@metaphi-ai/hum 0.1.36 → 0.1.38

package/dist/cli.mjs

@@ -74600,6 +74600,18 @@ function installedVersion(env3 = process.env, runImpl = run) {
   }
   return v;
 }
+function trustedPython(env3 = process.env, runImpl = run) {
+  if (!win) return null;
+  const r = runImpl("py", ["-3.12", "-I", "-c", "import ssl, sys; print(sys.executable)"]);
+  const p = r && r.status === 0 ? String(r.stdout).trim().split(/\r?\n/).pop() : "";
+  return /^[a-z]:\\.+\\python(w)?\.exe$/i.test(p) ? p : null;
+}
+function sslBlocked(env3 = process.env, runImpl = run) {
+  const r = runImpl(enginePython(env3), ASK_SSL);
+  if (r && r.status === 0) return null;
+  const text = String(r && (r.stderr || r.stdout) || "ssl did not import").trim().split(/\r?\n/).filter(Boolean).pop() || "ssl did not import";
+  return text;
+}
 function needsInstall(version, { env: env3 = process.env, installed = () => installedVersion(env3), now = Date.now(), state = readInstallState(env3) } = {}) {
   if (!version || env3.HUM_ENGINE || env3.HUM_ENGINE_PORT) return false;
   if (installed() === version) return false;
@@ -74635,14 +74647,23 @@ function installEngine(version, { env: env3 = process.env, say = (m) => console.
       fs2.unlinkSync(stampPath(env3));
     } catch {
     }
-    if (!fs2.existsSync(python)) {
-      const args2 = ["venv", "--quiet", "--python", "3.12", ...fs2.existsSync(dir) ? ["--clear"] : [], dir];
-      if ((runImpl(u, args2, { stdio: "inherit" }) || {}).status !== 0) return outcome(false, "uv venv failed");
-    }
-    if ((runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status !== 0) return outcome(false, `uv pip install ${spec} failed`);
-    const got = importedVersion(env3, runImpl);
+    const trusted = trustedPython(env3, runImpl);
+    const makeVenv = (clear) => (runImpl(u, ["venv", "--quiet", "--python", trusted || "3.12", ...clear ? ["--clear"] : [], dir], { stdio: "inherit" }) || {}).status === 0;
+    const pipIn = () => (runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status === 0;
+    if (!fs2.existsSync(python) && !makeVenv(fs2.existsSync(dir))) return outcome(false, "uv venv failed");
+    if (!pipIn()) return outcome(false, `uv pip install ${spec} failed`);
+    let got = importedVersion(env3, runImpl);
     if (!got) return outcome(false, "hum did not import after the install");
     if (got !== version && !env3.HUM_ENGINE_SPEC) return outcome(false, `installed ${got}, wanted ${version}`, got);
+    let blocked = sslBlocked(env3, runImpl);
+    if (blocked && trusted) {
+      say(`the policy here refuses the environment's OpenSSL (${blocked}); rebuilding it on ${trusted} \u2026`);
+      if (makeVenv(true) && pipIn()) {
+        got = importedVersion(env3, runImpl) || got;
+        blocked = sslBlocked(env3, runImpl);
+      }
+    }
+    if (blocked) return outcome(false, sslAdvice(env3, version));
     fs2.mkdirSync(dir, { recursive: true });
     fs2.writeFileSync(stampPath(env3), `${got}
 `);
@@ -74657,7 +74678,7 @@ function installEngine(version, { env: env3 = process.env, say = (m) => console.
     return outcome(false, e && e.message ? e.message : String(e));
   }
 }
-var win, npmFix, NPM_FIX, humHome, engineDir, enginePython, stampPath, statePath, run, ASK_VERSION, readInstallState, writeInstallState;
+var win, npmFix, NPM_FIX, humHome, engineDir, enginePython, stampPath, statePath, run, ASK_VERSION, ASK_SSL, sslAdvice, readInstallState, writeInstallState;
 var init_install = __esm({
   "src/install.js"() {
     win = process.platform === "win32";
@@ -74670,6 +74691,8 @@ var init_install = __esm({
     statePath = (env3) => path.join(humHome(env3), "engine-install.json");
     run = (cmd, args2, opts = {}) => spawnSync(cmd, args2, { encoding: "utf8", windowsHide: true, ...opts });
     ASK_VERSION = ["-I", "-c", "import hum; print(hum.__version__)"];
+    ASK_SSL = ["-I", "-c", "import ssl"];
+    sslAdvice = (env3, version) => `the machine's application control blocked Python's OpenSSL DLL in ${engineDir(env3)}; install Python 3.12 from python.org (Microsoft signs it), then run  ${npmFix(version)}`;
     readInstallState = (env3 = process.env) => {
       try {
         return JSON.parse(fs2.readFileSync(statePath(env3), "utf8"));
@@ -75838,7 +75861,7 @@ function runningVersion(candidates = engineCandidates(), opts = {}) {
   }
   return null;
 }
-function startFailure(failures, { npm = /^(node|bun)(\.exe)?$/i.test(String(process.execPath).split(/[\\/]/).pop()), platform: platform2 = process.platform, version = true ? "0.1.36" : "" } = {}) {
+function startFailure(failures, { npm = /^(node|bun)(\.exe)?$/i.test(String(process.execPath).split(/[\\/]/).pop()), platform: platform2 = process.platform, version = true ? "0.1.38" : "" } = {}) {
   const refused = failures.find((f) => f.error && f.error.code !== "ENOENT");
   const fix = npm ? npmFix(version) : updateCommand({ kind: "native" }, platform2);
   if (!refused) {
@@ -76131,6 +76154,18 @@ async function diagnose({
     else if (running.version === mine) checks.push(check("ok", `${running.version} runs from ${running.where} (${running.bin})`));
     else if (env3.HUM_ENGINE) checks.push(check("fail", `${running.version} is what runs: HUM_ENGINE points at it (${env3.HUM_ENGINE}); you installed ${mine}`, "unset HUM_ENGINE"));
     else checks.push(check("fail", `${running.version} is what runs (${running.where}: ${running.bin}); you installed ${mine}`, layout2.kind === "npm" ? npmFix2(mine) : updateCommand(layout2, platform2)));
+    if (running && running.args.includes("-m")) {
+      const r = runImpl(running.bin, ["-I", "-c", "import ssl"], { encoding: "utf8", windowsHide: true, timeout: 2e4 });
+      const said = String(r && (r.stderr || r.stdout) || "");
+      if (!(r && r.status === 0) && /ssl|DLL/i.test(said)) {
+        const why = said.trim().split(/\r?\n/).filter(Boolean).pop() || "ssl did not import";
+        checks.push(check(
+          "fail",
+          `${running.bin} cannot load OpenSSL (${why}); on a managed Windows machine that is the application control policy refusing the DLL`,
+          isWin(platform2) ? `install Python 3.12 from python.org (Microsoft signs it), then run  ${npmFix2(mine)}` : npmFix2(mine)
+        ));
+      }
+    }
     if (env3.HUM_ENGINE && running && running.version === mine) checks.push(check("warn", `HUM_ENGINE is set (${env3.HUM_ENGINE}): it decides what runs, ahead of any install`, "unset HUM_ENGINE"));
     if (layout2.kind === "npm") {
       const st = readInstallState(env3);
@@ -84541,7 +84576,7 @@ var input_default = MultilineInput;
 
 // src/app.jsx
 var import_jsx_runtime2 = __toESM(require_jsx_runtime(), 1);
-var MINE = true ? "0.1.36" : "";
+var MINE = true ? "0.1.38" : "";
 var fmtDur = (s) => s < 60 ? `${Math.max(1, Math.round(s))}s` : `${Math.floor(s / 60)}m ${Math.round(s % 60)}s`;
 var plural = (n, w) => `${n} ${w}${n === 1 ? "" : "s"}`;
 var firstResp = (e) => e.first_response_s ? ` \xB7 first response ${e.first_response_s.toFixed(1)}s` : "";
@@ -85004,7 +85039,10 @@ function App2({ engine: engine2, task, resume, images = [] }) {
           question: ev.question || "",
           options: ev.options || [],
           default: ev.default || null,
-          questions: ev.questions || null
+          questions: ev.questions || null,
+          kind: ev.kind || null,
+          summary: ev.summary || "",
+          evidence: ev.evidence || []
         });
         setQStep(0);
         setQAnswers({});
@@ -85715,6 +85753,11 @@ function App2({ engine: engine2, task, resume, images = [] }) {
       /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: spinnerLabel })
     ] }),
     question && step && /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { flexDirection: "column", borderStyle: "round", borderColor: ACCENT, paddingX: 1, marginTop: 1, children: [
+      question.kind === "feedback" && qStep === 0 ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: ACCENT, bold: true, children: "\u2726 hum asks for your judgment" }) }),
+        question.summary.split("\n").map((l, i) => /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: `  ${l}` }, `s${i}`)),
+        question.evidence.map((e, i) => /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: `  evidence: ${e}` }, `e${i}`))
+      ] }) : null,
       step.header ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { dimColor: true, children: [
         "  ",
         step.header
@@ -85738,8 +85781,8 @@ function App2({ engine: engine2, task, resume, images = [] }) {
       ] }, i)),
       /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { dimColor: true, children: [
         "  ",
-        stepLabels.length ? step.multi ? "a number ticks \xB7 space ticks the one marked \xB7 " : "a number picks \xB7 " : "",
-        "type an answer",
+        stepLabels.length ? step.multi ? "a number ticks \xB7 space ticks the one marked \xB7 " : step.graded ? "a number marks \xB7 words after it if you like \xB7 " : "a number picks \xB7 " : "",
+        step.graded ? "" : "type an answer",
         step.default ? " \xB7 enter takes the default" : "",
         step.multi && stepLabels.length ? " \xB7 enter takes what is ticked" : "",
         step.secret ? " \xB7 it is not shown and not recorded" : ""
@@ -86000,7 +86043,7 @@ init_update();
 init_install();
 var import_jsx_runtime3 = __toESM(require_jsx_runtime(), 1);
 import { spawnSync as spawnSync5 } from "node:child_process";
-var MINE2 = true ? "0.1.36" : "0.0.0";
+var MINE2 = true ? "0.1.38" : "0.0.0";
 var layout = installLayout();
 function completeInstall() {
   if (layout.kind !== "npm" || !needsInstall(MINE2)) return;

package/dist/install.mjs

@@ -33,6 +33,20 @@ function installedVersion(env = process.env, runImpl = run) {
   }
   return v;
 }
+function trustedPython(env = process.env, runImpl = run) {
+  if (!win) return null;
+  const r = runImpl("py", ["-3.12", "-I", "-c", "import ssl, sys; print(sys.executable)"]);
+  const p = r && r.status === 0 ? String(r.stdout).trim().split(/\r?\n/).pop() : "";
+  return /^[a-z]:\\.+\\python(w)?\.exe$/i.test(p) ? p : null;
+}
+var ASK_SSL = ["-I", "-c", "import ssl"];
+function sslBlocked(env = process.env, runImpl = run) {
+  const r = runImpl(enginePython(env), ASK_SSL);
+  if (r && r.status === 0) return null;
+  const text = String(r && (r.stderr || r.stdout) || "ssl did not import").trim().split(/\r?\n/).filter(Boolean).pop() || "ssl did not import";
+  return text;
+}
+var sslAdvice = (env, version) => `the machine's application control blocked Python's OpenSSL DLL in ${engineDir(env)}; install Python 3.12 from python.org (Microsoft signs it), then run  ${npmFix(version)}`;
 var readInstallState = (env = process.env) => {
   try {
     return JSON.parse(fs.readFileSync(statePath(env), "utf8"));
@@ -82,14 +96,23 @@ function installEngine(version, { env = process.env, say = (m) => console.log(`h
       fs.unlinkSync(stampPath(env));
     } catch {
     }
-    if (!fs.existsSync(python)) {
-      const args = ["venv", "--quiet", "--python", "3.12", ...fs.existsSync(dir) ? ["--clear"] : [], dir];
-      if ((runImpl(u, args, { stdio: "inherit" }) || {}).status !== 0) return outcome(false, "uv venv failed");
-    }
-    if ((runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status !== 0) return outcome(false, `uv pip install ${spec} failed`);
-    const got = importedVersion(env, runImpl);
+    const trusted = trustedPython(env, runImpl);
+    const makeVenv = (clear) => (runImpl(u, ["venv", "--quiet", "--python", trusted || "3.12", ...clear ? ["--clear"] : [], dir], { stdio: "inherit" }) || {}).status === 0;
+    const pipIn = () => (runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status === 0;
+    if (!fs.existsSync(python) && !makeVenv(fs.existsSync(dir))) return outcome(false, "uv venv failed");
+    if (!pipIn()) return outcome(false, `uv pip install ${spec} failed`);
+    let got = importedVersion(env, runImpl);
     if (!got) return outcome(false, "hum did not import after the install");
     if (got !== version && !env.HUM_ENGINE_SPEC) return outcome(false, `installed ${got}, wanted ${version}`, got);
+    let blocked = sslBlocked(env, runImpl);
+    if (blocked && trusted) {
+      say(`the policy here refuses the environment's OpenSSL (${blocked}); rebuilding it on ${trusted} \u2026`);
+      if (makeVenv(true) && pipIn()) {
+        got = importedVersion(env, runImpl) || got;
+        blocked = sslBlocked(env, runImpl);
+      }
+    }
+    if (blocked) return outcome(false, sslAdvice(env, version));
     fs.mkdirSync(dir, { recursive: true });
     fs.writeFileSync(stampPath(env), `${got}
 `);
@@ -105,6 +128,7 @@ function installEngine(version, { env = process.env, say = (m) => console.log(`h
   }
 }
 export {
+  ASK_SSL,
   ASK_VERSION,
   NPM_FIX,
   engineDir,
@@ -115,5 +139,8 @@ export {
   installedVersion,
   needsInstall,
   npmFix,
-  readInstallState
+  readInstallState,
+  sslAdvice,
+  sslBlocked,
+  trustedPython
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaphi-ai/hum",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "description": "Hum (हम): a self-improving coding agent for your terminal.",
   "license": "UNLICENSED",
   "type": "module",