@ouro.bot/cli 0.1.0-alpha.236 → 0.1.0-alpha.238

package/changelog.json

@@ -2,10 +2,12 @@
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
     {
-      "version": "0.1.0-alpha.236",
+      "version": "0.1.0-alpha.238",
       "changes": [
-        "fix(engine): provider-aware retry classification — retries now use both generic isTransientError AND provider classifyError",
-        "feat(engine): retry instrumentation — engine.provider_retry / engine.provider_retry_skip events with full diagnostics"
+        "feat: pretty `ouro status` \u2014 ANSI colored output with box-drawing header, status dots, grouped senses/workers by agent. Added git sync info to overview.",
+        "fix: socket half-close \u2014 sendDaemonCommand now calls client.end() after writing, preventing intermittent connection hangs.",
+        "refactor: config tiers \u2014 replaced numeric T1/T2/T3 with `self` (agent-configurable) and `managed` (harness-only). All config keys are now agent-writable except `version` and `enabled`. mcpServers promoted to self.",
+        "refactor: removed confirmation system \u2014 deleted propose_config tool, confirmationRequired/confirmationAlwaysRequired/onConfirmAction from core, all tool definitions, and Teams sense. Was only wired up on Teams, silently failed everywhere else. -1,361 lines."
       ]
     },
     {

package/dist/heart/config-registry.js

@@ -82,11 +82,11 @@ function validateObject(requiredFields) {
     };
 }
 const registryData = [
-    // --- Tier 3: Operator-only ---
+    // --- Managed: harness-only ---
     {
         path: "version",
-        tier: 3,
-        description: "Agent config schema version. Must be an integer >= 1.",
+        tier: "managed",
+        description: "Agent config schema version. Managed by the harness. Must be an integer >= 1.",
         default: 2,
         effects: "Controls which config migrations apply on load. Changing incorrectly can corrupt config.",
         topics: ["schema", "migration"],
@@ -94,25 +94,25 @@ const registryData = [
     },
     {
         path: "enabled",
-        tier: 3,
-        description: "Whether the agent is enabled. When false, the agent refuses to start.",
+        tier: "managed",
+        description: "Whether the agent is enabled. Managed by the harness. When false, the agent refuses to start.",
         default: true,
         effects: "Disables all agent functionality when set to false.",
         topics: ["lifecycle", "activation"],
         validate: validateBoolean,
     },
+    // --- Self: agent-configurable ---
     {
         path: "mcpServers",
-        tier: 3,
-        description: "MCP server configurations. Maps server name to command, args, and env.",
+        tier: "self",
+        description: "MCP server configurations. Maps server name to command, args, and env. The agent can add or remove MCP servers.",
         default: undefined,
-        effects: "Adds or removes MCP tool servers. Incorrect config can expose the agent to untrusted tool sources.",
+        effects: "Adds or removes MCP tool servers.",
         topics: ["tools", "mcp", "servers", "extensions"],
     },
-    // --- Tier 2: Proposal ---
     {
         path: "humanFacing.provider",
-        tier: 2,
+        tier: "self",
         description: "Provider for human-facing interactions (CLI, Teams, BlueBubbles).",
         default: "anthropic",
         effects: "Changes the LLM provider used for all human-facing conversations. Affects quality, latency, and cost.",
@@ -121,7 +121,7 @@ const registryData = [
     },
     {
         path: "humanFacing.model",
-        tier: 2,
+        tier: "self",
         description: "Model name for human-facing interactions.",
         default: "claude-opus-4-6",
         effects: "Changes the specific model used for human-facing conversations.",
@@ -130,7 +130,7 @@ const registryData = [
     },
     {
         path: "agentFacing.provider",
-        tier: 2,
+        tier: "self",
         description: "Provider for agent-facing interactions (inner dialog, delegation).",
         default: "anthropic",
         effects: "Changes the LLM provider used for inner dialog and agent-to-agent communication.",
@@ -139,7 +139,7 @@ const registryData = [
     },
     {
         path: "agentFacing.model",
-        tier: 2,
+        tier: "self",
         description: "Model name for agent-facing interactions.",
         default: "claude-opus-4-6",
         effects: "Changes the specific model used for inner dialog and agent-to-agent communication.",
@@ -148,7 +148,7 @@ const registryData = [
     },
     {
         path: "context.maxTokens",
-        tier: 2,
+        tier: "self",
         description: "Maximum context window size in tokens.",
         default: 80000,
         effects: "Larger values allow more context but increase cost and latency. Must match model capability.",
@@ -157,7 +157,7 @@ const registryData = [
     },
     {
         path: "senses.cli",
-        tier: 2,
+        tier: "self",
         description: "CLI sense configuration. Controls whether the CLI interface is enabled.",
         default: { enabled: true },
         effects: "Enables or disables the CLI (terminal) interaction channel.",
@@ -166,7 +166,7 @@ const registryData = [
     },
     {
         path: "senses.teams",
-        tier: 2,
+        tier: "self",
         description: "Teams sense configuration. Controls whether the Teams interface is enabled.",
         default: { enabled: false },
         effects: "Enables or disables the Microsoft Teams interaction channel.",
@@ -175,7 +175,7 @@ const registryData = [
     },
     {
         path: "senses.bluebubbles",
-        tier: 2,
+        tier: "self",
         description: "BlueBubbles sense configuration. Controls whether the iMessage interface is enabled.",
         default: { enabled: false },
         effects: "Enables or disables the BlueBubbles (iMessage) interaction channel.",
@@ -184,7 +184,7 @@ const registryData = [
     },
     {
         path: "sync.enabled",
-        tier: 2,
+        tier: "self",
         description: "Whether git-based bundle sync is enabled.",
         default: false,
         effects: "Enables automatic synchronization of agent state via git. Requires sync.remote to be configured.",
@@ -193,17 +193,16 @@ const registryData = [
     },
     {
         path: "sync.remote",
-        tier: 2,
+        tier: "self",
         description: "Git remote name used for bundle sync.",
         default: "origin",
         effects: "Controls which git remote is used when sync is enabled.",
         topics: ["sync", "git", "remote"],
         validate: validateString,
     },
-    // --- Tier 1: Self-service ---
     {
         path: "context.contextMargin",
-        tier: 1,
+        tier: "self",
         description: "Percentage of context window reserved as margin before compaction triggers.",
         default: 20,
         effects: "Higher values trigger compaction earlier, preserving more headroom. Lower values use more context.",
@@ -212,7 +211,7 @@ const registryData = [
     },
     {
         path: "phrases.thinking",
-        tier: 1,
+        tier: "self",
         description: "Array of phrases displayed while the agent is thinking.",
         default: ["working"],
         effects: "Changes the thinking indicator text shown to users. Purely cosmetic.",
@@ -221,7 +220,7 @@ const registryData = [
     },
     {
         path: "phrases.tool",
-        tier: 1,
+        tier: "self",
         description: "Array of phrases displayed while the agent is running a tool.",
         default: ["running tool"],
         effects: "Changes the tool-use indicator text shown to users. Purely cosmetic.",
@@ -230,7 +229,7 @@ const registryData = [
     },
     {
         path: "phrases.followup",
-        tier: 1,
+        tier: "self",
         description: "Array of phrases displayed during follow-up processing.",
         default: ["processing"],
         effects: "Changes the follow-up indicator text shown to users. Purely cosmetic.",
@@ -239,7 +238,7 @@ const registryData = [
     },
     {
         path: "shell.defaultTimeout",
-        tier: 1,
+        tier: "self",
         description: "Default timeout in milliseconds for shell command execution.",
         default: undefined,
         effects: "Controls how long shell commands run before timing out. Undefined uses system default.",
@@ -248,7 +247,7 @@ const registryData = [
     },
     {
         path: "logging.level",
-        tier: 1,
+        tier: "self",
         description: "Minimum log level: debug, info, warn, or error.",
         default: undefined,
         effects: "Controls verbosity of runtime logging. Lower levels produce more output.",
@@ -257,7 +256,7 @@ const registryData = [
     },
     {
         path: "logging.sinks",
-        tier: 1,
+        tier: "self",
         description: "Array of log sink types: 'terminal' and/or 'ndjson'.",
         default: undefined,
         effects: "Controls where log output is directed. Terminal shows in console, ndjson writes structured logs.",

package/dist/heart/core.js

@@ -905,23 +905,6 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                         providerRuntime.appendToolOutput(tc.id, rejection);
                         continue;
                     }
-                    // Confirmation check for mutate tools.
-                    // confirmationAlwaysRequired tools cannot be bypassed by skipConfirmation.
-                    const needsConfirmation = (0, tools_1.isConfirmationRequired)(tc.name) && (!options?.skipConfirmation || (0, tools_1.isConfirmationAlwaysRequired)(tc.name));
-                    if (needsConfirmation) {
-                        let decision = "denied";
-                        if (callbacks.onConfirmAction) {
-                            decision = await callbacks.onConfirmAction(tc.name, args);
-                        }
-                        if (decision !== "confirmed") {
-                            const cancelled = "Action cancelled by user.";
-                            callbacks.onToolStart(tc.name, args);
-                            callbacks.onToolEnd(tc.name, argSummary, false);
-                            messages.push({ role: "tool", tool_call_id: tc.id, content: cancelled });
-                            providerRuntime.appendToolOutput(tc.id, cancelled);
-                            continue;
-                        }
-                    }
                     callbacks.onToolStart(tc.name, args);
                     let toolResult;
                     let success;

package/dist/heart/daemon/cli-render.js

@@ -89,6 +89,8 @@ function parseStatusPayload(data) {
         senseCount: numberField(overview.senseCount) ?? 0,
         entryPath: stringField(overview.entryPath) ?? "unknown",
         mode: stringField(overview.mode) ?? "unknown",
+        syncEnabled: booleanField(overview.syncEnabled) ?? false,
+        syncRemote: stringField(overview.syncRemote) ?? "origin",
     };
     const parsedSenses = senses.map((entry) => {
         if (!entry || typeof entry !== "object" || Array.isArray(entry))
@@ -141,6 +143,44 @@ function parseStatusPayload(data) {
         workers: parsedWorkers,
     };
 }
+// ── ANSI color helpers (private) ──
+const RESET = "\x1b[0m";
+const BOLD = "\x1b[1m";
+const DIM = "\x1b[2m";
+const TEAL = "\x1b[38;2;78;201;176m";
+const GREEN = "\x1b[38;2;46;204;64m";
+const RED = "\x1b[38;2;231;76;60m";
+const YELLOW = "\x1b[38;2;230;190;50m";
+/* v8 ignore start -- cosmetic ANSI wrappers @preserve */
+function teal(text) { return `${TEAL}${text}${RESET}`; }
+function green(text) { return `${GREEN}${text}${RESET}`; }
+function red(text) { return `${RED}${text}${RESET}`; }
+function yellow(text) { return `${YELLOW}${text}${RESET}`; }
+function bold(text) { return `${BOLD}${text}${RESET}`; }
+function dim(text) { return `${DIM}${text}${RESET}`; }
+/* v8 ignore stop */
+/* v8 ignore start -- cosmetic display: status dot color mapping tested visually @preserve */
+function statusDot(status) {
+    switch (status) {
+        case "running":
+        case "ok":
+        case "interactive":
+        case "enabled":
+            return green("●");
+        case "crashed":
+        case "warn":
+        case "error":
+            return red("●");
+        case "needs_config":
+            return yellow("●");
+        case "disabled":
+        case "stopped":
+            return dim("○");
+        default:
+            return dim("●");
+    }
+}
+/* v8 ignore stop */
 // ── Formatters ──
 function humanizeSenseName(sense, label) {
     if (label)
@@ -153,6 +193,7 @@ function humanizeSenseName(sense, label) {
         return "Teams";
     return sense;
 }
+/* v8 ignore start -- utility formatter; retained for non-status table output @preserve */
 function formatTable(headers, rows) {
     const widths = headers.map((header, index) => Math.max(header.length, ...rows.map((row) => row[index].length)));
     const renderRow = (row) => `| ${row.map((cell, index) => (index === row.length - 1
@@ -165,56 +206,96 @@ function formatTable(headers, rows) {
         ...rows.map(renderRow),
     ].join("\n");
 }
+/* v8 ignore stop */
 function formatDaemonStatusOutput(response, fallback) {
     const payload = parseStatusPayload(response.data);
     if (!payload)
         return fallback;
-    const overviewRows = [
-        ["Daemon", payload.overview.daemon],
-        ["Socket", payload.overview.socketPath],
-        ["Version", payload.overview.version],
-        ["Last Updated", payload.overview.lastUpdated],
-        ["Outlook", payload.overview.outlookUrl],
-        ["Entry Path", payload.overview.entryPath],
-        ["Mode", payload.overview.mode],
-        ["Workers", String(payload.overview.workerCount)],
-        ["Senses", String(payload.overview.senseCount)],
-        ["Health", payload.overview.health],
-    ];
-    const senseRows = payload.senses.map((row) => [
-        row.agent,
-        humanizeSenseName(row.sense, row.label),
-        row.enabled ? "ON" : "OFF",
-        row.status,
-        row.detail,
-    ]);
-    const workerRows = payload.workers.map((row) => {
-        /* v8 ignore start — exit info branches tested via daemon-crash-context; v8 misreports conditional chains @preserve */
-        let exitInfo = "n/a";
-        if (row.lastExitCode !== null)
-            exitInfo = `code=${row.lastExitCode}`;
-        if (row.lastSignal !== null)
-            exitInfo = row.lastExitCode !== null ? `code=${row.lastExitCode} sig=${row.lastSignal}` : `sig=${row.lastSignal}`;
-        /* v8 ignore stop */
-        return [
-            row.agent,
-            row.worker,
-            row.status,
-            row.pid === null ? "n/a" : String(row.pid),
-            String(row.restartCount),
-            exitInfo,
-        ];
-    });
-    return [
-        "Overview",
-        formatTable(["Item", "Value"], overviewRows),
-        "",
-        "Senses",
-        formatTable(["Agent", "Sense", "Enabled", "State", "Detail"], senseRows),
-        "",
-        "Workers",
-        formatTable(["Agent", "Worker", "State", "PID", "Restarts", "Last Exit"], workerRows),
-    ].join("\n");
+    const ov = payload.overview;
+    const lines = [];
+    // ── Header banner ──
+    const modeTag = ov.mode === "dev" ? "dev" : "";
+    const daemonStatus = ov.daemon === "running" ? green("●") + "  " + bold("running") : red("●") + "  " + bold(ov.daemon);
+    const modeStr = modeTag ? `  ${dim(`(${modeTag})`)}` : "";
+    const bannerContent = `  ${bold(ov.version)}  ${daemonStatus}${modeStr}  `;
+    // Measure raw content width (strip ANSI for width calc)
+    const rawBanner = bannerContent.replace(/\x1b\[[0-9;]*m/g, "");
+    const bannerWidth = Math.max(rawBanner.length, 42);
+    const titleLabel = " ouroboros daemon ";
+    const topRightPad = Math.max(0, bannerWidth - titleLabel.length - 2);
+    lines.push(`  ${teal("╭─")}${teal(titleLabel)}${teal("─".repeat(topRightPad))}${teal("╮")}`);
+    lines.push(`  ${teal("│")}${bannerContent}${" ".repeat(Math.max(0, bannerWidth - rawBanner.length))}${teal("│")}`);
+    lines.push(`  ${teal("╰")}${teal("─".repeat(bannerWidth))}${teal("╯")}`);
+    lines.push("");
+    // ── Key-value overview ──
+    const kvLine = (label, value) => `  ${teal(label.padEnd(11))} ${value}`;
+    lines.push(kvLine("Socket", ov.socketPath));
+    lines.push(kvLine("Outlook", ov.outlookUrl));
+    lines.push(kvLine("Health", `${statusDot(ov.health)} ${ov.health}`));
+    /* v8 ignore next -- cosmetic: sync-enabled branch requires agent with sync configured @preserve */
+    const syncLabel = ov.syncEnabled ? `${green("●")} enabled (remote: ${ov.syncRemote})` : `${dim("○")} disabled`;
+    lines.push(kvLine("Git Sync", syncLabel));
+    lines.push(kvLine("Updated", ov.lastUpdated));
+    lines.push("");
+    // ── Senses ──
+    if (payload.senses.length > 0) {
+        lines.push(`  ${teal("──")} ${bold("Senses")} ${teal("─".repeat(37))}`);
+        // Group senses by agent
+        const sensesByAgent = new Map();
+        for (const row of payload.senses) {
+            const list = sensesByAgent.get(row.agent) ?? [];
+            list.push(row);
+            sensesByAgent.set(row.agent, list);
+        }
+        // Calculate column widths for alignment
+        const allSenseNames = payload.senses.map((r) => humanizeSenseName(r.sense, r.label));
+        const nameWidth = Math.max(12, ...allSenseNames.map((n) => n.length));
+        const allStatuses = payload.senses.map((r) => r.status);
+        const statusWidth = Math.max(10, ...allStatuses.map((s) => s.length));
+        for (const [agent, rows] of sensesByAgent) {
+            lines.push(`  ${bold(agent)}`);
+            for (const row of rows) {
+                const name = humanizeSenseName(row.sense, row.label).padEnd(nameWidth);
+                const dot = row.enabled ? statusDot(row.status) : dim("○");
+                const statusText = (row.enabled ? row.status : "disabled").padEnd(statusWidth);
+                lines.push(`    ${name} ${dot} ${statusText}  ${dim(row.detail)}`);
+            }
+        }
+        lines.push("");
+    }
+    // ── Workers ──
+    if (payload.workers.length > 0) {
+        lines.push(`  ${teal("──")} ${bold("Workers")} ${teal("─".repeat(36))}`);
+        // Group workers by agent
+        const workersByAgent = new Map();
+        for (const row of payload.workers) {
+            const list = workersByAgent.get(row.agent) ?? [];
+            list.push(row);
+            workersByAgent.set(row.agent, list);
+        }
+        const allWorkerNames = payload.workers.map((r) => r.worker);
+        const workerNameWidth = Math.max(12, ...allWorkerNames.map((n) => n.length));
+        for (const [agent, rows] of workersByAgent) {
+            lines.push(`  ${bold(agent)}`);
+            for (const row of rows) {
+                const name = row.worker.padEnd(workerNameWidth);
+                const dot = statusDot(row.status);
+                const pidStr = row.pid !== null ? `pid ${row.pid}` : "";
+                const restartStr = `restarts: ${row.restartCount}`;
+                /* v8 ignore start — exit info branches tested via daemon-crash-context; v8 misreports conditional chains @preserve */
+                let exitStr = "";
+                if (row.lastExitCode !== null)
+                    exitStr = `exit=${row.lastExitCode}`;
+                if (row.lastSignal !== null)
+                    exitStr = row.lastExitCode !== null ? `exit=${row.lastExitCode} sig=${row.lastSignal}` : `sig=${row.lastSignal}`;
+                /* v8 ignore stop */
+                const details = [pidStr, restartStr, exitStr].filter(Boolean).join("  ");
+                lines.push(`    ${name} ${dot} ${row.status.padEnd(10)}  ${dim(details)}`);
+            }
+        }
+        lines.push("");
+    }
+    return lines.join("\n");
 }
 function formatVersionOutput() {
     const version = (0, runtime_metadata_1.getRuntimeMetadata)().version;
@@ -240,6 +321,8 @@ function buildStoppedStatusPayload(socketPath) {
             senseCount: 0,
             entryPath: path.join(repoRoot, "dist", "heart", "daemon", "daemon-entry.js"),
             mode: (0, runtime_mode_1.detectRuntimeMode)(repoRoot),
+            syncEnabled: false,
+            syncRemote: "origin",
         },
         senses: [],
         workers: [],

package/dist/heart/daemon/daemon.js

@@ -42,6 +42,7 @@ const net = __importStar(require("net"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const identity_1 = require("../identity");
+const config_1 = require("../config");
 const runtime_1 = require("../../nerves/runtime");
 const runtime_metadata_1 = require("./runtime-metadata");
 const runtime_mode_1 = require("./runtime-mode");
@@ -233,6 +234,7 @@ class OuroDaemon {
         const workers = buildWorkerRows(snapshots);
         const senses = this.senseManager?.listSenseRows() ?? [];
         const repoRoot = (0, identity_1.getRepoRoot)();
+        const syncConfig = (0, config_1.getSyncConfig)();
         return {
             overview: {
                 daemon: "running",
@@ -244,6 +246,8 @@ class OuroDaemon {
                 senseCount: senses.length,
                 entryPath: path.join(repoRoot, "dist", "heart", "daemon", "daemon-entry.js"),
                 mode: (0, runtime_mode_1.detectRuntimeMode)(repoRoot),
+                syncEnabled: syncConfig.enabled,
+                syncRemote: syncConfig.remote,
             },
             workers,
             senses,

package/dist/heart/daemon/socket-client.js

@@ -53,6 +53,7 @@ function sendDaemonCommand(socketPath, command) {
         let raw = "";
         client.on("connect", () => {
             client.write(JSON.stringify(command) + "\n");
+            client.end();
         });
         client.on("data", (chunk) => {
             raw += chunk.toString("utf-8");

package/dist/nerves/coverage/file-completeness.js

@@ -67,6 +67,8 @@ const DISPATCH_EXEMPT_PATTERNS = [
     "repertoire/api-client",
     "repertoire/github-client",
     "mind/embedding-provider",
+    // Commerce utility module: error classes and pure helpers (no independent side effects).
+    "repertoire/commerce-errors",
 ];
 function isDispatchExempt(filePath) {
     return DISPATCH_EXEMPT_PATTERNS.some((pattern) => filePath.includes(pattern));

package/dist/repertoire/ado-semantic.js

@@ -318,7 +318,6 @@ exports.adoSemanticToolDefinitions = [
             return result;
         },
         integration: "ado",
-        confirmationRequired: true,
         summaryKeys: ["organization", "project", "title"],
     },
     // -- ado_create_issue --
@@ -360,7 +359,6 @@ exports.adoSemanticToolDefinitions = [
             return result;
         },
         integration: "ado",
-        confirmationRequired: true,
         summaryKeys: ["organization", "project", "title"],
     },
     // -- ado_move_items --
@@ -415,7 +413,6 @@ exports.adoSemanticToolDefinitions = [
             return JSON.stringify({ moved, errors, organization: adoCtx.organization, project: adoCtx.project });
         },
         integration: "ado",
-        confirmationRequired: true,
         summaryKeys: ["organization", "project", "workItemIds"],
     },
     // -- ado_restructure_backlog --
@@ -474,7 +471,6 @@ exports.adoSemanticToolDefinitions = [
             return JSON.stringify({ results, organization: adoCtx.organization, project: adoCtx.project });
         },
         integration: "ado",
-        confirmationRequired: true,
         summaryKeys: ["organization", "project"],
     },
     // -- ado_validate_structure --
@@ -676,7 +672,6 @@ exports.adoSemanticToolDefinitions = [
             return JSON.stringify({ results, organization: adoCtx.organization, project: adoCtx.project });
         },
         integration: "ado",
-        confirmationRequired: true,
         summaryKeys: ["organization", "project"],
     },
     // -- ado_detect_orphans --

package/dist/repertoire/commerce-errors.js

@@ -0,0 +1,109 @@
+"use strict";
+/**
+ * Commerce-specific error types and helpers.
+ *
+ * These errors carry structured `code` and `meta` fields for nerves event
+ * compatibility and provide patterns for common commerce failure modes:
+ * retry, price change detection, and partial failure reporting.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProfileError = exports.BookingError = exports.PaymentError = exports.CommerceError = void 0;
+exports.retryOnce = retryOnce;
+exports.priceChangeGuard = priceChangeGuard;
+exports.partialFailureReport = partialFailureReport;
+// ---------------------------------------------------------------------------
+// Error types
+// ---------------------------------------------------------------------------
+class CommerceError extends Error {
+    code;
+    meta;
+    constructor(message, code, meta = {}) {
+        super(message);
+        this.name = "CommerceError";
+        this.code = code;
+        this.meta = meta;
+    }
+}
+exports.CommerceError = CommerceError;
+class PaymentError extends CommerceError {
+    constructor(message, code, meta = {}) {
+        super(message, code, meta);
+        this.name = "PaymentError";
+    }
+}
+exports.PaymentError = PaymentError;
+class BookingError extends CommerceError {
+    constructor(message, code, meta = {}) {
+        super(message, code, meta);
+        this.name = "BookingError";
+    }
+}
+exports.BookingError = BookingError;
+class ProfileError extends CommerceError {
+    constructor(message, code, meta = {}) {
+        super(message, code, meta);
+        this.name = "ProfileError";
+    }
+}
+exports.ProfileError = ProfileError;
+// ---------------------------------------------------------------------------
+// Transient error detection
+// ---------------------------------------------------------------------------
+const TRANSIENT_CODES = new Set(["COMMERCE_TRANSIENT", "COMMERCE_TIMEOUT", "COMMERCE_NETWORK"]);
+function isTransient(err) {
+    return err instanceof CommerceError && TRANSIENT_CODES.has(err.code);
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Retry a function once on transient failure, then throw.
+ * Non-transient errors are thrown immediately without retry.
+ */
+async function retryOnce(fn) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        if (!isTransient(err))
+            throw err;
+        // One retry
+        return fn();
+    }
+}
+/**
+ * Throw PaymentError if the actual price differs from the approved price
+ * by more than 5%. Used to protect against price changes between search
+ * and booking.
+ */
+function priceChangeGuard(approved, actual) {
+    if (approved === 0 && actual === 0)
+        return;
+    if (approved === 0) {
+        throw new PaymentError(`price changed from $0 to $${actual} — cannot verify percentage change`, "PAYMENT_PRICE_CHANGED", { approved, actual });
+    }
+    const delta = Math.abs(actual - approved) / approved;
+    if (delta > 0.05) {
+        throw new PaymentError(`price changed by ${(delta * 100).toFixed(1)}% (approved: $${approved}, actual: $${actual})`, "PAYMENT_PRICE_CHANGED", { approved, actual, deltaPercent: delta * 100 });
+    }
+}
+/**
+ * Format a human-readable status report for multi-service booking attempts.
+ * Each entry has a service name, status, and optional error message.
+ */
+function partialFailureReport(results) {
+    if (results.length === 0) {
+        return "no services attempted.";
+    }
+    const lines = results.map((r) => {
+        const status = r.status === "success" ? "success" : "failed";
+        const detail = r.error ? ` — ${r.error}` : "";
+        return `  ${r.service}: ${status}${detail}`;
+    });
+    const succeeded = results.filter((r) => r.status === "success").length;
+    const failed = results.length - succeeded;
+    return [
+        `booking status: ${succeeded} succeeded, ${failed} failed`,
+        ...lines,
+    ].join("\n");
+}