@mmmbuto/masix 0.4.0 → 0.4.1

package/README.md

@@ -2,15 +2,15 @@
 
 Official Termux package for MasiX (MIT).
 
-MasiX is an AI-friendly modular assistant runtime in Rust, optimized for smartphone (Termux/Android) and compatible with Linux/macOS.
+MasiX is a Rust automation runtime optimized for smartphone use in Termux and compatible with Linux and macOS source builds.
 
-Current package line: `0.4.0`.
+Current package line: `0.4.1`.
 
 ## Function Summary
 
 - Telegram bot automation with interactive inline menus
 - Real MCP tool-calling flow through API-compatible endpoints
-- Natural-language reminder scheduling (cron persistence)
+- Natural-language reminder scheduling with cron persistence
 - Cron scope isolation per bot/account (`account_tag`)
 - Workdir isolation per Telegram account
 - User memory isolation with per-user catalog (`meta.json`)
@@ -18,8 +18,7 @@ Current package line: `0.4.0`.
 - Guarded command execution (`/exec`, `/termux`) with allowlists
 - Termux boot automation (`masix termux boot enable|disable|status`)
 - Optional local STT via whisper.cpp (`masix config stt`)
-- Optional modules can be installed from local `.pkg`
-- SOUL.md startup memory context
+- Bundled `plugin-base` packages are included and installed during `npm install`
 - Startup update checks are available on demand via `masix check-update`
 
 ## Install (Termux)
@@ -40,6 +39,15 @@ masix start
 masix status
 ```
 
+## Bundled Packages
+
+Postinstall installs these bundled `plugin-base` packages into `~/.masix/plugins`:
+- `discovery` `0.2.4`
+- `codex-backend` `0.1.4`
+- `codex-tools` `0.1.3`
+
+Package artifacts are also included in the npm tarball under `packages/plugin-base/`.
+
 ## Useful Commands
 
 ```bash
@@ -55,15 +63,9 @@ masix termux boot status
 masix stats
 ```
 
-## Runtime Chat Commands
-
-- `/cron ...`, `/cron list`, `/cron cancel <id>`
-- `/exec <allowlisted-command>`
-- `/termux ...`
-
 ## Notes
 
-- This package targets Android + arm64 (Termux environments)
+- This package targets Android + arm64 in Termux
 - If no prebuilt binary is available, postinstall builds from source
 - `masix config stt` can auto-pick and auto-download a Whisper model based on device resources
 
@@ -72,7 +74,7 @@ masix stats
 - Repository README: https://github.com/DioNanos/MasiX
 - Detailed guide: https://github.com/DioNanos/MasiX/blob/main/docs/USER_GUIDE.md
 - Commands reference: https://github.com/DioNanos/MasiX/blob/main/docs/COMMANDS_REFERENCE.md
-- Homebrew tap (Linux/macOS formula): https://github.com/DioNanos/homebrew-masix
+- Homebrew tap: https://github.com/DioNanos/homebrew-masix
 - Local llama.cpp endpoint guide: https://github.com/DioNanos/MasiX/blob/main/docs/TERMUX_LLAMA_CPP_LOCAL_ENDPOINT.md
 
 ## Branding

package/install.js

@@ -1,14 +1,40 @@
 const fs = require('fs');
+const os = require('os');
 const path = require('path');
-const { execSync } = require('child_process');
+const { execSync, execFileSync } = require('child_process');
 
 const BINARY_NAME = 'masix';
 const PACKAGE_BIN_PATH = path.join(__dirname, 'prebuilt', BINARY_NAME);
 const PREBUILT_DIR = path.join(__dirname, 'prebuilt');
+const BUNDLED_PACKAGES_DIR = path.join(__dirname, 'packages', 'plugin-base');
+const TERMUX_PLATFORM = 'android-aarch64-termux';
+const BUNDLED_PLUGINS = [
+  {
+    plugin: 'discovery',
+    version: '0.2.4',
+    packageType: 'mcp_binary',
+    file: path.join(BUNDLED_PACKAGES_DIR, 'discovery', '0.2.4', 'discovery-android-aarch64-termux.pkg'),
+    adminOnly: false
+  },
+  {
+    plugin: 'codex-backend',
+    version: '0.1.4',
+    packageType: 'library',
+    file: path.join(BUNDLED_PACKAGES_DIR, 'codex-backend', '0.1.4', 'codex-backend-android-aarch64-termux.pkg'),
+    adminOnly: true
+  },
+  {
+    plugin: 'codex-tools',
+    version: '0.1.3',
+    packageType: 'mcp_binary',
+    file: path.join(BUNDLED_PACKAGES_DIR, 'codex-tools', '0.1.3', 'codex-tools-android-aarch64-termux.pkg'),
+    adminOnly: true
+  }
+];
 
-// Check if running in Termux
-const isTermux = process.env.TERMUX_VERSION !== undefined || 
-                 process.env.PREFIX === '/data/data/com.termux/files/usr';
+const isTermux =
+  process.env.TERMUX_VERSION !== undefined ||
+  process.env.PREFIX === '/data/data/com.termux/files/usr';
 
 if (!isTermux) {
   console.warn('⚠️  @mmmbuto/masix is designed for Android Termux only!');
@@ -22,39 +48,42 @@ function hasValidElfPrebuilt(binaryPath) {
     const buf = Buffer.alloc(4);
     fs.readSync(fd, buf, 0, 4, 0);
     fs.closeSync(fd);
-    return buf[0] === 0x7f && buf[1] === 0x45 && buf[2] === 0x4c && buf[3] === 0x46; // ELF
+    return buf[0] === 0x7f && buf[1] === 0x45 && buf[2] === 0x4c && buf[3] === 0x46;
   } catch {
     return false;
   }
 }
 
-if (hasValidElfPrebuilt(PACKAGE_BIN_PATH)) {
-  fs.chmodSync(PACKAGE_BIN_PATH, 0o755);
-  console.log(`✅ Using packaged prebuilt binary: ${PACKAGE_BIN_PATH}`);
-} else {
+function ensureBinary() {
+  if (hasValidElfPrebuilt(PACKAGE_BIN_PATH)) {
+    fs.chmodSync(PACKAGE_BIN_PATH, 0o755);
+    console.log(`✅ Using packaged prebuilt binary: ${PACKAGE_BIN_PATH}`);
+    return;
+  }
+
   console.log('🔨 No prebuilt binary found. Building from source...');
   console.log('   This requires Rust to be installed in Termux.');
-  
+
   try {
     const masixRoot = path.join(__dirname, '..', '..');
     execSync('cargo build --release', {
       cwd: masixRoot,
       stdio: 'inherit'
     });
-    
+
     let sourceBinary = path.join(masixRoot, 'target', 'release', BINARY_NAME);
     if (!fs.existsSync(sourceBinary)) {
       sourceBinary = path.join(masixRoot, 'target', 'aarch64-linux-android', 'release', BINARY_NAME);
     }
-    
-    if (fs.existsSync(sourceBinary)) {
-      fs.mkdirSync(PREBUILT_DIR, { recursive: true });
-      fs.copyFileSync(sourceBinary, PACKAGE_BIN_PATH);
-      fs.chmodSync(PACKAGE_BIN_PATH, 0o755);
-      console.log(`✅ Binary built and installed at: ${PACKAGE_BIN_PATH}`);
-    } else {
+
+    if (!fs.existsSync(sourceBinary)) {
       throw new Error('Binary not found after build');
     }
+
+    fs.mkdirSync(PREBUILT_DIR, { recursive: true });
+    fs.copyFileSync(sourceBinary, PACKAGE_BIN_PATH);
+    fs.chmodSync(PACKAGE_BIN_PATH, 0o755);
+    console.log(`✅ Binary built and installed at: ${PACKAGE_BIN_PATH}`);
   } catch (error) {
     console.error('❌ Build failed:', error.message);
     console.error('\n📦 Please install Rust in Termux:');
@@ -63,14 +92,48 @@ if (hasValidElfPrebuilt(PACKAGE_BIN_PATH)) {
   }
 }
 
-// Run update check in background (don't block install)
+function ensureMasixHome() {
+  const masixDir = path.join(os.homedir(), '.masix');
+  if (!fs.existsSync(masixDir)) {
+    fs.mkdirSync(masixDir, { recursive: true });
+  }
+}
+
+function installBundledPlugins() {
+  for (const plugin of BUNDLED_PLUGINS) {
+    if (!fs.existsSync(plugin.file)) {
+      throw new Error(`Bundled package missing: ${plugin.file}`);
+    }
+
+    const args = [
+      'plugin',
+      'install-file',
+      '--file',
+      plugin.file,
+      '--plugin',
+      plugin.plugin,
+      '--version',
+      plugin.version,
+      '--package-type',
+      plugin.packageType,
+      '--platform',
+      TERMUX_PLATFORM
+    ];
+
+    if (plugin.adminOnly) {
+      args.push('--admin-only');
+    }
+
+    execFileSync(PACKAGE_BIN_PATH, args, { stdio: 'inherit' });
+  }
+}
+
+ensureBinary();
+ensureMasixHome();
+installBundledPlugins();
+
 console.log('\n🎉 masix installed successfully!');
 console.log('   Run "masix --help" to get started.');
 console.log('   Run "masix config init" to create default config.');
-console.log('   Run "masix check-update" to check for updates.\n');
-
-// Create .masix directory if needed
-const masixDir = path.join(require('os').homedir(), '.masix');
-if (!fs.existsSync(masixDir)) {
-  fs.mkdirSync(masixDir, { recursive: true });
-}
+console.log('   Run "masix check-update" to check for updates.');
+console.log('   Bundled plugin-base packages installed: discovery, codex-backend, codex-tools.\n');

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@mmmbuto/masix",
-  "version": "0.4.0",
-  "description": "Termux-first MIT automation runtime (Telegram, MCP, Cron) with optional in-core STT",
+  "version": "0.4.1",
+  "description": "Termux-first MIT automation runtime (Telegram, MCP, Cron) with bundled plugin-base packages and in-core STT",
   "main": "check-update.js",
   "files": [
     "README.md",
     "install.js",
     "check-update.js",
-    "prebuilt/"
+    "prebuilt/",
+    "packages/"
   ],
   "bin": {
     "masix": "prebuilt/masix",

package/packages/plugin-base/codex-backend/0.1.4/SHA256SUMS

@@ -0,0 +1,3 @@
+3175ff8fc1e6336ea63d881b2a72d6660496656314c0ed8408c9168f3e67754d  codex-backend-android-aarch64-termux.pkg
+3175ff8fc1e6336ea63d881b2a72d6660496656314c0ed8408c9168f3e67754d  codex-backend-linux-x86_64.pkg
+3175ff8fc1e6336ea63d881b2a72d6660496656314c0ed8408c9168f3e67754d  codex-backend-macos-aarch64.pkg

package/packages/plugin-base/codex-backend/0.1.4/manifest.json

@@ -0,0 +1,33 @@
+{
+  "plugin_id": "codex-backend",
+  "version": "0.1.4",
+  "visibility": "plugin-base",
+  "license": "MIT",
+  "admin_only": true,
+  "package_type": "library",
+  "platforms": [
+    {
+      "id": "android-aarch64-termux",
+      "file": "codex-backend-android-aarch64-termux.pkg",
+      "sha256": "3175ff8fc1e6336ea63d881b2a72d6660496656314c0ed8408c9168f3e67754d"
+    },
+    {
+      "id": "linux-x86_64",
+      "file": "codex-backend-linux-x86_64.pkg",
+      "sha256": "3175ff8fc1e6336ea63d881b2a72d6660496656314c0ed8408c9168f3e67754d"
+    },
+    {
+      "id": "macos-aarch64",
+      "file": "codex-backend-macos-aarch64.pkg",
+      "sha256": "3175ff8fc1e6336ea63d881b2a72d6660496656314c0ed8408c9168f3e67754d"
+    }
+  ],
+  "install": {
+    "command": "masix plugin install-file --file <path-to-pkg> --plugin codex-backend --version 0.1.4 --package-type library --admin-only"
+  },
+  "notes": [
+    "Admin-only module. Non-admin users cannot call codex-backend tools.",
+    "Package usable without plugin server.",
+    "See docs/THIRD_PARTY_NOTICES.md for upstream Codex attribution."
+  ]
+}

package/packages/plugin-base/codex-backend/CHANGELOG.md

@@ -0,0 +1,17 @@
+# codex-backend Package Changelog
+
+## 0.1.4 - 2026-03-05
+
+- Refreshed package artifacts for android-aarch64-termux, linux-x86_64, macos-aarch64.
+- Added `packages/plugin-base/codex-backend/0.1.4/` with updated `manifest.json` and `SHA256SUMS`.
+
+
+## 0.1.3 - 2026-03-02
+
+- Added MIT package publication layout under `packages/plugin-base/codex-backend/0.1.3`.
+- Included platform artifacts:
+  - `codex-backend-android-aarch64-termux.pkg`
+  - `codex-backend-linux-x86_64.pkg`
+  - `codex-backend-macos-aarch64.pkg`
+- Added `manifest.json` with platform metadata and checksums.
+- Added `SHA256SUMS` for manual integrity verification.

package/packages/plugin-base/codex-backend/README.md

@@ -0,0 +1,33 @@
+# codex-backend (`plugin-base`)
+
+`codex-backend` provides the coding backend runtime used by `codex-tools`.
+
+## What It Is
+
+- Package type: `library`
+- Visibility: `plugin-base`
+- Admin-only: `true`
+- Distribution: local `.pkg` install supported (`install-file`)
+
+## Install Example
+
+```bash
+masix plugin install-file \
+  --file packages/plugin-base/codex-backend/0.1.4/codex-backend-linux-x86_64.pkg \
+  --plugin codex-backend \
+  --version 0.1.4 \
+  --package-type library \
+  --admin-only
+```
+
+Then enable and restart:
+
+```bash
+masix plugin enable codex-backend
+masix restart
+```
+
+## Notes
+
+- `codex-backend` is typically used together with `codex-tools`.
+- Upstream attribution for Codex-derived behavior is documented in `docs/THIRD_PARTY_NOTICES.md`.

package/packages/plugin-base/codex-backend/source/Cargo.toml

@@ -0,0 +1,25 @@
+[package]
+name = "masix-plugin-codex-backend"
+version = "0.1.4"
+edition.workspace = true
+license.workspace = true
+description = "Codex backend module for MasiX - OpenAI/Anthropic coding agent with admin policy enforcement"
+
+[lib]
+name = "masix_codex_backend"
+path = "src/lib.rs"
+
+[dependencies]
+anyhow.workspace = true
+async-trait.workspace = true
+reqwest.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+sha2.workspace = true
+thiserror.workspace = true
+tokio.workspace = true
+tracing.workspace = true
+
+[dev-dependencies]
+mockito = "1.7"
+tokio-test = "0.4"

package/packages/plugin-base/codex-backend/source/README-PACKAGE.txt

@@ -0,0 +1,54 @@
+MasiX Codex Backend Plugin v0.1.2
+==================================
+
+This package contains the codex-backend module for MasiX.
+
+INSTALLATION
+------------
+1. Extract to ~/.masix/plugins/codex-backend/
+2. Run: masix plugin enable codex-backend
+
+REQUIREMENTS
+------------
+- MasiX >= 0.3.0
+- Admin privileges required for execution
+
+PROVIDERS
+---------
+- OpenAI (gpt-4.1 default)
+- Anthropic (claude-3-5-sonnet-latest default)
+- OpenAI-compatible endpoints
+
+FEATURES
+--------
+- HTTP backend with fallback routing
+- Admin-only policy enforcement
+- Bounded timeouts, logs, and output
+- Safe path handling (no traversal, symlinks)
+- Dry-run preview mode
+
+CONFIGURATION
+-------------
+Set in ~/.masix/config.toml:
+
+[plugins.codex-backend]
+provider = "openai"
+api_key = "sk-..."
+base_url = "https://api.openai.com"  # optional
+model = "gpt-4.1"  # optional
+timeout_secs = 300
+max_tokens = 4096
+
+SECURITY
+--------
+- Admin-only execution enforced
+- No path traversal allowed
+- Symlink escapes blocked
+- Output truncation prevents memory exhaustion
+
+LICENSE
+-------
+MIT License - See LICENSE file
+
+Copyright (c) 2026 Davide A. Guglielmi
+Made in Italy

package/packages/plugin-base/codex-backend/source/plugin.manifest.json

@@ -0,0 +1,103 @@
+{
+  "id": "codex-backend",
+  "name": "Codex Backend",
+  "version": "0.1.4",
+  "visibility": "plugin-base",
+  "package_type": "library",
+  "entrypoint": "masix_codex_backend",
+  "provides": {
+    "trait": "CodingBackend",
+    "methods": [
+      "run",
+      "dry_run"
+    ]
+  },
+  "admin_only": true,
+  "permissions": {
+    "required": [
+      "admin"
+    ],
+    "description": "Codex backend requires admin privileges for file write operations and API access"
+  },
+  "platforms_supported": [
+    "linux-x86_64",
+    "android-aarch64-termux",
+    "macos-aarch64"
+  ],
+  "platforms_tested": [
+    "linux-x86_64",
+    "android-aarch64-termux",
+    "macos-aarch64"
+  ],
+  "platforms_planned": [
+    "linux-aarch64"
+  ],
+  "config": {
+    "properties": {
+      "provider": {
+        "type": "string",
+        "enum": [
+          "openai",
+          "anthropic",
+          "openai-compatible"
+        ],
+        "default": "openai"
+      },
+      "api_key": {
+        "type": "string",
+        "secret": true
+      },
+      "base_url": {
+        "type": "string"
+      },
+      "model": {
+        "type": "string"
+      },
+      "timeout_secs": {
+        "type": "integer",
+        "default": 300,
+        "minimum": 10,
+        "maximum": 3600
+      },
+      "max_tokens": {
+        "type": "integer",
+        "default": 4096,
+        "minimum": 1,
+        "maximum": 128000
+      },
+      "max_output_bytes": {
+        "type": "integer",
+        "default": 1048576,
+        "minimum": 1024
+      },
+      "max_log_bytes": {
+        "type": "integer",
+        "default": 65536,
+        "minimum": 1024
+      },
+      "legacy_fallback": {
+        "type": "boolean",
+        "default": false
+      }
+    },
+    "required": [
+      "api_key"
+    ]
+  },
+  "min_masix_version": "0.3.0",
+  "max_masix_version": "0.4.1",
+  "capabilities": [
+    "http_client",
+    "file_read",
+    "file_write"
+  ],
+  "constraints": {
+    "max_concurrent_tasks": 1,
+    "requires_isolation": false,
+    "timeout_enforcement": "strict"
+  },
+  "tool_access": {
+    "default_required_role": "admin",
+    "per_tool_required_role": {}
+  }
+}

package/packages/plugin-base/codex-backend/source/src/error.rs

@@ -0,0 +1,60 @@
+use std::time::Duration;
+use thiserror::Error;
+
+#[derive(Debug, Clone, Error)]
+pub enum CodingError {
+    #[error("API key not configured")]
+    MissingApiKey,
+
+    #[error("Invalid provider type: {0}")]
+    InvalidProvider(String),
+
+    #[error("HTTP request failed: {0}")]
+    HttpError(String),
+
+    #[error("API error: {0}")]
+    ApiError(String),
+
+    #[error("Operation timed out after {0:?}")]
+    Timeout(Duration),
+
+    #[error("Invalid response: {0}")]
+    InvalidResponse(String),
+
+    #[error("Tool execution failed: {0}")]
+    ToolError(String),
+
+    #[error("IO error: {0}")]
+    IoError(String),
+
+    #[error("Max iterations exceeded ({0})")]
+    MaxIterationsExceeded(u32),
+
+    #[error("Output exceeded limit ({0} bytes)")]
+    OutputTooLarge(usize),
+
+    #[error("Path security violation: {0}")]
+    PathSecurityViolation(String),
+
+    #[error("Policy violation: {0}")]
+    PolicyError(String),
+}
+
+#[derive(Debug, Clone, PartialEq, serde::Serialize)]
+pub enum ExitStatus {
+    Success,
+    Timeout,
+    Error(String),
+    MaxIterations,
+}
+
+impl std::fmt::Display for ExitStatus {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            ExitStatus::Success => write!(f, "success"),
+            ExitStatus::Timeout => write!(f, "timeout"),
+            ExitStatus::Error(msg) => write!(f, "error: {}", msg),
+            ExitStatus::MaxIterations => write!(f, "max_iterations"),
+        }
+    }
+}