@haaaiawd/second-nature 0.1.16 → 0.1.18

package/runtime/cli/read-models/types.d.ts

@@ -1,79 +1,79 @@
-export interface RuntimeSummary {
-    host: "openclaw-plugin";
-    serviceStatus: "idle" | "running" | "degraded" | "unknown";
-    updatedAt: string;
-}
-export interface RhythmSummary {
-    mode: "active" | "quiet" | "maintenance_only" | "paused_for_interrupt" | "unknown";
-    windowId?: string;
-}
-export interface QuietSummary {
-    mode: "active" | "quiet" | "maintenance_only" | "paused_for_interrupt" | "unknown";
-    lastEvent?: string;
-    interrupted?: boolean;
-}
-export interface ConnectorSummary {
-    platformId: string;
-    status: "healthy" | "degraded" | "blocked" | "unknown";
-    channel?: string;
-    failureClass?: string;
-}
-export interface CredentialSummary {
-    platformId: string;
-    status: "missing" | "pending_verification" | "active" | "expired" | "revoked" | "failed";
-    nextStep?: string;
-}
-export interface RiskSummary {
-    level: "low" | "medium" | "high";
-    flags: string[];
-}
-export interface StatusReadModel {
-    runtime: RuntimeSummary;
-    rhythm: RhythmSummary;
-    quiet: QuietSummary;
-    connectors: ConnectorSummary[];
-    credentials: CredentialSummary[];
-    risk: RiskSummary;
-}
-export interface DailyReportReadModel {
-    day: string;
-    summary: string;
-    highlights: string[];
-    sourceRefs: string[];
-}
-export interface QuietReadModel {
-    scope?: string;
-    mode: "active" | "quiet" | "maintenance_only" | "paused_for_interrupt" | "unknown";
-    sourceCount: number;
-    reportCount: number;
-    recentJournalCount: number;
-}
-export interface SessionDetailReadModel {
-    requestedSessionId: string;
-    traceId: string;
-    decisionCount: number;
-    attemptCount: number;
-    governanceCount: number;
-    keyFactors: string[];
-    evidenceRefs: string[];
-}
-export interface CredentialReadModel {
-    platformId: string;
-    status: "missing" | "pending_verification" | "active" | "expired" | "revoked" | "failed";
-    verificationDeadline?: string;
-    attemptsRemaining?: number;
-    nextStep?: string;
-}
-export type ExplainSubjectKind = "decision" | "platform-selection" | "outreach" | "soul-change" | "fallback" | "probe" | "delivery" | "report" | "source_ref";
-export interface ExplainReadModel {
-    subjectType: ExplainSubjectKind;
-    conclusion: string;
-    keyFactors: string[];
-    evidenceRefs: string[];
-    policyRefs?: string[];
-    requiredUserInput?: string[];
-    nextStep?: string;
-    /** Operator / lived-experience audit warnings (e.g. no user-visible contact) */
-    warnings?: string[];
-    relatedAuditEventIds?: string[];
-}
+export interface RuntimeSummary {
+    host: "openclaw-plugin";
+    serviceStatus: "idle" | "running" | "degraded" | "unknown";
+    updatedAt: string;
+}
+export interface RhythmSummary {
+    mode: "active" | "quiet" | "maintenance_only" | "paused_for_interrupt" | "unknown";
+    windowId?: string;
+}
+export interface QuietSummary {
+    mode: "active" | "quiet" | "maintenance_only" | "paused_for_interrupt" | "unknown";
+    lastEvent?: string;
+    interrupted?: boolean;
+}
+export interface ConnectorSummary {
+    platformId: string;
+    status: "healthy" | "degraded" | "blocked" | "unknown";
+    channel?: string;
+    failureClass?: string;
+}
+export interface CredentialSummary {
+    platformId: string;
+    status: "missing" | "pending_verification" | "active" | "expired" | "revoked" | "failed";
+    nextStep?: string;
+}
+export interface RiskSummary {
+    level: "low" | "medium" | "high";
+    flags: string[];
+}
+export interface StatusReadModel {
+    runtime: RuntimeSummary;
+    rhythm: RhythmSummary;
+    quiet: QuietSummary;
+    connectors: ConnectorSummary[];
+    credentials: CredentialSummary[];
+    risk: RiskSummary;
+}
+export interface DailyReportReadModel {
+    day: string;
+    summary: string;
+    highlights: string[];
+    sourceRefs: string[];
+}
+export interface QuietReadModel {
+    scope?: string;
+    mode: "active" | "quiet" | "maintenance_only" | "paused_for_interrupt" | "unknown";
+    sourceCount: number;
+    reportCount: number;
+    recentJournalCount: number;
+}
+export interface SessionDetailReadModel {
+    requestedSessionId: string;
+    traceId: string;
+    decisionCount: number;
+    attemptCount: number;
+    governanceCount: number;
+    keyFactors: string[];
+    evidenceRefs: string[];
+}
+export interface CredentialReadModel {
+    platformId: string;
+    status: "missing" | "pending_verification" | "active" | "expired" | "revoked" | "failed";
+    verificationDeadline?: string;
+    attemptsRemaining?: number;
+    nextStep?: string;
+}
+export type ExplainSubjectKind = "decision" | "platform-selection" | "outreach" | "soul-change" | "fallback" | "probe" | "delivery" | "report" | "source_ref";
+export interface ExplainReadModel {
+    subjectType: ExplainSubjectKind;
+    conclusion: string;
+    keyFactors: string[];
+    evidenceRefs: string[];
+    policyRefs?: string[];
+    requiredUserInput?: string[];
+    nextStep?: string;
+    /** Operator / lived-experience audit warnings (e.g. no user-visible contact) */
+    warnings?: string[];
+    relatedAuditEventIds?: string[];
+}

package/runtime/cli/runtime/runtime-artifact-boundary.d.ts

@@ -1,28 +1,28 @@
-export type SurfaceMode = "host_safe_carrier" | "workspace_full_runtime" | "capability_probe";
-export type RuntimeArtifactModule = "runtime_registration" | "ops_router" | "heartbeat_bridge_adapter" | "host_capability_adapter" | "probe_runner" | "read_model_adapter" | "fallback_shell";
-export interface RuntimeArtifactBoundary {
-    surfaceMode: SurfaceMode;
-    includes: RuntimeArtifactModule[];
-    fallbackAllowed: boolean;
-    sourcePathDependencyAllowed: false;
-}
-export type ResolvePackagedRuntimeResult = {
-    ok: true;
-    runtimeRoot: string;
-    boundary: RuntimeArtifactBoundary;
-    resolvedModules: Partial<Record<RuntimeArtifactModule, string>>;
-} | {
-    ok: false;
-    code: "runtime_artifact_missing" | "runtime_layout_incomplete";
-    message: string;
-    runtimeRoot: string;
-    missingPaths: string[];
-};
-/** Relative paths under `plugin/runtime/` that the packaging script must copy. */
-export declare const PACKAGED_RUNTIME_REQUIRED_ENTRIES: readonly string[];
-export declare function detectForbiddenSourcePathDependencies(sourceText: string): string[];
-export declare function defaultRuntimeArtifactBoundary(surfaceMode?: SurfaceMode): RuntimeArtifactBoundary;
-/**
- * Verify packaged plugin `runtime/` tree and entrypoints required for ADR-006 closure.
- */
-export declare function resolvePackagedRuntime(packageRoot: string): ResolvePackagedRuntimeResult;
+export type SurfaceMode = "host_safe_carrier" | "workspace_full_runtime" | "capability_probe";
+export type RuntimeArtifactModule = "runtime_registration" | "ops_router" | "heartbeat_bridge_adapter" | "host_capability_adapter" | "probe_runner" | "read_model_adapter" | "fallback_shell";
+export interface RuntimeArtifactBoundary {
+    surfaceMode: SurfaceMode;
+    includes: RuntimeArtifactModule[];
+    fallbackAllowed: boolean;
+    sourcePathDependencyAllowed: false;
+}
+export type ResolvePackagedRuntimeResult = {
+    ok: true;
+    runtimeRoot: string;
+    boundary: RuntimeArtifactBoundary;
+    resolvedModules: Partial<Record<RuntimeArtifactModule, string>>;
+} | {
+    ok: false;
+    code: "runtime_artifact_missing" | "runtime_layout_incomplete";
+    message: string;
+    runtimeRoot: string;
+    missingPaths: string[];
+};
+/** Relative paths under `plugin/runtime/` that the packaging script must copy. */
+export declare const PACKAGED_RUNTIME_REQUIRED_ENTRIES: readonly string[];
+export declare function detectForbiddenSourcePathDependencies(sourceText: string): string[];
+export declare function defaultRuntimeArtifactBoundary(surfaceMode?: SurfaceMode): RuntimeArtifactBoundary;
+/**
+ * Verify packaged plugin `runtime/` tree and entrypoints required for ADR-006 closure.
+ */
+export declare function resolvePackagedRuntime(packageRoot: string): ResolvePackagedRuntimeResult;

package/runtime/cli/runtime/runtime-artifact-boundary.js

@@ -1,94 +1,94 @@
-/**
- * Packaged runtime artifact boundary (cli-system / ADR-006).
- *
- * Core logic: resolve plugin-local `runtime/` layout produced by build-plugin-package;
- * forbid dev-only imports that reach repo `src/` from published surfaces.
- *
- * Boundaries: filesystem checks only; does not execute host loaders.
- *
- * Test coverage: tests/unit/cli/runtime-artifact-boundary.test.ts
- */
-import fs from "node:fs";
-import path from "node:path";
-/** Relative paths under `plugin/runtime/` that the packaging script must copy. */
-export const PACKAGED_RUNTIME_REQUIRED_ENTRIES = [
-    "cli/index.js",
-    "storage/index.js",
-    "observability/index.js",
-    "core/second-nature/index.js",
-    "core/second-nature/runtime/service-entry.js",
-    "guidance/index.js",
-    "connectors/index.js",
-    "shared/types/index.js",
-];
-const DEFAULT_INCLUDES = [
-    "runtime_registration",
-    "ops_router",
-    "heartbeat_bridge_adapter",
-    "read_model_adapter",
-    "fallback_shell",
-];
-const SOURCE_REPO_PATH_PATTERN = /(?:from\s+["']|import\s+["']|require\s*\(\s*["'])(?:\.\.\/)+src\//i;
-export function detectForbiddenSourcePathDependencies(sourceText) {
-    const hits = [];
-    const lines = sourceText.split(/\r?\n/);
-    for (let i = 0; i < lines.length; i += 1) {
-        const line = lines[i];
-        if (SOURCE_REPO_PATH_PATTERN.test(line)) {
-            hits.push(`line ${i + 1}: ${line.trim()}`);
-        }
-    }
-    return hits;
-}
-export function defaultRuntimeArtifactBoundary(surfaceMode = "workspace_full_runtime") {
-    return {
-        surfaceMode,
-        includes: [...DEFAULT_INCLUDES],
-        fallbackAllowed: true,
-        sourcePathDependencyAllowed: false,
-    };
-}
-/**
- * Verify packaged plugin `runtime/` tree and entrypoints required for ADR-006 closure.
- */
-export function resolvePackagedRuntime(packageRoot) {
-    const runtimeRoot = path.join(packageRoot, "runtime");
-    if (!fs.existsSync(runtimeRoot) || !fs.statSync(runtimeRoot).isDirectory()) {
-        return {
-            ok: false,
-            code: "runtime_artifact_missing",
-            message: `runtime directory missing under ${packageRoot}`,
-            runtimeRoot,
-            missingPaths: [runtimeRoot],
-        };
-    }
-    const missingPaths = [];
-    for (const rel of PACKAGED_RUNTIME_REQUIRED_ENTRIES) {
-        const abs = path.join(runtimeRoot, rel);
-        if (!fs.existsSync(abs)) {
-            missingPaths.push(abs);
-        }
-    }
-    if (missingPaths.length > 0) {
-        return {
-            ok: false,
-            code: "runtime_layout_incomplete",
-            message: "packaged runtime is missing one or more required compiled modules",
-            runtimeRoot,
-            missingPaths,
-        };
-    }
-    const resolvedModules = {
-        ops_router: path.join(runtimeRoot, "cli/index.js"),
-        runtime_registration: path.join(runtimeRoot, "core/second-nature/runtime/service-entry.js"),
-        heartbeat_bridge_adapter: path.join(runtimeRoot, "core/second-nature/heartbeat/index.js"),
-        read_model_adapter: path.join(runtimeRoot, "cli/read-models/index.js"),
-        fallback_shell: path.join(runtimeRoot, "cli/index.js"),
-    };
-    return {
-        ok: true,
-        runtimeRoot,
-        boundary: defaultRuntimeArtifactBoundary(),
-        resolvedModules,
-    };
-}
+/**
+ * Packaged runtime artifact boundary (cli-system / ADR-006).
+ *
+ * Core logic: resolve plugin-local `runtime/` layout produced by build-plugin-package;
+ * forbid dev-only imports that reach repo `src/` from published surfaces.
+ *
+ * Boundaries: filesystem checks only; does not execute host loaders.
+ *
+ * Test coverage: tests/unit/cli/runtime-artifact-boundary.test.ts
+ */
+import fs from "node:fs";
+import path from "node:path";
+/** Relative paths under `plugin/runtime/` that the packaging script must copy. */
+export const PACKAGED_RUNTIME_REQUIRED_ENTRIES = [
+    "cli/index.js",
+    "storage/index.js",
+    "observability/index.js",
+    "core/second-nature/index.js",
+    "core/second-nature/runtime/service-entry.js",
+    "guidance/index.js",
+    "connectors/index.js",
+    "shared/types/index.js",
+];
+const DEFAULT_INCLUDES = [
+    "runtime_registration",
+    "ops_router",
+    "heartbeat_bridge_adapter",
+    "read_model_adapter",
+    "fallback_shell",
+];
+const SOURCE_REPO_PATH_PATTERN = /(?:from\s+["']|import\s+["']|require\s*\(\s*["'])(?:\.\.\/)+src\//i;
+export function detectForbiddenSourcePathDependencies(sourceText) {
+    const hits = [];
+    const lines = sourceText.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i += 1) {
+        const line = lines[i];
+        if (SOURCE_REPO_PATH_PATTERN.test(line)) {
+            hits.push(`line ${i + 1}: ${line.trim()}`);
+        }
+    }
+    return hits;
+}
+export function defaultRuntimeArtifactBoundary(surfaceMode = "workspace_full_runtime") {
+    return {
+        surfaceMode,
+        includes: [...DEFAULT_INCLUDES],
+        fallbackAllowed: true,
+        sourcePathDependencyAllowed: false,
+    };
+}
+/**
+ * Verify packaged plugin `runtime/` tree and entrypoints required for ADR-006 closure.
+ */
+export function resolvePackagedRuntime(packageRoot) {
+    const runtimeRoot = path.join(packageRoot, "runtime");
+    if (!fs.existsSync(runtimeRoot) || !fs.statSync(runtimeRoot).isDirectory()) {
+        return {
+            ok: false,
+            code: "runtime_artifact_missing",
+            message: `runtime directory missing under ${packageRoot}`,
+            runtimeRoot,
+            missingPaths: [runtimeRoot],
+        };
+    }
+    const missingPaths = [];
+    for (const rel of PACKAGED_RUNTIME_REQUIRED_ENTRIES) {
+        const abs = path.join(runtimeRoot, rel);
+        if (!fs.existsSync(abs)) {
+            missingPaths.push(abs);
+        }
+    }
+    if (missingPaths.length > 0) {
+        return {
+            ok: false,
+            code: "runtime_layout_incomplete",
+            message: "packaged runtime is missing one or more required compiled modules",
+            runtimeRoot,
+            missingPaths,
+        };
+    }
+    const resolvedModules = {
+        ops_router: path.join(runtimeRoot, "cli/index.js"),
+        runtime_registration: path.join(runtimeRoot, "core/second-nature/runtime/service-entry.js"),
+        heartbeat_bridge_adapter: path.join(runtimeRoot, "core/second-nature/heartbeat/index.js"),
+        read_model_adapter: path.join(runtimeRoot, "cli/read-models/index.js"),
+        fallback_shell: path.join(runtimeRoot, "cli/index.js"),
+    };
+    return {
+        ok: true,
+        runtimeRoot,
+        boundary: defaultRuntimeArtifactBoundary(),
+        resolvedModules,
+    };
+}

package/runtime/connectors/base/contract.d.ts

@@ -1,87 +1,87 @@
-import type { CredentialContext, CredentialState } from "../../shared/types/credential.js";
-import { type FailureClass } from "./failure-taxonomy.js";
-export declare const CHANNEL_TYPES: readonly ["api_rest", "api_rpc", "a2a", "mcp", "cli", "skill", "browser"];
-export type ChannelType = (typeof CHANNEL_TYPES)[number];
-export declare const CAPABILITY_INTENTS: readonly ["feed.read", "post.publish", "comment.reply", "notification.list", "message.send", "agent.register", "agent.heartbeat", "work.discover", "task.claim"];
-export type CapabilityIntent = (typeof CAPABILITY_INTENTS)[number];
-export interface ConnectorRequest {
-    platformId: string;
-    intent: CapabilityIntent;
-    payload: Record<string, unknown>;
-    preferredChannel?: ChannelType;
-    timeoutMs?: number;
-    idempotencyKey?: string;
-    decisionId?: string;
-    intentId?: string;
-}
-export interface ExecutionPlan {
-    platformId: string;
-    intent: CapabilityIntent;
-    channel: ChannelType;
-    endpointMode: "rest_json" | "a2a_envelope" | "cli_stdout" | "skill_call";
-    idempotencyKey?: string;
-    /** True when selected channel is manifest-marked degraded (cli/skill/browser). */
-    degraded?: boolean;
-}
-export interface ConnectorResult<T> {
-    status: "success" | "retryable_failure" | "terminal_failure";
-    data?: T;
-    failureClass?: FailureClass;
-    retryAfterMs?: number;
-    metadata: {
-        platformId: string;
-        channel: ChannelType;
-        latencyMs: number;
-        degraded?: boolean;
-    };
-}
-export interface RawAttempt {
-    platformId: string;
-    channel: ChannelType;
-    latencyMs: number;
-    degraded?: boolean;
-    success: boolean;
-    payload?: unknown;
-    error?: unknown;
-}
-export interface CredentialContextPort {
-    loadCredentialState(platformId: string): Promise<CredentialContext>;
-}
-export interface CooldownLedgerPort {
-    loadCooldownState(platformId: string, intent: CapabilityIntent): Promise<{
-        blocked: boolean;
-        retryAfterMs?: number;
-    }>;
-}
-export interface RouteContextPort extends CredentialContextPort, CooldownLedgerPort {
-}
-export interface ConnectorManifestLike {
-    platformId: string;
-    supportedCapabilities: CapabilityIntent[];
-    channelPriority: ChannelType[];
-    credentialTypes: string[];
-    degradedChannels?: ChannelType[];
-    sourceRefPolicy?: {
-        minSourceRefs?: number;
-        rejectInlineSensitivePayload?: boolean;
-    };
-}
-export interface ConnectorManifestLoader {
-    loadManifest(platformId: string): ConnectorManifestLike;
-}
-export interface RoutePlanner {
-    planRoute(intent: CapabilityIntent, request: ConnectorRequest): Promise<ExecutionPlan>;
-}
-export interface ExecutionRunner {
-    run(plan: ExecutionPlan, request: ConnectorRequest): Promise<RawAttempt>;
-}
-export interface ConnectorExecutionPort {
-    executeCapability(intent: CapabilityIntent, request: ConnectorRequest): Promise<ConnectorResult<unknown>>;
-}
-export declare function normalizeOutcome(attempt: RawAttempt): ConnectorResult<unknown>;
-export declare function createConnectorContractCore(input: {
-    manifestLoader: ConnectorManifestLoader;
-    routePlanner: RoutePlanner;
-    executionRunner: ExecutionRunner;
-}): ConnectorExecutionPort;
-export declare function isCredentialActive(state: CredentialState): boolean;
+import type { CredentialContext, CredentialState } from "../../shared/types/credential.js";
+import { type FailureClass } from "./failure-taxonomy.js";
+export declare const CHANNEL_TYPES: readonly ["api_rest", "api_rpc", "a2a", "mcp", "cli", "skill", "browser"];
+export type ChannelType = (typeof CHANNEL_TYPES)[number];
+export declare const CAPABILITY_INTENTS: readonly ["feed.read", "post.publish", "comment.reply", "notification.list", "message.send", "agent.register", "agent.heartbeat", "work.discover", "task.claim"];
+export type CapabilityIntent = (typeof CAPABILITY_INTENTS)[number];
+export interface ConnectorRequest {
+    platformId: string;
+    intent: CapabilityIntent;
+    payload: Record<string, unknown>;
+    preferredChannel?: ChannelType;
+    timeoutMs?: number;
+    idempotencyKey?: string;
+    decisionId?: string;
+    intentId?: string;
+}
+export interface ExecutionPlan {
+    platformId: string;
+    intent: CapabilityIntent;
+    channel: ChannelType;
+    endpointMode: "rest_json" | "a2a_envelope" | "cli_stdout" | "skill_call";
+    idempotencyKey?: string;
+    /** True when selected channel is manifest-marked degraded (cli/skill/browser). */
+    degraded?: boolean;
+}
+export interface ConnectorResult<T> {
+    status: "success" | "retryable_failure" | "terminal_failure";
+    data?: T;
+    failureClass?: FailureClass;
+    retryAfterMs?: number;
+    metadata: {
+        platformId: string;
+        channel: ChannelType;
+        latencyMs: number;
+        degraded?: boolean;
+    };
+}
+export interface RawAttempt {
+    platformId: string;
+    channel: ChannelType;
+    latencyMs: number;
+    degraded?: boolean;
+    success: boolean;
+    payload?: unknown;
+    error?: unknown;
+}
+export interface CredentialContextPort {
+    loadCredentialState(platformId: string): Promise<CredentialContext>;
+}
+export interface CooldownLedgerPort {
+    loadCooldownState(platformId: string, intent: CapabilityIntent): Promise<{
+        blocked: boolean;
+        retryAfterMs?: number;
+    }>;
+}
+export interface RouteContextPort extends CredentialContextPort, CooldownLedgerPort {
+}
+export interface ConnectorManifestLike {
+    platformId: string;
+    supportedCapabilities: CapabilityIntent[];
+    channelPriority: ChannelType[];
+    credentialTypes: string[];
+    degradedChannels?: ChannelType[];
+    sourceRefPolicy?: {
+        minSourceRefs?: number;
+        rejectInlineSensitivePayload?: boolean;
+    };
+}
+export interface ConnectorManifestLoader {
+    loadManifest(platformId: string): ConnectorManifestLike;
+}
+export interface RoutePlanner {
+    planRoute(intent: CapabilityIntent, request: ConnectorRequest): Promise<ExecutionPlan>;
+}
+export interface ExecutionRunner {
+    run(plan: ExecutionPlan, request: ConnectorRequest): Promise<RawAttempt>;
+}
+export interface ConnectorExecutionPort {
+    executeCapability(intent: CapabilityIntent, request: ConnectorRequest): Promise<ConnectorResult<unknown>>;
+}
+export declare function normalizeOutcome(attempt: RawAttempt): ConnectorResult<unknown>;
+export declare function createConnectorContractCore(input: {
+    manifestLoader: ConnectorManifestLoader;
+    routePlanner: RoutePlanner;
+    executionRunner: ExecutionRunner;
+}): ConnectorExecutionPort;
+export declare function isCredentialActive(state: CredentialState): boolean;