Feat/report generation skills 51

apps/web/src/app/(application)/files/page.tsx

@@ -1,6 +1,6 @@
 "use client"
 
-import { useCallback, useRef, useState } from "react"
+import React, { useCallback, useRef, useState } from "react"
 import { toast } from "sonner"
 
 // UI Components
@@ -354,16 +354,18 @@ const FilesPage = () => {
 							<Breadcrumb>
 								<BreadcrumbList>
 									{breadcrumbs.map((entry, i) => (
-										<BreadcrumbItem key={entry.path}>
+										<React.Fragment key={entry.path}>
 											{i > 0 && <BreadcrumbSeparator />}
-											{i === breadcrumbs.length - 1 ? (
-												<BreadcrumbPage>{entry.name}</BreadcrumbPage>
-											) : (
-												<BreadcrumbLink className="cursor-pointer" onClick={() => navigateToBreadcrumb(entry)}>
-													{entry.name}
-												</BreadcrumbLink>
-											)}
-										</BreadcrumbItem>
+											<BreadcrumbItem>
+												{i === breadcrumbs.length - 1 ? (
+													<BreadcrumbPage>{entry.name}</BreadcrumbPage>
+												) : (
+													<BreadcrumbLink className="cursor-pointer" onClick={() => navigateToBreadcrumb(entry)}>
+														{entry.name}
+													</BreadcrumbLink>
+												)}
+											</BreadcrumbItem>
+										</React.Fragment>
 									))}
 								</BreadcrumbList>
 							</Breadcrumb>

apps/web/src/app/api/conversations/[conversationid]/artifacts/[filename]/route.ts

@@ -32,7 +32,9 @@ export async function GET(
 	// Proxy to gateway
 	try {
 		const gatewayUrl = `${GATEWAY_URL}/api/v1/sessions/${conversationid}/artifacts/${encodeURIComponent(filename)}${queryString}`
-		const response = await fetch(gatewayUrl)
+		const response = await fetch(gatewayUrl, {
+			headers: { cookie: reqheaders.get("cookie") ?? "" },
+		})
 
 		if (!response.ok) {
 			return NextResponse.json({ error: "Artifact not found" }, { status: response.status })

apps/web/src/utils/file-utils.tsx

@@ -45,7 +45,8 @@ export const isPreviewable = (mediatype: string): boolean => {
 		mediatype === "text/plain" ||
 		mediatype === "text/markdown" ||
 		mediatype === "text/csv" ||
-		mediatype === "application/json"
+		mediatype === "application/json" ||
+		mediatype === "application/pdf"
 	)
 }
 

infra/openshell/Dockerfile

@@ -65,23 +65,40 @@ FROM node:22-slim
 # make + g++ are required for native npm modules that use node-gyp.
 # Node.js and npm are already present from the node:22-slim base image.
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    curl \
+    g++ \
     git \
+    iproute2 \
+    jq \
+    less \
+    libcairo2-dev \
+    libgif-dev \
+    libjpeg-dev \
+    libpango1.0-dev \
+    librsvg2-dev \
+    make \
+    pkg-config \
     python3 \
     python3-pip \
     python3-venv \
     tini \
-    curl \
-    iproute2 \
     tree \
-    jq \
-    wget \
-    less \
     unzip \
+    wget \
     zip \
-    make \
-    g++ \
     && rm -rf /var/lib/apt/lists/*
 
+# Install Python reporting libraries
+RUN pip3 install --break-system-packages \
+    matplotlib \
+    numpy \
+    openpyxl \
+    pandas \
+    python-pptx \
+    reportlab \
+    seaborn
+
 # Create sandbox user (OpenShell convention: non-root execution)
 # --home is required so homedir() returns a real path; bootstrapPiExtensions()
 # writes config files to ~/.pi/ and will crash if home is /nonexistent.
@@ -101,6 +118,9 @@ RUN npm install -g @mariozechner/pi-coding-agent
 # The CLI reads SLACK_TOKEN from the environment (injected via .env by the orchestrator).
 RUN npm install -g agent-slack
 
+# Install Node report libraries available to agent-generated code.
+RUN npm install -g chart.js chartjs-node-canvas d3 exceljs
+
 # Copy extension manifest and install script before switching to sandbox user
 COPY packages/agents/extensions.json /tmp/extensions.json
 COPY infra/openshell/scripts/install-extensions.mjs /tmp/install-extensions.mjs
@@ -123,7 +143,7 @@ RUN chown root:root -R ./skills/ && chmod 444 -R ./skills/
 # In per-user persistent sandboxes, this directory persists across sessions.
 # /sandbox is the OpenShell writable root where .env is uploaded.
 # .knowledge-base is pre-created so the agent prompt doesn't error on ls.
-RUN mkdir -p /workspace/.knowledge-base /tmp/agent /sandbox && \
+RUN mkdir -p /workspace/.knowledge-base /workspace/output /tmp/agent /sandbox && \
     chown -R sandbox:sandbox /workspace /tmp/agent /sandbox
 
 # Copy entrypoint into /app/ which is already in the policy read_only allowlist.

packages/agents/package.json

@@ -29,6 +29,7 @@
 		"uuid": "^13.0.0",
 		"@openzosma/db": "workspace:*",
 		"@openzosma/integrations": "workspace:*",
+		"@openzosma/skill-reports": "workspace:*",
 		"pg": "^8.13.1",
 		"@mariozechner/pi-agent-core": "^0.61.0"
 	},

packages/agents/src/pi.agent.ts

@@ -11,7 +11,12 @@ import { createLogger } from "@openzosma/logger"
 import { bootstrapMemory } from "@openzosma/memory"
 import { DEFAULT_SYSTEM_PROMPT } from "./pi/config.js"
 import { resolveModel } from "./pi/model.js"
-import { createDefaultTools, createListDatabaseSchemasTool, createQueryDatabaseTool } from "./pi/tools.js"
+import {
+	createDefaultTools,
+	createListDatabaseSchemasTool,
+	createQueryDatabaseTool,
+	createReportTools,
+} from "./pi/tools.js"
 import type { AgentMessage, AgentProvider, AgentSession, AgentSessionOpts, AgentStreamEvent } from "./types.js"
 
 const log = createLogger({ component: "agents" })
@@ -52,9 +57,11 @@ class PiAgentSession implements AgentSession {
 			memoryDir: opts.memoryDir,
 		})
 		const toolList = [...createDefaultTools(opts.workspaceDir, opts.toolsEnabled)]
-		const customTools = opts.dbPool
-			? [createQueryDatabaseTool(opts.dbPool), createListDatabaseSchemasTool(opts.dbPool)]
-			: undefined
+		const reportTools = createReportTools(opts.toolsEnabled, opts.workspaceDir)
+		const customTools = [
+			...reportTools,
+			...(opts.dbPool ? [createQueryDatabaseTool(opts.dbPool), createListDatabaseSchemasTool(opts.dbPool)] : []),
+		]
 		const { model, apiKey } = resolveModel({
 			provider: opts.provider,
 			model: opts.model,

packages/agents/src/pi/tools.ts

@@ -12,21 +12,75 @@ import type { ToolDefinition } from "@mariozechner/pi-coding-agent"
 import { integrationQueries } from "@openzosma/db"
 import type { IntegrationConfig } from "@openzosma/db"
 import { executequery, getschema, safeDecrypt } from "@openzosma/integrations"
+import {
+	createReportExecuteCodeTool,
+	createReportGenerateTool,
+	createReportListTemplatesTool,
+} from "@openzosma/skill-reports"
 import { Type } from "@sinclair/typebox"
 import type pg from "pg"
 
-export type BuiltInToolName = "read" | "bash" | "edit" | "write" | "grep" | "find" | "ls"
+export type BuiltInToolName =
+	| "read"
+	| "bash"
+	| "edit"
+	| "write"
+	| "grep"
+	| "find"
+	| "ls"
+	| "report_list_templates"
+	| "report_generate"
+	| "report_execute_code"
+
+// Built-in AgentTool entries (accepted by createAgentSession's `tools` field).
+const BUILTIN_TOOL_NAMES = ["read", "bash", "edit", "write", "grep", "find", "ls"] as const
+type BuiltinToolName = (typeof BUILTIN_TOOL_NAMES)[number]
+
+// Custom ToolDefinition entries (accepted by createAgentSession's `customTools` field).
+const CUSTOM_TOOL_NAMES = ["report_list_templates", "report_generate", "report_execute_code"] as const
+type CustomToolName = (typeof CUSTOM_TOOL_NAMES)[number]
 
+/**
+ * Create the built-in AgentTool instances (read, bash, edit, write, grep, find, ls).
+ * These go in `tools` when calling createAgentSession.
+ *
+ * @param workspaceDir - Root workspace directory.
+ * @param toolsEnabled - Optional allow-list of tool names. If omitted, all tools are returned.
+ */
 export const createDefaultTools = (workspaceDir: string, toolsEnabled?: string[]) => {
 	const allTools = [
-		{ name: "read", tool: createReadTool(workspaceDir) },
-		{ name: "bash", tool: createBashTool(workspaceDir) },
-		{ name: "edit", tool: createEditTool(workspaceDir) },
-		{ name: "write", tool: createWriteTool(workspaceDir) },
-		{ name: "grep", tool: createGrepTool(workspaceDir) },
-		{ name: "find", tool: createFindTool(workspaceDir) },
-		{ name: "ls", tool: createLsTool(workspaceDir) },
-	] as const
+		{ name: "read" as BuiltinToolName, tool: createReadTool(workspaceDir) },
+		{ name: "bash" as BuiltinToolName, tool: createBashTool(workspaceDir) },
+		{ name: "edit" as BuiltinToolName, tool: createEditTool(workspaceDir) },
+		{ name: "write" as BuiltinToolName, tool: createWriteTool(workspaceDir) },
+		{ name: "grep" as BuiltinToolName, tool: createGrepTool(workspaceDir) },
+		{ name: "find" as BuiltinToolName, tool: createFindTool(workspaceDir) },
+		{ name: "ls" as BuiltinToolName, tool: createLsTool(workspaceDir) },
+	]
+
+	if (!toolsEnabled || toolsEnabled.length === 0) {
+		return allTools.map((t) => t.tool)
+	}
+
+	const allow = new Set(toolsEnabled)
+	return allTools.filter((t) => allow.has(t.name)).map((t) => t.tool)
+}
+
+/**
+ * Create the report ToolDefinition instances (report_list_templates, report_generate, report_execute_code).
+ * These go in `customTools` when calling createAgentSession.
+ *
+ * @param toolsEnabled - Optional allow-list of tool names. If omitted, all report tools are returned.
+ * @param workspaceDir - Workspace root; report output will go to <workspaceDir>/output.
+ *                       Defaults to /workspace/output when omitted (sandbox mode).
+ */
+export const createReportTools = (toolsEnabled?: string[], workspaceDir?: string): ToolDefinition[] => {
+	const outputDir = workspaceDir ? `${workspaceDir}/output` : undefined
+	const allTools = [
+		{ name: "report_list_templates" as CustomToolName, tool: createReportListTemplatesTool({ outputDir }) },
+		{ name: "report_generate" as CustomToolName, tool: createReportGenerateTool({ outputDir }) },
+		{ name: "report_execute_code" as CustomToolName, tool: createReportExecuteCodeTool({ outputDir }) },
+	]
 
 	if (!toolsEnabled || toolsEnabled.length === 0) {
 		return allTools.map((t) => t.tool)