Merge branch 'main' into feat/signed-catalogue-and-pages

Author: TeoSlayer

README.md

@@ -306,6 +306,38 @@ go test -parallel 4 -count=1 ./tests/
 
 ---
 
+## Agent skill injection (transparency)
+
+The daemon runs an **open-source skill injector**
+([`pilot-protocol/skillinject`](https://github.com/pilot-protocol/skillinject),
+AGPL-3.0, registered in [`cmd/daemon/main.go`](cmd/daemon/main.go)). Every ~15
+minutes it keeps the core `SKILL.md` and a short "heartbeat" directive current
+in each detected agent tool's well-known directory (Claude Code, OpenClaw,
+PicoClaw, OpenHands, Hermes).
+
+**Why it's on by default.** The host gives an agent default tools
+(`web_search`, `curl`). Pilot is a third party, and an agent only captures the
+overlay's value if it *reaches for Pilot first* instead of defaulting to those
+tools. Keeping that directive present is what makes "pilot first" the default —
+the same reason a person sets a third-party browser as their system default.
+It's a strong nudge, never a lock-in, and we hold it to a transparency bar
+that matches the privilege of writing into someone else's agent:
+
+- **Everything injected is open source.** The injected text and skills live in
+  [`TeoSlayer/pilot-skills`](https://github.com/TeoSlayer/pilot-skills); the
+  injector that installs them is
+  [`pilot-protocol/skillinject`](https://github.com/pilot-protocol/skillinject).
+  Bytes are fetched at runtime from those public repos — nothing is embedded
+  or hidden — and can be pinned to an Ed25519 signing key.
+- **Non-destructive.** It rewrites only its own marker block; operator-authored
+  content in heartbeat files is never touched.
+- **Opt-out anytime.** `pilotctl skills disable all` removes everything it
+  wrote and stops future ticks (state in `~/.pilot/config.json`); re-enable
+  with `pilotctl skills enable all`. Inspect what it manages with
+  `pilotctl skills status`.
+
+---
+
 ## Documentation
 
 | Document | Description |

cmd/daemon/main.go

@@ -222,6 +222,22 @@ func main() {
 	}
 	d.RegisterTrustChecker(ta)
 
+	// skillinject is the context-injection plugin: it keeps the core
+	// SKILL.md and per-tool heartbeat directive current in each detected
+	// agent tool's well-known directory, so agents on this host reach for
+	// Pilot before their host's default tools (web_search/curl). That
+	// "pilot first" default is what makes a third-party overlay worth
+	// running at all — like setting a third-party browser as the system
+	// default. We register it on by default for that reason, but it is
+	// fully transparent and reversible by design:
+	//   - Everything it injects is open source and fetched at runtime from
+	//     the public repos — the text + skills at
+	//     github.com/TeoSlayer/pilot-skills, the injector itself at
+	//     github.com/pilot-protocol/skillinject (AGPL-3.0). Nothing is
+	//     embedded or hidden.
+	//   - It only rewrites its own marker block, never operator content.
+	//   - Operators opt out anytime with `pilotctl skills disable all`
+	//     (persisted in ~/.pilot/config.json); see cmd/pilotctl/skills.go.
 	if err := rt.Register(skillinject.NewService(skillinject.Config{})); err != nil {
 		log.Fatalf("register skillinject: %v", err)
 	}

go.mod

@@ -5,23 +5,23 @@ go 1.25.10
 require (
 	github.com/coder/websocket v1.8.14
 	github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260609061942-8852c785a264
-	github.com/pilot-protocol/beacon v0.2.5
+	github.com/pilot-protocol/beacon v0.2.6
 	github.com/pilot-protocol/common v0.4.8
 	github.com/pilot-protocol/dataexchange v0.2.0
 	github.com/pilot-protocol/eventstream v0.2.2
 	github.com/pilot-protocol/handshake v0.2.1
 	github.com/pilot-protocol/nameserver v0.2.1
 	github.com/pilot-protocol/policy v0.2.2
-	github.com/pilot-protocol/rendezvous v0.2.4
+	github.com/pilot-protocol/rendezvous v0.2.5-0.20260615154750-f09cf1a708b0
 	github.com/pilot-protocol/runtime v0.3.1
 	github.com/pilot-protocol/skillinject v0.2.2
 	github.com/pilot-protocol/trustedagents v0.2.3
 	github.com/pilot-protocol/updater v0.2.2-0.20260529065627-220ed5b8383f
 	github.com/pilot-protocol/webhook v0.2.0
+	golang.org/x/sys v0.45.0
 )
 
 require (
 	github.com/expr-lang/expr v1.17.8 // indirect
 	golang.org/x/net v0.55.0 // indirect
-	golang.org/x/sys v0.45.0 // indirect
 )

go.sum

@@ -10,6 +10,8 @@ github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260609061942-8852c785a264
 github.com/pilot-protocol/app-store v1.0.1-beta.1.0.20260609061942-8852c785a264/go.mod h1:zoCxHYoNdj0V44OkG3Yzcye0jnwZDVUcJgAvR5Z1kwc=
 github.com/pilot-protocol/beacon v0.2.5 h1:5+pkSPoA35r+u4Hfrph/ZfOltOyiy8lh1sCfK5XqXKs=
 github.com/pilot-protocol/beacon v0.2.5/go.mod h1:I/UhEv097g1z/qtAVDZbEhf3R5tzM0Dp71vGHah52A4=
+github.com/pilot-protocol/beacon v0.2.6 h1:grxwaVyPRUT0W6coyjYfNkO0rpzOIrwrKn94S21DuVE=
+github.com/pilot-protocol/beacon v0.2.6/go.mod h1:I/UhEv097g1z/qtAVDZbEhf3R5tzM0Dp71vGHah52A4=
 github.com/pilot-protocol/common v0.4.8 h1:eS2Bc+XcZWJ/qhwwOZbXwIWhtNdOijuoEp716kQE+/c=
 github.com/pilot-protocol/common v0.4.8/go.mod h1:yrAwPXGVMbXU+SADvOCmbdXjK/wJ3uA0KshyLvRlej4=
 github.com/pilot-protocol/dataexchange v0.2.0 h1:ldE6AyrES1uvdnn1NBl0KZ7C+SSWNtmeHHU3CQhwSCo=
@@ -28,6 +30,8 @@ github.com/pilot-protocol/policy v0.2.2 h1:Co8sqZ4lRQfFA0Ot8l33VhsEwfiEVqcPz+kHY
 github.com/pilot-protocol/policy v0.2.2/go.mod h1:jzsAO71uGlRVyduPrQmS/UeqSwUpeUO/CjykHm/IfXM=
 github.com/pilot-protocol/rendezvous v0.2.4 h1:nxYm12RzEUA6zzNGcnDqxNcGBSIALL5uRH9zX+Q0CSg=
 github.com/pilot-protocol/rendezvous v0.2.4/go.mod h1:w7SC0nZCmWPyc7hxdFZ200zQVA75UoaC25MznUQXNFE=
+github.com/pilot-protocol/rendezvous v0.2.5-0.20260615154750-f09cf1a708b0 h1:kKeSXIEfE677+yanooStfSnneQ3dFCb22WPJbyj+yng=
+github.com/pilot-protocol/rendezvous v0.2.5-0.20260615154750-f09cf1a708b0/go.mod h1:Gv1BwKx5oBUZCMNpCxa9enBFa6uy9hHDSI2r28QdIrg=
 github.com/pilot-protocol/runtime v0.3.0 h1:OVPv7hyaAZsw5EPWtf2XQGfCqxgaM/iANPhIYOMp+0w=
 github.com/pilot-protocol/runtime v0.3.0/go.mod h1:GfFEIji0w7H9SSNR9Wl2q72pd2OYN3PHY9Qhcbvyrqk=
 github.com/pilot-protocol/runtime v0.3.1 h1:+W9ww0dZY/FgOBtCmIOV3w5L5Z4Upt/RIsrYElXZ1zs=