@nopeek/agent-bridge 0.2.1 → 0.3.0

package/dist/bridge.d.ts

@@ -1,5 +1,5 @@
 import type { BridgeConfig, BrainSpec } from "./config.js";
-export declare const VERSION = "0.2.1";
+export declare const VERSION = "0.3.0";
 export interface PairRequest {
     pairingSecret: string;
     appId: string;
@@ -10,6 +10,8 @@ export interface BrainsPatch {
     brainCmd?: string | null;
     /** Global webhook brain; null clears it. */
     brainUrl?: string | null;
+    /** Auto-provisioner command for newly adopted bots; null clears it. */
+    brainProvisionCmd?: string | null;
     /** Per-handle entries; a null value removes that bot's override. */
     map?: Record<string, BrainSpec | null>;
 }
@@ -43,6 +45,14 @@ export declare class BridgeApp {
     statusMinimal(): Record<string, unknown>;
     statusFull(): Record<string, unknown>;
     private startBot;
+    private provisioning;
+    /**
+     * Auto-provision a brain for a newly adopted bot: run BRAIN_PROVISION_CMD
+     * (e.g. "create a Hermes profile with its own soul + memory for this handle")
+     * and store its stdout as the bot's brain command. Best-effort — on any
+     * failure the bot simply keeps the default brain.
+     */
+    private provisionBrain;
     /** Fetch the authoritative bot list and start anything we're missing. */
     private syncBots;
     private startCore;

package/dist/bridge.js

@@ -6,11 +6,12 @@
 // Pairing, unpairing and brain config all happen at runtime (from the app) and
 // persist to <home>/settings.json — no restart, no terminal.
 import { hostname } from "node:os";
+import { spawn } from "node:child_process";
 import { saveSettings } from "./config.js";
 import { BotRunner } from "./bot.js";
 import { ControlSocket } from "./control.js";
 import { resolveBrain } from "./brain.js";
-export const VERSION = "0.2.1";
+export const VERSION = "0.3.0";
 export class PairError extends Error {
     code;
     constructor(code, message) {
@@ -99,6 +100,8 @@ export class BridgeApp {
             this.cfg.brainCmd = patch.brainCmd || null;
         if (patch.brainUrl !== undefined)
             this.cfg.brainUrl = patch.brainUrl || null;
+        if (patch.brainProvisionCmd !== undefined)
+            this.cfg.brainProvisionCmd = patch.brainProvisionCmd || null;
         if (patch.map) {
             for (const [rawHandle, spec] of Object.entries(patch.map)) {
                 const handle = rawHandle.replace(/^@/, "");
@@ -146,6 +149,7 @@ export class BridgeApp {
                         ? { url: this.cfg.brainUrl }
                         : { echo: true },
                 map: this.cfg.brainMap,
+                provisionCmd: this.cfg.brainProvisionCmd,
             },
             bots: [...this.bots.values()].map((b) => ({
                 handle: b.info.handle,
@@ -163,6 +167,59 @@ export class BridgeApp {
         const runner = new BotRunner(info, this.cfg);
         this.bots.set(info.userId, runner);
         runner.start(); // background; failures are isolated inside the runner
+        void this.provisionBrain(info); // background; bot echoes until it lands
+    }
+    // A handle is provisioned at most once per process; the persisted BRAIN_MAP
+    // entry prevents re-provisioning across restarts.
+    provisioning = new Set();
+    /**
+     * Auto-provision a brain for a newly adopted bot: run BRAIN_PROVISION_CMD
+     * (e.g. "create a Hermes profile with its own soul + memory for this handle")
+     * and store its stdout as the bot's brain command. Best-effort — on any
+     * failure the bot simply keeps the default brain.
+     */
+    async provisionBrain(info) {
+        const cmd = this.cfg.brainProvisionCmd;
+        const handle = info.handle.replace(/^@/, "");
+        if (!cmd || this.cfg.brainMap[handle] || this.provisioning.has(handle))
+            return;
+        this.provisioning.add(handle);
+        console.log(`[provision:@${handle}] running brain provisioner`);
+        const out = await new Promise((resolvePromise) => {
+            const child = spawn("bash", ["-c", cmd], {
+                stdio: ["ignore", "pipe", "pipe"],
+                env: { ...process.env, NOPEEK_BOT_HANDLE: handle, NOPEEK_BOT_USER_ID: info.userId },
+            });
+            let stdout = "";
+            let stderr = "";
+            const timer = setTimeout(() => {
+                child.kill("SIGKILL");
+                resolvePromise(null);
+            }, 120_000);
+            child.stdout.on("data", (d) => (stdout += d.toString()));
+            child.stderr.on("data", (d) => (stderr += d.toString()));
+            child.on("error", () => {
+                clearTimeout(timer);
+                resolvePromise(null);
+            });
+            child.on("close", (code) => {
+                clearTimeout(timer);
+                if (code !== 0) {
+                    console.error(`[provision:@${handle}] exit ${code}. stderr: ${stderr.slice(0, 1000)}`);
+                    resolvePromise(null);
+                    return;
+                }
+                resolvePromise(stdout.trim());
+            });
+        });
+        if (!out) {
+            console.error(`[provision:@${handle}] provisioner produced no brain command — bot keeps the default brain`);
+            return;
+        }
+        // Use the LAST non-empty stdout line: provisioners may log progress above it.
+        const brainCmd = out.split("\n").map((l) => l.trim()).filter(Boolean).pop();
+        this.setBrains({ map: { [handle]: { cmd: brainCmd } } });
+        console.log(`[provision:@${handle}] brain provisioned`);
     }
     /** Fetch the authoritative bot list and start anything we're missing. */
     async syncBots() {

package/dist/cli.js

@@ -51,7 +51,7 @@ if (sub === "status") {
 }
 if (sub === "install") {
     try {
-        await installService(cfg);
+        await installService(cfg, rest.includes("--no-open"));
     }
     catch (err) {
         console.error(`[install] ${err.message}`);

package/dist/config.d.ts

@@ -18,7 +18,16 @@ export interface BridgeConfig {
     brainUrl: string | null;
     /** Per-handle overrides: { "<handle>": {"cmd": "…"} | {"url": "…"} }. */
     brainMap: Record<string, BrainSpec>;
+    /**
+     * Auto-provisioner: run ONCE for each adopted bot that has no BRAIN_MAP
+     * entry (env: NOPEEK_BOT_HANDLE, NOPEEK_BOT_USER_ID). Its trimmed stdout
+     * becomes that bot's brain command — e.g. a script that creates a fresh
+     * Hermes profile (own soul + memory) per bot and prints how to invoke it.
+     */
+    brainProvisionCmd: string | null;
     brainTimeoutMs: number;
+    /** Where `install` sends the user to finish setup (opened in the browser). */
+    appUrl: string;
     /** Local control API port (status + pairing + brain config, loopback only). */
     port: number;
     /** Where per-bot device identity/key stores live. */
@@ -30,10 +39,11 @@ export interface BridgeConfig {
     declineMessage: string | null;
 }
 export declare const DEFAULT_API_URL = "https://d3qweh72vesa98.cloudfront.net";
+export declare const DEFAULT_APP_URL = "https://d32w3to73s0pu5.cloudfront.net/messenger/";
 export declare const DEFAULT_PORT = 8790;
 export declare const DEFAULT_BRAIN_TIMEOUT_MS = 180000;
 export declare function defaultHomeDir(): string;
-export declare const HELP = "nopeek-agent-bridge \u2014 run your agents as E2EE NoPeek bots\n\nUsage:\n  nopeek-agent-bridge install     Install as a background service (launchd/systemd),\n                                  then finish setup from the NoPeek app:\n                                  Bots -> Connect this computer.\n  nopeek-agent-bridge uninstall   Remove the background service (keeps data/settings).\n  nopeek-agent-bridge status      Show the running bridge's status.\n  nopeek-agent-bridge [run]       Run in the foreground. Unpaired bridges wait to be\n                                  paired from the NoPeek app; --pair still works:\n                                    npx @nopeek/agent-bridge --pair npr_\u2026 --app-id app_\u2026\n\nOptions:\n  --pair <code>            Pairing code from the NoPeek app             (env NOPEEK_PAIRING_CODE)\n  --app-id <id>            NoPeek app id                                (env NOPEEK_APP_ID)\n  --api-url <url>          API base, default https://d3qweh72vesa98.cloudfront.net  (env NOPEEK_API_URL)\n  --brain-cmd <cmd>        Shell brain: message on stdin -> reply on stdout   (env BRAIN_CMD)\n  --brain-url <url>        Webhook brain: POST {text,...} -> {text|reply}     (env BRAIN_URL)\n  --brain-map <json>       Per-bot overrides {\"<handle>\":{\"cmd\":\"\u2026\"}|{\"url\":\"\u2026\"}} (env BRAIN_MAP)\n  --brain-timeout-ms <ms>  Brain timeout, default 180000          (env BRAIN_TIMEOUT_MS)\n  --port <port>            Local control API port, default 8790    (env NOPEEK_BRIDGE_PORT)\n  --data-dir <dir>         Device-key store dir                        (env NOPEEK_BRIDGE_DATA_DIR)\n  --home <dir>             Bridge home, default ~/.nopeek-bridge       (env NOPEEK_BRIDGE_HOME)\n  --config <path>          Config file, default ./nopeek-bridge.config.json\n  -h, --help               Show this help\n\nWith no brain configured, bots run in echo mode (\"You said: \u2026\") \u2014 a zero-config smoke test.\nPairing and brains can be managed entirely from the NoPeek app once the service is running.";
+export declare const HELP = "nopeek-agent-bridge \u2014 run your agents as E2EE NoPeek bots\n\nUsage:\n  nopeek-agent-bridge install     Install as a background service (launchd/systemd),\n                                  then finish setup from the NoPeek app:\n                                  Bots -> Connect this computer.\n  nopeek-agent-bridge uninstall   Remove the background service (keeps data/settings).\n  nopeek-agent-bridge status      Show the running bridge's status.\n  nopeek-agent-bridge [run]       Run in the foreground. Unpaired bridges wait to be\n                                  paired from the NoPeek app; --pair still works:\n                                    npx @nopeek/agent-bridge --pair npr_\u2026 --app-id app_\u2026\n\nOptions:\n  --pair <code>            Pairing code from the NoPeek app             (env NOPEEK_PAIRING_CODE)\n  --app-id <id>            NoPeek app id                                (env NOPEEK_APP_ID)\n  --api-url <url>          API base, default https://d3qweh72vesa98.cloudfront.net  (env NOPEEK_API_URL)\n  --brain-cmd <cmd>        Shell brain: message on stdin -> reply on stdout   (env BRAIN_CMD)\n  --brain-url <url>        Webhook brain: POST {text,...} -> {text|reply}     (env BRAIN_URL)\n  --brain-map <json>       Per-bot overrides {\"<handle>\":{\"cmd\":\"\u2026\"}|{\"url\":\"\u2026\"}} (env BRAIN_MAP)\n  --brain-provision-cmd <cmd>  Run once per new bot; stdout becomes its brain command\n                           (env BRAIN_PROVISION_CMD \u2014 e.g. a script that creates a\n                           fresh Hermes profile with its own soul + memory)\n  --app-url <url>          App opened after install                     (env NOPEEK_APP_URL)\n  --no-open                install: don't open the app in the browser\n  --brain-timeout-ms <ms>  Brain timeout, default 180000          (env BRAIN_TIMEOUT_MS)\n  --port <port>            Local control API port, default 8790    (env NOPEEK_BRIDGE_PORT)\n  --data-dir <dir>         Device-key store dir                        (env NOPEEK_BRIDGE_DATA_DIR)\n  --home <dir>             Bridge home, default ~/.nopeek-bridge       (env NOPEEK_BRIDGE_HOME)\n  --config <path>          Config file, default ./nopeek-bridge.config.json\n  -h, --help               Show this help\n\nWith no brain configured, bots run in echo mode (\"You said: \u2026\") \u2014 a zero-config smoke test.\nPairing and brains can be managed entirely from the NoPeek app once the service is running.";
 /** Load config from argv + env + cwd config file + home settings. Never
  *  requires pairing — an unpaired bridge waits for the app to pair it. */
 export declare function loadConfig(argv?: string[]): BridgeConfig;

package/dist/config.js

@@ -10,6 +10,7 @@ import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 import { parseArgs } from "node:util";
 export const DEFAULT_API_URL = "https://d3qweh72vesa98.cloudfront.net";
+export const DEFAULT_APP_URL = "https://d32w3to73s0pu5.cloudfront.net/messenger/";
 export const DEFAULT_PORT = 8790;
 export const DEFAULT_BRAIN_TIMEOUT_MS = 180_000;
 export function defaultHomeDir() {
@@ -22,8 +23,11 @@ const CLI_OPTIONS = {
     "brain-cmd": { type: "string" },
     "brain-url": { type: "string" },
     "brain-map": { type: "string" },
+    "brain-provision-cmd": { type: "string" },
     "brain-timeout-ms": { type: "string" },
     "decline-message": { type: "string" },
+    "app-url": { type: "string" },
+    "no-open": { type: "boolean" },
     port: { type: "string" },
     "data-dir": { type: "string" },
     home: { type: "string" },
@@ -38,8 +42,10 @@ const FLAG_TO_KEY = {
     "brain-cmd": "BRAIN_CMD",
     "brain-url": "BRAIN_URL",
     "brain-map": "BRAIN_MAP",
+    "brain-provision-cmd": "BRAIN_PROVISION_CMD",
     "brain-timeout-ms": "BRAIN_TIMEOUT_MS",
     "decline-message": "NOPEEK_DECLINE_MESSAGE",
+    "app-url": "NOPEEK_APP_URL",
     port: "NOPEEK_BRIDGE_PORT",
     "data-dir": "NOPEEK_BRIDGE_DATA_DIR",
     home: "NOPEEK_BRIDGE_HOME",
@@ -63,6 +69,11 @@ Options:
   --brain-cmd <cmd>        Shell brain: message on stdin -> reply on stdout   (env BRAIN_CMD)
   --brain-url <url>        Webhook brain: POST {text,...} -> {text|reply}     (env BRAIN_URL)
   --brain-map <json>       Per-bot overrides {"<handle>":{"cmd":"…"}|{"url":"…"}} (env BRAIN_MAP)
+  --brain-provision-cmd <cmd>  Run once per new bot; stdout becomes its brain command
+                           (env BRAIN_PROVISION_CMD — e.g. a script that creates a
+                           fresh Hermes profile with its own soul + memory)
+  --app-url <url>          App opened after install                     (env NOPEEK_APP_URL)
+  --no-open                install: don't open the app in the browser
   --brain-timeout-ms <ms>  Brain timeout, default ${DEFAULT_BRAIN_TIMEOUT_MS}          (env BRAIN_TIMEOUT_MS)
   --port <port>            Local control API port, default ${DEFAULT_PORT}    (env NOPEEK_BRIDGE_PORT)
   --data-dir <dir>         Device-key store dir                        (env NOPEEK_BRIDGE_DATA_DIR)
@@ -179,11 +190,13 @@ export function loadConfig(argv = process.argv.slice(2)) {
         brainCmd: get("brain-cmd") ?? null,
         brainUrl: get("brain-url") ?? null,
         brainMap: parseBrainMap(get("brain-map")),
+        brainProvisionCmd: get("brain-provision-cmd") ?? null,
         brainTimeoutMs,
         port,
         dataDir,
         homeDir,
         declineMessage: get("decline-message") ?? null,
+        appUrl: get("app-url") ?? DEFAULT_APP_URL,
     };
 }
 /**
@@ -200,6 +213,7 @@ export function saveSettings(cfg) {
         ...(cfg.brainCmd ? { BRAIN_CMD: cfg.brainCmd } : {}),
         ...(cfg.brainUrl ? { BRAIN_URL: cfg.brainUrl } : {}),
         ...(Object.keys(cfg.brainMap).length ? { BRAIN_MAP: JSON.stringify(cfg.brainMap) } : {}),
+        ...(cfg.brainProvisionCmd ? { BRAIN_PROVISION_CMD: cfg.brainProvisionCmd } : {}),
         ...(cfg.declineMessage ? { NOPEEK_DECLINE_MESSAGE: cfg.declineMessage } : {}),
     };
     const path = settingsPath(cfg.homeDir);

package/dist/service.d.ts

@@ -1,4 +1,4 @@
 import type { BridgeConfig } from "./config.js";
-export declare function installService(cfg: BridgeConfig): Promise<void>;
+export declare function installService(cfg: BridgeConfig, noOpen?: boolean): Promise<void>;
 export declare function uninstallService(): void;
 export declare function printStatus(port: number): Promise<void>;

package/dist/service.js

@@ -41,7 +41,7 @@ function launchctl(args, ignoreFailure = false) {
             throw err;
     }
 }
-export async function installService(cfg) {
+export async function installService(cfg, noOpen = false) {
     if (process.platform !== "darwin" && process.platform !== "linux") {
         throw new Error(`automatic service install supports macOS and Linux. On this platform, run the bridge with any process manager:\n  nopeek-agent-bridge run`);
     }
@@ -122,9 +122,21 @@ WantedBy=default.target
     }
     console.log(`
 Done. Next step — in the NoPeek app on THIS computer:
-  Contacts -> My Bots -> Connect this computer
+  Contacts -> My Bots -> "Run your bots on this computer" -> Connect
 Pairing, choosing your agent (Hermes, …) and everything else happens in the app.
 Logs: ${logFile}`);
+    // Take the user straight to the app: sign in once, tap Connect, done.
+    // (Sessions persist, so next time this is automatic.)
+    if (!noOpen) {
+        const opener = process.platform === "darwin" ? "open" : "xdg-open";
+        try {
+            execFileSync(opener, [cfg.appUrl], { stdio: "ignore" });
+            console.log(`[install] opened ${cfg.appUrl}`);
+        }
+        catch {
+            console.log(`[install] open ${cfg.appUrl} in your browser to finish setup`);
+        }
+    }
 }
 export function uninstallService() {
     if (process.platform === "darwin") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nopeek/agent-bridge",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Run your own agents as E2EE NoPeek bots. Pairs with a one-time code, runs every bot you own, and pipes messages to any command or webhook.",
   "type": "module",
   "license": "MIT",