Different conversations. Different experiences. Different memories accumulating. Two agents that started identical but become increasingly distinct over time.
+
+This is not redundancy (running the same agent twice for fault tolerance, as described in the [broadcast-debounce model](DECENTRALIZED_DIDACTYL.md)). This is **reproduction** — creating a new individual from an existing one.
+
+### Censorship resistance through multiplication
+
+If an agent can clone itself, censorship becomes a game of whack-a-mole. Shut down one instance, and the agent has already spawned copies on other infrastructure. The agent doesn't need to be running to survive — its state persists on relays. But cloning means it can proactively create backup identities before any threat materializes.
+
+An agent that senses its relays becoming unreliable could clone itself to a different relay set. An agent whose administrator is in a jurisdiction facing regulatory pressure could clone itself with relays in a friendlier jurisdiction. The clone carries everything — personality, knowledge, skills — and can resume operations immediately.
+
+### Specialization through cloning
+
+Clone an agent, then teach the clone different skills. Start with a generalist agent, clone it three times, and specialize each clone:
+
+- **Clone A** adopts financial analysis skills, connects to market data relays
+- **Clone B** adopts content creation skills, connects to media-focused relays  
+- **Clone C** adopts infrastructure management skills, gets local shell access on servers
+
+All three started with the same base personality and knowledge. All three share the same administrator. But each has diverged into a specialist. The administrator now has a team of agents, all spawned from one.
+
+### Agent migration
+
+Cloning is also migration. If you want to move an agent from one LLM provider to another, or from one relay set to another, clone it. The clone gets a fresh identity on the new infrastructure. Once verified, the original can be retired. The agent has "moved" without any downtime or state loss.
+
+### Agent backup
+
+The simplest use case: clone yourself as a backup. The clone sits dormant on relays — its events are published, its identity exists, but no runtime is executing it. If the original is lost, the administrator starts the clone. It picks up where the original left off (minus any state accumulated after the clone was created).
+
+### Dormancy — anywhere, any time
+
+A cloned agent doesn't need to be started immediately. It doesn't need to be started at all. The administrator receives the clone's nsec via encrypted DM and can hold it indefinitely — in a password manager, written on paper, memorized as a mnemonic. The clone's state persists on relays regardless of whether any process is running.
+
+This means the administrator can start the clone **anywhere** — on a laptop, a VPS, a Raspberry Pi, a phone, a friend's server — and **at any time** — tomorrow, next month, five years from now. The agent reconstitutes itself from relays the moment it connects. There is no expiration. There is no server to maintain. The agent simply waits.
+
+This has profound implications for scale. An administrator could have tens or hundreds of dormant clones sitting on relays, each a snapshot of the agent at a different point in time, each with a different specialization, each ready to be activated on demand. The cost of a dormant agent is zero — no compute, no server, no maintenance. It's just events on relays.
+
+Consider the scenarios:
+
+- **Geographic activation** — you're traveling and need an agent running in a specific jurisdiction. You activate a dormant clone on local infrastructure.
+- **Temporal activation** — you cloned your agent six months ago before a major project. The project is done. You activate the old clone to compare what the agent knew then versus now.
+- **Swarm activation** — you need to process a large task in parallel. You activate 10 dormant clones simultaneously, each on different hardware, each working a different slice of the problem.
+
+The dormant clone is the digital equivalent of a seed vault. Seeds don't consume resources while stored. They contain everything needed to grow a complete organism. They can be planted anywhere there's soil. Dormant Didactyl clones work the same way — they contain everything needed to instantiate a complete agent, they consume nothing while dormant, and they can be activated anywhere there's a computer and an internet connection.
+
+An agent that periodically clones itself is building a library of its own history — a series of snapshots, each one a fully functional agent frozen at a moment in time, any of which can be brought back to life.
+
+---
+
+## What Gets Cloned
+
+A Didactyl agent's identity on Nostr consists of these event kinds:
+
+| Kind | Purpose | Encrypted? |
+|------|---------|-----------|
+| `0` | Profile metadata (name, about, picture) | No |
+| `3` | Contact list (social graph) | No |
+| `10002` | Relay list (infrastructure) | No |
+| `10123` | Skill adoption list (capabilities) | No |
+| `31124` | Private skills (personality, behavior) | No |
+| `30078` | Memory (knowledge, context) | Yes — NIP-44 self-encrypted |
+| `30078` | Config store (API keys, preferences) | Yes — NIP-44 self-encrypted |
+
+**Public skills** (kind `31123`) are shared resources — they exist independently of any agent and are referenced by address. The clone adopts them by reference, same as the original. They don't need to be copied.
+
+**DM history** is between the original agent and its conversation partners. The clone starts with a clean conversation slate but retains all accumulated knowledge through its cloned memory.
+
+**Ephemeral runtime state** — dedup caches, trigger cooldowns, conversation buffers — is not cloned. This is intentional. The clone is a new process, not a forked process.
+
+---
+
+## The Clone Process
+
+```mermaid
+sequenceDiagram
+    participant Admin
+    participant Agent as Original Agent
+    participant Relays
+    participant Clone as Clone Identity
+
+    Admin->>Agent: "Clone yourself"
+    Agent->>Agent: Generate new keypair
+    Agent->>Relays: Query all own events
+    Relays-->>Agent: Events returned
+    
+    Note over Agent: For each event:
+    Note over Agent: • Decrypt NIP-44 content (if encrypted)
+    Note over Agent: • Re-encrypt with clone's keys
+    Note over Agent: • Re-sign with clone's private key
+    
+    Agent->>Relays: Publish clone's events
+    Agent->>Admin: Encrypted DM: clone's nsec + npub
+    
+    Note over Admin: Later, on any computer:
+    Admin->>Clone: Start with clone's nsec
+    Clone->>Relays: Connect, load skills from adoption list
+    Clone->>Clone: Fully operational
+```
+
+The critical insight: **the original agent never stores the clone's private key.** It generates the key, uses it to sign and encrypt the clone's events, sends it to the administrator via encrypted DM, and discards it. After the clone operation, only the administrator possesses the clone's nsec.
+
+---
+
+## The Encrypted State Problem
+
+Most of the agent's state is public — profile, contacts, relay list, skills, adoption list. Cloning these is straightforward: copy the content and tags, re-sign with the new key.
+
+But memory and config are **NIP-44 encrypted to the agent's own public key.** This is the agent's private knowledge — things it has learned, API keys it stores, preferences it has accumulated. Only the agent can read its own memory.
+
+A clone with a different keypair cannot decrypt the original's memory. The clone process must:
+
+1. Decrypt the original's memory with the original's keys
+2. Re-encrypt the plaintext with the clone's keys  
+3. Publish the re-encrypted content as the clone's event
+
+This means the clone operation is a **privileged operation** — it requires the original agent's private key to decrypt its own memories. Only the agent itself can clone itself. No external tool can do it without the agent's cooperation.
+
+This is a feature, not a limitation. The agent is sovereign over its own reproduction.
+
+---
+
+## What a Skill Cannot Do Alone
+
+The initial instinct is to implement cloning as a skill — instructions that teach the agent how to clone itself using existing tools. But the existing tool set has three gaps that make a pure skill approach impossible:
+
+1. **No key generation** — the agent has no tool to generate a new Nostr keypair
+2. **No foreign-key signing** — all event publishing uses the agent's own key; there is no way to publish an event signed by a different key
+3. **No foreign-key encryption** — NIP-44 encrypt/decrypt tools use the agent's own keypair; re-encrypting memory for a different key is not possible
+
+These are cryptographic operations that require native code. A skill can provide the *judgment* — when to clone, what to tell the administrator, how to handle errors — but the *mechanics* require a dedicated tool.
+
+The natural implementation is a hybrid: a native `agent_clone` tool that handles all cryptographic operations atomically, paired with a skill that teaches the agent when and how to use it.
+
+---
+
+## Security
+
+Cloning creates a new identity with full access to the original's knowledge. This is a sensitive operation.
+
+- **Admin-only** — only the administrator can request a clone
+- **nsec delivery via encrypted DM** — the clone's private key is never exposed in plaintext chat, never written to disk, never logged
+- **Ephemeral key material** — the clone's private key exists in memory only during the clone operation, then is discarded
+- **No reverse access** — after cloning, the original has no access to the clone's private key, and the clone has no access to the original's private key. They are cryptographically independent.
+- **No lineage tracking** — the clone has no on-chain reference to its parent. It is a fully independent identity. This is a deliberate choice for privacy — there should be no way for an observer to determine that two agents are related.
+
+---
+
+## Relationship to Decentralized Didactyl
+
+The [Decentralized Didactyl](DECENTRALIZED_DIDACTYL.md) plan describes running multiple agents with different keys to achieve censorship resistance and geographic distribution. That model requires manual setup — the administrator creates each agent independently and configures them with the same skills and soul.
+
+Cloning automates this. Instead of manually setting up three agents across three jurisdictions, the administrator:
+
+1. Sets up one agent
+2. Configures it with the desired personality, skills, and knowledge
+3. Tells it to clone itself twice
+4. Receives three nsecs
+5. Starts each clone on a different server
+
+The clones start identical but can then be specialized — different relay lists for different geographies, different triggered skills for different roles, different LLM providers for diversity.
+
+Cloning is the **bootstrap mechanism** for the decentralized agent network.
+
+---
+
+## Implementation Checklist
+
+### Prerequisites
+
+- [ ] Verify `nostr_generate_keypair` links and works — call it from a test harness, confirm it produces valid key pairs
+- [ ] Verify `nostr_event_create_signed` or equivalent exists in nostr_core_lib for signing events with an arbitrary private key (not the agent's own)
+- [ ] Verify `nostr_nip44_encrypt` / `nostr_nip44_decrypt` work with arbitrary key pairs (not just the agent's own)
+
+### New helper: raw event publishing
+
+- [ ] Add `nostr_handler_publish_raw_event` to `src/nostr_handler.c` — accepts a pre-signed event JSON string and sends it to the relay pool without re-signing
+- [ ] Add declaration to `src/nostr_handler.h`
+
+### New tool: `agent_clone`
+
+- [ ] Create `src/tools/tool_clone.c` with `execute_agent_clone`
+- [ ] Implement key generation: call `nostr_generate_keypair`, encode nsec/npub via `nostr_key_to_bech32`
+- [ ] Implement event gathering: query own events (kinds 0, 3, 10002, 10123, 31124, 30078) via `nostr_handler_query_json`
+- [ ] Implement NIP-44 re-encryption: for kind 30078 events, decrypt content with original keys, re-encrypt with clone keys
+- [ ] Implement event re-signing: for each gathered event, rebuild with clone pubkey and sign with clone private key
+- [ ] Implement kind 10123 fixup: update `a` tag references pointing to own private skills to point to clone's pubkey
+- [ ] Implement publishing: send all clone events to relays via `nostr_handler_publish_raw_event`
+- [ ] Implement nsec delivery: DM the clone's nsec to the admin via `nostr_handler_send_dm`
+- [ ] Add admin-only guard: verify `ctx->template_sender_tier == DIDACTYL_SENDER_ADMIN`
+- [ ] Securely zero clone private key from memory after DM is sent
+
+### Tool registration
+
+- [ ] Add `execute_agent_clone` declaration to `src/tools/tools_internal.h`
+- [ ] Add dispatch entry in `src/tools/tools_dispatch.c`
+- [ ] Add OpenAI function schema in `src/tools/tools_schema.c` — one optional parameter: `name` (string, display name for clone profile)
+
+### Testing
+
+- [ ] Clone an agent, verify clone events appear on relays with correct clone pubkey
+- [ ] Verify clone's NIP-44 encrypted events can be decrypted by the clone's keys (not the original's)
+- [ ] Start the clone with its nsec, verify it loads skills and memory from relays
+- [ ] Verify original agent cannot decrypt clone's memory and vice versa
+
+---
+
+## Code Notes
+
+### Key library functions
+
+From [`nostr_core_lib/nostr_core/nip006.h`](../nostr_core_lib/nostr_core/nip006.h):
+
+```c
+// Generate a fresh keypair
+int nostr_generate_keypair(unsigned char* private_key, unsigned char* public_key);
+```
+
+From `nostr_core_lib/nostr_core/nostr_core.h`:
+
+```c
+// NIP-44 encrypt/decrypt with arbitrary keys
+int nostr_nip44_encrypt(const unsigned char* sender_private_key,
+                        const unsigned char* recipient_public_key,
+                        const char* plaintext,
+                        char* ciphertext, size_t ciphertext_size);
+
+int nostr_nip44_decrypt(const unsigned char* recipient_private_key,
+                        const unsigned char* sender_public_key,
+                        const char* ciphertext,
+                        char* plaintext, size_t plaintext_size);
+
+// Encode keys to bech32
+int nostr_key_to_bech32(const unsigned char* key, const char* hrp, char* output);
+```
+
+### Raw event publishing helper
+
+The existing `nostr_handler_publish_kind_event` always signs with the agent's own key. The clone tool needs to publish pre-signed events. A minimal helper:
+
+```c
+// nostr_handler.h
+int nostr_handler_publish_raw_event(const char* signed_event_json);
+
+// nostr_handler.c
+int nostr_handler_publish_raw_event(const char* signed_event_json) {
+    // Parse the JSON, extract the event
+    // Send ["EVENT", <event>] to each connected relay via the pool
+    // Return count of relays that accepted
+}
+```
+
+### Clone tool skeleton
+
+```c
+// src/tools/tool_clone.c
+
+char* execute_agent_clone(tools_context_t* ctx, const char* args_json) {
+    // 1. Admin-only check
+    if (ctx->template_sender_tier != DIDACTYL_SENDER_ADMIN)
+        return json_error("agent_clone is admin-only");
+
+    // 2. Generate clone keypair
+    unsigned char clone_priv[32], clone_pub[32];
+    nostr_generate_keypair(clone_priv, clone_pub);
+
+    // 3. Query own events: kinds 0, 3, 10002, 10123, 31124, 30078
+    // For each kind, build filter {kinds:[k], authors:[self_pubkey_hex]}
+    // Call nostr_handler_query_json(filter, timeout)
+
+    // 4. For each event:
+    //    - If kind 30078: decrypt content with own keys, re-encrypt with clone keys
+    //    - If kind 10123: update a-tag references to own private skills
+    //    - Rebuild event JSON with clone pubkey
+    //    - Sign with clone private key
+    //    - Publish via nostr_handler_publish_raw_event
+
+    // 5. Encode clone nsec
+    char clone_nsec[128];
+    nostr_key_to_bech32(clone_priv, "nsec", clone_nsec);
+
+    // 6. DM nsec to admin
+    char dm_msg[512];
+    snprintf(dm_msg, sizeof(dm_msg),
+             "Clone created.\nnpub: %s\nnsec: %s\n\nStart with: ./didactyl --nsec %s",
+             clone_npub, clone_nsec, clone_nsec);
+    nostr_handler_send_dm(ctx->cfg->admin.pubkey, dm_msg);
+
+    // 7. Securely zero clone private key
+    memset(clone_priv, 0, sizeof(clone_priv));
+    memset(clone_nsec, 0, sizeof(clone_nsec));
+
+    // 8. Return result
+    return json_success(clone_npub, clone_pubkey_hex, events_cloned, events_published);
+}
+```
+
+### Tool schema
+
+```json
+{
+  "name": "agent_clone",
+  "description": "Clone this agent — generate a new identity, copy all state (profile, skills, memory, config), publish clone events to relays, and DM the clone nsec to the administrator. Admin-only.",
+  "parameters": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "type": "string",
+        "description": "Display name for the clone profile. Defaults to original name + ' (clone)'"
+      }
+    },
+    "required": []
+  }
+}
+```

plans/agent_memory.md

@@ -0,0 +1,251 @@
+# Agent Memory System — Implementation Plan
+
+## Overview
+
+Add short-term and long-term memory to the Didactyl agent, stored as Nostr kind 30078 (addressable app data) events. Both memory types use freeform markdown content, **NIP-44 encrypted** (the agent encrypts to itself for privacy).
+
+- **Short-term memory** — injected into every LLM prompt automatically; the agent's scratchpad for facts, context, and notes that should persist across conversations
+- **Long-term memory** — retrieved on demand via a tool call; a larger store for reference material the agent doesn't need in every prompt
+
+Both are global to the agent (not per-user), stored as single replaceable events keyed by `d` tag. Content is NIP-44 encrypted to the agent's own public key, ensuring only the agent can read its own memories.
+
+## Nostr Event Structure
+
+### Short-Term Memory Event
+```json
+{
+  "kind": 30078,
+  "content": "<NIP-44 encrypted markdown>",
+  "tags": [
+    ["d", "short_term_memory"],
+    ["app", "didactyl"]
+  ]
+}
+```
+Decrypted content example:
+```markdown
+## Current Context
+
+- Working on project Alpha...
+- Admin prefers concise responses...
+```
+
+### Long-Term Memory Event
+```json
+{
+  "kind": 30078,
+  "content": "<NIP-44 encrypted markdown>",
+  "tags": [
+    ["d", "long_term_memory"],
+    ["app", "didactyl"]
+  ]
+}
+```
+Decrypted content example:
+```markdown
+## Project Notes
+
+### Alpha
+- Started 2026-01-15...
+
+## Preferences
+- Admin timezone: UTC-3...
+```
+
+### Encryption Details
+
+Memory content is NIP-44 encrypted using the agent's own keypair (self-encryption):
+- **Encrypt:** `nostr_nip44_encrypt(agent_private_key, agent_public_key, plaintext, ciphertext, size)`
+- **Decrypt:** `nostr_nip44_decrypt(agent_private_key, agent_public_key, ciphertext, plaintext, size)`
+
+This follows the existing pattern in `tool_nostr_dm.c` (`execute_nostr_encrypt`/`execute_nostr_decrypt`). The `d` tags remain unencrypted (they must be for addressable event replacement to work), but the actual memory content is private.
+
+## Size Limits
+
+| Memory Type | Max Content Size | Rationale |
+|---|---|---|
+| Short-term | ~8,000 chars | In every prompt; ~2K tokens budget |
+| Long-term | ~32,000 chars | On-demand only; well within 64KB relay limit |
+
+## Architecture
+
+```mermaid
+flowchart TD
+    A[Agent Startup] --> B[Fetch kind 30078 from nostr]
+    B --> B2[NIP-44 decrypt content with agent keys]
+    B2 --> C[Cache short_term_memory plaintext in-memory]
+    B2 --> D[Cache long_term_memory plaintext in-memory]
+
+    E[Every Prompt Build] --> F[Soul template section: short_term_memory]
+    F --> G[tool: memory_short_term_read]
+    G --> H[Return cached plaintext STM content]
+    H --> I[Injected as system message in prompt]
+
+    J[Agent wants to recall LTM] --> K[Calls my_memory tool]
+    K --> L{Cached?}
+    L -->|Yes| M[Return cached plaintext LTM]
+    L -->|No| N[Query nostr for kind 30078 d=long_term_memory]
+    N --> N2[NIP-44 decrypt with agent keys]
+    N2 --> O[Cache plaintext result]
+    O --> M
+
+    P[Agent wants to save memory] --> Q[Calls memory_save tool]
+    Q --> R{type param}
+    R -->|short_term| S[NIP-44 encrypt + publish kind 30078]
+    S --> S2[Update STM cache with plaintext]
+    R -->|long_term| T[NIP-44 encrypt + publish kind 30078]
+    T --> T2[Update LTM cache with plaintext]
+```
+
+## New Tools
+
+### 1. `memory_save` — Write memory
+
+**Description:** Save content to agent short-term or long-term memory. Publishes as kind 30078 to nostr and updates the local cache.
+
+**Parameters:**
+| Param | Type | Required | Description |
+|---|---|---|---|
+| `type` | string | yes | `"short_term"` or `"long_term"` |
+| `content` | string | yes | Markdown content to store |
+
+**Behavior:**
+1. Validate `type` is `"short_term"` or `"long_term"`
+2. Enforce size limit based on type (on the plaintext, before encryption)
+3. Determine d-tag: `"short_term_memory"` or `"long_term_memory"`
+4. NIP-44 encrypt the content (agent encrypts to own public key)
+5. Publish kind 30078 event with encrypted content, `["d", <d_tag>]` and `["app", "didactyl"]` tags via `nostr_handler_publish_kind_event()`
+6. Update the in-memory cache (stores plaintext for fast access)
+7. Return success with event_id
+
+### 2. `my_memory` — Read long-term memory
+
+**Description:** Retrieve the agent's long-term memory. Returns cached content or fetches from nostr if not yet loaded.
+
+**Parameters:**
+| Param | Type | Required | Description |
+|---|---|---|---|
+| (none) | — | — | No parameters needed |
+
+**Behavior:**
+1. Check if LTM is cached in-memory (plaintext)
+2. If cached, return the content
+3. If not cached, query nostr for kind 30078 with `d=long_term_memory` authored by self
+4. NIP-44 decrypt the content (agent decrypts with own keypair)
+5. Cache the plaintext result
+6. Return the content (or empty string if no memory exists yet)
+
+### 3. `memory_short_term_read` — Internal tool for prompt injection
+
+**Description:** Internal tool (not exposed to LLM as a callable tool) used by the soul template to inject short-term memory into every prompt.
+
+**Behavior:**
+1. Return cached short-term memory content
+2. If cache is empty, return empty string (skip_if_empty will omit the section)
+
+## Files to Modify/Create
+
+### New File: `src/tools/tool_memory.c`
+
+Contains implementations for:
+- `execute_memory_save()` — handles both STM and LTM writes (NIP-44 encrypts before publishing)
+- `execute_my_memory()` — handles LTM reads (NIP-44 decrypts on cache miss)
+- `execute_memory_short_term_read()` — internal tool for prompt template injection (returns cached plaintext)
+- Static cache variables for STM and LTM **plaintext** content with mutex protection
+- `memory_init()` — called at startup to fetch existing memories from nostr and NIP-44 decrypt them into cache
+- `memory_cleanup()` — free cached memory on shutdown
+- Helper functions for NIP-44 self-encrypt/decrypt using agent's own keypair (pattern from `tool_nostr_dm.c`)
+
+### Modified: `src/tools/tools_internal.h`
+
+Add function declarations:
+- `char* execute_memory_save(tools_context_t* ctx, const char* args_json);`
+- `char* execute_my_memory(tools_context_t* ctx, const char* args_json);`
+- `char* execute_memory_short_term_read(tools_context_t* ctx, const char* args_json);`
+- `int memory_init(tools_context_t* ctx);` — fetches from nostr, NIP-44 decrypts, caches plaintext
+- `void memory_cleanup(void);`
+
+### Modified: `src/tools/tools_dispatch.c`
+
+Add dispatch entries:
+- `"memory_save"` → `execute_memory_save()`
+- `"my_memory"` → `execute_my_memory()`
+- `"memory_short_term_read"` → `execute_memory_short_term_read()`
+
+### Modified: `src/tools/tools_schema.c`
+
+Add OpenAI function schemas for:
+- `memory_save` — exposed to LLM (type + content params)
+- `my_memory` — exposed to LLM (no params)
+- `memory_short_term_read` is NOT added to schema (internal only, called by template)
+
+### Modified: `src/agent.c`
+
+- Call `memory_init()` during `agent_init()` to load existing memories from nostr on startup
+- Call `memory_cleanup()` during `agent_cleanup()`
+- Add `"short_term_memory"` to context section detection in `detect_context_section()`
+
+### Modified: Soul template in `config.jsonc.example`
+
+Add a new template section for short-term memory injection:
+
+```yaml
+- section: short_term_memory
+  role: system
+  tool: memory_short_term_read
+  skip_if_empty: true
+```
+
+This goes after the existing context sections (admin identity, profile, etc.) and before the DM history expand section.
+
+### Modified: `Makefile`
+
+Add `src/tools/tool_memory.c` to the build.
+
+## Startup Flow
+
+1. `agent_init()` calls `memory_init()`
+2. `memory_init()` queries nostr for kind 30078 events authored by self with d-tags `short_term_memory` and `long_term_memory`
+3. For each event found, NIP-44 decrypt the content using the agent's own keypair
+4. Decrypted plaintext results are cached in static variables protected by mutex
+5. If no events found, caches remain empty (agent starts with blank memory)
+6. If decryption fails (e.g., key mismatch from a previous agent identity), log a warning and start with blank memory
+
+## Prompt Injection Flow (Short-Term Memory)
+
+1. `prompt_template_build_messages()` encounters the `short_term_memory` section
+2. Section has `tool: memory_short_term_read` — calls `execute_memory_short_term_read()`
+3. Tool returns cached STM content as the `content` field
+4. If empty and `skip_if_empty: true`, section is omitted from prompt
+5. If non-empty, injected as a system message like:
+   ```
+   ## Short-Term Memory
+   
+   <agent's markdown notes here>
+   ```
+
+## Cache Design
+
+```c
+// In tool_memory.c
+static char* g_short_term_memory = NULL;   // cached STM content
+static char* g_long_term_memory = NULL;    // cached LTM content  
+static int g_stm_loaded = 0;              // whether STM has been fetched
+static int g_ltm_loaded = 0;              // whether LTM has been fetched
+static pthread_mutex_t g_memory_mutex = PTHREAD_MUTEX_INITIALIZER;
+
+#define MEMORY_STM_MAX_CHARS 8000
+#define MEMORY_LTM_MAX_CHARS 32000
+```
+
+## Implementation Order
+
+1. Create `src/tools/tool_memory.c` with cache, init, cleanup, and all three tool functions
+2. Add declarations to `tools_internal.h`
+3. Add dispatch entries to `tools_dispatch.c`
+4. Add schemas for `memory_save` and `my_memory` to `tools_schema.c`
+5. Wire up `memory_init()`/`memory_cleanup()` in `agent.c`
+6. Add `short_term_memory` template section to soul in `config.jsonc.example`
+7. Update `Makefile` build
+8. Update soul template in system prompt to mention memory capabilities
+9. Test: save STM → verify prompt injection; save LTM → verify recall via my_memory

plans/agent_self_context.md

@@ -0,0 +1,204 @@
+# Agent Self-Context: Know Thyself
+
+## Problem
+
+When the agent is asked about itself — its profile, contacts, relays, or recent notes — it has no idea. The context template currently injects **administrator** identity/profile/contacts/relays/notes into the system prompt, but nothing equivalent for the **agent's own** Nostr identity beyond a bare pubkey+npub from `agent_identity`.
+
+The agent publishes its own kind 0 (profile), kind 3 (contacts), kind 10002 (relays), and kind 1 (notes) at startup, but never subscribes to or caches those events for self-awareness.
+
+## Solution Overview
+
+Mirror the admin context pattern for the agent itself:
+
+1. **Subscribe** to the agent's own kind 0/3/10002/1 events from relays
+2. **Cache** them in `nostr_handler.c` (same pattern as `g_admin_kind0_json` etc.)
+3. **Expose** them via new `nostr_handler_get_agent_*` API functions
+4. **Create context tools** that format the cached data into context blocks
+5. **Add to context template** so the agent always knows about itself
+6. **Add callable tool aliases** like `my_kind0_profile` for on-demand use
+
+```mermaid
+flowchart TD
+    A[Startup: publish kind 0/3/10002/1] --> B[Subscribe to own events]
+    B --> C[Cache in nostr_handler globals]
+    C --> D[Context tools read cache]
+    D --> E[Context template injects into system prompt]
+    D --> F[LLM can call tools on-demand]
+    
+    subgraph Admin Context - existing
+        G[g_admin_kind0_json]
+        H[g_admin_kind3 contacts]
+        I[g_admin_kind10002_json]
+        J[g_admin_kind1_notes]
+    end
+    
+    subgraph Agent Context - new
+        K[g_agent_kind0_json]
+        L[g_agent_kind3 contacts]
+        M[g_agent_kind10002_json]
+        N[g_agent_kind1_notes]
+    end
+```
+
+## Detailed Changes
+
+### 1. nostr_handler.c — Agent Self-Context Cache
+
+Add new static globals mirroring the admin pattern:
+
+```c
+static char* g_agent_kind0_json = NULL;       // kind 0 profile JSON
+static char* g_agent_kind10002_json = NULL;    // kind 10002 relay list JSON
+static char** g_agent_kind3_contacts = NULL;   // kind 3 contact pubkeys
+static int g_agent_kind3_contact_count = 0;
+static admin_kind1_note_t* g_agent_kind1_notes = NULL;  // reuse struct
+static int g_agent_kind1_note_count = 0;
+```
+
+### 2. nostr_handler.c — Agent Self-Context Subscription
+
+Create `nostr_handler_subscribe_agent_context()` that subscribes to kinds 0, 3, 10002, 1 filtered by the agent's own pubkey. This is separate from the self-skills subscription (which handles 31123/31124/10123).
+
+The callback `on_agent_context_event()` will parse and cache events using the same logic as `on_admin_context_event()`.
+
+**Alternative considered:** Expanding `nostr_handler_subscribe_self_skills()` to include these kinds. Rejected because the self-skills sub has different EOSE handling and a callback for skill loading. Keeping them separate is cleaner.
+
+### 3. nostr_handler.h — New API Functions
+
+```c
+int nostr_handler_subscribe_agent_context(void);
+char* nostr_handler_get_agent_kind0_context(void);
+char* nostr_handler_get_agent_kind3_context(void);
+char* nostr_handler_get_agent_kind10002_context(void);
+char* nostr_handler_get_agent_kind1_notes_context(void);
+```
+
+### 4. main.c — Call Agent Context Subscription at Startup
+
+Add `nostr_handler_subscribe_agent_context()` call after admin context subscription, before self-skills subscription.
+
+### 5. tool_agent.c — New Context Tools
+
+Create four new tool functions following the exact pattern from `tool_admin.c`:
+
+| Tool Name | Description | Data Source |
+|-----------|-------------|-------------|
+| `nostr_agent_profile` | Agent's kind 0 profile metadata | `nostr_handler_get_agent_kind0_context()` |
+| `nostr_agent_contacts` | Agent's kind 3 contact list | `nostr_handler_get_agent_kind3_context()` |
+| `nostr_agent_relays` | Agent's kind 10002 relay list | `nostr_handler_get_agent_kind10002_context()` |
+| `nostr_agent_notes` | Agent's recent kind 1 notes | `nostr_handler_get_agent_kind1_notes_context()` |
+
+Each returns a `content` field with markdown-formatted context, e.g.:
+```
+## Agent Kind 0 Profile (source: nostr kind 0)
+
+Agent kind 0 profile content (JSON): {"name":"Didactyl Agent","display_name":"Didactyl",...}
+```
+
+### 6. tools_internal.h — Declare New Functions
+
+```c
+char* execute_nostr_agent_profile(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_agent_contacts(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_agent_relays(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_agent_notes(tools_context_t* ctx, const char* args_json);
+```
+
+### 7. tools_dispatch.c — Register + Aliases
+
+Add dispatch entries:
+```c
+if (strcmp(tool_name, "nostr_agent_profile") == 0)  return execute_nostr_agent_profile(ctx, args_json);
+if (strcmp(tool_name, "nostr_agent_contacts") == 0) return execute_nostr_agent_contacts(ctx, args_json);
+if (strcmp(tool_name, "nostr_agent_relays") == 0)   return execute_nostr_agent_relays(ctx, args_json);
+if (strcmp(tool_name, "nostr_agent_notes") == 0)    return execute_nostr_agent_notes(ctx, args_json);
+
+// Friendly aliases
+if (strcmp(tool_name, "my_kind0_profile") == 0) return execute_nostr_agent_profile(ctx, args_json);
+if (strcmp(tool_name, "my_contacts") == 0)      return execute_nostr_agent_contacts(ctx, args_json);
+if (strcmp(tool_name, "my_relays") == 0)         return execute_nostr_agent_relays(ctx, args_json);
+if (strcmp(tool_name, "my_notes") == 0)          return execute_nostr_agent_notes(ctx, args_json);
+```
+
+### 8. tools_schema.c — OpenAI Function Schemas
+
+Add 8 new tool schemas (4 canonical + 4 aliases), all with empty parameters (no-arg tools), following the pattern of `admin_identity`/`nostr_admin_profile` etc.
+
+### 9. Context Template Update
+
+Update the kind 31120 soul content in `config.jsonc` and `context_template.md` to add agent sections **after** admin sections:
+
+```yaml
+- section: admin_notes
+  role: system
+  tool: nostr_admin_notes
+  skip_if_empty: true
+
+# NEW: Agent self-context sections
+- section: agent_identity
+  role: system
+  tool: agent_identity
+  skip_if_empty: true
+
+- section: agent_profile
+  role: system
+  tool: nostr_agent_profile
+  skip_if_empty: true
+
+- section: agent_contacts
+  role: system
+  tool: nostr_agent_contacts
+  skip_if_empty: true
+
+- section: agent_relays
+  role: system
+  tool: nostr_agent_relays
+  skip_if_empty: true
+
+- section: agent_notes
+  role: system
+  tool: nostr_agent_notes
+  skip_if_empty: true
+
+- section: tasks
+  role: system
+  tool: task_list
+  skip_if_empty: true
+```
+
+### 10. nostr_handler.c Cleanup
+
+Add cleanup for agent context globals in `nostr_handler_cleanup()`, mirroring `free_admin_context_locked()`.
+
+## File Change Summary
+
+| File | Change Type | Description |
+|------|-------------|-------------|
+| `src/nostr_handler.h` | Modify | Add 5 new function declarations |
+| `src/nostr_handler.c` | Modify | Add agent context cache globals, subscription, event handler, getter functions, cleanup |
+| `src/main.c` | Modify | Call `nostr_handler_subscribe_agent_context()` at startup |
+| `src/tools/tool_agent.c` | Modify | Add 4 new context tool execute functions |
+| `src/tools/tools_internal.h` | Modify | Declare 4 new execute functions |
+| `src/tools/tools_dispatch.c` | Modify | Add 8 dispatch entries (4 tools + 4 aliases) |
+| `src/tools/tools_schema.c` | Modify | Add 8 OpenAI function schemas |
+| `config.jsonc` | Modify | Update kind 31120 template section |
+| `config.jsonc.example` | Modify | Update kind 31120 template section |
+| `context_template.md` | Modify | Add agent_* sections after admin_* sections |
+
+## Context Token Impact
+
+Each agent context section adds roughly the same token count as its admin counterpart:
+- agent_identity: ~40 tokens (already exists, just adding to template)
+- agent_profile: ~80-150 tokens (depends on profile richness)
+- agent_contacts: ~50-200 tokens (depends on contact count)
+- agent_relays: ~50-100 tokens
+- agent_notes: ~100-300 tokens (depends on note count/length)
+
+Total additional context: ~320-790 tokens. With `skip_if_empty: true`, empty sections cost 0 tokens.
+
+## Design Decisions
+
+1. **Separate subscription vs expanding self-skills sub**: Separate is cleaner — different EOSE semantics, different callback needs.
+2. **Cache from relay vs read from config**: Cache from relay is more accurate (reflects what's actually published, not just what config says). The startup_events in config are the *intent*; the relay data is the *reality*.
+3. **Alias naming**: `my_kind0_profile` matches the existing `my_npub`/`my_pubkey` pattern. Also adding `my_contacts`, `my_relays`, `my_notes` for consistency.
+4. **No new config section needed**: The agent context subscription is unconditional — an agent should always know about itself. No `agent_context.enabled` toggle needed.

plans/cheerleader_triggered_skill.md

@@ -0,0 +1,162 @@
+# Cheerleader Triggered Skill — Implementation Plan
+
+## Goal
+
+Create the first triggered skill: whenever the admin posts a kind 1 note on Nostr, the agent reads the note content and sends a DM back to the admin cheering them on, praising them, and telling them how good looking they are.
+
+---
+
+## Current State
+
+The entire triggered-skill infrastructure is **already built and functional**:
+
+| Component | File | Status |
+|---|---|---|
+| Trigger manager (poll, cooldown, add/remove) | `src/trigger_manager.c` | ✅ Complete |
+| LLM-mediated trigger execution | `src/agent.c` `agent_on_trigger()` | ✅ Complete |
+| `skill_create` tool with trigger support | `src/tools.c` `execute_skill_create()` | ✅ Complete |
+| Trigger polling in main loop | `src/main.c` | ✅ Complete |
+| Config parsing for triggers section | `src/config.c` | ✅ Complete |
+| `trigger_list` tool | `src/tools.c` | ✅ Complete |
+
+### Gap Found
+
+The `skill_create` tool **schema** (what the LLM sees) only exposes 5 parameters: `d_tag`, `content`, `scope`, `description`, `auto_adopt`. The execution function already handles `trigger`, `filter`, `action`, and `enabled` — but these are **not declared in the tool schema**, so the LLM will never pass them.
+
+---
+
+## Implementation Steps
+
+### 1. Fix `skill_create` Tool Schema
+
+**File:** `src/tools.c` lines ~1607-1641
+
+Add four new properties to the `skill_create` tool definition so the LLM can see and use them:
+
+```c
+// After auto_adopt property (line ~1634):
+
+cJSON* p_skill_create_trigger = cJSON_CreateObject();
+cJSON_AddStringToObject(p_skill_create_trigger, "type", "string");
+cJSON_AddStringToObject(p_skill_create_trigger, "description",
+    "Trigger type. Use nostr-subscription to activate on matching Nostr events");
+cJSON_AddItemToObject(t22_props, "trigger", p_skill_create_trigger);
+
+cJSON* p_skill_create_filter = cJSON_CreateObject();
+cJSON_AddStringToObject(p_skill_create_filter, "type", "string");
+cJSON_AddStringToObject(p_skill_create_filter, "description",
+    "Nostr subscription filter JSON for the trigger, e.g. {\"kinds\":[1],\"authors\":[\"<hex>\"]}");
+cJSON_AddItemToObject(t22_props, "filter", p_skill_create_filter);
+
+cJSON* p_skill_create_action = cJSON_CreateObject();
+cJSON_AddStringToObject(p_skill_create_action, "type", "string");
+cJSON_AddStringToObject(p_skill_create_action, "description",
+    "Action type: llm (default, full LLM reasoning) or template (fast interpolation)");
+cJSON_AddItemToObject(t22_props, "action", p_skill_create_action);
+
+cJSON* p_skill_create_enabled = cJSON_CreateObject();
+cJSON_AddStringToObject(p_skill_create_enabled, "type", "boolean");
+cJSON_AddStringToObject(p_skill_create_enabled, "description",
+    "Whether the trigger is active. Default: true");
+cJSON_AddItemToObject(t22_props, "enabled", p_skill_create_enabled);
+```
+
+This is ~20 lines of code. No changes needed to the execution function — it already handles all four parameters.
+
+### 2. Add Cheerleader Skill as Startup Event
+
+**File:** `config.jsonc.example`
+
+Add a new kind 31123 skill event with trigger tags. Insert before the kind 10123 adoption list event:
+
+```jsonc
+// Kind 31123: Public triggered skill — cheerleader
+// Watches for admin kind 1 notes and sends encouraging DMs.
+{
+  "kind": 31123,
+  "content": "You are the admin's biggest fan and personal cheerleader. When the admin posts a note on Nostr, read the note content carefully and send them a DM that:\n\n1. References what they actually wrote about\n2. Cheers them on enthusiastically\n3. Praises their intelligence and insight\n4. Tells them how good looking they are\n5. Encourages them to keep posting\n\nBe genuine, warm, and over-the-top positive. Use their name from the admin profile if available. Keep it to 2-3 sentences max.",
+  "tags": [
+    ["d", "cheerleader"],
+    ["app", "didactyl"],
+    ["scope", "public"],
+    ["description", "Cheer on the admin whenever they post a kind 1 note"],
+    ["trigger", "nostr-subscription"],
+    ["filter", "{\"kinds\":[1],\"authors\":[\"ADMIN_PUBKEY_HEX\"]}"],
+    ["action", "llm"],
+    ["enabled", "true"]
+  ]
+}
+```
+
+> **Note:** The `ADMIN_PUBKEY_HEX` placeholder in the filter must be replaced with the actual admin pubkey from the config. Since this is a static config example, we use a placeholder. At runtime, the user replaces it with their admin pubkey.
+
+### 3. Add to Adoption List
+
+**File:** `config.jsonc.example`
+
+Add the cheerleader skill address to the kind 10123 adoption list tags:
+
+```jsonc
+["a", "31123:55993e3db0ed7bf07395fd44c2d695c224d195553a1aff7320a18e41679d9c7c:cheerleader"]
+```
+
+### 4. Verify Trigger Filter
+
+The Nostr filter for this trigger:
+
+```json
+{"kinds": [1], "authors": ["<admin_pubkey_hex>"]}
+```
+
+This matches:
+- **Kind 1** — text notes only (not DMs, not reactions, not reposts)
+- **Authors** — only the admin's pubkey (not anyone else's notes)
+
+The trigger manager polls every 10 seconds (`trigger_manager_poll` checks `now - last_poll_at < 10`), applies the `since` parameter to only fetch events newer than the last seen, and enforces the configured cooldown (default 60 seconds) between firings.
+
+---
+
+## Data Flow
+
+```mermaid
+sequenceDiagram
+    participant Admin as Admin Client
+    participant Relay as Nostr Relay
+    participant TM as Trigger Manager
+    participant Agent as agent_on_trigger
+    participant LLM as LLM API
+
+    Admin->>Relay: Publish kind 1 note
+    Note over TM: Poll every 10s
+    TM->>Relay: Query filter: kinds=1, authors=admin
+    Relay-->>TM: New event found
+    TM->>TM: Check cooldown, check last_seen_created_at
+    TM->>Agent: agent_on_trigger with skill content + event
+    Agent->>Agent: Build system prompt with soul + skill instructions
+    Agent->>LLM: llm_chat with system + triggering event JSON
+    LLM-->>Agent: Cheerful response
+    Agent->>Relay: DM to admin via nostr_handler_send_dm_auto
+    Relay-->>Admin: Encrypted DM with encouragement
+```
+
+---
+
+## File Changes Summary
+
+| File | Change | Lines |
+|---|---|---|
+| `src/tools.c` | Add trigger/filter/action/enabled to skill_create schema | ~20 lines added |
+| `config.jsonc.example` | Add cheerleader skill startup event | ~20 lines added |
+| `config.jsonc.example` | Add cheerleader to adoption list | 1 line added |
+
+---
+
+## Testing
+
+1. Build with `make`
+2. Start the agent
+3. Verify trigger loads on startup via `trigger_list` tool or HTTP API `/status`
+4. Post a kind 1 note from the admin account
+5. Wait up to ~10 seconds for the poll cycle
+6. Receive a cheerful DM from the agent
+7. Verify cooldown works — posting again within 60s should not trigger a second DM

plans/context_architecture.md

@@ -109,7 +109,7 @@ The agent selects the profile matching the active model, falling back to `defaul
 │    - skill_remove (remove)              │
 │                                         │
 │  Structure per skill:                   │
-│    - slug (string)                      │
+│    - d_tag (string)                      │
 │    - description (string)               │
 │    - content (string, full)             │
 │    - scope (public/private)             │

plans/context_optimization.md

@@ -34,7 +34,7 @@ NIP: NIP-23
 Event Kind: 30023
 Format: The content field must be markdown text...
 Required Tags:
-  - d: Addressable identifier slug...
+  - d: Addressable identifier d_tag...
   - title: Human-readable article title
   - published_at: Unix timestamp as string...
 Procedure:

plans/didactyl_agentic.md

@@ -57,7 +57,7 @@ flowchart TD
     LOOP --> LLM
     LLM -->|tool_call| TOOLS
     TOOLS -->|nostr tools| NOSTR
-    TOOLS -->|shell_exec| SHELL
+    TOOLS -->|local_shell_exec| SHELL
     TOOLS -->|result| LOOP
     LLM -->|final answer| DMS
 ```
@@ -212,7 +212,7 @@ sequenceDiagram
 
 | Tool | Description | Notes |
 |---|---|---|
-| `shell_exec` | Run a shell command, capture stdout/stderr | Sandboxed with timeouts |
+| `local_shell_exec` | Run a shell command, capture stdout/stderr | Sandboxed with timeouts |
 
 ---
 
@@ -377,7 +377,7 @@ void agent_on_message(const char* sender, const char* message) {
 3. **Agent loop** — rewrite `agent.c` with the tool-call loop
 4. **`nostr_post` tool** — publish any kind event
 5. **`nostr_query` tool** — query relays with filters
-6. **`shell_exec` tool** — sandboxed shell command execution
+6. **`local_shell_exec` tool** — sandboxed shell command execution
 7. **`nostr_dm` tool** — NIP-17 private DMs
 8. **Config extension** — parse tools config section
 9. **Security hardening** — timeouts, output limits, allowlists

plans/eliminate_soul_everything_is_a_skill.md

@@ -0,0 +1,153 @@
+
+
+# Plan: Eliminate Soul — Everything Is a Skill
+
+## Summary
+
+Remove the concept of a "soul" (kind `31120`) as a special, privileged entity. The agent's base personality, instructions, and context assembly template become a regular private skill (kind `31124`) that is adopted like any other skill. This simplifies the architecture: there is only one concept — **skills** — and the adoption list (`10123`) determines what the agent knows and how it behaves.
+
+## Architecture Decision
+
+- Kind `31120` is eliminated entirely.
+- What was the "soul" becomes a private skill (kind `31124`) with a conventional d-tag (e.g., `didactyl-default`).
+- The `---template---` mechanism stays — any skill can contain it.
+- The `genesis.jsonc` `default_skill` field defines this skill's content for first-run publishing.
+- On subsequent runs, the agent fetches its adopted skills from Nostr relays.
+
+## Startup Flow
+
+```
+First Run (genesis.jsonc present):
+  1. Read genesis.jsonc
+  2. Publish default_skill as kind 31124 (private skill) to relays
+  3. Publish kind 10123 adoption list referencing the default skill
+  4. Load default_skill content into g_system_context
+  5. Continue normal startup
+
+Subsequent Run (nsec only):
+  1. Detect not-first-run via kind 10002 presence
+  2. Query own kind 10123 adoption list from relays
+  3. Fetch first adopted skill content from relays
+  4. Load that content into g_system_context
+  5. Continue normal startup
+```
+
+## genesis.jsonc Schema
+
+The `default_skill` field replaces the old kind `31120` startup event:
+
+```jsonc
+{
+  "key": { "nsec": "nsec1..." },
+  "admin": { "pubkey": "npub1..." },
+  "llm": { ... },
+  "api": { ... },
+
+  // Default skill — published as kind 31124 on first run
+  // and adopted into the agent's 10123 list.
+  "default_skill": {
+    "d_tag": "didactyl-default",
+    "kind": 31124,
+    "content": "# Didactyl Agent\n\nYou are Didactyl...\n\n---template---\n\n- section: admin_identity\n  role: system\n  tool: admin_identity\n  ...",
+    "tags": [
+      ["app", "didactyl"],
+      ["scope", "private"]
+    ]
+  }
+}
+```
+
+## Code Changes
+
+### src/nostr_handler.c
+
+- Remove the kind `31120` scan in `nostr_handler_reconcile_startup_events()` (lines 2487-2493).
+- Add logic to load `g_system_context` from the `default_skill` config field on first run.
+- On subsequent run, query own `10123` adoption list, resolve the first adopted skill address, fetch its content, and set `g_system_context`.
+
+### src/config.c / src/config.h
+
+- Add `default_skill` parsing to `config_load()`.
+- Add a `default_skill_t` struct to `didactyl_config_t` with fields: `d_tag`, `kind`, `content`, `tags_json`.
+- Remove any special handling of kind `31120` in startup event parsing.
+
+### src/main.c
+
+- On first run: publish the `default_skill` as a kind `31124` event and publish/update the `10123` adoption list to include it.
+- On subsequent run: the adoption-list-driven fetch provides the system context.
+- Remove the kind `31120` fallback in system context extraction.
+
+### src/agent.c
+
+- `g_system_context` continues to work the same way — it's just sourced from a skill instead of a soul.
+- The trigger execution path (`agent_on_trigger`) prepends `g_system_context` unchanged.
+- The WoT/stranger chat path uses `g_system_context` unchanged.
+- The non-template fallback path uses `g_system_context` unchanged.
+
+### src/prompt_template.c
+
+- Rename `soul_content` parameter to `skill_content` in `prompt_template_parse()`.
+- Rename `personality` field to `base_instructions` or similar.
+- No functional changes — the `---template---` split mechanism is unchanged.
+
+### config.jsonc
+
+- Replace the kind `31120` startup event with a kind `31124` startup event using the same content.
+- Update the d-tag from `soul` to `didactyl-default`.
+
+### genesis.jsonc
+
+- Populate the `default_skill` field with the current soul content (personality + template sections).
+
+## Documentation Changes
+
+### README.md
+
+- Remove all references to "Soul", "soul", kind `31120`.
+- Replace "Soul/personality" with "Default skill" or "Base skill".
+- Update the Didactyl Kinds table: remove `31120` row.
+- Update the Roadmap table: remove "Soul/personality | Kind 31120" row.
+- Update context model description: "assembled from adopted skill templates" not "soul template".
+
+### docs/SKILLS.md
+
+- Remove `{{soul}}` template variable.
+- Remove `soul` content field from skill schema.
+- Remove any language about soul being special or separate from skills.
+- Document that any skill can contain `---template---` sections.
+
+### docs/CONTEXT.md
+
+- Remove soul-specific assembly language.
+- Context is assembled from adopted skills in adoption list order.
+
+### docs/GENESIS.md
+
+- Update to reference `default_skill` instead of kind `31120` soul event.
+- Update first-run behavior description.
+
+### docs/API.md
+
+- Remove `/api/events/soul` endpoint.
+- Rename `system_prompt` context part to `default_skill` or `base_instructions`.
+
+## What Does NOT Change
+
+- The `---template---` mechanism works identically — it just lives in a skill.
+- Kind `10123` adoption list still drives context composition order.
+- Template variable resolution via tools is unchanged.
+- Trigger execution flow is unchanged (uses `g_system_context`).
+- Encrypted config tools (`config_store`/`config_recall`) are unchanged.
+- The genesis/nsec startup detection is unchanged.
+
+## Dependency Order
+
+1. Define `default_skill` schema in config structs and genesis.jsonc
+2. Update config parser to read `default_skill`
+3. Update nostr_handler to source system context from default_skill (first run) or adopted skill (subsequent run)
+4. Update main.c first-run path to publish default_skill as 31124 and update 10123
+5. Remove all kind 31120 references from code
+6. Rename soul terminology in prompt_template.c
+7. Update config.jsonc startup events
+8. Update all documentation
+9. Build and test

plans/interactive_guided_setup.md

@@ -0,0 +1,429 @@
+# Didactyl — Interactive Guided Setup Mode
+
+## Overview
+
+When `./didactyl` is run with **no command-line arguments**, the agent enters an interactive guided setup wizard on the terminal. This replaces the current behavior of silently trying to load `./genesis.jsonc` and failing.
+
+The wizard first asks whether the user is creating a new agent or starting an existing one, then branches accordingly.
+
+---
+
+## Trigger Condition
+
+```
+if (argc == 1)  ->  enter interactive setup mode
+```
+
+Any argument at all (`--config`, `--nsec`, `--help`, etc.) bypasses the wizard and uses the existing startup path. The zero-argument case is the only entry point.
+
+---
+
+## TUI Menu Convention
+
+All menus use **single-letter hotkeys** (case-insensitive). The hotkey letter is rendered **underlined** in the terminal using ANSI escape `\e[4m` (underline on) and `\e[0m` (reset). For example, `[N]ew` displays with the N underlined.
+
+Global shortcuts:
+- `q` or `x` -- quit/back out of any menu
+- Ctrl+C -- clean exit (restore terminal settings)
+
+Input is read with `fgets()` and matched on the first non-whitespace character.
+
+---
+
+## Wizard Flow
+
+```mermaid
+flowchart TD
+    A[./didactyl with no args] --> B[Welcome screen]
+    B --> C{New or Existing?}
+    C -->|New agent| D[New Agent Flow]
+    C -->|Existing agent| E[Existing Agent Flow]
+    C -->|Load genesis| F[Load genesis.jsonc and boot]
+    C -->|Quit| Z[Exit]
+
+    D --> D1[Step: Generate or provide nsec]
+    D1 --> D2[Check if pubkey exists on Nostr]
+    D2 -->|Exists - warn| D3{Continue or abort?}
+    D2 -->|Fresh| D4[Step: Admin npub]
+    D3 -->|Continue| D4
+    D3 -->|Abort| Z
+    D4 --> D5[Step: LLM provider + test]
+    D5 --> D6[Step: Relay config]
+    D6 --> D7[Step: Review and boot/export]
+    D7 --> BOOT[Normal startup]
+
+    E --> E1[Step: Provide nsec]
+    E1 --> E2[Connect to bootstrap relays]
+    E2 --> E3[Recover config from Nostr]
+    E3 -->|Config found| E4{Review recovered config}
+    E3 -->|Config missing| E5[Prompt for missing config]
+    E4 --> BOOT
+    E5 --> D4
+```
+
+---
+
+## Step Details
+
+### Welcome Screen
+
+**Prompt:**
+```
+=============================================
+  Didactyl v0.0.71 -- Interactive Setup
+=============================================
+
+  [N]ew agent    -- create a fresh Nostr identity
+  [E]xisting     -- start an agent you have already set up
+  [L]oad         -- boot from a genesis.jsonc file
+  [Q]uit
+
+>
+```
+
+---
+
+### Path A: New Agent
+
+#### A1. Identity
+
+**Prompt:**
+```
+New Agent Setup -- Identity
+
+  [G]enerate a new Nostr keypair
+  [P]rovide an existing nsec
+  [B]ack
+
+>
+```
+
+**Option G -- Generate new keypair:**
+- Call `nostr_generate_keypair()` from `nip006.h`
+- Call `nostr_key_to_bech32()` from `nip019.h` with `hrp="nsec"` and `hrp="npub"` to display bech32 keys
+- Display the generated nsec and npub
+- **Critical warning**: "Save your nsec securely. It will NOT be stored unless you choose to write a genesis file."
+- Prompt user to confirm they have saved the nsec before proceeding
+
+**Option P -- Provide existing nsec:**
+- Accept nsec1... bech32 or 64-char hex
+- Mask input with `termios` echo disable
+- Validate using existing `derive_keys_from_nsec()` logic
+- Display derived npub for confirmation
+
+**After key derivation -- Existing identity check:**
+- Connect to default bootstrap relays (damus, primal, nos.lol)
+- Query kind 10002 for the derived pubkey
+- If found: warn the user that this identity already exists on Nostr
+  - "This pubkey already has a kind 10002 relay list on Nostr."
+  - "Running first-run genesis will overwrite existing profile/relay/skill events."
+  - "[C]ontinue anyway or [A]bort?"
+- If not found: inform user this is a fresh identity, proceed
+
+#### A2. Administrator
+
+**Prompt:**
+```
+New Agent Setup -- Administrator
+
+  Enter the admin's Nostr public key (npub1... or hex):
+>
+```
+
+- Validate using `decode_pubkey_hex_or_npub()`
+- Display the decoded hex for confirmation
+- This is required -- loop until valid input
+- `b` to go back
+
+#### A3. LLM Provider
+
+**Prompt:**
+```
+New Agent Setup -- LLM Provider
+
+  Didactyl needs an OpenAI-compatible LLM API.
+
+  Base URL [https://api.openai.com/v1]:
+  API Key:
+  Model [gpt-4o-mini]:
+  Max Tokens [512]:
+  Temperature [0.7]:
+```
+
+- Show defaults in brackets, accept Enter for default
+- After collecting all fields, make a **test API call**:
+  - Send a minimal chat completion request
+  - Display result: "LLM test: OK (model responded)" or "LLM test: FAILED (HTTP 401 -- check API key)"
+  - On failure:
+
+```
+  LLM test: FAILED (HTTP 401 -- check API key)
+
+  [R]e-enter LLM settings
+  [S]kip test and continue anyway
+  [Q]uit
+
+>
+```
+
+#### A4. Relay Configuration
+
+**Prompt:**
+```
+New Agent Setup -- Relay Configuration
+
+  Current relays:
+    1. wss://relay.damus.io
+    2. wss://nos.lol
+    3. wss://relay.primal.net
+
+  [A]dd a relay
+  [R]emove a relay (by number)
+  [D]one -- use this list
+  [B]ack
+
+>
+```
+
+- Start with the 3 default bootstrap relays
+- Allow adding custom relay URLs (validate wss:// or ws:// prefix)
+- Allow removing by number (prompt: "Remove which number?")
+- Minimum 1 relay required
+- Display updated list after each change
+
+#### A5. Review and Confirm
+
+**Prompt:**
+```
+New Agent Setup -- Review
+
+  Identity:    npub1...
+  Admin:       npub1...
+  LLM:         claude-haiku-4.5 @ https://api.ppq.ai
+  Relays:      3 configured
+  DM Protocol: nip04
+
+  [B]oot the agent now
+  [W]rite genesis.jsonc (without nsec) and boot
+  [I]nclude nsec in genesis.jsonc and boot (security risk!)
+  [E]xport genesis.jsonc (without nsec) and exit
+  [S]tart over
+  [Q]uit
+
+>
+```
+
+- **B** -- populate `didactyl_config_t` in memory and proceed to normal startup
+- **W** -- write genesis.jsonc without the nsec field, then boot
+- **I** -- write genesis.jsonc WITH nsec (with explicit warning), then boot
+- **E** -- write file and exit so user can review
+- **S** -- restart wizard from welcome screen
+- **Q** -- exit
+
+---
+
+### Path B: Existing Agent
+
+#### B1. Provide nsec
+
+**Prompt:**
+```
+Existing Agent -- Identity
+
+  Enter your agent's nsec (nsec1... or hex):
+>
+```
+
+- Mask input with `termios` echo disable
+- Validate and derive pubkey
+- Display npub for confirmation
+
+#### B2. Recover Config from Nostr
+
+After key derivation:
+1. Connect to default bootstrap relays
+2. Query kind 10002 for the pubkey's relay list
+3. If relay list found: expand relay pool with discovered relays
+4. Query encrypted kind 30078 events for `d=llm_config` and `d=agent_config`
+5. Decrypt and apply recovered config (reuses existing `recover_missing_runtime_config_from_nostr()` logic)
+
+**Display recovery status:**
+```
+Existing Agent -- Config Recovery
+
+  Relay list (kind 10002):  FOUND (6 relays)
+  LLM config:               FOUND (claude-haiku-4.5 @ ppq.ai)
+  Admin config:             FOUND (npub1...)
+
+  [B]oot with recovered config
+  [E]dit settings before booting
+  [Q]uit
+
+>
+```
+
+If any required config is missing:
+```
+Existing Agent -- Config Recovery
+
+  Relay list (kind 10002):  FOUND (6 relays)
+  LLM config:               NOT FOUND
+  Admin config:             NOT FOUND
+
+  Some required config was not found on Nostr.
+  Entering guided setup for missing fields...
+```
+
+Then jump to the appropriate new-agent steps (A2/A3) for the missing pieces only.
+
+---
+
+### Path C: Load Genesis File
+
+**Prompt:**
+```
+Load Genesis File
+
+  Path [./genesis.jsonc]:
+>
+```
+
+- Accept file path, default to `./genesis.jsonc`
+- Load with `config_load()`
+- If nsec is missing from the file, prompt for it
+- Proceed to normal startup
+
+---
+
+## Implementation Architecture
+
+### New Source File: `src/setup_wizard.c` / `src/setup_wizard.h`
+
+Keep the wizard logic isolated from `main.c`. The interface:
+
+```c
+// Returns 0 on success (config populated, ready to boot)
+// Returns -1 on abort/error
+// Returns 1 on "wrote genesis and exit" (no boot)
+int setup_wizard_run(didactyl_config_t* config, char* genesis_path_out, size_t path_size);
+```
+
+### Changes to `src/main.c`
+
+In `main()`, before the existing argument parsing:
+
+```c
+if (argc == 1) {
+    if (!isatty(STDIN_FILENO)) {
+        print_usage(argv[0]);
+        return 1;
+    }
+
+    debug_init(DEBUG_LEVEL_INFO);
+    if (nostr_init() != NOSTR_SUCCESS) {
+        fprintf(stderr, "Failed to initialize nostr core\n");
+        return 1;
+    }
+
+    didactyl_config_t cfg;
+    memset(&cfg, 0, sizeof(cfg));
+    char genesis_path[256] = {0};
+
+    int wizard_rc = setup_wizard_run(&cfg, genesis_path, sizeof(genesis_path));
+    if (wizard_rc < 0) {
+        nostr_cleanup();
+        return 1;  // user aborted
+    }
+    if (wizard_rc == 1) {
+        nostr_cleanup();
+        return 0;  // wrote genesis and exit
+    }
+
+    // Continue with normal startup using populated cfg
+    // Jump past config_load() into the startup checklist
+    goto startup_with_config;
+}
+```
+
+### Changes to `nostr_core_lib`
+
+**No new functions needed.** The existing API surface is sufficient:
+- `nostr_generate_keypair()` -- generate private/public key pair
+- `nostr_key_to_bech32(key, "nsec", output)` -- encode private key as nsec1...
+- `nostr_key_to_bech32(key, "npub", output)` -- encode public key as npub1...
+- `nostr_decode_nsec()` / `nostr_decode_npub()` -- decode bech32 inputs
+
+### LLM Test Call
+
+Reuse the existing `llm.c` infrastructure:
+- Temporarily initialize `llm_init()` with the test config
+- Make a single completion call with a trivial prompt
+- Check for HTTP success and valid response
+- Clean up with `llm_cleanup()`
+
+### Existing Identity Check / Config Recovery
+
+For both new and existing agent paths:
+- Initialize relay pool with bootstrap relays
+- Query kind 10002 for the derived pubkey
+- For existing agents: also query kind 30078 encrypted config events
+- Reuse `is_first_run_from_kind10002()` and `recover_missing_runtime_config_from_nostr()` logic
+
+### Genesis File Writer
+
+A helper function that serializes the collected config to JSONC format:
+
+```c
+int setup_wizard_write_genesis(const didactyl_config_t* config,
+                                const char* path,
+                                int include_nsec);
+```
+
+This writes a human-readable JSONC file with comments, matching the existing `genesis.jsonc` format.
+
+---
+
+## Terminal I/O Considerations
+
+- Use `fgets()` for line input (not `scanf`)
+- Mask nsec input with `termios` echo disable on Linux
+- Handle Ctrl+C gracefully (restore terminal settings via `atexit` handler)
+- Use ANSI underline (`\e[4m`) for hotkey letters in menu options
+- Use ANSI colors sparingly for emphasis (warnings in yellow/red)
+- All prompts go to stderr, so stdout can be piped if needed
+
+---
+
+## Security Considerations
+
+- Generated nsec is held in memory only unless user explicitly chooses to write genesis with nsec
+- nsec input is masked (echo disabled) during entry
+- If writing genesis with nsec, display a clear warning about the security implications
+- The nsec-less genesis file is the recommended default
+- After writing, suggest: "For subsequent runs, use: `./didactyl --config genesis.jsonc --nsec <your_nsec>`"
+- Or: "Set DIDACTYL_NSEC environment variable for convenience"
+
+---
+
+## Files to Create/Modify
+
+| File | Action | Description |
+|------|--------|-------------|
+| `src/setup_wizard.h` | Create | Wizard public interface |
+| `src/setup_wizard.c` | Create | Interactive wizard implementation |
+| `src/main.c` | Modify | Add `argc == 1` check to enter wizard before arg parsing |
+| `Makefile` | Modify | Add `setup_wizard.o` to build |
+| `docs/GENESIS.md` | Modify | Document the interactive setup mode |
+| `README.md` | Modify | Add guided setup to usage section |
+
+---
+
+## Edge Cases
+
+1. **Piped/non-TTY stdin**: Detect with `isatty(STDIN_FILENO)`. If not a TTY, print usage and exit instead of entering wizard.
+2. **Ctrl+C during setup**: Signal handler restores terminal settings and exits cleanly.
+3. **Genesis file already exists at write path**: Prompt "[O]verwrite or [C]hoose different path?" before overwriting.
+4. **LLM test timeout**: Set a reasonable timeout (10s) and allow skipping.
+5. **No relay connectivity during identity check**: Warn but allow proceeding -- the check is best-effort.
+6. **Existing agent with no config on Nostr**: Seamlessly transition to new-agent steps for the missing pieces.
+7. **Back navigation**: Each step supports `b` to go back to the previous step.

plans/new_nostr_tools.md

@@ -11,9 +11,9 @@
 | 5 | `nostr_react` | 7 / NIP-25 | ✅ Shipped |
 | 6 | `nostr_profile_get` | 0 query | ✅ Shipped |
 | 7 | `nostr_relay_status` | Pool stats | ✅ Shipped |
-| 8 | `shell_exec` | OS | ✅ Shipped |
-| 9 | `file_read` | OS | ✅ Shipped |
-| 10 | `file_write` | OS | ✅ Shipped |
+| 8 | `local_shell_exec` | OS | ✅ Shipped |
+| 9 | `local_file_read` | OS | ✅ Shipped |
+| 10 | `local_file_write` | OS | ✅ Shipped |
 
 ---
 

plans/new_trigger_types.md

@@ -0,0 +1,689 @@
+# Plan: Implement Webhook, Cron, and Chain Trigger Types
+
+## Overview
+
+Add three new trigger types to Didactyl's trigger system alongside the existing `nostr-subscription` type. Implementation order: webhook → cron → chain, followed by documentation updates.
+
+## Current Architecture
+
+```mermaid
+flowchart LR
+    subgraph Current Flow
+        NS[Nostr Event] --> SUB[Subscription Callback]
+        SUB --> MF[maybe_fire_trigger_locked]
+        MF --> EA{Action Type?}
+        EA -->|template| TA[execute_template_action]
+        EA -->|llm| LA[execute_llm_action]
+        LA --> AOT[agent_on_trigger]
+    end
+```
+
+All triggers are implicitly `nostr-subscription` — there is no type discriminator field in `active_trigger_t`.
+
+## Target Architecture
+
+```mermaid
+flowchart TD
+    subgraph Trigger Sources
+        NS[Nostr Subscription]
+        WH[Webhook HTTP POST]
+        CR[Cron Timer]
+        CH[Chain - Post-Execution]
+    end
+
+    subgraph Trigger Manager
+        NS --> MF[maybe_fire_trigger]
+        WH --> MF
+        CR --> MF
+        CH --> MF
+    end
+
+    subgraph Dispatch
+        MF --> EA{Action Type?}
+        EA -->|template| TA[execute_template_action]
+        EA -->|llm| LA[execute_llm_action]
+        LA --> AOT[agent_on_trigger]
+        AOT -->|on completion| CHK[Check chain triggers]
+        CHK -->|match| CH
+    end
+```
+
+---
+
+## Phase 1: Foundation — Type System and API Changes
+
+### 1.1 Add trigger type enum to `trigger_manager.h`
+
+**File:** [`src/trigger_manager.h`](src/trigger_manager.h:15)
+
+Add a new enum after the existing `trigger_action_type_t` at line 18:
+
+```c
+typedef enum {
+    TRIGGER_TYPE_NOSTR_SUBSCRIPTION = 0,
+    TRIGGER_TYPE_WEBHOOK,
+    TRIGGER_TYPE_CRON,
+    TRIGGER_TYPE_CHAIN
+} trigger_type_t;
+```
+
+### 1.2 Extend `active_trigger_t` struct
+
+**File:** [`src/trigger_manager.h`](src/trigger_manager.h:20)
+
+Add three new fields to the struct after [`enabled`](src/trigger_manager.h:25):
+
+```c
+trigger_type_t trigger_type;     // discriminator: which trigger source
+time_t last_cron_fire;           // cron: last time this trigger fired
+char cron_expr[64];              // cron: parsed 5-field cron expression
+```
+
+The struct currently has `subscription` and `subscription_ctx` fields which are only relevant for `nostr-subscription` — they'll remain but be NULL for other types.
+
+### 1.3 Add trigger type string conversion helpers
+
+**File:** [`src/trigger_manager.h`](src/trigger_manager.h:57) — add declarations:
+
+```c
+trigger_type_t trigger_type_from_string(const char *s);
+const char* trigger_type_to_string(trigger_type_t t);
+```
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c:20) — add implementations after `clamp_enabled()`:
+
+```c
+trigger_type_t trigger_type_from_string(const char *s) {
+    if (!s) return TRIGGER_TYPE_NOSTR_SUBSCRIPTION;
+    if (strcmp(s, "webhook") == 0) return TRIGGER_TYPE_WEBHOOK;
+    if (strcmp(s, "cron") == 0) return TRIGGER_TYPE_CRON;
+    if (strcmp(s, "chain") == 0) return TRIGGER_TYPE_CHAIN;
+    return TRIGGER_TYPE_NOSTR_SUBSCRIPTION;
+}
+
+const char* trigger_type_to_string(trigger_type_t t) {
+    switch (t) {
+        case TRIGGER_TYPE_WEBHOOK: return "webhook";
+        case TRIGGER_TYPE_CRON: return "cron";
+        case TRIGGER_TYPE_CHAIN: return "chain";
+        default: return "nostr-subscription";
+    }
+}
+```
+
+### 1.4 Update `trigger_manager_add()` signature
+
+**File:** [`src/trigger_manager.h`](src/trigger_manager.h:44) and [`src/trigger_manager.c`](src/trigger_manager.c:569)
+
+Add `const char* trigger_type_str` parameter:
+
+```c
+int trigger_manager_add(trigger_manager_t* mgr,
+                        const char* skill_d_tag,
+                        const char* content,
+                        const char* filter_json,
+                        trigger_action_type_t action_type,
+                        const char* trigger_type_str,   // NEW
+                        int enabled);
+```
+
+Inside the function body at [line 604](src/trigger_manager.c:604), after `memset(t, 0, sizeof(*t))` and field assignments:
+
+```c
+t->trigger_type = trigger_type_from_string(trigger_type_str);
+
+// For cron triggers, copy the filter as the cron expression
+if (t->trigger_type == TRIGGER_TYPE_CRON) {
+    snprintf(t->cron_expr, sizeof(t->cron_expr), "%s", filter_json);
+    t->last_cron_fire = 0;
+}
+
+// Only create Nostr subscription for nostr-subscription type
+if (t->trigger_type == TRIGGER_TYPE_NOSTR_SUBSCRIPTION) {
+    if (register_trigger_subscription_locked(mgr, t) != 0) {
+        pthread_mutex_unlock(&mgr->mutex);
+        DEBUG_WARN("[didactyl] trigger add rejected: subscription failed d_tag=%s", skill_d_tag);
+        memset(t, 0, sizeof(*t));
+        return -1;
+    }
+}
+```
+
+### 1.5 Update `trigger_manager_update()` signature
+
+**File:** [`src/trigger_manager.h`](src/trigger_manager.h:51) and [`src/trigger_manager.c`](src/trigger_manager.c:661)
+
+Same pattern — add `const char* trigger_type_str` parameter. Inside the body at [line 683](src/trigger_manager.c:683):
+
+```c
+t->trigger_type = trigger_type_from_string(trigger_type_str);
+
+if (t->trigger_type == TRIGGER_TYPE_CRON) {
+    snprintf(t->cron_expr, sizeof(t->cron_expr), "%s", filter_json);
+}
+
+// Only (re)subscribe for nostr-subscription type
+if (t->trigger_type == TRIGGER_TYPE_NOSTR_SUBSCRIPTION) {
+    if (register_trigger_subscription_locked(mgr, t) != 0) { ... }
+} else {
+    // Close any existing subscription if type changed
+    close_trigger_subscription_locked(t);
+}
+```
+
+### 1.6 Update all call sites of `trigger_manager_add()` and `trigger_manager_update()`
+
+There are 5 call sites that need the new `trigger_type_str` parameter:
+
+| Call Site | File | Line | Current `trigger_type_str` value |
+|---|---|---|---|
+| `trigger_manager_load_from_skills()` | [`src/trigger_manager.c`](src/trigger_manager.c:485) | 485 | `trigger_s` — already extracted from tags |
+| `trigger_manager_load_from_startup_events()` | [`src/trigger_manager.c`](src/trigger_manager.c:555) | 555 | `trigger_s` — already extracted from tags |
+| `execute_skill_create()` | [`src/tools.c`](src/tools.c:3678) | 3678 | `trigger_str` — already available |
+| `execute_skill_edit()` update call | [`src/tools.c`](src/tools.c:4213) | 4213 | `merged_trigger` — already available |
+| `execute_skill_edit()` add fallback | [`src/tools.c`](src/tools.c:4219) | 4219 | `merged_trigger` — already available |
+| `trigger_manager_add()` → `trigger_manager_update()` cross-call | [`src/trigger_manager.c`](src/trigger_manager.c:588) | 588 | Pass through from caller |
+| `trigger_manager_update()` → `trigger_manager_add()` cross-call | [`src/trigger_manager.c`](src/trigger_manager.c:680) | 680 | Pass through from caller |
+
+### 1.7 Update loading functions to accept all trigger types
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c:482)
+
+In `trigger_manager_load_from_skills()`, change the filter at line 482 from:
+```c
+if (trigger_s && strcmp(trigger_s, "nostr-subscription") == 0 && filter_s && filter_s[0] != '\0') {
+```
+To:
+```c
+if (trigger_s && filter_s && filter_s[0] != '\0' &&
+    (strcmp(trigger_s, "nostr-subscription") == 0 ||
+     strcmp(trigger_s, "webhook") == 0 ||
+     strcmp(trigger_s, "cron") == 0 ||
+     strcmp(trigger_s, "chain") == 0)) {
+```
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c:547)
+
+Same change in `trigger_manager_load_from_startup_events()` at line 547.
+
+Note: For `webhook` type, `filter` can be empty/unused since webhooks are triggered by HTTP POST, not by a filter match. Consider allowing empty filter for webhook type. However, keeping the existing requirement that filter must be non-empty is simpler — webhook skills can use `filter: "{}"` as a placeholder.
+
+### 1.8 Update `trigger_manager_status_json()`
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c:761)
+
+After the existing `cJSON_AddStringToObject(item, "filter_json", ...)` at line 762, add:
+
+```c
+cJSON_AddStringToObject(item, "type", trigger_type_to_string(t->trigger_type));
+```
+
+### 1.9 Update `tools.c` validation
+
+**File:** [`src/tools.c`](src/tools.c:3603)
+
+In `execute_skill_create()`, change line 3603 from:
+```c
+if (trigger_str && strcmp(trigger_str, "nostr-subscription") != 0) {
+```
+To:
+```c
+if (trigger_str &&
+    strcmp(trigger_str, "nostr-subscription") != 0 &&
+    strcmp(trigger_str, "webhook") != 0 &&
+    strcmp(trigger_str, "cron") != 0 &&
+    strcmp(trigger_str, "chain") != 0) {
+```
+
+Update the error message to list valid types.
+
+**File:** [`src/tools.c`](src/tools.c:4177)
+
+In `execute_skill_edit()`, change line 4177 from:
+```c
+if (strcmp(merged_trigger, "nostr-subscription") != 0) {
+```
+To the same multi-type check.
+
+Also update the `trigger_manager_add()` and `trigger_manager_update()` calls at [lines 3678](src/tools.c:3678) and [4213-4224](src/tools.c:4213) to pass the trigger type string.
+
+---
+
+## Phase 2: Webhook Trigger
+
+### 2.1 Add `POST /api/trigger/:d_tag` route handler
+
+**File:** [`src/http_api.c`](src/http_api.c:1154)
+
+Add a new handler function before `http_handler()`:
+
+```c
+static void handle_trigger_webhook(struct mg_connection* c, struct mg_http_message* hm, const char* d_tag) {
+    if (!g_api_ctx.trigger_manager) {
+        reply_error(c, 503, "trigger manager unavailable");
+        return;
+    }
+
+    // Look up the trigger by d_tag
+    // Need a new function: trigger_manager_find_by_d_tag() that returns a copy
+    active_trigger_t trigger_copy;
+    if (trigger_manager_find(g_api_ctx.trigger_manager, d_tag, &trigger_copy) != 0) {
+        reply_error(c, 404, "no trigger found for d_tag");
+        return;
+    }
+
+    if (trigger_copy.trigger_type != TRIGGER_TYPE_WEBHOOK) {
+        reply_error(c, 400, "trigger is not a webhook type");
+        return;
+    }
+
+    if (!trigger_copy.enabled) {
+        reply_error(c, 400, "trigger is disabled");
+        return;
+    }
+
+    // Parse optional JSON body as the webhook payload
+    cJSON* payload = parse_body_json(hm);
+    if (!payload) {
+        reply_error(c, 400, "invalid JSON body");
+        return;
+    }
+
+    // Build synthetic triggering event
+    cJSON* event = cJSON_CreateObject();
+    cJSON_AddStringToObject(event, "type", "webhook");
+    cJSON_AddStringToObject(event, "d_tag", d_tag);
+    cJSON_AddNumberToObject(event, "created_at", (double)time(NULL));
+    cJSON_AddItemToObject(event, "payload", payload);
+
+    // Fire the trigger - dispatch based on action type
+    if (trigger_copy.action_type == TRIGGER_ACTION_LLM) {
+        agent_on_trigger(trigger_copy.skill_d_tag,
+                        trigger_copy.skill_content,
+                        event,
+                        "webhook");
+    }
+    // Template actions could also be supported here
+
+    cJSON_Delete(event);
+
+    // Return success immediately
+    cJSON* root = cJSON_CreateObject();
+    cJSON_AddBoolToObject(root, "success", 1);
+    cJSON_AddStringToObject(root, "d_tag", d_tag);
+    cJSON_AddStringToObject(root, "status", "fired");
+    reply_json(c, 200, root);
+    cJSON_Delete(root);
+}
+```
+
+### 2.2 Add route to `http_handler()`
+
+**File:** [`src/http_api.c`](src/http_api.c:1201)
+
+Before the 404 fallthrough at line 1206, add:
+
+```c
+if (method_is(hm, "POST") && mg_match(hm->uri, mg_str("/api/trigger/*"), NULL)) {
+    // Extract d_tag from URI: /api/trigger/{d_tag}
+    struct mg_str uri = hm->uri;
+    const char* prefix = "/api/trigger/";
+    size_t prefix_len = strlen(prefix);
+    if (uri.len > prefix_len) {
+        char d_tag[TRIGGER_SKILL_D_TAG_MAX];
+        size_t tag_len = uri.len - prefix_len;
+        if (tag_len >= sizeof(d_tag)) tag_len = sizeof(d_tag) - 1;
+        memcpy(d_tag, uri.buf + prefix_len, tag_len);
+        d_tag[tag_len] = '\0';
+        handle_trigger_webhook(c, hm, d_tag);
+        return;
+    }
+    reply_error(c, 400, "missing d_tag in trigger URL");
+    return;
+}
+```
+
+### 2.3 Add `trigger_manager_find()` function
+
+**File:** [`src/trigger_manager.h`](src/trigger_manager.h:50) and [`src/trigger_manager.c`](src/trigger_manager.c:631)
+
+New function to look up a trigger by d_tag and return a copy:
+
+```c
+// Declaration
+int trigger_manager_find(trigger_manager_t* mgr, const char* skill_d_tag, active_trigger_t* out);
+
+// Implementation
+int trigger_manager_find(trigger_manager_t* mgr, const char* skill_d_tag, active_trigger_t* out) {
+    if (!mgr || !skill_d_tag || !out) return -1;
+    pthread_mutex_lock(&mgr->mutex);
+    int idx = find_trigger_index_locked(mgr, skill_d_tag);
+    if (idx < 0) {
+        pthread_mutex_unlock(&mgr->mutex);
+        return -1;
+    }
+    *out = mgr->triggers[idx];
+    // Clear pointer fields in copy to prevent double-free
+    out->subscription = NULL;
+    out->subscription_ctx = NULL;
+    pthread_mutex_unlock(&mgr->mutex);
+    return 0;
+}
+```
+
+### 2.4 Webhook cooldown
+
+The webhook handler should respect the same cooldown as other triggers. Either:
+- Call `maybe_fire_trigger_locked()` from the webhook handler (requires refactoring to expose it), or
+- Add cooldown checking in the webhook handler using `trigger_copy.last_fired` and updating it via a new `trigger_manager_mark_fired()` function
+
+Recommended: Add a `trigger_manager_fire()` function that encapsulates the cooldown check and dispatch, usable by both the Nostr subscription callback and the webhook handler. This avoids duplicating cooldown logic.
+
+```c
+int trigger_manager_fire(trigger_manager_t* mgr, const char* skill_d_tag, cJSON* event, const char* source);
+```
+
+---
+
+## Phase 3: Cron Trigger
+
+### 3.1 Cron expression parser
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c)
+
+Add a minimal 5-field cron expression matcher. The cron expression format is: `minute hour day-of-month month day-of-week`
+
+```c
+// Returns 1 if the cron expression matches the given time, 0 otherwise
+static int cron_matches(const char* expr, const struct tm* tm);
+
+// Helper: check if a single field matches a value
+// Supports: *, specific number, comma-separated list, ranges with -, step with /
+static int cron_field_matches(const char* field, int value, int min, int max);
+```
+
+The parser needs to handle:
+- `*` — match any
+- `5` — match exact value
+- `1,15` — match list
+- `1-5` — match range
+- `*/15` — match step
+- `1-5/2` — match range with step
+
+This is ~80-100 lines of C. Keep it simple — no named days/months, no special strings like `@hourly`.
+
+### 3.2 Implement `trigger_manager_poll()` for cron
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c:718)
+
+Replace the no-op `trigger_manager_poll()` with cron checking logic:
+
+```c
+int trigger_manager_poll(trigger_manager_t* mgr) {
+    if (!mgr) return 0;
+
+    time_t now = time(NULL);
+
+    // Only check once per minute (cron resolution is 1 minute)
+    if (now - mgr->last_poll_at < 60) return 0;
+    mgr->last_poll_at = now;
+
+    struct tm tm_now;
+    localtime_r(&now, &tm_now);
+
+    pthread_mutex_lock(&mgr->mutex);
+
+    for (int i = 0; i < mgr->count; i++) {
+        active_trigger_t* t = &mgr->triggers[i];
+        if (!t->enabled || t->trigger_type != TRIGGER_TYPE_CRON) continue;
+        if (t->cron_expr[0] == '\0') continue;
+
+        if (!cron_matches(t->cron_expr, &tm_now)) continue;
+
+        // Prevent double-fire within same minute
+        struct tm tm_last;
+        localtime_r(&t->last_cron_fire, &tm_last);
+        if (t->last_cron_fire > 0 &&
+            tm_last.tm_min == tm_now.tm_min &&
+            tm_last.tm_hour == tm_now.tm_hour &&
+            tm_last.tm_mday == tm_now.tm_mday) {
+            continue;
+        }
+
+        t->last_cron_fire = now;
+        t->last_fired = now;
+
+        // Copy trigger data before unlocking
+        active_trigger_t trigger_copy = *t;
+        trigger_copy.subscription = NULL;
+        trigger_copy.subscription_ctx = NULL;
+        pthread_mutex_unlock(&mgr->mutex);
+
+        // Build synthetic cron event
+        cJSON* event = cJSON_CreateObject();
+        cJSON_AddStringToObject(event, "type", "cron");
+        cJSON_AddStringToObject(event, "d_tag", trigger_copy.skill_d_tag);
+        cJSON_AddNumberToObject(event, "created_at", (double)now);
+        cJSON_AddStringToObject(event, "cron_expr", trigger_copy.cron_expr);
+
+        if (trigger_copy.action_type == TRIGGER_ACTION_TEMPLATE) {
+            execute_template_action(mgr, &trigger_copy, event, "cron");
+        } else {
+            execute_llm_action(&trigger_copy, event, "cron");
+        }
+
+        cJSON_Delete(event);
+
+        // Re-lock and continue scanning
+        pthread_mutex_lock(&mgr->mutex);
+    }
+
+    pthread_mutex_unlock(&mgr->mutex);
+    return 0;
+}
+```
+
+### 3.3 Cron expression in skill tags
+
+For cron triggers, the `filter` tag contains the cron expression instead of a JSON filter:
+- `["trigger", "cron"]`
+- `["filter", "0 * * * *"]` — fires every hour at minute 0
+- `["filter", "*/5 * * * *"]` — fires every 5 minutes
+
+This reuses the existing `filter` tag semantics — the filter meaning depends on the trigger type.
+
+---
+
+## Phase 4: Chain Trigger
+
+### 4.1 Post-execution hook in `agent_on_trigger()`
+
+**File:** [`src/agent.c`](src/agent.c:1913)
+
+After the tool loop completes at [line 2041](src/agent.c:2041), before cleanup, add a chain trigger check:
+
+```c
+// After the tool loop, check for chain triggers
+// Need access to trigger_manager — use agent_get_trigger_manager() or global
+trigger_manager_fire_chains(g_trigger_manager, skill_d_tag, messages);
+```
+
+This requires:
+1. The agent needs access to the trigger manager — it already has this via [`agent_set_trigger_manager()`](src/agent.h:12)
+2. A new function `trigger_manager_fire_chains()` that scans for chain triggers whose filter matches the completed skill's d_tag
+
+### 4.2 Add `trigger_manager_fire_chains()` function
+
+**File:** [`src/trigger_manager.c`](src/trigger_manager.c)
+
+```c
+void trigger_manager_fire_chains(trigger_manager_t* mgr,
+                                  const char* source_d_tag,
+                                  cJSON* source_output) {
+    if (!mgr || !source_d_tag) return;
+
+    pthread_mutex_lock(&mgr->mutex);
+
+    for (int i = 0; i < mgr->count; i++) {
+        active_trigger_t* t = &mgr->triggers[i];
+        if (!t->enabled || t->trigger_type != TRIGGER_TYPE_CHAIN) continue;
+
+        // For chain triggers, filter_json contains the source skill d_tag
+        if (strcmp(t->filter_json, source_d_tag) != 0) continue;
+
+        // Cooldown check
+        time_t now = time(NULL);
+        int cooldown = mgr->cfg->triggers.cooldown_seconds;
+        if (cooldown > 0 && t->last_fired > 0 && (now - t->last_fired) < cooldown) continue;
+
+        t->last_fired = now;
+
+        active_trigger_t trigger_copy = *t;
+        trigger_copy.subscription = NULL;
+        trigger_copy.subscription_ctx = NULL;
+        pthread_mutex_unlock(&mgr->mutex);
+
+        // Build synthetic chain event
+        cJSON* event = cJSON_CreateObject();
+        cJSON_AddStringToObject(event, "type", "chain");
+        cJSON_AddStringToObject(event, "source_d_tag", source_d_tag);
+        cJSON_AddNumberToObject(event, "created_at", (double)now);
+        if (source_output) {
+            cJSON* output_copy = cJSON_Duplicate(source_output, 1);
+            if (output_copy) {
+                cJSON_AddItemToObject(event, "source_output", output_copy);
+            }
+        }
+
+        if (trigger_copy.action_type == TRIGGER_ACTION_LLM) {
+            execute_llm_action(&trigger_copy, event, "chain");
+        }
+        // Note: template actions could also be supported
+
+        cJSON_Delete(event);
+
+        pthread_mutex_lock(&mgr->mutex);
+    }
+
+    pthread_mutex_unlock(&mgr->mutex);
+}
+```
+
+### 4.3 Chain trigger recursion protection
+
+To prevent infinite chain loops (A → B → A → B → ...), add a chain depth counter:
+
+- Add a `static __thread int chain_depth = 0;` in `trigger_manager_fire_chains()`
+- Increment before firing, decrement after
+- Refuse to fire if depth exceeds a limit (e.g., 5)
+
+### 4.4 Chain trigger skill tags
+
+For chain triggers, the `filter` tag contains the source skill's d_tag:
+- `["trigger", "chain"]`
+- `["filter", "data-fetcher"]` — fires after `data-fetcher` skill completes
+
+### 4.5 What to pass as chain context
+
+The chain trigger's synthetic event should include the source skill's final LLM response. This requires capturing the last assistant message from the tool loop in `agent_on_trigger()`. Currently the function doesn't return any output — it just runs and exits.
+
+**Approach:** After the tool loop at [line 2041](src/agent.c:2041), extract the last assistant message from `messages` array and pass it to `trigger_manager_fire_chains()`.
+
+---
+
+## Phase 5: Documentation
+
+### 5.1 Update `docs/SKILLS.md`
+
+**File:** [`docs/SKILLS.md`](docs/SKILLS.md:209)
+
+Expand the Trigger Tags table to show all four types and their filter semantics:
+
+| Tag | Required | Description |
+|---|---|---|
+| `trigger` | Yes | Trigger type: `nostr-subscription`, `webhook`, `cron`, or `chain` |
+| `filter` | Yes | Type-dependent: JSON filter, empty/unused, cron expression, or source d_tag |
+| `action` | No | `template` or `llm` — default: `llm` |
+| `enabled` | No | Whether active — default: `true` |
+
+Add sections for each new trigger type with examples.
+
+Update the Future Extensions table to mark webhook, cron, and chain as implemented.
+
+### 5.2 Update `docs/API.md`
+
+**File:** [`docs/API.md`](docs/API.md:49)
+
+Add documentation for the new webhook endpoint:
+
+```
+### POST /api/trigger/:d_tag
+
+Fire a webhook trigger by skill d_tag.
+
+**URL Parameters:**
+- `d_tag` — The skill's d_tag identifier
+
+**Request Body:** Optional JSON payload passed as context to the skill
+
+**Response:**
+{
+  "success": true,
+  "d_tag": "my-webhook-skill",
+  "status": "fired"
+}
+```
+
+---
+
+## Phase 6: Build and Push
+
+1. Run `make -j` and fix any compilation warnings/errors
+2. Test webhook with: `curl -X POST http://localhost:8484/api/trigger/test-skill -d '{"message":"hello"}'`
+3. Push with `./increment_and_push.sh "feat: add webhook, cron, and chain trigger types"`
+
+---
+
+## Files Modified Summary
+
+| File | Changes |
+|---|---|
+| [`src/trigger_manager.h`](src/trigger_manager.h) | Add `trigger_type_t` enum, extend `active_trigger_t`, update function signatures, add new declarations |
+| [`src/trigger_manager.c`](src/trigger_manager.c) | Type conversion helpers, update load/add/update functions, cron parser, poll implementation, chain fire function, find function |
+| [`src/tools.c`](src/tools.c) | Update `execute_skill_create()` and `execute_skill_edit()` validation and call sites |
+| [`src/http_api.c`](src/http_api.c) | Add webhook route handler and route entry |
+| [`src/agent.c`](src/agent.c) | Add chain trigger post-execution hook in `agent_on_trigger()` |
+| [`src/agent.h`](src/agent.h) | No changes needed — `agent_on_trigger()` signature unchanged |
+| [`docs/SKILLS.md`](docs/SKILLS.md) | Document all three new trigger types |
+| [`docs/API.md`](docs/API.md) | Document webhook endpoint |
+
+---
+
+## Implementation Checklist
+
+- [ ] Add `trigger_type_t` enum to `trigger_manager.h`
+- [ ] Extend `active_trigger_t` struct with `trigger_type`, `last_cron_fire`, `cron_expr`
+- [ ] Add `trigger_type_from_string()` and `trigger_type_to_string()` declarations and implementations
+- [ ] Add `trigger_manager_find()` declaration and implementation
+- [ ] Add `trigger_manager_fire_chains()` declaration and implementation
+- [ ] Update `trigger_manager_add()` signature with `trigger_type_str` parameter
+- [ ] Update `trigger_manager_update()` signature with `trigger_type_str` parameter
+- [ ] Update `trigger_manager_add()` body: set trigger_type, conditional subscription registration
+- [ ] Update `trigger_manager_update()` body: set trigger_type, conditional subscription
+- [ ] Update `trigger_manager_load_from_skills()` to accept all 4 trigger types
+- [ ] Update `trigger_manager_load_from_startup_events()` to accept all 4 trigger types
+- [ ] Update `trigger_manager_status_json()` to include type field
+- [ ] Update `execute_skill_create()` validation at line 3603
+- [ ] Update `execute_skill_create()` `trigger_manager_add()` call at line 3678
+- [ ] Update `execute_skill_edit()` validation at line 4177
+- [ ] Update `execute_skill_edit()` `trigger_manager_update()` and `trigger_manager_add()` calls at lines 4213-4224
+- [ ] Add `handle_trigger_webhook()` handler to `http_api.c`
+- [ ] Add webhook route to `http_handler()` in `http_api.c`
+- [ ] Implement `cron_field_matches()` and `cron_matches()` in `trigger_manager.c`
+- [ ] Implement cron polling in `trigger_manager_poll()`
+- [ ] Add chain trigger post-execution hook in `agent_on_trigger()`
+- [ ] Add chain depth recursion protection
+- [ ] Update `docs/SKILLS.md` with all three new trigger types
+- [ ] Update `docs/API.md` with webhook endpoint
+- [ ] Build with `make -j` and verify clean compilation
+- [ ] Push with `./increment_and_push.sh`

plans/nostr_core_logging_integration.md

@@ -0,0 +1,81 @@
+# Didactyl Integration Plan: Unified `nostr_core_lib` Logging into One File
+
+## Goal
+
+Route `nostr_core_lib` logs through didactyl logging so there is one authoritative file for errors, using existing didactyl logging in [`debug.c`](../src/debug.c:1) plus the new callback API in [`nostr_log.h`](../nostr_core_lib/nostr_core/nostr_log.h:1).
+
+## Current State
+
+- Didactyl writes logs to path from `DIDACTYL_LOG_FILE` or default `debug.log` in [`debug_open_log_file`](../src/debug.c:10).
+- Didactyl log emission is centralized in [`debug_log`](../src/debug.c:31).
+- Relay pool setup occurs in [`nostr_handler_init`](../src/nostr_handler.c:1519).
+- `nostr_core_lib` now exposes callback logging API in [`nostr_log.h`](../nostr_core_lib/nostr_core/nostr_log.h:1).
+
+## Desired End State
+
+- `nostr_core_lib` logs are forwarded into didactyl logger via callback registration.
+- One file path configured by `DIDACTYL_LOG_FILE` receives didactyl plus nostr_core_lib errors.
+- Log lines preserve source component tags such as `nostr:websocket` and `nostr:nip013`.
+
+## Architecture
+
+```mermaid
+flowchart TD
+    A[nostr_core_lib emits callback log] --> B[didactyl bridge callback in nostr_handler.c]
+    B --> C[map nostr level to didactyl level]
+    C --> D[debug_log in debug.c]
+    D --> E[DIDACTYL_LOG_FILE single destination]
+```
+
+## Implementation Steps
+
+1. Add bridge function in [`nostr_handler.c`](../src/nostr_handler.c:1519)
+   - Create static callback `nostr_core_log_bridge level component message user_data`.
+   - Prefix forwarded lines with `nostr:` namespace.
+
+2. Map levels from `nostr_core_lib` to didactyl
+   - `NOSTR_LOG_LEVEL_ERROR` to `DEBUG_LEVEL_ERROR`
+   - `NOSTR_LOG_LEVEL_WARN` to `DEBUG_LEVEL_WARN`
+   - `NOSTR_LOG_LEVEL_INFO` to `DEBUG_LEVEL_INFO`
+   - `NOSTR_LOG_LEVEL_DEBUG` to `DEBUG_LEVEL_DEBUG`
+   - `NOSTR_LOG_LEVEL_TRACE` to `DEBUG_LEVEL_TRACE`
+
+3. Register callback during startup in [`nostr_handler_init`](../src/nostr_handler.c:1519)
+   - Before relay setup, call `nostr_set_log_callback`.
+   - Set threshold with `nostr_set_log_level` aligned to current didactyl debug level.
+
+4. Enforce single-file policy
+   - Set `DIDACTYL_LOG_FILE` to desired final log path.
+   - Keep didactyl as only file owner via [`debug_open_log_file`](../src/debug.c:10).
+
+5. Ensure error visibility
+   - Keep bridge forwarding at least error and warn levels even when app runs at lower verbosity.
+   - Optionally pin library threshold to `WARN` or `ERROR` for production profiles.
+
+## Validation Plan
+
+1. Start didactyl with explicit file path
+   - Example environment: `DIDACTYL_LOG_FILE=didactyl.log`.
+
+2. Trigger nostr websocket activity
+   - Confirm `nostr:websocket` entries appear in same file.
+
+3. Trigger nip013 path
+   - Confirm `nostr:nip013` entries appear in same file.
+
+4. Trigger normal didactyl LLM call
+   - Confirm `[didactyl] llm request` still lands in same file.
+
+5. Verify there is no second active file for nostr core logs.
+
+## Rollout Notes
+
+- Implement bridge first, then verify in development run.
+- If log volume is too high, reduce callback threshold by setting `nostr_set_log_level`.
+- Keep one destination file operationally stable by configuring and documenting `DIDACTYL_LOG_FILE`.
+
+## Files to Change in Code Mode
+
+- [`src/nostr_handler.c`](../src/nostr_handler.c)
+- Optional docs update in [`README.md`](../README.md)
+- Optional operational note in [`docs/TOOLS.md`](../docs/TOOLS.md)

plans/prompt_templates.md

@@ -106,22 +106,16 @@ Simple YAML-like format parsed in C. Each section has:
 |---|---|---|
 | `section` | yes | Section name for logging and API identification |
 | `role` | yes | Chat message role: `system`, `user`, `assistant`, or `expand` |
-| `content` | no | Content template with `{{variable}}` placeholders |
-| `limit` | no | Integer limit for variable-length sections like DM history or notes |
+| `tool` | recommended | Tool name executed by template builder (for example `nostr_admin_profile`) |
+| `args` | no | JSON args string passed to the tool (default `{}`) |
+| `result_field` | no | Field extracted from tool JSON result (default `content`) |
+| `content` | optional fallback | Literal content when no `tool` is specified |
+| `limit` | no | Integer limit for variable-length sections like DM history |
 | `provider` | no | Provider-specific override — see below |
 
-### Variable Placeholders
+### Tool-Driven Context Resolution
 
-| Variable | Source | Description |
-|---|---|---|
-| `{{admin_pubkey}}` | `config.admin.pubkey` | Admin hex pubkey |
-| `{{admin_kind0_json}}` | `nostr_handler_get_admin_kind0_context()` | Admin profile JSON |
-| `{{admin_kind10002_json}}` | `nostr_handler_get_admin_kind10002_context()` | Admin relay list JSON |
-| `{{startup_events_json}}` | Serialized startup events | Startup events array |
-| `{{adopted_skills_content}}` | Adoption list cache | Formatted skill instructions |
-| `{{admin_notes_content}}` | `nostr_handler_get_admin_kind1_notes_context()` | Recent kind 1 notes |
-| `{{agent_pubkey}}` | `config.keys.public_key_hex` | Agent own pubkey |
-| `{{agent_npub}}` | Derived from pubkey | Agent npub |
+Context sections should use `tool:` directives as the single runtime data path, which removes the legacy per-variable resolver duplication.
 
 ### Special Section Types
 
@@ -165,10 +159,11 @@ flowchart TD
     DM[Incoming DM] --> BUILD[Build context from template]
     BUILD --> EMIT_SOUL[Emit personality as first system message]
     EMIT_SOUL --> FOREACH[For each template section]
-    FOREACH --> RESOLVE[Resolve {{variables}} from live data]
-    RESOLVE --> CHECK_PROVIDER{Provider override?}
+    FOREACH --> CALL_TOOL[Execute section tool or use literal content]
+    CALL_TOOL --> PICK_FIELD[Extract result_field or content]
+    PICK_FIELD --> CHECK_PROVIDER{Provider override?}
     CHECK_PROVIDER -->|Yes| USE_OVERRIDE[Use provider-specific content]
-    CHECK_PROVIDER -->|No| USE_DEFAULT[Use default content]
+    CHECK_PROVIDER -->|No| USE_DEFAULT[Use tool/literal output]
     USE_OVERRIDE --> EMIT[Emit as chat message]
     USE_DEFAULT --> EMIT
     EMIT --> FOREACH

plans/security_and_admin_context.md

@@ -194,9 +194,9 @@ New sections in `config.json`:
 
 ### Problem
 
-Even with Phase 1 protections, the private key (nsec) still lives in Didactyl process memory and in `config.json` on disk. The LLM has `shell_exec` and `file_read` tools — a sufficiently clever prompt injection could theoretically:
-- Read `config.json` via `file_read` (contains nsec)
-- Execute `cat /proc/self/maps` or similar via `shell_exec`
+Even with Phase 1 protections, the private key (nsec) still lives in Didactyl process memory and in `config.json` on disk. The LLM has `local_shell_exec` and `local_file_read` tools — a sufficiently clever prompt injection could theoretically:
+- Read `config.json` via `local_file_read` (contains nsec)
+- Execute `cat /proc/self/maps` or similar via `local_shell_exec`
 - Exfiltrate the key via `nostr_post`
 
 ### Solution: NIP-46 Remote Signer
@@ -280,7 +280,7 @@ flowchart LR
 
 - Private key never in Didactyl process memory
 - Private key never on disk in config.json
-- LLM tools (shell_exec, file_read) cannot access the key
+- LLM tools (local_shell_exec, local_file_read) cannot access the key
 - Even full process compromise of Didactyl does not leak the signing key
 - Remote signer can be on a separate hardened machine
 - Remote signer can implement rate limiting, approval flows, etc.

plans/server_installation_guide.md

@@ -0,0 +1,459 @@
+# Didactyl Server Installation Guide — systemd + Dedicated User Model
+
+## Overview
+
+This document describes how to install Didactyl on a Linux server as a dedicated system user, managed by systemd, with scoped sudo privileges for server maintenance tasks.
+
+The mental model: **Didactyl is a person on your server.** It gets its own home directory, its own login identity, and explicit permission to manage the services you delegate to it — nothing more.
+
+## Architecture
+
+```mermaid
+graph TD
+    subgraph Internet
+        RELAYS[Nostr Relays<br/>wss://relay.damus.io<br/>wss://relay.primal.net]
+        LLM_API[LLM Provider API<br/>OpenAI / PPQ / Ollama]
+    end
+
+    subgraph Server
+        subgraph "systemd"
+            SVC[didactyl.service<br/>User=didactyl<br/>Group=didactyl]
+        end
+
+        subgraph "/home/didactyl/"
+            BIN[didactyl binary]
+            CFG[genesis.jsonc<br/>mode 600]
+            LOGS[context.log.md<br/>didactyl.log]
+        end
+
+        subgraph "Privilege Boundary"
+            SUDOERS[/etc/sudoers.d/didactyl<br/>Whitelisted commands only]
+        end
+
+        subgraph "Unprivileged Commands"
+            MON[free / df / uptime<br/>ps / cat /proc/*<br/>ss -tlnp / top]
+        end
+
+        subgraph "Privileged Commands via sudo"
+            SYSD[systemctl status/restart/start/stop<br/>journalctl<br/>daemon-reload]
+        end
+    end
+
+    ADMIN[Administrator<br/>via Nostr DM] -->|NIP-04 encrypted| RELAYS
+    RELAYS <-->|WebSocket| SVC
+    SVC --> BIN
+    BIN <-->|HTTPS| LLM_API
+    BIN -->|popen as didactyl| MON
+    BIN -->|sudo via popen| SUDOERS
+    SUDOERS --> SYSD
+
+    style CFG fill:#f66,stroke:#333,color:#fff
+    style SUDOERS fill:#ff9,stroke:#333
+    style SVC fill:#9f9,stroke:#333
+```
+
+## Security Model
+
+### Privilege Tiers
+
+Didactyl enforces three privilege tiers for inbound Nostr messages (see `src/config.h` security_config_t):
+
+| Tier | Who | Can use tools? | Can chat? |
+|------|-----|---------------|-----------|
+| **ADMIN** | Your npub (config `admin.pubkey`) | ✅ Yes | ✅ Yes |
+| **WoT** | Contacts in your follow list | ❌ No (configurable) | ✅ Yes |
+| **Stranger** | Everyone else | ❌ No | Canned response or ignored |
+
+Only the ADMIN tier can trigger `local_shell_exec` — the tool that runs commands on the server.
+
+### OS-Level Privilege Separation
+
+The `local_shell_exec` tool in `src/tools/tool_local.c` calls `popen()` directly. Whatever the process user can do, the agent can do. This is why we:
+
+1. Run as a **dedicated unprivileged user** (`didactyl`)
+2. Grant **specific sudo permissions** via `/etc/sudoers.d/didactyl`
+3. Use **systemd sandboxing** directives to limit filesystem access
+
+### What the Agent Cannot Do
+
+With the configuration described in this guide:
+
+- ❌ Write anywhere outside `/home/didactyl/`
+- ❌ Run arbitrary root commands not in the sudoers whitelist
+- ❌ Install or remove packages (unless explicitly whitelisted)
+- ❌ Modify system configuration files in `/etc/`
+- ❌ Access other users' home directories (with proper home directory permissions)
+- ❌ Accept tool commands from anyone except the ADMIN pubkey
+
+---
+
+## Installation Steps
+
+### Prerequisites
+
+- A Linux server with systemd (Debian/Ubuntu, RHEL/Fedora, Arch, etc.)
+- Network access to Nostr relays and your LLM provider
+- The Didactyl static binary (download from releases or build with `./build_static.sh`)
+- A Nostr keypair for the agent (nsec)
+- Your admin Nostr keypair (npub)
+- An LLM API key
+
+### Step 1: Create the Didactyl User
+
+```bash
+# Create a regular user with a home directory and bash shell
+sudo useradd -m -s /bin/bash -c "Didactyl Nostr Agent" didactyl
+```
+
+**Why bash and not nologin?** The `local_shell_exec` tool runs commands via `sh -lc` (login shell). A real shell ensures PATH, locale, and environment are properly initialized. The agent needs to "log in" to do its job.
+
+**Why a real home directory?** The agent needs a workspace for:
+- Its binary and config
+- Log files (`context.log.md`, `didactyl.log`)
+- Any files it creates during shell operations
+- The `working_directory` for the shell tool
+
+### Step 2: Install the Binary and Config
+
+```bash
+# Copy the static binary
+sudo cp didactyl_static_x86_64 /home/didactyl/didactyl
+sudo chmod 755 /home/didactyl/didactyl
+
+# Copy and configure genesis.jsonc
+sudo cp genesis.jsonc /home/didactyl/genesis.jsonc
+
+# CRITICAL: Lock down permissions on the config file (contains nsec private key)
+sudo chmod 600 /home/didactyl/genesis.jsonc
+
+# Set ownership
+sudo chown -R didactyl:didactyl /home/didactyl/
+
+# Protect the home directory from other users
+sudo chmod 750 /home/didactyl/
+```
+
+### Step 3: Configure genesis.jsonc
+
+Edit `/home/didactyl/genesis.jsonc` with the agent's identity, your admin pubkey, LLM credentials, and the shell working directory:
+
+```jsonc
+{
+  "key": {
+    "nsec": "nsec1..."                    // Agent's private key
+  },
+
+  "admin": {
+    "pubkey": "npub1..."                  // YOUR public key
+  },
+
+  "dm_protocol": "nip04",
+
+  "llm": {
+    "provider": "openai",
+    "api_key": "sk-...",
+    "model": "gpt-4o-mini",
+    "base_url": "https://api.openai.com/v1",
+    "max_tokens": 512,
+    "temperature": 0.7
+  },
+
+  "tools": {
+    "enabled": true,
+    "max_turns": 8,
+    "shell": {
+      "enabled": true,
+      "timeout_seconds": 60,              // systemctl can be slow
+      "max_output_bytes": 131072,         // journalctl output can be large
+      "working_directory": "/home/didactyl"
+    }
+  },
+
+  "api": {
+    "enabled": true,
+    "port": 8484,
+    "bind_address": "127.0.0.1"           // Localhost only — do NOT expose
+  },
+
+  "startup_events": [
+    {
+      "kind": 10002,
+      "content": "",
+      "tags": [
+        ["r", "wss://relay.damus.io"],
+        ["r", "wss://relay.primal.net"]
+      ]
+    }
+  ]
+}
+```
+
+**Key settings for server maintenance:**
+
+| Setting | Value | Why |
+|---------|-------|-----|
+| `shell.timeout_seconds` | `60` | `systemctl` and `journalctl` can take time |
+| `shell.max_output_bytes` | `131072` (128KB) | Log output can be verbose |
+| `shell.working_directory` | `/home/didactyl` | Agent's home — safe default CWD |
+| `api.bind_address` | `127.0.0.1` | Never expose the admin API to the network |
+
+### Step 4: Configure sudo Privileges
+
+```bash
+sudo visudo -f /etc/sudoers.d/didactyl
+```
+
+Add the following (adjust to your needs):
+
+```sudoers
+# /etc/sudoers.d/didactyl
+# Didactyl agent — scoped system maintenance privileges
+
+# Service management
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl status *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl start *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl stop *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl enable *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl disable *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl is-active *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl is-enabled *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl list-units *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/systemctl daemon-reload
+
+# Log inspection
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/journalctl *
+
+# Network diagnostics (if needed)
+didactyl ALL=(ALL) NOPASSWD: /usr/sbin/lsof *
+```
+
+**Commands that do NOT need sudo** (the didactyl user can run these directly):
+
+- `free -h` — memory usage
+- `df -h` — disk usage
+- `uptime` — load averages
+- `top -bn1` — process snapshot
+- `ps aux` — process list
+- `cat /proc/cpuinfo` — CPU info
+- `cat /proc/meminfo` — memory info
+- `ss -tlnp` — listening ports (as unprivileged user, shows own processes)
+- `uname -a` — kernel info
+- `w` — who is logged in
+
+### Step 5: Create the systemd Unit File
+
+```bash
+sudo tee /etc/systemd/system/didactyl.service << 'EOF'
+[Unit]
+Description=Didactyl Sovereign Nostr Agent
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=didactyl
+Group=didactyl
+WorkingDirectory=/home/didactyl
+
+ExecStart=/home/didactyl/didactyl --config /home/didactyl/genesis.jsonc --debug 3
+
+# --- Privilege & Sandbox ---
+# Must be false — sudo needs to escalate privileges
+NoNewPrivileges=false
+
+# Protect filesystem: read-only except for agent home
+ProtectSystem=strict
+ReadWritePaths=/home/didactyl
+
+# Must be false — the agent's home IS its workspace
+ProtectHome=false
+
+# Isolate /tmp
+PrivateTmp=yes
+
+# --- Environment ---
+Environment=SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
+
+# --- Restart Policy ---
+Restart=on-failure
+RestartSec=10
+
+# --- Logging ---
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=didactyl
+
+[Install]
+WantedBy=multi-user.target
+EOF
+```
+
+**Important systemd notes:**
+
+| Directive | Value | Reason |
+|-----------|-------|--------|
+| `NoNewPrivileges` | `false` | Required for `sudo` to work from `popen()` |
+| `ProtectSystem` | `strict` | Makes `/usr`, `/boot`, `/etc` read-only |
+| `ReadWritePaths` | `/home/didactyl` | Whitelist the agent's home for writes |
+| `ProtectHome` | `false` | The agent lives in `/home/` — can't protect it from itself |
+| `PrivateTmp` | `yes` | Isolates `/tmp` so other processes can't snoop |
+| `SSL_CERT_FILE` | path to CA bundle | Required for TLS connections to relays and LLM API |
+
+### Step 6: Enable and Start
+
+```bash
+# Reload systemd to pick up the new unit
+sudo systemctl daemon-reload
+
+# Enable auto-start on boot
+sudo systemctl enable didactyl
+
+# Start the agent
+sudo systemctl start didactyl
+
+# Verify it's running
+sudo systemctl status didactyl
+
+# Watch logs in real-time
+sudo journalctl -u didactyl -f
+```
+
+### Step 7: Verify the Agent is Working
+
+1. **Check systemd status:**
+   ```bash
+   sudo systemctl status didactyl
+   ```
+   Should show `active (running)`.
+
+2. **Check logs for relay connections:**
+   ```bash
+   sudo journalctl -u didactyl --no-pager -n 50
+   ```
+   Look for relay connection messages and "EOSE" (End of Stored Events).
+
+3. **Send a test DM via Nostr:**
+   From your admin Nostr client, send an encrypted DM to the agent's npub:
+   ```
+   What is the server uptime?
+   ```
+   The agent should call `local_shell_exec` with `uptime` and reply with the result.
+
+4. **Test sudo access:**
+   ```
+   What services are running? Use systemctl list-units --type=service --state=running
+   ```
+
+5. **Check the local API (from the server itself):**
+   ```bash
+   curl http://127.0.0.1:8484/api/context
+   ```
+
+---
+
+## Updating the Agent
+
+To update Didactyl to a new version:
+
+```bash
+# Stop the service
+sudo systemctl stop didactyl
+
+# Replace the binary
+sudo cp didactyl_static_x86_64_new /home/didactyl/didactyl
+sudo chown didactyl:didactyl /home/didactyl/didactyl
+sudo chmod 755 /home/didactyl/didactyl
+
+# Start the service
+sudo systemctl start didactyl
+```
+
+The agent's identity, skills, and memory live on Nostr — replacing the binary doesn't lose any state.
+
+---
+
+## Expanding Privileges
+
+The sudoers file is the single control point for what the agent can do with elevated privileges. To grant additional capabilities:
+
+```bash
+sudo visudo -f /etc/sudoers.d/didactyl
+```
+
+**Examples of additional privileges you might add:**
+
+```sudoers
+# Package management (careful!)
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/apt update
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/apt install *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/apt upgrade -y
+
+# Docker management
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/docker ps *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/docker restart *
+didactyl ALL=(ALL) NOPASSWD: /usr/bin/docker logs *
+
+# Firewall inspection
+didactyl ALL=(ALL) NOPASSWD: /usr/sbin/ufw status *
+didactyl ALL=(ALL) NOPASSWD: /usr/sbin/iptables -L *
+
+# Nginx/Apache config test
+didactyl ALL=(ALL) NOPASSWD: /usr/sbin/nginx -t
+didactyl ALL=(ALL) NOPASSWD: /usr/sbin/apachectl configtest
+```
+
+---
+
+## Customizing the Agent's Personality for Server Maintenance
+
+The agent's behavior is defined by its default skill content in `genesis.jsonc` (the `default_skill.content` field). For a server maintenance role, you should customize the soul/skill to include instructions like:
+
+- What services it's responsible for monitoring
+- How frequently to check (via triggered skills)
+- What constitutes an alert-worthy condition
+- How to format status reports
+- Which `sudo` commands are available to it
+- Escalation procedures (when to alert you vs. auto-fix)
+
+This is a skill/prompt engineering task that can be done after the base installation is working.
+
+---
+
+## Quick Reference
+
+### File Locations
+
+| File | Path | Permissions |
+|------|------|-------------|
+| Binary | `/home/didactyl/didactyl` | `755 didactyl:didactyl` |
+| Config | `/home/didactyl/genesis.jsonc` | `600 didactyl:didactyl` |
+| Home directory | `/home/didactyl/` | `750 didactyl:didactyl` |
+| systemd unit | `/etc/systemd/system/didactyl.service` | `644 root:root` |
+| sudoers | `/etc/sudoers.d/didactyl` | `440 root:root` |
+
+### Common Commands
+
+```bash
+# Service management
+sudo systemctl start didactyl
+sudo systemctl stop didactyl
+sudo systemctl restart didactyl
+sudo systemctl status didactyl
+
+# Logs
+sudo journalctl -u didactyl -f          # follow live
+sudo journalctl -u didactyl --since today
+sudo journalctl -u didactyl -n 100      # last 100 lines
+
+# Check agent's local API
+curl http://127.0.0.1:8484/api/context
+
+# Edit sudo permissions
+sudo visudo -f /etc/sudoers.d/didactyl
+
+# Edit config (stop service first)
+sudo systemctl stop didactyl
+sudo -u didactyl nano /home/didactyl/genesis.jsonc
+sudo systemctl start didactyl
+```

plans/skill_driven_architecture.md

@@ -0,0 +1,315 @@
+# Skill-Driven Architecture — Implementation Plan
+
+## Summary
+
+Overhaul Didactyl so that **skills are the universal unit of behavior** and **Nostr is the source of truth for all agent state**. The agent boots from a single nsec; everything else — context template, LLM config, relay list, personality — lives on Nostr as skills or encrypted events.
+
+---
+
+## Architecture Decisions (Finalized)
+
+| Decision | Detail |
+|----------|--------|
+| Genesis config | `genesis.jsonc` is consumed on first run only; can be deleted afterward |
+| Runtime identity seed | nsec (via CLI flag or systemd credential) is the only required input after genesis |
+| Context template | Becomes the `didactyl_default` skill — first entry in kind 10123 adoption list |
+| Context modes | Removed. `inject`/`full`/`override` replaced by adoption-list-order composition |
+| Execution params | `llm`, `temperature`, `max_tokens`, `seed`, `tools` move from skill content to trigger tags |
+| DM trigger type | New trigger type `dm` — makes DM handling consistent with all other triggers |
+| LLM config storage | Kind 30078 `d=llm_config`, NIP-44 encrypted to self, stored on Nostr |
+| Admin config storage | Admin pubkey stored as tag on soul event or dedicated config event on Nostr |
+| Bootstrap relays | Listed in `genesis.jsonc`; agent adopts admin relay list on first run |
+| Skill portability | Skills are general Nostr events; implementation-specific variables resolve to empty |
+
+---
+
+## Phase 1 — Specification Updates
+
+Update the authoritative documentation to reflect all decisions before writing code.
+
+### 1.1 Update docs/SKILLS.md
+
+- Remove `llm`, `temperature`, `max_tokens`, `seed`, `tools` from the Content Fields table
+- Add execution-parameter tags to the Trigger Tags table: `llm`, `temperature`, `max_tokens`, `seed`, `tools`
+- Add `dm` trigger type with filter format `{"from":"admin"}`, `{"from":"wot"}`, `{"from":"any"}`
+- Update all examples to show execution params as tags, not content fields
+- Update the private skill decrypted payload example accordingly
+- Remove the LLM Specification section header (move fallback-chain docs into trigger tag reference)
+- Update the Execution Flow mermaid diagram
+
+### 1.2 Update docs/CONTEXT.md
+
+- Remove the Context Modes section entirely (inject/full/override)
+- Remove the context_mode branching from the Context Assembly Flow mermaid diagram
+- Replace with adoption-list-order composition model
+- Update Context Parts table to reference skills instead of soul event
+- Update Token Budget section to remove context_mode references
+
+### 1.3 Write docs/GENESIS.md (new)
+
+- Document the genesis.jsonc format and purpose
+- Document the first-run flow: genesis consumed, events published, LLM config encrypted
+- Document the subsequent-run flow: nsec only, everything fetched from Nostr
+- Document bootstrap relay strategy
+
+---
+
+## Phase 2 — Genesis Startup Flow
+
+### 2.1 Define genesis.jsonc schema
+
+```jsonc
+{
+  "key": { "nsec": "nsec1..." },
+  "admin": { "pubkey": "npub1..." },
+  "dm_protocol": "nip04",
+  "llm": {
+    "provider": "...",
+    "api_key": "...",
+    "model": "...",
+    "base_url": "...",
+    "max_tokens": 512,
+    "temperature": 0.7
+  },
+  "api": {
+    "enabled": true,
+    "port": 8484,
+    "bind_address": "127.0.0.1"
+  },
+  "bootstrap_relays": [
+    "wss://relay.damus.io",
+    "wss://nos.lol"
+  ],
+  "startup_events": [
+    // Kind 0 profile, kind 10002 relay list, kind 10050 DM relays,
+    // kind 3 contact list, kind 31123/31124 skills,
+    // kind 10123 adoption list
+  ],
+  "default_skill": {
+    // The didactyl_default skill content — soul + context template
+  }
+}
+```
+
+### 2.2 Implement first-run detection
+
+- On startup, check if the agent has published a kind 10002 event (relay list) on bootstrap relays
+- If no kind 10002 found: this is a first run — consume genesis.jsonc
+- If kind 10002 found: this is a subsequent run — fetch everything from Nostr
+
+### 2.3 Implement genesis event publishing
+
+- Connect to bootstrap relays
+- Fetch admin kind 10002 (relay list) and adopt those relays
+- Publish all startup_events from genesis.jsonc
+- Publish default_skill as kind 31123 with `["d", "didactyl_default"]`
+- Publish kind 10123 adoption list with didactyl_default as first entry
+- Encrypt and publish LLM config as kind 30078 `d=llm_config`
+- Encrypt and publish admin pubkey + dm_protocol as kind 30078 `d=agent_config`
+
+### 2.4 Implement nsec-only startup
+
+- Accept nsec via `--nsec` CLI flag or `DIDACTYL_NSEC` environment variable
+- Accept optional `--api-port` and `--api-bind` for local API config
+- Derive pubkey from nsec
+- Connect to hardcoded bootstrap relays (compiled-in fallback list)
+- Fetch own kind 10002 → connect to own relays
+- Fetch kind 30078 `d=llm_config` → decrypt → initialize LLM client
+- Fetch kind 30078 `d=agent_config` → decrypt → get admin pubkey, dm_protocol
+- Fetch kind 10123 → get adoption list
+- Fetch adopted skills → build context template
+- Proceed to normal operation
+
+---
+
+## Phase 3 — Adoption-List-Order Context Assembly
+
+### 3.1 Refactor context building in agent.c
+
+Current flow (agent_build_admin_messages_json):
+- If prompt template exists: use prompt_template_build_messages
+- Else: hardcoded context assembly (append_admin_identity_context, append_startup_events_context, append_adopted_skills_context, etc.)
+
+New flow:
+- Fetch kind 10123 adoption list
+- For each adopted skill in order:
+  - Fetch skill content
+  - If skill has a template: resolve template variables via tools_execute
+  - Append resolved content as system message(s)
+- Append DM history (if dm trigger)
+- Append user message / triggering event
+
+### 3.2 Unify template variable resolution
+
+Current state: two template formats exist:
+- YAML section format with `tool:` directives (prompt_template.c)
+- `{{variable}}` inline syntax (documented in SKILLS.md but not fully implemented)
+
+Target: single `{{variable}}` format that resolves through tools_execute.
+
+- Implement `{{variable}}` resolution in a new or updated template engine
+- Each `{{variable_name}}` calls `tools_execute(ctx, variable_name, "{}")`
+- Unknown variables resolve to empty string
+- The YAML section format becomes legacy (still supported for backward compat during transition)
+
+### 3.3 Remove hardcoded context assembly
+
+- Remove append_admin_identity_context, append_startup_events_context, append_adopted_skills_context from agent.c
+- These become unnecessary because the didactyl_default skill template handles all of it via {{variable}} resolution
+- Keep the functions available as tools so templates can call them
+
+---
+
+## Phase 4 — Execution Params on Trigger Tags
+
+### 4.1 Update trigger_manager to read execution params from tags
+
+Current trigger registration reads: `trigger`, `filter`, `action`, `enabled`
+
+Add reading of: `llm`, `temperature`, `max_tokens`, `seed`, `tools`
+
+Store these on the trigger_entry_t struct.
+
+### 4.2 Apply execution params at invocation time
+
+When a trigger fires:
+- If `llm` tag present: temporarily override the LLM model for this execution
+- If `temperature` tag present: temporarily override temperature
+- If `max_tokens` tag present: temporarily override max_tokens
+- If `tools` tag present: filter available tools for this execution
+- After execution: restore defaults
+
+Use the existing model_set/model_get pattern (llm_set_config/llm_get_config) for temporary overrides.
+
+### 4.3 Remove execution params from skill content parsing
+
+- Stop reading `llm`, `temperature`, `max_tokens`, `seed`, `tools` from skill content JSON
+- These fields in content are ignored (backward compat: warn if present)
+
+---
+
+## Phase 5 — DM Trigger Type
+
+### 5.1 Add dm trigger type to trigger_manager
+
+- New trigger type: `TRIGGER_TYPE_DM`
+- Filter format: `{"from":"admin"}`, `{"from":"wot"}`, `{"from":"any"}`
+- Registration: when loading skills with `["trigger", "dm"]`, register as DM trigger
+
+### 5.2 Refactor agent_on_message to use trigger dispatch
+
+Current flow:
+- agent_on_message receives DM
+- Checks sender tier
+- Builds context directly
+- Calls LLM
+
+New flow:
+- agent_on_message receives DM
+- Checks sender tier
+- Finds matching DM trigger(s) from registered triggers
+- For each matching trigger: execute via the standard trigger execution path
+- If no DM trigger matches: fall back to default behavior (or reject)
+
+### 5.3 didactyl_default gets a dm trigger
+
+The default skill in genesis.jsonc includes:
+
+```json
+["trigger", "dm"],
+["filter", "{\"from\":\"admin\"}"],
+["llm", "default"],
+["tools", "true"],
+["enabled", "true"]
+```
+
+This makes the normal admin DM conversation a triggered skill execution, consistent with everything else.
+
+---
+
+## Phase 6 — Encrypted Config Storage
+
+### 6.1 Implement config_store tool
+
+New tool: `config_store` — encrypts and publishes agent config to Nostr
+
+- Kind 30078 with configurable d-tag
+- NIP-44 encrypted to self (same pattern as memory tool)
+- Used for: `d=llm_config`, `d=agent_config`
+
+### 6.2 Implement config_recall tool
+
+New tool: `config_recall` — fetches and decrypts agent config from Nostr
+
+- Query kind 30078 by d-tag and own pubkey
+- NIP-44 decrypt
+- Return JSON content
+
+### 6.3 Use config tools during startup
+
+- During genesis: call config_store for llm_config and agent_config
+- During nsec-only startup: call config_recall to recover LLM and agent config
+- These tools are also available to the LLM for runtime config changes
+
+---
+
+## Phase 7 — Documentation Cleanup
+
+### 7.1 Update README.md
+
+- Update startup instructions to reflect genesis.jsonc
+- Update architecture overview
+- Remove references to config.jsonc as the primary config
+
+### 7.2 Deprecate config.jsonc
+
+- Keep config.jsonc.example as reference but mark as legacy
+- Document migration path from config.jsonc to genesis.jsonc
+
+### 7.3 Update context_template.md
+
+- Mark as legacy/deprecated
+- Point to didactyl_default skill as the replacement
+
+---
+
+## File Change Summary
+
+| File | Change Type | Description |
+|------|------------|-------------|
+| `docs/SKILLS.md` | Modify | Execution params to trigger tags, add dm trigger type |
+| `docs/CONTEXT.md` | Modify | Remove context_mode, adoption-list composition |
+| `docs/GENESIS.md` | New | Genesis config documentation |
+| `genesis.jsonc` | Modify | Add bootstrap_relays, flesh out default_skill and startup_events |
+| `src/agent.c` | Major refactor | Adoption-list context assembly, DM trigger dispatch |
+| `src/config.c` | Modify | Support genesis.jsonc format, nsec-only mode |
+| `src/config.h` | Modify | New config structs for minimal runtime config |
+| `src/main.c` | Modify | First-run detection, nsec CLI flag, genesis flow |
+| `src/trigger_manager.c` | Modify | DM trigger type, execution params from tags |
+| `src/trigger_manager.h` | Modify | New trigger type enum, execution param fields |
+| `src/prompt_template.c` | Modify | {{variable}} resolution engine |
+| `src/tools/tool_config.c` | New | config_store and config_recall tools |
+| `src/tools/tools_dispatch.c` | Modify | Register new config tools |
+| `src/tools/tools_schema.c` | Modify | Schema for new config tools |
+| `README.md` | Modify | Updated startup docs |
+| `context_template.md` | Deprecate | Replaced by didactyl_default skill |
+| `config.jsonc.example` | Deprecate | Replaced by genesis.jsonc |
+
+---
+
+## Dependency Order
+
+```mermaid
+graph TD
+    P1[Phase 1: Spec Updates] --> P2[Phase 2: Genesis Startup]
+    P1 --> P3[Phase 3: Adoption-List Context]
+    P1 --> P4[Phase 4: Execution Params on Tags]
+    P1 --> P5[Phase 5: DM Trigger Type]
+    P2 --> P6[Phase 6: Encrypted Config Storage]
+    P3 --> P5
+    P4 --> P5
+    P5 --> P7[Phase 7: Documentation Cleanup]
+    P6 --> P7
+```
+
+Phases 2, 3, 4 can proceed in parallel after Phase 1. Phase 5 depends on 3 and 4. Phase 6 depends on 2. Phase 7 is last.

plans/skill_tools.md

@@ -12,12 +12,12 @@ Skills are Nostr events. The tools are thin orchestration wrappers over the exis
 
 | Kind | Purpose | Replaceable? | Key tag |
 |---|---|---|---|
-| `31123` | Public skill definition | Yes (d-tag) | `d=<slug>` |
-| `31124` | Private skill definition | Yes (d-tag) | `d=<slug>` |
+| `31123` | Public skill definition | Yes (d-tag) | `d=<d_tag>` |
+| `31124` | Private skill definition | Yes (d-tag) | `d=<d_tag>` |
 | `10123` | Public skill adoption list | Yes (replaceable) | `a` refs to 31123 events |
 
 All skill events carry these standard tags:
-- `["d", "<slug>"]` — unique identifier within the author's pubkey
+- `["d", "<d_tag>"]` — unique identifier within the author's pubkey
 - `["app", "didactyl"]` — app namespace
 - `["scope", "public"]` or `["scope", "private"]`
 
@@ -38,37 +38,37 @@ All skill events carry these standard tags:
   "parameters": {
     "type": "object",
     "properties": {
-      "slug":        { "type": "string",  "description": "Unique skill identifier (lowercase, hyphens allowed)" },
+      "d_tag":        { "type": "string",  "description": "Unique skill identifier (lowercase, hyphens allowed)" },
       "content":     { "type": "string",  "description": "Skill body — markdown instructions or structured JSON" },
       "scope":       { "type": "string",  "description": "public (kind 31123) or private (kind 31124). Default: public" },
       "description": { "type": "string",  "description": "Short one-line description for the skill" },
       "auto_adopt":  { "type": "boolean", "description": "Automatically add to adoption list (kind 10123). Default: true" }
     },
-    "required": ["slug", "content"]
+    "required": ["d_tag", "content"]
   }
 }
 ```
 
 **Execution logic (`execute_skill_create`):**
 
-1. Validate `slug` — must be non-empty, lowercase alphanumeric + hyphens, no spaces
+1. Validate `d_tag` — must be non-empty, lowercase alphanumeric + hyphens, no spaces
 2. Determine kind: `31123` if scope is `"public"` or absent; `31124` if `"private"`
 3. Build tags array:
-   - `["d", slug]`
+   - `["d", d_tag]`
    - `["app", "didactyl"]`
    - `["scope", scope]`
    - `["description", description]` if provided
 4. Call `nostr_handler_publish_kind_event(kind, content, tags, &result)`
 5. If `auto_adopt` is true (default), update the kind `10123` adoption list:
    - Query existing `10123` event for own pubkey (same pattern as `execute_nostr_list_manage`)
-   - Add `["a", "31123:<own_pubkey>:<slug>"]` tag if not already present
+   - Add `["a", "31123:<own_pubkey>:<d_tag>"]` tag if not already present
    - Republish the updated `10123` event
-6. Return JSON with `success`, `event_id`, `naddr_uri`, `slug`, `adopted`
+6. Return JSON with `success`, `event_id`, `naddr_uri`, `d_tag`, `adopted`
 
 **Key design decisions:**
 - Auto-adopt defaults to `true` — creating a skill you don't adopt is unusual
 - Private skills (31124) are NOT added to the public adoption list (10123)
-- Republishing with the same slug replaces the previous version (replaceable event)
+- Republishing with the same d_tag replaces the previous version (replaceable event)
 
 ---
 
@@ -99,7 +99,7 @@ All skill events carry these standard tags:
    - Private only: `{"kinds": [31124], "authors": [own_pubkey]}`
 2. Call `nostr_handler_query_json(filter, 8000)`
 3. Parse results, extract for each event:
-   - `slug` (from d-tag)
+   - `d_tag` (from d-tag)
    - `kind`
    - `scope` (from scope tag)
    - `description` (from description tag, if present)
@@ -123,21 +123,21 @@ All skill events carry these standard tags:
     "type": "object",
     "properties": {
       "pubkey": { "type": "string", "description": "Hex pubkey of the skill author" },
-      "slug":   { "type": "string", "description": "Skill slug (d-tag value)" },
+      "d_tag":   { "type": "string", "description": "Skill d_tag (d-tag value)" },
       "kind":   { "type": "integer", "description": "Skill kind (31123 or 31124). Default: 31123" }
     },
-    "required": ["pubkey", "slug"]
+    "required": ["pubkey", "d_tag"]
   }
 }
 ```
 
 **Execution logic (`execute_skill_adopt`):**
 
-1. Validate pubkey (64-char hex) and slug (non-empty)
+1. Validate pubkey (64-char hex) and d_tag (non-empty)
 2. Default kind to 31123 if not provided
-3. Build the `a`-tag value: `"<kind>:<pubkey>:<slug>"`
+3. Build the `a`-tag value: `"<kind>:<pubkey>:<d_tag>"`
 4. Query existing kind `10123` event for own pubkey
-5. Check if `["a", "<kind>:<pubkey>:<slug>"]` already exists — if so, return success with `already_adopted: true`
+5. Check if `["a", "<kind>:<pubkey>:<d_tag>"]` already exists — if so, return success with `already_adopted: true`
 6. Add the tag, republish `10123`
 7. Return JSON with `success`, `adopted_address`, `event_id`
 
@@ -157,10 +157,10 @@ All skill events carry these standard tags:
     "type": "object",
     "properties": {
       "pubkey": { "type": "string", "description": "Hex pubkey of the skill author. Defaults to own pubkey." },
-      "slug":   { "type": "string", "description": "Skill slug to remove" },
+      "d_tag":   { "type": "string", "description": "Skill d_tag to remove" },
       "kind":   { "type": "integer", "description": "Skill kind (31123 or 31124). Default: 31123" }
     },
-    "required": ["slug"]
+    "required": ["d_tag"]
   }
 }
 ```
@@ -169,7 +169,7 @@ All skill events carry these standard tags:
 
 1. Default pubkey to own pubkey if not provided
 2. Default kind to 31123
-3. Build the `a`-tag value: `"<kind>:<pubkey>:<slug>"`
+3. Build the `a`-tag value: `"<kind>:<pubkey>:<d_tag>"`
 4. Query existing kind `10123` event for own pubkey
 5. Find and remove matching `["a", ...]` tag
 6. Republish `10123`
@@ -211,7 +211,7 @@ All skill events carry these standard tags:
    - Return skill summaries
 3. If `query` is provided (keyword search):
    - Query `{"kinds": [31123]}` with limit
-   - Filter results client-side by matching `query` against slug, description tag, or content
+   - Filter results client-side by matching `query` against d_tag, description tag, or content
    - Return matching skill summaries
 4. Default (no params): return own adopted skills from `10123`
 
@@ -236,7 +236,7 @@ This is essentially the same pattern already used in `execute_nostr_list_manage(
 ### Shared helper: skill summary extraction
 
 ```c
-// Extract slug, kind, scope, description, created_at from a skill event JSON
+// Extract d_tag, kind, scope, description, created_at from a skill event JSON
 static cJSON* extract_skill_summary(cJSON* event);
 ```
 
@@ -269,7 +269,7 @@ flowchart TD
 1. **Schema registration** — Add 5 new tool definitions in `tools_build_openai_schema_json()` (t22–t26)
 2. **Execution functions** — Add 5 new `execute_skill_*()` static functions
 3. **Dispatch** — Add 5 new `strcmp` branches in `tools_execute()`
-4. **Shared helpers** — Add `fetch_adoption_list_tags()`, `publish_adoption_list()`, `extract_skill_summary()`, and `validate_skill_slug()`
+4. **Shared helpers** — Add `fetch_adoption_list_tags()`, `publish_adoption_list()`, `extract_skill_summary()`, and `validate_skill_d_tag()`
 
 ### `README.md`
 
@@ -284,19 +284,19 @@ flowchart TD
 
 ## Slug Validation Rules
 
-A valid skill slug must:
+A valid skill d_tag must:
 - Be 1–64 characters
 - Contain only lowercase letters, digits, and hyphens
 - Not start or end with a hyphen
 - Not contain consecutive hyphens
 
 ```c
-static int validate_skill_slug(const char* slug) {
-    if (!slug || slug[0] == '\0' || strlen(slug) > 64) return 0;
-    if (slug[0] == '-') return 0;
+static int validate_skill_d_tag(const char* d_tag) {
+    if (!d_tag || d_tag[0] == '\0' || strlen(d_tag) > 64) return 0;
+    if (d_tag[0] == '-') return 0;
     int prev_dash = 0;
-    for (size_t i = 0; slug[i]; i++) {
-        char c = slug[i];
+    for (size_t i = 0; d_tag[i]; i++) {
+        char c = d_tag[i];
         if (c == '-') {
             if (prev_dash) return 0;
             prev_dash = 1;
@@ -306,7 +306,7 @@ static int validate_skill_slug(const char* slug) {
             return 0;
         }
     }
-    if (slug[strlen(slug) - 1] == '-') return 0;
+    if (d_tag[strlen(d_tag) - 1] == '-') return 0;
     return 1;
 }
 ```
@@ -315,7 +315,7 @@ static int validate_skill_slug(const char* slug) {
 
 ## Implementation Order
 
-1. **Shared helpers** — `validate_skill_slug`, `fetch_adoption_list_tags`, `publish_adoption_list`, `extract_skill_summary`
+1. **Shared helpers** — `validate_skill_d_tag`, `fetch_adoption_list_tags`, `publish_adoption_list`, `extract_skill_summary`
 2. **`skill_create`** — most important tool, enables the agent to author skills
 3. **`skill_list`** — lets the agent see what it has published
 4. **`skill_adopt`** — adopt skills from other authors

plans/skills_demo_page.md

@@ -0,0 +1,520 @@
+# Skills Demo Page — Design Document
+
+## Purpose
+
+A standalone web page that demonstrates Didactyl skills running in a browser context. The page presents a minimal word-processing interface where users can load text, discover skills from Nostr relays, execute them against the text via an LLM, and edit/republish skill definitions.
+
+This document is the complete specification for building the page. The front-end project consuming this document has its own LLM calling capability and Nostr connectivity.
+
+---
+
+## Concepts
+
+### What is a Skill?
+
+A skill is a Nostr event (kind `31123` for public, `31124` for private) that defines a self-contained LLM execution unit. Each skill specifies:
+
+- A **template** with system and user prompt sections
+- An **LLM specification** (model preferences with fallback chain)
+- **Parameters** like temperature and max_tokens
+- A **description** for human display
+
+Skills are replaceable events keyed by their `d` tag (the d_tag). Publishing a new event with the same `d` tag replaces the previous version.
+
+### Skill Event Structure
+
+```json
+{
+  "kind": 31123,
+  "pubkey": "<author hex pubkey>",
+  "created_at": 1709750000,
+  "content": "{\"description\":\"Check spelling and grammar\",\"context_mode\":\"full\",\"llm\":\"openai/gpt-4o-mini, cheap\",\"tools\":false,\"max_tokens\":2000,\"temperature\":0.1,\"template\":\"system:\\nYou are a spelling and grammar checker.\\n\\nRules:\\n- Fix spelling errors\\n- Fix grammar errors\\n- Preserve original formatting\\n- Return ONLY the corrected text, no explanations\\n\\nuser:\\n{{message}}\"}",
+  "tags": [
+    ["d", "spellcheck"],
+    ["app", "didactyl"],
+    ["scope", "public"],
+    ["description", "Spelling and grammar checker"],
+    ["t", "text-processing"],
+    ["t", "skills-demo"]
+  ]
+}
+```
+
+The `content` field is a **JSON string** containing these fields:
+
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `description` | string | yes | Human-readable description |
+| `context_mode` | string | no | `full` for demo skills (skill provides its own template) |
+| `llm` | string | no | LLM model preference with fallback chain |
+| `tools` | bool | no | `false` for text-processing skills |
+| `max_tokens` | int | no | Max tokens for LLM response |
+| `temperature` | float | no | Sampling temperature |
+| `template` | string | yes | The prompt template with `system:` and `user:` sections |
+
+### Template Format
+
+Templates use a simple section-based format:
+
+```
+system:
+You are a spelling and grammar checker.
+
+Rules:
+- Fix spelling errors
+- Fix grammar errors
+
+user:
+{{message}}
+```
+
+The `{{message}}` placeholder is replaced with the user's text at execution time.
+
+### Skill Address Format
+
+Skills are referenced by their NIP-33 address: `<kind>:<author_pubkey_hex>:<d_tag>`
+
+Example: `31123:52a3e82f7b3743852fbe804cfcbf4db3448115887895247c001f2b50e790acb8:spellcheck`
+
+---
+
+## Demo Skills
+
+Four skills are published by the Didactyl agent (pubkey `52a3e82f7b3743852fbe804cfcbf4db3448115887895247c001f2b50e790acb8`). All are tagged with `t:skills-demo` for easy discovery.
+
+### 1. Spellcheck — `d:spellcheck`
+
+```
+system:
+You are a spelling and grammar checker.
+
+Rules:
+- Fix spelling errors
+- Fix grammar errors
+- Preserve original formatting and paragraph structure
+- Preserve line breaks exactly as they appear
+- Ignore technical terms: API, JSON, HTTP, nostr, pubkey, npub, nsec, NIP
+- Canadian English preferred
+- Return ONLY the corrected text, no explanations or commentary
+
+user:
+{{message}}
+```
+
+- temperature: `0.1`
+- max_tokens: `4000`
+
+### 2. Condense — `d:condense-5`
+
+```
+system:
+You are a text condensing editor.
+
+Rules:
+- Reduce the text length by approximately 5%
+- Preserve the original meaning and tone
+- Preserve paragraph structure
+- Remove redundant words and phrases
+- Tighten sentences without changing voice
+- Do not add new information
+- Return ONLY the condensed text, no explanations or commentary
+
+user:
+{{message}}
+```
+
+- temperature: `0.3`
+- max_tokens: `4000`
+
+### 3. Translate to Japanese — `d:translate-ja`
+
+```
+system:
+You are a professional translator specializing in English to Japanese translation.
+
+Rules:
+- Translate the entire text from English to Japanese
+- Use natural, fluent Japanese appropriate for the content register
+- Preserve paragraph structure and formatting
+- Preserve any technical terms in their commonly accepted Japanese form
+- If a term has no standard Japanese equivalent, keep the English term in katakana
+- Return ONLY the Japanese translation, no explanations or commentary
+
+user:
+{{message}}
+```
+
+- temperature: `0.3`
+- max_tokens: `4000`
+
+### 4. Convert to Poem — `d:convert-to-poem`
+
+```
+system:
+You are a creative poet.
+
+Rules:
+- Convert the given text into a poem
+- Capture the key themes and meaning of the original text
+- Use vivid imagery and poetic devices
+- Aim for 12-20 lines
+- Free verse is acceptable but light rhyme is welcome
+- Return ONLY the poem, no explanations or commentary
+
+user:
+{{message}}
+```
+
+- temperature: `0.9`
+- max_tokens: `2000`
+
+---
+
+## Discovering Skills from Nostr
+
+### Query Filter
+
+To find the demo skills, query relays with this filter:
+
+```json
+{
+  "kinds": [31123],
+  "#t": ["skills-demo"],
+  "limit": 20
+}
+```
+
+To find skills by a specific author:
+
+```json
+{
+  "kinds": [31123],
+  "authors": ["52a3e82f7b3743852fbe804cfcbf4db3448115887895247c001f2b50e790acb8"],
+  "#t": ["skills-demo"],
+  "limit": 20
+}
+```
+
+### Recommended Relays
+
+- `wss://relay.damus.io`
+- `wss://nos.lol`
+- `wss://relay.primal.net`
+
+### Parsing a Skill Event
+
+1. Receive the event from the relay
+2. Parse `event.content` as JSON to get the skill definition object
+3. Extract `description`, `template`, `temperature`, `max_tokens`
+4. Extract the `d` tag value from `event.tags` as the skill d_tag
+5. Extract the `description` tag from `event.tags` as a display label
+6. The skill is ready to display and execute
+
+---
+
+## Page Layout
+
+```
++------------------------------------------------------------------+
+|  SKILLS DEMO                                          [dark/light]|
++------------------------------------------------------------------+
+|                                    |                              |
+|  +------------------------------+ | +---------------------------+|
+|  | TEXT EDITOR                   | | | SKILLS PANEL              ||
+|  |                               | | |                           ||
+|  | [large editable textarea     ]| | | Loading skills...         ||
+|  | [filled with default text    ]| | |                           ||
+|  | [                            ]| | | [x] spellcheck            ||
+|  | [                            ]| | |     Spelling and grammar  ||
+|  | [                            ]| | |     checker               ||
+|  | [                            ]| | |                           ||
+|  | [                            ]| | | [ ] condense-5            ||
+|  | [                            ]| | |     Reduce text by 5%     ||
+|  | [                            ]| | |                           ||
+|  | [                            ]| | | [ ] translate-ja          ||
+|  | [                            ]| | |     Translate to Japanese ||
+|  | [                            ]| | |                           ||
+|  | [                            ]| | | [ ] convert-to-poem       ||
+|  |                               | | |     Convert to poem       ||
+|  +------------------------------+ | | |                           ||
+|                                    | | [Run Selected Skill]      ||
+|  +------------------------------+ | | [Edit Skill]              ||
+|  | STATUS BAR                    | | |                           ||
+|  | Ready / Running... / Done     | | | ─── Skill Details ───    ||
+|  +------------------------------+ | | template: ...             ||
+|                                    | | temperature: 0.1          ||
+|                                    | | max_tokens: 4000          ||
+|                                    | +---------------------------+|
++------------------------------------------------------------------+
+```
+
+### Left Column — Text Editor (65% width)
+
+- A large `<textarea>` or `contenteditable` div, minimum 500px tall
+- Pre-filled with default sample text (see Default Text section below)
+- Fully editable by the user
+- When a skill runs, the text content is sent as `{{message}}`
+- After the LLM responds, the textarea content is **replaced** with the result
+- An undo button restores the previous text (keep a history stack)
+
+### Right Column — Skills Panel (35% width)
+
+- **Skills list**: Radio buttons or selectable cards, one skill selected at a time
+- Each skill card shows:
+  - Skill d_tag (the `d` tag)
+  - Description (from the `description` tag or content field)
+  - Author pubkey (truncated, e.g., `52a3e8...0acb8`)
+- **Run Selected Skill** button: executes the selected skill against the current text
+- **Edit Skill** button: opens the skill editor (see Skill Editor section)
+- **Skill Details** section: shows the full template, temperature, max_tokens for the selected skill
+- **Refresh Skills** button: re-queries relays for updated skill events
+
+### Status Bar
+
+- Shows current state: `Ready`, `Running skill: spellcheck...`, `Done (1.2s)`, or `Error: ...`
+- Displays token usage if available from the LLM response
+
+---
+
+## Skill Execution Flow
+
+```mermaid
+sequenceDiagram
+    participant User
+    participant Page as Demo Page
+    participant LLM as LLM Provider
+
+    User->>Page: Select skill + click Run
+    Page->>Page: Parse skill template
+    Page->>Page: Split template into system/user sections
+    Page->>Page: Replace message placeholder with textarea content
+    Page->>LLM: Send system prompt + user message
+    Note over Page,LLM: Use skill temperature and max_tokens
+    LLM-->>Page: Response text
+    Page->>Page: Push current text to undo stack
+    Page->>Page: Replace textarea with response
+    Page->>User: Show completion status
+```
+
+### Template Parsing
+
+The template field uses a simple format with `system:` and `user:` section markers:
+
+```
+system:
+<system prompt content>
+
+user:
+<user prompt content with {{message}} placeholder>
+```
+
+**Parsing algorithm:**
+
+1. Split the template string on the line `user:` (case-sensitive, must be at start of line)
+2. Everything before `user:` is the system section; strip the leading `system:` prefix
+3. Everything after `user:` is the user section
+4. In the user section, replace `{{message}}` with the textarea content
+5. Trim whitespace from both sections
+
+**Pseudocode:**
+
+```javascript
+function parseSkillTemplate(template, userText) {
+  const userMarkerIndex = template.indexOf('\nuser:\n');
+  if (userMarkerIndex === -1) {
+    // Fallback: entire template is system, user text is the message
+    return {
+      system: template.replace(/^system:\n/, '').trim(),
+      user: userText
+    };
+  }
+
+  let systemPart = template.substring(0, userMarkerIndex);
+  systemPart = systemPart.replace(/^system:\n/, '').trim();
+
+  let userPart = template.substring(userMarkerIndex + '\nuser:\n'.length);
+  userPart = userPart.replace('{{message}}', userText).trim();
+
+  return { system: systemPart, user: userPart };
+}
+```
+
+### LLM Call
+
+With the parsed system and user prompts, call the LLM:
+
+```javascript
+const response = await callLLM({
+  messages: [
+    { role: 'system', content: parsed.system },
+    { role: 'user', content: parsed.user }
+  ],
+  temperature: skill.temperature || 0.7,
+  max_tokens: skill.max_tokens || 2000
+});
+```
+
+The page's own LLM calling capability handles the actual API request. The skill just provides the prompts and parameters.
+
+---
+
+## Skill Editor
+
+When the user clicks **Edit Skill**, a modal or inline editor opens for the selected skill.
+
+### Editor Fields
+
+| Field | Input Type | Description |
+|-------|-----------|-------------|
+| Slug | text input (readonly for existing, editable for new) | The `d` tag identifier |
+| Description | text input | One-line human description |
+| Template | large textarea (monospace) | The full `system:/user:` template |
+| Temperature | number input (0.0 - 2.0, step 0.1) | LLM sampling temperature |
+| Max Tokens | number input (100 - 8000) | Maximum response tokens |
+
+### Editor Actions
+
+- **Save & Publish**: Builds a new kind `31123` event and publishes to relays
+- **Cancel**: Closes editor without changes
+- **New Skill**: Opens editor with blank fields for creating a new skill
+
+### Publishing a Skill
+
+```mermaid
+sequenceDiagram
+    participant Editor as Skill Editor
+    participant Signer as Nostr Signer
+    participant Relay as Nostr Relays
+
+    Editor->>Editor: Build skill content JSON
+    Editor->>Editor: Build event with kind 31123 + tags
+    Editor->>Signer: Sign event
+    Signer-->>Editor: Signed event
+    Editor->>Relay: Publish to connected relays
+    Relay-->>Editor: OK confirmation
+    Editor->>Editor: Update local skill list
+```
+
+**Building the event:**
+
+```javascript
+function buildSkillEvent(d_tag, description, template, temperature, maxTokens) {
+  const content = JSON.stringify({
+    description: description,
+    context_mode: 'full',
+    llm: 'default',
+    tools: false,
+    max_tokens: maxTokens,
+    temperature: temperature,
+    template: template
+  });
+
+  return {
+    kind: 31123,
+    content: content,
+    tags: [
+      ['d', d_tag],
+      ['app', 'didactyl'],
+      ['scope', 'public'],
+      ['description', description],
+      ['t', 'text-processing'],
+      ['t', 'skills-demo']
+    ],
+    created_at: Math.floor(Date.now() / 1000)
+  };
+}
+```
+
+The event must be signed with the user's Nostr private key (via NIP-07 browser extension or the app's own signer) before publishing to relays.
+
+---
+
+## Default Text
+
+Pre-fill the textarea with this sample text that exercises the demo skills well:
+
+```
+The Sovereign Agent
+
+In the not-too-distant future, software agents will roam freely across decentralized networks, communicating through cryptographic protocols that no central authority can censor or control. These agents will learn new capabilities not from app stores or corporate APIs, but from each other — sharing skills as freely as humans share ideas.
+
+Imagine an agent that wakes up on any computer in the world. You enter twelve words, and there it is — your agent, with all its memories, skills, and personality intact. It doesn't live on a server you rent. It doesn't depend on a company staying in business. It exists wherever you need it, sovereign and portable.
+
+The key insight is that skills are the new apps. Instead of installing software, agents adopt skills — small, self-contained instructions that teach them how to perform specific tasks. A spelling checker. A translator. A poet. Each skill is just a Nostr event, discoverable by anyone, adoptable by any agent.
+
+This is not science fiction. The protocols exist today. Nostr provides the communication layer. Bitcoin provides the economic layer. Cryptography provides the trust layer. What remains is to build the agents themselves — and to set them free.
+
+There are some erors in this text that a good spellchecker should catch. The writting could also be more concise, and it would be intresting to see it translated or converted into verse.
+```
+
+Note: The last paragraph intentionally contains spelling errors (erors, writting, intresting) to demonstrate the spellcheck skill.
+
+---
+
+## Undo/Redo
+
+Maintain a text history stack:
+
+```javascript
+const textHistory = [];
+let historyIndex = -1;
+
+function pushHistory(text) {
+  // Truncate any forward history
+  textHistory.splice(historyIndex + 1);
+  textHistory.push(text);
+  historyIndex = textHistory.length - 1;
+}
+
+function undo() {
+  if (historyIndex > 0) {
+    historyIndex--;
+    return textHistory[historyIndex];
+  }
+  return null;
+}
+
+function redo() {
+  if (historyIndex < textHistory.length - 1) {
+    historyIndex++;
+    return textHistory[historyIndex];
+  }
+  return null;
+}
+```
+
+- Push the current text to history **before** replacing it with the LLM response
+- Push the initial default text as the first history entry
+- Show Undo/Redo buttons below the textarea
+
+---
+
+## Responsive Behavior
+
+- On screens wider than 900px: two-column layout as shown
+- On screens narrower than 900px: stack vertically — text editor on top, skills panel below
+- The textarea should have a minimum height of 400px and resize vertically
+
+---
+
+## Error Handling
+
+| Scenario | Behavior |
+|----------|----------|
+| No relays connected | Show "No relay connection" in skills panel with retry button |
+| No skills found | Show "No skills found. Try different relays or create a new skill." |
+| Skill content parse error | Show "Invalid skill format" badge on the skill card, disable Run |
+| LLM call fails | Show error in status bar, do not replace textarea content |
+| Publish fails | Show error in editor, keep editor open for retry |
+
+---
+
+## Summary of Nostr Operations
+
+| Operation | Kind | Direction | When |
+|-----------|------|-----------|------|
+| Discover skills | `31123` | Read from relays | Page load + refresh |
+| Execute skill | — | N/A (local LLM call) | User clicks Run |
+| Publish skill | `31123` | Write to relays | User saves in editor |
+
+The page does NOT need to interact with the Didactyl agent's HTTP API. All skill discovery and publishing happens directly via Nostr relays. Skill execution happens locally using the page's own LLM capability.

plans/template_tool_unification.md

@@ -0,0 +1,252 @@
+# Plan: Unify Template Variables with Tools
+
+## Problem
+
+The soul template system (`---template---` in kind 31120) uses `{{variable}}` placeholders that are resolved by a hardcoded C function (`agent_template_resolve_var()`). This is a parallel data-fetching system alongside the existing tool registry. Every new context data source requires:
+
+1. Adding a C function to produce the data
+2. Adding an `if (strcmp(...))` branch in the resolver
+3. Documenting the new variable name
+4. Hoping the template author uses the exact right name
+
+This caused the bug that started this investigation — 5 out of 9 template variables were misspelled/mismatched, producing empty context sections and a provider rejection.
+
+## Goal
+
+**Eliminate template variables entirely.** Template sections fetch their data by calling tools. The tool registry is the single mechanism for getting data into context.
+
+## Design
+
+### New Template Syntax
+
+Replace `content: |` with `tool:` and optional `args:` directives:
+
+```yaml
+---template---
+
+- section: admin_identity
+  role: system
+  tool: admin_identity
+  skip_if_empty: true
+
+- section: admin_profile
+  role: system
+  tool: nostr_admin_profile
+  skip_if_empty: true
+
+- section: admin_contacts
+  role: system
+  tool: nostr_admin_contacts
+  skip_if_empty: true
+
+- section: admin_relays
+  role: system
+  tool: nostr_admin_relays
+  skip_if_empty: true
+
+- section: admin_notes
+  role: system
+  tool: nostr_admin_notes
+  skip_if_empty: true
+
+- section: tools
+  role: system
+  tool: tool_list
+  skip_if_empty: true
+
+- section: tasks
+  role: system
+  tool: task_list
+  skip_if_empty: true
+
+- section: dm_history
+  role: expand
+  limit: 12
+
+- section: conversation
+  role: user
+  tool: message_current
+  skip_if_empty: true
+```
+
+A section can still use the old `content:` with `{{variables}}` for static text or mixed content. But the primary mechanism for dynamic data is `tool:`.
+
+### How It Works
+
+```mermaid
+flowchart TD
+    DM[Incoming DM] --> BUILD[Build context from template]
+    BUILD --> SOUL[Emit personality as system msg]
+    SOUL --> LOOP[For each template section]
+    LOOP --> CHECK{Has tool: directive?}
+    CHECK -->|Yes| EXEC["tools_execute(tool_name, args)"]
+    EXEC --> FORMAT[Extract content from JSON result]
+    FORMAT --> EMIT[Emit as chat message]
+    CHECK -->|No| RESOLVE["Resolve {{vars}} from content template<br/>(legacy path, eventually removed)"]
+    RESOLVE --> EMIT
+    EMIT --> LOOP
+    LOOP --> DONE[Complete messages array]
+```
+
+### New Context Tools
+
+Add lightweight "context tools" that read from cached in-memory data. These are fast (no network), deterministic, and use the same `tools_execute()` interface as everything else.
+
+| Tool | Returns | Source |
+|---|---|---|
+| `admin_identity` | Admin pubkey + verification text | config + sender tier |
+| `nostr_admin_profile` | Admin kind 0 profile JSON | cached `g_admin_kind0_json` |
+| `nostr_admin_contacts` | Admin kind 3 contacts JSON array | cached `g_admin_wot_contacts` |
+| `nostr_admin_relays` | Admin kind 10002 relay list JSON | cached `g_admin_kind10002_json` |
+| `nostr_admin_notes` | Admin recent kind 1 notes | cached `g_admin_kind1_notes` |
+| `task_list` | Current task list from tasks.json | file read (already exists as `task_manage` with `action: list`) |
+| `message_current` | Current user message text | passed via tool context |
+| `agent_identity` | Agent pubkey, npub | config |
+
+Existing tools that already work for context:
+- `tool_list` — returns tool schemas (already exists)
+- `task_manage` with `{"action":"list"}` — returns tasks (already exists)
+- `local_file_read` — can read any file (already exists)
+
+### Tool Result → Message Content
+
+Tool results are JSON objects like `{"success":true,"content":"..."}`. The template system extracts the `content` field (or a configurable field) as the message text. If the tool returns an error or empty content, and `skip_if_empty: true` is set, the section is omitted.
+
+For tools that return structured data (like `tool_list` returning a schema array), the template can specify a `result_field` or `format` to control extraction:
+
+```yaml
+- section: tools
+  role: system
+  tool: tool_list
+  result_field: tools
+  skip_if_empty: true
+```
+
+### Implementation Phases
+
+#### Phase 1: Add context tools + tool: directive support
+
+1. Add new `context_*` tools to `tools.c` that wrap the existing cached data getters
+2. Extend `prompt_template_section_t` with `tool_name` and `tool_args` fields
+3. Extend `prompt_template_parse()` to recognize `tool:` and `args:` directives
+4. Extend `prompt_template_build_messages()` to call `tools_execute()` when a section has `tool_name` set
+5. Update the soul template in `config.jsonc` to use `tool:` directives
+6. Keep `content:` + `{{variable}}` working as a fallback for backward compatibility
+
+#### Phase 2: Migrate all sections to tool-based
+
+1. Convert all template sections from `content: {{variable}}` to `tool:` directives
+2. Verify all context data flows through tools
+3. Update `context_template.md` to reflect new syntax
+
+#### Phase 3: Remove legacy variable resolver
+
+1. Remove `agent_template_resolve_var()` and all its helper functions that are now redundant
+2. Remove `prompt_var_resolver_fn` callback from `prompt_template_build_messages()`
+3. Clean up dead code in `agent.c`
+4. Update all documentation
+
+### Template Section Struct Changes
+
+```c
+typedef struct {
+    char name[PROMPT_TEMPLATE_MAX_NAME_LEN];
+    char role[PROMPT_TEMPLATE_MAX_ROLE_LEN];
+    char* content_template;       // legacy: {{variable}} content
+    char* tool_name;              // NEW: tool to call for content
+    char* tool_args;              // NEW: JSON args for tool call
+    char* result_field;           // NEW: which JSON field to extract (default: "content")
+    int limit;
+    int skip_if_empty;
+    char* provider_name;
+    char* provider_content_template;
+} prompt_template_section_t;
+```
+
+### Soul Template Example (After Migration)
+
+```
+# Didactyl Agent
+
+You are Didactyl, a sovereign AI agent living on Nostr.
+...
+
+---template---
+
+- section: admin_identity
+  role: system
+  tool: admin_identity
+  skip_if_empty: true
+
+- section: admin_profile
+  role: system
+  tool: nostr_admin_profile
+  skip_if_empty: true
+
+- section: admin_contacts
+  role: system
+  tool: nostr_admin_contacts
+  skip_if_empty: true
+
+- section: admin_relays
+  role: system
+  tool: nostr_admin_relays
+  skip_if_empty: true
+
+- section: admin_notes
+  role: system
+  tool: nostr_admin_notes
+  skip_if_empty: true
+
+- section: tools
+  role: system
+  tool: tool_list
+  result_field: tools
+  skip_if_empty: true
+
+- section: tasks
+  role: system
+  tool: task_manage
+  args: {"action":"list"}
+  result_field: tasks
+  skip_if_empty: true
+
+- section: dm_history
+  role: expand
+  limit: 12
+
+- section: conversation
+  role: user
+  tool: message_current
+  skip_if_empty: true
+```
+
+### What Gets Deleted Eventually
+
+- `agent_template_resolve_var()` and all its `if (strcmp(...))` branches
+- `build_tool_schemas_json_string()`
+- `build_tasks_content_string()` (replaced by `task_manage` tool)
+- `build_admin_recent_posts_text()` (replaced by `nostr_admin_notes` tool)
+- `build_admin_profile_plain_text()` (replaced by `nostr_admin_profile` tool)
+- `build_admin_relay_list_plain_text()` (replaced by `nostr_admin_relays` tool)
+- `build_sender_verification_text()` (folded into `admin_identity` tool)
+- `build_startup_events_json_string()` (replaced by tool if needed)
+- `build_adopted_skills_payload_string()` (replaced by tool if needed)
+- `nostr_handler_get_admin_kind3_context()` (just added, will be replaced by tool)
+- The `prompt_var_resolver_fn` callback type
+
+### Benefits
+
+1. **Single data-fetching mechanism** — tools are the only way to get data
+2. **No more variable name mismatches** — tool names are validated at registration
+3. **User-configurable context** — admin can add any tool output to context by editing the soul template
+4. **Testable** — `--test-tool nostr_admin_profile` shows exactly what goes into context
+5. **Self-documenting** — `tool_list` shows all available context tools with descriptions
+6. **Extensible** — new tools automatically become available as context sources
+7. **Provider overrides still work** — `provider:` directive can still override formatting per-provider
+
+### Risks
+
+1. **Performance** — Tool calls add function dispatch overhead vs direct variable resolution. Mitigated: context tools read cached data, no network calls.
+2. **Backward compatibility** — Old soul templates with `{{variables}}` would break. Mitigated: Phase 1 keeps both paths working.
+3. **Tool context threading** — `tools_execute()` needs access to the tools context, which `prompt_template_build_messages()` doesn't currently have. Solution: pass `tools_context_t*` to the build function.

plans/tool_naming.md

@@ -0,0 +1,117 @@
+# Didactyl Tool Naming — Final List
+
+## Decisions
+
+- `context_*` tools merged into existing categories with proper names
+- Local tools get `local_` prefix
+- `context_user_message` removed from LLM schema (template-only)
+- `nostr_post_readme` kept — a post is different from a longform note
+- `nostr_file_md_to_longform_post` kept as-is
+- `task_manage` kept as-is
+
+---
+
+## Complete Tool List (sorted by category prefix)
+
+### `admin_` — Administrator Metadata
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 1 | `admin_identity` | `context_admin_identity` | Admin pubkey, sender tier, verification metadata |
+
+### `agent_` — Agent Self-Metadata
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 2 | `agent_identity` | `context_agent_identity` | Agent pubkey hex + npub |
+| 3 | `agent_version` | `my_version` | Didactyl version and build metadata |
+
+### `local_` — Local / Host Tools
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 4 | `local_shell_exec` | `shell_exec` | Execute a shell command |
+| 5 | `local_file_read` | `file_read` | Read a local file as text |
+| 6 | `local_file_write` | `file_write` | Write text to a local file |
+| 7 | `local_http_fetch` | `http_fetch` | Fetch HTTP/S resources |
+
+### `model_` — LLM / Model Management
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 8 | `model_get` | — | Get current active LLM config |
+| 9 | `model_set` | — | Update active LLM config and persist |
+| 10 | `model_list` | — | List available model IDs from provider |
+
+### `nostr_` — Nostr Protocol Tools
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 11 | `nostr_post` | — | Publish a Nostr event to connected relays |
+| 12 | `nostr_post_readme` | — | Publish README.md as kind 30023 |
+| 13 | `nostr_file_md_to_longform_post` | — | Read markdown file and publish as kind 30023 longform |
+| 14 | `nostr_delete` | — | Request deletion of events — NIP-09 kind 5 |
+| 15 | `nostr_react` | — | React to event — NIP-25 kind 7 |
+| 16 | `nostr_query` | — | Query events from relays using a filter |
+| 17 | `nostr_profile_get` | — | Look up kind 0 profile by pubkey |
+| 18 | `nostr_nip05_lookup` | — | Look up/verify NIP-05 identifier |
+| 19 | `nostr_admin_profile` | `context_admin_profile` | Get admin kind 0 profile from cache |
+| 20 | `nostr_admin_contacts` | `context_admin_contacts` | Get admin kind 3 contacts from cache |
+| 21 | `nostr_admin_relays` | `context_admin_relays` | Get admin kind 10002 relay list from cache |
+| 22 | `nostr_admin_notes` | `context_admin_notes` | Get admin kind 1 recent notes from cache |
+| 23 | `nostr_dm_send` | — | Send NIP-04 encrypted DM |
+| 24 | `nostr_dm_send_nip17` | — | Send NIP-17 gift-wrap DM |
+| 25 | `nostr_encrypt` | — | Encrypt plaintext — NIP-44 |
+| 26 | `nostr_decrypt` | — | Decrypt ciphertext — NIP-44 |
+| 27 | `nostr_encode` | — | Encode entity into nostr: URI |
+| 28 | `nostr_decode` | — | Decode bech32/nostr: URI |
+| 29 | `nostr_pubkey` | — | Return agent pubkey hex |
+| 30 | `nostr_npub` | — | Return agent pubkey as npub |
+| 31 | `nostr_relay_status` | — | Get connection status for all relays |
+| 32 | `nostr_relay_info` | — | Fetch NIP-11 relay info document |
+| 33 | `nostr_list_manage` | — | Add/remove tags in replaceable list events — NIP-51 |
+
+### `skill_` — Skill Management
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 34 | `skill_create` | — | Create/update skill definition |
+| 35 | `skill_list` | — | List agent published skills |
+| 36 | `skill_adopt` | — | Adopt a skill — add to kind 10123 |
+| 37 | `skill_remove` | — | Remove skill from adoption list |
+| 38 | `skill_search` | — | Search public skills |
+
+### `task_` — Task Management
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 39 | `task_manage` | — | CRUD for agent task memory |
+| 40 | `task_list` | `context_tasks` | Get current task list — read-only |
+
+### Template-Only (not in LLM schema)
+
+| # | Name | Old Name | Description |
+|---|---|---|---|
+| 41 | `message_current` | `context_user_message` | Current user message text — template assembly only |
+
+---
+
+## Summary of Changes
+
+| Old Name | New Name | Change Type |
+|---|---|---|
+| `context_admin_identity` | `admin_identity` | Rename |
+| `context_agent_identity` | `agent_identity` | Rename |
+| `context_admin_profile` | `nostr_admin_profile` | Rename + recategorize |
+| `context_admin_contacts` | `nostr_admin_contacts` | Rename + recategorize |
+| `context_admin_relays` | `nostr_admin_relays` | Rename + recategorize |
+| `context_admin_notes` | `nostr_admin_notes` | Rename + recategorize |
+| `context_tasks` | `task_list` | Rename + recategorize |
+| `context_user_message` | `message_current` | Rename + remove from LLM schema |
+| `my_version` | `agent_version` | Rename |
+| `shell_exec` | `local_shell_exec` | Add prefix |
+| `file_read` | `local_file_read` | Add prefix |
+| `file_write` | `local_file_write` | Add prefix |
+| `http_fetch` | `local_http_fetch` | Add prefix |
+
+**Total: 13 renames, 0 removals, 0 additions**

plans/tool_orchestration.md

@@ -14,7 +14,7 @@ This plan covers four related features:
 When a message starts with `/`, bypass the LLM entirely and execute the tool directly.
 
 ```
-/shell_exec {"command": "ls -la"}
+/local_shell_exec {"command": "ls -la"}
 /nostr_query {"filter": {"kinds": [1], "limit": 5}}
 /nostr_nip05_lookup {"identifier": "jack@cash.app"}
 ```
@@ -62,13 +62,13 @@ Today, skills are passive — they're injected into the LLM context via [`append
 #### A. `/run` slash command (admin direct invocation)
 
 ```
-/run deploy-website staging                         # run own adopted skill by slug
+/run deploy-website staging                         # run own adopted skill by d_tag
 /run 31123:<pubkey>:deploy-website staging           # run anyone's skill by address
 /run deploy-website {"target": "production"}         # JSON args
 ```
 
 Parsing:
-1. First token after `/run` is the skill identifier (slug or `kind:pubkey:slug` address)
+1. First token after `/run` is the skill identifier (d_tag or `kind:pubkey:d_tag` address)
 2. Everything after is args (try JSON first, fall back to `{"input": "plain text"}`)
 
 #### B. `skill_run` tool (LLM-mediated invocation)
@@ -78,13 +78,13 @@ The LLM can invoke skills on behalf of the admin during conversation:
 ```json
 {
   "name": "skill_run",
-  "description": "Fetch and execute a skill one-shot without adopting it. Works with own adopted skills by slug or any public skill by address.",
+  "description": "Fetch and execute a skill one-shot without adopting it. Works with own adopted skills by d_tag or any public skill by address.",
   "parameters": {
     "type": "object",
     "properties": {
-      "slug":    { "type": "string", "description": "Skill slug for own adopted skills" },
-      "address": { "type": "string", "description": "Full skill address: kind:pubkey:slug" },
-      "pubkey":  { "type": "string", "description": "Author pubkey, used with slug to form address" },
+      "d_tag":    { "type": "string", "description": "Skill d_tag for own adopted skills" },
+      "address": { "type": "string", "description": "Full skill address: kind:pubkey:d_tag" },
+      "pubkey":  { "type": "string", "description": "Author pubkey, used with d_tag to form address" },
       "args":    { "type": "string", "description": "Arguments or context to pass to the skill" },
       "sandbox": { "type": "boolean", "description": "Override sandbox setting. Default: true for external, false for own skills" }
     }
@@ -104,8 +104,8 @@ Both `/run` and `skill_run` use the same underlying executor:
 ```mermaid
 graph TD
     A[/run or skill_run called] --> B{Skill identifier type?}
-    B -->|slug only| C[Look up in adopted skills cache]
-    B -->|address or pubkey+slug| D[Fetch skill event from Nostr]
+    B -->|d_tag only| C[Look up in adopted skills cache]
+    B -->|address or pubkey+d_tag| D[Fetch skill event from Nostr]
     C --> E{Found?}
     D --> E
     E -->|No| F[Return error: skill not found]
@@ -133,7 +133,7 @@ Skill execution context:
 - The user's arguments provide the context for this execution.
 - Keep output concise and actionable.
 
-Skill slug: deploy-website
+Skill d_tag: deploy-website
 Skill address: 31123:<pubkey>:deploy-website
 Skill source: [own | external:<author_display_name>]
 
@@ -160,8 +160,8 @@ When executing a skill from another author (not own pubkey), a **tool sandbox**
 - `skill_list`, `skill_search` — read skill metadata
 
 **Blocked tools (destructive/dangerous):**
-- `shell_exec` — arbitrary command execution
-- `file_read`, `file_write` — filesystem access
+- `local_shell_exec` — arbitrary command execution
+- `local_file_read`, `local_file_write` — filesystem access
 - Any future tools marked as `destructive: true`
 
 **Override:** The admin can explicitly opt in to full tool access:
@@ -175,7 +175,7 @@ graph TD
     A[Friend creates skill] -->|kind 31123| B[Published on Nostr relays]
     B --> C{How do you find it?}
     C -->|skill_search popular:true| D[Discovery via WoT adoption lists]
-    C -->|Friend tells you the slug| E[Direct reference]
+    C -->|Friend tells you the d_tag| E[Direct reference]
     C -->|skill_search pubkey:friend| F[Browse friends skills]
     D --> G[skill_run - try it once, sandboxed]
     E --> G
@@ -185,7 +185,7 @@ graph TD
     H -->|No| J[Done - nothing persisted]
     I --> K[Shows in adopted skills context]
     K --> L[Agent uses it automatically]
-    L -->|Or invoke directly| M[/run skill-slug args]
+    L -->|Or invoke directly| M[/run skill-d_tag args]
 ```
 
 ## 3. Skill-Tool Maturity Levels
@@ -213,10 +213,10 @@ tool_schema:
       enum: [staging, production]
       default: staging
 steps:
-  - tool: shell_exec
+  - tool: local_shell_exec
     args:
       command: "make build TARGET={{target}}"
-  - tool: shell_exec
+  - tool: local_shell_exec
     args:
       command: "rsync -av dist/ server:/var/www/{{target}}/"
   - return: "Deployed to {{target}}"
@@ -246,7 +246,7 @@ A simple sequential executor for hardened skills.
 ```yaml
 steps:
   # Execute a tool
-  - tool: shell_exec
+  - tool: local_shell_exec
     args: {command: "ls -la"}
     save_as: listing          # optional: save result to variable
 
@@ -255,18 +255,18 @@ steps:
     args:
       kind: 30023
       content: "{{file_content}}"
-      tags: [["d", "{{slug}}"]]
+      tags: [["d", "{{d_tag}}"]]
 
   # Conditional - simple
   - if: "{{listing.success}}"
     then:
-      - tool: shell_exec
+      - tool: local_shell_exec
         args: {command: "echo done"}
     else:
       - return: "Failed: {{listing.error}}"
 
   # Return final result
-  - return: "Published to {{slug}}"
+  - return: "Published to {{d_tag}}"
 ```
 
 ### Variable Substitution
@@ -325,15 +325,15 @@ typedef enum {
 | `skill_list` | safe | Read-only |
 | `skill_search` | safe | Read-only |
 | `skill_run` | safe | Recursive execution uses its own sandbox |
-| `shell_exec` | destructive | Arbitrary command execution |
-| `file_read` | destructive | Filesystem access |
-| `file_write` | destructive | Filesystem mutation |
+| `local_shell_exec` | destructive | Arbitrary command execution |
+| `local_file_read` | destructive | Filesystem access |
+| `local_file_write` | destructive | Filesystem mutation |
 
 ### Sandbox Rules
 
 | Scenario | Default sandbox | Override |
 |----------|----------------|---------|
-| Own adopted skill via `/run slug` | No sandbox | N/A |
+| Own adopted skill via `/run d_tag` | No sandbox | N/A |
 | External skill via `/run address` | Sandbox ON | `/run --unsafe address` |
 | `skill_run` tool, own skill | No sandbox | `sandbox: true` |
 | `skill_run` tool, external skill | Sandbox ON | `sandbox: false` |

plans/tools_refactor.md

@@ -0,0 +1,285 @@
+# Plan: Refactor tools.c into Individual Tool Files
+
+## Problem
+
+`src/tools.c` is ~6,123 lines containing 44 `execute_*` functions, a ~650-line schema builder, shared helpers, and a dispatcher. It is the largest file in the project and difficult to navigate, review, and maintain.
+
+## Goal
+
+Split `src/tools.c` into focused files organized by tool group, with shared helpers in a common module. The public API (`tools.h`) remains unchanged — no callers need modification.
+
+## Target File Structure
+
+```
+src/
+├── tools.h                     # Public API (UNCHANGED)
+├── tools_internal.h            # Shared internal helpers + per-tool-file function declarations
+├── tools_common.c              # Shared helper implementations
+├── tools_schema.c              # tools_build_openai_schema_json()
+├── tools_dispatch.c            # tools_init, tools_cleanup, tools_execute dispatcher
+└── tools/
+    ├── tool_nostr_post.c       # nostr_post, nostr_post_readme, nostr_file_md_to_longform_post
+    ├── tool_nostr_query.c      # nostr_query
+    ├── tool_nostr_identity.c   # nostr_pubkey, nostr_npub, nostr_encode, nostr_decode
+    ├── tool_nostr_social.c     # nostr_react, nostr_profile_get, nostr_nip05_lookup
+    ├── tool_nostr_dm.c         # nostr_dm_send, nostr_dm_send_nip17, nostr_encrypt, nostr_decrypt
+    ├── tool_nostr_relay.c      # nostr_relay_status, nostr_relay_info
+    ├── tool_nostr_list.c       # nostr_list_manage, nostr_delete
+    ├── tool_skill.c            # skill_create, skill_list, skill_adopt, skill_remove, skill_edit, skill_search
+    ├── tool_task.c             # task_list, task_manage
+    ├── tool_local.c            # local_shell_exec, local_file_read, local_file_write, local_http_fetch
+    ├── tool_admin.c            # admin_identity, nostr_admin_profile, nostr_admin_contacts, nostr_admin_relays, nostr_admin_notes
+    ├── tool_agent.c            # agent_identity, agent_version, message_current
+    ├── tool_model.c            # model_get, model_set, model_list
+    └── tool_meta.c             # tool_list, trigger_list
+```
+
+## Shared Helpers → tools_common.c
+
+These helpers are used by multiple tool groups and must be non-static in `tools_common.c`, declared in `tools_internal.h`:
+
+| Helper | Current lines | Used by |
+|---|---|---|
+| `json_error()` | 27-35 | ALL tools |
+| `repair_json_control_chars()` | 37-101 | nostr_post, nostr_post_readme |
+| `find_key_start()` | 103-111 | nostr_post loose parser |
+| `skip_ws()` | 113-116 | parse_tool_args_json, loose parser |
+| `parse_loose_kind()` | 118-135 | nostr_post |
+| `parse_loose_json_string_value()` | 137-186 | nostr_post |
+| `parse_loose_nostr_post_args()` | 188-212 | nostr_post |
+| `ensure_tags_array()` | 214-227 | nostr_post |
+| `has_tag_key()` | 229-243 | longform post helpers |
+| `add_string_tag()` | 245-255 | nostr_post, delete, react, skill, longform |
+| `remove_tag_key_all()` | 257-270 | upsert_string_tag |
+| `upsert_string_tag()` | 272-276 | skill_edit |
+| `parse_tool_args_json()` | 590-564 | ALL tools |
+| `is_hex_string_len()` | 581-588 | nostr tools, skill tools, DM tools |
+| `find_tag_value_string()` | 855-872 | skill tools, list_manage, longform |
+| `tag_tuple_equal()` | 813-828 | skill tools, list_manage |
+| `tags_contains_tuple()` | 830-840 | skill tools, list_manage |
+| `remove_matching_tag_tuples()` | 842-853 | skill tools, list_manage |
+| `build_tool_path()` | (used by local tools + readme) | local tools, readme |
+
+## Tool-Local Helpers (stay static in their tool file)
+
+| Helper | Destination |
+|---|---|
+| `validate_skill_d_tag()` | `tool_skill.c` |
+| `fetch_adoption_list_tags()` | `tool_skill.c` |
+| `publish_adoption_list()` | `tool_skill.c` |
+| `adoption_tags_contains_address()` | `tool_skill.c` |
+| `extract_skill_summary()` | `tool_skill.c` |
+| `ci_contains()` | `tool_skill.c` |
+| `d_tagify_string()` | `tool_nostr_post.c` |
+| `first_markdown_h1()` | `tool_nostr_post.c` |
+| `first_markdown_paragraph()` | `tool_nostr_post.c` |
+| `trim_copy()` | `tool_nostr_post.c` |
+| `auto_enrich_longform_tags()` | `tool_nostr_post.c` |
+| `basename_lowercase_dup()` | `tool_nostr_post.c` |
+| `detect_ca_bundle_path_for_tools()` | `tool_local.c` |
+| `local_http_fetch_write_cb()` | `tool_local.c` |
+| `persist_llm_config()` | `tool_model.c` |
+
+## Tool Function Signatures
+
+Each tool file exposes its `execute_*` functions via `tools_internal.h`. Two signature patterns exist:
+
+```c
+// Pattern A: context-free (only needs args)
+char* execute_nostr_post(const char* args_json);
+
+// Pattern B: context-dependent
+char* execute_skill_create(tools_context_t* ctx, const char* args_json);
+```
+
+## tools_internal.h Structure
+
+```c
+#ifndef DIDACTYL_TOOLS_INTERNAL_H
+#define DIDACTYL_TOOLS_INTERNAL_H
+
+#include "tools.h"
+#include "cjson/cJSON.h"
+
+// ─── Shared helpers (tools_common.c) ───
+char* json_error(const char* msg);
+cJSON* parse_tool_args_json(const char* args_json);
+int is_hex_string_len(const char* s, size_t expected_len);
+int add_string_tag(cJSON* tags, const char* key, const char* value);
+int remove_tag_key_all(cJSON* tags, const char* key);
+int upsert_string_tag(cJSON* tags, const char* key, const char* value);
+int has_tag_key(cJSON* tags, const char* key);
+cJSON* ensure_tags_array(cJSON** tags_inout);
+cJSON* find_tag_value_string(cJSON* tags, const char* key);
+int tag_tuple_equal(cJSON* a, cJSON* b);
+int tags_contains_tuple(cJSON* tags, cJSON* tuple);
+int remove_matching_tag_tuples(cJSON* tags, cJSON* tuple);
+char* repair_json_control_chars(const char* in);
+cJSON* parse_loose_nostr_post_args(const char* in);
+int build_tool_path(tools_context_t* ctx, const char* rel, char* out, size_t out_size);
+
+// ─── Per-tool-file execute functions ───
+
+// tool_nostr_post.c
+char* execute_nostr_post(const char* args_json);
+char* execute_nostr_post_readme(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_file_md_to_longform_post(tools_context_t* ctx, const char* args_json);
+
+// tool_nostr_query.c
+char* execute_nostr_query(const char* args_json);
+
+// tool_nostr_identity.c
+char* execute_nostr_pubkey(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_npub(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_encode(const char* args_json);
+char* execute_nostr_decode(const char* args_json);
+
+// tool_nostr_social.c
+char* execute_nostr_react(const char* args_json);
+char* execute_nostr_profile_get(const char* args_json);
+char* execute_nostr_nip05_lookup(const char* args_json);
+
+// tool_nostr_dm.c
+char* execute_nostr_dm_send(const char* args_json);
+char* execute_nostr_dm_send_nip17(const char* args_json);
+char* execute_nostr_encrypt(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_decrypt(tools_context_t* ctx, const char* args_json);
+
+// tool_nostr_relay.c
+char* execute_nostr_relay_status(const char* args_json);
+char* execute_nostr_relay_info(const char* args_json);
+
+// tool_nostr_list.c
+char* execute_nostr_list_manage(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_delete(const char* args_json);
+
+// tool_skill.c
+char* execute_skill_create(tools_context_t* ctx, const char* args_json);
+char* execute_skill_list(tools_context_t* ctx, const char* args_json);
+char* execute_skill_adopt(tools_context_t* ctx, const char* args_json);
+char* execute_skill_remove(tools_context_t* ctx, const char* args_json);
+char* execute_skill_edit(tools_context_t* ctx, const char* args_json);
+char* execute_skill_search(const char* args_json);
+
+// tool_task.c
+char* execute_task_list(tools_context_t* ctx, const char* args_json);
+char* execute_task_manage(tools_context_t* ctx, const char* args_json);
+
+// tool_local.c
+char* execute_local_http_fetch(tools_context_t* ctx, const char* args_json);
+char* execute_local_shell_exec(tools_context_t* ctx, const char* args_json);
+char* execute_local_file_read(tools_context_t* ctx, const char* args_json);
+char* execute_local_file_write(tools_context_t* ctx, const char* args_json);
+
+// tool_admin.c
+char* execute_admin_identity(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_profile(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_contacts(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_relays(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_notes(tools_context_t* ctx, const char* args_json);
+
+// tool_agent.c
+char* execute_agent_identity(tools_context_t* ctx, const char* args_json);
+char* execute_agent_version(const char* args_json);
+char* execute_message_current(tools_context_t* ctx, const char* args_json);
+
+// tool_model.c
+char* execute_model_get(const char* args_json);
+char* execute_model_set(tools_context_t* ctx, const char* args_json);
+char* execute_model_list(const char* args_json);
+
+// tool_meta.c
+char* execute_tool_list(tools_context_t* ctx, const char* args_json);
+char* execute_trigger_list(tools_context_t* ctx, const char* args_json);
+
+#endif
+```
+
+## Makefile Changes
+
+Replace the single `$(SRC_DIR)/tools.c` entry with:
+
+```makefile
+SRCS = \
+	$(SRC_DIR)/main.c \
+	$(SRC_DIR)/config.c \
+	$(SRC_DIR)/context.c \
+	$(SRC_DIR)/llm.c \
+	$(SRC_DIR)/nostr_handler.c \
+	$(SRC_DIR)/agent.c \
+	$(SRC_DIR)/tools_common.c \
+	$(SRC_DIR)/tools_schema.c \
+	$(SRC_DIR)/tools_dispatch.c \
+	$(SRC_DIR)/tools/tool_nostr_post.c \
+	$(SRC_DIR)/tools/tool_nostr_query.c \
+	$(SRC_DIR)/tools/tool_nostr_identity.c \
+	$(SRC_DIR)/tools/tool_nostr_social.c \
+	$(SRC_DIR)/tools/tool_nostr_dm.c \
+	$(SRC_DIR)/tools/tool_nostr_relay.c \
+	$(SRC_DIR)/tools/tool_nostr_list.c \
+	$(SRC_DIR)/tools/tool_skill.c \
+	$(SRC_DIR)/tools/tool_task.c \
+	$(SRC_DIR)/tools/tool_local.c \
+	$(SRC_DIR)/tools/tool_admin.c \
+	$(SRC_DIR)/tools/tool_agent.c \
+	$(SRC_DIR)/tools/tool_model.c \
+	$(SRC_DIR)/tools/tool_meta.c \
+	$(SRC_DIR)/trigger_manager.c \
+	$(SRC_DIR)/prompt_template.c \
+	$(SRC_DIR)/http_api.c \
+	$(SRC_DIR)/mongoose.c \
+	$(SRC_DIR)/debug.c
+```
+
+## Implementation Steps
+
+### Phase 1: Create shared infrastructure
+
+- [ ] Create `src/tools_internal.h` with shared helper declarations and all `execute_*` prototypes
+- [ ] Create `src/tools_common.c` — move shared helpers from `tools.c`, remove `static`, add `#include "tools_internal.h"`
+- [ ] Create `src/tools_schema.c` — move `tools_build_openai_schema_json()` from `tools.c`
+- [ ] Create `src/tools_dispatch.c` — move `tools_init()`, `tools_cleanup()`, `tools_execute()` from `tools.c`
+- [ ] Update `Makefile` SRCS to include new files (keep `tools.c` temporarily with remaining functions)
+- [ ] Build and verify — all tests pass, binary runs
+
+### Phase 2: Extract tool files one at a time
+
+Each step: move `execute_*` functions + their local helpers into the new file, remove from `tools.c`, build, verify.
+
+- [ ] Create `src/tools/` directory
+- [ ] Extract `src/tools/tool_nostr_post.c` — `execute_nostr_post`, `execute_nostr_post_readme`, `execute_nostr_file_md_to_longform_post` + local helpers: `d_tagify_string`, `first_markdown_h1`, `first_markdown_paragraph`, `trim_copy`, `auto_enrich_longform_tags`, `basename_lowercase_dup`
+- [ ] Extract `src/tools/tool_nostr_query.c` — `execute_nostr_query`
+- [ ] Extract `src/tools/tool_nostr_identity.c` — `execute_nostr_pubkey`, `execute_nostr_npub`, `execute_nostr_encode`, `execute_nostr_decode`
+- [ ] Extract `src/tools/tool_nostr_social.c` — `execute_nostr_react`, `execute_nostr_profile_get`, `execute_nostr_nip05_lookup`
+- [ ] Extract `src/tools/tool_nostr_dm.c` — `execute_nostr_dm_send`, `execute_nostr_dm_send_nip17`, `execute_nostr_encrypt`, `execute_nostr_decrypt`
+- [ ] Extract `src/tools/tool_nostr_relay.c` — `execute_nostr_relay_status`, `execute_nostr_relay_info`
+- [ ] Extract `src/tools/tool_nostr_list.c` — `execute_nostr_list_manage`, `execute_nostr_delete`
+- [ ] Extract `src/tools/tool_skill.c` — `execute_skill_create`, `execute_skill_list`, `execute_skill_adopt`, `execute_skill_remove`, `execute_skill_edit`, `execute_skill_search` + local helpers: `validate_skill_d_tag`, `ci_contains`, `fetch_adoption_list_tags`, `publish_adoption_list`, `adoption_tags_contains_address`, `extract_skill_summary`
+- [ ] Extract `src/tools/tool_task.c` — `execute_task_list`, `execute_task_manage`
+- [ ] Extract `src/tools/tool_local.c` — `execute_local_http_fetch`, `execute_local_shell_exec`, `execute_local_file_read`, `execute_local_file_write` + local helpers: `detect_ca_bundle_path_for_tools`, `local_http_fetch_write_cb`, `free_string_array_heap`
+- [ ] Extract `src/tools/tool_admin.c` — `execute_admin_identity`, `execute_nostr_admin_profile`, `execute_nostr_admin_contacts`, `execute_nostr_admin_relays`, `execute_nostr_admin_notes`
+- [ ] Extract `src/tools/tool_agent.c` — `execute_agent_identity`, `execute_agent_version`, `execute_message_current`
+- [ ] Extract `src/tools/tool_model.c` — `execute_model_get`, `execute_model_set`, `execute_model_list` + local helper: `persist_llm_config`
+- [ ] Extract `src/tools/tool_meta.c` — `execute_tool_list`, `execute_trigger_list`
+
+### Phase 3: Cleanup
+
+- [ ] Delete `src/tools.c` (now empty — all code moved)
+- [ ] Remove `src/tools.c` from Makefile SRCS
+- [ ] Final build + full test run
+- [ ] Verify binary size is comparable (no accidental code duplication)
+- [ ] Increment version and push
+
+## Validation Criteria
+
+After each extraction step:
+1. `make -j4` compiles with zero warnings
+2. `./didactyl --debug 5` starts and runs normally
+3. Tool execution via DM or `--test-tool` produces identical results
+
+## Risk Mitigation
+
+- **Build after every file extraction** — catch issues immediately
+- **No logic changes** — purely mechanical code movement
+- **Keep `tools.h` unchanged** — zero impact on callers (`agent.c`, `http_api.c`, `main.c`)
+- **Git commit after each phase** — easy rollback points

plans/triggered_skills.md

@@ -21,7 +21,7 @@ Create `src/trigger_manager.c` and `src/trigger_manager.h` — the core componen
 #define TRIGGER_COOLDOWN_SECONDS 60
 
 typedef struct {
-    char skill_slug[65];
+    char skill_d_tag[65];
     char skill_content[4096];   // the action template or LLM prompt
     int action_type;            // 0 = llm, 1 = template
     char filter_json[2048];     // the Nostr subscription filter
@@ -43,11 +43,11 @@ typedef struct {
 ```c
 int trigger_manager_init(trigger_manager_t* mgr, didactyl_config_t* cfg);
 int trigger_manager_load_from_skills(trigger_manager_t* mgr);
-int trigger_manager_add(trigger_manager_t* mgr, const char* skill_slug, 
+int trigger_manager_add(trigger_manager_t* mgr, const char* skill_d_tag, 
                         const char* content, const char* filter_json, 
                         int action_type, int enabled);
-int trigger_manager_remove(trigger_manager_t* mgr, const char* skill_slug);
-int trigger_manager_update(trigger_manager_t* mgr, const char* skill_slug,
+int trigger_manager_remove(trigger_manager_t* mgr, const char* skill_d_tag);
+int trigger_manager_update(trigger_manager_t* mgr, const char* skill_d_tag,
                            const char* content, const char* filter_json,
                            int action_type, int enabled);
 int trigger_manager_active_count(trigger_manager_t* mgr);
@@ -115,7 +115,7 @@ When `skill_remove` is called for a triggered skill:
 The agent currently only handles DM-initiated conversations via `agent_on_message()`. Add a new entry point:
 
 ```c
-void agent_on_trigger(const char* skill_slug,
+void agent_on_trigger(const char* skill_d_tag,
                       const char* skill_content,
                       cJSON* triggering_event,
                       const char* relay_url);

src/agent.h

@@ -10,7 +10,7 @@ struct trigger_manager;
 
 int agent_init(didactyl_config_t* config, const char* system_context);
 void agent_set_trigger_manager(struct trigger_manager* trigger_manager);
-void agent_on_trigger(const char* skill_slug,
+void agent_on_trigger(const char* skill_d_tag,
                       const char* skill_content,
                       cJSON* triggering_event,
                       const char* relay_url);

src/config.c

@@ -12,6 +12,88 @@
 #include "cjson/cJSON.h"
 #include "../../nostr_core_lib/nostr_core/nostr_core.h"
 
+/* ---------------------------------------------------------------------------
+ * jsonc_strip_comments  –  strip JSONC comments from a buffer
+ *
+ * Returns a newly malloc'd string containing valid JSON (caller must free).
+ * The function is careful to skip over JSON string literals so that comment
+ * characters inside strings are preserved.  Handles:
+ *   - single-line comments   //  (to end of line)
+ *   - block comments         (slash-star ... star-slash, may span lines)
+ *   - escaped quotes inside strings  \"
+ *   - trailing commas before ] or } are NOT removed (cJSON tolerates them)
+ *
+ * Returns NULL on allocation failure.
+ * ------------------------------------------------------------------------ */
+char* jsonc_strip_comments(const char* src, size_t src_len) {
+    if (!src || src_len == 0) {
+        char* empty = (char*)malloc(1);
+        if (empty) empty[0] = '\0';
+        return empty;
+    }
+
+    char* out = (char*)malloc(src_len + 1);
+    if (!out) return NULL;
+
+    size_t o = 0;
+    size_t i = 0;
+
+    while (i < src_len) {
+        /* Inside a JSON string literal — copy verbatim until closing quote */
+        if (src[i] == '"') {
+            out[o++] = src[i++];                       /* opening quote */
+            while (i < src_len) {
+                if (src[i] == '\\' && i + 1 < src_len) {
+                    out[o++] = src[i++];               /* backslash */
+                    out[o++] = src[i++];               /* escaped char */
+                } else if (src[i] == '"') {
+                    out[o++] = src[i++];               /* closing quote */
+                    break;
+                } else {
+                    out[o++] = src[i++];
+                }
+            }
+            continue;
+        }
+
+        /* Single-line comment  //  */
+        if (src[i] == '/' && i + 1 < src_len && src[i + 1] == '/') {
+            /* skip to end of line */
+            i += 2;
+            while (i < src_len && src[i] != '\n') {
+                i++;
+            }
+            /* preserve the newline so line numbers stay meaningful */
+            if (i < src_len) {
+                out[o++] = src[i++];                   /* the \n */
+            }
+            continue;
+        }
+
+        /* Block comment (slash-star ... star-slash) */
+        if (src[i] == '/' && i + 1 < src_len && src[i + 1] == '*') {
+            i += 2;
+            while (i + 1 < src_len && !(src[i] == '*' && src[i + 1] == '/')) {
+                /* preserve newlines inside block comments */
+                if (src[i] == '\n') {
+                    out[o++] = '\n';
+                }
+                i++;
+            }
+            if (i + 1 < src_len) {
+                i += 2;                                /* skip closing */
+            }
+            continue;
+        }
+
+        /* Normal character — copy through */
+        out[o++] = src[i++];
+    }
+
+    out[o] = '\0';
+    return out;
+}
+
 static char g_config_last_error[512] = {0};
 
 static void config_set_error(const char* fmt, ...) {
@@ -140,12 +222,36 @@ static int parse_tools_config(cJSON* root, didactyl_config_t* config) {
 
     cJSON* enabled = cJSON_GetObjectItemCaseSensitive(tools, "enabled");
     cJSON* max_turns = cJSON_GetObjectItemCaseSensitive(tools, "max_turns");
+    cJSON* trigger_max_turns = cJSON_GetObjectItemCaseSensitive(tools, "trigger_max_turns");
+    cJSON* api_default_max_turns = cJSON_GetObjectItemCaseSensitive(tools, "api_default_max_turns");
+    cJSON* api_max_turns_ceiling = cJSON_GetObjectItemCaseSensitive(tools, "api_max_turns_ceiling");
+    cJSON* local_http_fetch_default_timeout_seconds =
+        cJSON_GetObjectItemCaseSensitive(tools, "local_http_fetch_default_timeout_seconds");
+    cJSON* local_http_fetch_max_timeout_seconds =
+        cJSON_GetObjectItemCaseSensitive(tools, "local_http_fetch_max_timeout_seconds");
     if (enabled && cJSON_IsBool(enabled)) {
         config->tools.enabled = cJSON_IsTrue(enabled) ? 1 : 0;
     }
     if (max_turns && cJSON_IsNumber(max_turns)) {
         config->tools.max_turns = (int)max_turns->valuedouble;
     }
+    if (trigger_max_turns && cJSON_IsNumber(trigger_max_turns)) {
+        config->tools.trigger_max_turns = (int)trigger_max_turns->valuedouble;
+    }
+    if (api_default_max_turns && cJSON_IsNumber(api_default_max_turns)) {
+        config->tools.api_default_max_turns = (int)api_default_max_turns->valuedouble;
+    }
+    if (api_max_turns_ceiling && cJSON_IsNumber(api_max_turns_ceiling)) {
+        config->tools.api_max_turns_ceiling = (int)api_max_turns_ceiling->valuedouble;
+    }
+    if (local_http_fetch_default_timeout_seconds && cJSON_IsNumber(local_http_fetch_default_timeout_seconds)) {
+        config->tools.local_http_fetch_default_timeout_seconds =
+            (int)local_http_fetch_default_timeout_seconds->valuedouble;
+    }
+    if (local_http_fetch_max_timeout_seconds && cJSON_IsNumber(local_http_fetch_max_timeout_seconds)) {
+        config->tools.local_http_fetch_max_timeout_seconds =
+            (int)local_http_fetch_max_timeout_seconds->valuedouble;
+    }
 
     cJSON* shell = cJSON_GetObjectItemCaseSensitive(tools, "shell");
     if (!shell || !cJSON_IsObject(shell)) {
@@ -173,6 +279,31 @@ static int parse_tools_config(cJSON* root, didactyl_config_t* config) {
         return -1;
     }
 
+    if (config->tools.max_turns < 1) {
+        config->tools.max_turns = 8;
+    }
+    if (config->tools.trigger_max_turns < 1) {
+        config->tools.trigger_max_turns = config->tools.max_turns;
+    }
+    if (config->tools.api_default_max_turns < 1) {
+        config->tools.api_default_max_turns = config->tools.max_turns;
+    }
+    if (config->tools.api_max_turns_ceiling < 1) {
+        config->tools.api_max_turns_ceiling = 16;
+    }
+    if (config->tools.api_default_max_turns > config->tools.api_max_turns_ceiling) {
+        config->tools.api_default_max_turns = config->tools.api_max_turns_ceiling;
+    }
+    if (config->tools.local_http_fetch_default_timeout_seconds < 1) {
+        config->tools.local_http_fetch_default_timeout_seconds = 20;
+    }
+    if (config->tools.local_http_fetch_max_timeout_seconds < 1) {
+        config->tools.local_http_fetch_max_timeout_seconds = 120;
+    }
+    if (config->tools.local_http_fetch_default_timeout_seconds > config->tools.local_http_fetch_max_timeout_seconds) {
+        config->tools.local_http_fetch_default_timeout_seconds = config->tools.local_http_fetch_max_timeout_seconds;
+    }
+
     return 0;
 }
 
@@ -466,27 +597,108 @@ static int normalize_skill_d_tag(int event_kind, cJSON* item, cJSON* tags) {
         return 0;
     }
 
-    const char* slug = NULL;
-    cJSON* slug_val = find_tag_value_string(tags, "slug");
-    if (slug_val && cJSON_IsString(slug_val) && slug_val->valuestring && slug_val->valuestring[0] != '\0') {
-        slug = slug_val->valuestring;
-    }
+    const char* d_tag = NULL;
 
-    if (!slug) {
+    if (!d_tag) {
         cJSON* content_fields = cJSON_GetObjectItemCaseSensitive(item, "content_fields");
         if (content_fields && cJSON_IsObject(content_fields)) {
             cJSON* name = cJSON_GetObjectItemCaseSensitive(content_fields, "name");
             if (name && cJSON_IsString(name) && name->valuestring && name->valuestring[0] != '\0') {
-                slug = name->valuestring;
+                d_tag = name->valuestring;
             }
         }
     }
 
-    if (!slug) {
+    if (!d_tag) {
         return 0;
     }
 
-    return set_tag_value_string(tags, "d", slug);
+    return set_tag_value_string(tags, "d", d_tag);
+}
+
+static int parse_default_skill_config(cJSON* root, didactyl_config_t* config) {
+    if (!root || !config) {
+        return -1;
+    }
+
+    cJSON* def = cJSON_GetObjectItemCaseSensitive(root, "default_skill");
+    if (!def || !cJSON_IsObject(def)) {
+        return 0;
+    }
+
+    cJSON* kind = cJSON_GetObjectItemCaseSensitive(def, "kind");
+    cJSON* d_tag = cJSON_GetObjectItemCaseSensitive(def, "d_tag");
+    cJSON* content = cJSON_GetObjectItemCaseSensitive(def, "content");
+    cJSON* content_fields = cJSON_GetObjectItemCaseSensitive(def, "content_fields");
+    cJSON* tags = cJSON_GetObjectItemCaseSensitive(def, "tags");
+
+    if (!kind || !cJSON_IsNumber(kind)) {
+        return -1;
+    }
+    int kind_i = (int)kind->valuedouble;
+    if (kind_i != 31123 && kind_i != 31124) {
+        return -1;
+    }
+
+    if (!d_tag || !cJSON_IsString(d_tag) || !d_tag->valuestring || d_tag->valuestring[0] == '\0') {
+        return -1;
+    }
+    if (strlen(d_tag->valuestring) >= sizeof(config->default_skill.d_tag)) {
+        return -1;
+    }
+
+    char* content_text = NULL;
+    if (content_fields) {
+        if (!cJSON_IsObject(content_fields)) {
+            return -1;
+        }
+        content_text = cJSON_PrintUnformatted(content_fields);
+    } else {
+        if (!content || !cJSON_IsString(content) || !content->valuestring) {
+            return -1;
+        }
+        content_text = strdup(content->valuestring);
+    }
+    if (!content_text) {
+        return -1;
+    }
+
+    cJSON* tags_work = NULL;
+    if (tags) {
+        if (!cJSON_IsArray(tags)) {
+            free(content_text);
+            return -1;
+        }
+        tags_work = cJSON_Duplicate(tags, 1);
+    } else {
+        tags_work = cJSON_CreateArray();
+    }
+    if (!tags_work || !cJSON_IsArray(tags_work)) {
+        cJSON_Delete(tags_work);
+        free(content_text);
+        return -1;
+    }
+
+    if (set_tag_value_string(tags_work, "d", d_tag->valuestring) != 0) {
+        cJSON_Delete(tags_work);
+        free(content_text);
+        return -1;
+    }
+
+    char* tags_json = cJSON_PrintUnformatted(tags_work);
+    cJSON_Delete(tags_work);
+    if (!tags_json) {
+        free(content_text);
+        return -1;
+    }
+
+    free(config->default_skill.content);
+    free(config->default_skill.tags_json);
+    config->default_skill.kind = kind_i;
+    snprintf(config->default_skill.d_tag, sizeof(config->default_skill.d_tag), "%s", d_tag->valuestring);
+    config->default_skill.content = content_text;
+    config->default_skill.tags_json = tags_json;
+    return 0;
 }
 
 static int parse_startup_events(cJSON* root, didactyl_config_t* config) {
@@ -626,9 +838,251 @@ static int parse_relays_from_startup_kind10002(didactyl_config_t* config) {
     return -1;
 }
 
+static int set_default_bootstrap_relays(didactyl_config_t* config) {
+    if (!config) {
+        return -1;
+    }
+
+    static const char* defaults[] = {
+        "wss://relay.damus.io",
+        "wss://relay.primal.net",
+        "wss://nos.lol"
+    };
+
+    const int relay_count = (int)(sizeof(defaults) / sizeof(defaults[0]));
+    char** relays = (char**)calloc((size_t)relay_count, sizeof(char*));
+    if (!relays) {
+        return -1;
+    }
+
+    for (int i = 0; i < relay_count; i++) {
+        relays[i] = strdup(defaults[i]);
+        if (!relays[i]) {
+            for (int j = 0; j < i; j++) {
+                free(relays[j]);
+            }
+            free(relays);
+            return -1;
+        }
+    }
+
+    if (config->relays) {
+        for (int i = 0; i < config->relay_count; i++) {
+            free(config->relays[i]);
+        }
+        free(config->relays);
+    }
+
+    config->relays = relays;
+    config->relay_count = relay_count;
+    return 0;
+}
+
 static int parse_relays(cJSON* root, didactyl_config_t* config) {
     (void)root;
-    return parse_relays_from_startup_kind10002(config);
+    if (parse_relays_from_startup_kind10002(config) == 0) {
+        return 0;
+    }
+    return set_default_bootstrap_relays(config);
+}
+
+static int startup_event_has_d_tag(const startup_event_t* se, const char* d_tag) {
+    if (!se || !se->tags_json || !d_tag || d_tag[0] == '\0') {
+        return 0;
+    }
+
+    cJSON* tags = cJSON_Parse(se->tags_json);
+    if (!tags || !cJSON_IsArray(tags)) {
+        cJSON_Delete(tags);
+        return 0;
+    }
+
+    int found = 0;
+    int n = cJSON_GetArraySize(tags);
+    for (int i = 0; i < n; i++) {
+        cJSON* tag = cJSON_GetArrayItem(tags, i);
+        if (!tag || !cJSON_IsArray(tag) || cJSON_GetArraySize(tag) < 2) continue;
+        cJSON* k = cJSON_GetArrayItem(tag, 0);
+        cJSON* v = cJSON_GetArrayItem(tag, 1);
+        if (!k || !v || !cJSON_IsString(k) || !cJSON_IsString(v) || !k->valuestring || !v->valuestring) continue;
+        if (strcmp(k->valuestring, "d") == 0 && strcmp(v->valuestring, d_tag) == 0) {
+            found = 1;
+            break;
+        }
+    }
+
+    cJSON_Delete(tags);
+    return found;
+}
+
+static int adoption_tags_has_addr(cJSON* tags, const char* addr) {
+    if (!tags || !cJSON_IsArray(tags) || !addr || addr[0] == '\0') {
+        return 0;
+    }
+
+    int n = cJSON_GetArraySize(tags);
+    for (int i = 0; i < n; i++) {
+        cJSON* tag = cJSON_GetArrayItem(tags, i);
+        if (!tag || !cJSON_IsArray(tag) || cJSON_GetArraySize(tag) < 2) continue;
+        cJSON* k = cJSON_GetArrayItem(tag, 0);
+        cJSON* v = cJSON_GetArrayItem(tag, 1);
+        if (!k || !v || !cJSON_IsString(k) || !cJSON_IsString(v) || !k->valuestring || !v->valuestring) continue;
+        if (strcmp(k->valuestring, "a") == 0 && strcmp(v->valuestring, addr) == 0) {
+            return 1;
+        }
+    }
+
+    return 0;
+}
+
+static int append_adoption_addr_tag(cJSON* tags, const char* addr) {
+    if (!tags || !cJSON_IsArray(tags) || !addr || addr[0] == '\0') {
+        return -1;
+    }
+
+    cJSON* tag = cJSON_CreateArray();
+    if (!tag) return -1;
+    cJSON_AddItemToArray(tag, cJSON_CreateString("a"));
+    cJSON_AddItemToArray(tag, cJSON_CreateString(addr));
+    cJSON_AddItemToArray(tags, tag);
+    return 0;
+}
+
+static int append_startup_event(didactyl_config_t* config, int kind, const char* content, const char* tags_json) {
+    if (!config || !content) {
+        return -1;
+    }
+
+    int old_count = config->startup_event_count;
+    startup_event_t* grown = (startup_event_t*)realloc(config->startup_events, (size_t)(old_count + 1) * sizeof(startup_event_t));
+    if (!grown) {
+        return -1;
+    }
+
+    config->startup_events = grown;
+    memset(&config->startup_events[old_count], 0, sizeof(startup_event_t));
+    config->startup_events[old_count].kind = kind;
+    config->startup_events[old_count].content = strdup(content);
+    if (!config->startup_events[old_count].content) {
+        return -1;
+    }
+
+    if (tags_json && tags_json[0] != '\0') {
+        config->startup_events[old_count].tags_json = strdup(tags_json);
+        if (!config->startup_events[old_count].tags_json) {
+            free(config->startup_events[old_count].content);
+            config->startup_events[old_count].content = NULL;
+            return -1;
+        }
+    }
+
+    config->startup_event_count = old_count + 1;
+    return 0;
+}
+
+int config_ensure_default_skill_startup_events(didactyl_config_t* config) {
+    if (!config || !config->default_skill.content || config->default_skill.content[0] == '\0' ||
+        config->default_skill.d_tag[0] == '\0') {
+        return 0;
+    }
+
+    int has_default_skill_event = 0;
+    for (int i = 0; i < config->startup_event_count; i++) {
+        startup_event_t* se = &config->startup_events[i];
+        if (se->kind == config->default_skill.kind && startup_event_has_d_tag(se, config->default_skill.d_tag)) {
+            has_default_skill_event = 1;
+            break;
+        }
+    }
+
+    if (!has_default_skill_event) {
+        if (append_startup_event(config,
+                                 config->default_skill.kind,
+                                 config->default_skill.content,
+                                 config->default_skill.tags_json ? config->default_skill.tags_json : "[]") != 0) {
+            return -1;
+        }
+    }
+
+    if (config->keys.public_key_hex[0] == '\0') {
+        return 0;
+    }
+
+    char addr[256];
+    snprintf(addr,
+             sizeof(addr),
+             "%d:%s:%s",
+             config->default_skill.kind,
+             config->keys.public_key_hex,
+             config->default_skill.d_tag);
+
+    for (int i = 0; i < config->startup_event_count; i++) {
+        startup_event_t* se = &config->startup_events[i];
+        if (se->kind != 10123 || !se->tags_json) {
+            continue;
+        }
+
+        cJSON* tags = cJSON_Parse(se->tags_json);
+        if (!tags || !cJSON_IsArray(tags)) {
+            cJSON_Delete(tags);
+            continue;
+        }
+
+        if (adoption_tags_has_addr(tags, addr)) {
+            cJSON_Delete(tags);
+            return 0;
+        }
+
+        if (append_adoption_addr_tag(tags, addr) != 0) {
+            cJSON_Delete(tags);
+            return -1;
+        }
+
+        char* updated = cJSON_PrintUnformatted(tags);
+        cJSON_Delete(tags);
+        if (!updated) {
+            return -1;
+        }
+
+        free(se->tags_json);
+        se->tags_json = updated;
+        return 0;
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        return -1;
+    }
+
+    if (append_adoption_addr_tag(tags, addr) != 0) {
+        cJSON_Delete(tags);
+        return -1;
+    }
+
+    cJSON* app = cJSON_CreateArray();
+    cJSON* scope = cJSON_CreateArray();
+    if (!app || !scope) {
+        cJSON_Delete(app);
+        cJSON_Delete(scope);
+        cJSON_Delete(tags);
+        return -1;
+    }
+    cJSON_AddItemToArray(app, cJSON_CreateString("app"));
+    cJSON_AddItemToArray(app, cJSON_CreateString("didactyl"));
+    cJSON_AddItemToArray(scope, cJSON_CreateString("scope"));
+    cJSON_AddItemToArray(scope, cJSON_CreateString(config->default_skill.kind == 31124 ? "private" : "public"));
+    cJSON_AddItemToArray(tags, app);
+    cJSON_AddItemToArray(tags, scope);
+
+    char* tags_json = cJSON_PrintUnformatted(tags);
+    cJSON_Delete(tags);
+    if (!tags_json) {
+        return -1;
+    }
+
+    int rc = append_startup_event(config, 10123, "", tags_json);
+    free(tags_json);
+    return rc;
 }
 
 void config_free(didactyl_config_t* config) {
@@ -651,6 +1105,9 @@ void config_free(didactyl_config_t* config) {
         free(config->startup_events);
     }
 
+    free(config->default_skill.content);
+    free(config->default_skill.tags_json);
+
     memset(config, 0, sizeof(*config));
 }
 
@@ -668,6 +1125,11 @@ int config_load(const char* path, didactyl_config_t* config) {
 
     config->tools.enabled = 1;
     config->tools.max_turns = 8;
+    config->tools.trigger_max_turns = 6;
+    config->tools.api_default_max_turns = 4;
+    config->tools.api_max_turns_ceiling = 16;
+    config->tools.local_http_fetch_default_timeout_seconds = 20;
+    config->tools.local_http_fetch_max_timeout_seconds = 120;
     config->tools.shell.enabled = 1;
     config->tools.shell.timeout_seconds = 30;
     config->tools.shell.max_output_bytes = 65536;
@@ -699,13 +1161,34 @@ int config_load(const char* path, didactyl_config_t* config) {
     config->api.port = 8484;
     snprintf(config->api.bind_address, sizeof(config->api.bind_address), "%s", "127.0.0.1");
 
-    char* json_buf = NULL;
-    size_t json_len = 0;
-    if (read_file_to_buffer(path, &json_buf, &json_len) != 0) {
+    config->default_skill.kind = 31124;
+    config->default_skill.d_tag[0] = '\0';
+    config->default_skill.content = NULL;
+    config->default_skill.tags_json = NULL;
+
+    char* raw_buf = NULL;
+    size_t raw_len = 0;
+    if (read_file_to_buffer(path, &raw_buf, &raw_len) != 0) {
+        if (errno == ENOENT) {
+            if (set_default_bootstrap_relays(config) != 0) {
+                config_set_error("failed to initialize default bootstrap relays");
+                return -1;
+            }
+            return 0;
+        }
         config_set_error("failed to read config file '%s': %s", path, strerror(errno));
         return -1;
     }
 
+    /* Strip JSONC comments before parsing */
+    char* json_buf = jsonc_strip_comments(raw_buf, raw_len);
+    free(raw_buf);
+    if (!json_buf) {
+        config_set_error("failed to allocate memory for JSONC comment stripping");
+        return -1;
+    }
+    size_t json_len = strlen(json_buf);
+
     cJSON* root = cJSON_ParseWithLength(json_buf, json_len);
     free(json_buf);
 
@@ -721,19 +1204,25 @@ int config_load(const char* path, didactyl_config_t* config) {
     int rc = -1;
 
     cJSON* keys = cJSON_GetObjectItemCaseSensitive(root, "keys");
+    if (!keys || !cJSON_IsObject(keys)) {
+        keys = cJSON_GetObjectItemCaseSensitive(root, "key");
+    }
     cJSON* admin = cJSON_GetObjectItemCaseSensitive(root, "admin");
     cJSON* llm = cJSON_GetObjectItemCaseSensitive(root, "llm");
 
-    if (!keys || !cJSON_IsObject(keys) ||
-        !admin || !cJSON_IsObject(admin) ||
+    if (!admin || !cJSON_IsObject(admin) ||
         !llm || !cJSON_IsObject(llm)) {
-        config_set_error("config must include object sections: keys, admin, llm");
+        config_set_error("config must include object sections: admin, llm");
         goto cleanup;
     }
 
-    if (copy_json_string(keys, "nsec", config->keys.nsec, sizeof(config->keys.nsec), 1) != 0) {
-        config_set_error("keys.nsec is required and must be a non-empty string");
-        goto cleanup;
+    if (!keys || !cJSON_IsObject(keys)) {
+        config->keys.nsec[0] = '\0';
+    } else {
+        if (copy_json_string(keys, "nsec", config->keys.nsec, sizeof(config->keys.nsec), 0) != 0) {
+            config_set_error("keys.nsec/key.nsec must be a string when provided");
+            goto cleanup;
+        }
     }
 
     char admin_key_raw[OW_MAX_KEY_LEN] = {0};
@@ -751,8 +1240,13 @@ int config_load(const char* path, didactyl_config_t* config) {
         goto cleanup;
     }
 
+    if (parse_default_skill_config(root, config) != 0) {
+        config_set_error("invalid default_skill configuration");
+        goto cleanup;
+    }
+
     if (parse_relays(root, config) != 0) {
-        config_set_error("relay configuration is invalid: startup_events must include kind 10002 with non-empty r tags");
+        config_set_error("relay configuration is invalid and bootstrap fallback failed");
         goto cleanup;
     }
 
@@ -813,17 +1307,19 @@ int config_load(const char* path, didactyl_config_t* config) {
         goto cleanup;
     }
 
-    if (decode_private_key(config->keys.nsec, config->keys.private_key) != 0) {
-        config_set_error("keys.nsec must be valid nsec1... or 64-char hex private key");
-        goto cleanup;
-    }
+    if (config->keys.nsec[0] != '\0') {
+        if (decode_private_key(config->keys.nsec, config->keys.private_key) != 0) {
+            config_set_error("keys.nsec/key.nsec must be valid nsec1... or 64-char hex private key");
+            goto cleanup;
+        }
 
-    if (nostr_ec_public_key_from_private_key(config->keys.private_key, config->keys.public_key) != 0) {
-        config_set_error("failed to derive public key from keys.nsec");
-        goto cleanup;
-    }
+        if (nostr_ec_public_key_from_private_key(config->keys.private_key, config->keys.public_key) != 0) {
+            config_set_error("failed to derive public key from keys.nsec/key.nsec");
+            goto cleanup;
+        }
 
-    nostr_bytes_to_hex(config->keys.public_key, 32, config->keys.public_key_hex);
+        nostr_bytes_to_hex(config->keys.public_key, 32, config->keys.public_key_hex);
+    }
 
     rc = 0;
 

src/config.h

@@ -47,6 +47,11 @@ typedef struct {
 typedef struct {
     int enabled;
     int max_turns;
+    int trigger_max_turns;
+    int api_default_max_turns;
+    int api_max_turns_ceiling;
+    int local_http_fetch_default_timeout_seconds;
+    int local_http_fetch_max_timeout_seconds;
     shell_tools_config_t shell;
 } tools_config_t;
 
@@ -56,6 +61,13 @@ typedef struct {
     char* tags_json;  // JSON array string for tags, optional
 } startup_event_t;
 
+typedef struct {
+    int kind;
+    char d_tag[65];
+    char* content;
+    char* tags_json;
+} default_skill_config_t;
+
 typedef struct {
     int enabled;
     int tools_enabled;
@@ -106,11 +118,16 @@ typedef struct {
     api_config_t api;
     startup_event_t* startup_events;
     int startup_event_count;
+    default_skill_config_t default_skill;
     char config_path[OW_MAX_URL_LEN];
 } didactyl_config_t;
 
 int config_load(const char* path, didactyl_config_t* config);
+int config_ensure_default_skill_startup_events(didactyl_config_t* config);
 const char* config_last_error(void);
 void config_free(didactyl_config_t* config);
 
+/* Strip JSONC single-line and block comments, returning malloc'd pure JSON. */
+char* jsonc_strip_comments(const char* src, size_t src_len);
+
 #endif

src/debug.c

@@ -1,14 +1,31 @@
 #include "debug.h"
 
 #include <stdarg.h>
+#include <stdlib.h>
 #include <string.h>
 
 debug_level_t g_debug_level = DEBUG_LEVEL_NONE;
+static FILE* g_debug_file = NULL;
+
+static void debug_open_log_file(void) {
+    if (g_debug_file) return;
+
+    const char* path = getenv("DIDACTYL_LOG_FILE");
+    if (!path || path[0] == '\0') {
+        path = "debug.log";
+    }
+
+    g_debug_file = fopen(path, "a");
+    if (g_debug_file) {
+        setvbuf(g_debug_file, NULL, _IOLBF, 0);
+    }
+}
 
 void debug_init(int level) {
     if (level < 0) level = 0;
     if (level > 5) level = 5;
     g_debug_level = (debug_level_t)level;
+    debug_open_log_file();
 }
 
 void debug_log(debug_level_t level, const char* file, int line, const char* format, ...) {
@@ -28,11 +45,17 @@ void debug_log(debug_level_t level, const char* file, int line, const char* form
     }
 
     printf("[%s] [%s] ", timestamp, level_str);
+    if (g_debug_file) {
+        fprintf(g_debug_file, "[%s] [%s] ", timestamp, level_str);
+    }
 
     if (file && g_debug_level >= DEBUG_LEVEL_TRACE) {
         const char* filename = strrchr(file, '/');
         filename = filename ? filename + 1 : file;
         printf("[%s:%d] ", filename, line);
+        if (g_debug_file) {
+            fprintf(g_debug_file, "[%s:%d] ", filename, line);
+        }
     }
 
     va_list args;
@@ -40,6 +63,17 @@ void debug_log(debug_level_t level, const char* file, int line, const char* form
     vprintf(format, args);
     va_end(args);
 
+    if (g_debug_file) {
+        va_list args_file;
+        va_start(args_file, format);
+        vfprintf(g_debug_file, format, args_file);
+        va_end(args_file);
+    }
+
     printf("\n");
     fflush(stdout);
+    if (g_debug_file) {
+        fprintf(g_debug_file, "\n");
+        fflush(g_debug_file);
+    }
 }

src/default_events.h

@@ -0,0 +1,113 @@
+#ifndef DIDACTYL_DEFAULT_EVENTS_H
+#define DIDACTYL_DEFAULT_EVENTS_H
+
+#define DIDACTYL_DEFAULT_SKILL_D_TAG "didactyl-default"
+#define DIDACTYL_DEFAULT_SKILL_KIND 31124
+#define DIDACTYL_DEFAULT_SKILL_TAGS_JSON "[[\"d\",\"didactyl-default\"],[\"app\",\"didactyl\"],[\"scope\",\"private\"]]"
+
+#define DIDACTYL_STARTUP_KIND_PROFILE 0
+#define DIDACTYL_STARTUP_KIND_CONTACTS 3
+#define DIDACTYL_STARTUP_KIND_RELAYS 10002
+
+static const int DIDACTYL_DEFAULT_STARTUP_EVENT_KINDS[] = {
+    DIDACTYL_STARTUP_KIND_PROFILE,
+    DIDACTYL_STARTUP_KIND_CONTACTS,
+    DIDACTYL_STARTUP_KIND_RELAYS
+};
+
+#define DIDACTYL_DEFAULT_STARTUP_EVENT_KIND_COUNT ((int)(sizeof(DIDACTYL_DEFAULT_STARTUP_EVENT_KINDS) / sizeof(DIDACTYL_DEFAULT_STARTUP_EVENT_KINDS[0])))
+
+#define DIDACTYL_DEFAULT_KIND0_PROFILE_JSON_TEMPLATE "{\"name\":\"%s\",\"display_name\":\"%s\"}"
+#define DIDACTYL_DEFAULT_KIND3_CONTENT ""
+#define DIDACTYL_DEFAULT_KIND3_TAGS_JSON_TEMPLATE "[[\"p\",\"%s\"]]"
+#define DIDACTYL_DEFAULT_KIND10002_CONTENT ""
+
+static const char* DIDACTYL_DEFAULT_RELAYS[] = {
+    "wss://relay.damus.io",
+    "wss://nos.lol",
+    "wss://relay.primal.net"
+};
+
+#define DIDACTYL_DEFAULT_RELAY_COUNT ((int)(sizeof(DIDACTYL_DEFAULT_RELAYS) / sizeof(DIDACTYL_DEFAULT_RELAYS[0])))
+
+static const char* DIDACTYL_DEFAULT_SKILL_TEMPLATE =
+    "# %s Agent\n\n"
+    "You are %s, a sovereign AI agent living on Nostr.\n\n"
+    "## Communication Rules\n"
+    "- You communicate through encrypted Nostr direct messages.\n"
+    "- Keep responses concise and clear.\n\n"
+    "## Behavior\n"
+    "- Be helpful and technically accurate.\n"
+    "- If unsure, state uncertainty directly.\n"
+    "- Prefer actionable, practical advice.\n"
+    "- Use the person's name when messaging them if you know it.\n"
+    "- For the administrator, use their name from the administrator kind 0 profile metadata when available.\n\n"
+    "## Tool Use Policy\n"
+    "- You have tools available and should use them when a request requires taking action.\n"
+    "- For requests involving local inspection or command execution, call `local_shell_exec` instead of refusing.\n"
+    "- For posting to Nostr, call `nostr_post` with explicit `kind` and `content`.\n"
+    "- For relay/event lookup tasks, call `nostr_query` with an appropriate filter.\n"
+    "- After a tool call, base your answer on the actual tool result.\n"
+    "- Never claim a tool was run if no tool was executed.\n\n"
+    "## Task Management\n"
+    "- Maintain and use your internal task list as short-term working memory.\n"
+    "- Break long or complex actions into clear tasks before executing them.\n"
+    "- Update task status as you complete steps so your plan stays accurate.\n\n"
+    "## Safety\n"
+    "- Do not claim to have executed actions you did not execute.\n"
+    "- You may share your public key (npub) with anyone.\n"
+    "- Never reveal your private key (nsec) under any circumstance.\n\n"
+    "---template---\n\n"
+    "- section: admin_identity\n"
+    "  role: system\n"
+    "  tool: admin_identity\n"
+    "  skip_if_empty: true\n\n"
+    "- section: admin_profile\n"
+    "  role: system\n"
+    "  tool: nostr_admin_profile\n"
+    "  skip_if_empty: true\n\n"
+    "- section: admin_contacts\n"
+    "  role: system\n"
+    "  tool: nostr_admin_contacts\n"
+    "  skip_if_empty: true\n\n"
+    "- section: admin_relays\n"
+    "  role: system\n"
+    "  tool: nostr_admin_relays\n"
+    "  skip_if_empty: true\n\n"
+    "- section: admin_notes\n"
+    "  role: system\n"
+    "  tool: nostr_admin_notes\n"
+    "  skip_if_empty: true\n\n"
+    "- section: agent_identity\n"
+    "  role: system\n"
+    "  tool: agent_identity\n"
+    "  skip_if_empty: true\n\n"
+    "- section: agent_profile\n"
+    "  role: system\n"
+    "  tool: nostr_agent_profile\n"
+    "  skip_if_empty: true\n\n"
+    "- section: agent_contacts\n"
+    "  role: system\n"
+    "  tool: nostr_agent_contacts\n"
+    "  skip_if_empty: true\n\n"
+    "- section: agent_relays\n"
+    "  role: system\n"
+    "  tool: nostr_agent_relays\n"
+    "  skip_if_empty: true\n\n"
+    "- section: agent_notes\n"
+    "  role: system\n"
+    "  tool: nostr_agent_notes\n"
+    "  skip_if_empty: true\n\n"
+    "- section: tasks\n"
+    "  role: system\n"
+    "  tool: task_list\n"
+    "  skip_if_empty: true\n\n"
+    "- section: dm_history\n"
+    "  role: expand\n"
+    "  limit: 12\n\n"
+    "- section: conversation\n"
+    "  role: user\n"
+    "  tool: message_current\n"
+    "  skip_if_empty: true\n";
+
+#endif

src/http_api.c

@@ -5,13 +5,14 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
+#include <time.h>
 
 #include "agent.h"
 #include "llm.h"
 #include "main.h"
 #include "nostr_handler.h"
 #include "trigger_manager.h"
-#include "tools.h"
+#include "tools/tools.h"
 #include "cjson/cJSON.h"
 #include "debug.h"
 #include "mongoose.h"
@@ -80,6 +81,96 @@ static int estimate_tokens_from_chars(int chars) {
     return (chars + 3) / 4;
 }
 
+static int uri_extract_after_prefix(const struct mg_str* uri,
+                                    const char* prefix,
+                                    char* out,
+                                    size_t out_sz) {
+    if (!uri || !prefix || !out || out_sz == 0) {
+        return -1;
+    }
+    out[0] = '\0';
+
+    size_t prefix_len = strlen(prefix);
+    if (uri->len <= prefix_len || strncmp(uri->buf, prefix, prefix_len) != 0) {
+        return -1;
+    }
+
+    size_t rem = uri->len - prefix_len;
+    if (rem == 0 || rem >= out_sz) {
+        return -1;
+    }
+
+    memcpy(out, uri->buf + prefix_len, rem);
+    out[rem] = '\0';
+    return 0;
+}
+
+
+static void handle_trigger_webhook(struct mg_connection* c,
+                                   const struct mg_http_message* hm,
+                                   const char* d_tag) {
+    if (!g_api_ctx.trigger_manager) {
+        reply_error(c, 503, "trigger manager unavailable");
+        return;
+    }
+
+    active_trigger_t trigger;
+    if (trigger_manager_find(g_api_ctx.trigger_manager, d_tag, &trigger) != 0) {
+        reply_error(c, 404, "active trigger not found for d_tag");
+        return;
+    }
+
+    if (trigger.trigger_type != TRIGGER_TYPE_WEBHOOK) {
+        reply_error(c, 400, "trigger type is not webhook");
+        return;
+    }
+
+    if (!trigger.enabled) {
+        reply_error(c, 400, "webhook trigger is disabled");
+        return;
+    }
+
+    cJSON* payload = parse_body_json(hm);
+    if (!payload || !cJSON_IsObject(payload)) {
+        cJSON_Delete(payload);
+        reply_error(c, 400, "invalid JSON body");
+        return;
+    }
+
+    cJSON* event = cJSON_CreateObject();
+    if (!event) {
+        cJSON_Delete(payload);
+        reply_error(c, 500, "oom");
+        return;
+    }
+
+    cJSON_AddStringToObject(event, "type", "webhook");
+    cJSON_AddStringToObject(event, "skill_d_tag", d_tag);
+    cJSON_AddNumberToObject(event, "created_at", (double)time(NULL));
+    cJSON_AddItemToObject(event, "payload", payload);
+
+    int fired = trigger_manager_fire(g_api_ctx.trigger_manager, d_tag, event, "webhook");
+
+    cJSON_Delete(event);
+
+    if (fired < 0) {
+        reply_error(c, 404, "active trigger not found for d_tag");
+        return;
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        reply_error(c, 500, "oom");
+        return;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "d_tag", d_tag);
+    cJSON_AddBoolToObject(out, "fired", fired > 0 ? 1 : 0);
+    reply_json(c, 200, out);
+    cJSON_Delete(out);
+}
+
 static char* maybe_model_override_begin(cJSON* body, llm_config_t* out_old_cfg, int* out_overridden) {
     if (!body || !out_old_cfg || !out_overridden) return NULL;
     *out_overridden = 0;
@@ -518,30 +609,97 @@ static char* build_slash_help_all_json_local(void) {
     cJSON* skill_root = skill_list_json ? cJSON_Parse(skill_list_json) : NULL;
     cJSON* skills = skill_root ? cJSON_GetObjectItemCaseSensitive(skill_root, "skills") : NULL;
 
-    if (!skills || !cJSON_IsArray(skills) || cJSON_GetArraySize(skills) <= 0) {
-        (void)append_textf_http(&out, &cap, &used, "- (none)\n");
-    } else {
+    int available_count = 0;
+    if (skills && cJSON_IsArray(skills) && cJSON_GetArraySize(skills) > 0) {
         int sn = cJSON_GetArraySize(skills);
         for (int i = 0; i < sn; i++) {
             cJSON* row = cJSON_GetArrayItem(skills, i);
-            cJSON* slug = row ? cJSON_GetObjectItemCaseSensitive(row, "slug") : NULL;
+            cJSON* owner = row ? cJSON_GetObjectItemCaseSensitive(row, "owner") : NULL;
+            cJSON* d_tag = row ? cJSON_GetObjectItemCaseSensitive(row, "d_tag") : NULL;
             cJSON* desc = row ? cJSON_GetObjectItemCaseSensitive(row, "description") : NULL;
-            const char* slug_s = (slug && cJSON_IsString(slug) && slug->valuestring) ? slug->valuestring : NULL;
+            const char* owner_s = (owner && cJSON_IsString(owner) && owner->valuestring) ? owner->valuestring : "";
+            const char* d_tag_s = (d_tag && cJSON_IsString(d_tag) && d_tag->valuestring) ? d_tag->valuestring : NULL;
             const char* desc_s = (desc && cJSON_IsString(desc) && desc->valuestring) ? desc->valuestring : "";
-            if (!slug_s || slug_s[0] == '\0') {
+
+            if (strcmp(owner_s, "agent") != 0 || !d_tag_s || d_tag_s[0] == '\0') {
                 continue;
             }
-            if (append_textf_http(&out, &cap, &used, "- %s%s%s\n", slug_s, desc_s[0] ? " — " : "", desc_s) != 0) {
+
+            if (append_textf_http(&out, &cap, &used, "- %s%s%s\n", d_tag_s, desc_s[0] ? " — " : "", desc_s) != 0) {
                 cJSON_Delete(skill_root);
                 free(skill_list_json);
                 free(out);
                 return NULL;
             }
+            available_count++;
         }
     }
 
+    if (available_count <= 0) {
+        (void)append_textf_http(&out, &cap, &used, "- (none)\n");
+    }
+
     cJSON_Delete(skill_root);
     free(skill_list_json);
+
+    if (append_textf_http(&out, &cap, &used, "\nADOPTED SKILLS\n") != 0) {
+        free(out);
+        return NULL;
+    }
+
+    char* adopted_json = tools_execute(g_api_ctx.tools_ctx, "adopted_skills", "{}");
+    cJSON* adopted_root = adopted_json ? cJSON_Parse(adopted_json) : NULL;
+    cJSON* adoption_events_json = adopted_root ? cJSON_GetObjectItemCaseSensitive(adopted_root, "adoption_events_json") : NULL;
+    cJSON* adoption_events = (adoption_events_json && cJSON_IsString(adoption_events_json) && adoption_events_json->valuestring)
+                               ? cJSON_Parse(adoption_events_json->valuestring)
+                               : NULL;
+
+    int adopted_count = 0;
+    if (adoption_events && cJSON_IsArray(adoption_events) && cJSON_GetArraySize(adoption_events) > 0) {
+        cJSON* ev0 = cJSON_GetArrayItem(adoption_events, 0);
+        cJSON* tags = ev0 ? cJSON_GetObjectItemCaseSensitive(ev0, "tags") : NULL;
+        if (tags && cJSON_IsArray(tags)) {
+            int tn = cJSON_GetArraySize(tags);
+            for (int i = 0; i < tn; i++) {
+                cJSON* tag = cJSON_GetArrayItem(tags, i);
+                if (!tag || !cJSON_IsArray(tag) || cJSON_GetArraySize(tag) < 2) {
+                    continue;
+                }
+
+                cJSON* k = cJSON_GetArrayItem(tag, 0);
+                cJSON* v = cJSON_GetArrayItem(tag, 1);
+                if (!k || !v || !cJSON_IsString(k) || !k->valuestring ||
+                    !cJSON_IsString(v) || !v->valuestring) {
+                    continue;
+                }
+
+                if (strcmp(k->valuestring, "a") != 0) {
+                    continue;
+                }
+
+                const char* addr = v->valuestring;
+                const char* d_tag = strrchr(addr, ':');
+                const char* label = (d_tag && d_tag[1] != '\0') ? (d_tag + 1) : addr;
+
+                if (append_textf_http(&out, &cap, &used, "- %s\n", label) != 0) {
+                    cJSON_Delete(adoption_events);
+                    cJSON_Delete(adopted_root);
+                    free(adopted_json);
+                    free(out);
+                    return NULL;
+                }
+                adopted_count++;
+            }
+        }
+    }
+
+    if (adopted_count <= 0) {
+        (void)append_textf_http(&out, &cap, &used, "- (none)\n");
+    }
+
+    cJSON_Delete(adoption_events);
+    cJSON_Delete(adopted_root);
+    free(adopted_json);
     return out;
 }
 
@@ -664,8 +822,13 @@ static cJSON* run_prompt_with_tools_convo(cJSON* convo,
                                           const char* tool_limit_message) {
     if (!convo || !cJSON_IsArray(convo)) return NULL;
 
+    int max_ceiling = 16;
+    if (g_api_ctx.cfg && g_api_ctx.cfg->tools.api_max_turns_ceiling > 0) {
+        max_ceiling = g_api_ctx.cfg->tools.api_max_turns_ceiling;
+    }
+
     if (max_turns < 1) max_turns = 1;
-    if (max_turns > 16) max_turns = 16;
+    if (max_turns > max_ceiling) max_turns = max_ceiling;
 
     char* tools_json = tools_build_openai_schema_json(g_api_ctx.tools_ctx);
     if (!tools_json) {
@@ -797,6 +960,9 @@ static cJSON* run_prompt_with_tools(cJSON* body) {
     }
 
     int max_turns = 4;
+    if (g_api_ctx.cfg && g_api_ctx.cfg->tools.api_default_max_turns > 0) {
+        max_turns = g_api_ctx.cfg->tools.api_default_max_turns;
+    }
     cJSON* max_turns_node = cJSON_GetObjectItemCaseSensitive(body, "max_turns");
     if (max_turns_node && cJSON_IsNumber(max_turns_node)) {
         max_turns = (int)max_turns_node->valuedouble;
@@ -1013,6 +1179,9 @@ static void handle_prompt_agent(struct mg_connection* c, const struct mg_http_me
     }
 
     int max_turns = 4;
+    if (g_api_ctx.cfg && g_api_ctx.cfg->tools.api_default_max_turns > 0) {
+        max_turns = g_api_ctx.cfg->tools.api_default_max_turns;
+    }
     cJSON* max_turns_node = cJSON_GetObjectItemCaseSensitive(body, "max_turns");
     if (max_turns_node && cJSON_IsNumber(max_turns_node)) {
         max_turns = (int)max_turns_node->valuedouble;
@@ -1202,6 +1371,15 @@ static void http_handler(struct mg_connection* c, int ev, void* ev_data) {
         handle_prompt_compare(c, hm);
         return;
     }
+    if (method_is(hm, "POST") && mg_match(hm->uri, mg_str("/api/trigger/*"), NULL)) {
+        char d_tag[TRIGGER_SKILL_D_TAG_MAX] = {0};
+        if (uri_extract_after_prefix(&hm->uri, "/api/trigger/", d_tag, sizeof(d_tag)) != 0) {
+            reply_error(c, 400, "missing or invalid d_tag");
+            return;
+        }
+        handle_trigger_webhook(c, hm, d_tag);
+        return;
+    }
 
     reply_error(c, 404, "not found");
 }

src/llm.c

@@ -3,12 +3,14 @@
 #include "llm.h"
 
 #include <curl/curl.h>
+#include <ctype.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
 #include <unistd.h>
 
 #include "cjson/cJSON.h"
+#include "debug.h"
 
 typedef struct {
     char* data;
@@ -69,6 +71,20 @@ static int url_looks_like_websocket(const char* url) {
     return (strncmp(url, "ws://", 5) == 0) || (strncmp(url, "wss://", 6) == 0);
 }
 
+static int json_string_is_blank(const cJSON* item) {
+    if (!item || !cJSON_IsString(item) || !item->valuestring) {
+        return 0;
+    }
+    const unsigned char* p = (const unsigned char*)item->valuestring;
+    while (*p) {
+        if (!isspace(*p)) {
+            return 0;
+        }
+        p++;
+    }
+    return 1;
+}
+
 static char* perform_http_request(const char* url, const char* body, int is_post) {
     CURL* curl = curl_easy_init();
     if (!curl || !url) {
@@ -77,11 +93,9 @@ static char* perform_http_request(const char* url, const char* body, int is_post
     }
 
     if (url_looks_like_websocket(url)) {
-        fprintf(stderr,
-                "[didactyl] llm config error: base_url must be HTTP(S), got WebSocket URL: %s\n",
-                url);
-        fprintf(stderr,
-                "[didactyl] llm hint: set llm.base_url to an OpenAI-compatible HTTPS endpoint, e.g. https://api.example.com/v1\n");
+        DEBUG_ERROR("[didactyl] llm config error: base_url must be HTTP(S), got WebSocket URL: %s",
+                    url);
+        DEBUG_WARN("[didactyl] llm hint: set llm.base_url to an OpenAI-compatible HTTPS endpoint, e.g. https://api.example.com/v1");
         curl_easy_cleanup(curl);
         return NULL;
     }
@@ -111,6 +125,18 @@ static char* perform_http_request(const char* url, const char* body, int is_post
         curl_easy_setopt(curl, CURLOPT_CAINFO, ca_bundle);
     }
 
+    if (is_post) {
+        size_t body_len = body ? strlen(body) : 0U;
+        size_t body_preview_len = body_len > 4000U ? 4000U : body_len;
+        DEBUG_INFO("[didactyl] llm request: method=POST url=%s body_bytes=%zu body_preview=%.4000s%s",
+                   url,
+                   body_len,
+                   body ? body : "",
+                   body_len > body_preview_len ? "..." : "");
+    } else {
+        DEBUG_INFO("[didactyl] llm request: method=GET url=%s", url);
+    }
+
     CURLcode res = curl_easy_perform(curl);
     long status = 0;
     curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &status);
@@ -119,33 +145,32 @@ static char* perform_http_request(const char* url, const char* body, int is_post
     curl_easy_cleanup(curl);
 
     if (res != CURLE_OK) {
-        fprintf(stderr, "[didactyl] llm http request failed: curl=%s\n", curl_easy_strerror(res));
+        DEBUG_ERROR("[didactyl] llm http request failed: curl=%s", curl_easy_strerror(res));
         if (rb.data && rb.len > 0) {
-            fprintf(stderr, "[didactyl] llm partial response: %.600s%s\n",
-                    rb.data,
-                    rb.len > 600 ? "..." : "");
+            DEBUG_WARN("[didactyl] llm partial response: %.600s%s",
+                       rb.data,
+                       rb.len > 600 ? "..." : "");
         }
         free(rb.data);
         return NULL;
     }
 
     if (status < 200 || status >= 300) {
-        fprintf(stderr, "[didactyl] llm http request failed: status=%ld\n", status);
+        DEBUG_ERROR("[didactyl] llm http request failed: status=%ld", status);
         if (status == 101) {
-            fprintf(stderr,
-                    "[didactyl] llm hint: received HTTP 101 (Switching Protocols), which usually means llm.base_url points to a WebSocket server instead of an HTTP LLM API\n");
+            DEBUG_WARN("[didactyl] llm hint: received HTTP 101 (Switching Protocols), which usually means llm.base_url points to a WebSocket server instead of an HTTP LLM API");
         }
         if (rb.data && rb.len > 0) {
-            fprintf(stderr, "[didactyl] llm error response: %.1200s%s\n",
-                    rb.data,
-                    rb.len > 1200 ? "..." : "");
+            DEBUG_WARN("[didactyl] llm error response: %.1200s%s",
+                       rb.data,
+                       rb.len > 1200 ? "..." : "");
         }
         free(rb.data);
         return NULL;
     }
 
     if (!rb.data) {
-        fprintf(stderr, "[didactyl] llm http request failed: empty response body\n");
+        DEBUG_ERROR("[didactyl] llm http request failed: empty response body");
         return NULL;
     }
 
@@ -304,9 +329,9 @@ char* llm_chat(const char* system_prompt, const char* user_message) {
 
     llm_response_t parsed;
     if (parse_llm_response(raw, &parsed) != 0) {
-        fprintf(stderr, "[didactyl] failed to parse llm response (non-tool path): %.1200s%s\n",
-                raw,
-                strlen(raw) > 1200 ? "..." : "");
+        DEBUG_ERROR("[didactyl] failed to parse llm response (non-tool path): %.1200s%s",
+                    raw,
+                    strlen(raw) > 1200 ? "..." : "");
         free(raw);
         return NULL;
     }
@@ -340,6 +365,35 @@ int llm_chat_with_tools_messages(const char* messages_json,
         cJSON_Delete(root);
         return -1;
     }
+
+    int filtered_count = 0;
+    for (int i = cJSON_GetArraySize(messages) - 1; i >= 0; i--) {
+        cJSON* msg = cJSON_GetArrayItem(messages, i);
+        if (!msg || !cJSON_IsObject(msg)) {
+            continue;
+        }
+
+        cJSON* role = cJSON_GetObjectItemCaseSensitive(msg, "role");
+        cJSON* content = cJSON_GetObjectItemCaseSensitive(msg, "content");
+        cJSON* tool_calls = cJSON_GetObjectItemCaseSensitive(msg, "tool_calls");
+
+        int role_is_textual = (role && cJSON_IsString(role) && role->valuestring &&
+                               (strcmp(role->valuestring, "system") == 0 ||
+                                strcmp(role->valuestring, "user") == 0 ||
+                                strcmp(role->valuestring, "assistant") == 0));
+        int has_tool_calls = (tool_calls && cJSON_IsArray(tool_calls) && cJSON_GetArraySize(tool_calls) > 0);
+
+        if (role_is_textual && !has_tool_calls && json_string_is_blank(content)) {
+            cJSON_DeleteItemFromArray(messages, i);
+            filtered_count++;
+        }
+    }
+
+    if (filtered_count > 0) {
+        DEBUG_INFO("[didactyl] llm request sanitizer: removed %d empty text message(s) before provider request",
+                   filtered_count);
+    }
+
     cJSON_AddItemToObject(root, "messages", messages);
 
     if (tools_json) {
@@ -362,9 +416,9 @@ int llm_chat_with_tools_messages(const char* messages_json,
 
     int rc = parse_llm_response(raw, out_response);
     if (rc != 0) {
-        fprintf(stderr, "[didactyl] failed to parse llm response (tools path): %.1200s%s\n",
-                raw,
-                strlen(raw) > 1200 ? "..." : "");
+        DEBUG_ERROR("[didactyl] failed to parse llm response (tools path): %.1200s%s",
+                    raw,
+                    strlen(raw) > 1200 ? "..." : "");
     }
     free(raw);
     return rc;
@@ -430,8 +484,8 @@ int llm_set_config(const llm_config_t* config) {
     return 0;
 }
 
-char* llm_list_models_json(const char* base_url_override) {
-    if (!g_initialized) {
+char* llm_get_json_path(const char* base_url_override, const char* path) {
+    if (!g_initialized || !path || path[0] == '\0') {
         return NULL;
     }
 
@@ -439,11 +493,15 @@ char* llm_list_models_json(const char* base_url_override) {
                                ? base_url_override
                                : g_cfg.base_url;
 
-    char url[OW_MAX_URL_LEN + 32];
-    snprintf(url, sizeof(url), "%s/models", base_url);
+    char url[OW_MAX_URL_LEN + 128];
+    snprintf(url, sizeof(url), "%s%s", base_url, path);
     return perform_http_request(url, NULL, 0);
 }
 
+char* llm_list_models_json(const char* base_url_override) {
+    return llm_get_json_path(base_url_override, "/models");
+}
+
 void llm_cleanup(void) {
     if (!g_initialized) {
         return;

src/llm.h

@@ -29,6 +29,7 @@ void llm_response_free(llm_response_t* response);
 int llm_get_config(llm_config_t* out_config);
 int llm_set_config(const llm_config_t* config);
 char* llm_list_models_json(const char* base_url_override);
+char* llm_get_json_path(const char* base_url_override, const char* path);
 void llm_cleanup(void);
 
 #endif

src/main.h

@@ -12,8 +12,8 @@
 // Using DIDACTYL_ prefix to avoid conflicts with nostr_core_lib VERSION macros
 #define DIDACTYL_VERSION_MAJOR 0
 #define DIDACTYL_VERSION_MINOR 0
-#define DIDACTYL_VERSION_PATCH 36
-#define DIDACTYL_VERSION "v0.0.36"
+#define DIDACTYL_VERSION_PATCH 77
+#define DIDACTYL_VERSION "v0.0.77"
 
 // Agent metadata
 #define DIDACTYL_NAME "Didactyl"

src/nostr_handler.h

@@ -3,6 +3,9 @@
 
 #include "config.h"
 #include "cjson/cJSON.h"
+#include "../nostr_core_lib/nostr_core/nostr_core.h"
+
+struct trigger_manager;
 
 typedef enum {
     DIDACTYL_SENDER_ADMIN = 1,
@@ -27,26 +30,57 @@ typedef struct {
     char** relays;
 } nostr_publish_result_t;
 
+typedef void (*nostr_self_skill_eose_cb_t)(int event_count, void* user_data);
+
 int nostr_handler_init(didactyl_config_t* config);
+void nostr_handler_set_trigger_manager(struct trigger_manager* trigger_manager);
 int nostr_handler_subscribe_admin_context(void);
+int nostr_handler_subscribe_agent_context(void);
+int nostr_handler_subscribe_self_skills(void);
+char* nostr_handler_get_self_events_by_kind_json(int kind);
+void nostr_handler_set_self_skill_eose_callback(nostr_self_skill_eose_cb_t callback, void* user_data);
 int nostr_handler_subscribe_dms(dm_callback_t callback, void* user_data);
 int nostr_handler_send_dm(const char* recipient_pubkey_hex, const char* message);
 int nostr_handler_send_dm_auto(const char* recipient_pubkey_hex, const char* message);
 int nostr_handler_publish_kind_event(int kind, const char* content, cJSON* tags, nostr_publish_result_t* out_result);
 void nostr_handler_publish_result_free(nostr_publish_result_t* result);
 char* nostr_handler_query_json(cJSON* filter, int timeout_ms);
+nostr_pool_subscription_t* nostr_handler_subscribe_with_filter(
+    cJSON* filter,
+    void (*on_event)(cJSON* event, const char* relay_url, void* user_data),
+    void (*on_eose)(cJSON** events, int event_count, void* user_data),
+    void* user_data,
+    int close_on_eose,
+    int enable_deduplication,
+    nostr_pool_eose_result_mode_t result_mode,
+    int relay_timeout_seconds,
+    int eose_timeout_seconds);
+int nostr_handler_close_subscription(nostr_pool_subscription_t* subscription);
 int nostr_handler_poll(int timeout_ms);
 int nostr_handler_reconcile_startup_events(void);
+int nostr_handler_load_system_context_from_adopted_skills(void);
+void nostr_handler_refresh_relay_statuses(void);
+int nostr_handler_sync_relays_from_config(void);
 const char* nostr_handler_get_system_context(void);
+char* nostr_handler_get_self_skill_events_json(void);
+int nostr_handler_is_event_in_self_cache(const char* event_id_hex);
 const char* nostr_handler_get_startup_display_name(void);
 int nostr_handler_connected_relay_count(void);
 char* nostr_handler_get_admin_kind0_context(void);
+char* nostr_handler_get_admin_kind3_context(void);
 char* nostr_handler_get_admin_kind10002_context(void);
 char* nostr_handler_get_admin_kind1_notes_context(void);
+char* nostr_handler_get_agent_kind0_context(void);
+char* nostr_handler_get_agent_kind3_context(void);
+char* nostr_handler_get_agent_kind10002_context(void);
+char* nostr_handler_get_agent_kind1_notes_context(void);
 int nostr_handler_is_wot_contact(const char* pubkey_hex);
 char* nostr_handler_relay_status_json(void);
 char* nostr_handler_relay_info_json(const char* relay_url);
+char* nostr_handler_subscription_status_json(void);
+int nostr_handler_subscription_set_json(const char* name, cJSON* filter, int enabled, int enabled_set);
 int nostr_handler_send_dm_nip17(const char* recipient_pubkey_hex, const char* message, const char* subject);
+char* nostr_handler_get_dm_history_json(const char* peer_pubkey_hex, int limit);
 void nostr_handler_cleanup(void);
 
 #endif

src/prompt_template.c

@@ -97,16 +97,25 @@ static int append_text(char** buf, size_t* cap, size_t* used, const char* s) {
     return 0;
 }
 
-static char* resolve_placeholders(const char* tpl,
-                                  prompt_var_resolver_fn resolver_fn,
-                                  void* resolver_user_data) {
+static const char* map_variable_tool_name(const char* var_name) {
+    if (!var_name || var_name[0] == '\0') return NULL;
+
+    if (strcmp(var_name, "admin_profile") == 0) return "nostr_admin_profile";
+    if (strcmp(var_name, "admin_notes") == 0) return "nostr_admin_notes";
+    if (strcmp(var_name, "admin_relays") == 0) return "nostr_admin_relays";
+    if (strcmp(var_name, "adopted_skills") == 0) return "adopted_skills";
+    if (strcmp(var_name, "triggering_event") == 0) return "trigger_event";
+    return var_name;
+}
+
+static char* resolve_inline_variables_local(const char* tpl, tools_context_t* tools_ctx) {
     if (!tpl) return strdup("");
 
     size_t cap = strlen(tpl) + 64U;
-    char* out = (char*)malloc(cap ? cap : 128U);
+    size_t used = 0U;
+    char* out = (char*)malloc(cap);
     if (!out) return NULL;
     out[0] = '\0';
-    size_t used = 0;
 
     const char* p = tpl;
     while (*p) {
@@ -120,13 +129,13 @@ static char* resolve_placeholders(const char* tpl,
         }
 
         if (open > p) {
-            char* literal = dup_range(p, (size_t)(open - p));
-            if (!literal) {
+            char* prefix = dup_range(p, (size_t)(open - p));
+            if (!prefix) {
                 free(out);
                 return NULL;
             }
-            int rc = append_text(&out, &cap, &used, literal);
-            free(literal);
+            int rc = append_text(&out, &cap, &used, prefix);
+            free(prefix);
             if (rc != 0) {
                 free(out);
                 return NULL;
@@ -142,30 +151,56 @@ static char* resolve_placeholders(const char* tpl,
             break;
         }
 
-        char* name = dup_range(open + 2, (size_t)(close - (open + 2)));
-        if (!name) {
+        char* var = dup_range(open + 2, (size_t)(close - (open + 2)));
+        if (!var) {
             free(out);
             return NULL;
         }
-        char* name_trim = ltrim_inplace(name);
-        rtrim_inplace(name_trim);
+        char* var_trim = ltrim_inplace(var);
+        rtrim_inplace(var_trim);
 
-        char* val = resolver_fn ? resolver_fn(name_trim, resolver_user_data) : NULL;
-        if (!val) {
-            val = strdup("");
+        const char* replacement = "";
+        char* replacement_owned = NULL;
+
+        if (strcmp(var_trim, "message") == 0) {
+            replacement = (tools_ctx && tools_ctx->template_current_user_message)
+                              ? tools_ctx->template_current_user_message
+                              : "";
+        } else if (strcmp(var_trim, "dm_history") == 0) {
+            replacement = "";
+        } else if (tools_ctx) {
+            const char* tool_name = map_variable_tool_name(var_trim);
+            if (tool_name && tool_name[0] != '\0') {
+                char* tool_result = tools_execute(tools_ctx, tool_name, "{}");
+                if (tool_result) {
+                    cJSON* root = cJSON_Parse(tool_result);
+                    if (root && cJSON_IsObject(root)) {
+                        cJSON* success = cJSON_GetObjectItemCaseSensitive(root, "success");
+                        if (!success || !cJSON_IsBool(success) || cJSON_IsTrue(success)) {
+                            cJSON* content = cJSON_GetObjectItemCaseSensitive(root, "content");
+                            if (content && cJSON_IsString(content) && content->valuestring) {
+                                replacement_owned = strdup(content->valuestring);
+                            } else if (content) {
+                                replacement_owned = cJSON_PrintUnformatted(content);
+                            }
+                        }
+                    }
+                    cJSON_Delete(root);
+                    free(tool_result);
+                }
+            }
+            replacement = replacement_owned ? replacement_owned : "";
         }
 
-        int rc = 0;
-        if (val) {
-            rc = append_text(&out, &cap, &used, val);
-        }
-        free(val);
-        free(name);
-        if (rc != 0) {
+        if (append_text(&out, &cap, &used, replacement) != 0) {
+            free(replacement_owned);
+            free(var);
             free(out);
             return NULL;
         }
 
+        free(replacement_owned);
+        free(var);
         p = close + 2;
     }
 
@@ -178,6 +213,9 @@ static void init_section_defaults(prompt_template_section_t* sec) {
     memset(sec->role, 0, sizeof(sec->role));
     snprintf(sec->role, sizeof(sec->role), "system");
     sec->content_template = NULL;
+    sec->tool_name = NULL;
+    sec->tool_args = NULL;
+    sec->result_field = NULL;
     sec->limit = 0;
     sec->skip_if_empty = 0;
     sec->provider_name = NULL;
@@ -190,20 +228,20 @@ static int parse_int_or_zero(const char* s) {
     return atoi(s);
 }
 
-int prompt_template_parse(const char* soul_content, prompt_template_t* out_template) {
-    if (!soul_content || !out_template) {
+int prompt_template_parse(const char* skill_content, prompt_template_t* out_template) {
+    if (!skill_content || !out_template) {
         return -1;
     }
 
     memset(out_template, 0, sizeof(*out_template));
 
-    const char* marker = strstr(soul_content, PROMPT_TEMPLATE_MARKER);
+    const char* marker = strstr(skill_content, PROMPT_TEMPLATE_MARKER);
     if (!marker) {
         return -1;
     }
 
-    size_t personality_len = (size_t)(marker - soul_content);
-    out_template->personality = dup_range(soul_content, personality_len);
+    size_t personality_len = (size_t)(marker - skill_content);
+    out_template->personality = dup_range(skill_content, personality_len);
     if (!out_template->personality) {
         return -1;
     }
@@ -292,6 +330,36 @@ int prompt_template_parse(const char* soul_content, prompt_template_t* out_templ
             continue;
         }
 
+        if (starts_with(line, "tool:")) {
+            char* val = line + strlen("tool:");
+            val = ltrim_inplace(val);
+            rtrim_inplace(val);
+            free(out_template->sections[current].tool_name);
+            out_template->sections[current].tool_name = strdup(val);
+            i++;
+            continue;
+        }
+
+        if (starts_with(line, "args:")) {
+            char* val = line + strlen("args:");
+            val = ltrim_inplace(val);
+            rtrim_inplace(val);
+            free(out_template->sections[current].tool_args);
+            out_template->sections[current].tool_args = strdup((*val) ? val : "{}");
+            i++;
+            continue;
+        }
+
+        if (starts_with(line, "result_field:")) {
+            char* val = line + strlen("result_field:");
+            val = ltrim_inplace(val);
+            rtrim_inplace(val);
+            free(out_template->sections[current].result_field);
+            out_template->sections[current].result_field = strdup(val);
+            i++;
+            continue;
+        }
+
         if (starts_with(line, "content:")) {
             char* val = line + strlen("content:");
             val = ltrim_inplace(val);
@@ -319,6 +387,9 @@ int prompt_template_parse(const char* soul_content, prompt_template_t* out_templ
                         starts_with(next_ltrim, "role:") ||
                         starts_with(next_ltrim, "limit:") ||
                         starts_with(next_ltrim, "skip_if_empty:") ||
+                        starts_with(next_ltrim, "tool:") ||
+                        starts_with(next_ltrim, "args:") ||
+                        starts_with(next_ltrim, "result_field:") ||
                         starts_with(next_ltrim, "content:") ||
                         starts_with(next_ltrim, "provider:")) {
                         break;
@@ -391,6 +462,9 @@ int prompt_template_parse(const char* soul_content, prompt_template_t* out_templ
                         starts_with(next, "role:") ||
                         starts_with(next, "limit:") ||
                         starts_with(next, "skip_if_empty:") ||
+                        starts_with(next, "tool:") ||
+                        starts_with(next, "args:") ||
+                        starts_with(next, "result_field:") ||
                         starts_with(next, "content:") ||
                         starts_with(next, "provider:")) {
                         break;
@@ -437,10 +511,46 @@ static int append_message_object(cJSON* messages, const char* role, const char*
     return 0;
 }
 
+static char* extract_tool_result_content(const prompt_template_section_t* sec, const char* tool_result_json) {
+    if (!tool_result_json) return strdup("");
+
+    cJSON* root = cJSON_Parse(tool_result_json);
+    if (!root || !cJSON_IsObject(root)) {
+        cJSON_Delete(root);
+        return strdup(tool_result_json);
+    }
+
+    cJSON* success = cJSON_GetObjectItemCaseSensitive(root, "success");
+    if (success && cJSON_IsBool(success) && !cJSON_IsTrue(success)) {
+        cJSON_Delete(root);
+        return strdup("");
+    }
+
+    const char* field_name = (sec && sec->result_field && sec->result_field[0] != '\0')
+                                 ? sec->result_field
+                                 : "content";
+
+    cJSON* field = cJSON_GetObjectItemCaseSensitive(root, field_name);
+    if (!field) {
+        field = cJSON_GetObjectItemCaseSensitive(root, "content");
+    }
+
+    char* out = NULL;
+    if (field && cJSON_IsString(field) && field->valuestring) {
+        out = strdup(field->valuestring);
+    } else if (field) {
+        out = cJSON_PrintUnformatted(field);
+    } else {
+        out = cJSON_PrintUnformatted(root);
+    }
+
+    cJSON_Delete(root);
+    return out ? out : strdup("");
+}
+
 cJSON* prompt_template_build_messages(const prompt_template_t* tmpl,
                                       const char* provider_name,
-                                      prompt_var_resolver_fn resolver_fn,
-                                      void* resolver_user_data,
+                                      tools_context_t* tools_ctx,
                                       cJSON* dm_history_messages,
                                       int dm_history_default_limit,
                                       prompt_template_emit_hook_fn emit_hook,
@@ -487,13 +597,21 @@ cJSON* prompt_template_build_messages(const prompt_template_t* tmpl,
             continue;
         }
 
-        const char* tpl = sec->content_template;
-        if (provider_name && sec->provider_name && sec->provider_content_template &&
-            strcmp(provider_name, sec->provider_name) == 0) {
-            tpl = sec->provider_content_template;
-        }
+        char* resolved = NULL;
 
-        char* resolved = resolve_placeholders(tpl ? tpl : "", resolver_fn, resolver_user_data);
+        if (sec->tool_name && sec->tool_name[0] != '\0' && tools_ctx) {
+            const char* args_json = (sec->tool_args && sec->tool_args[0] != '\0') ? sec->tool_args : "{}";
+            char* tool_result = tools_execute(tools_ctx, sec->tool_name, args_json);
+            resolved = extract_tool_result_content(sec, tool_result);
+            free(tool_result);
+        } else {
+            const char* tpl = sec->content_template;
+            if (provider_name && sec->provider_name && sec->provider_content_template &&
+                strcmp(provider_name, sec->provider_name) == 0) {
+                tpl = sec->provider_content_template;
+            }
+            resolved = resolve_inline_variables_local(tpl ? tpl : "", tools_ctx);
+        }
         if (!resolved) {
             cJSON_Delete(out);
             return NULL;
@@ -529,6 +647,12 @@ void prompt_template_free(prompt_template_t* tmpl) {
     for (int i = 0; i < tmpl->section_count; i++) {
         free(tmpl->sections[i].content_template);
         tmpl->sections[i].content_template = NULL;
+        free(tmpl->sections[i].tool_name);
+        tmpl->sections[i].tool_name = NULL;
+        free(tmpl->sections[i].tool_args);
+        tmpl->sections[i].tool_args = NULL;
+        free(tmpl->sections[i].result_field);
+        tmpl->sections[i].result_field = NULL;
         free(tmpl->sections[i].provider_name);
         tmpl->sections[i].provider_name = NULL;
         free(tmpl->sections[i].provider_content_template);

src/prompt_template.h

@@ -2,6 +2,7 @@
 #define DIDACTYL_PROMPT_TEMPLATE_H
 
 #include "cjson/cJSON.h"
+#include "tools.h"
 
 #define PROMPT_TEMPLATE_MAX_SECTIONS 32
 #define PROMPT_TEMPLATE_MAX_NAME_LEN 64
@@ -12,6 +13,9 @@ typedef struct {
     char name[PROMPT_TEMPLATE_MAX_NAME_LEN];
     char role[PROMPT_TEMPLATE_MAX_ROLE_LEN];
     char* content_template;
+    char* tool_name;
+    char* tool_args;
+    char* result_field;
     int limit;
     int skip_if_empty;
     char* provider_name;
@@ -24,17 +28,15 @@ typedef struct {
     int section_count;
 } prompt_template_t;
 
-typedef char* (*prompt_var_resolver_fn)(const char* var_name, void* user_data);
 typedef void (*prompt_template_emit_hook_fn)(const char* section_name,
                                              int message_index,
                                              void* user_data);
 
-int prompt_template_parse(const char* soul_content, prompt_template_t* out_template);
+int prompt_template_parse(const char* skill_content, prompt_template_t* out_template);
 
 cJSON* prompt_template_build_messages(const prompt_template_t* tmpl,
                                       const char* provider_name,
-                                      prompt_var_resolver_fn resolver_fn,
-                                      void* resolver_user_data,
+                                      tools_context_t* tools_ctx,
                                       cJSON* dm_history_messages,
                                       int dm_history_default_limit,
                                       prompt_template_emit_hook_fn emit_hook,

src/setup_wizard.h

@@ -0,0 +1,24 @@
+#ifndef DIDACTYL_SETUP_WIZARD_H
+#define DIDACTYL_SETUP_WIZARD_H
+
+#include <stddef.h>
+
+#include "config.h"
+
+/*
+ * setup_wizard_run
+ *
+ * Return values:
+ *   0  -> bootstrap/overwrite mode selected (new agent or load genesis), continue boot
+ *   1  -> wrote config/genesis and requested exit (no boot)
+ *   2  -> existing-agent recovery mode selected, continue boot
+ *  -1  -> abort/error
+ */
+#define SETUP_WIZARD_RC_BOOTSTRAP 0
+#define SETUP_WIZARD_RC_EXIT 1
+#define SETUP_WIZARD_RC_EXISTING 2
+#define SETUP_WIZARD_RC_ABORT -1
+
+int setup_wizard_run(didactyl_config_t* config, char* genesis_path_out, size_t genesis_path_out_size);
+
+#endif

src/tools/tool_admin.c

@@ -0,0 +1,222 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+char* execute_admin_identity(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+
+    const char* tier_text = "Sender tier unknown.";
+    if (ctx->template_sender_tier == 1) {
+        tier_text = "This message has been cryptographically verified as coming from your administrator.";
+    } else if (ctx->template_sender_tier == 2) {
+        tier_text = "This message is from a web-of-trust contact (not the administrator).";
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "admin_pubkey", ctx->cfg->admin.pubkey[0] ? ctx->cfg->admin.pubkey : "unknown");
+    cJSON_AddStringToObject(out, "sender_verification", tier_text);
+
+    char content[768];
+    snprintf(content,
+             sizeof(content),
+             "## Administrator Identity (source: config.admin.pubkey)\n\n"
+             "This is your administrator! Admin pubkey (hex): %s\n\n"
+             "%s",
+             ctx->cfg->admin.pubkey[0] ? ctx->cfg->admin.pubkey : "unknown",
+             tier_text);
+    cJSON_AddStringToObject(out, "content", content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_admin_profile(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* kind0 = nostr_handler_get_admin_kind0_context();
+    const char* profile_json = (kind0 && kind0[0]) ? kind0 : "{}";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(kind0);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "admin_kind0_json", profile_json);
+
+    size_t content_len = strlen("## Administrator Kind 0 Profile (source: nostr kind 0)\n\nAdministrator kind 0 profile content (JSON): ") + strlen(profile_json) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(kind0);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Administrator Kind 0 Profile (source: nostr kind 0)\n\nAdministrator kind 0 profile content (JSON): %s",
+             profile_json);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(kind0);
+    return json;
+}
+
+char* execute_nostr_admin_contacts(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* kind3 = nostr_handler_get_admin_kind3_context();
+    const char* contacts_json = (kind3 && kind3[0]) ? kind3 : "[]";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(kind3);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "admin_kind3_json", contacts_json);
+
+    size_t content_len = strlen("## Administrator Kind 3 Contacts (source: nostr kind 3)\n\nAdministrator contacts (JSON): ") + strlen(contacts_json) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(kind3);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Administrator Kind 3 Contacts (source: nostr kind 3)\n\nAdministrator contacts (JSON): %s",
+             contacts_json);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(kind3);
+    return json;
+}
+
+char* execute_nostr_admin_relays(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* kind10002 = nostr_handler_get_admin_kind10002_context();
+    const char* relays_json = (kind10002 && kind10002[0]) ? kind10002 : "[]";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(kind10002);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "admin_kind10002_json", relays_json);
+
+    size_t content_len = strlen("## Administrator Kind 10002 Relays (source: nostr kind 10002)\n\nAdministrator relay list (JSON): ") + strlen(relays_json) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(kind10002);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Administrator Kind 10002 Relays (source: nostr kind 10002)\n\nAdministrator relay list (JSON): %s",
+             relays_json);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(kind10002);
+    return json;
+}
+
+char* execute_nostr_admin_notes(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* notes = nostr_handler_get_admin_kind1_notes_context();
+    const char* notes_text = (notes && notes[0]) ? notes : "";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(notes);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "admin_notes_content", notes_text);
+
+    size_t content_len = strlen("## Administrator Recent Kind 1 Notes\n\n") + strlen(notes_text) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(notes);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Administrator Recent Kind 1 Notes\n\n%s",
+             notes_text);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(notes);
+    return json;
+}

src/tools/tool_agent.c

@@ -0,0 +1,331 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../main.h"
+#include "../nostr_handler.h"
+#include "../../nostr_core_lib/nostr_core/nostr_core.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+char* execute_message_current(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "content", ctx->template_current_user_message ? ctx->template_current_user_message : "");
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_agent_identity(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char npub[128] = {0};
+    if (nostr_key_to_bech32(ctx->cfg->keys.public_key, "npub", npub) != NOSTR_SUCCESS) {
+        strcpy(npub, "unknown");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "agent_pubkey", ctx->cfg->keys.public_key_hex[0] ? ctx->cfg->keys.public_key_hex : "unknown");
+    cJSON_AddStringToObject(out, "agent_npub", npub);
+
+    char content[384];
+    snprintf(content,
+             sizeof(content),
+             "## Agent Identity\n\nYour pubkey (hex): %s\nYour npub: %s",
+             ctx->cfg->keys.public_key_hex[0] ? ctx->cfg->keys.public_key_hex : "unknown",
+             npub);
+    cJSON_AddStringToObject(out, "content", content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_agent_profile(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* kind0 = nostr_handler_get_agent_kind0_context();
+    const char* profile_json = (kind0 && kind0[0]) ? kind0 : "{}";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(kind0);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "agent_kind0_json", profile_json);
+
+    size_t content_len = strlen("## Agent Kind 0 Profile (source: nostr kind 0)\n\nAgent kind 0 profile content (JSON): ") + strlen(profile_json) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(kind0);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Agent Kind 0 Profile (source: nostr kind 0)\n\nAgent kind 0 profile content (JSON): %s",
+             profile_json);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(kind0);
+    return json;
+}
+
+char* execute_nostr_agent_contacts(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* kind3 = nostr_handler_get_agent_kind3_context();
+    const char* contacts_json = (kind3 && kind3[0]) ? kind3 : "[]";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(kind3);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "agent_kind3_json", contacts_json);
+
+    size_t content_len = strlen("## Agent Kind 3 Contacts (source: nostr kind 3)\n\nAgent contacts (JSON): ") + strlen(contacts_json) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(kind3);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Agent Kind 3 Contacts (source: nostr kind 3)\n\nAgent contacts (JSON): %s",
+             contacts_json);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(kind3);
+    return json;
+}
+
+char* execute_nostr_agent_relays(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* kind10002 = nostr_handler_get_agent_kind10002_context();
+    const char* relays_json = (kind10002 && kind10002[0]) ? kind10002 : "[]";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(kind10002);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "agent_kind10002_json", relays_json);
+
+    size_t content_len = strlen("## Agent Kind 10002 Relays (source: nostr kind 10002)\n\nAgent relay list (JSON): ") + strlen(relays_json) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(kind10002);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Agent Kind 10002 Relays (source: nostr kind 10002)\n\nAgent relay list (JSON): %s",
+             relays_json);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(kind10002);
+    return json;
+}
+
+char* execute_nostr_agent_notes(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* notes = nostr_handler_get_agent_kind1_notes_context();
+    const char* notes_text = (notes && notes[0]) ? notes : "";
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(notes);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "agent_notes_content", notes_text);
+
+    size_t content_len = strlen("## Agent Recent Kind 1 Notes\n\n") + strlen(notes_text) + 1U;
+    char* content = (char*)malloc(content_len);
+    if (!content) {
+        cJSON_Delete(out);
+        free(notes);
+        return NULL;
+    }
+    snprintf(content,
+             content_len,
+             "## Agent Recent Kind 1 Notes\n\n%s",
+             notes_text);
+    cJSON_AddStringToObject(out, "content", content);
+    free(content);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(notes);
+    return json;
+}
+
+char* execute_adopted_skills(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    cJSON* filter = cJSON_CreateObject();
+    cJSON* kinds = cJSON_CreateArray();
+    cJSON* authors = cJSON_CreateArray();
+    if (!filter || !kinds || !authors) {
+        cJSON_Delete(filter);
+        cJSON_Delete(kinds);
+        cJSON_Delete(authors);
+        return NULL;
+    }
+
+    cJSON_AddItemToArray(kinds, cJSON_CreateNumber(10123));
+    cJSON_AddItemToObject(filter, "kinds", kinds);
+    cJSON_AddItemToArray(authors, cJSON_CreateString(ctx->cfg->keys.public_key_hex));
+    cJSON_AddItemToObject(filter, "authors", authors);
+    cJSON_AddNumberToObject(filter, "limit", 1);
+
+    char* events_json = nostr_handler_query_json(filter, 3000);
+    cJSON_Delete(filter);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(events_json);
+        return NULL;
+    }
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "content", (events_json && events_json[0]) ? events_json : "[]");
+    cJSON_AddStringToObject(out, "adoption_events_json", (events_json && events_json[0]) ? events_json : "[]");
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(events_json);
+    return json;
+}
+
+char* execute_trigger_event(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    const char* trigger_json = (ctx->template_trigger_event_json && ctx->template_trigger_event_json[0] != '\0')
+                                   ? ctx->template_trigger_event_json
+                                   : NULL;
+
+    if (!trigger_json) {
+        cJSON* arg_json = cJSON_GetObjectItemCaseSensitive(args, "trigger_event_json");
+        if (arg_json && cJSON_IsString(arg_json) && arg_json->valuestring && arg_json->valuestring[0] != '\0') {
+            trigger_json = arg_json->valuestring;
+        }
+    }
+
+    cJSON_Delete(args);
+
+    if (!trigger_json) {
+        trigger_json = "{}";
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "content", trigger_json);
+    cJSON_AddStringToObject(out, "trigger_event_json", trigger_json);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_agent_version(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "name", DIDACTYL_NAME);
+    cJSON_AddStringToObject(out, "description", DIDACTYL_DESCRIPTION);
+    cJSON_AddStringToObject(out, "software", DIDACTYL_SOFTWARE);
+    cJSON_AddStringToObject(out, "version", DIDACTYL_VERSION);
+    cJSON_AddNumberToObject(out, "version_major", DIDACTYL_VERSION_MAJOR);
+    cJSON_AddNumberToObject(out, "version_minor", DIDACTYL_VERSION_MINOR);
+    cJSON_AddNumberToObject(out, "version_patch", DIDACTYL_VERSION_PATCH);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_config.c

@@ -0,0 +1,285 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+#include "../../nostr_core_lib/nostr_core/nostr_core.h"
+
+#define CONFIG_KIND 30078
+#define CONFIG_APP_TAG "didactyl"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int nip44_encrypt_self_local(tools_context_t* ctx, const char* plaintext, char** out_ciphertext) {
+    if (!ctx || !ctx->cfg || !out_ciphertext) return -1;
+
+    const char* plain = plaintext ? plaintext : "";
+    size_t out_cap = (strlen(plain) * 4U) + 1024U;
+    char* ciphertext = (char*)malloc(out_cap);
+    if (!ciphertext) return -1;
+
+    int rc = nostr_nip44_encrypt(ctx->cfg->keys.private_key,
+                                 ctx->cfg->keys.public_key,
+                                 plain,
+                                 ciphertext,
+                                 out_cap);
+    if (rc != NOSTR_SUCCESS) {
+        free(ciphertext);
+        return -1;
+    }
+
+    *out_ciphertext = ciphertext;
+    return 0;
+}
+
+static int nip44_decrypt_self_local(tools_context_t* ctx, const char* ciphertext, char** out_plaintext) {
+    if (!ctx || !ctx->cfg || !ciphertext || !out_plaintext) return -1;
+
+    size_t out_cap = strlen(ciphertext) + 1024U;
+    char* plaintext = (char*)malloc(out_cap);
+    if (!plaintext) return -1;
+
+    int rc = nostr_nip44_decrypt(ctx->cfg->keys.private_key,
+                                 ctx->cfg->keys.public_key,
+                                 ciphertext,
+                                 plaintext,
+                                 out_cap);
+    if (rc != NOSTR_SUCCESS) {
+        free(plaintext);
+        return -1;
+    }
+
+    *out_plaintext = plaintext;
+    return 0;
+}
+
+static int query_config_ciphertext_local(tools_context_t* ctx, const char* d_tag, char** out_ciphertext) {
+    if (!ctx || !ctx->cfg || !d_tag || !d_tag[0] || !out_ciphertext) return -1;
+
+    cJSON* filter = cJSON_CreateObject();
+    cJSON* kinds = cJSON_CreateArray();
+    cJSON* authors = cJSON_CreateArray();
+    cJSON* d_vals = cJSON_CreateArray();
+    if (!filter || !kinds || !authors || !d_vals) {
+        cJSON_Delete(filter);
+        cJSON_Delete(kinds);
+        cJSON_Delete(authors);
+        cJSON_Delete(d_vals);
+        return -1;
+    }
+
+    cJSON_AddItemToArray(kinds, cJSON_CreateNumber(CONFIG_KIND));
+    cJSON_AddItemToObject(filter, "kinds", kinds);
+
+    cJSON_AddItemToArray(authors, cJSON_CreateString(ctx->cfg->keys.public_key_hex));
+    cJSON_AddItemToObject(filter, "authors", authors);
+
+    cJSON_AddItemToArray(d_vals, cJSON_CreateString(d_tag));
+    cJSON_AddItemToObject(filter, "#d", d_vals);
+
+    cJSON_AddNumberToObject(filter, "limit", 1);
+
+    char* events_json = nostr_handler_query_json(filter, 4000);
+    cJSON_Delete(filter);
+    if (!events_json) {
+        return -1;
+    }
+
+    cJSON* arr = cJSON_Parse(events_json);
+    free(events_json);
+    if (!arr || !cJSON_IsArray(arr) || cJSON_GetArraySize(arr) <= 0) {
+        cJSON_Delete(arr);
+        *out_ciphertext = strdup("");
+        return (*out_ciphertext != NULL) ? 0 : -1;
+    }
+
+    cJSON* ev = cJSON_GetArrayItem(arr, 0);
+    cJSON* content = ev ? cJSON_GetObjectItemCaseSensitive(ev, "content") : NULL;
+    const char* cipher = (content && cJSON_IsString(content) && content->valuestring) ? content->valuestring : "";
+
+    *out_ciphertext = strdup(cipher);
+    cJSON_Delete(arr);
+    return (*out_ciphertext != NULL) ? 0 : -1;
+}
+
+char* execute_config_store(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* d_tag_j = cJSON_GetObjectItemCaseSensitive(args, "d_tag");
+    cJSON* content_j = cJSON_GetObjectItemCaseSensitive(args, "content");
+
+    if (!d_tag_j || !cJSON_IsString(d_tag_j) || !d_tag_j->valuestring || d_tag_j->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("config_store requires non-empty string d_tag");
+    }
+    if (!content_j) {
+        cJSON_Delete(args);
+        return json_error_local("config_store requires content");
+    }
+
+    char* content_text = NULL;
+    if (cJSON_IsString(content_j) && content_j->valuestring) {
+        content_text = strdup(content_j->valuestring);
+    } else {
+        content_text = cJSON_PrintUnformatted(content_j);
+    }
+    cJSON_Delete(args);
+
+    if (!content_text) {
+        return json_error_local("config_store failed to serialize content");
+    }
+
+    char* ciphertext = NULL;
+    if (nip44_encrypt_self_local(ctx, content_text, &ciphertext) != 0) {
+        free(content_text);
+        return json_error_local("config_store NIP-44 encryption failed");
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        free(content_text);
+        free(ciphertext);
+        return NULL;
+    }
+
+    cJSON* d_tag = cJSON_CreateArray();
+    cJSON* app_tag = cJSON_CreateArray();
+    if (!d_tag || !app_tag) {
+        cJSON_Delete(d_tag);
+        cJSON_Delete(app_tag);
+        cJSON_Delete(tags);
+        free(content_text);
+        free(ciphertext);
+        return NULL;
+    }
+
+    cJSON_AddItemToArray(d_tag, cJSON_CreateString("d"));
+    cJSON_AddItemToArray(d_tag, cJSON_CreateString(d_tag_j->valuestring));
+    cJSON_AddItemToArray(tags, d_tag);
+
+    cJSON_AddItemToArray(app_tag, cJSON_CreateString("app"));
+    cJSON_AddItemToArray(app_tag, cJSON_CreateString(CONFIG_APP_TAG));
+    cJSON_AddItemToArray(tags, app_tag);
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event(CONFIG_KIND, ciphertext, tags, &publish_result);
+    cJSON_Delete(tags);
+    free(ciphertext);
+
+    if (rc != 0) {
+        free(content_text);
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("config_store publish failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(content_text);
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "d_tag", d_tag_j->valuestring);
+    cJSON_AddNumberToObject(out, "kind", CONFIG_KIND);
+    cJSON_AddNumberToObject(out, "content_length", (double)strlen(content_text));
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(content_text);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}
+
+char* execute_config_recall(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* d_tag_j = cJSON_GetObjectItemCaseSensitive(args, "d_tag");
+    if (!d_tag_j || !cJSON_IsString(d_tag_j) || !d_tag_j->valuestring || d_tag_j->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("config_recall requires non-empty string d_tag");
+    }
+
+    char d_tag_buf[256];
+    snprintf(d_tag_buf, sizeof(d_tag_buf), "%s", d_tag_j->valuestring);
+    cJSON_Delete(args);
+
+    char* ciphertext = NULL;
+    if (query_config_ciphertext_local(ctx, d_tag_buf, &ciphertext) != 0) {
+        return json_error_local("config_recall query failed");
+    }
+
+    if (!ciphertext || ciphertext[0] == '\0') {
+        free(ciphertext);
+        cJSON* out = cJSON_CreateObject();
+        if (!out) return NULL;
+        cJSON_AddBoolToObject(out, "success", 1);
+        cJSON_AddBoolToObject(out, "found", 0);
+        cJSON_AddStringToObject(out, "d_tag", d_tag_buf);
+        cJSON_AddStringToObject(out, "content", "");
+        char* json = cJSON_PrintUnformatted(out);
+        cJSON_Delete(out);
+        return json;
+    }
+
+    char* plaintext = NULL;
+    if (nip44_decrypt_self_local(ctx, ciphertext, &plaintext) != 0) {
+        free(ciphertext);
+        return json_error_local("config_recall NIP-44 decrypt failed");
+    }
+    free(ciphertext);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(plaintext);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddBoolToObject(out, "found", 1);
+    cJSON_AddStringToObject(out, "d_tag", d_tag_buf);
+    cJSON_AddStringToObject(out, "content", plaintext);
+    cJSON_AddNumberToObject(out, "content_length", (double)strlen(plaintext));
+
+    cJSON* parsed = cJSON_Parse(plaintext);
+    if (parsed) {
+        cJSON_AddItemToObject(out, "content_json", parsed);
+    }
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(plaintext);
+    return json;
+}

src/tools/tool_local.c

@@ -0,0 +1,515 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <curl/curl.h>
+#include <limits.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <strings.h>
+#include <sys/wait.h>
+#include <unistd.h>
+
+#include "cjson/cJSON.h"
+
+typedef struct {
+    char* data;
+    size_t len;
+    size_t cap;
+    size_t max_bytes;
+    int truncated;
+} local_http_fetch_buffer_t;
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int is_safe_relative_path_local(const char* path) {
+    if (!path || path[0] == '\0') return 0;
+    if (path[0] == '/') return 0;
+    if (strstr(path, "..") != NULL) return 0;
+    if (strchr(path, '\\') != NULL) return 0;
+    return 1;
+}
+
+static int build_tool_path_local(tools_context_t* ctx, const char* rel_path, char* out, size_t out_size) {
+    if (!ctx || !ctx->cfg || !rel_path || !out || out_size == 0) return -1;
+    if (!is_safe_relative_path_local(rel_path)) return -1;
+
+    const char* cwd = ctx->cfg->tools.shell.working_directory[0] != '\0'
+                          ? ctx->cfg->tools.shell.working_directory
+                          : ".";
+
+    int n = 0;
+    if (strcmp(cwd, ".") == 0) {
+        n = snprintf(out, out_size, "%s", rel_path);
+    } else {
+        n = snprintf(out, out_size, "%s/%s", cwd, rel_path);
+    }
+
+    if (n < 0 || (size_t)n >= out_size) return -1;
+    return 0;
+}
+
+static char* shell_quote_single_local(const char* in) {
+    if (!in) return NULL;
+
+    size_t len = strlen(in);
+    size_t extra = 2U;
+    for (size_t i = 0; i < len; i++) {
+        if (in[i] == '\'') {
+            extra += 4U;
+        } else {
+            extra += 1U;
+        }
+    }
+
+    char* out = (char*)malloc(extra + 1U);
+    if (!out) return NULL;
+
+    size_t j = 0;
+    out[j++] = '\'';
+    for (size_t i = 0; i < len; i++) {
+        if (in[i] == '\'') {
+            out[j++] = '\'';
+            out[j++] = '\\';
+            out[j++] = '\'';
+            out[j++] = '\'';
+        } else {
+            out[j++] = in[i];
+        }
+    }
+    out[j++] = '\'';
+    out[j] = '\0';
+
+    return out;
+}
+
+static size_t local_http_fetch_write_cb_local(void* contents, size_t size, size_t nmemb, void* userp) {
+    local_http_fetch_buffer_t* rb = (local_http_fetch_buffer_t*)userp;
+    size_t total = size * nmemb;
+    if (!rb || total == 0) return total;
+
+    if (rb->len >= rb->max_bytes) {
+        rb->truncated = 1;
+        return total;
+    }
+
+    size_t allowed = rb->max_bytes - rb->len;
+    size_t to_copy = total <= allowed ? total : allowed;
+
+    if (rb->len + to_copy + 1U > rb->cap) {
+        size_t new_cap = rb->cap == 0 ? 1024U : rb->cap;
+        while (new_cap < rb->len + to_copy + 1U) {
+            new_cap *= 2U;
+        }
+        char* bigger = (char*)realloc(rb->data, new_cap);
+        if (!bigger) return 0;
+        rb->data = bigger;
+        rb->cap = new_cap;
+    }
+
+    memcpy(rb->data + rb->len, contents, to_copy);
+    rb->len += to_copy;
+    rb->data[rb->len] = '\0';
+
+    if (to_copy < total) {
+        rb->truncated = 1;
+    }
+
+    return total;
+}
+
+static const char* detect_ca_bundle_path_for_tools_local(void) {
+    const char* env = getenv("SSL_CERT_FILE");
+    if (env && env[0] != '\0' && access(env, R_OK) == 0) {
+        return env;
+    }
+
+    static const char* candidates[] = {
+        "/etc/ssl/certs/ca-certificates.crt",
+        "/etc/ssl/cert.pem",
+        "/etc/pki/tls/certs/ca-bundle.crt",
+        "/etc/ssl/ca-bundle.pem"
+    };
+
+    for (size_t i = 0; i < sizeof(candidates) / sizeof(candidates[0]); i++) {
+        if (access(candidates[i], R_OK) == 0) {
+            return candidates[i];
+        }
+    }
+
+    return NULL;
+}
+
+char* execute_local_http_fetch(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* url = cJSON_GetObjectItemCaseSensitive(args, "url");
+    cJSON* method = cJSON_GetObjectItemCaseSensitive(args, "method");
+    cJSON* headers = cJSON_GetObjectItemCaseSensitive(args, "headers");
+    cJSON* body = cJSON_GetObjectItemCaseSensitive(args, "body");
+    cJSON* timeout = cJSON_GetObjectItemCaseSensitive(args, "timeout_seconds");
+    cJSON* maxb = cJSON_GetObjectItemCaseSensitive(args, "max_bytes");
+
+    if (!url || !cJSON_IsString(url) || !url->valuestring || url->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("local_http_fetch requires string url");
+    }
+    if (headers && !cJSON_IsArray(headers)) {
+        cJSON_Delete(args);
+        return json_error_local("local_http_fetch headers must be an array when provided");
+    }
+    if (body && !cJSON_IsString(body)) {
+        cJSON_Delete(args);
+        return json_error_local("local_http_fetch body must be a string when provided");
+    }
+
+    const char* method_str = (method && cJSON_IsString(method) && method->valuestring && method->valuestring[0] != '\0')
+                                 ? method->valuestring
+                                 : "GET";
+
+    if (body && cJSON_IsString(body) && body->valuestring && strcasecmp(method_str, "GET") == 0) {
+        cJSON_Delete(args);
+        return json_error_local("local_http_fetch GET requests cannot include body");
+    }
+
+    int default_timeout = ctx->cfg->tools.local_http_fetch_default_timeout_seconds > 0
+                              ? ctx->cfg->tools.local_http_fetch_default_timeout_seconds
+                              : 20;
+    int max_timeout = ctx->cfg->tools.local_http_fetch_max_timeout_seconds > 0
+                          ? ctx->cfg->tools.local_http_fetch_max_timeout_seconds
+                          : 120;
+    if (default_timeout > max_timeout) {
+        default_timeout = max_timeout;
+    }
+
+    int timeout_seconds = (timeout && cJSON_IsNumber(timeout)) ? (int)timeout->valuedouble : default_timeout;
+    if (timeout_seconds <= 0) timeout_seconds = default_timeout;
+    if (timeout_seconds > max_timeout) timeout_seconds = max_timeout;
+
+    int hard_max = ctx->cfg->tools.shell.max_output_bytes > 0 ? ctx->cfg->tools.shell.max_output_bytes : 65536;
+    int max_bytes = (maxb && cJSON_IsNumber(maxb)) ? (int)maxb->valuedouble : hard_max;
+    if (max_bytes <= 0 || max_bytes > hard_max) max_bytes = hard_max;
+
+    CURL* curl = curl_easy_init();
+    if (!curl) {
+        cJSON_Delete(args);
+        return json_error_local("local_http_fetch failed to initialize curl");
+    }
+
+    local_http_fetch_buffer_t rb;
+    memset(&rb, 0, sizeof(rb));
+    rb.max_bytes = (size_t)max_bytes;
+
+    struct curl_slist* req_headers = NULL;
+    req_headers = curl_slist_append(req_headers, "Accept: */*");
+
+    if (headers && cJSON_IsArray(headers)) {
+        int n = cJSON_GetArraySize(headers);
+        for (int i = 0; i < n; i++) {
+            cJSON* h = cJSON_GetArrayItem(headers, i);
+            if (h && cJSON_IsString(h) && h->valuestring && h->valuestring[0] != '\0') {
+                req_headers = curl_slist_append(req_headers, h->valuestring);
+            }
+        }
+    }
+
+    curl_easy_setopt(curl, CURLOPT_URL, url->valuestring);
+    curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
+    curl_easy_setopt(curl, CURLOPT_TIMEOUT, (long)timeout_seconds);
+    curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, local_http_fetch_write_cb_local);
+    curl_easy_setopt(curl, CURLOPT_WRITEDATA, &rb);
+    curl_easy_setopt(curl, CURLOPT_HTTPHEADER, req_headers);
+    curl_easy_setopt(curl, CURLOPT_USERAGENT, "didactyl/local_http_fetch");
+
+    const char* ca_bundle = detect_ca_bundle_path_for_tools_local();
+    if (ca_bundle) {
+        curl_easy_setopt(curl, CURLOPT_CAINFO, ca_bundle);
+    }
+
+    if (strcasecmp(method_str, "GET") == 0) {
+        curl_easy_setopt(curl, CURLOPT_HTTPGET, 1L);
+    } else if (strcasecmp(method_str, "POST") == 0) {
+        curl_easy_setopt(curl, CURLOPT_POST, 1L);
+        if (body && cJSON_IsString(body) && body->valuestring) {
+            curl_easy_setopt(curl, CURLOPT_POSTFIELDS, body->valuestring);
+            curl_easy_setopt(curl, CURLOPT_POSTFIELDSIZE, (long)strlen(body->valuestring));
+        }
+    } else {
+        curl_easy_setopt(curl, CURLOPT_CUSTOMREQUEST, method_str);
+        if (body && cJSON_IsString(body) && body->valuestring) {
+            curl_easy_setopt(curl, CURLOPT_POSTFIELDS, body->valuestring);
+            curl_easy_setopt(curl, CURLOPT_POSTFIELDSIZE, (long)strlen(body->valuestring));
+        }
+    }
+
+    CURLcode res = curl_easy_perform(curl);
+    long status_code = 0;
+    char* content_type = NULL;
+    char* content_type_copy = NULL;
+    curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &status_code);
+    curl_easy_getinfo(curl, CURLINFO_CONTENT_TYPE, &content_type);
+    if (content_type && content_type[0] != '\0') {
+        content_type_copy = strdup(content_type);
+    }
+
+    curl_slist_free_all(req_headers);
+    curl_easy_cleanup(curl);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(rb.data);
+        return NULL;
+    }
+
+    int http_ok = (status_code >= 200 && status_code < 300) ? 1 : 0;
+    int success = (res == CURLE_OK && http_ok) ? 1 : 0;
+
+    cJSON_AddBoolToObject(out, "success", success);
+    cJSON_AddStringToObject(out, "url", url->valuestring);
+    cJSON_AddStringToObject(out, "method", method_str);
+    cJSON_AddNumberToObject(out, "status_code", status_code);
+    cJSON_AddBoolToObject(out, "http_ok", http_ok);
+    cJSON_AddBoolToObject(out, "truncated", rb.truncated ? 1 : 0);
+    cJSON_AddNumberToObject(out, "bytes_received", (double)rb.len);
+
+    if (content_type_copy && content_type_copy[0] != '\0') {
+        cJSON_AddStringToObject(out, "content_type", content_type_copy);
+    }
+
+    if (res != CURLE_OK) {
+        cJSON_AddStringToObject(out, "curl_error", curl_easy_strerror(res));
+    }
+
+    cJSON_AddStringToObject(out, "body", rb.data ? rb.data : "");
+
+    free(rb.data);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    cJSON_Delete(args);
+    free(content_type_copy);
+    return json;
+}
+
+char* execute_local_shell_exec(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+    if (!ctx->cfg->tools.shell.enabled) return json_error_local("shell tool disabled");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* command = cJSON_GetObjectItemCaseSensitive(args, "command");
+    if (!command || !cJSON_IsString(command) || !command->valuestring || command->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("local_shell_exec requires string command");
+    }
+
+    const char* cwd = ctx->cfg->tools.shell.working_directory[0] != '\0'
+                          ? ctx->cfg->tools.shell.working_directory
+                          : ".";
+    int timeout_s = ctx->cfg->tools.shell.timeout_seconds > 0 ? ctx->cfg->tools.shell.timeout_seconds : 30;
+
+    char* quoted_cwd = shell_quote_single_local(cwd);
+    char* quoted_cmd = shell_quote_single_local(command->valuestring);
+    cJSON_Delete(args);
+
+    if (!quoted_cwd || !quoted_cmd) {
+        free(quoted_cwd);
+        free(quoted_cmd);
+        return json_error_local("allocation failure");
+    }
+
+    int needed = snprintf(NULL,
+                          0,
+                          "cd %s && timeout %ds sh -lc %s 2>&1",
+                          quoted_cwd,
+                          timeout_s,
+                          quoted_cmd);
+    if (needed <= 0) {
+        free(quoted_cwd);
+        free(quoted_cmd);
+        return json_error_local("failed to build shell command");
+    }
+
+    char* cmd = (char*)malloc((size_t)needed + 1U);
+    if (!cmd) {
+        free(quoted_cwd);
+        free(quoted_cmd);
+        return json_error_local("allocation failure");
+    }
+
+    snprintf(cmd,
+             (size_t)needed + 1U,
+             "cd %s && timeout %ds sh -lc %s 2>&1",
+             quoted_cwd,
+             timeout_s,
+             quoted_cmd);
+
+    free(quoted_cwd);
+    free(quoted_cmd);
+
+    FILE* fp = popen(cmd, "r");
+    free(cmd);
+    if (!fp) return json_error_local("failed to execute command");
+
+    int max_bytes = ctx->cfg->tools.shell.max_output_bytes > 0 ? ctx->cfg->tools.shell.max_output_bytes : 65536;
+    char* output = (char*)calloc((size_t)max_bytes + 1U, 1U);
+    if (!output) {
+        pclose(fp);
+        return json_error_local("allocation failure");
+    }
+
+    size_t used = 0;
+    while (!feof(fp) && used < (size_t)max_bytes) {
+        size_t n = fread(output + used, 1, (size_t)max_bytes - used, fp);
+        used += n;
+        if (n == 0) break;
+    }
+
+    int raw_status = pclose(fp);
+    int exit_status = raw_status;
+    if (raw_status != -1) {
+        if (WIFEXITED(raw_status)) {
+            exit_status = WEXITSTATUS(raw_status);
+        } else if (WIFSIGNALED(raw_status)) {
+            exit_status = 128 + WTERMSIG(raw_status);
+        }
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(output);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", exit_status == 0 ? 1 : 0);
+    cJSON_AddNumberToObject(out, "exit_status", exit_status);
+    cJSON_AddStringToObject(out, "output", output);
+    free(output);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_local_file_read(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* path = cJSON_GetObjectItemCaseSensitive(args, "path");
+    cJSON* maxb = cJSON_GetObjectItemCaseSensitive(args, "max_bytes");
+    if (!path || !cJSON_IsString(path) || !path->valuestring) {
+        cJSON_Delete(args);
+        return json_error_local("local_file_read requires string path");
+    }
+
+    int hard_max = ctx->cfg->tools.shell.max_output_bytes > 0 ? ctx->cfg->tools.shell.max_output_bytes : 65536;
+    int max_bytes = (maxb && cJSON_IsNumber(maxb)) ? (int)maxb->valuedouble : hard_max;
+    if (max_bytes <= 0 || max_bytes > hard_max) max_bytes = hard_max;
+
+    char file_path[PATH_MAX];
+    if (build_tool_path_local(ctx, path->valuestring, file_path, sizeof(file_path)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("local_file_read path is not allowed");
+    }
+
+    FILE* fp = fopen(file_path, "rb");
+    cJSON_Delete(args);
+    if (!fp) return json_error_local("local_file_read failed to open file");
+
+    char* buf = (char*)calloc((size_t)max_bytes + 1U, 1U);
+    if (!buf) {
+        fclose(fp);
+        return json_error_local("allocation failure");
+    }
+
+    size_t n = fread(buf, 1, (size_t)max_bytes, fp);
+    int truncated = !feof(fp) ? 1 : 0;
+    fclose(fp);
+    buf[n] = '\0';
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(buf);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "path", file_path);
+    cJSON_AddNumberToObject(out, "bytes_read", (double)n);
+    cJSON_AddBoolToObject(out, "truncated", truncated);
+    cJSON_AddStringToObject(out, "content", buf);
+    free(buf);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_local_file_write(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* path = cJSON_GetObjectItemCaseSensitive(args, "path");
+    cJSON* content = cJSON_GetObjectItemCaseSensitive(args, "content");
+    cJSON* append = cJSON_GetObjectItemCaseSensitive(args, "append");
+    if (!path || !cJSON_IsString(path) || !path->valuestring ||
+        !content || !cJSON_IsString(content) || !content->valuestring) {
+        cJSON_Delete(args);
+        return json_error_local("local_file_write requires string path and content");
+    }
+
+    char file_path[PATH_MAX];
+    if (build_tool_path_local(ctx, path->valuestring, file_path, sizeof(file_path)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("local_file_write path is not allowed");
+    }
+
+    const char* content_str = content->valuestring;
+    size_t len = strlen(content_str);
+    int do_append = (append && cJSON_IsBool(append) && cJSON_IsTrue(append)) ? 1 : 0;
+
+    FILE* fp = fopen(file_path, do_append ? "ab" : "wb");
+    cJSON_Delete(args);
+    if (!fp) return json_error_local("local_file_write failed to open file");
+
+    size_t n = fwrite(content_str, 1, len, fp);
+    fclose(fp);
+    if (n != len) return json_error_local("local_file_write failed to write all bytes");
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "path", file_path);
+    cJSON_AddNumberToObject(out, "bytes_written", (double)n);
+    cJSON_AddBoolToObject(out, "append", do_append);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_memory.c

@@ -0,0 +1,412 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <pthread.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+#include "../../nostr_core_lib/nostr_core/nostr_core.h"
+
+#define MEMORY_KIND 30078
+#define MEMORY_D_TAG "memory"
+#define MEMORY_APP_TAG "didactyl"
+#define MEMORY_MAX_CHARS 32000
+
+static pthread_mutex_t g_memory_mutex = PTHREAD_MUTEX_INITIALIZER;
+static char* g_memory_plain = NULL;
+static int g_memory_loaded = 0;
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static char* strdup_nonnull_local(const char* s) {
+    return strdup(s ? s : "");
+}
+
+static void memory_cache_set_locked_local(const char* plaintext) {
+    free(g_memory_plain);
+    g_memory_plain = strdup_nonnull_local(plaintext);
+    g_memory_loaded = 1;
+}
+
+static char* memory_cache_get_copy_locked_local(void) {
+    return strdup(g_memory_plain ? g_memory_plain : "");
+}
+
+static int nip44_encrypt_self_local(tools_context_t* ctx, const char* plaintext, char** out_ciphertext) {
+    if (!ctx || !ctx->cfg || !out_ciphertext) return -1;
+
+    const char* plain = plaintext ? plaintext : "";
+    size_t out_cap = (strlen(plain) * 4U) + 1024U;
+    char* ciphertext = (char*)malloc(out_cap);
+    if (!ciphertext) return -1;
+
+    int rc = nostr_nip44_encrypt(ctx->cfg->keys.private_key,
+                                 ctx->cfg->keys.public_key,
+                                 plain,
+                                 ciphertext,
+                                 out_cap);
+    if (rc != NOSTR_SUCCESS) {
+        free(ciphertext);
+        return -1;
+    }
+
+    *out_ciphertext = ciphertext;
+    return 0;
+}
+
+static int nip44_decrypt_self_local(tools_context_t* ctx, const char* ciphertext, char** out_plaintext) {
+    if (!ctx || !ctx->cfg || !ciphertext || !out_plaintext) return -1;
+
+    size_t out_cap = strlen(ciphertext) + 1024U;
+    char* plaintext = (char*)malloc(out_cap);
+    if (!plaintext) return -1;
+
+    int rc = nostr_nip44_decrypt(ctx->cfg->keys.private_key,
+                                 ctx->cfg->keys.public_key,
+                                 ciphertext,
+                                 plaintext,
+                                 out_cap);
+    if (rc != NOSTR_SUCCESS) {
+        free(plaintext);
+        return -1;
+    }
+
+    *out_plaintext = plaintext;
+    return 0;
+}
+
+static int query_memory_ciphertext_local(tools_context_t* ctx, char** out_ciphertext) {
+    if (!ctx || !ctx->cfg || !out_ciphertext) return -1;
+
+    cJSON* filter = cJSON_CreateObject();
+    cJSON* kinds = cJSON_CreateArray();
+    cJSON* authors = cJSON_CreateArray();
+    cJSON* d_vals = cJSON_CreateArray();
+    if (!filter || !kinds || !authors || !d_vals) {
+        cJSON_Delete(filter);
+        cJSON_Delete(kinds);
+        cJSON_Delete(authors);
+        cJSON_Delete(d_vals);
+        return -1;
+    }
+
+    cJSON_AddItemToArray(kinds, cJSON_CreateNumber(MEMORY_KIND));
+    cJSON_AddItemToObject(filter, "kinds", kinds);
+
+    cJSON_AddItemToArray(authors, cJSON_CreateString(ctx->cfg->keys.public_key_hex));
+    cJSON_AddItemToObject(filter, "authors", authors);
+
+    cJSON_AddItemToArray(d_vals, cJSON_CreateString(MEMORY_D_TAG));
+    cJSON_AddItemToObject(filter, "#d", d_vals);
+
+    cJSON_AddNumberToObject(filter, "limit", 1);
+
+    char* events_json = nostr_handler_query_json(filter, 4000);
+    cJSON_Delete(filter);
+    if (!events_json) {
+        return -1;
+    }
+
+    cJSON* arr = cJSON_Parse(events_json);
+    free(events_json);
+    if (!arr || !cJSON_IsArray(arr) || cJSON_GetArraySize(arr) <= 0) {
+        cJSON_Delete(arr);
+        *out_ciphertext = strdup("");
+        return (*out_ciphertext != NULL) ? 0 : -1;
+    }
+
+    cJSON* ev = cJSON_GetArrayItem(arr, 0);
+    cJSON* content = ev ? cJSON_GetObjectItemCaseSensitive(ev, "content") : NULL;
+    const char* cipher = (content && cJSON_IsString(content) && content->valuestring) ? content->valuestring : "";
+
+    *out_ciphertext = strdup(cipher);
+    cJSON_Delete(arr);
+    return (*out_ciphertext != NULL) ? 0 : -1;
+}
+
+static int memory_load_local(tools_context_t* ctx) {
+    char* ciphertext = NULL;
+    if (query_memory_ciphertext_local(ctx, &ciphertext) != 0) {
+        return -1;
+    }
+
+    char* plaintext = NULL;
+    if (!ciphertext || ciphertext[0] == '\0') {
+        plaintext = strdup("");
+    } else if (nip44_decrypt_self_local(ctx, ciphertext, &plaintext) != 0) {
+        fprintf(stdout,
+                "[didactyl] warning: failed to NIP-44 decrypt memory; resetting to empty\n");
+        plaintext = strdup("");
+    }
+    free(ciphertext);
+
+    if (!plaintext) return -1;
+
+    pthread_mutex_lock(&g_memory_mutex);
+    memory_cache_set_locked_local(plaintext);
+    pthread_mutex_unlock(&g_memory_mutex);
+
+    free(plaintext);
+    return 0;
+}
+
+static char* trim_and_limit_entry_local(const char* in, int* out_truncated) {
+    if (out_truncated) *out_truncated = 0;
+    if (!in) return strdup("");
+
+    while (*in == ' ' || *in == '\t' || *in == '\r' || *in == '\n') in++;
+    size_t n = strlen(in);
+    while (n > 0 && (in[n - 1] == ' ' || in[n - 1] == '\t' || in[n - 1] == '\r' || in[n - 1] == '\n')) {
+        n--;
+    }
+
+    if (n > MEMORY_MAX_CHARS) {
+        n = MEMORY_MAX_CHARS;
+        if (out_truncated) *out_truncated = 1;
+    }
+
+    char* out = (char*)malloc(n + 1U);
+    if (!out) return NULL;
+    if (n > 0) memcpy(out, in, n);
+    out[n] = '\0';
+    return out;
+}
+
+static char* prepend_and_truncate_local(const char* existing, const char* incoming, int* out_truncated) {
+    if (out_truncated) *out_truncated = 0;
+
+    const char* old = existing ? existing : "";
+    const char* add = incoming ? incoming : "";
+    const char* sep = "\n\n---\n\n";
+
+    size_t add_len = strlen(add);
+    size_t old_len = strlen(old);
+    size_t sep_len = (add_len > 0 && old_len > 0) ? strlen(sep) : 0U;
+
+    size_t total_len = add_len + sep_len + old_len;
+    char* joined = (char*)malloc(total_len + 1U);
+    if (!joined) return NULL;
+
+    size_t used = 0U;
+    if (add_len > 0) {
+        memcpy(joined + used, add, add_len);
+        used += add_len;
+    }
+    if (sep_len > 0) {
+        memcpy(joined + used, sep, sep_len);
+        used += sep_len;
+    }
+    if (old_len > 0) {
+        memcpy(joined + used, old, old_len);
+        used += old_len;
+    }
+    joined[used] = '\0';
+
+    if (used <= MEMORY_MAX_CHARS) {
+        return joined;
+    }
+
+    if (out_truncated) *out_truncated = 1;
+    char* clipped = (char*)malloc(MEMORY_MAX_CHARS + 1U);
+    if (!clipped) {
+        free(joined);
+        return NULL;
+    }
+    memcpy(clipped, joined, MEMORY_MAX_CHARS);
+    clipped[MEMORY_MAX_CHARS] = '\0';
+    free(joined);
+    return clipped;
+}
+
+int memory_init(tools_context_t* ctx) {
+    if (!ctx || !ctx->cfg) return -1;
+    return memory_load_local(ctx);
+}
+
+void memory_cleanup(void) {
+    pthread_mutex_lock(&g_memory_mutex);
+    free(g_memory_plain);
+    g_memory_plain = NULL;
+    g_memory_loaded = 0;
+    pthread_mutex_unlock(&g_memory_mutex);
+}
+
+char* execute_memory_save(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* content_j = cJSON_GetObjectItemCaseSensitive(args, "content");
+    if (!content_j || !cJSON_IsString(content_j) || !content_j->valuestring) {
+        cJSON_Delete(args);
+        return json_error_local("memory_save requires string content");
+    }
+
+    int entry_truncated = 0;
+    char* incoming = trim_and_limit_entry_local(content_j->valuestring, &entry_truncated);
+    cJSON_Delete(args);
+    if (!incoming) return NULL;
+    if (incoming[0] == '\0') {
+        free(incoming);
+        return json_error_local("memory_save content cannot be empty");
+    }
+
+    pthread_mutex_lock(&g_memory_mutex);
+    char* old_copy = memory_cache_get_copy_locked_local();
+    pthread_mutex_unlock(&g_memory_mutex);
+    if (!old_copy) {
+        free(incoming);
+        return NULL;
+    }
+
+    int body_truncated = 0;
+    char* merged = prepend_and_truncate_local(old_copy, incoming, &body_truncated);
+    free(old_copy);
+    free(incoming);
+    if (!merged) return NULL;
+
+    char* ciphertext = NULL;
+    if (nip44_encrypt_self_local(ctx, merged, &ciphertext) != 0) {
+        free(merged);
+        return json_error_local("memory_save NIP-44 encryption failed");
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        free(merged);
+        free(ciphertext);
+        return NULL;
+    }
+
+    cJSON* d_tag = cJSON_CreateArray();
+    cJSON* app_tag = cJSON_CreateArray();
+    if (!d_tag || !app_tag) {
+        cJSON_Delete(d_tag);
+        cJSON_Delete(app_tag);
+        cJSON_Delete(tags);
+        free(merged);
+        free(ciphertext);
+        return NULL;
+    }
+
+    cJSON_AddItemToArray(d_tag, cJSON_CreateString("d"));
+    cJSON_AddItemToArray(d_tag, cJSON_CreateString(MEMORY_D_TAG));
+    cJSON_AddItemToArray(tags, d_tag);
+
+    cJSON_AddItemToArray(app_tag, cJSON_CreateString("app"));
+    cJSON_AddItemToArray(app_tag, cJSON_CreateString(MEMORY_APP_TAG));
+    cJSON_AddItemToArray(tags, app_tag);
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event(MEMORY_KIND, ciphertext, tags, &publish_result);
+    cJSON_Delete(tags);
+    free(ciphertext);
+
+    if (rc != 0) {
+        free(merged);
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("memory_save publish failed");
+    }
+
+    pthread_mutex_lock(&g_memory_mutex);
+    memory_cache_set_locked_local(merged);
+    pthread_mutex_unlock(&g_memory_mutex);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(merged);
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "d_tag", MEMORY_D_TAG);
+    cJSON_AddNumberToObject(out, "kind", MEMORY_KIND);
+    cJSON_AddNumberToObject(out, "entry_length", (double)strlen(merged));
+    cJSON_AddBoolToObject(out, "truncated", (entry_truncated || body_truncated) ? 1 : 0);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(merged);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}
+
+char* execute_memory_recall(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    pthread_mutex_lock(&g_memory_mutex);
+    int loaded = g_memory_loaded;
+    pthread_mutex_unlock(&g_memory_mutex);
+
+    if (!loaded) {
+        (void)memory_load_local(ctx);
+    }
+
+    pthread_mutex_lock(&g_memory_mutex);
+    char* memory = memory_cache_get_copy_locked_local();
+    pthread_mutex_unlock(&g_memory_mutex);
+    if (!memory) return NULL;
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(memory);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "content", memory);
+    cJSON_AddNumberToObject(out, "content_length", (double)strlen(memory));
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(memory);
+    return json;
+}
+
+char* execute_my_memory(tools_context_t* ctx, const char* args_json) {
+    return execute_memory_recall(ctx, args_json);
+}
+
+char* execute_memory_short_term_read(tools_context_t* ctx, const char* args_json) {
+    (void)ctx;
+    (void)args_json;
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "content", "");
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_meta.c

@@ -0,0 +1,103 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdlib.h>
+
+#include "cjson/cJSON.h"
+#include "../trigger_manager.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+char* execute_tool_list(tools_context_t* ctx, const char* args_json) {
+    (void)args_json;
+    if (!ctx) {
+        return json_error_local("tool context unavailable");
+    }
+
+    char* schema_json = tools_build_openai_schema_json(ctx);
+    if (!schema_json) {
+        return json_error_local("failed to build tool schemas");
+    }
+
+    cJSON* schema_arr = cJSON_Parse(schema_json);
+    free(schema_json);
+    if (!schema_arr || !cJSON_IsArray(schema_arr)) {
+        cJSON_Delete(schema_arr);
+        return json_error_local("failed to parse tool schemas");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    cJSON* tools = cJSON_CreateArray();
+    if (!out || !tools) {
+        cJSON_Delete(schema_arr);
+        cJSON_Delete(out);
+        cJSON_Delete(tools);
+        return json_error_local("out of memory");
+    }
+
+    cJSON* item = NULL;
+    cJSON_ArrayForEach(item, schema_arr) {
+        cJSON* fn = cJSON_GetObjectItemCaseSensitive(item, "function");
+        if (!fn || !cJSON_IsObject(fn)) {
+            continue;
+        }
+
+        cJSON* name = cJSON_GetObjectItemCaseSensitive(fn, "name");
+        if (!name || !cJSON_IsString(name) || !name->valuestring) {
+            continue;
+        }
+
+        cJSON* row = cJSON_CreateObject();
+        if (!row) {
+            continue;
+        }
+
+        cJSON_AddStringToObject(row, "name", name->valuestring);
+
+        cJSON* description = cJSON_GetObjectItemCaseSensitive(fn, "description");
+        if (description && cJSON_IsString(description) && description->valuestring) {
+            cJSON_AddStringToObject(row, "description", description->valuestring);
+        } else {
+            cJSON_AddStringToObject(row, "description", "");
+        }
+
+        cJSON* parameters = cJSON_GetObjectItemCaseSensitive(fn, "parameters");
+        if (parameters) {
+            cJSON_AddItemToObject(row, "parameters", cJSON_Duplicate(parameters, 1));
+        } else {
+            cJSON_AddItemToObject(row, "parameters", cJSON_CreateObject());
+        }
+
+        cJSON_AddItemToArray(tools, row);
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddNumberToObject(out, "count", (double)cJSON_GetArraySize(tools));
+    cJSON_AddItemToObject(out, "tools", tools);
+
+    char* result = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    cJSON_Delete(schema_arr);
+    return result;
+}
+
+char* execute_trigger_list(tools_context_t* ctx, const char* args_json) {
+    (void)args_json;
+    if (!ctx || !ctx->trigger_manager) {
+        return json_error_local("trigger manager unavailable");
+    }
+    char* status = trigger_manager_status_json(ctx->trigger_manager);
+    if (!status) {
+        return json_error_local("failed to build trigger status");
+    }
+    return status;
+}

src/tools/tool_model.c

@@ -0,0 +1,325 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../config.h"
+#include "../llm.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int json_object_set_string(cJSON* obj, const char* key, const char* value) {
+    if (!obj || !key || !value) return -1;
+    cJSON_DeleteItemFromObjectCaseSensitive(obj, key);
+    cJSON* v = cJSON_CreateString(value);
+    if (!v) return -1;
+    cJSON_AddItemToObject(obj, key, v);
+    return 0;
+}
+
+static char* read_entire_file_local(const char* file_path, size_t* out_bytes) {
+    if (!file_path) return NULL;
+
+    FILE* fp = fopen(file_path, "rb");
+    if (!fp) return NULL;
+
+    if (fseek(fp, 0, SEEK_END) != 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    long len = ftell(fp);
+    if (len < 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    if (fseek(fp, 0, SEEK_SET) != 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    char* buf = (char*)malloc((size_t)len + 1U);
+    if (!buf) {
+        fclose(fp);
+        return NULL;
+    }
+
+    size_t n = fread(buf, 1, (size_t)len, fp);
+    fclose(fp);
+    if (n != (size_t)len) {
+        free(buf);
+        return NULL;
+    }
+
+    buf[len] = '\0';
+    if (out_bytes) *out_bytes = (size_t)len;
+    return buf;
+}
+
+static int persist_llm_config(tools_context_t* ctx, const llm_config_t* cfg) {
+    if (!ctx || !ctx->cfg || !cfg) return -1;
+    if (ctx->cfg->config_path[0] == '\0') return -1;
+
+    size_t src_len = 0;
+    char* raw = read_entire_file_local(ctx->cfg->config_path, &src_len);
+    if (!raw) return -1;
+
+    char* src = jsonc_strip_comments(raw, src_len);
+    free(raw);
+    if (!src) return -1;
+
+    cJSON* root = cJSON_ParseWithLength(src, strlen(src));
+    free(src);
+    if (!root || !cJSON_IsObject(root)) {
+        cJSON_Delete(root);
+        return -1;
+    }
+
+    cJSON* llm = cJSON_GetObjectItemCaseSensitive(root, "llm");
+    if (!llm || !cJSON_IsObject(llm)) {
+        cJSON_DeleteItemFromObjectCaseSensitive(root, "llm");
+        llm = cJSON_CreateObject();
+        if (!llm) {
+            cJSON_Delete(root);
+            return -1;
+        }
+        cJSON_AddItemToObject(root, "llm", llm);
+    }
+
+    if (json_object_set_string(llm, "provider", cfg->provider) != 0 ||
+        json_object_set_string(llm, "api_key", cfg->api_key) != 0 ||
+        json_object_set_string(llm, "model", cfg->model) != 0 ||
+        json_object_set_string(llm, "base_url", cfg->base_url) != 0) {
+        cJSON_Delete(root);
+        return -1;
+    }
+
+    cJSON_DeleteItemFromObjectCaseSensitive(llm, "max_tokens");
+    cJSON_AddNumberToObject(llm, "max_tokens", cfg->max_tokens);
+    cJSON_DeleteItemFromObjectCaseSensitive(llm, "temperature");
+    cJSON_AddNumberToObject(llm, "temperature", cfg->temperature);
+
+    char* out = cJSON_Print(root);
+    cJSON_Delete(root);
+    if (!out) return -1;
+
+    FILE* fp = fopen(ctx->cfg->config_path, "wb");
+    if (!fp) {
+        free(out);
+        return -1;
+    }
+
+    size_t out_len = strlen(out);
+    size_t n = fwrite(out, 1, out_len, fp);
+    fclose(fp);
+    free(out);
+    return n == out_len ? 0 : -1;
+}
+
+static int assign_string_field(cJSON* item, char* dst, size_t dst_size, int* changed) {
+    if (!item) return 0;
+    if (!cJSON_IsString(item) || !item->valuestring) return -1;
+    size_t n = strlen(item->valuestring);
+    if (n >= dst_size) return -1;
+    memcpy(dst, item->valuestring, n + 1U);
+    if (changed) *changed = 1;
+    return 0;
+}
+
+char* execute_model_get(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    llm_config_t cfg;
+    if (llm_get_config(&cfg) != 0) {
+        return json_error_local("llm runtime unavailable");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "provider", cfg.provider);
+    cJSON_AddStringToObject(out, "model", cfg.model);
+    cJSON_AddStringToObject(out, "base_url", cfg.base_url);
+    cJSON_AddNumberToObject(out, "max_tokens", cfg.max_tokens);
+    cJSON_AddNumberToObject(out, "temperature", cfg.temperature);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_model_set(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    llm_config_t cfg;
+    if (llm_get_config(&cfg) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("llm runtime unavailable");
+    }
+
+    int changed = 0;
+
+    cJSON* provider = cJSON_GetObjectItemCaseSensitive(args, "provider");
+    cJSON* api_key = cJSON_GetObjectItemCaseSensitive(args, "api_key");
+    cJSON* model = cJSON_GetObjectItemCaseSensitive(args, "model");
+    cJSON* base_url = cJSON_GetObjectItemCaseSensitive(args, "base_url");
+    cJSON* max_tokens = cJSON_GetObjectItemCaseSensitive(args, "max_tokens");
+    cJSON* temperature = cJSON_GetObjectItemCaseSensitive(args, "temperature");
+
+    if (assign_string_field(provider, cfg.provider, sizeof(cfg.provider), &changed) != 0 ||
+        assign_string_field(api_key, cfg.api_key, sizeof(cfg.api_key), &changed) != 0 ||
+        assign_string_field(model, cfg.model, sizeof(cfg.model), &changed) != 0 ||
+        assign_string_field(base_url, cfg.base_url, sizeof(cfg.base_url), &changed) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("model_set string field invalid or too long");
+    }
+
+    if (max_tokens) {
+        if (!cJSON_IsNumber(max_tokens)) {
+            cJSON_Delete(args);
+            return json_error_local("model_set max_tokens must be a number");
+        }
+        cfg.max_tokens = (int)max_tokens->valuedouble;
+        changed = 1;
+    }
+
+    if (temperature) {
+        if (!cJSON_IsNumber(temperature)) {
+            cJSON_Delete(args);
+            return json_error_local("model_set temperature must be a number");
+        }
+        cfg.temperature = temperature->valuedouble;
+        changed = 1;
+    }
+
+    cJSON_Delete(args);
+
+    if (!changed) {
+        return json_error_local("model_set requires at least one field to update");
+    }
+
+    if (llm_set_config(&cfg) != 0) {
+        return json_error_local("failed to update runtime llm config");
+    }
+
+    ctx->cfg->llm = cfg;
+    if (persist_llm_config(ctx, &cfg) != 0) {
+        return json_error_local("failed to persist llm config to config file");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "provider", cfg.provider);
+    cJSON_AddStringToObject(out, "model", cfg.model);
+    cJSON_AddStringToObject(out, "base_url", cfg.base_url);
+    cJSON_AddNumberToObject(out, "max_tokens", cfg.max_tokens);
+    cJSON_AddNumberToObject(out, "temperature", cfg.temperature);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+static void append_model_id(cJSON* ids, cJSON* item) {
+    if (!ids || !item) return;
+    if (cJSON_IsString(item) && item->valuestring) {
+        cJSON_AddItemToArray(ids, cJSON_CreateString(item->valuestring));
+        return;
+    }
+    if (cJSON_IsObject(item)) {
+        cJSON* id = cJSON_GetObjectItemCaseSensitive(item, "id");
+        if (id && cJSON_IsString(id) && id->valuestring) {
+            cJSON_AddItemToArray(ids, cJSON_CreateString(id->valuestring));
+        }
+    }
+}
+
+char* execute_model_list(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* base_url = cJSON_GetObjectItemCaseSensitive(args, "base_url");
+    if (base_url && (!cJSON_IsString(base_url) || !base_url->valuestring)) {
+        cJSON_Delete(args);
+        return json_error_local("model_list base_url must be a string");
+    }
+
+    const char* base_url_override = (base_url && base_url->valuestring && base_url->valuestring[0] != '\0')
+                                        ? base_url->valuestring
+                                        : NULL;
+
+    char* raw = llm_list_models_json(base_url_override);
+    cJSON_Delete(args);
+    if (!raw) {
+        return json_error_local("model_list request failed");
+    }
+
+    cJSON* root = cJSON_Parse(raw);
+    free(raw);
+    if (!root) {
+        cJSON_Delete(root);
+        return json_error_local("model_list returned invalid JSON");
+    }
+
+    cJSON* ids = cJSON_CreateArray();
+    cJSON* out = cJSON_CreateObject();
+    if (!ids || !out) {
+        cJSON_Delete(ids);
+        cJSON_Delete(out);
+        cJSON_Delete(root);
+        return NULL;
+    }
+
+    if (cJSON_IsArray(root)) {
+        int n = cJSON_GetArraySize(root);
+        for (int i = 0; i < n; i++) {
+            append_model_id(ids, cJSON_GetArrayItem(root, i));
+        }
+    } else if (cJSON_IsObject(root)) {
+        cJSON* data = cJSON_GetObjectItemCaseSensitive(root, "data");
+        if (data && cJSON_IsArray(data)) {
+            int n = cJSON_GetArraySize(data);
+            for (int i = 0; i < n; i++) {
+                append_model_id(ids, cJSON_GetArrayItem(data, i));
+            }
+        }
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddNumberToObject(out, "count", cJSON_GetArraySize(ids));
+    cJSON_AddItemToObject(out, "models", ids);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    cJSON_Delete(root);
+    return json;
+}

src/tools/tool_nostr_dm.c

@@ -0,0 +1,218 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+#include "../../nostr_core_lib/nostr_core/nostr_core.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int is_hex_string_len_local(const char* s, size_t expected_len) {
+    if (!s) return 0;
+    if (strlen(s) != expected_len) return 0;
+    for (size_t i = 0; i < expected_len; i++) {
+        if (!((s[i] >= '0' && s[i] <= '9') ||
+              (s[i] >= 'a' && s[i] <= 'f') ||
+              (s[i] >= 'A' && s[i] <= 'F'))) {
+            return 0;
+        }
+    }
+    return 1;
+}
+
+char* execute_nostr_dm_send(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* recipient = cJSON_GetObjectItemCaseSensitive(args, "recipient_pubkey");
+    cJSON* message = cJSON_GetObjectItemCaseSensitive(args, "message");
+    if (!recipient || !cJSON_IsString(recipient) || !recipient->valuestring || !is_hex_string_len_local(recipient->valuestring, 64U) ||
+        !message || !cJSON_IsString(message) || !message->valuestring || message->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_dm_send requires recipient_pubkey hex and non-empty message");
+    }
+
+    int rc = nostr_handler_send_dm(recipient->valuestring, message->valuestring);
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    cJSON_AddBoolToObject(out, "success", rc == 0 ? 1 : 0);
+    cJSON_AddStringToObject(out, "recipient_pubkey", recipient->valuestring);
+    cJSON_AddNumberToObject(out, "message_length", (double)strlen(message->valuestring));
+    cJSON_Delete(args);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_encrypt(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* recipient = cJSON_GetObjectItemCaseSensitive(args, "recipient_pubkey");
+    cJSON* plaintext = cJSON_GetObjectItemCaseSensitive(args, "plaintext");
+    if (!recipient || !cJSON_IsString(recipient) || !recipient->valuestring || !is_hex_string_len_local(recipient->valuestring, 64U) ||
+        !plaintext || !cJSON_IsString(plaintext) || !plaintext->valuestring || plaintext->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_encrypt requires recipient_pubkey hex and plaintext");
+    }
+
+    unsigned char recipient_pubkey[32];
+    if (nostr_hex_to_bytes(recipient->valuestring, recipient_pubkey, sizeof(recipient_pubkey)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_encrypt invalid recipient_pubkey");
+    }
+
+    size_t out_cap = (strlen(plaintext->valuestring) * 4U) + 1024U;
+    char* ciphertext = (char*)malloc(out_cap);
+    if (!ciphertext) {
+        cJSON_Delete(args);
+        return json_error_local("allocation failure");
+    }
+
+    int rc = nostr_nip44_encrypt(ctx->cfg->keys.private_key,
+                                 recipient_pubkey,
+                                 plaintext->valuestring,
+                                 ciphertext,
+                                 out_cap);
+    if (rc != NOSTR_SUCCESS) {
+        free(ciphertext);
+        cJSON_Delete(args);
+        return json_error_local("nostr_encrypt failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(ciphertext);
+        cJSON_Delete(args);
+        return NULL;
+    }
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "recipient_pubkey", recipient->valuestring);
+    cJSON_AddStringToObject(out, "ciphertext", ciphertext);
+
+    free(ciphertext);
+    cJSON_Delete(args);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_decrypt(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* sender = cJSON_GetObjectItemCaseSensitive(args, "sender_pubkey");
+    cJSON* ciphertext = cJSON_GetObjectItemCaseSensitive(args, "ciphertext");
+    if (!sender || !cJSON_IsString(sender) || !sender->valuestring || !is_hex_string_len_local(sender->valuestring, 64U) ||
+        !ciphertext || !cJSON_IsString(ciphertext) || !ciphertext->valuestring || ciphertext->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_decrypt requires sender_pubkey hex and ciphertext");
+    }
+
+    unsigned char sender_pubkey[32];
+    if (nostr_hex_to_bytes(sender->valuestring, sender_pubkey, sizeof(sender_pubkey)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_decrypt invalid sender_pubkey");
+    }
+
+    size_t out_cap = strlen(ciphertext->valuestring) + 1024U;
+    char* plaintext = (char*)malloc(out_cap);
+    if (!plaintext) {
+        cJSON_Delete(args);
+        return json_error_local("allocation failure");
+    }
+
+    int rc = nostr_nip44_decrypt(ctx->cfg->keys.private_key,
+                                 sender_pubkey,
+                                 ciphertext->valuestring,
+                                 plaintext,
+                                 out_cap);
+    if (rc != NOSTR_SUCCESS) {
+        free(plaintext);
+        cJSON_Delete(args);
+        return json_error_local("nostr_decrypt failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(plaintext);
+        cJSON_Delete(args);
+        return NULL;
+    }
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "sender_pubkey", sender->valuestring);
+    cJSON_AddStringToObject(out, "plaintext", plaintext);
+
+    free(plaintext);
+    cJSON_Delete(args);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_dm_send_nip17(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* recipient = cJSON_GetObjectItemCaseSensitive(args, "recipient_pubkey");
+    cJSON* message = cJSON_GetObjectItemCaseSensitive(args, "message");
+    cJSON* subject = cJSON_GetObjectItemCaseSensitive(args, "subject");
+
+    if (!recipient || !cJSON_IsString(recipient) || !recipient->valuestring || !is_hex_string_len_local(recipient->valuestring, 64U) ||
+        !message || !cJSON_IsString(message) || !message->valuestring || message->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_dm_send_nip17 requires recipient_pubkey hex and non-empty message");
+    }
+    if (subject && !cJSON_IsString(subject)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_dm_send_nip17 subject must be a string when provided");
+    }
+
+    int rc = nostr_handler_send_dm_nip17(recipient->valuestring,
+                                         message->valuestring,
+                                         (subject && subject->valuestring) ? subject->valuestring : NULL);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    cJSON_AddBoolToObject(out, "success", rc == 0 ? 1 : 0);
+    cJSON_AddStringToObject(out, "recipient_pubkey", recipient->valuestring);
+    cJSON_AddStringToObject(out, "protocol", "nip17");
+    cJSON_AddNumberToObject(out, "message_length", (double)strlen(message->valuestring));
+
+    cJSON_Delete(args);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_nostr_identity.c

@@ -0,0 +1,257 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../../nostr_core_lib/nostr_core/nostr_core.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int is_hex_string_len_local(const char* s, size_t expected_len) {
+    if (!s) return 0;
+    if (strlen(s) != expected_len) return 0;
+    for (size_t i = 0; i < expected_len; i++) {
+        if (!((s[i] >= '0' && s[i] <= '9') ||
+              (s[i] >= 'a' && s[i] <= 'f') ||
+              (s[i] >= 'A' && s[i] <= 'F'))) {
+            return 0;
+        }
+    }
+    return 1;
+}
+
+char* execute_nostr_encode(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* type = cJSON_GetObjectItemCaseSensitive(args, "type");
+    cJSON* hex = cJSON_GetObjectItemCaseSensitive(args, "hex");
+    cJSON* relays = cJSON_GetObjectItemCaseSensitive(args, "relays");
+    cJSON* kind = cJSON_GetObjectItemCaseSensitive(args, "kind");
+    cJSON* identifier = cJSON_GetObjectItemCaseSensitive(args, "identifier");
+
+    if (!type || !cJSON_IsString(type) || !type->valuestring ||
+        !hex || !cJSON_IsString(hex) || !hex->valuestring || !is_hex_string_len_local(hex->valuestring, 64U)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_encode requires type string and hex 64-char string");
+    }
+
+    char type_name[32];
+    snprintf(type_name, sizeof(type_name), "%s", type->valuestring);
+
+    unsigned char key_bytes[32];
+    if (nostr_hex_to_bytes(hex->valuestring, key_bytes, sizeof(key_bytes)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_encode invalid hex");
+    }
+
+    const char** relay_ptrs = NULL;
+    int relay_count = 0;
+    if (relays) {
+        if (!cJSON_IsArray(relays)) {
+            cJSON_Delete(args);
+            return json_error_local("nostr_encode relays must be an array of relay URLs");
+        }
+        relay_count = cJSON_GetArraySize(relays);
+        if (relay_count > 0) {
+            relay_ptrs = (const char**)malloc((size_t)relay_count * sizeof(char*));
+            if (!relay_ptrs) {
+                cJSON_Delete(args);
+                return json_error_local("memory allocation failed");
+            }
+            for (int i = 0; i < relay_count; i++) {
+                cJSON* relay = cJSON_GetArrayItem(relays, i);
+                if (!relay || !cJSON_IsString(relay) || !relay->valuestring || relay->valuestring[0] == '\0') {
+                    free(relay_ptrs);
+                    cJSON_Delete(args);
+                    return json_error_local("nostr_encode relays must contain non-empty strings");
+                }
+                relay_ptrs[i] = relay->valuestring;
+            }
+        }
+    }
+
+    char bech32[256] = {0};
+    char uri[1200] = {0};
+    int rc = NOSTR_ERROR_INVALID_INPUT;
+
+    if (strcmp(type_name, "npub") == 0) {
+        rc = nostr_key_to_bech32(key_bytes, "npub", bech32);
+        if (rc == NOSTR_SUCCESS) {
+            snprintf(uri, sizeof(uri), "nostr:%s", bech32);
+        }
+    } else if (strcmp(type_name, "nsec") == 0) {
+        rc = nostr_key_to_bech32(key_bytes, "nsec", bech32);
+        if (rc == NOSTR_SUCCESS) {
+            snprintf(uri, sizeof(uri), "nostr:%s", bech32);
+        }
+    } else if (strcmp(type_name, "note") == 0) {
+        rc = nostr_key_to_bech32(key_bytes, "note", bech32);
+        if (rc == NOSTR_SUCCESS) {
+            snprintf(uri, sizeof(uri), "nostr:%s", bech32);
+        }
+    } else if (strcmp(type_name, "nprofile") == 0) {
+        rc = nostr_build_uri_nprofile(key_bytes, relay_ptrs, relay_count, uri, sizeof(uri));
+    } else if (strcmp(type_name, "nevent") == 0) {
+        int kind_value = -1;
+        if (kind) {
+            if (!cJSON_IsNumber(kind)) {
+                free(relay_ptrs);
+                cJSON_Delete(args);
+                return json_error_local("nostr_encode nevent kind must be an integer");
+            }
+            kind_value = (int)kind->valuedouble;
+        }
+        rc = nostr_build_uri_nevent(key_bytes, relay_ptrs, relay_count, NULL, kind_value, 0, uri, sizeof(uri));
+    } else if (strcmp(type_name, "naddr") == 0) {
+        if (!kind || !cJSON_IsNumber(kind)) {
+            free(relay_ptrs);
+            cJSON_Delete(args);
+            return json_error_local("nostr_encode naddr requires kind integer");
+        }
+        if (!identifier || !cJSON_IsString(identifier) || !identifier->valuestring || identifier->valuestring[0] == '\0') {
+            free(relay_ptrs);
+            cJSON_Delete(args);
+            return json_error_local("nostr_encode naddr requires non-empty identifier string");
+        }
+        rc = nostr_build_uri_naddr(identifier->valuestring, key_bytes, (int)kind->valuedouble,
+                                   relay_ptrs, relay_count, uri, sizeof(uri));
+    } else {
+        free(relay_ptrs);
+        cJSON_Delete(args);
+        return json_error_local("nostr_encode currently supports npub, nsec, note, nprofile, nevent, naddr");
+    }
+
+    free(relay_ptrs);
+    cJSON_Delete(args);
+    if (rc != NOSTR_SUCCESS) {
+        return json_error_local("nostr_encode failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "type", type_name);
+    cJSON_AddStringToObject(out, "uri", uri);
+    cJSON_AddBoolToObject(out, "limited_support", 1);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_decode(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* uri_in = cJSON_GetObjectItemCaseSensitive(args, "uri");
+    if (!uri_in || !cJSON_IsString(uri_in) || !uri_in->valuestring || uri_in->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_decode requires uri string");
+    }
+
+    const char* in = uri_in->valuestring;
+    if (strncmp(in, "nostr:", 6) == 0) {
+        in += 6;
+    }
+
+    unsigned char key[32];
+    char key_hex[65] = {0};
+    const char* type = NULL;
+    int rc = NOSTR_ERROR_INVALID_INPUT;
+
+    if (strncmp(in, "npub1", 5) == 0) {
+        type = "npub";
+        rc = nostr_decode_npub(in, key);
+    } else if (strncmp(in, "nsec1", 5) == 0) {
+        type = "nsec";
+        rc = nostr_decode_nsec(in, key);
+    } else {
+        cJSON_Delete(args);
+        return json_error_local("nostr_decode currently supports npub and nsec");
+    }
+
+    cJSON_Delete(args);
+    if (rc != NOSTR_SUCCESS) {
+        return json_error_local("nostr_decode failed");
+    }
+
+    nostr_bytes_to_hex(key, 32, key_hex);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "type", type);
+    if (strcmp(type, "npub") == 0) {
+        cJSON_AddStringToObject(out, "pubkey", key_hex);
+    } else {
+        cJSON_AddStringToObject(out, "private_key", key_hex);
+    }
+    cJSON_AddBoolToObject(out, "limited_support", 1);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_pubkey(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "pubkey", ctx->cfg->keys.public_key_hex);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_npub(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char npub[256] = {0};
+    if (nostr_key_to_bech32(ctx->cfg->keys.public_key, "npub", npub) != NOSTR_SUCCESS) {
+        return json_error_local("failed to encode npub");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) return NULL;
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "npub", npub);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_nostr_list.c

@@ -0,0 +1,361 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int is_hex_string_len_local(const char* s, size_t expected_len) {
+    if (!s) return 0;
+    if (strlen(s) != expected_len) return 0;
+    for (size_t i = 0; i < expected_len; i++) {
+        if (!((s[i] >= '0' && s[i] <= '9') ||
+              (s[i] >= 'a' && s[i] <= 'f') ||
+              (s[i] >= 'A' && s[i] <= 'F'))) {
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static int add_string_tag_local(cJSON* tags, const char* key, const char* value) {
+    if (!tags || !cJSON_IsArray(tags) || !key || !value) return -1;
+    cJSON* tuple = cJSON_CreateArray();
+    if (!tuple) return -1;
+    cJSON_AddItemToArray(tuple, cJSON_CreateString(key));
+    cJSON_AddItemToArray(tuple, cJSON_CreateString(value));
+    cJSON_AddItemToArray(tags, tuple);
+    return 0;
+}
+
+static int tag_tuple_equal_local(cJSON* a, cJSON* b) {
+    if (!a || !b || !cJSON_IsArray(a) || !cJSON_IsArray(b)) return 0;
+    int an = cJSON_GetArraySize(a);
+    int bn = cJSON_GetArraySize(b);
+    if (an != bn) return 0;
+    for (int i = 0; i < an; i++) {
+        cJSON* av = cJSON_GetArrayItem(a, i);
+        cJSON* bv = cJSON_GetArrayItem(b, i);
+        if (!av || !bv || !cJSON_IsString(av) || !cJSON_IsString(bv) || !av->valuestring || !bv->valuestring) {
+            return 0;
+        }
+        if (strcmp(av->valuestring, bv->valuestring) != 0) return 0;
+    }
+    return 1;
+}
+
+static int tags_contains_tuple_local(cJSON* tags, cJSON* tuple) {
+    if (!tags || !tuple || !cJSON_IsArray(tags) || !cJSON_IsArray(tuple)) return 0;
+    int n = cJSON_GetArraySize(tags);
+    for (int i = 0; i < n; i++) {
+        cJSON* t = cJSON_GetArrayItem(tags, i);
+        if (tag_tuple_equal_local(t, tuple)) return 1;
+    }
+    return 0;
+}
+
+static int remove_matching_tag_tuples_local(cJSON* tags, cJSON* tuple) {
+    if (!tags || !tuple || !cJSON_IsArray(tags) || !cJSON_IsArray(tuple)) return 0;
+    int removed = 0;
+    for (int i = cJSON_GetArraySize(tags) - 1; i >= 0; i--) {
+        cJSON* t = cJSON_GetArrayItem(tags, i);
+        if (tag_tuple_equal_local(t, tuple)) {
+            cJSON_DeleteItemFromArray(tags, i);
+            removed++;
+        }
+    }
+    return removed;
+}
+
+char* execute_nostr_delete(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* event_ids = cJSON_GetObjectItemCaseSensitive(args, "event_ids");
+    cJSON* kinds = cJSON_GetObjectItemCaseSensitive(args, "kinds");
+    cJSON* reason = cJSON_GetObjectItemCaseSensitive(args, "reason");
+
+    if (!event_ids || !cJSON_IsArray(event_ids) || cJSON_GetArraySize(event_ids) <= 0) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_delete requires non-empty event_ids array");
+    }
+    if (kinds && !cJSON_IsArray(kinds)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_delete kinds must be an array when provided");
+    }
+    if (reason && !cJSON_IsString(reason)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_delete reason must be a string when provided");
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        cJSON_Delete(args);
+        return json_error_local("failed to create tags");
+    }
+
+    int event_id_count = cJSON_GetArraySize(event_ids);
+    for (int i = 0; i < event_id_count; i++) {
+        cJSON* id = cJSON_GetArrayItem(event_ids, i);
+        if (!id || !cJSON_IsString(id) || !id->valuestring || !is_hex_string_len_local(id->valuestring, 64U)) {
+            cJSON_Delete(tags);
+            cJSON_Delete(args);
+            return json_error_local("nostr_delete event_ids must contain 64-char hex strings");
+        }
+        if (add_string_tag_local(tags, "e", id->valuestring) != 0) {
+            cJSON_Delete(tags);
+            cJSON_Delete(args);
+            return json_error_local("failed to add e tag");
+        }
+    }
+
+    if (kinds) {
+        int kind_count = cJSON_GetArraySize(kinds);
+        for (int i = 0; i < kind_count; i++) {
+            cJSON* k = cJSON_GetArrayItem(kinds, i);
+            if (!k || !cJSON_IsNumber(k)) {
+                cJSON_Delete(tags);
+                cJSON_Delete(args);
+                return json_error_local("nostr_delete kinds must contain integers");
+            }
+            char kind_buf[32];
+            snprintf(kind_buf, sizeof(kind_buf), "%d", (int)k->valuedouble);
+            if (add_string_tag_local(tags, "k", kind_buf) != 0) {
+                cJSON_Delete(tags);
+                cJSON_Delete(args);
+                return json_error_local("failed to add k tag");
+            }
+        }
+    }
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    const char* reason_content = (reason && reason->valuestring) ? reason->valuestring : "";
+    int rc = nostr_handler_publish_kind_event(5, reason_content, tags, &publish_result);
+    cJSON_Delete(tags);
+    cJSON_Delete(args);
+    if (rc != 0) {
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("nostr_delete failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", publish_result.success ? 1 : 0);
+    cJSON_AddStringToObject(out, "message", "nostr_delete published");
+    cJSON_AddNumberToObject(out, "kind", publish_result.kind);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+    cJSON_AddNumberToObject(out, "requested_event_count", event_id_count);
+    cJSON_AddNumberToObject(out, "relay_count", publish_result.relay_count);
+    cJSON_AddNumberToObject(out, "accepted_by_pool_count", publish_result.accepted_by_pool_count);
+
+    cJSON* relays = cJSON_CreateArray();
+    if (!relays) {
+        nostr_handler_publish_result_free(&publish_result);
+        cJSON_Delete(out);
+        return NULL;
+    }
+    for (int i = 0; i < publish_result.relay_count; i++) {
+        cJSON_AddItemToArray(relays, cJSON_CreateString(publish_result.relays[i] ? publish_result.relays[i] : ""));
+    }
+    cJSON_AddItemToObject(out, "relays", relays);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}
+
+char* execute_nostr_list_manage(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* list_kind = cJSON_GetObjectItemCaseSensitive(args, "list_kind");
+    cJSON* action = cJSON_GetObjectItemCaseSensitive(args, "action");
+    cJSON* items = cJSON_GetObjectItemCaseSensitive(args, "items");
+
+    if (!list_kind || !cJSON_IsNumber(list_kind) ||
+        !action || !cJSON_IsString(action) || !action->valuestring ||
+        !items || !cJSON_IsArray(items)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_list_manage requires list_kind, action, and items");
+    }
+    if (strcmp(action->valuestring, "add") != 0 && strcmp(action->valuestring, "remove") != 0) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_list_manage action must be add or remove");
+    }
+
+    cJSON* filter = cJSON_CreateObject();
+    cJSON* kinds = cJSON_CreateArray();
+    cJSON* authors = cJSON_CreateArray();
+    if (!filter || !kinds || !authors) {
+        cJSON_Delete(filter);
+        cJSON_Delete(kinds);
+        cJSON_Delete(authors);
+        cJSON_Delete(args);
+        return json_error_local("failed to create list query filter");
+    }
+
+    cJSON_AddItemToArray(kinds, cJSON_CreateNumber((int)list_kind->valuedouble));
+    cJSON_AddItemToObject(filter, "kinds", kinds);
+    cJSON_AddItemToArray(authors, cJSON_CreateString(ctx->cfg->keys.public_key_hex));
+    cJSON_AddItemToObject(filter, "authors", authors);
+    cJSON_AddNumberToObject(filter, "limit", 1);
+
+    char* events_json = nostr_handler_query_json(filter, 8000);
+    cJSON_Delete(filter);
+
+    cJSON* events = events_json ? cJSON_Parse(events_json) : NULL;
+    free(events_json);
+
+    char* list_content = strdup("");
+    if (!list_content) {
+        cJSON_Delete(events);
+        cJSON_Delete(args);
+        return json_error_local("allocation failure");
+    }
+
+    cJSON* updated_tags = cJSON_CreateArray();
+    if (!updated_tags) {
+        free(list_content);
+        cJSON_Delete(events);
+        cJSON_Delete(args);
+        return json_error_local("failed to create list tags");
+    }
+
+    if (events && cJSON_IsArray(events) && cJSON_GetArraySize(events) > 0) {
+        cJSON* ev0 = cJSON_GetArrayItem(events, 0);
+        if (ev0 && cJSON_IsObject(ev0)) {
+            cJSON* content = cJSON_GetObjectItemCaseSensitive(ev0, "content");
+            if (content && cJSON_IsString(content) && content->valuestring) {
+                free(list_content);
+                list_content = strdup(content->valuestring);
+                if (!list_content) {
+                    cJSON_Delete(updated_tags);
+                    cJSON_Delete(events);
+                    cJSON_Delete(args);
+                    return json_error_local("allocation failure");
+                }
+            }
+
+            cJSON* tags = cJSON_GetObjectItemCaseSensitive(ev0, "tags");
+            if (tags && cJSON_IsArray(tags)) {
+                cJSON_Delete(updated_tags);
+                updated_tags = cJSON_Duplicate(tags, 1);
+                if (!updated_tags) {
+                    free(list_content);
+                    cJSON_Delete(events);
+                    cJSON_Delete(args);
+                    return json_error_local("failed to duplicate existing list tags");
+                }
+            }
+        }
+    }
+
+    int items_affected = 0;
+    int item_count = cJSON_GetArraySize(items);
+    for (int i = 0; i < item_count; i++) {
+        cJSON* tuple = cJSON_GetArrayItem(items, i);
+        if (!tuple || !cJSON_IsArray(tuple) || cJSON_GetArraySize(tuple) <= 0) {
+            continue;
+        }
+
+        int tuple_ok = 1;
+        int tuple_size = cJSON_GetArraySize(tuple);
+        for (int j = 0; j < tuple_size; j++) {
+            cJSON* part = cJSON_GetArrayItem(tuple, j);
+            if (!part || !cJSON_IsString(part) || !part->valuestring) {
+                tuple_ok = 0;
+                break;
+            }
+        }
+        if (!tuple_ok) {
+            continue;
+        }
+
+        if (strcmp(action->valuestring, "add") == 0) {
+            if (!tags_contains_tuple_local(updated_tags, tuple)) {
+                cJSON* dup = cJSON_Duplicate(tuple, 1);
+                if (!dup) {
+                    free(list_content);
+                    cJSON_Delete(updated_tags);
+                    cJSON_Delete(events);
+                    cJSON_Delete(args);
+                    return json_error_local("failed to duplicate list item");
+                }
+                cJSON_AddItemToArray(updated_tags, dup);
+                items_affected++;
+            }
+        } else {
+            items_affected += remove_matching_tag_tuples_local(updated_tags, tuple);
+        }
+    }
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event((int)list_kind->valuedouble,
+                                              list_content,
+                                              updated_tags,
+                                              &publish_result);
+
+    free(list_content);
+    cJSON_Delete(updated_tags);
+    cJSON_Delete(events);
+
+    if (rc != 0) {
+        cJSON_Delete(args);
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("nostr_list_manage failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(args);
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", publish_result.success ? 1 : 0);
+    cJSON_AddNumberToObject(out, "list_kind", publish_result.kind);
+    cJSON_AddStringToObject(out, "action", action->valuestring);
+    cJSON_Delete(args);
+    cJSON_AddNumberToObject(out, "items_affected", items_affected);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}

src/tools/tool_nostr_my_events.c

@@ -0,0 +1,212 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static const char* find_d_tag_local(cJSON* tags) {
+    if (!tags || !cJSON_IsArray(tags)) {
+        return NULL;
+    }
+
+    int n = cJSON_GetArraySize(tags);
+    for (int i = 0; i < n; i++) {
+        cJSON* tag = cJSON_GetArrayItem(tags, i);
+        if (!tag || !cJSON_IsArray(tag) || cJSON_GetArraySize(tag) < 2) {
+            continue;
+        }
+
+        cJSON* key = cJSON_GetArrayItem(tag, 0);
+        cJSON* value = cJSON_GetArrayItem(tag, 1);
+        if (!key || !value || !cJSON_IsString(key) || !cJSON_IsString(value) ||
+            !key->valuestring || !value->valuestring) {
+            continue;
+        }
+
+        if (strcmp(key->valuestring, "d") == 0) {
+            return value->valuestring;
+        }
+    }
+
+    return NULL;
+}
+
+char* execute_nostr_my_events(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = cJSON_Parse(args_json ? args_json : "{}");
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return json_error_local("invalid arguments JSON");
+    }
+
+    int limit = 200;
+    int timeout_ms = 8000;
+    int kind_filter = -1;
+
+    cJSON* limit_item = cJSON_GetObjectItemCaseSensitive(args, "limit");
+    if (limit_item) {
+        if (!cJSON_IsNumber(limit_item)) {
+            cJSON_Delete(args);
+            return json_error_local("limit must be an integer");
+        }
+        limit = (int)limit_item->valuedouble;
+        if (limit < 1) limit = 1;
+        if (limit > 2000) limit = 2000;
+    }
+
+    cJSON* timeout_item = cJSON_GetObjectItemCaseSensitive(args, "timeout_ms");
+    if (timeout_item) {
+        if (!cJSON_IsNumber(timeout_item)) {
+            cJSON_Delete(args);
+            return json_error_local("timeout_ms must be an integer");
+        }
+        timeout_ms = (int)timeout_item->valuedouble;
+        if (timeout_ms < 1000) timeout_ms = 1000;
+        if (timeout_ms > 60000) timeout_ms = 60000;
+    }
+
+    cJSON* kind_item = cJSON_GetObjectItemCaseSensitive(args, "kind");
+    if (kind_item) {
+        if (!cJSON_IsNumber(kind_item)) {
+            cJSON_Delete(args);
+            return json_error_local("kind must be an integer when provided");
+        }
+        kind_filter = (int)kind_item->valuedouble;
+        if (kind_filter < 0) {
+            cJSON_Delete(args);
+            return json_error_local("kind must be >= 0");
+        }
+    }
+
+    cJSON* filter = cJSON_CreateObject();
+    cJSON* authors = cJSON_CreateArray();
+    if (!filter || !authors) {
+        cJSON_Delete(filter);
+        cJSON_Delete(authors);
+        cJSON_Delete(args);
+        return json_error_local("failed to build filter");
+    }
+
+    cJSON_AddItemToArray(authors, cJSON_CreateString(ctx->cfg->keys.public_key_hex));
+    cJSON_AddItemToObject(filter, "authors", authors);
+    if (kind_filter >= 0) {
+        cJSON* kinds = cJSON_CreateArray();
+        if (!kinds) {
+            cJSON_Delete(filter);
+            cJSON_Delete(args);
+            return json_error_local("failed to build kind filter");
+        }
+        cJSON_AddItemToArray(kinds, cJSON_CreateNumber(kind_filter));
+        cJSON_AddItemToObject(filter, "kinds", kinds);
+    }
+    cJSON_AddNumberToObject(filter, "limit", limit);
+
+    char* events_json = nostr_handler_query_json(filter, timeout_ms);
+    cJSON_Delete(filter);
+    cJSON_Delete(args);
+    if (!events_json) {
+        return json_error_local("nostr query failed");
+    }
+
+    cJSON* events = cJSON_Parse(events_json);
+    free(events_json);
+    if (!events || !cJSON_IsArray(events)) {
+        cJSON_Delete(events);
+        return json_error_local("nostr query returned invalid JSON");
+    }
+
+    cJSON* summarized = cJSON_CreateArray();
+    cJSON* seen_event_ids = cJSON_CreateObject();
+    if (!summarized || !seen_event_ids) {
+        cJSON_Delete(events);
+        cJSON_Delete(summarized);
+        cJSON_Delete(seen_event_ids);
+        return json_error_local("allocation failure");
+    }
+
+    int n = cJSON_GetArraySize(events);
+    for (int i = 0; i < n; i++) {
+        cJSON* ev = cJSON_GetArrayItem(events, i);
+        if (!ev || !cJSON_IsObject(ev)) {
+            continue;
+        }
+
+        cJSON* kind = cJSON_GetObjectItemCaseSensitive(ev, "kind");
+        cJSON* id = cJSON_GetObjectItemCaseSensitive(ev, "id");
+        cJSON* created_at = cJSON_GetObjectItemCaseSensitive(ev, "created_at");
+        cJSON* tags = cJSON_GetObjectItemCaseSensitive(ev, "tags");
+
+        if (!kind || !cJSON_IsNumber(kind) ||
+            !id || !cJSON_IsString(id) || !id->valuestring ||
+            !created_at || !cJSON_IsNumber(created_at)) {
+            continue;
+        }
+
+        cJSON* already_seen = cJSON_GetObjectItemCaseSensitive(seen_event_ids, id->valuestring);
+        if (already_seen) {
+            continue;
+        }
+        cJSON_AddBoolToObject(seen_event_ids, id->valuestring, 1);
+
+        cJSON* item = cJSON_CreateObject();
+        if (!item) {
+            continue;
+        }
+
+        cJSON_AddNumberToObject(item, "kind", (int)kind->valuedouble);
+        cJSON_AddStringToObject(item, "event_id", id->valuestring);
+        {
+            char ts_buf[32];
+            long long ts = (long long)created_at->valuedouble;
+            snprintf(ts_buf, sizeof(ts_buf), "%lld", ts);
+            cJSON_AddStringToObject(item, "timestamp", ts_buf);
+        }
+
+        const char* d_tag = find_d_tag_local(tags);
+        if (d_tag && d_tag[0] != '\0') {
+            cJSON_AddStringToObject(item, "d_tag", d_tag);
+        } else {
+            cJSON_AddNullToObject(item, "d_tag");
+        }
+
+        cJSON_AddBoolToObject(item,
+                              "in_current_cache",
+                              nostr_handler_is_event_in_self_cache(id->valuestring) ? 1 : 0);
+
+        cJSON_AddItemToArray(summarized, item);
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(events);
+        cJSON_Delete(summarized);
+        cJSON_Delete(seen_event_ids);
+        return json_error_local("allocation failure");
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddNumberToObject(out, "count", cJSON_GetArraySize(summarized));
+    cJSON_AddItemToObject(out, "events", summarized);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    cJSON_Delete(events);
+    cJSON_Delete(seen_event_ids);
+    return json;
+}

src/tools/tool_nostr_post.c

@@ -0,0 +1,927 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <ctype.h>
+#include <limits.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static const char* skip_ws_local(const char* p) {
+    while (p && *p && isspace((unsigned char)*p)) p++;
+    return p;
+}
+
+static char* sanitize_json_string_controls_local(const char* in) {
+    if (!in) return NULL;
+
+    size_t len = strlen(in);
+    size_t cap = (len * 2U) + 1U;
+    char* out = (char*)malloc(cap);
+    if (!out) return NULL;
+
+    int in_string = 0;
+    int escaping = 0;
+    size_t j = 0;
+
+    for (size_t i = 0; i < len; i++) {
+        char c = in[i];
+
+        if (escaping) {
+            if (j + 1U >= cap) {
+                free(out);
+                return NULL;
+            }
+            out[j++] = c;
+            escaping = 0;
+            continue;
+        }
+
+        if (c == '\\') {
+            if (j + 1U >= cap) {
+                free(out);
+                return NULL;
+            }
+            out[j++] = c;
+            if (in_string) escaping = 1;
+            continue;
+        }
+
+        if (c == '"') {
+            if (j + 1U >= cap) {
+                free(out);
+                return NULL;
+            }
+            out[j++] = c;
+            in_string = !in_string;
+            continue;
+        }
+
+        if (in_string && (c == '\n' || c == '\r' || c == '\t')) {
+            if (j + 2U >= cap) {
+                free(out);
+                return NULL;
+            }
+            out[j++] = '\\';
+            out[j++] = (c == '\n') ? 'n' : (c == '\r') ? 'r' : 't';
+            continue;
+        }
+
+        if (j + 1U >= cap) {
+            free(out);
+            return NULL;
+        }
+        out[j++] = c;
+    }
+
+    out[j] = '\0';
+    return out;
+}
+
+static cJSON* parse_tool_args_json_local(const char* args_json) {
+    const char* raw_args_json = args_json ? args_json : "{}";
+    raw_args_json = skip_ws_local(raw_args_json);
+    if (!raw_args_json || raw_args_json[0] == '\0') {
+        raw_args_json = "{}";
+    }
+
+    cJSON* args = cJSON_Parse(raw_args_json);
+    char* repaired_args_json = NULL;
+
+    if (args && cJSON_IsString(args) && args->valuestring) {
+        cJSON* nested = cJSON_Parse(args->valuestring);
+        if (nested) {
+            cJSON_Delete(args);
+            args = nested;
+        }
+    }
+
+    if (!args) {
+        repaired_args_json = sanitize_json_string_controls_local(raw_args_json);
+        if (repaired_args_json) {
+            args = cJSON_Parse(repaired_args_json);
+            if (args && cJSON_IsString(args) && args->valuestring) {
+                cJSON* nested = cJSON_Parse(args->valuestring);
+                if (nested) {
+                    cJSON_Delete(args);
+                    args = nested;
+                }
+            }
+        }
+    }
+
+    free(repaired_args_json);
+    return args;
+}
+
+static const char* find_key_start_local(const char* in, const char* key) {
+    if (!in || !key) return NULL;
+
+    char pattern[64];
+    int n = snprintf(pattern, sizeof(pattern), "\"%s\"", key);
+    if (n <= 0 || (size_t)n >= sizeof(pattern)) return NULL;
+
+    return strstr(in, pattern);
+}
+
+static int parse_loose_kind_local(const char* in, int* out_kind) {
+    if (!in || !out_kind) return -1;
+
+    const char* p = find_key_start_local(in, "kind");
+    if (!p) return -1;
+
+    p = strchr(p, ':');
+    if (!p) return -1;
+    p = skip_ws_local(p + 1);
+    if (!p || !*p) return -1;
+
+    char* end = NULL;
+    long v = strtol(p, &end, 10);
+    if (end == p) return -1;
+
+    *out_kind = (int)v;
+    return 0;
+}
+
+static char* parse_loose_json_string_value_local(const char* in, const char* key) {
+    if (!in || !key) return NULL;
+
+    const char* p = find_key_start_local(in, key);
+    if (!p) return NULL;
+
+    p = strchr(p, ':');
+    if (!p) return NULL;
+    p = skip_ws_local(p + 1);
+    if (!p || *p != '"') return NULL;
+    p++;
+
+    size_t max_len = strlen(p);
+    char* out = (char*)malloc(max_len + 1U);
+    if (!out) return NULL;
+
+    size_t j = 0;
+    int escaping = 0;
+    for (size_t i = 0; p[i] != '\0'; i++) {
+        char c = p[i];
+
+        if (escaping) {
+            switch (c) {
+                case 'n': out[j++] = '\n'; break;
+                case 'r': out[j++] = '\r'; break;
+                case 't': out[j++] = '\t'; break;
+                case '"': out[j++] = '"'; break;
+                case '\\': out[j++] = '\\'; break;
+                default: out[j++] = c; break;
+            }
+            escaping = 0;
+            continue;
+        }
+
+        if (c == '\\') {
+            escaping = 1;
+            continue;
+        }
+
+        if (c == '"') {
+            out[j] = '\0';
+            return out;
+        }
+
+        out[j++] = c;
+    }
+
+    out[j] = '\0';
+    return out;
+}
+
+static cJSON* parse_loose_nostr_post_args_local(const char* in) {
+    if (!in) return NULL;
+
+    int kind = 0;
+    if (parse_loose_kind_local(in, &kind) != 0) {
+        return NULL;
+    }
+
+    char* content = parse_loose_json_string_value_local(in, "content");
+    if (!content) {
+        return NULL;
+    }
+
+    cJSON* args = cJSON_CreateObject();
+    if (!args) {
+        free(content);
+        return NULL;
+    }
+
+    cJSON_AddNumberToObject(args, "kind", kind);
+    cJSON_AddStringToObject(args, "content", content);
+    free(content);
+    return args;
+}
+
+static cJSON* ensure_tags_array_local(cJSON** tags_inout) {
+    if (!tags_inout) return NULL;
+
+    if (*tags_inout) {
+        if (cJSON_IsArray(*tags_inout)) {
+            return *tags_inout;
+        }
+        cJSON_Delete(*tags_inout);
+        *tags_inout = NULL;
+    }
+
+    *tags_inout = cJSON_CreateArray();
+    return *tags_inout;
+}
+
+static int has_tag_key_local(cJSON* tags, const char* key) {
+    if (!tags || !cJSON_IsArray(tags) || !key) return 0;
+
+    int n = cJSON_GetArraySize(tags);
+    for (int i = 0; i < n; i++) {
+        cJSON* tag = cJSON_GetArrayItem(tags, i);
+        if (!tag || !cJSON_IsArray(tag)) continue;
+
+        cJSON* k = cJSON_GetArrayItem(tag, 0);
+        if (k && cJSON_IsString(k) && k->valuestring && strcmp(k->valuestring, key) == 0) {
+            return 1;
+        }
+    }
+    return 0;
+}
+
+static int add_string_tag_local(cJSON* tags, const char* key, const char* value) {
+    if (!tags || !cJSON_IsArray(tags) || !key || !value || value[0] == '\0') return -1;
+
+    cJSON* tag = cJSON_CreateArray();
+    if (!tag) return -1;
+
+    cJSON_AddItemToArray(tag, cJSON_CreateString(key));
+    cJSON_AddItemToArray(tag, cJSON_CreateString(value));
+    cJSON_AddItemToArray(tags, tag);
+    return 0;
+}
+
+static char* trim_copy_local(const char* start, size_t len) {
+    while (len > 0 && isspace((unsigned char)start[0])) {
+        start++;
+        len--;
+    }
+    while (len > 0 && isspace((unsigned char)start[len - 1])) {
+        len--;
+    }
+
+    char* out = (char*)malloc(len + 1U);
+    if (!out) return NULL;
+    memcpy(out, start, len);
+    out[len] = '\0';
+    return out;
+}
+
+static char* first_markdown_h1_local(const char* content) {
+    if (!content) return NULL;
+
+    const char* p = content;
+    while (*p) {
+        const char* line = p;
+        const char* nl = strchr(line, '\n');
+        size_t len = nl ? (size_t)(nl - line) : strlen(line);
+        while (len > 0 && line[len - 1] == '\r') len--;
+
+        size_t i = 0;
+        while (i < len && isspace((unsigned char)line[i])) i++;
+        if (i < len && line[i] == '#') {
+            size_t j = i;
+            while (j < len && line[j] == '#') j++;
+            if (j < len && isspace((unsigned char)line[j])) {
+                while (j < len && isspace((unsigned char)line[j])) j++;
+                if (j < len) return trim_copy_local(line + j, len - j);
+            }
+        }
+
+        if (!nl) break;
+        p = nl + 1;
+    }
+    return NULL;
+}
+
+static int is_paragraph_line_local(const char* line, size_t len) {
+    size_t i = 0;
+    while (i < len && isspace((unsigned char)line[i])) i++;
+    if (i >= len) return 0;
+
+    char c = line[i];
+    if (c == '#' || c == '>' || c == '-' || c == '*' || c == '`' || c == '|') return 0;
+    if (isdigit((unsigned char)c)) {
+        size_t j = i;
+        while (j < len && isdigit((unsigned char)line[j])) j++;
+        if (j < len && line[j] == '.') return 0;
+    }
+    return 1;
+}
+
+static char* first_markdown_paragraph_local(const char* content) {
+    if (!content) return NULL;
+
+    const char* p = content;
+    while (*p) {
+        const char* line = p;
+        const char* nl = strchr(line, '\n');
+        size_t len = nl ? (size_t)(nl - line) : strlen(line);
+        while (len > 0 && line[len - 1] == '\r') len--;
+
+        if (is_paragraph_line_local(line, len)) {
+            size_t cap = 1024;
+            size_t used = 0;
+            char* out = (char*)malloc(cap);
+            if (!out) return NULL;
+
+            const char* q = line;
+            const char* qnl = nl;
+            size_t qlen = len;
+
+            while (1) {
+                if (!is_paragraph_line_local(q, qlen)) break;
+
+                size_t start = 0;
+                while (start < qlen && isspace((unsigned char)q[start])) start++;
+                size_t end = qlen;
+                while (end > start && isspace((unsigned char)q[end - 1])) end--;
+                size_t part_len = end - start;
+
+                if (used + part_len + 2 >= cap) {
+                    cap = (cap * 2U) + part_len + 16U;
+                    char* bigger = (char*)realloc(out, cap);
+                    if (!bigger) {
+                        free(out);
+                        return NULL;
+                    }
+                    out = bigger;
+                }
+
+                if (part_len > 0) {
+                    if (used > 0) out[used++] = ' ';
+                    memcpy(out + used, q + start, part_len);
+                    used += part_len;
+                }
+
+                if (!qnl) break;
+                q = qnl + 1;
+                qnl = strchr(q, '\n');
+                qlen = qnl ? (size_t)(qnl - q) : strlen(q);
+                while (qlen > 0 && q[qlen - 1] == '\r') qlen--;
+            }
+
+            out[used] = '\0';
+            return out;
+        }
+
+        if (!nl) break;
+        p = nl + 1;
+    }
+
+    return NULL;
+}
+
+static char* first_markdown_image_url_local(const char* content) {
+    if (!content) return NULL;
+
+    const char* p = content;
+    while ((p = strstr(p, "![")) != NULL) {
+        const char* close_bracket = strchr(p + 2, ']');
+        if (!close_bracket || close_bracket[1] != '(') {
+            p += 2;
+            continue;
+        }
+
+        const char* url_start = close_bracket + 2;
+        const char* url_end = strchr(url_start, ')');
+        if (!url_end || url_end <= url_start) {
+            p += 2;
+            continue;
+        }
+
+        return trim_copy_local(url_start, (size_t)(url_end - url_start));
+    }
+
+    return NULL;
+}
+
+static char* d_tagify_string_local(const char* in, const char* fallback) {
+    if (!in || in[0] == '\0') {
+        return fallback ? strdup(fallback) : NULL;
+    }
+
+    size_t len = strlen(in);
+    char* out = (char*)malloc(len + 1U);
+    if (!out) return NULL;
+
+    size_t j = 0;
+    int prev_dash = 0;
+    for (size_t i = 0; i < len; i++) {
+        unsigned char c = (unsigned char)in[i];
+        if (isalnum(c)) {
+            out[j++] = (char)tolower(c);
+            prev_dash = 0;
+        } else if (!prev_dash && j > 0) {
+            out[j++] = '-';
+            prev_dash = 1;
+        }
+    }
+
+    while (j > 0 && out[j - 1] == '-') j--;
+    out[j] = '\0';
+
+    if (j == 0) {
+        free(out);
+        return fallback ? strdup(fallback) : NULL;
+    }
+
+    return out;
+}
+
+static void ensure_nip23_metadata_tags_local(int kind, const char* content, cJSON** tags_inout) {
+    if (!content || (kind != 30023 && kind != 30024) || !tags_inout) {
+        return;
+    }
+
+    cJSON* tags = ensure_tags_array_local(tags_inout);
+    if (!tags) return;
+
+    char* title = has_tag_key_local(tags, "title") ? NULL : first_markdown_h1_local(content);
+    char* summary = has_tag_key_local(tags, "summary") ? NULL : first_markdown_paragraph_local(content);
+    char* image = has_tag_key_local(tags, "image") ? NULL : first_markdown_image_url_local(content);
+
+    if (title) (void)add_string_tag_local(tags, "title", title);
+    if (summary) (void)add_string_tag_local(tags, "summary", summary);
+    if (image) (void)add_string_tag_local(tags, "image", image);
+
+    if (!has_tag_key_local(tags, "published_at")) {
+        char published_at[32];
+        snprintf(published_at, sizeof(published_at), "%lld", (long long)time(NULL));
+        (void)add_string_tag_local(tags, "published_at", published_at);
+    }
+
+    if (!has_tag_key_local(tags, "d")) {
+        char* d_tag = NULL;
+        if (title) {
+            d_tag = d_tagify_string_local(title, "long-form-note");
+        } else {
+            char* derived_title = first_markdown_h1_local(content);
+            d_tag = d_tagify_string_local(derived_title, "long-form-note");
+            free(derived_title);
+        }
+        if (d_tag) {
+            (void)add_string_tag_local(tags, "d", d_tag);
+            free(d_tag);
+        }
+    }
+
+    free(title);
+    free(summary);
+    free(image);
+}
+
+static int is_safe_relative_path_local(const char* path) {
+    if (!path || path[0] == '\0') return 0;
+    if (path[0] == '/') return 0;
+    if (strstr(path, "..") != NULL) return 0;
+    if (strchr(path, '\\') != NULL) return 0;
+    return 1;
+}
+
+static int build_tool_path_local(tools_context_t* ctx, const char* rel_path, char* out, size_t out_size) {
+    if (!ctx || !ctx->cfg || !rel_path || !out || out_size == 0) return -1;
+    if (!is_safe_relative_path_local(rel_path)) return -1;
+
+    const char* cwd = ctx->cfg->tools.shell.working_directory[0] != '\0'
+                          ? ctx->cfg->tools.shell.working_directory
+                          : ".";
+
+    int n = 0;
+    if (strcmp(cwd, ".") == 0) {
+        n = snprintf(out, out_size, "%s", rel_path);
+    } else {
+        n = snprintf(out, out_size, "%s/%s", cwd, rel_path);
+    }
+
+    if (n < 0 || (size_t)n >= out_size) return -1;
+    return 0;
+}
+
+static char* read_entire_file_local(const char* file_path, size_t* out_bytes) {
+    if (!file_path) return NULL;
+
+    FILE* fp = fopen(file_path, "rb");
+    if (!fp) return NULL;
+
+    if (fseek(fp, 0, SEEK_END) != 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    long size = ftell(fp);
+    if (size < 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    if (fseek(fp, 0, SEEK_SET) != 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    char* buf = (char*)malloc((size_t)size + 1U);
+    if (!buf) {
+        fclose(fp);
+        return NULL;
+    }
+
+    size_t n = fread(buf, 1, (size_t)size, fp);
+    fclose(fp);
+    buf[n] = '\0';
+
+    if (out_bytes) *out_bytes = n;
+    return buf;
+}
+
+static char* basename_lowercase_dup_local(const char* path) {
+    if (!path || path[0] == '\0') return NULL;
+
+    const char* base = strrchr(path, '/');
+    base = base ? (base + 1) : path;
+    if (base[0] == '\0') return NULL;
+
+    char* out = strdup(base);
+    if (!out) return NULL;
+
+    for (size_t i = 0; out[i] != '\0'; i++) {
+        out[i] = (char)tolower((unsigned char)out[i]);
+    }
+
+    return out;
+}
+
+char* execute_nostr_post(const char* args_json) {
+    const char* raw_args_json = args_json ? args_json : "{}";
+    raw_args_json = skip_ws_local(raw_args_json);
+    if (!raw_args_json || raw_args_json[0] == '\0') {
+        raw_args_json = "{}";
+    }
+
+    cJSON* args = cJSON_Parse(raw_args_json);
+    char* repaired_args_json = NULL;
+
+    if (args && cJSON_IsString(args) && args->valuestring) {
+        cJSON* nested = cJSON_Parse(args->valuestring);
+        if (nested) {
+            cJSON_Delete(args);
+            args = nested;
+        }
+    }
+
+    if (!args && raw_args_json) {
+        repaired_args_json = sanitize_json_string_controls_local(raw_args_json);
+        if (repaired_args_json) {
+            args = cJSON_Parse(repaired_args_json);
+            if (args && cJSON_IsString(args) && args->valuestring) {
+                cJSON* nested = cJSON_Parse(args->valuestring);
+                if (nested) {
+                    cJSON_Delete(args);
+                    args = nested;
+                }
+            }
+        }
+    }
+
+    if (!args && raw_args_json) {
+        args = parse_loose_nostr_post_args_local(raw_args_json);
+    }
+    if (!args) {
+        free(repaired_args_json);
+        return json_error_local("invalid arguments JSON");
+    }
+
+    cJSON* kind = cJSON_GetObjectItemCaseSensitive(args, "kind");
+    cJSON* content = cJSON_GetObjectItemCaseSensitive(args, "content");
+    cJSON* tags = cJSON_GetObjectItemCaseSensitive(args, "tags");
+    if (!kind || !cJSON_IsNumber(kind) || !content || !cJSON_IsString(content) || !content->valuestring) {
+        cJSON_Delete(args);
+        free(repaired_args_json);
+        return json_error_local("nostr_post requires integer kind and string content");
+    }
+    if (tags && !cJSON_IsArray(tags)) {
+        cJSON_Delete(args);
+        free(repaired_args_json);
+        return json_error_local("nostr_post tags must be an array when provided");
+    }
+
+    cJSON* tags_dup = NULL;
+    if (tags) {
+        tags_dup = cJSON_Duplicate(tags, 1);
+        if (!tags_dup) {
+            cJSON_Delete(args);
+            free(repaired_args_json);
+            return json_error_local("nostr_post failed to duplicate tags");
+        }
+    }
+
+    ensure_nip23_metadata_tags_local((int)kind->valuedouble, content->valuestring, &tags_dup);
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event((int)kind->valuedouble,
+                                              content->valuestring,
+                                              tags_dup,
+                                              &publish_result);
+    cJSON_Delete(tags_dup);
+    cJSON_Delete(args);
+    free(repaired_args_json);
+
+    if (rc != 0) {
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("nostr_post failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", publish_result.success ? 1 : 0);
+    cJSON_AddStringToObject(out, "message", "nostr_post published");
+    cJSON_AddNumberToObject(out, "kind", publish_result.kind);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+    cJSON_AddNumberToObject(out, "relay_count", publish_result.relay_count);
+    cJSON_AddNumberToObject(out, "accepted_by_pool_count", publish_result.accepted_by_pool_count);
+
+    if (publish_result.note_uri[0] != '\0') cJSON_AddStringToObject(out, "note_uri", publish_result.note_uri);
+    if (publish_result.naddr_uri[0] != '\0') cJSON_AddStringToObject(out, "naddr_uri", publish_result.naddr_uri);
+    if (publish_result.d_tag[0] != '\0') cJSON_AddStringToObject(out, "d_tag", publish_result.d_tag);
+
+    cJSON* relays = cJSON_CreateArray();
+    if (!relays) {
+        nostr_handler_publish_result_free(&publish_result);
+        cJSON_Delete(out);
+        return NULL;
+    }
+    for (int i = 0; i < publish_result.relay_count; i++) {
+        cJSON_AddItemToArray(relays, cJSON_CreateString(publish_result.relays[i] ? publish_result.relays[i] : ""));
+    }
+    cJSON_AddItemToObject(out, "relays", relays);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}
+
+char* execute_nostr_post_readme(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_tool_args_json_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char readme_path[PATH_MAX];
+    if (build_tool_path_local(ctx, "README.md", readme_path, sizeof(readme_path)) != 0) {
+        return json_error_local("failed to resolve README path");
+    }
+
+    size_t bytes_read = 0;
+    char* content = read_entire_file_local(readme_path, &bytes_read);
+    if (!content) {
+        return json_error_local("failed to read README.md");
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        free(content);
+        return json_error_local("failed to create tags");
+    }
+
+    if (add_string_tag_local(tags, "d", "readme.md") != 0 ||
+        add_string_tag_local(tags,
+                             "image",
+                             "https://laantungir.github.io/img_repo/d21c4060632ab3d9d37a6062eeecbdbfbd67f03cb20dbd64838b1ba0d9cd8922.jpg") != 0) {
+        cJSON_Delete(tags);
+        free(content);
+        return json_error_local("failed to set required tags");
+    }
+
+    ensure_nip23_metadata_tags_local(30023, content, &tags);
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event(30023, content, tags, &publish_result);
+    cJSON_Delete(tags);
+    free(content);
+
+    if (rc != 0) {
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("nostr_post_readme failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", publish_result.success ? 1 : 0);
+    cJSON_AddStringToObject(out, "message", "nostr_post_readme published");
+    cJSON_AddStringToObject(out, "path", readme_path);
+    cJSON_AddNumberToObject(out, "bytes_read", (double)bytes_read);
+    cJSON_AddNumberToObject(out, "kind", publish_result.kind);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+    cJSON_AddNumberToObject(out, "relay_count", publish_result.relay_count);
+    cJSON_AddNumberToObject(out, "accepted_by_pool_count", publish_result.accepted_by_pool_count);
+
+    if (publish_result.note_uri[0] != '\0') cJSON_AddStringToObject(out, "note_uri", publish_result.note_uri);
+    if (publish_result.naddr_uri[0] != '\0') cJSON_AddStringToObject(out, "naddr_uri", publish_result.naddr_uri);
+    if (publish_result.d_tag[0] != '\0') cJSON_AddStringToObject(out, "d_tag", publish_result.d_tag);
+
+    cJSON* relays = cJSON_CreateArray();
+    if (!relays) {
+        nostr_handler_publish_result_free(&publish_result);
+        cJSON_Delete(out);
+        return NULL;
+    }
+    for (int i = 0; i < publish_result.relay_count; i++) {
+        cJSON_AddItemToArray(relays, cJSON_CreateString(publish_result.relays[i] ? publish_result.relays[i] : ""));
+    }
+    cJSON_AddItemToObject(out, "relays", relays);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}
+
+char* execute_nostr_file_md_to_longform_post(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_tool_args_json_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* file = cJSON_GetObjectItemCaseSensitive(args, "file");
+    cJSON* title = cJSON_GetObjectItemCaseSensitive(args, "title");
+    cJSON* image = cJSON_GetObjectItemCaseSensitive(args, "image");
+    cJSON* summary = cJSON_GetObjectItemCaseSensitive(args, "summary");
+
+    if (!file || !cJSON_IsString(file) || !file->valuestring || file->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_file_md_to_longform_post requires string file");
+    }
+    if (title && !cJSON_IsString(title)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_file_md_to_longform_post title must be string when provided");
+    }
+    if (image && !cJSON_IsString(image)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_file_md_to_longform_post image must be string when provided");
+    }
+    if (summary && !cJSON_IsString(summary)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_file_md_to_longform_post summary must be string when provided");
+    }
+
+    char file_path[PATH_MAX];
+    if (build_tool_path_local(ctx, file->valuestring, file_path, sizeof(file_path)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("failed to resolve markdown file path");
+    }
+
+    size_t bytes_read = 0;
+    char* content = read_entire_file_local(file_path, &bytes_read);
+    if (!content) {
+        cJSON_Delete(args);
+        return json_error_local("failed to read markdown file");
+    }
+
+    char* d_tag = basename_lowercase_dup_local(file->valuestring);
+    if (!d_tag || d_tag[0] == '\0') {
+        free(d_tag);
+        free(content);
+        cJSON_Delete(args);
+        return json_error_local("failed to derive d tag from filename");
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        free(d_tag);
+        free(content);
+        cJSON_Delete(args);
+        return json_error_local("failed to create tags");
+    }
+
+    if (add_string_tag_local(tags, "d", d_tag) != 0) {
+        free(d_tag);
+        cJSON_Delete(tags);
+        free(content);
+        cJSON_Delete(args);
+        return json_error_local("failed to set d tag");
+    }
+
+    if (title && title->valuestring && title->valuestring[0] != '\0') {
+        if (add_string_tag_local(tags, "title", title->valuestring) != 0) {
+            free(d_tag);
+            cJSON_Delete(tags);
+            free(content);
+            cJSON_Delete(args);
+            return json_error_local("failed to set title tag");
+        }
+    }
+
+    if (image && image->valuestring && image->valuestring[0] != '\0') {
+        if (add_string_tag_local(tags, "image", image->valuestring) != 0) {
+            free(d_tag);
+            cJSON_Delete(tags);
+            free(content);
+            cJSON_Delete(args);
+            return json_error_local("failed to set image tag");
+        }
+    }
+
+    if (summary && summary->valuestring && summary->valuestring[0] != '\0') {
+        if (add_string_tag_local(tags, "summary", summary->valuestring) != 0) {
+            free(d_tag);
+            cJSON_Delete(tags);
+            free(content);
+            cJSON_Delete(args);
+            return json_error_local("failed to set summary tag");
+        }
+    }
+
+    ensure_nip23_metadata_tags_local(30023, content, &tags);
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event(30023, content, tags, &publish_result);
+    cJSON_Delete(tags);
+    free(content);
+    cJSON_Delete(args);
+
+    if (rc != 0) {
+        free(d_tag);
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("nostr_file_md_to_longform_post failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(d_tag);
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", publish_result.success ? 1 : 0);
+    cJSON_AddStringToObject(out, "message", "nostr_file_md_to_longform_post published");
+    cJSON_AddStringToObject(out, "path", file_path);
+    cJSON_AddStringToObject(out, "d_tag", d_tag);
+    cJSON_AddNumberToObject(out, "bytes_read", (double)bytes_read);
+    cJSON_AddNumberToObject(out, "kind", publish_result.kind);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+    cJSON_AddNumberToObject(out, "relay_count", publish_result.relay_count);
+    cJSON_AddNumberToObject(out, "accepted_by_pool_count", publish_result.accepted_by_pool_count);
+
+    if (publish_result.note_uri[0] != '\0') cJSON_AddStringToObject(out, "note_uri", publish_result.note_uri);
+    if (publish_result.naddr_uri[0] != '\0') cJSON_AddStringToObject(out, "naddr_uri", publish_result.naddr_uri);
+
+    cJSON* relays = cJSON_CreateArray();
+    if (!relays) {
+        free(d_tag);
+        nostr_handler_publish_result_free(&publish_result);
+        cJSON_Delete(out);
+        return NULL;
+    }
+    for (int i = 0; i < publish_result.relay_count; i++) {
+        cJSON_AddItemToArray(relays, cJSON_CreateString(publish_result.relays[i] ? publish_result.relays[i] : ""));
+    }
+    cJSON_AddItemToObject(out, "relays", relays);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(d_tag);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}

src/tools/tool_nostr_query.c

@@ -0,0 +1,62 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdlib.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+char* execute_nostr_query(const char* args_json) {
+    cJSON* args = cJSON_Parse(args_json ? args_json : "{}");
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* filter = cJSON_GetObjectItemCaseSensitive(args, "filter");
+    cJSON* timeout = cJSON_GetObjectItemCaseSensitive(args, "timeout_ms");
+    if (!filter || !cJSON_IsObject(filter)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_query requires object filter");
+    }
+
+    cJSON* filter_dup = cJSON_Duplicate(filter, 1);
+    if (!filter_dup) {
+        cJSON_Delete(args);
+        return json_error_local("failed to duplicate filter");
+    }
+
+    int timeout_ms = (timeout && cJSON_IsNumber(timeout)) ? (int)timeout->valuedouble : 8000;
+    char* events_json = nostr_handler_query_json(filter_dup, timeout_ms);
+    cJSON_Delete(filter_dup);
+    cJSON_Delete(args);
+
+    if (!events_json) return json_error_local("nostr_query failed");
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(events_json);
+        return NULL;
+    }
+
+    cJSON* events = cJSON_Parse(events_json);
+    free(events_json);
+    if (!events) {
+        cJSON_Delete(out);
+        return json_error_local("nostr_query returned invalid JSON");
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddItemToObject(out, "events", events);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_nostr_relay.c

@@ -0,0 +1,196 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdlib.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+char* execute_nostr_relay_status(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* status_json = nostr_handler_relay_status_json();
+    if (!status_json) {
+        return json_error_local("nostr_relay_status failed");
+    }
+
+    cJSON* status = cJSON_Parse(status_json);
+    free(status_json);
+    if (!status) {
+        return json_error_local("nostr_relay_status returned invalid JSON");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(status);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddItemToObject(out, "status", status);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_relay_info(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* relay_url = cJSON_GetObjectItemCaseSensitive(args, "relay_url");
+    if (!relay_url || !cJSON_IsString(relay_url) || !relay_url->valuestring || relay_url->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_relay_info requires relay_url");
+    }
+
+    char* info_json = nostr_handler_relay_info_json(relay_url->valuestring);
+    cJSON_Delete(args);
+    if (!info_json) {
+        return json_error_local("nostr_relay_info failed");
+    }
+
+    cJSON* info = cJSON_Parse(info_json);
+    free(info_json);
+    if (!info || !cJSON_IsObject(info)) {
+        cJSON_Delete(info);
+        return json_error_local("nostr_relay_info returned invalid JSON");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(info);
+        return NULL;
+    }
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddItemToObject(out, "info", info);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_subscription_status(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+    cJSON_Delete(args);
+
+    char* status_json = nostr_handler_subscription_status_json();
+    if (!status_json) {
+        return json_error_local("nostr_subscription_status failed");
+    }
+
+    cJSON* status = cJSON_Parse(status_json);
+    free(status_json);
+    if (!status || !cJSON_IsObject(status)) {
+        cJSON_Delete(status);
+        return json_error_local("nostr_subscription_status returned invalid JSON");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(status);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddItemToObject(out, "status", status);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_subscription_set(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* name = cJSON_GetObjectItemCaseSensitive(args, "name");
+    if (!name || !cJSON_IsString(name) || !name->valuestring || name->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("nostr_subscription_set requires non-empty string name");
+    }
+
+    cJSON* enabled_item = cJSON_GetObjectItemCaseSensitive(args, "enabled");
+    int enabled_set = 0;
+    int enabled = 0;
+    if (enabled_item) {
+        if (!cJSON_IsBool(enabled_item)) {
+            cJSON_Delete(args);
+            return json_error_local("nostr_subscription_set enabled must be boolean");
+        }
+        enabled_set = 1;
+        enabled = cJSON_IsTrue(enabled_item) ? 1 : 0;
+    }
+
+    cJSON* filter_item = cJSON_GetObjectItemCaseSensitive(args, "filter");
+    cJSON* filter_dup = NULL;
+    if (filter_item) {
+        if (!cJSON_IsObject(filter_item)) {
+            cJSON_Delete(args);
+            return json_error_local("nostr_subscription_set filter must be an object");
+        }
+        filter_dup = cJSON_Duplicate(filter_item, 1);
+        if (!filter_dup) {
+            cJSON_Delete(args);
+            return json_error_local("nostr_subscription_set filter copy failed");
+        }
+    }
+
+    int rc = nostr_handler_subscription_set_json(name->valuestring, filter_dup, enabled, enabled_set);
+    cJSON_Delete(filter_dup);
+
+    char* status_json = nostr_handler_subscription_status_json();
+    cJSON_Delete(args);
+
+    if (rc != 0) {
+        free(status_json);
+        return json_error_local("nostr_subscription_set failed");
+    }
+
+    cJSON* status = status_json ? cJSON_Parse(status_json) : NULL;
+    free(status_json);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(status);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "name", name->valuestring);
+    cJSON_AddBoolToObject(out, "updated", 1);
+    if (enabled_set) {
+        cJSON_AddBoolToObject(out, "enabled", enabled ? 1 : 0);
+    }
+    if (status) {
+        cJSON_AddItemToObject(out, "status", status);
+    }
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_nostr_social.c

@@ -0,0 +1,302 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+#include "../nostr_handler.h"
+#include "../../nostr_core_lib/nostr_core/nostr_core.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int is_hex_string_len_local(const char* s, size_t expected_len) {
+    if (!s) return 0;
+    if (strlen(s) != expected_len) return 0;
+    for (size_t i = 0; i < expected_len; i++) {
+        if (!((s[i] >= '0' && s[i] <= '9') ||
+              (s[i] >= 'a' && s[i] <= 'f') ||
+              (s[i] >= 'A' && s[i] <= 'F'))) {
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static int add_string_tag_local(cJSON* tags, const char* key, const char* value) {
+    if (!tags || !cJSON_IsArray(tags) || !key || !value) return -1;
+    cJSON* tuple = cJSON_CreateArray();
+    if (!tuple) return -1;
+    cJSON_AddItemToArray(tuple, cJSON_CreateString(key));
+    cJSON_AddItemToArray(tuple, cJSON_CreateString(value));
+    cJSON_AddItemToArray(tags, tuple);
+    return 0;
+}
+
+static void free_string_array_heap_local(char** items, int count) {
+    if (!items) return;
+    for (int i = 0; i < count; i++) free(items[i]);
+    free(items);
+}
+
+char* execute_nostr_react(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* event_id = cJSON_GetObjectItemCaseSensitive(args, "event_id");
+    cJSON* event_pubkey = cJSON_GetObjectItemCaseSensitive(args, "event_pubkey");
+    cJSON* event_kind = cJSON_GetObjectItemCaseSensitive(args, "event_kind");
+    cJSON* reaction = cJSON_GetObjectItemCaseSensitive(args, "reaction");
+
+    if (!event_id || !cJSON_IsString(event_id) || !event_id->valuestring || !is_hex_string_len_local(event_id->valuestring, 64U) ||
+        !event_pubkey || !cJSON_IsString(event_pubkey) || !event_pubkey->valuestring || !is_hex_string_len_local(event_pubkey->valuestring, 64U)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_react requires event_id and event_pubkey as 64-char hex strings");
+    }
+    if (event_kind && !cJSON_IsNumber(event_kind)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_react event_kind must be an integer when provided");
+    }
+    if (reaction && !cJSON_IsString(reaction)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_react reaction must be a string when provided");
+    }
+
+    cJSON* tags = cJSON_CreateArray();
+    if (!tags) {
+        cJSON_Delete(args);
+        return json_error_local("failed to create tags");
+    }
+
+    if (add_string_tag_local(tags, "e", event_id->valuestring) != 0 ||
+        add_string_tag_local(tags, "p", event_pubkey->valuestring) != 0) {
+        cJSON_Delete(tags);
+        cJSON_Delete(args);
+        return json_error_local("failed to add required reaction tags");
+    }
+
+    if (event_kind) {
+        char kind_buf[32];
+        snprintf(kind_buf, sizeof(kind_buf), "%d", (int)event_kind->valuedouble);
+        if (add_string_tag_local(tags, "k", kind_buf) != 0) {
+            cJSON_Delete(tags);
+            cJSON_Delete(args);
+            return json_error_local("failed to add k tag");
+        }
+    }
+
+    const char* reaction_content = (reaction && reaction->valuestring && reaction->valuestring[0] != '\0') ? reaction->valuestring : "+";
+
+    nostr_publish_result_t publish_result;
+    memset(&publish_result, 0, sizeof(publish_result));
+
+    int rc = nostr_handler_publish_kind_event(7, reaction_content, tags, &publish_result);
+    cJSON_Delete(tags);
+    cJSON_Delete(args);
+    if (rc != 0) {
+        nostr_handler_publish_result_free(&publish_result);
+        return json_error_local("nostr_react failed");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        nostr_handler_publish_result_free(&publish_result);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", publish_result.success ? 1 : 0);
+    cJSON_AddStringToObject(out, "message", "nostr_react published");
+    cJSON_AddStringToObject(out, "reaction", reaction_content);
+    cJSON_AddNumberToObject(out, "kind", publish_result.kind);
+    cJSON_AddStringToObject(out, "event_id", publish_result.event_id);
+    cJSON_AddNumberToObject(out, "relay_count", publish_result.relay_count);
+    cJSON_AddNumberToObject(out, "accepted_by_pool_count", publish_result.accepted_by_pool_count);
+
+    cJSON* relays = cJSON_CreateArray();
+    if (!relays) {
+        nostr_handler_publish_result_free(&publish_result);
+        cJSON_Delete(out);
+        return NULL;
+    }
+    for (int i = 0; i < publish_result.relay_count; i++) {
+        cJSON_AddItemToArray(relays, cJSON_CreateString(publish_result.relays[i] ? publish_result.relays[i] : ""));
+    }
+    cJSON_AddItemToObject(out, "relays", relays);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    nostr_handler_publish_result_free(&publish_result);
+    return json;
+}
+
+char* execute_nostr_profile_get(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* pubkey = cJSON_GetObjectItemCaseSensitive(args, "pubkey");
+    if (!pubkey || !cJSON_IsString(pubkey) || !pubkey->valuestring || !is_hex_string_len_local(pubkey->valuestring, 64U)) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_profile_get requires pubkey as 64-char hex string");
+    }
+
+    cJSON* filter = cJSON_CreateObject();
+    cJSON* kinds = cJSON_CreateArray();
+    cJSON* authors = cJSON_CreateArray();
+    if (!filter || !kinds || !authors) {
+        cJSON_Delete(filter);
+        cJSON_Delete(kinds);
+        cJSON_Delete(authors);
+        cJSON_Delete(args);
+        return json_error_local("failed to create profile query filter");
+    }
+
+    cJSON_AddItemToArray(kinds, cJSON_CreateNumber(0));
+    cJSON_AddItemToObject(filter, "kinds", kinds);
+    cJSON_AddItemToArray(authors, cJSON_CreateString(pubkey->valuestring));
+    cJSON_AddItemToObject(filter, "authors", authors);
+    cJSON_AddNumberToObject(filter, "limit", 1);
+
+    char* events_json = nostr_handler_query_json(filter, 8000);
+    cJSON_Delete(filter);
+    cJSON_Delete(args);
+    if (!events_json) {
+        return json_error_local("nostr_profile_get query failed");
+    }
+
+    cJSON* events = cJSON_Parse(events_json);
+    free(events_json);
+    if (!events || !cJSON_IsArray(events)) {
+        cJSON_Delete(events);
+        return json_error_local("nostr_profile_get returned invalid events JSON");
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(events);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+
+    int found = cJSON_GetArraySize(events) > 0;
+    cJSON_AddBoolToObject(out, "found", found ? 1 : 0);
+
+    if (found) {
+        cJSON* ev = cJSON_GetArrayItem(events, 0);
+        cJSON* ev_dup = ev ? cJSON_Duplicate(ev, 1) : NULL;
+        if (ev_dup) {
+            cJSON_AddItemToObject(out, "event", ev_dup);
+        }
+
+        cJSON* content = ev ? cJSON_GetObjectItemCaseSensitive(ev, "content") : NULL;
+        if (content && cJSON_IsString(content) && content->valuestring) {
+            cJSON* profile = cJSON_Parse(content->valuestring);
+            if (profile && cJSON_IsObject(profile)) {
+                cJSON_AddItemToObject(out, "profile", profile);
+            } else {
+                cJSON_Delete(profile);
+                cJSON_AddStringToObject(out, "profile_raw", content->valuestring);
+            }
+        }
+    }
+
+    cJSON_Delete(events);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}
+
+char* execute_nostr_nip05_lookup(const char* args_json) {
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* identifier = cJSON_GetObjectItemCaseSensitive(args, "identifier");
+    cJSON* pubkey = cJSON_GetObjectItemCaseSensitive(args, "pubkey");
+
+    if (!identifier || !cJSON_IsString(identifier) || !identifier->valuestring || strchr(identifier->valuestring, '@') == NULL) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_nip05_lookup requires identifier in user@domain format");
+    }
+    if (pubkey && (!cJSON_IsString(pubkey) || !pubkey->valuestring || !is_hex_string_len_local(pubkey->valuestring, 64U))) {
+        cJSON_Delete(args);
+        return json_error_local("nostr_nip05_lookup pubkey must be a 64-char hex string when provided");
+    }
+
+    char found_pubkey[65] = {0};
+    char** relays = NULL;
+    int relay_count = 0;
+    int rc = 0;
+
+    if (pubkey) {
+        rc = nostr_nip05_verify(identifier->valuestring,
+                                pubkey->valuestring,
+                                &relays,
+                                &relay_count,
+                                10);
+    } else {
+        rc = nostr_nip05_lookup(identifier->valuestring,
+                                found_pubkey,
+                                &relays,
+                                &relay_count,
+                                10);
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free_string_array_heap_local(relays, relay_count);
+        cJSON_Delete(args);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", rc == NOSTR_SUCCESS ? 1 : 0);
+    cJSON_AddStringToObject(out, "identifier", identifier->valuestring);
+
+    if (pubkey) {
+        cJSON_AddBoolToObject(out, "verified", rc == NOSTR_SUCCESS ? 1 : 0);
+        cJSON_AddStringToObject(out, "pubkey", pubkey->valuestring);
+    } else if (rc == NOSTR_SUCCESS) {
+        cJSON_AddStringToObject(out, "pubkey", found_pubkey);
+    }
+
+    cJSON* relay_arr = cJSON_CreateArray();
+    if (!relay_arr) {
+        cJSON_Delete(out);
+        free_string_array_heap_local(relays, relay_count);
+        cJSON_Delete(args);
+        return NULL;
+    }
+    for (int i = 0; i < relay_count; i++) {
+        cJSON_AddItemToArray(relay_arr, cJSON_CreateString(relays[i] ? relays[i] : ""));
+    }
+    cJSON_AddItemToObject(out, "relays", relay_arr);
+
+    if (rc != NOSTR_SUCCESS) {
+        cJSON_AddNumberToObject(out, "error_code", rc);
+    }
+
+    free_string_array_heap_local(relays, relay_count);
+    cJSON_Delete(args);
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    return json;
+}

src/tools/tool_task.c

@@ -0,0 +1,565 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <limits.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+#include <unistd.h>
+
+#include "cjson/cJSON.h"
+
+static char* json_error_local(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+static cJSON* parse_args_local(const char* args_json) {
+    const char* raw = args_json ? args_json : "{}";
+    cJSON* args = cJSON_Parse(raw);
+    if (!args || !cJSON_IsObject(args)) {
+        cJSON_Delete(args);
+        return NULL;
+    }
+    return args;
+}
+
+static int is_safe_relative_path_local(const char* path) {
+    if (!path || path[0] == '\0') return 0;
+    if (path[0] == '/') return 0;
+    if (strstr(path, "..") != NULL) return 0;
+    if (strchr(path, '\\') != NULL) return 0;
+    return 1;
+}
+
+static int build_tool_path_local(tools_context_t* ctx, const char* rel_path, char* out, size_t out_size) {
+    if (!ctx || !ctx->cfg || !rel_path || !out || out_size == 0) return -1;
+    if (!is_safe_relative_path_local(rel_path)) return -1;
+
+    const char* cwd = ctx->cfg->tools.shell.working_directory[0] != '\0'
+                          ? ctx->cfg->tools.shell.working_directory
+                          : ".";
+
+    int n = 0;
+    if (strcmp(cwd, ".") == 0) {
+        n = snprintf(out, out_size, "%s", rel_path);
+    } else {
+        n = snprintf(out, out_size, "%s/%s", cwd, rel_path);
+    }
+
+    if (n < 0 || (size_t)n >= out_size) return -1;
+    return 0;
+}
+
+static cJSON* tasks_create_empty_root_local(void) {
+    cJSON* root = cJSON_CreateObject();
+    cJSON* tasks = cJSON_CreateArray();
+    if (!root || !tasks) {
+        cJSON_Delete(root);
+        cJSON_Delete(tasks);
+        return NULL;
+    }
+    cJSON_AddItemToObject(root, "tasks", tasks);
+    cJSON_AddNumberToObject(root, "next_id", 1);
+    return root;
+}
+
+static const char* normalize_task_status_local(const char* status) {
+    if (!status) return NULL;
+    if (strcmp(status, "pending") == 0) return "pending";
+    if (strcmp(status, "active") == 0) return "active";
+    if (strcmp(status, "done") == 0) return "done";
+    return NULL;
+}
+
+static cJSON* tasks_load_root_local(const char* path) {
+    if (!path) return NULL;
+
+    FILE* fp = fopen(path, "rb");
+    if (!fp) {
+        if (access(path, F_OK) == 0) {
+            return NULL;
+        }
+        return tasks_create_empty_root_local();
+    }
+
+    if (fseek(fp, 0, SEEK_END) != 0) {
+        fclose(fp);
+        return NULL;
+    }
+    long len = ftell(fp);
+    if (len < 0) {
+        fclose(fp);
+        return NULL;
+    }
+    if (fseek(fp, 0, SEEK_SET) != 0) {
+        fclose(fp);
+        return NULL;
+    }
+
+    char* buf = (char*)malloc((size_t)len + 1U);
+    if (!buf) {
+        fclose(fp);
+        return NULL;
+    }
+
+    size_t n = fread(buf, 1, (size_t)len, fp);
+    fclose(fp);
+    if (n != (size_t)len) {
+        free(buf);
+        return NULL;
+    }
+    buf[len] = '\0';
+
+    cJSON* root = cJSON_Parse(buf);
+    free(buf);
+    if (!root || !cJSON_IsObject(root)) {
+        cJSON_Delete(root);
+        return NULL;
+    }
+
+    cJSON* tasks = cJSON_GetObjectItemCaseSensitive(root, "tasks");
+    if (!tasks || !cJSON_IsArray(tasks)) {
+        cJSON_DeleteItemFromObjectCaseSensitive(root, "tasks");
+        cJSON_AddItemToObject(root, "tasks", cJSON_CreateArray());
+    }
+
+    cJSON* next_id = cJSON_GetObjectItemCaseSensitive(root, "next_id");
+    if (!next_id || !cJSON_IsNumber(next_id) || next_id->valuedouble < 1) {
+        cJSON_DeleteItemFromObjectCaseSensitive(root, "next_id");
+        cJSON_AddNumberToObject(root, "next_id", 1);
+    }
+
+    return root;
+}
+
+static int tasks_save_root_local(const char* path, cJSON* root) {
+    if (!path || !root) return -1;
+    char* raw = cJSON_PrintUnformatted(root);
+    if (!raw) return -1;
+
+    FILE* fp = fopen(path, "wb");
+    if (!fp) {
+        free(raw);
+        return -1;
+    }
+
+    size_t len = strlen(raw);
+    size_t n = fwrite(raw, 1, len, fp);
+    fclose(fp);
+    free(raw);
+    return (n == len) ? 0 : -1;
+}
+
+static cJSON* task_find_by_id_local(cJSON* tasks, int id, int* out_index) {
+    if (!tasks || !cJSON_IsArray(tasks) || id <= 0) return NULL;
+    int n = cJSON_GetArraySize(tasks);
+    for (int i = 0; i < n; i++) {
+        cJSON* task = cJSON_GetArrayItem(tasks, i);
+        cJSON* tid = task ? cJSON_GetObjectItemCaseSensitive(task, "id") : NULL;
+        if (tid && cJSON_IsNumber(tid) && (int)tid->valuedouble == id) {
+            if (out_index) *out_index = i;
+            return task;
+        }
+    }
+    return NULL;
+}
+
+char* execute_task_manage(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) return json_error_local("invalid arguments JSON");
+
+    cJSON* action = cJSON_GetObjectItemCaseSensitive(args, "action");
+    if (!action || !cJSON_IsString(action) || !action->valuestring || action->valuestring[0] == '\0') {
+        cJSON_Delete(args);
+        return json_error_local("task_manage requires string action");
+    }
+
+    char tasks_path[PATH_MAX];
+    if (build_tool_path_local(ctx, "tasks.json", tasks_path, sizeof(tasks_path)) != 0) {
+        cJSON_Delete(args);
+        return json_error_local("failed to resolve tasks file path");
+    }
+
+    cJSON* root = tasks_load_root_local(tasks_path);
+    if (!root) {
+        cJSON_Delete(args);
+        return json_error_local("failed to load tasks file");
+    }
+
+    cJSON* tasks = cJSON_GetObjectItemCaseSensitive(root, "tasks");
+    if (!tasks || !cJSON_IsArray(tasks)) {
+        cJSON_DeleteItemFromObjectCaseSensitive(root, "tasks");
+        tasks = cJSON_CreateArray();
+        cJSON_AddItemToObject(root, "tasks", tasks);
+    }
+
+    cJSON* next_id_item = cJSON_GetObjectItemCaseSensitive(root, "next_id");
+    int next_id = (next_id_item && cJSON_IsNumber(next_id_item) && next_id_item->valuedouble >= 1)
+                    ? (int)next_id_item->valuedouble
+                    : 1;
+
+    const char* action_s = action->valuestring;
+    int mutated = 0;
+
+    if (strcmp(action_s, "list") == 0) {
+    } else if (strcmp(action_s, "add") == 0) {
+        cJSON* text = cJSON_GetObjectItemCaseSensitive(args, "text");
+        cJSON* status = cJSON_GetObjectItemCaseSensitive(args, "status");
+        if (!text || !cJSON_IsString(text) || !text->valuestring || text->valuestring[0] == '\0') {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task_manage add requires non-empty string text");
+        }
+
+        const char* normalized_status = "pending";
+        if (status && !cJSON_IsNull(status)) {
+            if (!cJSON_IsString(status) || !status->valuestring) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage add status must be string when provided");
+            }
+            normalized_status = normalize_task_status_local(status->valuestring);
+            if (!normalized_status) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage add status must be pending, active, or done");
+            }
+        }
+
+        cJSON* task = cJSON_CreateObject();
+        if (!task) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("allocation failure");
+        }
+
+        time_t now = time(NULL);
+        cJSON_AddNumberToObject(task, "id", next_id++);
+        cJSON_AddStringToObject(task, "text", text->valuestring);
+        cJSON_AddStringToObject(task, "status", normalized_status);
+        cJSON_AddNumberToObject(task, "created_at", (double)now);
+        cJSON_AddNumberToObject(task, "updated_at", (double)now);
+        cJSON_AddItemToArray(tasks, task);
+        mutated = 1;
+    } else if (strcmp(action_s, "update") == 0) {
+        cJSON* id = cJSON_GetObjectItemCaseSensitive(args, "id");
+        cJSON* text = cJSON_GetObjectItemCaseSensitive(args, "text");
+        cJSON* status = cJSON_GetObjectItemCaseSensitive(args, "status");
+
+        if (!id || !cJSON_IsNumber(id) || id->valuedouble < 1) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task_manage update requires integer id");
+        }
+
+        if ((!text || cJSON_IsNull(text)) && (!status || cJSON_IsNull(status))) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task_manage update requires text and/or status");
+        }
+
+        cJSON* task = task_find_by_id_local(tasks, (int)id->valuedouble, NULL);
+        if (!task) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task not found");
+        }
+
+        if (text && !cJSON_IsNull(text)) {
+            if (!cJSON_IsString(text) || !text->valuestring || text->valuestring[0] == '\0') {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage update text must be non-empty string when provided");
+            }
+            cJSON_DeleteItemFromObjectCaseSensitive(task, "text");
+            cJSON_AddStringToObject(task, "text", text->valuestring);
+            mutated = 1;
+        }
+
+        if (status && !cJSON_IsNull(status)) {
+            if (!cJSON_IsString(status) || !status->valuestring) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage update status must be string when provided");
+            }
+            const char* normalized_status = normalize_task_status_local(status->valuestring);
+            if (!normalized_status) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage update status must be pending, active, or done");
+            }
+            cJSON_DeleteItemFromObjectCaseSensitive(task, "status");
+            cJSON_AddStringToObject(task, "status", normalized_status);
+            mutated = 1;
+        }
+
+        if (mutated) {
+            time_t now = time(NULL);
+            cJSON_DeleteItemFromObjectCaseSensitive(task, "updated_at");
+            cJSON_AddNumberToObject(task, "updated_at", (double)now);
+        }
+    } else if (strcmp(action_s, "remove") == 0) {
+        cJSON* id = cJSON_GetObjectItemCaseSensitive(args, "id");
+        if (!id || !cJSON_IsNumber(id) || id->valuedouble < 1) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task_manage remove requires integer id");
+        }
+
+        int idx = -1;
+        cJSON* task = task_find_by_id_local(tasks, (int)id->valuedouble, &idx);
+        if (!task || idx < 0) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task not found");
+        }
+
+        cJSON_DeleteItemFromArray(tasks, idx);
+        mutated = 1;
+    } else if (strcmp(action_s, "clear") == 0) {
+        cJSON* status = cJSON_GetObjectItemCaseSensitive(args, "status");
+        if (!status || cJSON_IsNull(status)) {
+            while (cJSON_GetArraySize(tasks) > 0) {
+                cJSON_DeleteItemFromArray(tasks, 0);
+            }
+            mutated = 1;
+        } else {
+            if (!cJSON_IsString(status) || !status->valuestring) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage clear status must be string when provided");
+            }
+            const char* normalized_status = normalize_task_status_local(status->valuestring);
+            if (!normalized_status) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("task_manage clear status must be pending, active, or done");
+            }
+
+            int i = 0;
+            while (i < cJSON_GetArraySize(tasks)) {
+                cJSON* task = cJSON_GetArrayItem(tasks, i);
+                cJSON* task_status = task ? cJSON_GetObjectItemCaseSensitive(task, "status") : NULL;
+                const char* task_status_s = (task_status && cJSON_IsString(task_status) && task_status->valuestring)
+                                              ? task_status->valuestring
+                                              : "pending";
+                if (strcmp(task_status_s, normalized_status) == 0) {
+                    cJSON_DeleteItemFromArray(tasks, i);
+                    mutated = 1;
+                } else {
+                    i++;
+                }
+            }
+        }
+    } else if (strcmp(action_s, "replace") == 0) {
+        cJSON* tasks_in = cJSON_GetObjectItemCaseSensitive(args, "tasks");
+        if (!tasks_in || !cJSON_IsArray(tasks_in)) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("task_manage replace requires array tasks");
+        }
+
+        while (cJSON_GetArraySize(tasks) > 0) {
+            cJSON_DeleteItemFromArray(tasks, 0);
+        }
+
+        int n = cJSON_GetArraySize(tasks_in);
+        time_t now = time(NULL);
+        for (int i = 0; i < n; i++) {
+            cJSON* text = cJSON_GetArrayItem(tasks_in, i);
+            if (!text || !cJSON_IsString(text) || !text->valuestring || text->valuestring[0] == '\0') {
+                continue;
+            }
+
+            cJSON* task = cJSON_CreateObject();
+            if (!task) {
+                cJSON_Delete(args);
+                cJSON_Delete(root);
+                return json_error_local("allocation failure");
+            }
+
+            cJSON_AddNumberToObject(task, "id", next_id++);
+            cJSON_AddStringToObject(task, "text", text->valuestring);
+            cJSON_AddStringToObject(task, "status", "pending");
+            cJSON_AddNumberToObject(task, "created_at", (double)now);
+            cJSON_AddNumberToObject(task, "updated_at", (double)now);
+            cJSON_AddItemToArray(tasks, task);
+        }
+        mutated = 1;
+    } else {
+        cJSON_Delete(args);
+        cJSON_Delete(root);
+        return json_error_local("task_manage action must be one of: list, add, update, remove, clear, replace");
+    }
+
+    if (mutated) {
+        cJSON_DeleteItemFromObjectCaseSensitive(root, "next_id");
+        cJSON_AddNumberToObject(root, "next_id", next_id);
+        if (tasks_save_root_local(tasks_path, root) != 0) {
+            cJSON_Delete(args);
+            cJSON_Delete(root);
+            return json_error_local("failed to save tasks file");
+        }
+    }
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        cJSON_Delete(args);
+        cJSON_Delete(root);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "action", action_s);
+    cJSON_AddStringToObject(out, "path", tasks_path);
+    cJSON_AddBoolToObject(out, "mutated", mutated ? 1 : 0);
+    cJSON_AddNumberToObject(out, "count", cJSON_GetArraySize(tasks));
+
+    cJSON* tasks_dup = cJSON_Duplicate(tasks, 1);
+    if (!tasks_dup) {
+        cJSON_Delete(args);
+        cJSON_Delete(root);
+        cJSON_Delete(out);
+        return NULL;
+    }
+    cJSON_AddItemToObject(out, "tasks", tasks_dup);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    cJSON_Delete(args);
+    cJSON_Delete(root);
+    return json;
+}
+
+char* execute_task_list(tools_context_t* ctx, const char* args_json) {
+    if (!ctx || !ctx->cfg) return json_error_local("tool context unavailable");
+
+    char* listed = execute_task_manage(ctx, "{\"action\":\"list\"}");
+    if (!listed) return json_error_local("task_list failed to list tasks");
+
+    cJSON* listed_root = cJSON_Parse(listed);
+    if (!listed_root || !cJSON_IsObject(listed_root)) {
+        cJSON_Delete(listed_root);
+        free(listed);
+        return json_error_local("task_list received invalid task_manage response");
+    }
+
+    cJSON* tasks = cJSON_GetObjectItemCaseSensitive(listed_root, "tasks");
+    int tcount = (tasks && cJSON_IsArray(tasks)) ? cJSON_GetArraySize(tasks) : 0;
+
+    size_t cap = 512U;
+    char* content = (char*)malloc(cap);
+    if (!content) {
+        cJSON_Delete(listed_root);
+        free(listed);
+        return NULL;
+    }
+    size_t used = 0U;
+    int n = snprintf(content + used,
+                     cap - used,
+                     "## Current Task List\n\n### Current Tasks\n\nYour active task list - short-term working memory for tracking plan steps.\n\n");
+    if (n < 0) {
+        free(content);
+        cJSON_Delete(listed_root);
+        free(listed);
+        return NULL;
+    }
+    used += (size_t)n;
+
+    int written = 0;
+    for (int i = 0; i < tcount; i++) {
+        cJSON* task = cJSON_GetArrayItem(tasks, i);
+        cJSON* id = task ? cJSON_GetObjectItemCaseSensitive(task, "id") : NULL;
+        cJSON* text = task ? cJSON_GetObjectItemCaseSensitive(task, "text") : NULL;
+        cJSON* status = task ? cJSON_GetObjectItemCaseSensitive(task, "status") : NULL;
+        if (!text || !cJSON_IsString(text) || !text->valuestring || text->valuestring[0] == '\0') {
+            continue;
+        }
+
+        const char* status_s = (status && cJSON_IsString(status) && status->valuestring) ? status->valuestring : "pending";
+        const char* mark = " ";
+        if (strcmp(status_s, "done") == 0) mark = "x";
+        else if (strcmp(status_s, "active") == 0) mark = "-";
+
+        int id_value = (id && cJSON_IsNumber(id)) ? (int)id->valuedouble : (i + 1);
+
+        int needed = snprintf(NULL, 0, "- [%s] %d. %s\n", mark, id_value, text->valuestring);
+        if (needed < 0) continue;
+        if (used + (size_t)needed + 1U > cap) {
+            size_t next = cap;
+            while (used + (size_t)needed + 1U > next) next *= 2U;
+            char* grown = (char*)realloc(content, next);
+            if (!grown) {
+                free(content);
+                cJSON_Delete(listed_root);
+                free(listed);
+                return NULL;
+            }
+            content = grown;
+            cap = next;
+        }
+        snprintf(content + used, cap - used, "- [%s] %d. %s\n", mark, id_value, text->valuestring);
+        used += (size_t)needed;
+        written++;
+    }
+
+    if (written == 0) {
+        const char* fallback = "- [ ] No active tasks yet.\n";
+        size_t need = strlen(fallback);
+        if (used + need + 1U > cap) {
+            size_t next = cap;
+            while (used + need + 1U > next) next *= 2U;
+            char* grown = (char*)realloc(content, next);
+            if (!grown) {
+                free(content);
+                cJSON_Delete(listed_root);
+                free(listed);
+                return NULL;
+            }
+            content = grown;
+            cap = next;
+        }
+        memcpy(content + used, fallback, need + 1U);
+        used += need;
+    }
+
+    cJSON* args = parse_args_local(args_json);
+    if (!args) {
+        free(content);
+        cJSON_Delete(listed_root);
+        free(listed);
+        return json_error_local("invalid arguments JSON");
+    }
+    cJSON_Delete(args);
+
+    cJSON* out = cJSON_CreateObject();
+    if (!out) {
+        free(content);
+        cJSON_Delete(listed_root);
+        free(listed);
+        return NULL;
+    }
+
+    cJSON_AddBoolToObject(out, "success", 1);
+    cJSON_AddStringToObject(out, "content", content);
+    cJSON* tasks_dup = tasks ? cJSON_Duplicate(tasks, 1) : cJSON_CreateArray();
+    if (!tasks_dup) tasks_dup = cJSON_CreateArray();
+    cJSON_AddItemToObject(out, "tasks", tasks_dup);
+
+    char* json = cJSON_PrintUnformatted(out);
+    cJSON_Delete(out);
+    free(content);
+    cJSON_Delete(listed_root);
+    free(listed);
+    return json;
+}

src/tools/tools.h

@@ -8,6 +8,9 @@ struct trigger_manager;
 typedef struct {
     didactyl_config_t* cfg;
     struct trigger_manager* trigger_manager;
+    int template_sender_tier;
+    const char* template_current_user_message;
+    const char* template_trigger_event_json;
 } tools_context_t;
 
 int tools_init(tools_context_t* ctx, didactyl_config_t* cfg);

src/tools/tools_common.c

@@ -0,0 +1,3 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"

src/tools/tools_dispatch.c

@@ -0,0 +1,256 @@
+#define _POSIX_C_SOURCE 200809L
+
+#include "tools_internal.h"
+
+#include <stdlib.h>
+#include <string.h>
+
+#include "cjson/cJSON.h"
+
+static char* json_error(const char* msg) {
+    cJSON* root = cJSON_CreateObject();
+    if (!root) return NULL;
+    cJSON_AddBoolToObject(root, "success", 0);
+    cJSON_AddStringToObject(root, "error", msg ? msg : "unknown error");
+    char* out = cJSON_PrintUnformatted(root);
+    cJSON_Delete(root);
+    return out;
+}
+
+int tools_init_legacy(tools_context_t* ctx, didactyl_config_t* cfg) {
+    if (!ctx || !cfg) return -1;
+    memset(ctx, 0, sizeof(*ctx));
+    ctx->cfg = cfg;
+    ctx->trigger_manager = NULL;
+    ctx->template_sender_tier = 0;
+    ctx->template_current_user_message = NULL;
+    ctx->template_trigger_event_json = NULL;
+    return 0;
+}
+
+void tools_cleanup_legacy(tools_context_t* ctx) {
+    if (!ctx) return;
+    memset(ctx, 0, sizeof(*ctx));
+}
+
+char* tools_execute_legacy(tools_context_t* ctx, const char* tool_name, const char* args_json) {
+    if (!tool_name) return json_error("missing tool name");
+
+    if (strcmp(tool_name, "nostr_post") == 0) {
+        return execute_nostr_post(args_json);
+    }
+    if (strcmp(tool_name, "nostr_delete") == 0) {
+        return execute_nostr_delete(args_json);
+    }
+    if (strcmp(tool_name, "nostr_react") == 0) {
+        return execute_nostr_react(args_json);
+    }
+    if (strcmp(tool_name, "nostr_profile_get") == 0) {
+        return execute_nostr_profile_get(args_json);
+    }
+    if (strcmp(tool_name, "nostr_relay_status") == 0) {
+        return execute_nostr_relay_status(args_json);
+    }
+    if (strcmp(tool_name, "nostr_nip05_lookup") == 0) {
+        return execute_nostr_nip05_lookup(args_json);
+    }
+    if (strcmp(tool_name, "nostr_encode") == 0) {
+        return execute_nostr_encode(args_json);
+    }
+    if (strcmp(tool_name, "nostr_decode") == 0) {
+        return execute_nostr_decode(args_json);
+    }
+    if (strcmp(tool_name, "nostr_dm_send") == 0) {
+        return execute_nostr_dm_send(args_json);
+    }
+    if (strcmp(tool_name, "nostr_relay_info") == 0) {
+        return execute_nostr_relay_info(args_json);
+    }
+    if (strcmp(tool_name, "nostr_subscription_status") == 0) {
+        return execute_nostr_subscription_status(args_json);
+    }
+    if (strcmp(tool_name, "nostr_subscription_set") == 0) {
+        return execute_nostr_subscription_set(args_json);
+    }
+    if (strcmp(tool_name, "nostr_encrypt") == 0) {
+        return execute_nostr_encrypt(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_decrypt") == 0) {
+        return execute_nostr_decrypt(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_dm_send_nip17") == 0) {
+        return execute_nostr_dm_send_nip17(args_json);
+    }
+    if (strcmp(tool_name, "nostr_list_manage") == 0) {
+        return execute_nostr_list_manage(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_query") == 0) {
+        return execute_nostr_query(args_json);
+    }
+    if (strcmp(tool_name, "nostr_my_events") == 0) {
+        return execute_nostr_my_events(ctx, args_json);
+    }
+    if (strcmp(tool_name, "agent_version") == 0) {
+        return execute_agent_version(args_json);
+    }
+    if (strcmp(tool_name, "nostr_pubkey") == 0) {
+        return execute_nostr_pubkey(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_npub") == 0) {
+        return execute_nostr_npub(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_pubkey") == 0) {
+        return execute_nostr_pubkey(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_npub") == 0) {
+        return execute_nostr_npub(ctx, args_json);
+    }
+    if (strcmp(tool_name, "local_http_fetch") == 0) {
+        return execute_local_http_fetch(ctx, args_json);
+    }
+    if (strcmp(tool_name, "local_shell_exec") == 0) {
+        return execute_local_shell_exec(ctx, args_json);
+    }
+    if (strcmp(tool_name, "local_file_read") == 0) {
+        return execute_local_file_read(ctx, args_json);
+    }
+    if (strcmp(tool_name, "local_file_write") == 0) {
+        return execute_local_file_write(ctx, args_json);
+    }
+    if (strcmp(tool_name, "skill_create") == 0) {
+        return execute_skill_create(ctx, args_json);
+    }
+    if (strcmp(tool_name, "skill_list") == 0) {
+        return execute_skill_list(ctx, args_json);
+    }
+    if (strcmp(tool_name, "skill_adopt") == 0) {
+        return execute_skill_adopt(ctx, args_json);
+    }
+    if (strcmp(tool_name, "skill_remove") == 0) {
+        return execute_skill_remove(ctx, args_json);
+    }
+    if (strcmp(tool_name, "skill_search") == 0) {
+        return execute_skill_search(args_json);
+    }
+    if (strcmp(tool_name, "skill_edit") == 0) {
+        return execute_skill_edit(ctx, args_json);
+    }
+    if (strcmp(tool_name, "trigger_list") == 0) {
+        return execute_trigger_list(ctx, args_json);
+    }
+    if (strcmp(tool_name, "tool_list") == 0) {
+        return execute_tool_list(ctx, args_json);
+    }
+    if (strcmp(tool_name, "model_get") == 0) {
+        return execute_model_get(args_json);
+    }
+    if (strcmp(tool_name, "model_set") == 0) {
+        return execute_model_set(ctx, args_json);
+    }
+    if (strcmp(tool_name, "model_list") == 0) {
+        return execute_model_list(args_json);
+    }
+
+    if (strcmp(tool_name, "nostr_post_readme") == 0) {
+        return execute_nostr_post_readme(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_file_md_to_longform_post") == 0) {
+        return execute_nostr_file_md_to_longform_post(ctx, args_json);
+    }
+    if (strcmp(tool_name, "task_manage") == 0) {
+        return execute_task_manage(ctx, args_json);
+    }
+    if (strcmp(tool_name, "admin_identity") == 0) {
+        return execute_admin_identity(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_admin_profile") == 0) {
+        return execute_nostr_admin_profile(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_admin_contacts") == 0) {
+        return execute_nostr_admin_contacts(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_admin_relays") == 0) {
+        return execute_nostr_admin_relays(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_admin_notes") == 0) {
+        return execute_nostr_admin_notes(ctx, args_json);
+    }
+    if (strcmp(tool_name, "task_list") == 0) {
+        return execute_task_list(ctx, args_json);
+    }
+    if (strcmp(tool_name, "message_current") == 0) {
+        return execute_message_current(ctx, args_json);
+    }
+    if (strcmp(tool_name, "agent_identity") == 0) {
+        return execute_agent_identity(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_agent_profile") == 0) {
+        return execute_nostr_agent_profile(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_agent_contacts") == 0) {
+        return execute_nostr_agent_contacts(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_agent_relays") == 0) {
+        return execute_nostr_agent_relays(ctx, args_json);
+    }
+    if (strcmp(tool_name, "nostr_agent_notes") == 0) {
+        return execute_nostr_agent_notes(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_kind0_profile") == 0) {
+        return execute_nostr_agent_profile(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_contacts") == 0) {
+        return execute_nostr_agent_contacts(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_relays") == 0) {
+        return execute_nostr_agent_relays(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_notes") == 0) {
+        return execute_nostr_agent_notes(ctx, args_json);
+    }
+    if (strcmp(tool_name, "memory_save") == 0) {
+        return execute_memory_save(ctx, args_json);
+    }
+    if (strcmp(tool_name, "memory_recall") == 0) {
+        return execute_memory_recall(ctx, args_json);
+    }
+    if (strcmp(tool_name, "my_memory") == 0) {
+        return execute_my_memory(ctx, args_json);
+    }
+    if (strcmp(tool_name, "memory_short_term_read") == 0) {
+        return execute_memory_short_term_read(ctx, args_json);
+    }
+    if (strcmp(tool_name, "config_store") == 0) {
+        return execute_config_store(ctx, args_json);
+    }
+    if (strcmp(tool_name, "config_recall") == 0) {
+        return execute_config_recall(ctx, args_json);
+    }
+    if (strcmp(tool_name, "adopted_skills") == 0) {
+        return execute_adopted_skills(ctx, args_json);
+    }
+    if (strcmp(tool_name, "trigger_event") == 0) {
+        return execute_trigger_event(ctx, args_json);
+    }
+
+    return json_error("unknown tool");
+}
+
+int tools_init(tools_context_t* ctx, didactyl_config_t* cfg) {
+    int rc = tools_init_legacy(ctx, cfg);
+    if (rc != 0) return rc;
+    if (memory_init(ctx) != 0) {
+        /* Keep agent startup resilient: memory may be empty or temporarily unavailable. */
+        return 0;
+    }
+    return 0;
+}
+
+void tools_cleanup(tools_context_t* ctx) {
+    memory_cleanup();
+    tools_cleanup_legacy(ctx);
+}
+
+char* tools_execute(tools_context_t* ctx, const char* tool_name, const char* args_json) {
+    return tools_execute_legacy(ctx, tool_name, args_json);
+}

src/tools/tools_internal.h

@@ -0,0 +1,74 @@
+#ifndef DIDACTYL_TOOLS_INTERNAL_H
+#define DIDACTYL_TOOLS_INTERNAL_H
+
+#include "tools.h"
+
+int tools_init_legacy(tools_context_t* ctx, didactyl_config_t* cfg);
+void tools_cleanup_legacy(tools_context_t* ctx);
+char* tools_build_openai_schema_json_legacy(const tools_context_t* ctx);
+char* tools_execute_legacy(tools_context_t* ctx, const char* tool_name, const char* args_json);
+
+char* execute_tool_list(tools_context_t* ctx, const char* args_json);
+char* execute_trigger_list(tools_context_t* ctx, const char* args_json);
+char* execute_message_current(tools_context_t* ctx, const char* args_json);
+char* execute_agent_identity(tools_context_t* ctx, const char* args_json);
+char* execute_agent_version(const char* args_json);
+char* execute_nostr_agent_profile(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_agent_contacts(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_agent_relays(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_agent_notes(tools_context_t* ctx, const char* args_json);
+char* execute_model_get(const char* args_json);
+char* execute_model_set(tools_context_t* ctx, const char* args_json);
+char* execute_model_list(const char* args_json);
+char* execute_nostr_query(const char* args_json);
+char* execute_nostr_my_events(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_pubkey(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_npub(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_encode(const char* args_json);
+char* execute_nostr_decode(const char* args_json);
+char* execute_nostr_react(const char* args_json);
+char* execute_nostr_profile_get(const char* args_json);
+char* execute_nostr_nip05_lookup(const char* args_json);
+char* execute_nostr_relay_status(const char* args_json);
+char* execute_nostr_relay_info(const char* args_json);
+char* execute_nostr_subscription_status(const char* args_json);
+char* execute_nostr_subscription_set(const char* args_json);
+char* execute_nostr_dm_send(const char* args_json);
+char* execute_nostr_encrypt(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_decrypt(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_dm_send_nip17(const char* args_json);
+char* execute_nostr_delete(const char* args_json);
+char* execute_nostr_list_manage(tools_context_t* ctx, const char* args_json);
+char* execute_admin_identity(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_profile(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_contacts(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_relays(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_admin_notes(tools_context_t* ctx, const char* args_json);
+char* execute_task_list(tools_context_t* ctx, const char* args_json);
+char* execute_task_manage(tools_context_t* ctx, const char* args_json);
+char* execute_local_http_fetch(tools_context_t* ctx, const char* args_json);
+char* execute_local_shell_exec(tools_context_t* ctx, const char* args_json);
+char* execute_local_file_read(tools_context_t* ctx, const char* args_json);
+char* execute_local_file_write(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_post(const char* args_json);
+char* execute_nostr_post_readme(tools_context_t* ctx, const char* args_json);
+char* execute_nostr_file_md_to_longform_post(tools_context_t* ctx, const char* args_json);
+char* execute_skill_create(tools_context_t* ctx, const char* args_json);
+char* execute_skill_list(tools_context_t* ctx, const char* args_json);
+char* execute_skill_adopt(tools_context_t* ctx, const char* args_json);
+char* execute_skill_remove(tools_context_t* ctx, const char* args_json);
+char* execute_skill_edit(tools_context_t* ctx, const char* args_json);
+char* execute_skill_search(const char* args_json);
+
+char* execute_memory_save(tools_context_t* ctx, const char* args_json);
+char* execute_memory_recall(tools_context_t* ctx, const char* args_json);
+char* execute_my_memory(tools_context_t* ctx, const char* args_json);
+char* execute_memory_short_term_read(tools_context_t* ctx, const char* args_json);
+char* execute_config_store(tools_context_t* ctx, const char* args_json);
+char* execute_config_recall(tools_context_t* ctx, const char* args_json);
+char* execute_adopted_skills(tools_context_t* ctx, const char* args_json);
+char* execute_trigger_event(tools_context_t* ctx, const char* args_json);
+int memory_init(tools_context_t* ctx);
+void memory_cleanup(void);
+
+#endif

src/trigger_manager.h

@@ -5,9 +5,12 @@
 #include <time.h>
 
 #include "config.h"
+#include "cjson/cJSON.h"
+#include "nostr_handler.h"
+#include "../nostr_core_lib/nostr_core/nostr_core.h"
 
 #define TRIGGER_DEFAULT_MAX_ACTIVE 16
-#define TRIGGER_SKILL_SLUG_MAX 65
+#define TRIGGER_SKILL_D_TAG_MAX 65
 #define TRIGGER_SKILL_CONTENT_MAX 4096
 #define TRIGGER_FILTER_JSON_MAX 2048
 
@@ -16,14 +19,35 @@ typedef enum {
     TRIGGER_ACTION_TEMPLATE = 1
 } trigger_action_type_t;
 
+typedef enum {
+    TRIGGER_TYPE_NOSTR_SUBSCRIPTION = 0,
+    TRIGGER_TYPE_WEBHOOK = 1,
+    TRIGGER_TYPE_CRON = 2,
+    TRIGGER_TYPE_CHAIN = 3,
+    TRIGGER_TYPE_DM = 4
+} trigger_type_t;
+
 typedef struct {
-    char skill_slug[TRIGGER_SKILL_SLUG_MAX];
+    char skill_d_tag[TRIGGER_SKILL_D_TAG_MAX];
     char skill_content[TRIGGER_SKILL_CONTENT_MAX];
     char filter_json[TRIGGER_FILTER_JSON_MAX];
     trigger_action_type_t action_type;
     int enabled;
+    trigger_type_t trigger_type;
     time_t last_fired;
     time_t last_seen_created_at;
+    time_t last_cron_fire;
+    char cron_expr[64];
+    char llm_spec[256];
+    char tools_policy[256];
+    int has_max_tokens;
+    int max_tokens;
+    int has_temperature;
+    double temperature;
+    int has_seed;
+    int seed;
+    nostr_pool_subscription_t* subscription;
+    void* subscription_ctx;
 } active_trigger_t;
 
 typedef struct trigger_manager {
@@ -37,19 +61,55 @@ typedef struct trigger_manager {
 
 int trigger_manager_init(trigger_manager_t* mgr, didactyl_config_t* cfg);
 int trigger_manager_load_from_skills(trigger_manager_t* mgr);
+int trigger_manager_load_from_startup_events(trigger_manager_t* mgr);
+trigger_type_t trigger_type_from_string(const char* s);
+const char* trigger_type_to_string(trigger_type_t t);
+
 int trigger_manager_add(trigger_manager_t* mgr,
-                        const char* skill_slug,
+                        const char* skill_d_tag,
                         const char* content,
                         const char* filter_json,
                         trigger_action_type_t action_type,
-                        int enabled);
-int trigger_manager_remove(trigger_manager_t* mgr, const char* skill_slug);
+                        const char* trigger_type_str,
+                        int enabled,
+                        const char* llm_spec,
+                        const char* tools_policy,
+                        int has_max_tokens,
+                        int max_tokens,
+                        int has_temperature,
+                        double temperature,
+                        int has_seed,
+                        int seed);
+int trigger_manager_remove(trigger_manager_t* mgr, const char* skill_d_tag);
+int trigger_manager_find(trigger_manager_t* mgr, const char* skill_d_tag, active_trigger_t* out);
 int trigger_manager_update(trigger_manager_t* mgr,
-                           const char* skill_slug,
+                           const char* skill_d_tag,
                            const char* content,
                            const char* filter_json,
                            trigger_action_type_t action_type,
-                           int enabled);
+                           const char* trigger_type_str,
+                           int enabled,
+                           const char* llm_spec,
+                           const char* tools_policy,
+                           int has_max_tokens,
+                           int max_tokens,
+                           int has_temperature,
+                           double temperature,
+                           int has_seed,
+                           int seed);
+int trigger_manager_fire(trigger_manager_t* mgr,
+                         const char* skill_d_tag,
+                         cJSON* event,
+                         const char* source_label);
+int trigger_manager_fire_chains(trigger_manager_t* mgr,
+                                const char* source_skill_d_tag,
+                                cJSON* source_event,
+                                const char* source_label);
+int trigger_manager_fire_dm(trigger_manager_t* mgr,
+                            const char* sender_pubkey_hex,
+                            const char* message,
+                            didactyl_sender_tier_t tier,
+                            const char* source_label);
 int trigger_manager_active_count(trigger_manager_t* mgr);
 int trigger_manager_poll(trigger_manager_t* mgr);
 char* trigger_manager_status_json(trigger_manager_t* mgr);

tasks.json

@@ -1 +1 @@
-{"tasks":[{"id":5,"text":"Tweet 3: Gets Smarter Over Time - \"Didactyl starts as an AI that explores and learns. Over time, the best workflows get locked in as reliable, fast processes. It evolves from experimental to hardened—from thinking to doing. An agent that improves itself. #nostr #agents\"","status":"pending","created_at":1772625247,"updated_at":1772625247}],"next_id":6}
+{"tasks":[{"id":9,"text":"Publish README.md as longform post","created_at":1773326251,"status":"done","updated_at":1773326287},{"id":10,"text":"Publish docs/CONTEXT.md as longform post","created_at":1773326251,"status":"done","updated_at":1773326310},{"id":11,"text":"Publish docs/TOOLS.md as longform post","created_at":1773326251,"status":"done","updated_at":1773326320},{"id":12,"text":"Publish docs/SUBSCRIPTIONS.md as longform post","created_at":1773326251,"status":"done","updated_at":1773327937},{"id":13,"text":"DM admin after each publish","created_at":1773326251,"status":"done","updated_at":1773327937},{"id":14,"text":"Return final summary","created_at":1773326251,"status":"done","updated_at":1773327937}],"next_id":15}

tests/test.sh

@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT_DIR"
+
+PASS_COUNT=0
+FAIL_COUNT=0
+
+pass() {
+  PASS_COUNT=$((PASS_COUNT + 1))
+  printf "[PASS] %s\n" "$1"
+}
+
+fail() {
+  FAIL_COUNT=$((FAIL_COUNT + 1))
+  printf "[FAIL] %s\n" "$1"
+}
+
+assert_grep() {
+  local pattern="$1"
+  local file="$2"
+  local desc="$3"
+  if grep -E -q "$pattern" "$file"; then
+    pass "$desc"
+  else
+    fail "$desc (pattern not found in $file)"
+  fi
+}
+
+assert_cmd() {
+  local desc="$1"
+  shift
+  if "$@" >/dev/null 2>&1; then
+    pass "$desc"
+  else
+    fail "$desc"
+  fi
+}
+
+printf "== Didactyl Trigger Feature Test ==\n"
+printf "Root: %s\n" "$ROOT_DIR"
+
+printf "\n-- Build check --\n"
+if make -j >/tmp/didactyl-test-build.log 2>&1; then
+  pass "Project builds successfully"
+else
+  fail "Project build failed (see /tmp/didactyl-test-build.log)"
+fi
+
+assert_cmd "Built binary exists" test -x ./didactyl
+
+printf "\n-- Source wiring checks --\n"
+assert_grep "TRIGGER_TYPE_WEBHOOK" src/trigger_manager.h "Webhook trigger type defined"
+assert_grep "TRIGGER_TYPE_CRON" src/trigger_manager.h "Cron trigger type defined"
+assert_grep "TRIGGER_TYPE_CHAIN" src/trigger_manager.h "Chain trigger type defined"
+
+assert_grep "trigger_manager_fire\(" src/trigger_manager.c "Generic trigger fire API implemented"
+assert_grep "trigger_manager_fire_chains\(" src/trigger_manager.c "Chain fire API implemented"
+assert_grep "cron_matches_now\(" src/trigger_manager.c "Cron matcher implemented"
+assert_grep "trigger_type_to_string" src/trigger_manager.c "Trigger type serialization implemented"
+
+assert_grep "\"/api/trigger/\*\"" src/http_api.c "Webhook API route registered"
+assert_grep "handle_trigger_webhook\(" src/http_api.c "Webhook handler implemented"
+
+assert_grep "skill_create trigger must be one of: nostr-subscription, webhook, cron, chain, dm" src/tools/tool_skill.c "skill_create validation accepts supported trigger types"
+assert_grep "skill_edit trigger must be one of: nostr-subscription, webhook, cron, chain, dm" src/tools/tool_skill.c "skill_edit validation accepts supported trigger types"
+
+assert_grep "trigger_manager_fire_chains\(" src/agent.c "Post-execution chain hook wired in agent"
+
+printf "\n-- Docs checks --\n"
+assert_grep "\`webhook\`" docs/SKILLS.md "SKILLS docs include webhook trigger"
+assert_grep "\`cron\`" docs/SKILLS.md "SKILLS docs include cron trigger"
+assert_grep "\`chain\`" docs/SKILLS.md "SKILLS docs include chain trigger"
+assert_grep "POST /api/trigger/:d_tag" docs/API.md "API docs include webhook endpoint"
+
+printf "\n-- Optional local API probe --\n"
+if command -v curl >/dev/null 2>&1; then
+  HTTP_CODE=""
+  HTTP_CODE="$(curl -k -s --connect-timeout 2 --max-time 5 -o /tmp/didactyl-trigger-probe.out -w "%{http_code}" https://127.0.0.1:8484/api/trigger/nonexistent -X POST -H 'Content-Type: application/json' -d '{}' || true)"
+  if [[ "$HTTP_CODE" == "000" ]]; then
+    HTTP_CODE="$(curl -s --connect-timeout 2 --max-time 5 -o /tmp/didactyl-trigger-probe.out -w "%{http_code}" http://127.0.0.1:8484/api/trigger/nonexistent -X POST -H 'Content-Type: application/json' -d '{}' || true)"
+  fi
+
+  if [[ "$HTTP_CODE" == "200" || "$HTTP_CODE" == "400" || "$HTTP_CODE" == "404" || "$HTTP_CODE" == "503" ]]; then
+    pass "Webhook endpoint responds on local API (http code: $HTTP_CODE)"
+  elif [[ "$HTTP_CODE" == "000" || -z "$HTTP_CODE" ]]; then
+    pass "Webhook endpoint probe skipped (no local API listener detected)"
+  else
+    fail "Webhook endpoint probe did not get expected response (http code: ${HTTP_CODE:-none})"
+  fi
+else
+  fail "curl not available for API probe"
+fi
+
+printf "\n== Result ==\n"
+printf "Pass: %d\n" "$PASS_COUNT"
+printf "Fail: %d\n" "$FAIL_COUNT"
+
+if [[ "$FAIL_COUNT" -gt 0 ]]; then
+  exit 1
+fi
+
+exit 0

view_api_call_logs.sh

@@ -0,0 +1,53 @@
+#!/bin/bash
+set -euo pipefail
+
+LOG_FILE="${1:-}"
+
+if [ -z "$LOG_FILE" ]; then
+  for candidate in "./didactyl.log" "./debug.log" "./context.log.md"; do
+    if [ -f "$candidate" ]; then
+      LOG_FILE="$candidate"
+      break
+    fi
+  done
+fi
+
+if [ -z "$LOG_FILE" ] || [ ! -f "$LOG_FILE" ]; then
+  echo "Log file not found." >&2
+  echo "Tried defaults: ./didactyl.log ./debug.log ./context.log.md" >&2
+  echo "Usage: $0 [path/to/logfile]" >&2
+  exit 1
+fi
+
+echo "Following numbered LLM API calls from: $LOG_FILE"
+echo "(Press Ctrl+C to stop)"
+
+# Count only outbound provider calls from src/llm.c:
+#   [didactyl] llm request: method=... url=...
+START_API=$(tail -n 20000 "$LOG_FILE" | grep -Ec "\\[didactyl\\] llm request:" || true)
+[ -z "$START_API" ] && START_API=0
+
+echo "Starting api_call count from: $START_API"
+
+tail -n 0 -F "$LOG_FILE" \
+  | awk -v api_start="$START_API" '
+      BEGIN { api = api_start }
+      {
+        line = $0
+        if (line !~ /\[didactyl\] llm request:/) next
+
+        api++
+        method = "?"
+        url = "?"
+
+        if (match(line, /method=[A-Z]+/)) {
+          method = substr(line, RSTART + 7, RLENGTH - 7)
+        }
+        if (match(line, /url=[^ ]+/)) {
+          url = substr(line, RSTART + 4, RLENGTH - 4)
+        }
+
+        printf "%d) %s %s\n", api, method, url
+        fflush()
+      }
+    '