@brunobracaioli/aibrain 0.2.0-beta.1 → 0.3.0-beta.13

package/dist/cli.mjs

@@ -15,12 +15,21 @@ import {
   stateRoot,
   tokenDigest,
 } from './state.mjs';
-import { isTestedNativeVersion, nativeVersion, platformCheck, resolveNative } from './platform.mjs';
+import {
+  isTestedNativeVersion,
+  nativeVersion,
+  nativeVersionDiagnostic,
+  platformCheck,
+  resolveNative,
+} from './platform.mjs';
 import { launchClaude, launchCodex } from './launch.mjs';
+import { codexCompatibilityError, resolveCodexCompatibility } from './codex-compatibility.mjs';
 import { providerFreeProbe } from './mcp.mjs';
 import { codexPolicyJson, makePolicy, publicPolicy, isProfile } from './policy.mjs';
+import { readDiagnostics } from './claude-observation.mjs';
+import { readCodexDiagnostics } from './codex-diagnostics.mjs';
 
-const VERSION = '0.2.0-beta.1';
+const VERSION = '0.3.0-beta.13';
 const ENDPOINT = 'https://mcp.ai-brain.aisac.cloud/mcp';
 const PACKAGE_ROOT = dirname(fileURLToPath(import.meta.url));
 const LEGACY_DISCLOSURE_VERSION = 'aibrain-paid-context-v1-2026-10-09';
@@ -29,8 +38,15 @@ function usage() {
   console.log(
     `aibrain ${VERSION}\n\nUsage:\n  aibrain setup [--client claude|codex|both] [--context-profile upstream|conservative]\n    [--compact-at 1..95] [--keep-threshold 0..1] [--preserve-recent 1..100]\n    [--min-reduction 0..1] [--truncate-head-chars 0..4096]\n    [--max-state-tokens 1000..25000] [--max-request-tokens 1000..30000]\n    [--tool-policy compatible|read_only] [--goal TEXT]\n  aibrain doctor [--json]\n  aibrain status [--json]\n  aibrain disable\n  aibrain setup --undo\n  aibrain claude [-- native-args...]\n  aibrain codex [-- native-args...]\n\nPolicy notes:\n  Automatic monitoring asks for compaction at compact-at percent; state/request\n  limits are estimated upper bounds and do not override server quotas.\n  min-reduction, truncate-head-chars and tool-policy apply only to Claude;\n  Codex keeps native compaction and same-session recovery.`,
   );
+  console.log(
+    'Telemetry: setup --telemetry on|off (omitted preserves the stored choice; fresh defaults off).',
+  );
+  console.log(
+    'Claude shadow: setup --claude-shadow on|off and --claude-diagnostics on|off (preview stays applied=false).',
+  );
 }
 
+// Telemetry is opt-in; setup omits the flag to preserve the stored choice.
 function version() {
   console.log(`aibrain ${VERSION}`);
 }
@@ -141,7 +157,13 @@ function selectedPolicy(args, previous) {
   const explicitProfile = option(args, '--context-profile');
   const explicitV2 =
     explicitProfile !== undefined ||
-    args.some((item) => POLICY_OPTION_NAMES.has(item) || item === '--goal');
+    args.some(
+      (item) =>
+        POLICY_OPTION_NAMES.has(item) ||
+        item === '--goal' ||
+        item === '--claude-shadow' ||
+        item === '--claude-diagnostics',
+    );
   if (previous?.schemaVersion === 1 && !explicitV2)
     return { v2: false, policy: makePolicy('conservative') };
   const inherited = previous?.schemaVersion === 2 ? previous.context : undefined;
@@ -188,6 +210,100 @@ function policySummary(policy) {
   return JSON.stringify({ effective: publicPolicy(policy) });
 }
 
+/** @param {string[]} args @param {Awaited<ReturnType<typeof readConfig>>} previous */
+function telemetrySelection(args, previous) {
+  const requested = option(args, '--telemetry');
+  if (requested !== undefined && requested !== 'on' && requested !== 'off')
+    throw new Error('invalid_telemetry');
+  const current = previous?.telemetry;
+  const enabled = requested === undefined ? current?.enabled === true : requested === 'on';
+  return {
+    enabled,
+    disclosedAt: current?.disclosedAt ?? null,
+  };
+}
+
+/** @param {string[]} args @param {Awaited<ReturnType<typeof readConfig>>} previous */
+function claudeObservationSelection(args, previous) {
+  const shadow = option(args, '--claude-shadow');
+  const diagnostics = option(args, '--claude-diagnostics');
+  for (const value of [shadow, diagnostics]) {
+    if (value !== undefined && value !== 'on' && value !== 'off')
+      throw new Error('invalid_claude_observation');
+  }
+  const current = previous?.claudeObservation;
+  const shadowEnabled = shadow === undefined ? current?.shadowEnabled === true : shadow === 'on';
+  const diagnosticsEnabled =
+    diagnostics === undefined ? current?.diagnosticsEnabled === true : diagnostics === 'on';
+  const enabled = shadowEnabled || diagnosticsEnabled;
+  return {
+    shadowEnabled,
+    diagnosticsEnabled,
+    disclosedAt: enabled
+      ? (current?.disclosedAt ?? new Date().toISOString())
+      : (current?.disclosedAt ?? null),
+  };
+}
+
+/** @param {Awaited<ReturnType<typeof readConfig>>} previous Disable future-launch egress locally without probing the server or requiring native clients. */
+async function disableTelemetryLocally(previous) {
+  if (!previous) {
+    console.log('Context dashboard telemetry is already disabled; no local setup exists.');
+    return;
+  }
+  const root = await ensureStateRoot();
+  await atomicJson(`${root}/config.json`, {
+    ...previous,
+    telemetry: {
+      enabled: false,
+      disclosedAt: previous.telemetry?.disclosedAt ?? null,
+    },
+  });
+  console.log(
+    `Context dashboard telemetry disabled for future launches in ${root}. Close and restart currently monitored sessions to stop their launch-captured reporting settings.`,
+  );
+}
+
+/** @param {Awaited<ReturnType<typeof readConfig>>} previous @param {string[]} args */
+async function updateLocalOptOut(previous, args) {
+  const allowed = new Set([
+    '--accept-disclosure',
+    '--telemetry',
+    'off',
+    '--claude-shadow',
+    '--claude-diagnostics',
+  ]);
+  const hasOptOut =
+    args.includes('--telemetry') ||
+    args.includes('--claude-shadow') ||
+    args.includes('--claude-diagnostics');
+  if (!hasOptOut || args.some((argument) => !allowed.has(argument))) return false;
+  const requestedOff =
+    option(args, '--telemetry') === 'off' ||
+    option(args, '--claude-shadow') === 'off' ||
+    option(args, '--claude-diagnostics') === 'off';
+  if (!requestedOff) return false;
+  if (!previous) {
+    console.log(
+      'AI Brain local opt-out already has no configured account; no provider call was made.',
+    );
+    return true;
+  }
+  const root = await ensureStateRoot();
+  const observation = claudeObservationSelection(args, previous);
+  const telemetry = telemetrySelection(args, previous);
+  await atomicJson(`${root}/config.json`, {
+    ...previous,
+    telemetry: {
+      enabled: telemetry.enabled,
+      disclosedAt: telemetry.disclosedAt,
+    },
+    claudeObservation: observation,
+  });
+  console.log(`Local observation settings updated in ${root}; no provider call was made.`);
+  return true;
+}
+
 /** @param {string} endpoint */
 function validateEndpoint(endpoint) {
   if (endpoint.length > 2048) throw new Error('endpoint_too_long');
@@ -209,9 +325,28 @@ function validateEndpoint(endpoint) {
     throw new Error('endpoint_credentials_query_or_fragment_rejected');
 }
 
-/** @param {string[]} args @param {string} endpoint @param {import('./policy.mjs').ContextPolicy} policy @param {string} disclosureVersion */
-async function disclosureAccepted(args, endpoint, policy, disclosureVersion) {
-  const disclosure = `AI Brain sends selected task/message/tool-input projections through AI Brain to JEV/TypeSafe at https://api.typesafe.ai/v1/systemone. Retention profile: ${policy.profile}; compact at ${policy.compactAtPercent}%; keep threshold ${policy.keepThreshold}; recent messages ${policy.preserveRecentMessages}; Claude tool policy ${policy.toolPolicy}. Selected projections are bounded and filtered; private local recovery files remain on this machine. Hidden fields and redaction limits apply; no zero-retention or complete-redaction claim. Goal present: ${policy.goal !== undefined}. Endpoint: ${endpoint}. Disclosure: ${disclosureVersion}.`;
+/** @param {string[]} args @param {string} endpoint @param {import('./policy.mjs').ContextPolicy} policy @param {string} disclosureVersion @param {boolean} telemetryEnabled @param {boolean} shadowEnabled @param {boolean} diagnosticsEnabled */
+async function disclosureAccepted(
+  args,
+  endpoint,
+  policy,
+  disclosureVersion,
+  telemetryEnabled,
+  shadowEnabled,
+  diagnosticsEnabled,
+) {
+  const telemetryDisclosure = telemetryEnabled
+    ? ' Operational telemetry is enabled: only a hashed native session key, random lifecycle identifiers, client version, phase, timestamps, numeric counts and allowed measurement/reason enums are sent for the authenticated Contexto dashboard. Prompts, notes, paths, tool names, credentials and raw errors are excluded; the dashboard shows a 30-day visible window and physical cleanup runs on the next successful daily cleanup; delivery failure does not affect compaction.'
+    : '';
+  const shadowDisclosure =
+    shadowEnabled || option(args, '--claude-shadow') === 'on'
+      ? ' Claude shadow observation is enabled: bounded redacted task and tool metadata may be sent through AI Brain to the existing JEV selection service for hypothetical decisions; native Claude results remain unchanged and private diagnostics exclude prompts, paths, inputs, result bodies, credentials and raw errors.'
+      : '';
+  const diagnosticsDisclosure =
+    diagnosticsEnabled || option(args, '--claude-diagnostics') === 'on'
+      ? ' Claude compact diagnostics are enabled locally: bounded stages, enums, pseudonymous identifiers, timestamps and numeric measurements are stored in private rotated logs; prompts, paths, inputs, result bodies, credentials and raw errors are excluded.'
+      : '';
+  const disclosure = `AI Brain sends selected task/message/tool-input projections through AI Brain to JEV/TypeSafe at https://api.typesafe.ai/v1/systemone. Retention profile: ${policy.profile}; compact at ${policy.compactAtPercent}%; keep threshold ${policy.keepThreshold}; recent messages ${policy.preserveRecentMessages}; Claude tool policy ${policy.toolPolicy}. Selected projections are bounded and filtered; private local recovery files remain on this machine. Hidden fields and redaction limits apply; no zero-retention or complete-redaction claim. Goal present: ${policy.goal !== undefined}.${telemetryDisclosure}${shadowDisclosure}${diagnosticsDisclosure} Endpoint: ${endpoint}. Disclosure: ${disclosureVersion}.`;
   if (args.includes('--accept-disclosure')) {
     console.log(disclosure);
     return true;
@@ -241,6 +376,9 @@ async function setup(args) {
       '--context-profile',
       ...POLICY_OPTION_NAMES,
       '--goal',
+      '--telemetry',
+      '--claude-shadow',
+      '--claude-diagnostics',
     ]),
     new Set([
       '--client',
@@ -249,25 +387,51 @@ async function setup(args) {
       '--context-profile',
       ...POLICY_OPTION_NAMES,
       '--goal',
+      '--telemetry',
+      '--claude-shadow',
+      '--claude-diagnostics',
     ]),
   );
   if (args.includes('--undo') && args.length !== 1)
     throw new Error('setup_undo_cannot_have_options');
   const previous = await readConfig();
+  if (await updateLocalOptOut(previous, args)) return;
+  const localOptOut =
+    option(args, '--telemetry') === 'off' &&
+    args.every((argument) => ['--telemetry', 'off', '--accept-disclosure'].includes(argument));
+  if (localOptOut) return disableTelemetryLocally(previous);
   const platform = platformCheck();
   if (!platform.ok) throw new Error(`${platform.code}:${platform.message}`);
   const clients = option(args, '--client') ?? 'both';
   if (!['claude', 'codex', 'both'].includes(clients)) throw new Error('invalid_client');
+  if (
+    clients === 'codex' &&
+    (option(args, '--claude-shadow') !== undefined ||
+      option(args, '--claude-diagnostics') !== undefined)
+  )
+    throw new Error('claude_observation_requires_claude_client');
   const endpoint = option(args, '--endpoint') ?? ENDPOINT;
   validateEndpoint(endpoint);
   const selection = selectedPolicy(args, previous);
+  const telemetry = telemetrySelection(args, previous);
+  const claudeObservation = claudeObservationSelection(args, previous);
   const policy = selection.policy;
   const disclosureVersion = selection.v2
     ? DISCLOSURE_VERSION
     : (previous?.disclosureVersion ?? LEGACY_DISCLOSURE_VERSION);
   if (selection.v2 && (clients === 'codex' || clients === 'both')) codexPolicyJson(policy);
   console.log(`Effective context policy ${policySummary(policy)}`);
-  if (!(await disclosureAccepted(args, endpoint, policy, disclosureVersion)))
+  if (
+    !(await disclosureAccepted(
+      args,
+      endpoint,
+      policy,
+      disclosureVersion,
+      telemetry.enabled,
+      claudeObservation.shadowEnabled,
+      claudeObservation.diagnosticsEnabled,
+    ))
+  )
     throw new Error('disclosure_not_accepted');
   const root = await ensureStateRoot();
   const tokenPath = option(args, '--token-file');
@@ -281,13 +445,16 @@ async function setup(args) {
   if ((clients === 'codex' || clients === 'both') && (!codex || !node))
     throw new Error('codex_or_node_not_found');
   const claudeVersion = claude ? nativeVersion(claude) : null;
-  const codexVersion = codex ? nativeVersion(codex) : null;
   const claudeSupported = claudeVersion !== null && isTestedNativeVersion('claude', claudeVersion);
-  const codexSupported = codexVersion !== null && isTestedNativeVersion('codex', codexVersion);
   if ((clients === 'claude' || clients === 'both') && !claudeSupported)
-    throw new Error('claude_version_unverified');
-  if ((clients === 'codex' || clients === 'both') && !codexSupported)
-    throw new Error('codex_version_unverified');
+    throw new Error(nativeVersionDiagnostic('claude', claudeVersion ?? ''));
+  let codexCompatibility = null;
+  if (clients === 'codex' || clients === 'both') {
+    codexCompatibility = codex ? await resolveCodexCompatibility(codex) : null;
+    if (codexCompatibility?.status === 'rejected')
+      throw new Error(codexCompatibilityError(codexCompatibility));
+  }
+  const codexVersion = codexCompatibility?.version ?? (codex ? nativeVersion(codex) : null);
   const config = {
     schemaVersion: selection.v2 ? 2 : 1,
     packageVersion: VERSION,
@@ -299,6 +466,13 @@ async function setup(args) {
     codexVersion,
     packageRoot: PACKAGE_ROOT,
     ...(selection.v2 ? { context: policy } : {}),
+    telemetry: {
+      enabled: telemetry.enabled,
+      disclosedAt: telemetry.enabled
+        ? (telemetry.disclosedAt ?? new Date().toISOString())
+        : telemetry.disclosedAt,
+    },
+    claudeObservation,
   };
   let probe;
   try {
@@ -345,10 +519,16 @@ async function doctor(json) {
     codex: resolveNative('codex'),
     node: resolveNative('node'),
   };
-  const nativeVersions = {
+  const rawNativeVersions = {
     claude: native.claude ? nativeVersion(native.claude) : '',
     codex: native.codex ? nativeVersion(native.codex) : '',
   };
+  const codexCompatibility =
+    native.codex !== null ? await resolveCodexCompatibility(native.codex) : null;
+  const nativeVersions = {
+    ...rawNativeVersions,
+    codex: codexCompatibility?.version ?? rawNativeVersions.codex,
+  };
   const needsClaude = config?.clientSelection === 'claude' || config?.clientSelection === 'both';
   const needsCodex = config?.clientSelection === 'codex' || config?.clientSelection === 'both';
   const nativeReady =
@@ -357,7 +537,8 @@ async function doctor(json) {
     (!needsCodex ||
       (native.codex !== null &&
         native.node !== null &&
-        isTestedNativeVersion('codex', nativeVersions.codex)));
+        (codexCompatibility?.status === 'qualified' ||
+          codexCompatibility?.status === 'protocol_match')));
   const result = {
     version: VERSION,
     platform: platform.ok ? process.platform : platform.code,
@@ -371,8 +552,23 @@ async function doctor(json) {
       node: native.node !== null,
     },
     nativeVersions,
+    codexCompatibility: codexCompatibility?.status ?? 'unavailable',
+    codexCompatibilityReason: codexCompatibility?.reason ?? 'codex_not_found',
+    codexCompatibilityVersion: codexCompatibility?.version ?? null,
     nativeReady,
     context: publicPolicy(policy),
+    telemetry: {
+      enabled: config?.telemetry?.enabled === true,
+      disclosed:
+        config?.telemetry?.disclosedAt !== null && config?.telemetry?.disclosedAt !== undefined,
+    },
+    claudeObservation: {
+      shadowEnabled: config?.claudeObservation?.shadowEnabled === true,
+      diagnosticsEnabled: config?.claudeObservation?.diagnosticsEnabled === true,
+      disclosed:
+        config?.claudeObservation?.disclosedAt !== null &&
+        config?.claudeObservation?.disclosedAt !== undefined,
+    },
     paidOrPilot: probe?.ok
       ? 'provider_free_probe_ok; paid entitlement or pilot invitation remains server-enforced'
       : config
@@ -396,6 +592,18 @@ async function status(json) {
     disclosed: config?.disclosureVersion !== undefined,
     schemaVersion: config?.schemaVersion ?? null,
     context: publicPolicy(policy),
+    telemetry: {
+      enabled: config?.telemetry?.enabled === true,
+      disclosed:
+        config?.telemetry?.disclosedAt !== null && config?.telemetry?.disclosedAt !== undefined,
+    },
+    claudeObservation: {
+      shadowEnabled: config?.claudeObservation?.shadowEnabled === true,
+      diagnosticsEnabled: config?.claudeObservation?.diagnosticsEnabled === true,
+      disclosed:
+        config?.claudeObservation?.disclosedAt !== null &&
+        config?.claudeObservation?.disclosedAt !== undefined,
+    },
     monitoredSession: null,
     monitoringStatus: 'not_observed',
   };
@@ -423,6 +631,27 @@ async function main(argv) {
     validateOptions(rest, new Set(['--json']), new Set());
     return status(rest.includes('--json'));
   }
+  if (command === 'diagnostics') {
+    validateOptions(
+      rest,
+      new Set(['--client', '--tail', '--json']),
+      new Set(['--client', '--tail']),
+    );
+    const requestedClient = option(rest, '--client');
+    if (requestedClient !== undefined && !['claude', 'codex'].includes(requestedClient))
+      throw new Error('diagnostics_client_unsupported');
+    const tail = Number(option(rest, '--tail') ?? '20');
+    if (!Number.isSafeInteger(tail) || tail < 1 || tail > 100)
+      throw new Error('invalid_diagnostics_tail');
+    const client = requestedClient ?? 'claude';
+    const records =
+      client === 'codex'
+        ? await readCodexDiagnostics(stateRoot(), tail)
+        : await readDiagnostics(stateRoot(), tail);
+    if (rest.includes('--json')) console.log(JSON.stringify({ client, records }));
+    else console.log(records);
+    return;
+  }
   if (command === 'disable') {
     if (rest.length > 0) throw new Error('disable_does_not_accept_options');
     return removeOwnedSetup();
@@ -439,12 +668,13 @@ async function main(argv) {
       (typeof config.claudeVersion !== 'string' ||
         !isTestedNativeVersion('claude', config.claudeVersion))
     )
-      throw new Error('claude_version_unverified');
-    if (
-      command === 'codex' &&
-      (typeof config.codexVersion !== 'string' ||
-        !isTestedNativeVersion('codex', config.codexVersion))
-    )
+      throw new Error(
+        nativeVersionDiagnostic(
+          'claude',
+          typeof config.claudeVersion === 'string' ? config.claudeVersion : '',
+        ),
+      );
+    if (command === 'codex' && typeof config.codexVersion !== 'string')
       throw new Error('codex_version_unverified');
     const root = stateRoot();
     const result = await (command === 'claude'