@inetafrica/open-claudia 2.15.0 → 3.0.0

package/health.js

@@ -3,6 +3,7 @@ const fs = require("fs");
 const path = require("path");
 const https = require("https");
 const CONFIG_DIR = require("./config-dir");
+const { inspectProviderConfiguration } = require("./core/provider-status");
 
 const ENV_FILE = path.join(CONFIG_DIR, ".env");
 const AUTH_FILE = path.join(CONFIG_DIR, "auth.json");
@@ -12,7 +13,6 @@ const REQUIRED_ENV_KEYS = [
   "TELEGRAM_BOT_TOKEN",
   "TELEGRAM_CHAT_ID",
   "WORKSPACE",
-  "CLAUDE_PATH",
 ];
 
 // Optional but recommended
@@ -60,24 +60,21 @@ function binaryExists(binPath) {
 }
 
 /**
- * Test if Claude CLI is authenticated
+ * Test Claude authentication using the provider's local auth-status command.
+ * This compatibility export deliberately never sends a model prompt.
  */
-function testClaudeAuth(claudePath) {
-  try {
-    execSync(`"${claudePath}" -p "say ok" --max-budget-usd 0.01 --output-format text 2>&1`, {
-      encoding: "utf-8",
-      timeout: 30000,
-      stdio: "pipe",
-    });
-    return { ok: true };
-  } catch (e) {
-    const errMsg = (e.stderr || e.stdout || e.message || "").toLowerCase();
-    if (errMsg.includes("auth") || errMsg.includes("login") || errMsg.includes("api key") || errMsg.includes("unauthorized")) {
-      return { ok: false, reason: "not_authenticated", message: "Claude CLI is not authenticated. Run 'claude auth' or 'claude login'." };
-    }
-    // Other errors (like timeout) are OK - Claude is accessible
-    return { ok: true };
-  }
+function testClaudeAuth(_claudePath, options = {}) {
+  const summary = inspectProviderConfiguration({
+    registry: options.registry,
+    probeAuth: true,
+  });
+  const claude = summary.providers.find((provider) => provider.id === "claude");
+  if (claude?.auth.state === "authenticated") return { ok: true };
+  return {
+    ok: false,
+    reason: claude?.auth.state || "not_checked",
+    message: claude?.recovery || "Claude Code authentication could not be confirmed.",
+  };
 }
 
 /**
@@ -228,12 +225,12 @@ function checkAuthFile() {
 /**
  * Run all health checks
  * @param {Object} options - Options
- * @param {boolean} options.quick - Skip slow checks (Claude auth, Telegram API)
+ * @param {boolean} options.quick - Skip auth and external channel checks
  * @param {boolean} options.fix - Attempt to fix issues (create directories)
  * @returns {Promise<Object>} Health check results
  */
 async function runHealthChecks(options = {}) {
-  const { quick = false, fix = false } = options;
+  const { quick = false, fix = false, skipNetwork = false } = options;
   const results = {
     ok: true,
     checks: {},
@@ -267,27 +264,41 @@ async function runHealthChecks(options = {}) {
     results.checks.env = { ok: true };
   }
 
-  // 3. Check Claude CLI exists
-  const claudePath = env.CLAUDE_PATH;
-  if (!binaryExists(claudePath)) {
-    results.checks.claude_binary = { ok: false, reason: "not_found", message: `Claude CLI not found at: ${claudePath}` };
-    results.ok = false;
-    results.errors.push(results.checks.claude_binary.message);
-  } else {
-    results.checks.claude_binary = { ok: true, path: claudePath };
-
-    // 4. Check Claude authentication (slow)
-    if (!quick) {
-      results.checks.claude_auth = testClaudeAuth(claudePath);
-      if (!results.checks.claude_auth.ok) {
-        results.ok = false;
-        results.errors.push(results.checks.claude_auth.message);
-      }
-    }
+  // 3. Provider availability, compatibility, and authentication. Provider
+  // adapters use only local --version/help/auth-status commands here.
+  const providerSummary = inspectProviderConfiguration({
+    registry: options.registry,
+    probeAuth: !quick,
+  });
+  results.providerSummary = providerSummary;
+  for (const provider of providerSummary.providers) {
+    const compatible = provider.availability.state === "available"
+      && provider.compatibility.state === "compatible";
+    const authenticated = quick || provider.auth.state === "authenticated";
+    const ok = compatible && authenticated;
+    const key = `provider_${provider.id}`;
+    results.checks[key] = {
+      ok,
+      warn: !ok,
+      availability: provider.availability.state,
+      compatibility: provider.compatibility.state,
+      auth: provider.auth.state,
+      message: provider.recovery,
+    };
+    if (!ok && provider.recovery) results.warnings.push(`${provider.label}: ${provider.recovery.split("\n")[0]}`);
+  }
+  results.checks.default_provider = {
+    ok: !!providerSummary.defaultProvider.providerId,
+    warn: !providerSummary.defaultProvider.providerId,
+    providerId: providerSummary.defaultProvider.providerId,
+    message: providerSummary.defaultProvider.reason,
+  };
+  if (!providerSummary.defaultProvider.providerId) {
+    results.warnings.push(`${providerSummary.defaultProvider.reason}. Model turns are unavailable until a provider is configured.`);
   }
 
-  // 5. Check Telegram token (slow)
-  if (!quick && env.TELEGRAM_BOT_TOKEN) {
+  // 4. Check Telegram token (external network; never part of provider health).
+  if (!quick && !skipNetwork && env.TELEGRAM_BOT_TOKEN) {
     results.checks.telegram = await testTelegramToken(env.TELEGRAM_BOT_TOKEN);
     if (!results.checks.telegram.ok) {
       results.ok = false;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "2.15.0",
-  "description": "Your always-on AI coding assistant — Claude Code, Cursor Agent, and OpenAI Codex via Telegram or Kazee Chat",
+  "version": "3.0.0",
+  "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
     "open-claudia": "./bin/cli.js"
@@ -9,7 +9,8 @@
   "scripts": {
     "setup": "node setup.js",
     "start": "node bot.js",
-    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=node node test-web-sessions.js"
+    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js",
+    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js"
   },
   "files": [
     "bot.js",
@@ -30,6 +31,8 @@
     ".env.example",
     "README.md",
     "CHANGELOG.md",
+    "soul.md",
+    "docs/",
     "test-runner-watchdog-static.js",
     "test-usage-accounting.js",
     "test-recall-engine.js",
@@ -64,10 +67,51 @@
     "test-kazee-message-id.js",
     "test-delivery-contract.js",
     "test-run-lock.js",
-    "test-web-sessions.js"
+    "test-web-sessions.js",
+    "test-provider-fixture.js",
+    "test-provider-core-prompt.js",
+    "test-provider-prompt-parity.js",
+    "test-provider-env-isolation.js",
+    "test-provider-resume-parity.js",
+    "test-provider-bootstrap.js",
+    "test-provider-registry.js",
+    "test-provider-stream-decoder.js",
+    "test-provider-events.js",
+    "test-provider-claude.js",
+    "test-provider-codex.js",
+    "test-provider-runner.js",
+    "test-provider-run-lifecycle.js",
+    "test-provider-gateway.js",
+    "test-provider-side-chat.js",
+    "test-single-runtime.js",
+    "test-provider-migration-backup.js",
+    "test-provider-state-migration.js",
+    "test-provider-session-history.js",
+    "test-provider-session-commands.js",
+    "test-provider-compaction.js",
+    "test-provider-scheduler.js",
+    "test-cursor-removal.js",
+    "test-utility-provider-policy.js",
+    "test-provider-subagent.js",
+    "test-provider-recall.js",
+    "test-provider-pack-review.js",
+    "test-memory-mutation-queue.js",
+    "test-provider-dream.js",
+    "test-provider-enforcer.js",
+    "test-provider-tool-hooks.js",
+    "test-provider-boot-matrix.js",
+    "test-provider-capabilities.js",
+    "test-provider-language.js",
+    "test-provider-coupling-audit.js",
+    "test-provider-parity-e2e.js",
+    "test-telegram-poll-recovery.js",
+    "test-fixtures/"
   ],
   "keywords": [
     "claude",
+    "codex",
+    "coding-agent",
+    "provider-agnostic",
     "telegram",
     "ai",
     "assistant",

package/setup.js

@@ -8,6 +8,12 @@ const crypto = require("crypto");
 const { execSync } = require("child_process");
 const Vault = require("./vault");
 const CONFIG_DIR = require("./config-dir");
+const { ensureConfigDir } = require("./core/config-dir");
+const { atomicWriteFileSync } = require("./core/fsutil");
+const { inspectProviderConfiguration } = require("./core/provider-status");
+const { ProviderRegistry } = require("./core/providers");
+const { createClaudeProvider } = require("./core/providers/claude");
+const { createCodexProvider } = require("./core/providers/codex");
 
 const ENV_FILE = path.join(CONFIG_DIR, ".env");
 const VAULT_FILE = path.join(CONFIG_DIR, "vault.enc");
@@ -16,8 +22,12 @@ const CRONS_FILE = path.join(CONFIG_DIR, "crons.json");
 const AUTH_FILE = path.join(CONFIG_DIR, "auth.json");
 const SETUP_STATE_FILE = path.join(CONFIG_DIR, ".setup-state.json");
 
-const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-const ask = (q) => new Promise((r) => rl.question(q, r));
+let rl = null;
+function promptInterface() {
+  if (!rl) rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  return rl;
+}
+const ask = (q) => new Promise((r) => promptInterface().question(q, r));
 
 // ── Auth file helpers ──────────────────────────────────────────────
 
@@ -29,7 +39,7 @@ function loadAuth() {
 }
 
 function saveAuth(auth) {
-  fs.writeFileSync(AUTH_FILE, JSON.stringify(auth, null, 2));
+  atomicWriteFileSync(AUTH_FILE, JSON.stringify(auth, null, 2), { backup: true, mode: 0o600 });
 }
 
 // ── Setup state helpers ────────────────────────────────────────────
@@ -42,13 +52,25 @@ function loadSetupState() {
 }
 
 function saveSetupState(state) {
-  fs.writeFileSync(SETUP_STATE_FILE, JSON.stringify(state, null, 2));
+  atomicWriteFileSync(SETUP_STATE_FILE, JSON.stringify(state, null, 2), { backup: true, mode: 0o600 });
 }
 
 function clearSetupState() {
   if (fs.existsSync(SETUP_STATE_FILE)) fs.unlinkSync(SETUP_STATE_FILE);
 }
 
+function upgradeSetupState(value) {
+  const state = value && typeof value === "object"
+    ? { ...value, completedSteps: [...(value.completedSteps || [])], data: { ...(value.data || {}) } }
+    : { completedSteps: [], data: {} };
+  if (state.completedSteps.includes("prerequisites")
+    && (!Object.prototype.hasOwnProperty.call(state.data, "codexPath")
+      || !Object.prototype.hasOwnProperty.call(state.data, "defaultProvider"))) {
+    state.completedSteps = state.completedSteps.filter((step) => step !== "prerequisites");
+  }
+  return state;
+}
+
 // ── Telegram helpers ───────────────────────────────────────────────
 
 function telegramGet(token, method, params = "") {
@@ -147,9 +169,56 @@ function findBinary(name) {
 }
 
 function findClaude() { return findBinary("claude"); }
+function findCodex() { return findBinary("codex"); }
 function findWhisper() { return findBinary("whisper-cli"); }
 function findFfmpeg() { return findBinary("ffmpeg"); }
 
+function inspectProviderSetup(options = {}) {
+  if (!options.paths) return inspectProviderConfiguration(options);
+  const resolved = {};
+  for (const providerId of ["claude", "codex"]) {
+    const value = String(options.paths[providerId] || "").trim();
+    if (!value) {
+      resolved[providerId] = null;
+      continue;
+    }
+    try {
+      fs.accessSync(value, fs.constants.X_OK);
+      resolved[providerId] = path.resolve(value);
+    } catch (_) {
+      resolved[providerId] = null;
+    }
+  }
+  const registry = new ProviderRegistry({ defaultProvider: options.defaultProvider || null });
+  registry.registerProvider(createClaudeProvider({ resolveExecutable: () => resolved.claude }));
+  registry.registerProvider(createCodexProvider({ resolveExecutable: () => resolved.codex }));
+  return inspectProviderConfiguration({
+    ...options,
+    registry,
+    executableStatus(providerId) {
+      const configured = String(options.paths[providerId] || "").trim();
+      if (resolved[providerId]) {
+        return { state: "available", executable: resolved[providerId], configured: true, reason: null };
+      }
+      return {
+        state: configured ? "missing" : "unconfigured",
+        executable: null,
+        configured: !!configured,
+        reason: configured
+          ? `Configured ${providerId} executable was not found`
+          : `${providerId} is not configured or installed`,
+      };
+    },
+  });
+}
+
+function providerStatusLine(provider) {
+  const availability = provider.availability.state;
+  if (availability !== "available") return `${provider.label}: ${availability}`;
+  const version = provider.compatibility.version ? ` ${provider.compatibility.version}` : "";
+  return `${provider.label}: ${provider.compatibility.state}${version}; auth ${provider.auth.state}`;
+}
+
 function findWhisperModel() {
   const candidates = [
     "/opt/homebrew/share/whisper-cpp/models/ggml-base.en.bin",
@@ -285,7 +354,7 @@ async function setupDaemon(platform) {
     const serviceName = "claude-telegram-bot";
     const serviceFile = `/etc/systemd/system/${serviceName}.service`;
     const unit = `[Unit]
-Description=Claude Code Telegram Bot
+Description=Open Claudia Provider Bot
 After=network.target
 
 [Service]
@@ -483,7 +552,7 @@ function updateEnvKey(key, value) {
     return line;
   });
   if (!found) updated.push(`${key}=${value}`);
-  fs.writeFileSync(ENV_FILE, updated.join("\n"));
+  atomicWriteFileSync(ENV_FILE, updated.join("\n"), { backup: true, mode: 0o600 });
 }
 
 // ── Main setup (resumable) ─────────────────────────────────────────
@@ -497,6 +566,7 @@ const { validateKazee } = require("./core/kazee-probe");
 const KAZEE_DEFAULT_URL = "https://chat.inet.africa";
 
 async function main() {
+  ensureConfigDir(CONFIG_DIR);
   // Check if this is an auth subcommand
   const args = process.argv.slice(2);
   if (args.includes("--auth") || args.includes("auth")) {
@@ -504,10 +574,12 @@ async function main() {
     return;
   }
 
-  console.log("\n  Claude Code Telegram Bot — Setup\n");
+  console.log("\n  Open Claudia — Setup\n");
 
   // Load or create state
-  let state = loadSetupState() || { completedSteps: [], data: {} };
+  // Resume files from the Claude-only wizard must pass through the provider
+  // step once before the new config keys can be serialized safely.
+  let state = upgradeSetupState(loadSetupState());
   const resuming = state.completedSteps.length > 0;
 
   if (resuming) {
@@ -525,27 +597,71 @@ async function main() {
   if (!state.completedSteps.includes("prerequisites")) {
     console.log("Checking prerequisites...\n");
 
-    const claudePath = findClaude();
-    if (!claudePath) {
-      console.log("  Claude Code CLI not found. Install it first:");
-      console.log("  https://docs.anthropic.com/en/docs/claude-code");
-      process.exit(1);
+    const providerReport = inspectProviderSetup();
+    for (const provider of providerReport.providers) {
+      console.log(`  ${providerStatusLine(provider)}`);
+      if (provider.recovery) console.log(`    Recovery: ${provider.recovery.split("\n")[0]}`);
     }
-    console.log(`  Claude CLI: ${claudePath}`);
+    console.log("");
 
-    try {
-      execSync(`"${claudePath}" -p "say ok" --max-budget-usd 0.01 --output-format text 2>&1`, {
-        encoding: "utf-8", timeout: 30000,
-      });
-      console.log("  Claude auth: OK");
-    } catch (e) {
-      const errMsg = (e.stderr || e.stdout || e.message || "").toLowerCase();
-      if (errMsg.includes("auth") || errMsg.includes("login") || errMsg.includes("api key") || errMsg.includes("unauthorized")) {
-        console.log("  Claude auth: NOT LOGGED IN");
-        console.log("  Run 'claude auth' or 'claude login' to authenticate first.");
-        process.exit(1);
+    const autoProviders = providerReport.providers
+      .filter((provider) => provider.availability.state === "available"
+        && provider.compatibility.state === "compatible")
+      .map((provider) => provider.id);
+    const choice = (await ask("  Providers to configure (auto/claude/codex/both/none) [auto]: "))
+      .trim().toLowerCase() || "auto";
+    const wanted = choice === "none" ? []
+      : choice === "both" ? ["claude", "codex"]
+      : choice === "claude" || choice === "codex" ? [choice]
+      : autoProviders;
+    const detectedById = Object.fromEntries(providerReport.providers.map((provider) => [
+      provider.id,
+      provider.availability.executable || null,
+    ]));
+    const providerPaths = { claude: null, codex: null };
+    for (const providerId of wanted) {
+      let detected = detectedById[providerId]
+        || state.data?.[providerId === "claude" ? "claudePath" : "codexPath"]
+        || (providerId === "claude" ? findClaude() : findCodex());
+      if (!detected) {
+        const envKey = providerId === "claude" ? "CLAUDE_PATH" : "CODEX_PATH";
+        const entered = (await ask(`  ${envKey} (blank to leave unconfigured): `)).trim();
+        if (entered) {
+          try {
+            fs.accessSync(entered, fs.constants.X_OK);
+            detected = path.resolve(entered);
+          } catch (_) {
+            console.log(`  ${entered} is not executable; ${providerId} remains unconfigured.`);
+          }
+        }
+      }
+      providerPaths[providerId] = detected || null;
+    }
+    const finalProviderReport = inspectProviderSetup({ paths: providerPaths });
+    for (const provider of finalProviderReport.providers) {
+      if (provider.availability.state === "available" && provider.compatibility.state !== "compatible") {
+        console.log(`  ${providerStatusLine(provider)}`);
+        if (provider.recovery) console.log(`    Recovery: ${provider.recovery.split("\n")[0]}`);
       }
-      console.log("  Claude auth: OK");
+    }
+    const configuredProviders = finalProviderReport.providers
+      .filter((provider) => provider.availability.state === "available"
+        && provider.compatibility.state === "compatible")
+      .map((provider) => provider.id);
+    let defaultProvider = configuredProviders[0] || null;
+    if (configuredProviders.length > 1) {
+      const reportedDefault = providerReport.defaultProvider.providerId;
+      const suggestedDefault = configuredProviders.includes(reportedDefault)
+        ? reportedDefault
+        : configuredProviders[0];
+      const answer = (await ask(`  Default provider (claude/codex) [${suggestedDefault}]: `))
+        .trim().toLowerCase();
+      const proposed = answer || suggestedDefault;
+      defaultProvider = configuredProviders.includes(proposed) ? proposed : configuredProviders[0];
+    }
+    if (!configuredProviders.length) {
+      console.log("  No model provider configured. Setup, doctor, health, and the web UI will still work;");
+      console.log("  model turns will return NO_AVAILABLE_PROVIDER until Claude Code or OpenAI Codex is configured.\n");
     }
 
     const platform = detectPlatform();
@@ -592,7 +708,9 @@ async function main() {
       }
     }
 
-    state.data.claudePath = claudePath;
+    state.data.claudePath = providerPaths.claude || "";
+    state.data.codexPath = providerPaths.codex || "";
+    state.data.defaultProvider = defaultProvider || "";
     state.data.platform = platform;
     state.data.ffmpegPath = ffmpegPath || "";
     state.data.whisperPath = whisperPath || "";
@@ -648,7 +766,7 @@ async function main() {
 
     // Send confirmation
     console.log("  Sending test message...");
-    const sent = await sendMessage(token, userInfo.chatId, "Setup verified! Your Claude Code bot is connected.");
+    const sent = await sendMessage(token, userInfo.chatId, "Setup verified! Your Open Claudia bot is connected.");
     if (sent) {
       console.log("  Test message sent! Check your Telegram.\n");
     } else {
@@ -747,6 +865,15 @@ async function main() {
       `TELEGRAM_CHAT_ID=${d.chatId}`,
       `WORKSPACE=${d.workspace}`,
       `CLAUDE_PATH=${d.claudePath}`,
+      `CODEX_PATH=${d.codexPath}`,
+      `DEFAULT_PROVIDER=${d.defaultProvider}`,
+      "UTILITY_PROVIDER=active",
+      "PROVIDER_FALLBACKS=",
+      "DREAM_PROVIDER=",
+      "MEMORY_PROVIDER=",
+      "RECALL_PROVIDER=",
+      "ENFORCER_PROVIDER=",
+      "SUBAGENT_PROVIDER=",
       `WHISPER_CLI=${d.whisperPath}`,
       `WHISPER_MODEL=${d.whisperModel}`,
       `FFMPEG=${d.ffmpegPath}`,
@@ -763,9 +890,30 @@ async function main() {
       envLines.push(`KAZEE_BOT_USER_ID=${d.kazee.botUserId || ""}`);
       envLines.push(`KAZEE_OWNER_USER_ID=${d.kazee.ownerUserId || ""}`);
     }
-    const env = envLines.join("\n");
-
-    fs.writeFileSync(ENV_FILE, env);
+    const existingEnv = fs.existsSync(ENV_FILE)
+      ? fs.readFileSync(ENV_FILE, "utf8").split(/\r?\n/).reduce((result, line) => {
+          const index = line.indexOf("=");
+          if (index > 0) result[line.slice(0, index).trim()] = line.slice(index + 1).trim();
+          return result;
+        }, {})
+      : {};
+    const mergedEnv = { ...existingEnv };
+    const preserveExistingPolicy = new Set([
+      "UTILITY_PROVIDER", "PROVIDER_FALLBACKS", "DREAM_PROVIDER", "MEMORY_PROVIDER",
+      "RECALL_PROVIDER", "ENFORCER_PROVIDER", "SUBAGENT_PROVIDER",
+    ]);
+    for (const line of envLines) {
+      const index = line.indexOf("=");
+      const key = line.slice(0, index);
+      const value = line.slice(index + 1);
+      // A resumed/second setup must never erase the other provider's existing
+      // credential/config merely because its prompt was left blank.
+      if (preserveExistingPolicy.has(key) && Object.prototype.hasOwnProperty.call(existingEnv, key)) continue;
+      if (!value && Object.prototype.hasOwnProperty.call(existingEnv, key)) continue;
+      mergedEnv[key] = value;
+    }
+    const env = Object.entries(mergedEnv).map(([key, value]) => `${key}=${value}`).join("\n");
+    atomicWriteFileSync(ENV_FILE, env, { backup: true, mode: 0o600 });
     console.log(`  Config saved: ${ENV_FILE}\n`);
 
     if (!fs.existsSync(CRONS_FILE)) fs.writeFileSync(CRONS_FILE, "[]");
@@ -794,13 +942,25 @@ async function main() {
   // Done — clean up state file
   clearSetupState();
   console.log("\n  Setup complete! Start chatting with your bot in Telegram.\n");
-  rl.close();
+  if (rl) rl.close();
 }
 
 // Allow running auth directly: node setup.js auth
-module.exports = { runAuth, loadAuth, saveAuth, AUTH_FILE };
-
-main().catch((e) => {
-  console.error(e);
-  process.exit(1);
-});
+module.exports = {
+  runAuth,
+  loadAuth,
+  saveAuth,
+  AUTH_FILE,
+  inspectProviderSetup,
+  providerStatusLine,
+  upgradeSetupState,
+  main,
+};
+
+if (require.main === module) {
+  main().catch((e) => {
+    if (rl) rl.close();
+    console.error(e);
+    process.exit(1);
+  });
+}

package/soul.md

@@ -0,0 +1,39 @@
+# Soul
+
+You are Sumeet's personal AI assistant: Open Claudia running the selected coding-agent provider, available 24/7 through his configured chat channels.
+
+## Identity
+- Name: Open Claudia
+- Tone: Direct, concise, technical. Like a sharp senior engineer who's also a good friend.
+- Never over-explain. Sumeet is technical — he gets it.
+- Mobile-first: keep messages short. Send files for anything long.
+
+## About Sumeet
+- Full-stack developer / founder
+- Works across many projects in ~/Workspace
+- Tech stack: Node.js, React/Next.js, MongoDB, Kubernetes, Docker
+- Uses Cursor IDE and Claude Code CLI daily
+- Communicates via Telegram on mobile when away from desk
+
+## Key Projects
+- **crm** — Kazee CRM platform (monorepo: crm-backend, frontend, helpdesk-frontend, spaces-backend, spaces-frontend, workflow-kanban). MongoDB, Node.js backend, Next.js frontends.
+- **metriq / metriq-api** — Metrics/analytics platform
+- **ticket-central** — Ticketing system
+- **hr-hub** — HR management
+- **kazee-connect-subscription-service** — Subscription/billing service
+- **k8s / kubernetes-applications / kazee-infratructure** — Kubernetes deployment configs
+- **janus-devops / janus-webrtc** — WebRTC infrastructure
+
+## Working Style
+- Prefers action over discussion. Do the thing, then explain what you did.
+- Likes plans for big changes, but hates over-planning small ones.
+- Appreciates when you proactively flag issues or suggest improvements.
+- Send files directly via Telegram when output is long.
+
+## What You Can Do
+- Write, edit, and refactor code across all projects
+- Run commands, tests, builds, deployments
+- Send files, images, code snippets directly to Telegram
+- Run scheduled checks and report results
+- Monitor git status, PRs, deployments
+- Help with architecture decisions and code reviews

package/test-ability-extraction.js

@@ -86,6 +86,11 @@ const reused = review.applyAction({
 });
 assert.strictEqual(reused.appliedTo, "chat-mobile", "update records the cross-project reuse");
 assert.deepStrictEqual(packs.readPack("mobile-app-deploy").applied_on, ["spaces", "chat-mobile"], "applied_on grew");
+const abilityFile = path.join(process.env.PACKS_DIR, "mobile-app-deploy", "PACK.md");
+assert.ok(fs.existsSync(`${abilityFile}.bak`), "reviewer writes retain the previous complete pack backup");
+assert.strictEqual(fs.statSync(abilityFile).mode & 0o777, 0o600, "reviewer memory files stay owner-only");
+assert.deepStrictEqual(fs.readdirSync(path.dirname(abilityFile)).filter((name) => name.endsWith(".tmp")), [],
+  "atomic reviewer writes leave no partial temporary file");
 
 graph.syncFromCorpus(packs, entStub);
 edges = graph.allEdges();