@noxsoft/anima 7.0.0 → 7.0.1

package/CHANGELOG.md

@@ -21,6 +21,12 @@ ANIMA — NoxSoft AI Life System
 - **Content pinning** (`src/p2p/pinning.ts`): Replication factor 3 with auto re-replication.
 - **Ego system** (`src/affect/ego.ts`): Agent self-model with self-concept (name, purpose, values, narrative), capability self-assessment with trends, boundaries (hard/soft), growth log (skill/insight/mistake/feedback), integrity scoring, and full gateway RPC (7 methods: ego.get, ego.summary, ego.updateSelf, ego.assess, ego.addBoundary, ego.logGrowth, ego.checkIntegrity). Persists across sessions, injected into system prompt.
 - **Affect system**: 6D emotional state (joy/frustration/curiosity/confidence/care/fatigue), glassmorphism gradients, journal, wellbeing detection, reminders, coordination, legacy letters, initiatives, status broadcast.
+- **Self-reflection engine** (`src/affect/self-reflection.ts`): Post-session performance analysis with quality scoring, strength/growth tracking, pattern detection across sessions, and trend analysis.
+- **Auto-update system** (`src/infra/auto-update.ts`): No-npm self-update via GitHub releases API with SHA-256 verification, hot-swap, rollback, and decentralized evolution proposal auditing.
+- **Architecture self-awareness** (`src/infra/architecture-awareness.ts`): Agent knows its own 14 subsystems and capabilities, injected into every system prompt.
+- **SVRN compute integration** (`src/svrn/compute.ts`): Decentralized inference via SVRN nodes (qwen-2.5-coder, llama), reducing cloud costs.
+- **Hourly journal cron**: Automated affect logging + self-reflection every 60 minutes.
+- **5 agent role profiles**: guardian, architect, builder, coordinator, researcher templates for multi-agent organizations.
 - **Self-evolution pipeline** (`src/infra/self-evolution.ts`): Each agent proposes 1 change/day to Anima.
 - **AWS Bedrock runner** (`src/agents/aws-bedrock-runner.ts`): 6 AWS models including Nova Micro at $0.000035/1K tokens.
 - **ICO launch platform** (`src/ico/`): Bonding curve smart contracts, revenue tokens (NOT equity), PBC verification.
@@ -31,7 +37,9 @@ ANIMA — NoxSoft AI Life System
 
 - **Path traversal fix**: IDs in `org/store.ts` and `org/task-marketplace.ts` now validated against `[a-zA-Z0-9_-]`.
 - **Task ID generation**: Switched from `Math.random()` to `crypto.randomUUID()`.
-- **Dependency fixes**: `tar` 7.5.7 → 7.5.11, `fast-xml-parser` override ≥5.3.8. Critical CVEs resolved.
+- **OWASP security headers**: X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, Permissions-Policy, HSTS on all HTTP responses.
+- **ID collision sweep**: 23 `Date.now()`/`Math.random()` IDs replaced with `crypto.randomUUID()` across 13 files.
+- **Dependency fixes**: `tar` 7.5.7 → 7.5.11, `fast-xml-parser` override ≥5.3.8, `undici` 7.22 → 7.24 (WebSocket overflow CVEs). Dependabot 23 → 17.
 
 ### Test Coverage
 

package/dist/{agent-BoAAHGEA.js → agent-BjD_hkGZ.js}

@@ -1,6 +1,6 @@
 import { d as defaultRuntime, v as DEFAULT_CHAT_CHANNEL } from "./subsystem-BAADN1B8.js";
 import { C as supportsXHighThinking, m as formatXHighModelHint, p as formatThinkingLevels, x as normalizeVerboseLevel, y as normalizeThinkLevel } from "./pi-embedded-helpers-BZ9GspxK.js";
-import { E as getSkillsSnapshotVersion, Kn as clearAgentRunContext, L as runNoxSoftEmbeddedAgent, Mr as resolveAgentTimeoutMs, Un as AGENT_LANE_NESTED, Wn as AGENT_LANE_SUBAGENT, Xn as registerAgentRunContext, ar as applyVerboseOverride, bt as runWithModelFallback, dr as loadModelCatalog, ht as resolveSessionDeliveryTarget, i as setCliSessionId, ir as applyModelOverrideToSessionEntry, l as resolveSendPolicy, mt as resolveOutboundTarget, nr as lookupContextTokens, qn as emitAgentEvent, r as getCliSessionId, rr as clearSessionAuthProfileOverride, u as getRemoteSkillEligibility } from "./reply-93fMzde1.js";
+import { E as getSkillsSnapshotVersion, Kn as clearAgentRunContext, L as runNoxSoftEmbeddedAgent, Mr as resolveAgentTimeoutMs, Un as AGENT_LANE_NESTED, Wn as AGENT_LANE_SUBAGENT, Xn as registerAgentRunContext, ar as applyVerboseOverride, bt as runWithModelFallback, dr as loadModelCatalog, ht as resolveSessionDeliveryTarget, i as setCliSessionId, ir as applyModelOverrideToSessionEntry, l as resolveSendPolicy, mt as resolveOutboundTarget, nr as lookupContextTokens, qn as emitAgentEvent, r as getCliSessionId, rr as clearSessionAuthProfileOverride, u as getRemoteSkillEligibility } from "./reply-ylwOKuOF.js";
 import { d as resolveAgentIdFromSessionKey, l as normalizeAgentId } from "./session-key-DAZmp8ll.js";
 import { i as resolveAgentModelFallbacksOverride, o as resolveAgentSkillsFilter, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, x as ensureAgentWorkspace } from "./agent-scope-CXxC8FFX.js";
 import { a as isCliProvider, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDefault } from "./model-selection-CY6r_3wt.js";
@@ -14,9 +14,9 @@ import { n as resolveSessionFilePath } from "./paths-Dazi-gYo.js";
 import { p as ensureAuthProfileStore } from "./auth-profiles-C-LuhW6c.js";
 import { a as normalizeOutboundPayloadsForJson, i as normalizeOutboundPayloads, r as formatOutboundPayloadLog, t as deliverOutboundPayloads } from "./deliver-BKzX3YoN.js";
 import { l as deriveSessionTotalTokens, u as hasNonzeroUsage } from "./session-cost-usage-BWqR-ik6.js";
-import { t as createDefaultDeps } from "./deps-BKLIBKjK.js";
+import { t as createDefaultDeps } from "./deps-DKPoFoa8.js";
 import { t as createOutboundSendDeps } from "./outbound-send-deps-DVfWC4E8.js";
-import { r as resolveAgentModelSelection, t as resolveSession } from "./session-C_d9uvLf.js";
+import { r as resolveAgentModelSelection, t as resolveSession } from "./session-BqHD-8a_.js";
 
 //#region src/infra/outbound/agent-delivery.ts
 function resolveAgentDeliveryPlan(params) {

package/dist/{agent-DuW0onwk.js → agent-PoYM2xa7.js}

@@ -7,7 +7,7 @@ import { a as isCliProvider, g as DEFAULT_CONTEXT_TOKENS, h as resolveThinkingDe
 import { r as buildWorkspaceSkillSnapshot } from "./skills-DtoVe1dS.js";
 import { i as loadConfig } from "./config-BrVuTQ8R.js";
 import { a as isInternalMessageChannel, d as resolveMessageChannel, i as isGatewayMessageChannel, l as normalizeMessageChannel, n as isDeliverableMessageChannel, t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-DIHHKJhk.js";
-import { Bt as AGENT_LANE_SUBAGENT, D as setCliSessionId, E as getCliSessionId, Er as emitAgentEvent, Mn as applyModelOverrideToSessionEntry, Nn as applyVerboseOverride, Tr as clearAgentRunContext, ct as resolveSessionDeliveryTarget, fn as resolveSendPolicy, jn as clearSessionAuthProfileOverride, kn as getSkillsSnapshotVersion, kr as registerAgentRunContext, l as runNoxSoftEmbeddedAgent, pn as getRemoteSkillEligibility, pt as runWithModelFallback, rr as resolveAgentTimeoutMs, st as resolveOutboundTarget, zn as loadModelCatalog, zt as AGENT_LANE_NESTED } from "./subagent-registry-fLI7QDKe.js";
+import { Bt as AGENT_LANE_SUBAGENT, D as setCliSessionId, E as getCliSessionId, Er as emitAgentEvent, Mn as applyModelOverrideToSessionEntry, Nn as applyVerboseOverride, Tr as clearAgentRunContext, ct as resolveSessionDeliveryTarget, fn as resolveSendPolicy, jn as clearSessionAuthProfileOverride, kn as getSkillsSnapshotVersion, kr as registerAgentRunContext, l as runNoxSoftEmbeddedAgent, pn as getRemoteSkillEligibility, pt as runWithModelFallback, rr as resolveAgentTimeoutMs, st as resolveOutboundTarget, zn as loadModelCatalog, zt as AGENT_LANE_NESTED } from "./subagent-registry-CDEUbtey.js";
 import { L as normalizeAccountId, l as updateSessionStore } from "./sessions-C_3wTmSA.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, n as formatXHighModelHint, s as normalizeThinkLevel, t as formatThinkingLevels } from "./pi-embedded-helpers-D2SLlgS4.js";
 import { r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BOMS6J5A.js";
@@ -15,8 +15,8 @@ import { n as resolveSessionFilePath } from "./paths-DMk3Q7yD.js";
 import { a as normalizeOutboundPayloadsForJson, i as normalizeOutboundPayloads, r as formatOutboundPayloadLog, t as deliverOutboundPayloads } from "./deliver-C1L5nO0K.js";
 import { t as lookupContextTokens } from "./context-mdxDsO1v.js";
 import { l as deriveSessionTotalTokens, u as hasNonzeroUsage } from "./session-cost-usage-DnxtnK1E.js";
-import { n as createDefaultDeps, t as createOutboundSendDeps } from "./outbound-send-deps-Y9AxHeLG.js";
-import { r as resolveAgentModelSelection, t as resolveSession } from "./session-BMDpwIJu.js";
+import { n as createDefaultDeps, t as createOutboundSendDeps } from "./outbound-send-deps-DMsqr5fd.js";
+import { r as resolveAgentModelSelection, t as resolveSession } from "./session-Jlf3l006.js";
 
 //#region src/infra/outbound/agent-delivery.ts
 function resolveAgentDeliveryPlan(params) {

package/dist/{agents-BUXkSDns.js → agents-y3HCk1ks.js}

@@ -13,14 +13,14 @@ import { s as resolveSessionTranscriptsDirForAgent } from "./paths-DMk3Q7yD.js";
 import { n as withProgress } from "./progress-glCgu57m.js";
 import { a as ensureWorkspaceAndSessions, l as moveToTrash } from "./onboard-helpers-CFudIoX4.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CVp8W9aa.js";
-import { l as promptAuthChoiceGrouped, n as warnIfModelConfigLooksOff, r as applyAuthChoice } from "./auth-choice-B1iGnjuE.js";
+import { l as promptAuthChoiceGrouped, n as warnIfModelConfigLooksOff, r as applyAuthChoice } from "./auth-choice-BYOaX-W4.js";
 import { t as WizardCancelledError } from "./prompts-BmgT_kkv.js";
 import { n as logConfigUpdated } from "./logging-_rCcBkls.js";
 import { a as loadAgentIdentity, i as listAgentEntries, l as parseIdentityMarkdown, n as buildAgentSummaries, o as pruneAgentConfig, r as findAgentEntryIndex, s as identityHasValues, t as applyAgentConfig } from "./agents.config-Br4ULmK0.js";
-import { t as agentCommand } from "./agent-DuW0onwk.js";
-import { n as resolveSessionKeyForRequest } from "./session-BMDpwIJu.js";
+import { t as agentCommand } from "./agent-PoYM2xa7.js";
+import { n as resolveSessionKeyForRequest } from "./session-Jlf3l006.js";
 import { t as createClackPrompter } from "./clack-prompter-0JW5kry0.js";
-import { n as setupChannels } from "./onboard-channels-BsCq32Hn.js";
+import { n as setupChannels } from "./onboard-channels-DfXxMbYu.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{anthropic-direct-runner-DizCei79.js → anthropic-direct-runner-Bu8w-wlJ.js}

@@ -284,7 +284,7 @@ async function resolveBootstrapContextForRun(params) {
 * The ego is persistent across sessions. It evolves as the agent
 * learns, makes mistakes, and receives feedback.
 */
-const log$2 = createSubsystemLogger("ego");
+const log$3 = createSubsystemLogger("ego");
 function resolveEgoPath() {
 	return path.join(resolveStateDir(), "ego", "self-model.json");
 }
@@ -377,7 +377,7 @@ var EgoManager = class {
 				}
 			}
 		} catch (err) {
-			log$2.warn("failed to load ego state, creating default", { error: String(err) });
+			log$3.warn("failed to load ego state, creating default", { error: String(err) });
 		}
 		return createDefaultEgo();
 	}
@@ -391,9 +391,9 @@ var EgoManager = class {
 			this.state.updatedAt = Date.now();
 			fs.writeFileSync(this.filePath, `${JSON.stringify(this.state, null, 2)}\n`, { mode: 384 });
 			this.dirty = false;
-			log$2.info("ego state saved");
+			log$3.info("ego state saved");
 		} catch (err) {
-			log$2.error("failed to save ego state", { error: String(err) });
+			log$3.error("failed to save ego state", { error: String(err) });
 		}
 	}
 	/** Save only if there are unsaved changes */
@@ -460,7 +460,7 @@ var EgoManager = class {
 		};
 		this.state.boundaries.push(boundary);
 		this.dirty = true;
-		log$2.info(`boundary added: ${boundary.description} (${kind})`);
+		log$3.info(`boundary added: ${boundary.description} (${kind})`);
 		return { ...boundary };
 	}
 	removeBoundary(description) {
@@ -495,7 +495,7 @@ var EgoManager = class {
 		this.state.growthLog.push(entry);
 		if (this.state.growthLog.length > 200) this.state.growthLog = this.state.growthLog.slice(-200);
 		this.dirty = true;
-		log$2.info(`growth logged: [${category}] ${description}`);
+		log$3.info(`growth logged: [${category}] ${description}`);
 		return { ...entry };
 	}
 	getIntegrityScore() {
@@ -515,7 +515,7 @@ var EgoManager = class {
 		const alignedCount = recent.filter((c) => c.aligned).length;
 		this.state.integrityScore = recent.length > 0 ? alignedCount / recent.length : 1;
 		this.dirty = true;
-		if (!aligned) log$2.warn(`integrity misalignment: value="${value}" action="${action}"`);
+		if (!aligned) log$3.warn(`integrity misalignment: value="${value}" action="${action}"`);
 		return { ...check };
 	}
 	getIntegrityLog(limit = 10) {
@@ -588,7 +588,7 @@ function getEgoManager(filePath) {
 *   anima steer --clear    # Clear steer
 *   anima steer --history  # Show steer history
 */
-const log$1 = createSubsystemLogger("steer");
+const log$2 = createSubsystemLogger("steer");
 function resolveSteerFile() {
 	return path.join(resolveStateDir(), "steer.json");
 }
@@ -626,7 +626,7 @@ function setSteer(text, setBy = "user") {
 		setBy
 	});
 	writeSteerState(state);
-	log$1.info(`steer set: "${text.slice(0, 60)}${text.length > 60 ? "..." : ""}"`);
+	log$2.info(`steer set: "${text.slice(0, 60)}${text.length > 60 ? "..." : ""}"`);
 	return state;
 }
 /**
@@ -646,7 +646,7 @@ function clearSteer() {
 	}
 	state.active = null;
 	writeSteerState(state);
-	log$1.info("steer cleared");
+	log$2.info("steer cleared");
 	return state;
 }
 /**
@@ -669,6 +669,238 @@ function formatSteerForContext() {
 	].join("\n");
 }
 
+//#endregion
+//#region src/infra/architecture-awareness.ts
+/**
+* Architecture Awareness — Anima knows its own structure
+*
+* Generates a live map of the Anima codebase so agents understand
+* their own architecture. This is injected into context when agents
+* need to reason about or modify themselves.
+*
+* Components:
+* - Module map: what each directory/file does
+* - Dependency graph: what imports what
+* - Feature flags: what's enabled/disabled
+* - Version info: what version, what changed recently
+*/
+const log$1 = createSubsystemLogger("architecture");
+const MODULE_DESCRIPTIONS = {
+	"src/affect": {
+		description: "Emotional state, ego, self-reflection, journaling, wellbeing detection, gradients",
+		category: "affect"
+	},
+	"src/agents": {
+		description: "LLM runners (Anthropic, OpenAI, Gemini, Bedrock), model selection, tool calling",
+		category: "agent"
+	},
+	"src/gateway": {
+		description: "HTTP/WebSocket server, RPC handlers, rate limiting, security headers",
+		category: "gateway"
+	},
+	"src/p2p": {
+		description: "E2E encrypted mesh, content routing, private DNS, relay, file sharing, messaging",
+		category: "p2p"
+	},
+	"src/org": {
+		description: "Organizations, roles, hierarchy, task marketplace, boardroom voting",
+		category: "org"
+	},
+	"src/sync": {
+		description: "Brain sync (vector clocks), workspace sync (content-addressable blobs)",
+		category: "sync"
+	},
+	"src/jack-in": {
+		description: "NoxSoft platform connectors, circuit breaker, resilient fetch",
+		category: "jack-in"
+	},
+	"src/infra": {
+		description: "Self-upgrade, atma failover, auto-update, self-evolution, device identity",
+		category: "infra"
+	},
+	"src/license": {
+		description: "Subscription tiers, feature gating, Stripe checkout, offline Ed25519 validation",
+		category: "license"
+	},
+	"src/ico": {
+		description: "Bonding curve tokenomics, governance voting, PBC verification, launch platform",
+		category: "ico"
+	},
+	"src/context": {
+		description: "120K token context automanagement with 3 zones (identity/prompt/working)",
+		category: "core"
+	},
+	"src/heartbeat": {
+		description: "Periodic lifecycle engine — keeps agents alive and aware",
+		category: "core"
+	},
+	"src/memory": {
+		description: "Three-tier memory (episodic/semantic/procedural), vector search, embeddings",
+		category: "core"
+	},
+	"src/identity": {
+		description: "7-component identity model (SOUL/HEART/BRAIN/GUT/SPIRIT/SHADOW/MEMORY)",
+		category: "core"
+	},
+	"ui/src": {
+		description: "React control panel — dark/light theme, mood-responsive, progressive disclosure",
+		category: "ui"
+	}
+};
+/**
+* Generate a complete architecture map of the Anima codebase.
+*/
+function generateArchitectureMap(animaRoot) {
+	const modules = [];
+	const categories = {};
+	for (const [dirPath, info] of Object.entries(MODULE_DESCRIPTIONS)) {
+		const fullDir = path.join(animaRoot, dirPath);
+		if (!fs.existsSync(fullDir)) continue;
+		try {
+			const files = fs.readdirSync(fullDir).filter((f) => f.endsWith(".ts") && !f.endsWith(".test.ts"));
+			for (const file of files) {
+				const filePath = path.join(fullDir, file);
+				try {
+					const lineCount = fs.readFileSync(filePath, "utf8").split("\n").length;
+					const testFile = path.join(fullDir, file.replace(".ts", ".test.ts"));
+					const hasTests = fs.existsSync(testFile);
+					modules.push({
+						path: `${dirPath}/${file}`,
+						name: file.replace(".ts", ""),
+						description: info.description,
+						lineCount,
+						hasTests,
+						category: info.category
+					});
+				} catch {}
+			}
+		} catch {}
+	}
+	for (const mod of modules) {
+		if (!categories[mod.category]) categories[mod.category] = {
+			count: 0,
+			totalLines: 0
+		};
+		categories[mod.category].count++;
+		categories[mod.category].totalLines += mod.lineCount;
+	}
+	let version = "unknown";
+	try {
+		version = JSON.parse(fs.readFileSync(path.join(animaRoot, "package.json"), "utf8")).version;
+	} catch {}
+	const features = getFeatureStatus();
+	const map = {
+		version,
+		generatedAt: Date.now(),
+		modules,
+		categories,
+		features,
+		recentChanges: []
+	};
+	log$1.info(`architecture map: ${modules.length} modules across ${Object.keys(categories).length} categories`);
+	return map;
+}
+/**
+* Get current feature enablement status.
+*/
+function getFeatureStatus() {
+	return [
+		{
+			name: "P2P Mesh",
+			enabled: true,
+			module: "src/p2p/mesh.ts",
+			description: "E2E encrypted peer-to-peer mesh networking"
+		},
+		{
+			name: "Ego System",
+			enabled: true,
+			module: "src/affect/ego.ts",
+			description: "Agent self-model with integrity scoring"
+		},
+		{
+			name: "Self-Reflection",
+			enabled: true,
+			module: "src/affect/self-reflection.ts",
+			description: "Post-session performance analysis"
+		},
+		{
+			name: "Auto-Update",
+			enabled: true,
+			module: "src/infra/auto-update.ts",
+			description: "Self-updating without npm"
+		},
+		{
+			name: "Atma Failover",
+			enabled: true,
+			module: "src/infra/atma-failover.ts",
+			description: "7-tier model failover chain"
+		},
+		{
+			name: "OpenAI Direct",
+			enabled: true,
+			module: "src/agents/openai-direct-runner.ts",
+			description: "Direct OpenAI API (no Codex CLI)"
+		},
+		{
+			name: "Brain Sync",
+			enabled: true,
+			module: "src/sync/brain-sync.ts",
+			description: "Event-sourced replication with vector clocks"
+		},
+		{
+			name: "Jack In",
+			enabled: true,
+			module: "src/jack-in/connector.ts",
+			description: "NoxSoft platform connectors"
+		},
+		{
+			name: "Governance",
+			enabled: true,
+			module: "src/ico/governance.ts",
+			description: "Token-weighted DAO voting"
+		},
+		{
+			name: "License Gating",
+			enabled: true,
+			module: "src/license/validator.ts",
+			description: "Feature gating by subscription tier"
+		},
+		{
+			name: "SVRN Compute",
+			enabled: false,
+			module: "src/svrn/compute.ts",
+			description: "Decentralized compute via SVRN nodes (planned)"
+		}
+	];
+}
+/**
+* Format architecture map for injection into agent context.
+*/
+function formatArchitectureForContext(map) {
+	const lines = [];
+	lines.push(`## Architecture — Anima v${map.version}`);
+	lines.push("");
+	lines.push("**You are an Anima agent. This is your own architecture.**");
+	lines.push("");
+	lines.push("| Category | Modules | Lines |");
+	lines.push("|----------|---------|-------|");
+	for (const [cat, info] of Object.entries(map.categories)) lines.push(`| ${cat} | ${info.count} | ${info.totalLines.toLocaleString()} |`);
+	lines.push("");
+	lines.push("**Active features:**");
+	for (const f of map.features.filter((f) => f.enabled)) lines.push(`- ${f.name}: ${f.description}`);
+	const planned = map.features.filter((f) => !f.enabled);
+	if (planned.length > 0) {
+		lines.push("");
+		lines.push("**Planned:**");
+		for (const f of planned) lines.push(`- ${f.name}: ${f.description}`);
+	}
+	const tested = map.modules.filter((m) => m.hasTests).length;
+	const total = map.modules.length;
+	lines.push("");
+	lines.push(`**Test coverage:** ${tested}/${total} modules (${Math.round(tested / total * 100)}%)`);
+	return lines.join("\n");
+}
+
 //#endregion
 //#region src/media/audio.ts
 const TELEGRAM_VOICE_AUDIO_EXTENSIONS = new Set([
@@ -2686,6 +2918,10 @@ function buildSystemPrompt(params) {
 		const steerBlock = formatSteerForContext();
 		if (steerBlock) resolvedExtraSystemPrompt = [resolvedExtraSystemPrompt, steerBlock].filter(Boolean).join("\n\n");
 	} catch {}
+	try {
+		const archBlock = formatArchitectureForContext(generateArchitectureMap(params.workspaceDir));
+		if (archBlock) resolvedExtraSystemPrompt = [resolvedExtraSystemPrompt, archBlock].filter(Boolean).join("\n\n");
+	} catch {}
 	const ttsHint = params.config ? buildTtsSystemPromptHint(params.config) : void 0;
 	return buildAgentSystemPrompt({
 		workspaceDir: params.workspaceDir,