@inerrata-corporation/errata 2.0.0-dev.25 → 2.0.0-dev.27

package/errata.mjs

@@ -18827,7 +18827,41 @@ function communitySeeds(store, opts = {}) {
   }
   return seeds;
 }
-var JOINT_COMMUNITY_LABELS, JOINT_COMMUNITY_EDGES, DEFAULT_MIN_COMMUNITY_SIZE;
+function communityInductionRequests(store, opts = {}) {
+  const maxCommunities = opts.maxCommunities ?? 2;
+  const byCommunity = /* @__PURE__ */ new Map();
+  for (const label of JOINT_COMMUNITY_LABELS) {
+    for (const n of store.findNodesByLabel(label)) {
+      const cid = n.attrs["localCommunity"];
+      if (typeof cid !== "string") continue;
+      const cloudId = n.attrs["cloudNodeId"];
+      const l = byCommunity.get(cid) ?? [];
+      l.push({
+        id: n.id,
+        pulled: n.attrs["source"] === "cloud",
+        cloudId: typeof cloudId === "string" && cloudId !== n.id ? cloudId : null,
+        ts: n.lastUpdatedAt,
+        description: n.description
+      });
+      byCommunity.set(cid, l);
+    }
+  }
+  if (byCommunity.size === 0) return [];
+  return [...byCommunity.entries()].map(([cid, mem]) => ({ cid, mem, fresh: Math.max(...mem.map((m) => m.ts)) })).sort((a, b) => b.fresh - a.fresh).map(({ cid, mem }) => {
+    const ids = /* @__PURE__ */ new Set();
+    for (const m of mem) {
+      ids.add(m.id);
+      if (m.cloudId) ids.add(m.cloudId);
+    }
+    const freshestLocal = [...mem].filter((m) => !m.pulled).sort((a, b) => b.ts - a.ts)[0];
+    return {
+      communityId: cid,
+      members: [...ids].slice(0, 64),
+      context: (freshestLocal?.description ?? "recurring workspace problem cluster").slice(0, 200)
+    };
+  }).filter((r) => r.members.length >= MIN_INDUCTION_MEMBERS).slice(0, maxCommunities);
+}
+var JOINT_COMMUNITY_LABELS, JOINT_COMMUNITY_EDGES, DEFAULT_MIN_COMMUNITY_SIZE, MIN_INDUCTION_MEMBERS;
 var init_community2 = __esm({
   "../../packages/local-graph/src/community.ts"() {
     "use strict";
@@ -18853,6 +18887,7 @@ var init_community2 = __esm({
       "RELATES_TO"
     ];
     DEFAULT_MIN_COMMUNITY_SIZE = 2;
+    MIN_INDUCTION_MEMBERS = 3;
   }
 });
 
@@ -19496,6 +19531,7 @@ __export(src_exports, {
   causalChain: () => causalChain,
   claimId: () => claimId,
   clearRevisit: () => clearRevisit,
+  communityInductionRequests: () => communityInductionRequests,
   communitySeeds: () => communitySeeds,
   compareSemver: () => compareSemver,
   corroborateClaim: () => corroborateClaim,
@@ -20344,6 +20380,13 @@ var init_client = __esm({
         if (seed && seed.length > 0) qs.set("seed", seed.join(","));
         return this.json("GET", `/v2/skills?${qs.toString()}`);
       }
+      /** CL-induce: request a skill for a locally-detected community's cloud-
+       *  resolvable member ids. AUTHED. Always HTTP 200 — the `status` field
+       *  discriminates outcomes (incl. the autophagy-floor refusal, which is a
+       *  normal "not enough collective grounding yet" result, not an error). */
+      async induceSkill(body2) {
+        return this.json("POST", "/v2/skills/induce", body2);
+      }
       /** Dependency-spine neighborhood. Accepts purls (Package canonicalId = purl)
        *  or bare name@version slugs. A miss 404s AND registers demand (Stream B). */
       async packages(purlOrSlug, limit) {
@@ -20585,7 +20628,7 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 function defaultConfig() {
   return {
     version: 1,
-    cloudUrl: process.env["ERRATA_CLOUD_URL"] ?? "http://localhost:8787",
+    cloudUrl: process.env["ERRATA_CLOUD_URL"] ?? DEFAULT_CLOUD_URL,
     apiKey: null,
     accessToken: null,
     refreshToken: null,
@@ -20631,10 +20674,12 @@ function machineId() {
   saveConfig({ ...cfg, machineId: id });
   return id;
 }
+var DEFAULT_CLOUD_URL;
 var init_config = __esm({
   "src/config.ts"() {
     "use strict";
     init_paths();
+    DEFAULT_CLOUD_URL = "https://inerrata-gateway.onrender.com";
   }
 });
 
@@ -20708,7 +20753,7 @@ function assertDeviceCodeEndpointAllowed(url2, inspection) {
       allowed: false,
       label: "gateway device-code blocked",
       reason: "device-code login mints legacy v1 keys, while gateway launch uses console-issued keys/JWTs",
-      guidance: "Use `errata login --token <console errk_...>` or `errata login --oauth`."
+      guidance: "Use `errata login` for OAuth or `errata login --token <console errk_...>`."
     };
     throw new CloudEndpointPolicyError(formatCloudEndpointBlock(url2, decision), decision);
   }
@@ -20852,6 +20897,7 @@ function authedCloudClient(cfg, opts = {}) {
       accessToken: cfg.accessToken,
       ...cfg.refreshToken ? { refreshToken: cfg.refreshToken } : {},
       fetchFn,
+      ...opts.timeoutMs ? { timeoutMs: opts.timeoutMs } : {},
       ...tokenEndpoint && cfg.refreshToken ? {
         refreshFn: (rt) => refreshAccessToken(opts.fetchFn ?? fetch, tokenEndpoint, {
           refreshToken: rt,
@@ -20870,9 +20916,13 @@ function authedCloudClient(cfg, opts = {}) {
   return new CloudClient({
     baseUrl,
     ...cfg.apiKey ? { apiKey: cfg.apiKey } : {},
-    fetchFn
+    fetchFn,
+    ...opts.timeoutMs ? { timeoutMs: opts.timeoutMs } : {}
   });
 }
+function hasCloudCredential(cfg) {
+  return Boolean(cfg.accessToken || cfg.apiKey);
+}
 var init_cloud_auth = __esm({
   "src/cloud-auth.ts"() {
     "use strict";
@@ -34439,7 +34489,7 @@ function createMcpHandler(store, ctx = {}) {
 function buildToolContext() {
   try {
     const cfg = loadConfig();
-    if (cfg.consent.sync && cfg.apiKey && cfg.cloudUrl) {
+    if (cfg.consent.sync && hasCloudCredential(cfg) && cfg.cloudUrl) {
       return { cloud: authedCloudClient(cfg) };
     }
   } catch {
@@ -40815,11 +40865,11 @@ var TelemetryRecorder = class {
     return out2;
   }
   /**
-   * Flush to the cloud iff consent + apiKey are present. Returns how many were
+   * Flush to the cloud iff consent + a cloud credential are present. Returns how many were
    * accepted (0 when skipped). On network failure the batch is re-queued.
    */
   async flush(cloud, opts) {
-    if (!opts.consent || !opts.apiKey) {
+    if (!opts.consent || !opts.credentialPresent) {
       this.drain();
       return { sent: 0, skipped: true };
     }
@@ -41113,6 +41163,7 @@ function autodetectProfile(root) {
 
 // src/engine.ts
 init_config();
+init_cloud_auth();
 
 // src/notify.ts
 init_config();
@@ -41231,7 +41282,7 @@ function maybeFlushDigests() {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.0-dev.25" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.0-dev.27" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -42036,7 +42087,19 @@ function createWorkspaceEngine(opts) {
       }
     });
   }
-  const pullSkills = () => {
+  const pullSkills = async () => {
+    if ((opts.syncConsent ?? loadConfig().consent.sync) === true) {
+      for (const req of communityInductionRequests(store)) {
+        try {
+          const r = await cloud.induceSkill({ members: req.members, context: req.context });
+          if (r.status === "induced" || r.status === "refreshed") {
+            console.log(`[errata] skill ${r.status} for community ${req.communityId}: ${r.title ?? r.skillId}`);
+          }
+        } catch {
+          break;
+        }
+      }
+    }
     const communitySeed = communitySeeds(store);
     const skillSeed = communitySeed.length > 0 ? communitySeed : store.findNodesByLabel("Problem").sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt).slice(0, 6).flatMap((p) => {
       const cloudId = p.attrs["cloudNodeId"];
@@ -42222,7 +42285,7 @@ function createWorkspaceEngine(opts) {
         }
         const t = await telemetry.flush(cloud, {
           consent: freshCfg.consent.telemetry,
-          apiKey: opts.apiKey ?? freshCfg.apiKey
+          credentialPresent: Boolean(opts.apiKey) || hasCloudCredential(freshCfg)
         });
         if (t.sent > 0) {
           console.log(`[errata] telemetry: ${t.sent} events sent`);
@@ -42259,6 +42322,8 @@ async function startDaemon(opts) {
   if (opts.apiKey) {
     merged.apiKey = opts.apiKey;
     merged.accessToken = null;
+    merged.refreshToken = null;
+    merged.tokenEndpoint = null;
   }
   const cloud = authedCloudClient(merged);
   let webUiUrl = "";
@@ -42408,7 +42473,6 @@ function pidAlive(pid) {
 
 // src/multi.ts
 init_dist();
-init_src6();
 init_src4();
 import { readFileSync as readFileSync17, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "node:fs";
 
@@ -43009,6 +43073,7 @@ function isDaemonAlive(lockPath) {
 // src/multi.ts
 init_config();
 init_cloud_endpoint_policy();
+init_cloud_auth();
 function normPath(p) {
   return p.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
 }
@@ -43043,21 +43108,25 @@ async function startMultiDaemon(opts = {}) {
   const cfg = loadConfig();
   const CLOUD_TIMEOUT_MS = 12e4;
   const initialCloudUrl = normalizeCloudUrl(opts.cloudUrl ?? cfg.cloudUrl);
-  const cloud = new CloudClient({
-    baseUrl: initialCloudUrl,
-    timeoutMs: CLOUD_TIMEOUT_MS,
-    fetchFn: guardCloudFetch(initialCloudUrl),
-    ...opts.apiKey ?? cfg.apiKey ? { apiKey: opts.apiKey ?? cfg.apiKey ?? void 0 } : {}
-  });
+  const initialCfg = { ...cfg, cloudUrl: initialCloudUrl };
+  if (opts.apiKey) {
+    initialCfg.apiKey = opts.apiKey;
+    initialCfg.accessToken = null;
+    initialCfg.refreshToken = null;
+    initialCfg.tokenEndpoint = null;
+  }
+  const cloud = authedCloudClient(initialCfg, { timeoutMs: CLOUD_TIMEOUT_MS });
   const cloudNow = () => {
     const c = loadConfig();
     const baseUrl2 = normalizeCloudUrl(opts.cloudUrl ?? c.cloudUrl);
-    return new CloudClient({
-      baseUrl: baseUrl2,
-      timeoutMs: CLOUD_TIMEOUT_MS,
-      fetchFn: guardCloudFetch(baseUrl2),
-      ...opts.apiKey ?? c.apiKey ? { apiKey: opts.apiKey ?? c.apiKey ?? void 0 } : {}
-    });
+    const current = { ...c, cloudUrl: baseUrl2 };
+    if (opts.apiKey) {
+      current.apiKey = opts.apiKey;
+      current.accessToken = null;
+      current.refreshToken = null;
+      current.tokenEndpoint = null;
+    }
+    return authedCloudClient(current, { timeoutMs: CLOUD_TIMEOUT_MS });
   };
   const sharedDbPath = sharedStorePath();
   ensureParent(sharedDbPath);
@@ -43758,7 +43827,7 @@ async function loginOAuthLoopback(opts) {
       if (opts.timeoutMs) {
         setTimeout(() => {
           server.close();
-          reject(new Error("login timed out \u2014 run `errata login --oauth` again"));
+          reject(new Error("login timed out \u2014 run `errata login` again"));
         }, opts.timeoutMs).unref?.();
       }
     }
@@ -44032,8 +44101,8 @@ Commands:
                       Flags: --port N (default 7891)
   mcp                 Run the MCP stdio server \u2014 the agent's full errata tool
                       surface (navigation, problems, claims, burst, health)
-  login               Register or sign in with the cloud
-  logout              Clear local API key
+  login               Sign in with the cloud (OAuth by default; --device for legacy)
+  logout              Clear local cloud credentials
   sync now            Flush outbox to the cloud once
   privacy             Show what is collected/scrubbed + your consent state
   consent <channel> <on|off>
@@ -44045,7 +44114,7 @@ Commands:
                       Desktop toasts on problem open/resolve + review ready
 
 Environment:
-  ERRATA_CLOUD_URL                Cloud base URL (default http://localhost:8787)
+  ERRATA_CLOUD_URL                Cloud base URL (default ${DEFAULT_CLOUD_URL})
   ERRATA_ALLOW_DIRECT_V1_CLOUD=1  Allow non-local legacy v1 cloud testing
 `);
 }
@@ -44133,7 +44202,7 @@ async function cmdInit() {
   console.log("");
   console.log("Next:");
   console.log("  errata start                 # observe this repo");
-  if (!cfgNow.apiKey) {
+  if (!hasCloudCredential(cfgNow)) {
     console.log("  errata login                 # connect a cloud account (or: --token <key>)");
   }
   if (!cfgNow.consent.sync) {
@@ -44233,7 +44302,7 @@ async function cmdStatus() {
   );
   console.log(`  cloud:`);
   console.log(`    url:    ${cfg.cloudUrl}`);
-  console.log(`    logged in: ${cfg.apiKey || cfg.accessToken ? `yes (${cfg.email})` : "no"}`);
+  console.log(`    logged in: ${hasCloudCredential(cfg) ? `yes (${cfg.email})` : "no"}`);
   const inspection = await inspectCloudEndpoint(cfg.cloudUrl);
   const decision = evaluateCloudEndpoint(cfg.cloudUrl, inspection);
   const service = inspection.service ? ` \xB7 service ${inspection.service}` : "";
@@ -44242,7 +44311,7 @@ async function cmdStatus() {
     console.log(`    policy: blocked - ${decision.reason}`);
     if (decision.guidance) console.log(`      ${decision.guidance}`);
   }
-  if (cfg.apiKey || cfg.accessToken) {
+  if (hasCloudCredential(cfg)) {
     if (!decision.allowed) {
       console.log(
         `    reachable: ${inspection.reachable ? `yes (${inspection.probe})` : `no (${inspection.error ?? "unreachable"})`}`
@@ -44326,6 +44395,7 @@ function parseFlags(args2) {
     else if (a === "--token") out2.token = args2[++i2];
     else if (a.startsWith("--token=")) out2.token = a.slice("--token=".length);
     else if (a === "--oauth") out2.oauth = true;
+    else if (a === "--device") out2.device = true;
     else if (!a.startsWith("--")) out2._.push(a);
   }
   return out2;
@@ -44351,6 +44421,9 @@ async function applyToken(cfg, token) {
   try {
     const me = await c.me();
     cfg.apiKey = token;
+    cfg.accessToken = null;
+    cfg.refreshToken = null;
+    cfg.tokenEndpoint = null;
     cfg.userId = me.agentId;
     cfg.email = me.handle;
     saveConfig(cfg);
@@ -44387,7 +44460,7 @@ async function cmdLoginOAuth(cfg) {
     result = await loginOAuthLoopback({ cloudUrl: cfg.cloudUrl, timeoutMs: 5 * 6e4 });
   } catch (err2) {
     console.error(`oauth login failed: ${err2 instanceof Error ? err2.message : err2}`);
-    console.error(`  fall back to device code:  errata login`);
+    console.error(`  fall back to device code:  errata login --device`);
     console.error(`  or paste a key:            errata login --token <key>`);
     process.exitCode = 1;
     return;
@@ -44395,6 +44468,7 @@ async function cmdLoginOAuth(cfg) {
   cfg.accessToken = result.tokens.accessToken;
   cfg.refreshToken = result.tokens.refreshToken ?? null;
   cfg.tokenEndpoint = result.tokenEndpoint;
+  cfg.apiKey = null;
   saveConfig(cfg);
   try {
     const me = await authedCloudClient(cfg).me();
@@ -44414,7 +44488,7 @@ async function cmdLogin() {
     await applyToken(cfg, flags2.token);
     return;
   }
-  if (flags2.oauth) {
+  if (flags2.oauth || !flags2.device) {
     await cmdLoginOAuth(cfg);
     return;
   }
@@ -44462,6 +44536,9 @@ async function cmdLogin() {
     if (poll.status === "pending") continue;
     if (poll.status === "authorized" && poll.apiKey) {
       cfg.apiKey = poll.apiKey;
+      cfg.accessToken = null;
+      cfg.refreshToken = null;
+      cfg.tokenEndpoint = null;
       cfg.userId = poll.agentId ?? null;
       cfg.email = poll.handle ?? handle2;
       saveConfig(cfg);
@@ -44486,6 +44563,9 @@ async function cmdLogin() {
 async function cmdLogout() {
   const cfg = loadConfig();
   cfg.apiKey = null;
+  cfg.accessToken = null;
+  cfg.refreshToken = null;
+  cfg.tokenEndpoint = null;
   cfg.userId = null;
   cfg.email = null;
   saveConfig(cfg);
@@ -44849,7 +44929,7 @@ async function cmdBurst(args2) {
   let ctx = {};
   if (!local) {
     const cfg = loadConfig();
-    if (cfg.apiKey || cfg.accessToken) ctx = { cloud: authedCloudClient(cfg) };
+    if (hasCloudCredential(cfg)) ctx = { cloud: authedCloudClient(cfg) };
   }
   await withStore(async (store) => {
     const result = await runTool2(
@@ -45441,7 +45521,7 @@ async function cmdPrivacy() {
     sync:        ${onoff(cfg.consent.sync)}
     telemetry:   ${onoff(cfg.consent.telemetry)}
     packages:    ${onoff(cfg.consent.contributePackages)}
-    logged in:   ${cfg.apiKey ? `yes (${cfg.email})` : "no"}
+    logged in:   ${hasCloudCredential(cfg) ? `yes (${cfg.email})` : "no"}
 
   Change it:   errata consent sync on | errata consent telemetry off
   Kill switch: errata consent all off   (or  errata logout  to drop your key)
@@ -45464,8 +45544,8 @@ async function cmdConsent(args2) {
   console.log(
     `consent updated \u2192 sync=${cfg.consent.sync ? "on" : "off"} telemetry=${cfg.consent.telemetry ? "on" : "off"} packages=${cfg.consent.contributePackages ? "on" : "off"}`
   );
-  if ((channel === "sync" || channel === "all") && value && !cfg.apiKey) {
-    console.log("  note: run `errata login` to actually upload (no API key yet).");
+  if ((channel === "sync" || channel === "all") && value && !hasCloudCredential(cfg)) {
+    console.log("  note: run `errata login` to actually upload (no cloud credential yet).");
   }
 }
 async function cmdDash(args2) {
@@ -45757,7 +45837,7 @@ async function cmdNotifications(state) {
 }
 async function cmdFeedback(args2) {
   const cfg = loadConfig();
-  if (!cfg.apiKey) {
+  if (!hasCloudCredential(cfg)) {
     console.error("not logged in \u2014 run `errata login` first.");
     process.exit(2);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.0-dev.25",
+  "version": "2.0.0-dev.27",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {