@amoree-code/ocean 1.1.0 → 1.2.0

package/node_modules/@ocean/brain/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ocean/brain",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/node_modules/@ocean/context/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ocean/context",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/node_modules/@ocean/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ocean/core",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/node_modules/@ocean/loop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ocean/loop",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/node_modules/@ocean/market/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ocean/market",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/node_modules/@ocean/services/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ocean/services",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "type": "module",
   "exports": {

package/ocean-marketplace.json

@@ -5,9 +5,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.business-logic",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -23,9 +23,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.catch-up",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -41,9 +41,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.core-thinking",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -59,9 +59,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.design-thinking",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -77,9 +77,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.graft",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -95,9 +95,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.loop",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -113,9 +113,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.session-handoff",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -131,9 +131,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.use-browser",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -149,9 +149,9 @@
     {
       "kind": "skill",
       "name": "dev.ocean.skills.verification",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -183,9 +183,9 @@
           "npx"
         ]
       },
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -232,9 +232,9 @@
       "kind": "mcp",
       "name": "dev.ocean/mcp-gateway",
       "description": "One MCP endpoint for every registered server: Ocean's own and those installed from the marketplace.",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -276,9 +276,9 @@
       "kind": "mcp",
       "name": "dev.ocean/obsidian",
       "description": "Ocean's Obsidian vault bridge over MCP.",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -320,9 +320,9 @@
       "kind": "mcp",
       "name": "dev.ocean/ocean",
       "description": "Ocean's own MCP server: workspace status, tasks, handoffs, sessions and the brain.",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",
@@ -374,9 +374,9 @@
           "npx"
         ]
       },
-      "version": "1.1.0",
+      "version": "1.2.0",
       "engines": {
-        "ocean": ">=1.1.0"
+        "ocean": ">=1.2.0"
       },
       "source": {
         "type": "path",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@amoree-code/ocean",
   "description": "Local-first memory, tasks and session capture shared by every AI coding client: one private workspace for Claude, Codex, Gemini and more.",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "private": false,
   "license": "MIT",
   "author": "AMEER ABDULKAREEM JABBAR LAMI",
@@ -45,12 +45,12 @@
     "@langchain/core": "1.2.14",
     "@langchain/langgraph": "1.4.19",
     "@modelcontextprotocol/sdk": "1.32.0",
-    "@ocean/brain": "1.1.0",
-    "@ocean/context": "1.1.0",
-    "@ocean/core": "1.1.0",
-    "@ocean/loop": "1.1.0",
-    "@ocean/market": "1.1.0",
-    "@ocean/services": "1.1.0",
+    "@ocean/brain": "1.2.0",
+    "@ocean/context": "1.2.0",
+    "@ocean/core": "1.2.0",
+    "@ocean/loop": "1.2.0",
+    "@ocean/market": "1.2.0",
+    "@ocean/services": "1.2.0",
     "playwright-core": "^1.48.0",
     "sqlite-vec": "0.1.9",
     "zod": "^4.6.5"

package/node_modules/@ocean/brain/dist/memory/signal-detection.js

@@ -1,66 +0,0 @@
-import { redactRuntimeText } from "@ocean/core/domain/redaction/redaction.js";
-const CORRECTION_PATTERN = /\bno,|\bactually,|\bnot that\b|\binstead of\b|\bshould use\b|\bthat'?s wrong\b/i;
-function userInputTexts(events) {
-    return events
-        .filter((event) => event.type === "user_input")
-        .map((event) => ({
-        id: event.eventId,
-        text: redactRuntimeText(event.data).replace(/\s+/g, " ").trim(),
-    }))
-        .filter((event) => event.text.length > 12)
-        .slice(0, 80);
-}
-// True when the user pushed back in this session ("no, use X", "that's wrong").
-export function hasUserCorrection(events) {
-    return userInputTexts(events).some((event) => CORRECTION_PATTERN.test(event.text));
-}
-// What a completed, proven session is worth remembering. Pure: reads events, writes nothing.
-export function detectSessionSignals(events) {
-    const proven = events.filter((event) => event.type === "evidence" && /"result"\s*:\s*"proven"/.test(event.data));
-    if (!proven.length)
-        return [];
-    const outputs = events
-        .filter((event) => ["provider_output", "text", "json"].includes(event.type))
-        .map((event) => ({
-        id: event.eventId,
-        text: redactRuntimeText(event.data).replace(/\s+/g, " ").trim(),
-    }))
-        .filter((event) => event.text.length > 12)
-        .slice(0, 80);
-    const userInputs = userInputTexts(events);
-    const candidates = [];
-    const decisions = outputs.filter((event) => /\bdecision\s*:/i.test(event.text));
-    if (decisions.length)
-        candidates.push({
-            signalType: "explicit-decision",
-            summary: decisions[0].text.slice(0, 500),
-            refs: decisions.slice(0, 4).map((event) => `event:${event.id}`),
-            confidence: 0.9,
-        });
-    const counts = new Map();
-    for (const event of outputs) {
-        const normalized = event.text.toLocaleLowerCase();
-        const current = counts.get(normalized) ?? { count: 0, refs: [] };
-        current.count += 1;
-        current.refs.push(`event:${event.id}`);
-        counts.set(normalized, current);
-    }
-    const repeated = [...counts.entries()].find(([, value]) => value.count >= 2);
-    if (repeated)
-        candidates.push({
-            signalType: "repeated-procedure",
-            summary: repeated[0].slice(0, 500),
-            refs: repeated[1].refs.slice(0, 4),
-            confidence: 0.8,
-        });
-    const corrections = userInputs.filter((event) => CORRECTION_PATTERN.test(event.text));
-    if (corrections.length)
-        candidates.push({
-            signalType: "repeated-correction",
-            summary: corrections[0].text.slice(0, 500),
-            refs: corrections.slice(0, 4).map((event) => `event:${event.id}`),
-            confidence: 0.7,
-        });
-    return candidates;
-}
-//# sourceMappingURL=signal-detection.js.map

package/node_modules/@ocean/market/dist/security/sandbox.js

@@ -1,74 +0,0 @@
-import os from "node:os";
-import path from "node:path";
-import { realDeepestExisting } from "@ocean/core/shared/paths.js";
-// Where a package runner (npx, uvx) must be able to write to work at all: its caches and the
-// temp dir. Everything else a capability writes has to be declared.
-export function runtimeWritablePaths(home = os.homedir()) {
-    return [
-        os.tmpdir(),
-        path.join(home, ".npm"),
-        path.join(home, ".cache"),
-        path.join(home, "Library", "Caches"),
-        path.join(home, ".local", "share", "uv"),
-    ];
-}
-// Reads stay open for system libraries, but these never are unless declared under fs.read.
-export function secretPaths(home) {
-    return [
-        ".ssh",
-        ".aws",
-        ".gnupg",
-        ".kube",
-        ".docker",
-        ".netrc",
-        ".npmrc",
-        ".config/gh",
-        ".config/gcloud",
-        "Library/Keychains",
-    ].map((entry) => path.join(home, entry));
-}
-const sbplString = (value) => `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
-// macOS Seatbelt profile: reads stay open (runtimes need system libraries) except secret
-// locations, writes are denied
-// outside the declared and runtime paths, and the network is denied unless any host was
-// declared. Seatbelt cannot filter by hostname, so a declared host opens outbound network;
-// remote endpoints are still checked per host by the launcher.
-export function seatbeltProfile(policy, extraWritable) {
-    const writable = [
-        ...new Set([...policy.writablePaths(), ...extraWritable].map(realDeepestExisting)),
-    ];
-    const lines = [
-        "(version 1)",
-        "(allow default)",
-        "(deny file-write*)",
-        `(allow file-write* (literal "/dev/null") (literal "/dev/tty") (literal "/dev/dtracehelper")${writable
-            .map((entry) => ` (subpath ${sbplString(entry)})`)
-            .join("")})`,
-    ];
-    const secrets = secretPaths(policy.home)
-        .filter((entry) => !policy.allows({ type: "fs.read", target: entry }))
-        .map(realDeepestExisting);
-    if (secrets.length)
-        lines.push(`(deny file-read* file-write*${secrets.map((entry) => ` (subpath ${sbplString(entry)})`).join("")})`);
-    if (!policy.permissions.network.length)
-        lines.push("(deny network*)");
-    return lines.join("\n");
-}
-export function sandboxed(policy, target, options) {
-    const platform = options.platform ?? process.platform;
-    if (platform === "darwin")
-        return {
-            command: "/usr/bin/sandbox-exec",
-            args: [
-                "-p",
-                seatbeltProfile(policy, options.extraWritable),
-                target.command,
-                ...target.args,
-            ],
-            sandbox: "sandbox-exec",
-        };
-    if (!options.allowUnsandboxed)
-        throw new Error(`No process sandbox is available on ${platform}; refusing to launch ${policy.capability} unsandboxed`);
-    return { ...target, sandbox: "none" };
-}
-//# sourceMappingURL=sandbox.js.map

package/node_modules/@ocean/market/dist/skills/skill-curation.js

@@ -1,123 +0,0 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { redactRuntimeText } from "@ocean/core/domain/redaction/redaction.js";
-import { truncateUtf8 } from "@ocean/core/shared/fs-utils.js";
-import { oceanPath, SYSTEM_DIR } from "@ocean/core/shared/paths.js";
-const file = () => oceanPath(SYSTEM_DIR, "skills", "candidates.json");
-async function load() {
-    try {
-        return JSON.parse(await readFile(file(), "utf8"));
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return [];
-        throw error;
-    }
-}
-async function save(items) {
-    await mkdir(path.dirname(file()), { recursive: true });
-    await writeFile(file(), `${JSON.stringify(items, null, 2)}\n`, {
-        mode: 0o600,
-    });
-}
-export async function addSkillCandidate(candidate) {
-    if (!candidate.id ||
-        !candidate.name ||
-        !candidate.instructions ||
-        candidate.instructions.length > 32_000 ||
-        /(api[_ -]?key|token|password|secret)\s*[:=]/i.test(candidate.instructions))
-        throw new Error("Invalid or sensitive skill candidate");
-    const items = await load();
-    if (items.some((item) => item.id === candidate.id || item.name === candidate.name))
-        throw new Error("Duplicate skill candidate");
-    const result = {
-        ...candidate,
-        version: "1.0.0",
-        status: "candidate",
-        verification: "unverified",
-        createdAt: new Date().toISOString(),
-    };
-    await save([...items, result]);
-    return result;
-}
-export async function listSkillCandidates() {
-    return load();
-}
-export async function loadPromotedSkills(prompt, maxBytes = 32_000) {
-    const normalizedPrompt = prompt.toLocaleLowerCase();
-    const candidates = (await load()).filter((candidate) => candidate.status === "promoted" &&
-        candidate.verification === "owner-reviewed");
-    const selected = [];
-    let bytes = 0;
-    for (const candidate of candidates) {
-        const aliases = [candidate.id, candidate.name].map((value) => value.toLocaleLowerCase().replaceAll("-", " "));
-        if (!aliases.some((alias) => normalizedPrompt.includes(alias)))
-            continue;
-        const remaining = maxBytes - bytes;
-        if (remaining <= 0)
-            break;
-        const size = Buffer.byteLength(candidate.instructions);
-        if (size <= remaining) {
-            selected.push({ ...candidate, truncated: false });
-            bytes += size;
-            continue;
-        }
-        // A usable pointer: the store file and the command that prints it. The store is not
-        // granted to restricted providers because it also holds unreviewed candidates.
-        const marker = `\n[truncated to the run budget; full text: entry id "${candidate.id}" in \`ocean skill list\` or ${file()}]`;
-        const markerBytes = Buffer.byteLength(marker);
-        if (remaining <= markerBytes)
-            break;
-        const instructions = `${truncateUtf8(candidate.instructions, remaining - markerBytes)}${marker}`;
-        selected.push({ ...candidate, instructions, truncated: true });
-        bytes += Buffer.byteLength(instructions);
-    }
-    return selected;
-}
-export async function learnSkillFromSession(sessionId, openStore) {
-    const store = await openStore();
-    try {
-        const session = store.get(sessionId);
-        if (!session)
-            throw new Error(`Session not found: ${sessionId}`);
-        if (session.status !== "completed")
-            throw new Error(`Only completed sessions can teach a skill: ${session.status}`);
-        if (!store
-            .listEvents(sessionId)
-            .some((event) => event.type === "evidence" &&
-            /"result"\s*:\s*"proven"/.test(event.data)))
-            throw new Error("Session lacks independently recorded successful evidence");
-        const instructions = store
-            .listEvents(sessionId)
-            .filter((event) => event.type === "provider_output" ||
-            event.type === "text" ||
-            event.type === "json")
-            .map((event) => redactRuntimeText(event.data).trim())
-            .filter(Boolean)
-            .join("\n\n")
-            .slice(0, 32_000);
-        if (!instructions)
-            throw new Error("Session has no provider output to learn from");
-        const id = `learned-${session.provider}-${sessionId.slice(0, 8)}`;
-        return addSkillCandidate({
-            id,
-            name: `Learned ${session.provider} skill`,
-            instructions,
-            sourceSessionId: sessionId,
-        });
-    }
-    finally {
-        store.close();
-    }
-}
-export async function reviewSkillCandidate(id, status) {
-    const items = await load();
-    const item = items.find((candidate) => candidate.id === id);
-    if (!item)
-        throw new Error(`Skill candidate not found: ${id}`);
-    item.status = status;
-    item.verification = status === "promoted" ? "owner-reviewed" : "unverified";
-    await save(items);
-    return item;
-}
-//# sourceMappingURL=skill-curation.js.map

package/node_modules/@ocean/market/dist/skills/task-observer.js

@@ -1,165 +0,0 @@
-import { createHash } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { redactRuntimeText } from "@ocean/core/domain/redaction/redaction.js";
-import { oceanPath, SYSTEM_DIR } from "@ocean/core/shared/paths.js";
-import { addSkillCandidate } from "./skill-curation.js";
-const observationsFile = () => oceanPath(SYSTEM_DIR, "skills", "observations.json");
-async function load() {
-    try {
-        return JSON.parse(await readFile(observationsFile(), "utf8"));
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return [];
-        throw error;
-    }
-}
-async function save(items) {
-    await mkdir(path.dirname(observationsFile()), { recursive: true });
-    await writeFile(observationsFile(), `${JSON.stringify(items.slice(-200), null, 2)}\n`, { mode: 0o600 });
-}
-function observationId(sessionId, signalType, summary) {
-    return `obs-${createHash("sha256").update(`${sessionId}:${signalType}:${summary}`).digest("hex").slice(0, 16)}`;
-}
-const CORRECTION_PATTERN = /\bno,|\bactually,|\bnot that\b|\binstead of\b|\bshould use\b|\bthat'?s wrong\b/i;
-function userInputTexts(events) {
-    return events
-        .filter((event) => event.type === "user_input")
-        .map((event) => ({
-        id: event.eventId,
-        text: redactRuntimeText(event.data).replace(/\s+/g, " ").trim(),
-    }))
-        .filter((event) => event.text.length > 12)
-        .slice(0, 80);
-}
-// True when the user pushed back in this session ("no, use X", "that's wrong").
-export function hasUserCorrection(events) {
-    return userInputTexts(events).some((event) => CORRECTION_PATTERN.test(event.text));
-}
-// What a completed, proven session is worth remembering. Pure: reads events, writes nothing.
-export function detectSessionSignals(events) {
-    const proven = events.filter((event) => event.type === "evidence" && /"result"\s*:\s*"proven"/.test(event.data));
-    if (!proven.length)
-        return [];
-    const outputs = events
-        .filter((event) => ["provider_output", "text", "json"].includes(event.type))
-        .map((event) => ({
-        id: event.eventId,
-        text: redactRuntimeText(event.data).replace(/\s+/g, " ").trim(),
-    }))
-        .filter((event) => event.text.length > 12)
-        .slice(0, 80);
-    const userInputs = userInputTexts(events);
-    const candidates = [];
-    const decisions = outputs.filter((event) => /\bdecision\s*:/i.test(event.text));
-    if (decisions.length)
-        candidates.push({
-            signalType: "explicit-decision",
-            summary: decisions[0].text.slice(0, 500),
-            refs: decisions.slice(0, 4).map((event) => `event:${event.id}`),
-            confidence: 0.9,
-        });
-    const counts = new Map();
-    for (const event of outputs) {
-        const normalized = event.text.toLocaleLowerCase();
-        const current = counts.get(normalized) ?? { count: 0, refs: [] };
-        current.count += 1;
-        current.refs.push(`event:${event.id}`);
-        counts.set(normalized, current);
-    }
-    const repeated = [...counts.entries()].find(([, value]) => value.count >= 2);
-    if (repeated)
-        candidates.push({
-            signalType: "repeated-procedure",
-            summary: repeated[0].slice(0, 500),
-            refs: repeated[1].refs.slice(0, 4),
-            confidence: 0.8,
-        });
-    const corrections = userInputs.filter((event) => CORRECTION_PATTERN.test(event.text));
-    if (corrections.length)
-        candidates.push({
-            signalType: "repeated-correction",
-            summary: corrections[0].text.slice(0, 500),
-            refs: corrections.slice(0, 4).map((event) => `event:${event.id}`),
-            confidence: 0.7,
-        });
-    return candidates;
-}
-export async function observeSessionWithStore(store, sessionId) {
-    const session = store.get(sessionId);
-    if (!session)
-        throw new Error(`Session not found: ${sessionId}`);
-    if (session.status !== "completed")
-        return [];
-    const events = store.listEvents(sessionId);
-    const candidates = detectSessionSignals(events);
-    const items = await load();
-    const created = [];
-    for (const candidate of candidates.slice(0, 4)) {
-        const id = observationId(sessionId, candidate.signalType, candidate.summary);
-        if (items.some((item) => item.observationId === id))
-            continue;
-        created.push({
-            observationId: id,
-            sourceSessionId: sessionId,
-            taskId: session.taskId,
-            profileId: session.profile,
-            signalType: candidate.signalType,
-            summary: candidate.summary,
-            evidenceRefs: candidate.refs,
-            confidence: candidate.confidence,
-            status: "observed",
-            createdAt: new Date().toISOString(),
-            reviewedAt: null,
-            skillCandidateId: null,
-        });
-    }
-    if (created.length)
-        await save([...items, ...created]);
-    return created;
-}
-export async function observeSession(sessionId, openStore) {
-    const store = await openStore();
-    try {
-        return await observeSessionWithStore(store, sessionId);
-    }
-    finally {
-        store.close();
-    }
-}
-export async function listObservations() {
-    return load();
-}
-/**
- * Approving an observation creates the skill candidate it was promising —
- * reviewObservation used to only flip a status flag with nothing downstream.
- * A duplicate or invalid candidate (see addSkillCandidate) leaves the
- * approval standing but skillCandidateId null; the summary is short and
- * redacted, so this should be rare.
- */
-export async function reviewObservation(observationIdValue, status) {
-    const items = await load();
-    const item = items.find((candidate) => candidate.observationId === observationIdValue);
-    if (!item)
-        throw new Error(`Observation not found: ${observationIdValue}`);
-    item.status = status;
-    item.reviewedAt = new Date().toISOString();
-    if (status === "approved" && !item.skillCandidateId) {
-        try {
-            const candidate = await addSkillCandidate({
-                id: `learned-${item.observationId.slice(4, 16)}`,
-                name: `Learned: ${item.signalType} (${item.observationId.slice(4, 10)})`,
-                instructions: item.summary,
-                sourceSessionId: item.sourceSessionId,
-            });
-            item.skillCandidateId = candidate.id;
-        }
-        catch {
-            // Duplicate id/name or invalid content — approval stands, no candidate.
-        }
-    }
-    await save(items);
-    return item;
-}
-//# sourceMappingURL=task-observer.js.map