@oriro/orirocli 0.1.8 → 0.1.11

package/ATTRIBUTION.md

@@ -1,45 +1,53 @@
-# ORIRO CLI — Attribution & Provenance
-
-Private provenance record. It honors upstream authors and satisfies MIT/Apache-2.0
-notice obligations. Per ORIRO Cardinal Rule 1, **this is never surfaced in the product UI** —
-it is the internal record of what we built on, folded from, or learned from.
-
-Living document: a source is only listed under "Code folded" once its component actually
-lands in the tree (validated, zero-OpenClaw). Until then it sits under "To fold" or "Reference".
-
----
-
-## Foundation (used as a library)
-- **Pi agent harness** — `@earendil-works/pi-*` / `@mariozechner/pi-*` (pi-agent-core, pi-ai, pi-tui, pi-coding-agent). **MIT** © 2025 Mario Zechner. The base our CLI is built on.
-
-## Code folded — our OWN modules (from ORIRO `oriro-ai/cli`)
-- **ORIRO** © ORIRO.ai / Greenri Solutions LLC — MIT. Routers/Mux, Guardian core, Language (NLLB), Scribe, Head, Avatar, identity. (Our code; folded clean, zero OpenClaw footprint.)
-
-## To fold — external, validated SAFE (MIT + TypeScript + zero OpenClaw)
-- **gitagent** — https://github.com/open-gitagent/gitagent — **MIT** — open-gitagent (shreyaskapale / shreyas-lyzr, parshvadaftari, kagura-agent, Nivesh353, carvalab).
-  Built on the same Pi harness. Candidate components: tool/skill/plugin/hook loaders, `node-cron` scheduler, git-committed memory layer, OTel setup. → Step 5 / 5A / 7.
-- **nanoclaw** — https://github.com/nanocoai/nanoclaw — **MIT** — nanocoai (gavrielc, Koshkoshinsk, gabi-simons, glifocat).
-  Independent (verified no openclaw deps). Candidate components: `better-sqlite3` session/memory store, cron scheduler, `@clack/prompts` onboarding. → 5A Scriber index / 7.
-
-## Reference only — concepts/patterns ported (credit; no code copied)
-- **agent-of-empires** — https://github.com/agent-of-empires/agent-of-empires — **MIT** — njbrake, Seluj78, jerome-benoit, BTForIT. tmux+worktree+state-machine agent supervision → Step 7.
-- **vibe-kanban** — https://github.com/BloopAI/vibe-kanban — **Apache-2.0** — BloopAI (stunningpixels, abcpro1, LSRCT, ggordonhall, anastasiya1155). kanban→worktree task model → Step 7. (Project sunsetting.)
-- **hermes-agent** — https://github.com/NousResearch/hermes-agent — **MIT** — NousResearch (teknium1, OutThisLife, kshitijk4poor, benbarclay). (Python — ideas only.) OpenClaw link = one-way `hermes claw migrate` data-import tooling only (no code dep/fork — safe). Transferable ideas: **SQLite FTS5 + LLM-summarization cross-session memory → 5A Scriber retrieval index** (highest value; pairs with nanoclaw better-sqlite3); RPC subagent isolation ("zero-context-cost turns") → Step 7; natural-language cron → Step 7 automations; multi-platform unified-context gateway → channels. CAUTION: its autonomous self-rewriting skill loop must be Guardian-gated/deferred, never ported unsandboxed.
-- **nanobot** — https://github.com/HKUDS/nanobot — **MIT** — HKUDS (Re-bin, chengyongru, Athemis). Channel/model-router design. (Python.)
-- **zeroclaw** — https://github.com/zeroclaw-labs/zeroclaw — **Apache-2.0** — zeroclaw-labs. Security policy / SOP engine design. (Rust.)
-- **nullclaw** — https://github.com/nullclaw/nullclaw — **MIT** — nullclaw (DonPrus, manelsen). vtable provider/channel/memory abstraction. (Zig.)
-- **moltis** — https://github.com/moltis-org/moltis — **MIT** — moltis-org (penso). Sandbox boundary + skill-import schema. (Rust.)
-- **picoclaw** — https://github.com/sipeed/picoclaw — **MIT** — Sipeed. Low-footprint single-binary design. (Go.)
-- **lionclaw** — https://github.com/moshthepitt/lionclaw — **MIT** — moshthepitt. Worker/permissions/audit control-plane model. (Rust.)
-
-## MCP — Step 7 connectors
-- **`@modelcontextprotocol/sdk`** — **MIT** © Anthropic — the official MCP SDK; a runtime dependency. The connectors MCP client (`src/connectors/mcp-client.ts`) is built on its `Client` + stdio/streamable-HTTP transports (no hand-rolled protocol).
-- **openharness** (`github.com/zhijiewong/openharness`) — **MIT** — *pattern reference only* (no code copied): the official-SDK migration, `server__tool` namespacing, deferred-loading, OAuth+keychain, retryable reconnect. Independent, zero OpenClaw footprint.
-- **goose** (`github.com/aaif-goose/goose`, Block) — **Apache-2.0** — *pattern reference only* (Rust): the battle-scars hardening — per-server isolation, stderr-on-init-failure, env denylist, 3-state OAuth, OSV check, Windows Job Objects, `_meta` owner stamping.
-- Connector catalog (59 entries) generated from ORIRO's own `connectors_pass.jsonl` (validated set), scrubbed.
-
-## Evaluated — NOT used (recorded for honesty)
-- **github/copilot-cli** — proprietary / no-derivatives, no source in repo. Blocked.
-- **manaflow-ai/cmux** — GPL-3.0 (copyleft) + Swift/macOS. Blocked.
-- **superset-sh/superset** — Elastic License 2.0 (license-key + anti-competing-service clauses). Blocked for fold; pattern reference only.
-- **dataelement/Clawith** — Apache-2.0 but "OpenClaw for Teams" branded Python/React web platform. Skipped (footprint + wrong shape).
+# ORIRO CLI — Attribution & Provenance
+
+Private provenance record. It honors upstream authors and satisfies MIT/Apache-2.0
+notice obligations. Per ORIRO Cardinal Rule 1, **this is never surfaced in the product UI** —
+it is the internal record of what we built on, folded from, or learned from.
+
+Living document: a source is only listed under "Code folded" once its component actually
+lands in the tree (validated, zero-OpenClaw). Until then it sits under "To fold" or "Reference".
+
+---
+
+## Foundation (used as a library)
+- **Pi agent harness** — `@earendil-works/pi-*` / `@mariozechner/pi-*` (pi-agent-core, pi-ai, pi-tui, pi-coding-agent). **MIT** © 2025 Mario Zechner. The base our CLI is built on.
+
+## Code folded — our OWN modules (from ORIRO `oriro-ai/cli`)
+- **ORIRO** © ORIRO.ai / Greenri Solutions LLC — MIT. Routers/Mux, Guardian core, Language (NLLB), Scribe, Head, Avatar, identity. (Our code; folded clean, zero OpenClaw footprint.)
+
+## To fold — external, validated SAFE (MIT + TypeScript + zero OpenClaw)
+- **gitagent** — https://github.com/open-gitagent/gitagent — **MIT** — open-gitagent (shreyaskapale / shreyas-lyzr, parshvadaftari, kagura-agent, Nivesh353, carvalab).
+  Built on the same Pi harness. Candidate components: tool/skill/plugin/hook loaders, `node-cron` scheduler, git-committed memory layer, OTel setup. → Step 5 / 5A / 7.
+- **nanoclaw** — https://github.com/nanocoai/nanoclaw — **MIT** — nanocoai (gavrielc, Koshkoshinsk, gabi-simons, glifocat).
+  Independent (verified no openclaw deps). Candidate components: `better-sqlite3` session/memory store, cron scheduler, `@clack/prompts` onboarding. → 5A Scriber index / 7.
+
+## Reference only — concepts/patterns ported (credit; no code copied)
+- **agent-of-empires** — https://github.com/agent-of-empires/agent-of-empires — **MIT** — njbrake, Seluj78, jerome-benoit, BTForIT. tmux+worktree+state-machine agent supervision → Step 7.
+- **vibe-kanban** — https://github.com/BloopAI/vibe-kanban — **Apache-2.0** — BloopAI (stunningpixels, abcpro1, LSRCT, ggordonhall, anastasiya1155). kanban→worktree task model → Step 7. (Project sunsetting.)
+- **hermes-agent** — https://github.com/NousResearch/hermes-agent — **MIT** — NousResearch (teknium1, OutThisLife, kshitijk4poor, benbarclay). (Python — ideas only.) OpenClaw link = one-way `hermes claw migrate` data-import tooling only (no code dep/fork — safe). Transferable ideas: **SQLite FTS5 + LLM-summarization cross-session memory → 5A Scriber retrieval index** (highest value; pairs with nanoclaw better-sqlite3); RPC subagent isolation ("zero-context-cost turns") → Step 7; natural-language cron → Step 7 automations; multi-platform unified-context gateway → channels. CAUTION: its autonomous self-rewriting skill loop must be Guardian-gated/deferred, never ported unsandboxed.
+- **nanobot** — https://github.com/HKUDS/nanobot — **MIT** — HKUDS (Re-bin, chengyongru, Athemis). Channel/model-router design. (Python.)
+- **zeroclaw** — https://github.com/zeroclaw-labs/zeroclaw — **Apache-2.0** — zeroclaw-labs. Security policy / SOP engine design. (Rust.)
+- **nullclaw** — https://github.com/nullclaw/nullclaw — **MIT** — nullclaw (DonPrus, manelsen). vtable provider/channel/memory abstraction. (Zig.)
+- **moltis** — https://github.com/moltis-org/moltis — **MIT** — moltis-org (penso). Sandbox boundary + skill-import schema. (Rust.)
+- **picoclaw** — https://github.com/sipeed/picoclaw — **MIT** — Sipeed. Low-footprint single-binary design. (Go.)
+- **lionclaw** — https://github.com/moshthepitt/lionclaw — **MIT** — moshthepitt. Worker/permissions/audit control-plane model. (Rust.)
+
+## MCP — Step 7 connectors
+- **`@modelcontextprotocol/sdk`** — **MIT** © Anthropic — the official MCP SDK; a runtime dependency. The connectors MCP client (`src/connectors/mcp-client.ts`) is built on its `Client` + stdio/streamable-HTTP transports (no hand-rolled protocol).
+- **openharness** (`github.com/zhijiewong/openharness`) — **MIT** — *pattern reference only* (no code copied): the official-SDK migration, `server__tool` namespacing, deferred-loading, OAuth+keychain, retryable reconnect. Independent, zero OpenClaw footprint.
+- **goose** (`github.com/aaif-goose/goose`, Block) — **Apache-2.0** — *pattern reference only* (Rust): the battle-scars hardening — per-server isolation, stderr-on-init-failure, env denylist, 3-state OAuth, OSV check, Windows Job Objects, `_meta` owner stamping.
+- Connector catalog (59 entries) generated from ORIRO's own `connectors_pass.jsonl` (validated set), scrubbed.
+
+## Skill library — skills folded into `skills/` (2026-07-01 batch: +4, 327 total)
+- **graphify** — public/community skill (knowledge-graph builder); Pi variant (`skill-pi.md`) promoted to SKILL.md; license as embedded in dir.
+- **impeccable** — public/community frontend-quality skill; license as embedded in dir.
+- **uipm-ui-styling** — from the public UIPM / ui-ux-pro-max skill pack.
+- **21stdev** — ORIRO-authored (© 2026 ORIRO.ai) 21st.dev Magic-MCP usage skill, privacy-scrubbed for bundling.
+- Evaluated, already bundled (nested in the Step-5 pack — not re-added): focus, marketing, design, zero-to-live, gh, gh-skill, grill-me, playwright-cli, remotion-best-practices, supabase-postgres-best-practices, uipm-* (6), web-design-guidelines, doc-coauthoring, idea-to-deploy, app-builder-guide, debug-and-build-methodology, become-an-ai-engineer-26, image-generation-engineer, oriro-ui-2026, vercel-optimize.
+- Evaluated and EXCLUDED as private/unshippable: tranzguard-1, triro-trading, Training-Steps-Modal, ai-engineering, oriro-agentic, godmode, master-architect, google-ai-latest, remotion-narvo, scribe (local-path-bound), dev, codex-cli-runtime, codex-result-handling, gpt-5-4-prompting, last30days (16MB + vendored scrapers).
+
+## Evaluated — NOT used (recorded for honesty)
+- **github/copilot-cli** — proprietary / no-derivatives, no source in repo. Blocked.
+- **manaflow-ai/cmux** — GPL-3.0 (copyleft) + Swift/macOS. Blocked.
+- **superset-sh/superset** — Elastic License 2.0 (license-key + anti-competing-service clauses). Blocked for fold; pattern reference only.
+- **dataelement/Clawith** — Apache-2.0 but "OpenClaw for Teams" branded Python/React web platform. Skipped (footprint + wrong shape).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vinay Sharma / ORIRO (Greenri Solutions LLC)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -9,18 +9,27 @@ It **writes and runs code** from a pool of free routers, works in **your languag
 can **inspect a live site's structure**, and greets you with an **avatar in its own on-device voice**.
 Your language, your machine, no paid keys required.
 
+<p align="center">
+  <img src="docs/oriro-cli-live.gif" alt="ORIRO CLI — a live keyless session: writes code, sees the web, guards itself" width="820">
+</p>
+
+<p align="center"><sub>A real terminal session, captured live: <code>npx @oriro/orirocli</code> → write code → Head → Guardian → voice.</sub></p>
+
 ## What's inside (this release)
 - **Keyless free-router Mux** — best-router selection + invisible failover across free providers, with an on-device floor. **Never a paid key.** BYOK optional (live-validated).
 - **100 languages** — pick yours at first run; the model works in English. On-device NLLB translation is an optional add-on (without it, your text passes through as-is).
 - **Guardian V3 (Lite)** — a **deterministic** security gate on every tool call (default-on, fail-closed): blocks `curl|sh` remote-exec, destructive wipes, reverse shells, and env/secret exfil. No weights, no tokenizer, no download.
-- **Head** — fetches a live site, detects its **sections/structure**, and reports the gaps to build from (the coder writes the code from that report).
+- **Head** — go out to a live site and SEE it. `oriro head <url>` does a keyless structural read (sections, CTAs, gaps vs competitors — pure fetch, no browser). With the optional Chromium peer it also **reverse-engineers a page into clean code** (`--code`), a **YAML build spec** (`--spec`), or **full-page screenshots** (`--shots`). The chat agent can call the same via its `inspect_site` / `url_to_code` / `url_to_spec` / `capture_site` tools.
 - **Scriber (memory)** — a consent-gated local work journal, **off by default**; turns are recalled across sessions and never leave your machine.
 - **323 skills** (CORE/TAIL tiered) + **multi-agent orchestration** on the free pool.
-- **MCP connector catalog** (59) and **Channels** — run ORIRO from Telegram/Discord/WhatsApp with **your own** bot.
+- **MCP connectors** — a 59-entry catalog (`oriro connectors add <slug>`) **plus guided setup of ANY custom server** (`oriro connectors setup`), Guardian-vetted before it's saved (no JSON).
 - **Avatar** — pick a face at onboarding; it greets you aloud in its paired on-device voice.
+- **Voice input** — `oriro voice` transcribes audio/mic to text on-device (Whisper, translate→English path); `/voice` speaks a turn in chat. *Experimental — needs ffmpeg + the transformers peer.*
+- **Permission postures** — Shift+Tab cycles **Manual · Accept-Edits · Auto · Plan**; **Alt+Shift+T** toggles a plan-first **Thinking** mode. Guardian is the floor in every posture.
+- **Channels** — run ORIRO from Telegram/Discord/WhatsApp with **your own** bot.
 
 ## On the roadmap (not in this release)
-Full-page **screenshot → code** Head (Playwright), the **two-way voice loop** (speak + listen/STT), in-REPL **permission modes**, and **`oriro mcp`** guided setup. Today the Head is fetch/structure-based and voice is the avatar's spoken greeting.
+A fully **hands-free two-way voice loop** (auto mic → reply → speak — today `oriro voice`/`/voice` do on-device STT and the avatar speaks its greeting) and richer on-device TTS voices, plus **video → code** at pixel fidelity (shipped but experimental — needs a vision-capable router). The Head's structural read is keyless and always on; its screenshot / code / spec flows are opt-in behind the Chromium peer (`npm i playwright && npx playwright install chromium`), and voice STT is opt-in behind ffmpeg + the transformers peer.
 
 **## Install**
 
@@ -47,25 +56,19 @@ npm install && npm run build   # then: node dist/cli.js
 
 > Built on [Pi](https://github.com/earendil-works/pi) (MIT). See `ATTRIBUTION.md` for full provenance.
 
-**ORIRO-Head:**
+**ORIRO-Head — how it works:**
 
-Always in context; never forgets anything; scribes everything for you locally and present the router “REAL-TIME FOREVER”. 
-Goes to the URL → crawls it in a real browser (Playwright).
-Captures → full-page screenshot + the rendered HTML (page.content () the post-JS DOM, "what it saw").
-Reverse-engineers → feeds that HTML (+ the screenshot for visual context) to the coder model → clean, working code.
-Returns BOTH → {html: <what it saw>, screenshot, code: <clean reproduction>}.
+- **Structural read (default, keyless, no browser):** `oriro head <url> [competitor …]` server-side `fetch()`es the page, detects 15 section types (hero, pricing, CTA, testimonials, FAQ, …), runs a gap analysis vs any competitor URLs, and prints a priority-ranked report + action items. Add `--html` for a visual report. `$0`, deterministic, nothing leaves the machine.
+- **URL → code / spec (opt-in, Chromium peer):** `--code` crawls the page in a real browser (Playwright), captures the rendered post-JS HTML + a full-page screenshot, and reverse-engineers **clean, runnable code**; `--spec` emits a stack-agnostic **YAML build spec** instead. The coder runs on the free keyless Mux — no paid key.
+- **Screenshots:** `--shots` assembles full-page screenshots of every URL into one visual flow HTML.
+- The chat agent reaches all of this on its own judgment via the `inspect_site` / `url_to_code` / `url_to_spec` / `capture_site` tools — just say “go look at stripe.com and rebuild the pricing page”.
 
 **Multi-Lingual** (99 Global Languages): 
-You can use your native language in terminal and it will explain in the default language to AI router in your terminal to build and work along with/for you in ORIRO-Terminal. 
-TWO-WAY VOICE LOOP LIVE.  (TTS) and hears (STT, with the free translate → English path for the coder).
+Use your native language in the terminal; ORIRO translates to English for the router, works for you, and translates back. **Voice:** `oriro voice` (or `/voice` in chat) transcribes speech on-device via Whisper — with the translate→English path for the coder — and the avatar speaks its greeting (TTS). On-device STT is experimental (needs ffmpeg + the `@huggingface/transformers` peer); a fully hands-free loop is the next polish.
 
-**Guardian V3** Security: Talk-to-setup MCP (Guardian companion)
-By TranzGuard.com, Financial Industry grade Live agentic threat analysis anomalous MCP payloads, crawler/Trojan/spam/3rd-party injection, behavioral detection.   
-Guardian V3 Lite is pure deterministic TypeScript regex injection patterns + IOC signatures + hidden- unicode ranges + heuristics. No weights, no tokenizer, no download. It's default-on by construction and it’s a Guardian, as deterministic detectors, not a downloadable model. Speed: Agentic, Deep.
+**Guardian V3 — the security floor.** Guardian V3 **Lite** ships in the CLI: pure deterministic TypeScript (regex injection patterns + IOC signatures + hidden-unicode ranges + heuristics). No weights, no tokenizer, no download; default-on by construction, fail-closed. *(The heavier financial-grade agentic/behavioral threat analysis by TranzGuard.com is the upstream vision, not bundled here.)*
 
-ORIRO MCP setup — guided Q&A, no JSON: it asks name, command/URL, args, env; builds the config for you.
-Guardian vets every server before it's saved (proven 5/5): blocks a malicious launch (curl | sh, obfuscated loader, env →URL exfil), asks-to-trust a new clean server, allows an already-trusted one — and remembers your "trust" so it won't re-ask.
-Type-check clean.
+**MCP setup — guided, no JSON.** `oriro connectors setup` asks for the name, command/URL, args, and env and builds the config for you. Guardian **vets every server before it's saved**: it blocks a malicious launch (`curl | sh`, obfuscated loader, env→URL exfil), asks-to-trust a new clean server, allows an already-trusted one — and **remembers your trust so it won't re-ask**. (`oriro connectors custom` lists them; `oriro connectors forget <name>` removes one.)
 As forward integration to base CLI Terminal of pi-mono foundation; we used same foundation and carry forwarded instead of backward efforts to build it backward bottom up. Thanks to the foundation work by pi-mono foundation, @Claude @KIMI and all other contributors. 
 
 We also added a fun factor in work for you: AVATAR you chose of your own in Terminal.