@ouro.bot/cli 0.1.0-alpha.23 → 0.1.0-alpha.230

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (241) hide show
  1. package/README.md +187 -191
  2. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/agent.json +3 -2
  3. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/SOUL.md +1 -1
  4. package/changelog.json +1402 -1
  5. package/dist/arc/attention-types.js +8 -0
  6. package/dist/arc/cares.js +140 -0
  7. package/dist/arc/episodes.js +119 -0
  8. package/dist/arc/intentions.js +133 -0
  9. package/dist/arc/json-store.js +120 -0
  10. package/dist/arc/obligations.js +237 -0
  11. package/dist/arc/presence.js +185 -0
  12. package/dist/heart/active-work.js +832 -0
  13. package/dist/heart/agent-entry.js +37 -2
  14. package/dist/heart/auth/auth-flow.js +447 -0
  15. package/dist/heart/bridges/manager.js +358 -0
  16. package/dist/heart/bridges/state-machine.js +135 -0
  17. package/dist/heart/bridges/store.js +123 -0
  18. package/dist/heart/commitments.js +111 -0
  19. package/dist/heart/config-registry.js +305 -0
  20. package/dist/heart/config.js +63 -30
  21. package/dist/heart/core.js +601 -145
  22. package/dist/heart/cross-chat-delivery.js +131 -0
  23. package/dist/heart/daemon/agent-config-check.js +149 -0
  24. package/dist/heart/daemon/agent-discovery.js +81 -0
  25. package/dist/heart/daemon/agent-service.js +360 -0
  26. package/dist/heart/daemon/cadence.js +70 -0
  27. package/dist/heart/daemon/cli-defaults.js +557 -0
  28. package/dist/heart/daemon/cli-exec.js +1847 -0
  29. package/dist/heart/daemon/cli-parse.js +759 -0
  30. package/dist/heart/daemon/cli-render.js +316 -0
  31. package/dist/heart/daemon/cli-types.js +8 -0
  32. package/dist/heart/daemon/daemon-cli.js +29 -1163
  33. package/dist/heart/daemon/daemon-entry.js +202 -4
  34. package/dist/heart/daemon/daemon-health.js +136 -0
  35. package/dist/heart/daemon/daemon-runtime-sync.js +153 -12
  36. package/dist/heart/daemon/daemon-tombstone.js +123 -0
  37. package/dist/heart/daemon/daemon.js +489 -20
  38. package/dist/heart/daemon/hooks/agent-config-v2.js +33 -0
  39. package/dist/heart/daemon/hooks/bundle-meta.js +115 -1
  40. package/dist/heart/daemon/inner-status.js +89 -0
  41. package/dist/heart/daemon/launchd.js +39 -8
  42. package/dist/heart/daemon/log-tailer.js +4 -3
  43. package/dist/heart/daemon/message-router.js +17 -8
  44. package/dist/heart/daemon/os-cron-deps.js +134 -0
  45. package/dist/heart/daemon/ouro-bot-entry.js +1 -1
  46. package/dist/heart/daemon/process-manager.js +123 -0
  47. package/dist/heart/daemon/run-hooks.js +2 -0
  48. package/dist/heart/daemon/runtime-logging.js +58 -15
  49. package/dist/heart/daemon/runtime-metadata.js +101 -0
  50. package/dist/heart/daemon/runtime-mode.js +67 -0
  51. package/dist/heart/daemon/safe-mode.js +161 -0
  52. package/dist/heart/daemon/sense-manager.js +72 -3
  53. package/dist/heart/daemon/session-id-resolver.js +131 -0
  54. package/dist/heart/daemon/skill-management-installer.js +94 -0
  55. package/dist/heart/daemon/socket-client.js +201 -0
  56. package/dist/heart/daemon/task-scheduler.js +3 -25
  57. package/dist/heart/daemon/thoughts.js +507 -0
  58. package/dist/heart/delegation.js +62 -0
  59. package/dist/heart/habits/habit-migration.js +181 -0
  60. package/dist/heart/habits/habit-parser.js +119 -0
  61. package/dist/heart/habits/habit-scheduler.js +369 -0
  62. package/dist/heart/{daemon → hatch}/hatch-flow.js +29 -119
  63. package/dist/heart/{daemon → hatch}/hatch-specialist.js +3 -3
  64. package/dist/heart/{daemon → hatch}/specialist-prompt.js +10 -7
  65. package/dist/heart/{daemon → hatch}/specialist-tools.js +49 -3
  66. package/dist/heart/identity.js +144 -55
  67. package/dist/heart/kicks.js +2 -20
  68. package/dist/heart/mcp/mcp-server.js +608 -0
  69. package/dist/heart/migrate-config.js +127 -0
  70. package/dist/heart/model-capabilities.js +48 -0
  71. package/dist/heart/outlook/outlook-http.js +439 -0
  72. package/dist/heart/outlook/outlook-read.js +1618 -0
  73. package/dist/heart/outlook/outlook-render.js +1032 -0
  74. package/dist/heart/outlook/outlook-types.js +7 -0
  75. package/dist/heart/outlook/outlook-view.js +194 -0
  76. package/dist/heart/progress-story.js +42 -0
  77. package/dist/heart/provider-failover.js +88 -0
  78. package/dist/heart/provider-ping.js +162 -0
  79. package/dist/heart/providers/anthropic-token.js +163 -0
  80. package/dist/heart/providers/anthropic.js +187 -41
  81. package/dist/heart/providers/azure.js +116 -10
  82. package/dist/heart/providers/github-copilot.js +157 -0
  83. package/dist/heart/providers/minimax.js +33 -3
  84. package/dist/heart/providers/openai-codex.js +51 -16
  85. package/dist/heart/session-activity.js +172 -0
  86. package/dist/heart/session-recall.js +216 -0
  87. package/dist/heart/start-of-turn-packet.js +330 -0
  88. package/dist/heart/streaming.js +36 -27
  89. package/dist/heart/sync.js +217 -0
  90. package/dist/heart/target-resolution.js +127 -0
  91. package/dist/heart/tempo.js +93 -0
  92. package/dist/heart/temporal-view.js +41 -0
  93. package/dist/heart/tool-activity-callbacks.js +36 -0
  94. package/dist/heart/tool-description.js +135 -0
  95. package/dist/heart/tool-loop.js +200 -0
  96. package/dist/heart/turn-context.js +358 -0
  97. package/dist/heart/turn-coordinator.js +28 -0
  98. package/dist/heart/versioning/ouro-bot-global-installer.js +128 -0
  99. package/dist/heart/{daemon → versioning}/ouro-bot-wrapper.js +1 -1
  100. package/dist/heart/{daemon → versioning}/ouro-path-installer.js +78 -35
  101. package/dist/heart/versioning/ouro-version-manager.js +171 -0
  102. package/dist/heart/{daemon → versioning}/staged-restart.js +30 -6
  103. package/dist/heart/{daemon → versioning}/update-checker.js +9 -1
  104. package/dist/heart/{daemon → versioning}/update-hooks.js +20 -2
  105. package/dist/heart/{daemon → versioning}/wrapper-publish-guard.js +41 -3
  106. package/dist/mind/associative-recall.js +126 -66
  107. package/dist/mind/bundle-manifest.js +8 -1
  108. package/dist/mind/context.js +125 -14
  109. package/dist/mind/{memory.js → diary.js} +73 -96
  110. package/dist/mind/embedding-provider.js +60 -0
  111. package/dist/mind/file-state.js +179 -0
  112. package/dist/mind/first-impressions.js +16 -2
  113. package/dist/mind/friends/channel.js +56 -0
  114. package/dist/mind/friends/group-context.js +144 -0
  115. package/dist/mind/friends/store-file.js +58 -3
  116. package/dist/mind/friends/trust-explanation.js +74 -0
  117. package/dist/mind/friends/types.js +8 -0
  118. package/dist/mind/journal-index.js +161 -0
  119. package/dist/mind/obligation-steering.js +221 -0
  120. package/dist/mind/pending.js +76 -9
  121. package/dist/mind/phrases.js +1 -0
  122. package/dist/mind/prompt.js +779 -109
  123. package/dist/mind/scrutiny.js +173 -0
  124. package/dist/mind/token-estimate.js +8 -12
  125. package/dist/nerves/coverage/audit.js +1 -1
  126. package/dist/nerves/coverage/file-completeness.js +47 -5
  127. package/dist/nerves/coverage/run-artifacts.js +1 -1
  128. package/dist/nerves/event-buffer.js +111 -0
  129. package/dist/nerves/index.js +64 -4
  130. package/dist/nerves/observation.js +20 -0
  131. package/dist/nerves/runtime.js +5 -1
  132. package/dist/outlook-ui/assets/index-Ck8agNeO.js +61 -0
  133. package/dist/outlook-ui/assets/index-LwChZTgL.css +1 -0
  134. package/dist/outlook-ui/index.html +15 -0
  135. package/dist/repertoire/ado-client.js +15 -56
  136. package/dist/repertoire/ado-semantic.js +11 -5
  137. package/dist/repertoire/api-client.js +97 -0
  138. package/dist/repertoire/coding/codex-jsonl.js +64 -0
  139. package/dist/repertoire/coding/context-pack.js +330 -0
  140. package/dist/repertoire/coding/feedback.js +197 -30
  141. package/dist/repertoire/coding/manager.js +149 -2
  142. package/dist/repertoire/coding/spawner.js +55 -9
  143. package/dist/repertoire/coding/tools.js +170 -7
  144. package/dist/repertoire/credential-access.js +449 -0
  145. package/dist/repertoire/github-client.js +14 -55
  146. package/dist/repertoire/graph-client.js +11 -52
  147. package/dist/repertoire/guardrails.js +342 -0
  148. package/dist/repertoire/mcp-client.js +254 -0
  149. package/dist/repertoire/mcp-manager.js +251 -0
  150. package/dist/repertoire/shell-sessions.js +133 -0
  151. package/dist/repertoire/skills.js +14 -23
  152. package/dist/repertoire/tasks/board.js +43 -5
  153. package/dist/repertoire/tasks/fix.js +182 -0
  154. package/dist/repertoire/tasks/index.js +28 -10
  155. package/dist/repertoire/tasks/lifecycle.js +2 -2
  156. package/dist/repertoire/tasks/parser.js +3 -2
  157. package/dist/repertoire/tasks/scanner.js +194 -37
  158. package/dist/repertoire/tasks/transitions.js +11 -28
  159. package/dist/repertoire/tools-base.js +35 -771
  160. package/dist/repertoire/tools-bluebubbles.js +94 -0
  161. package/dist/repertoire/tools-bridge.js +141 -0
  162. package/dist/repertoire/tools-config.js +266 -0
  163. package/dist/repertoire/tools-continuity.js +248 -0
  164. package/dist/repertoire/tools-credential.js +184 -0
  165. package/dist/repertoire/tools-files.js +342 -0
  166. package/dist/repertoire/tools-flow.js +62 -0
  167. package/dist/repertoire/tools-github.js +1 -6
  168. package/dist/repertoire/tools-memory.js +347 -0
  169. package/dist/repertoire/tools-session.js +740 -0
  170. package/dist/repertoire/tools-shell.js +120 -0
  171. package/dist/repertoire/tools-surface.js +242 -0
  172. package/dist/repertoire/tools-teams.js +12 -59
  173. package/dist/repertoire/tools-travel.js +125 -0
  174. package/dist/repertoire/tools.js +132 -124
  175. package/dist/repertoire/travel-api-client.js +214 -0
  176. package/dist/scripts/claude-code-hook.js +41 -0
  177. package/dist/scripts/claude-code-stop-hook.js +47 -0
  178. package/dist/senses/attention-queue.js +97 -0
  179. package/dist/senses/{bluebubbles-client.js → bluebubbles/client.js} +109 -10
  180. package/dist/senses/bluebubbles/entry.js +13 -0
  181. package/dist/senses/bluebubbles/inbound-log.js +109 -0
  182. package/dist/senses/bluebubbles/index.js +1359 -0
  183. package/dist/senses/{bluebubbles-media.js → bluebubbles/media.js} +119 -24
  184. package/dist/senses/{bluebubbles-model.js → bluebubbles/model.js} +13 -5
  185. package/dist/senses/{bluebubbles-mutation-log.js → bluebubbles/mutation-log.js} +46 -6
  186. package/dist/senses/bluebubbles/runtime-state.js +109 -0
  187. package/dist/senses/bluebubbles/session-cleanup.js +72 -0
  188. package/dist/senses/cli/adapter.js +274 -0
  189. package/dist/senses/cli/ink-app.js +156 -0
  190. package/dist/senses/cli/inline-diff.js +64 -0
  191. package/dist/senses/cli/message-list.js +51 -0
  192. package/dist/senses/cli/ouro-tui.js +358 -0
  193. package/dist/senses/cli/spinner-imperative.js +135 -0
  194. package/dist/senses/cli/spinner.js +101 -0
  195. package/dist/senses/cli/status-line.js +60 -0
  196. package/dist/senses/cli/streaming-markdown.js +526 -0
  197. package/dist/senses/cli/tool-display.js +83 -0
  198. package/dist/senses/cli/tool-render.js +85 -0
  199. package/dist/senses/cli/tui-store.js +198 -0
  200. package/dist/senses/cli/virtual-list.js +35 -0
  201. package/dist/senses/cli-entry.js +1 -1
  202. package/dist/senses/cli-layout.js +187 -0
  203. package/dist/senses/cli.js +503 -244
  204. package/dist/senses/commands.js +65 -1
  205. package/dist/senses/continuity.js +94 -0
  206. package/dist/senses/habit-turn-message.js +108 -0
  207. package/dist/senses/inner-dialog-worker.js +112 -19
  208. package/dist/senses/inner-dialog.js +591 -84
  209. package/dist/senses/pipeline.js +559 -0
  210. package/dist/senses/shared-turn.js +196 -0
  211. package/dist/senses/surface-tool.js +68 -0
  212. package/dist/senses/teams.js +667 -120
  213. package/dist/senses/trust-gate.js +112 -2
  214. package/package.json +12 -6
  215. package/skills/browser-navigation.md +110 -0
  216. package/skills/configure-dev-tools.md +81 -0
  217. package/skills/travel-planning.md +138 -0
  218. package/dist/heart/daemon/subagent-installer.js +0 -134
  219. package/dist/senses/bluebubbles-entry.js +0 -11
  220. package/dist/senses/bluebubbles.js +0 -421
  221. package/dist/senses/debug-activity.js +0 -107
  222. package/subagents/README.md +0 -73
  223. package/subagents/work-doer.md +0 -235
  224. package/subagents/work-merger.md +0 -618
  225. package/subagents/work-planner.md +0 -382
  226. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/basilisk.md +0 -0
  227. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jafar.md +0 -0
  228. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jormungandr.md +0 -0
  229. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/kaa.md +0 -0
  230. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/medusa.md +0 -0
  231. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/monty.md +0 -0
  232. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/nagini.md +0 -0
  233. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/ouroboros.md +0 -0
  234. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/python.md +0 -0
  235. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/quetzalcoatl.md +0 -0
  236. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/sir-hiss.md +0 -0
  237. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-serpent.md +0 -0
  238. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-snake.md +0 -0
  239. /package/dist/heart/{daemon → hatch}/hatch-animation.js +0 -0
  240. /package/dist/heart/{daemon → hatch}/specialist-orchestrator.js +0 -0
  241. /package/dist/heart/{daemon → versioning}/ouro-uti.js +0 -0
@@ -1,49 +1,44 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.teamsTools = exports.finalAnswerTool = exports.tools = void 0;
3
+ exports.surfaceToolDef = exports.restTool = exports.ponderTool = exports.observeTool = exports.settleTool = exports.tools = void 0;
4
4
  exports.getToolsForChannel = getToolsForChannel;
5
5
  exports.isConfirmationRequired = isConfirmationRequired;
6
+ exports.isConfirmationAlwaysRequired = isConfirmationAlwaysRequired;
6
7
  exports.execTool = execTool;
7
8
  exports.summarizeArgs = summarizeArgs;
9
+ exports.buildToolResultSummary = buildToolResultSummary;
8
10
  const tools_base_1 = require("./tools-base");
9
11
  const tools_teams_1 = require("./tools-teams");
12
+ const tools_bluebubbles_1 = require("./tools-bluebubbles");
10
13
  const ado_semantic_1 = require("./ado-semantic");
11
14
  const tools_github_1 = require("./tools-github");
12
15
  const runtime_1 = require("../nerves/runtime");
16
+ const guardrails_1 = require("./guardrails");
17
+ const identity_1 = require("../heart/identity");
18
+ const tools_surface_1 = require("./tools-surface");
19
+ function safeGetAgentRoot() {
20
+ try {
21
+ return (0, identity_1.getAgentRoot)();
22
+ }
23
+ catch {
24
+ return undefined;
25
+ }
26
+ }
13
27
  // Re-export types and constants used by the rest of the codebase
14
28
  var tools_base_2 = require("./tools-base");
15
29
  Object.defineProperty(exports, "tools", { enumerable: true, get: function () { return tools_base_2.tools; } });
16
- Object.defineProperty(exports, "finalAnswerTool", { enumerable: true, get: function () { return tools_base_2.finalAnswerTool; } });
17
- var tools_teams_2 = require("./tools-teams");
18
- Object.defineProperty(exports, "teamsTools", { enumerable: true, get: function () { return tools_teams_2.teamsTools; } });
30
+ Object.defineProperty(exports, "settleTool", { enumerable: true, get: function () { return tools_base_2.settleTool; } });
31
+ Object.defineProperty(exports, "observeTool", { enumerable: true, get: function () { return tools_base_2.observeTool; } });
32
+ Object.defineProperty(exports, "ponderTool", { enumerable: true, get: function () { return tools_base_2.ponderTool; } });
33
+ Object.defineProperty(exports, "restTool", { enumerable: true, get: function () { return tools_base_2.restTool; } });
34
+ // Re-export surface tool schema for consumers (e.g. heart/core.ts)
35
+ var tools_surface_2 = require("./tools-surface");
36
+ Object.defineProperty(exports, "surfaceToolDef", { enumerable: true, get: function () { return tools_surface_2.surfaceToolDef; } });
19
37
  // All tool definitions in a single registry
20
- const allDefinitions = [...tools_base_1.baseToolDefinitions, ...tools_teams_1.teamsToolDefinitions, ...ado_semantic_1.adoSemanticToolDefinitions, ...tools_github_1.githubToolDefinitions];
21
- const REMOTE_BLOCKED_LOCAL_TOOLS = new Set(["shell", "read_file", "write_file", "git_commit", "gh_cli"]);
22
- function isRemoteChannel(capabilities) {
23
- return capabilities?.channel === "teams" || capabilities?.channel === "bluebubbles";
24
- }
25
- function isSharedRemoteContext(friend) {
26
- const externalIds = friend.externalIds ?? [];
27
- return externalIds.some((externalId) => externalId.externalId.startsWith("group:") || externalId.provider === "teams-conversation");
28
- }
29
- function isTrustedRemoteContext(context) {
30
- if (!context?.friend || !isRemoteChannel(context.channel))
31
- return false;
32
- const trustLevel = context.friend.trustLevel ?? "stranger";
33
- return trustLevel !== "stranger" && !isSharedRemoteContext(context.friend);
34
- }
35
- function shouldBlockLocalTools(capabilities, context) {
36
- if (!isRemoteChannel(capabilities))
37
- return false;
38
- return !isTrustedRemoteContext(context);
39
- }
40
- function blockedLocalToolMessage() {
41
- return "I can't do that from here because I'm talking to multiple people in a shared remote channel, and local shell/file/git/gh operations could let conversations interfere with each other. Ask me for a remote-safe alternative (Graph/ADO/web), or run that operation from CLI.";
42
- }
43
- function baseToolsForCapabilities(capabilities, context) {
44
- if (!shouldBlockLocalTools(capabilities, context))
45
- return tools_base_1.tools;
46
- return tools_base_1.tools.filter((tool) => !REMOTE_BLOCKED_LOCAL_TOOLS.has(tool.function.name));
38
+ const allDefinitions = [...tools_base_1.baseToolDefinitions, ...tools_bluebubbles_1.bluebubblesToolDefinitions, ...tools_teams_1.teamsToolDefinitions, ...ado_semantic_1.adoSemanticToolDefinitions, ...tools_github_1.githubToolDefinitions, tools_surface_1.surfaceToolDefinition];
39
+ function baseToolsForCapabilities() {
40
+ // Use baseToolDefinitions at call time so dynamically-added tools are included
41
+ return tools_base_1.baseToolDefinitions.map((d) => d.tool);
47
42
  }
48
43
  // Apply a single tool preference to a tool schema, returning a new object.
49
44
  function applyPreference(tool, pref) {
@@ -55,34 +50,55 @@ function applyPreference(tool, pref) {
55
50
  },
56
51
  };
57
52
  }
53
+ // Filter out tools whose requiredCapability is not in the provider's capability set.
54
+ // Uses baseToolDefinitions at call time so dynamically-added tools are included.
55
+ // Only base tools can have requiredCapability (integration tools do not).
56
+ function filterByCapability(toolList, providerCapabilities) {
57
+ return toolList.filter((tool) => {
58
+ const def = tools_base_1.baseToolDefinitions.find((d) => d.tool.function.name === tool.function.name);
59
+ if (!def?.requiredCapability)
60
+ return true;
61
+ return providerCapabilities?.has(def.requiredCapability) === true;
62
+ });
63
+ }
58
64
  // Return the appropriate tools list based on channel capabilities.
59
65
  // Base tools (no integration) are always included.
60
66
  // Teams/integration tools are included only if their integration is in availableIntegrations.
61
67
  // When toolPreferences is provided, matching preferences are appended to tool descriptions.
62
- function getToolsForChannel(capabilities, toolPreferences, context) {
63
- const baseTools = baseToolsForCapabilities(capabilities, context);
68
+ // When providerCapabilities is provided, tools with requiredCapability are filtered.
69
+ function getToolsForChannel(capabilities, toolPreferences, _context, providerCapabilities) {
70
+ const baseTools = baseToolsForCapabilities();
71
+ const bluebubblesTools = capabilities?.channel === "bluebubbles"
72
+ ? tools_bluebubbles_1.bluebubblesToolDefinitions.map((d) => d.tool)
73
+ : [];
74
+ let result;
64
75
  if (!capabilities || capabilities.availableIntegrations.length === 0) {
65
- return baseTools;
76
+ result = [...baseTools, ...bluebubblesTools];
66
77
  }
67
- const available = new Set(capabilities.availableIntegrations);
68
- const channelDefs = [...tools_teams_1.teamsToolDefinitions, ...ado_semantic_1.adoSemanticToolDefinitions, ...tools_github_1.githubToolDefinitions];
69
- // Include tools whose integration is available, plus channel tools with no integration gate (e.g. teams_send_message)
70
- const integrationDefs = channelDefs.filter((d) => d.integration ? available.has(d.integration) : capabilities.channel === "teams");
71
- if (!toolPreferences || Object.keys(toolPreferences).length === 0) {
72
- return [...baseTools, ...integrationDefs.map((d) => d.tool)];
78
+ else {
79
+ const available = new Set(capabilities.availableIntegrations);
80
+ const channelDefs = [...tools_teams_1.teamsToolDefinitions, ...ado_semantic_1.adoSemanticToolDefinitions, ...tools_github_1.githubToolDefinitions];
81
+ // Include tools whose integration is available, plus channel tools with no integration gate (e.g. teams_send_message)
82
+ const integrationDefs = channelDefs.filter((d) => d.integration ? available.has(d.integration) : capabilities.channel === "teams");
83
+ if (!toolPreferences || Object.keys(toolPreferences).length === 0) {
84
+ result = [...baseTools, ...bluebubblesTools, ...integrationDefs.map((d) => d.tool)];
85
+ }
86
+ else {
87
+ // Build a map of integration -> preference text for fast lookup
88
+ const prefMap = new Map();
89
+ for (const [key, value] of Object.entries(toolPreferences)) {
90
+ prefMap.set(key, value);
91
+ }
92
+ // Apply preferences to matching integration tools (new objects, no mutation)
93
+ // d.integration is guaranteed truthy -- integrationDefs are pre-filtered above
94
+ const enrichedIntegrationTools = integrationDefs.map((d) => {
95
+ const pref = prefMap.get(d.integration);
96
+ return pref ? applyPreference(d.tool, pref) : d.tool;
97
+ });
98
+ result = [...baseTools, ...bluebubblesTools, ...enrichedIntegrationTools];
99
+ }
73
100
  }
74
- // Build a map of integration -> preference text for fast lookup
75
- const prefMap = new Map();
76
- for (const [key, value] of Object.entries(toolPreferences)) {
77
- prefMap.set(key, value);
78
- }
79
- // Apply preferences to matching integration tools (new objects, no mutation)
80
- // d.integration is guaranteed truthy -- integrationDefs are pre-filtered above
81
- const enrichedIntegrationTools = integrationDefs.map((d) => {
82
- const pref = prefMap.get(d.integration);
83
- return pref ? applyPreference(d.tool, pref) : d.tool;
84
- });
85
- return [...baseTools, ...enrichedIntegrationTools];
101
+ return filterByCapability(result, providerCapabilities);
86
102
  }
87
103
  // Check whether a tool requires user confirmation before execution.
88
104
  // Reads from ToolDefinition.confirmationRequired instead of a separate Set.
@@ -90,12 +106,21 @@ function isConfirmationRequired(toolName) {
90
106
  const def = allDefinitions.find((d) => d.tool.function.name === toolName);
91
107
  return def?.confirmationRequired === true;
92
108
  }
109
+ // Check whether a tool's confirmation is non-bypassable (cannot be skipped by skipConfirmation).
110
+ // Used for T2 config proposals that must always require operator approval.
111
+ function isConfirmationAlwaysRequired(toolName) {
112
+ const def = allDefinitions.find((d) => d.tool.function.name === toolName);
113
+ return def?.confirmationAlwaysRequired === true;
114
+ }
115
+ function normalizeGuardArgs(_name, args) {
116
+ return args;
117
+ }
93
118
  async function execTool(name, args, ctx) {
94
119
  (0, runtime_1.emitNervesEvent)({
95
120
  event: "tool.start",
96
121
  component: "tools",
97
122
  message: "tool execution started",
98
- meta: { name },
123
+ meta: { name, ...(name === "shell" && args.command ? { command: args.command } : {}) },
99
124
  });
100
125
  // Look up from combined registry
101
126
  const def = allDefinitions.find((d) => d.tool.function.name === name);
@@ -109,16 +134,23 @@ async function execTool(name, args, ctx) {
109
134
  });
110
135
  return `unknown: ${name}`;
111
136
  }
112
- if (shouldBlockLocalTools(ctx?.context?.channel, ctx?.context) && REMOTE_BLOCKED_LOCAL_TOOLS.has(name)) {
113
- const message = blockedLocalToolMessage();
137
+ // Guardrail check: structural + trust-level
138
+ const guardContext = {
139
+ readPaths: tools_base_1.editFileReadTracker,
140
+ trustLevel: ctx?.context?.friend?.trustLevel,
141
+ agentRoot: safeGetAgentRoot(),
142
+ };
143
+ const guardArgs = normalizeGuardArgs(name, args);
144
+ const guardResult = (0, guardrails_1.guardInvocation)(name, guardArgs, guardContext);
145
+ if (!guardResult.allowed) {
114
146
  (0, runtime_1.emitNervesEvent)({
115
147
  level: "warn",
116
- event: "tool.error",
148
+ event: "tool.guardrail_block",
117
149
  component: "tools",
118
- message: "blocked local tool in remote channel",
119
- meta: { name, channel: ctx?.context?.channel?.channel },
150
+ message: "guardrail blocked tool execution",
151
+ meta: { name, reason: guardResult.reason },
120
152
  });
121
- return message;
153
+ return guardResult.reason;
122
154
  }
123
155
  try {
124
156
  const result = await def.handler(args, ctx);
@@ -162,71 +194,47 @@ function summarizeUnknownArgs(args) {
162
194
  return summarizeKeyValues(args, keys);
163
195
  }
164
196
  function summarizeArgs(name, args) {
165
- // Check teams tools first
166
- const teamsSummary = (0, tools_teams_1.summarizeTeamsArgs)(name, args);
167
- if (teamsSummary !== undefined)
168
- return teamsSummary;
169
- // Check github tools
170
- const githubSummary = (0, tools_github_1.summarizeGithubArgs)(name, args);
171
- if (githubSummary !== undefined)
172
- return githubSummary;
173
- // Base tools
174
- if (name === "read_file" || name === "write_file")
175
- return summarizeKeyValues(args, ["path"]);
176
- if (name === "shell")
177
- return summarizeKeyValues(args, ["command"]);
178
- if (name === "list_directory")
179
- return summarizeKeyValues(args, ["path"]);
180
- if (name === "git_commit")
181
- return summarizeKeyValues(args, ["message"]);
182
- if (name === "gh_cli")
183
- return summarizeKeyValues(args, ["command"]);
184
- if (name === "load_skill")
185
- return summarizeKeyValues(args, ["name"]);
186
- if (name === "task_create")
187
- return summarizeKeyValues(args, ["title", "type", "category", "scheduledAt", "cadence"]);
188
- if (name === "schedule_reminder")
189
- return summarizeKeyValues(args, ["title", "scheduledAt", "cadence"]);
190
- if (name === "task_update_status")
191
- return summarizeKeyValues(args, ["name", "status"]);
192
- if (name === "task_board_status")
193
- return summarizeKeyValues(args, ["status"]);
194
- if (name === "task_board_action")
195
- return summarizeKeyValues(args, ["scope"]);
196
- if (name === "task_board" || name === "task_board_deps" || name === "task_board_sessions")
197
- return "";
198
- if (name === "coding_spawn")
199
- return summarizeKeyValues(args, ["runner", "workdir", "taskRef"]);
200
- if (name === "coding_status")
201
- return summarizeKeyValues(args, ["sessionId"]);
202
- if (name === "coding_tail")
203
- return summarizeKeyValues(args, ["sessionId"]);
204
- if (name === "coding_send_input")
205
- return summarizeKeyValues(args, ["sessionId", "input"]);
206
- if (name === "coding_kill")
207
- return summarizeKeyValues(args, ["sessionId"]);
208
- if (name === "claude")
209
- return summarizeKeyValues(args, ["prompt"]);
210
- if (name === "web_search")
211
- return summarizeKeyValues(args, ["query"]);
212
- if (name === "memory_search")
213
- return summarizeKeyValues(args, ["query"]);
214
- if (name === "memory_save")
215
- return summarizeKeyValues(args, ["text", "about"]);
216
- if (name === "get_friend_note")
217
- return summarizeKeyValues(args, ["friendId"]);
218
- if (name === "save_friend_note") {
219
- return summarizeKeyValues(args, ["type", "key", "content"]);
197
+ const def = allDefinitions.find((d) => d.tool.function.name === name);
198
+ if (def && def.summaryKeys !== undefined) {
199
+ return summarizeKeyValues(args, def.summaryKeys);
220
200
  }
221
- if (name === "ado_backlog_list")
222
- return summarizeKeyValues(args, ["organization", "project"]);
223
- if (name === "ado_batch_update")
224
- return summarizeKeyValues(args, ["organization", "project"]);
225
- if (name === "ado_create_epic" || name === "ado_create_issue")
226
- return summarizeKeyValues(args, ["organization", "project", "title"]);
227
- if (name === "ado_move_items")
228
- return summarizeKeyValues(args, ["organization", "project", "workItemIds"]);
229
- if (name === "ado_restructure_backlog")
230
- return summarizeKeyValues(args, ["organization", "project"]);
231
201
  return summarizeUnknownArgs(args);
232
202
  }
203
+ /**
204
+ * Build an enriched tool result summary for display on remote channels.
205
+ * For recognized tools, includes result-derived info (diff stats, exit codes, etc.).
206
+ * Falls back to arg-based summary for unrecognized tools.
207
+ */
208
+ function buildToolResultSummary(name, args, _result, success) {
209
+ /* v8 ignore start -- branches: ?? fallbacks and ternaries in tool summary formatting @preserve */
210
+ switch (name) {
211
+ case "edit_file": {
212
+ if (!success)
213
+ return summarizeArgs(name, args);
214
+ const addedLines = (args.new_string ?? "").split("\n").length;
215
+ const removedLines = (args.old_string ?? "").split("\n").length;
216
+ return `+${addedLines} -${removedLines} lines in ${args.path ?? "unknown"}`;
217
+ }
218
+ case "shell": {
219
+ const cmd = args.command ?? "?";
220
+ const exitCode = success ? 0 : 1;
221
+ return `$ ${cmd} (exit ${exitCode})`;
222
+ }
223
+ case "read_file":
224
+ return `path=${args.path ?? "unknown"}`;
225
+ case "write_file":
226
+ return `path=${args.path ?? "unknown"}`;
227
+ case "glob":
228
+ return `pattern=${args.pattern ?? "?"} ${args.cwd ? `cwd=${args.cwd}` : ""}`.trim();
229
+ case "grep":
230
+ return `pattern=${args.pattern ?? "?"} ${args.path ? `path=${args.path}` : ""}`.trim();
231
+ case "coding_spawn": {
232
+ const taskRef = args.taskRef ?? "unknown";
233
+ const status = success ? "spawned" : "failed";
234
+ return `${taskRef} -> ${status}`;
235
+ }
236
+ default:
237
+ return summarizeArgs(name, args);
238
+ }
239
+ /* v8 ignore stop */
240
+ }
@@ -0,0 +1,214 @@
1
+ "use strict";
2
+ /**
3
+ * Travel API client module.
4
+ *
5
+ * Provides HTTP clients for:
6
+ * - OpenWeatherMap (query-param auth via vault)
7
+ * - US State Dept Travel Advisories (no auth)
8
+ * - Nominatim Geocoding (no auth, requires User-Agent)
9
+ */
10
+ Object.defineProperty(exports, "__esModule", { value: true });
11
+ exports.TRAVEL_ADVISORY_RSS_URL = void 0;
12
+ exports.getWeather = getWeather;
13
+ exports.getWeatherByCity = getWeatherByCity;
14
+ exports.parseAdvisoryLevel = parseAdvisoryLevel;
15
+ exports.parseCountryName = parseCountryName;
16
+ exports.parseAdvisoryText = parseAdvisoryText;
17
+ exports.getTravelAdvisory = getTravelAdvisory;
18
+ exports.geocode = geocode;
19
+ exports.reverseGeocode = reverseGeocode;
20
+ exports.searchPOI = searchPOI;
21
+ const runtime_1 = require("../nerves/runtime");
22
+ const credential_access_1 = require("./credential-access");
23
+ // --- OpenWeatherMap ---
24
+ /** Domain used for weather API key credential retrieval. */
25
+ const WEATHER_CREDENTIAL_DOMAIN = "api.openweathermap.org";
26
+ async function getWeatherApiKey() {
27
+ const store = (0, credential_access_1.getCredentialStore)();
28
+ return store.getRawSecret(WEATHER_CREDENTIAL_DOMAIN, "password");
29
+ }
30
+ async function getWeather(lat, lon) {
31
+ return withNervesEvents("getWeather", { lat, lon }, async () => {
32
+ const apiKey = await getWeatherApiKey();
33
+ const url = `https://api.openweathermap.org/data/2.5/weather?lat=${lat}&lon=${lon}&appid=${apiKey}&units=metric`;
34
+ const res = await fetch(url);
35
+ if (!res.ok) {
36
+ throw new Error(`OpenWeatherMap API error: ${res.status} ${res.statusText}`);
37
+ }
38
+ const data = await res.json();
39
+ return parseWeatherResponse(data);
40
+ });
41
+ }
42
+ async function getWeatherByCity(city) {
43
+ return withNervesEvents("getWeatherByCity", { city }, async () => {
44
+ const apiKey = await getWeatherApiKey();
45
+ const url = `https://api.openweathermap.org/data/2.5/weather?q=${encodeURIComponent(city)}&appid=${apiKey}&units=metric`;
46
+ const res = await fetch(url);
47
+ if (!res.ok) {
48
+ throw new Error(`OpenWeatherMap API error: ${res.status} ${res.statusText}`);
49
+ }
50
+ const data = await res.json();
51
+ return parseWeatherResponse(data);
52
+ });
53
+ }
54
+ function parseWeatherResponse(data) {
55
+ return {
56
+ temperature: data.main.temp,
57
+ feelsLike: data.main.feels_like,
58
+ description: data.weather?.[0]?.description ?? "unknown",
59
+ humidity: data.main.humidity,
60
+ windSpeed: data.wind.speed,
61
+ city: data.name,
62
+ country: data.sys.country,
63
+ };
64
+ }
65
+ // --- US State Dept Travel Advisories ---
66
+ /**
67
+ * Official US State Department travel advisories RSS feed.
68
+ * This is the canonical public feed maintained by travel.state.gov.
69
+ * Returns XML/RSS with per-country advisory items.
70
+ */
71
+ exports.TRAVEL_ADVISORY_RSS_URL = "https://travel.state.gov/_res/rss/TAsTWs.xml";
72
+ /**
73
+ * Parse advisory level (1-4) from an RSS item title like
74
+ * "Afghanistan - Level 4: Do Not Travel"
75
+ */
76
+ function parseAdvisoryLevel(title) {
77
+ const match = title.match(/Level\s+(\d)/);
78
+ return match ? parseInt(match[1], 10) : 0;
79
+ }
80
+ /**
81
+ * Parse country name from an RSS item title like
82
+ * "Afghanistan - Level 4: Do Not Travel"
83
+ */
84
+ function parseCountryName(title) {
85
+ const dashIdx = title.indexOf(" - ");
86
+ return dashIdx > 0 ? title.slice(0, dashIdx).trim() : title.trim();
87
+ }
88
+ /**
89
+ * Extract advisory text from title (the part after "Level N: ").
90
+ */
91
+ function parseAdvisoryText(title) {
92
+ const match = title.match(/Level\s+\d:\s*(.+)/);
93
+ return match ? match[1].trim() : title.trim();
94
+ }
95
+ async function getTravelAdvisory(countryCode) {
96
+ return withNervesEvents("getTravelAdvisory", { countryCode }, async () => {
97
+ const res = await fetch(exports.TRAVEL_ADVISORY_RSS_URL, {
98
+ headers: {
99
+ Accept: "application/xml, text/xml",
100
+ },
101
+ });
102
+ if (!res.ok) {
103
+ throw new Error(`Travel advisory API error: ${res.status} ${res.statusText}`);
104
+ }
105
+ const xml = await res.text();
106
+ // Parse RSS items via regex (no XML parser dependency needed).
107
+ // Each <item> contains <title>, <pubDate>, and <category domain="Country-Tag">.
108
+ const itemPattern = /<item>([\s\S]*?)<\/item>/g;
109
+ let match;
110
+ while ((match = itemPattern.exec(xml)) !== null) {
111
+ const block = match[1];
112
+ // Extract country tag from <category domain="Country-Tag">XX</category>
113
+ const tagMatch = block.match(/<category\s+domain="Country-Tag">(.*?)<\/category>/);
114
+ const tag = tagMatch?.[1]?.trim().toUpperCase();
115
+ // The RSS feed uses FIPS country codes (e.g. "AF" for Afghanistan),
116
+ // which sometimes differ from ISO 3166. Try exact match first.
117
+ if (tag !== countryCode.toUpperCase())
118
+ continue;
119
+ const titleMatch = block.match(/<title>(.*?)<\/title>/);
120
+ const title = titleMatch?.[1] ?? "";
121
+ const pubDateMatch = block.match(/<pubDate>(.*?)<\/pubDate>/);
122
+ const pubDate = pubDateMatch?.[1]?.trim() ?? "";
123
+ return {
124
+ countryCode,
125
+ countryName: parseCountryName(title),
126
+ advisoryLevel: parseAdvisoryLevel(title),
127
+ advisoryText: parseAdvisoryText(title),
128
+ lastUpdated: pubDate,
129
+ };
130
+ }
131
+ throw new Error(`No travel advisory found for country code "${countryCode}"`);
132
+ });
133
+ }
134
+ // --- Nominatim Geocoding ---
135
+ const NOMINATIM_BASE = "https://nominatim.openstreetmap.org";
136
+ const NOMINATIM_HEADERS = {
137
+ "User-Agent": "Ouroboros/1.0 (https://github.com/ouroborosbot/ouroboros)",
138
+ Accept: "application/json",
139
+ };
140
+ async function geocode(query) {
141
+ return withNervesEvents("geocode", { query }, async () => {
142
+ const url = `${NOMINATIM_BASE}/search?q=${encodeURIComponent(query)}&format=json`;
143
+ const res = await fetch(url, { headers: NOMINATIM_HEADERS });
144
+ if (!res.ok) {
145
+ throw new Error(`Nominatim geocode error: ${res.status} ${res.statusText}`);
146
+ }
147
+ const data = await res.json();
148
+ return data.map(parseGeoLocation);
149
+ });
150
+ }
151
+ async function reverseGeocode(lat, lon) {
152
+ return withNervesEvents("reverseGeocode", { lat, lon }, async () => {
153
+ const url = `${NOMINATIM_BASE}/reverse?lat=${lat}&lon=${lon}&format=json`;
154
+ const res = await fetch(url, { headers: NOMINATIM_HEADERS });
155
+ if (!res.ok) {
156
+ throw new Error(`Nominatim reverse geocode error: ${res.status} ${res.statusText}`);
157
+ }
158
+ const data = await res.json();
159
+ return parseGeoLocation(data);
160
+ });
161
+ }
162
+ async function searchPOI(query, lat, lon, radiusKm) {
163
+ return withNervesEvents("searchPOI", { query, lat, lon, radiusKm }, async () => {
164
+ const radius = radiusKm ?? 10;
165
+ // Nominatim uses viewbox for bounded search (approximate degrees from km)
166
+ const degOffset = radius / 111; // ~111 km per degree
167
+ const viewbox = `${lon - degOffset},${lat + degOffset},${lon + degOffset},${lat - degOffset}`;
168
+ const url = `${NOMINATIM_BASE}/search?q=${encodeURIComponent(query)}&format=json&viewbox=${viewbox}&bounded=1`;
169
+ const res = await fetch(url, { headers: NOMINATIM_HEADERS });
170
+ if (!res.ok) {
171
+ throw new Error(`Nominatim POI search error: ${res.status} ${res.statusText}`);
172
+ }
173
+ const data = await res.json();
174
+ return data.map(parseGeoLocation);
175
+ });
176
+ }
177
+ function parseGeoLocation(item) {
178
+ return {
179
+ lat: parseFloat(item.lat),
180
+ lon: parseFloat(item.lon),
181
+ displayName: item.display_name,
182
+ type: item.type ?? "unknown",
183
+ };
184
+ }
185
+ // --- Shared nerves event wrapper ---
186
+ async function withNervesEvents(operation, meta, fn) {
187
+ (0, runtime_1.emitNervesEvent)({
188
+ event: "client.request_start",
189
+ component: "clients",
190
+ message: `travel API ${operation} starting`,
191
+ meta: { operation, ...meta },
192
+ });
193
+ try {
194
+ const result = await fn();
195
+ (0, runtime_1.emitNervesEvent)({
196
+ event: "client.request_end",
197
+ component: "clients",
198
+ message: `travel API ${operation} complete`,
199
+ meta: { operation, ...meta },
200
+ });
201
+ return result;
202
+ }
203
+ catch (err) {
204
+ (0, runtime_1.emitNervesEvent)({
205
+ level: "error",
206
+ event: "client.error",
207
+ component: "clients",
208
+ message: `travel API ${operation} failed`,
209
+ /* v8 ignore next -- defensive: callers throw Error instances @preserve */
210
+ meta: { operation, reason: err instanceof Error ? err.message : String(err), ...meta },
211
+ });
212
+ throw err;
213
+ }
214
+ }
@@ -0,0 +1,41 @@
1
+ "use strict";
2
+ // Claude Code lifecycle hook handler.
3
+ // Receives events from Claude Code's hooks system (SessionStart, Stop, PostToolUse)
4
+ // and forwards them to the Ouroboros daemon for agent awareness.
5
+ //
6
+ // This module exports handleHookEvent for testability.
7
+ // The actual hook scripts (scripts/claude-code-hook.js) read stdin and call this.
8
+ Object.defineProperty(exports, "__esModule", { value: true });
9
+ exports.handleHookEvent = handleHookEvent;
10
+ const socket_client_1 = require("../heart/daemon/socket-client");
11
+ const runtime_1 = require("../nerves/runtime");
12
+ /**
13
+ * Handle a Claude Code lifecycle hook event.
14
+ * Sends the event to the daemon and always exits 0 (hooks must not block the IDE).
15
+ */
16
+ async function handleHookEvent(hookEvent) {
17
+ (0, runtime_1.emitNervesEvent)({
18
+ component: "daemon",
19
+ event: "daemon.hook_event_received",
20
+ message: "claude code hook event received",
21
+ meta: { hookEvent: hookEvent.event, sessionId: hookEvent.sessionId },
22
+ });
23
+ try {
24
+ await (0, socket_client_1.sendDaemonCommand)(socket_client_1.DEFAULT_DAEMON_SOCKET_PATH, {
25
+ kind: "hook.event",
26
+ event: hookEvent.event,
27
+ sessionId: hookEvent.sessionId,
28
+ toolName: hookEvent.toolName,
29
+ });
30
+ }
31
+ catch {
32
+ // Daemon unavailable — silently ignore. Hooks must not block.
33
+ (0, runtime_1.emitNervesEvent)({
34
+ component: "daemon",
35
+ event: "daemon.hook_event_daemon_unavailable",
36
+ message: "daemon unavailable for hook event",
37
+ meta: { hookEvent: hookEvent.event },
38
+ });
39
+ }
40
+ return { exitCode: 0 };
41
+ }
@@ -0,0 +1,47 @@
1
+ "use strict";
2
+ // Claude Code stop hook — checks the agent's pending queue and returns
3
+ // any messages as additionalContext for injection into the next turn.
4
+ //
5
+ // This is how the agent can proactively communicate back to the dev tool user:
6
+ // the agent surfaces a message to the pending queue, and the stop hook picks
7
+ // it up and injects it as context in the Claude Code session.
8
+ Object.defineProperty(exports, "__esModule", { value: true });
9
+ exports.handleStopHook = handleStopHook;
10
+ const pending_1 = require("../mind/pending");
11
+ const runtime_1 = require("../nerves/runtime");
12
+ /**
13
+ * Check the pending queue for messages from the agent to this dev tool session.
14
+ * Returns accumulated message text as additionalContext.
15
+ */
16
+ async function handleStopHook(input) {
17
+ (0, runtime_1.emitNervesEvent)({
18
+ component: "daemon",
19
+ event: "daemon.stop_hook_check_start",
20
+ message: "checking pending queue for stop hook",
21
+ meta: { agentName: input.agentName, friendId: input.friendId, sessionId: input.sessionId },
22
+ });
23
+ try {
24
+ const pendingDir = (0, pending_1.getPendingDir)(input.agentName, input.friendId, "mcp", input.sessionId);
25
+ const pending = (0, pending_1.drainPending)(pendingDir);
26
+ if (pending.length === 0) {
27
+ return { additionalContext: "" };
28
+ }
29
+ const text = pending.map((m) => m.content).join("\n\n---\n\n");
30
+ (0, runtime_1.emitNervesEvent)({
31
+ component: "daemon",
32
+ event: "daemon.stop_hook_check_end",
33
+ message: "pending messages found for stop hook",
34
+ meta: { agentName: input.agentName, count: pending.length },
35
+ });
36
+ return { additionalContext: text };
37
+ }
38
+ catch {
39
+ (0, runtime_1.emitNervesEvent)({
40
+ component: "daemon",
41
+ event: "daemon.stop_hook_check_error",
42
+ message: "error checking pending queue in stop hook",
43
+ meta: { agentName: input.agentName },
44
+ });
45
+ return { additionalContext: "" };
46
+ }
47
+ }