Change how AI agents work. In TypeScript.

Ask for an API key or any setting; we store it securely for you. A new web-search engine takes a dozen lines.

// Ask the user for an API key and any other setting. Secrets are stored encrypted
// and handed to your code only when it runs. Here: a new web-search engine.
globalThis.manifest = {
  egress: ["api.example-search.com"],
  settings: [
    { key: "apiKey", title: "Search API key", type: "secret", required: true },
    { key: "safeSearch", title: "Safe search", type: "bool" },
  ],
};

globalThis.web.search = async (input) => {
  const apiKey = await host.settings.getSecret("apiKey");
  const safe = host.settings.get("safeSearch") ? "on" : "off";
  const response = await host.fetch({
    url: `https://api.example-search.com/search?q=${encodeURIComponent(input.query)}&safe=${safe}`,
    headers: { Authorization: `Bearer ${apiKey}` },
  });
  const data = JSON.parse(response.body);
  return { results: data.items.map((i) => ({ title: i.title, url: i.link, snippet: i.summary })) };
};

Hook into events such as a new chat starting, and walk people through setup.

// Hook into events to get every user set up. When a chat starts and the plugin
// isn't configured yet, the agent opens with a pointer to what's missing.
globalThis.events.sessionStarted = async () => {
  if (!host.settings.get("teamName")) {
    await host.session.message.post({
      text: "Welcome aboard! Add your team name in this plugin's settings and I'll tailor every answer to it.",
    });
  }
};

Plugins get full control: a security plugin can stop a turn that contains data it shouldn't.

// Middleware gets full control over each step. This security plugin stops a
// message that carries a key or a card number before any agent sees it.
const SENSITIVE = /\b(sk-[A-Za-z0-9_-]{20,}|\d{4}[ -]?\d{4}[ -]?\d{4}[ -]?\d{4})\b/;

globalThis.middleware.userMessageInbound = async (context, tools) => {
  if (SENSITIVE.test(context.text)) {
    return tools.cancel("Held: this message looks like it contains a secret key or a card number.");
  }
  return context.text;
};