@ouro.bot/cli 0.1.0-alpha.236 → 0.1.0-alpha.238

package/dist/repertoire/tools-config.js

@@ -118,7 +118,7 @@ exports.configToolDefinitions = [
             type: "function",
             function: {
                 name: "update_config",
-                description: "Update a Tier 1 (self-service) agent configuration value immediately. For Tier 2 keys that require operator approval, use propose_config instead. Tier 3 (operator-only) keys are refused.",
+                description: "Update an agent configuration value. Managed keys (version, enabled) cannot be modified.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -152,15 +152,10 @@ exports.configToolDefinitions = [
                     return `Error: validation failed for "${a.path}": ${validationError}`;
                 }
             }
-            // Tier 3: refuse
-            if (entry.tier === 3) {
-                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.update_config_refused", message: `refused T3 change to ${a.path}`, meta: { path: a.path, tier: 3 } });
-                return `Refused: "${a.path}" is an operator-only (Tier 3) key. ${entry.description} Only the operator can change this value directly in agent.json.`;
-            }
-            // Tier 2: refuse — must use propose_config
-            if (entry.tier === 2) {
-                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.update_config_refused", message: `refused T2 change to ${a.path} — use propose_config`, meta: { path: a.path, tier: 2 } });
-                return `Refused: "${a.path}" is a Tier 2 (proposal) key that requires operator approval. Use propose_config instead of update_config to propose this change.`;
+            // Managed: refuse
+            if (entry.tier === "managed") {
+                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.update_config_refused", message: `refused managed change to ${a.path}`, meta: { path: a.path, tier: "managed" } });
+                return `This key is managed by the harness and cannot be modified directly.`;
             }
             const agentRoot = (0, identity_1.getAgentRoot)();
             const configPath = path.join(agentRoot, "agent.json");
@@ -172,7 +167,7 @@ exports.configToolDefinitions = [
                 /* v8 ignore next -- defensive: agent.json read failure in update_config @preserve */
                 return `Error: failed to read agent.json at ${configPath}`;
             }
-            // Apply T1 change immediately
+            // Apply change immediately
             const parts = entry.path.split(".");
             let target = rawConfig;
             for (let i = 0; i < parts.length - 1; i++) {
@@ -187,80 +182,4 @@ exports.configToolDefinitions = [
             return `Success: "${a.path}" updated to ${JSON.stringify(parsedValue)}. Change applied immediately.`;
         },
     },
-    {
-        tool: {
-            type: "function",
-            function: {
-                name: "propose_config",
-                description: "Propose a change to a Tier 2 (proposal) agent configuration value. Requires operator approval before the change is applied. For Tier 1 self-service keys, use update_config instead.",
-                parameters: {
-                    type: "object",
-                    properties: {
-                        path: { type: "string", description: "Config key in dot-notation (e.g., 'context.maxTokens', 'humanFacing.model')" },
-                        value: { type: "string", description: "New value as JSON (e.g., '120000', '\"azure\"', '{\"enabled\": true}')" },
-                    },
-                    required: ["path", "value"],
-                },
-            },
-        },
-        confirmationRequired: true,
-        confirmationAlwaysRequired: true,
-        handler: (a) => {
-            const entry = (0, config_registry_1.getRegistryEntry)(a.path);
-            if (!entry) {
-                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.propose_config_error", message: `unknown config path: ${a.path}`, meta: { path: a.path } });
-                return `Error: unknown config path "${a.path}". Use read_config to see available paths.`;
-            }
-            let parsedValue;
-            try {
-                parsedValue = JSON.parse(a.value);
-            }
-            catch {
-                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.propose_config_error", message: `invalid JSON value for ${a.path}`, meta: { path: a.path, value: a.value } });
-                return `Error: invalid JSON value. Provide value as valid JSON (e.g., 120000, "azure", {"enabled": true}).`;
-            }
-            // Validate value against registry entry's validator
-            /* v8 ignore next -- all current entries have validators; guard kept for future entries without one @preserve */
-            if (entry.validate) {
-                const validationError = entry.validate(parsedValue);
-                if (validationError) {
-                    (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.propose_config_error", message: `validation failed for ${a.path}: ${validationError}`, meta: { path: a.path, value: a.value, validationError } });
-                    return `Error: validation failed for "${a.path}": ${validationError}`;
-                }
-            }
-            // Tier 3: refuse
-            if (entry.tier === 3) {
-                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.propose_config_refused", message: `refused T3 change to ${a.path}`, meta: { path: a.path, tier: 3 } });
-                return `Refused: "${a.path}" is an operator-only (Tier 3) key. ${entry.description} Only the operator can change this value directly in agent.json.`;
-            }
-            // Tier 1: refuse — use update_config for self-service keys
-            if (entry.tier === 1) {
-                (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.propose_config_refused", message: `refused T1 change to ${a.path} — use update_config`, meta: { path: a.path, tier: 1 } });
-                return `Refused: "${a.path}" is a Tier 1 (self-service) key. Use update_config instead — no operator approval needed.`;
-            }
-            const agentRoot = (0, identity_1.getAgentRoot)();
-            const configPath = path.join(agentRoot, "agent.json");
-            let rawConfig;
-            try {
-                rawConfig = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-            }
-            catch {
-                /* v8 ignore next -- defensive: agent.json read failure in propose_config @preserve */
-                return `Error: failed to read agent.json at ${configPath}`;
-            }
-            // Apply T2 change (operator confirmation already obtained via confirmationAlwaysRequired)
-            const parts = entry.path.split(".");
-            let target = rawConfig;
-            for (let i = 0; i < parts.length - 1; i++) {
-                if (!(parts[i] in target) || typeof target[parts[i]] !== "object" || target[parts[i]] === null) {
-                    target[parts[i]] = {};
-                }
-                target = target[parts[i]];
-            }
-            target[parts[parts.length - 1]] = parsedValue;
-            fs.writeFileSync(configPath, JSON.stringify(rawConfig, null, 2) + "\n", "utf-8");
-            (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.propose_config_applied", message: `applied approved config change to ${a.path}`, meta: { path: a.path, tier: entry.tier, value: parsedValue } });
-            return `Success: "${a.path}" updated to ${JSON.stringify(parsedValue)}. Change approved and applied.`;
-        },
-    },
 ];

package/dist/repertoire/tools-flight.js

@@ -0,0 +1,224 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.flightToolDefinitions = void 0;
+exports.resetDuffelClient = resetDuffelClient;
+const duffel_client_1 = require("./duffel-client");
+const user_profile_1 = require("./user-profile");
+const credential_access_1 = require("./credential-access");
+const runtime_1 = require("../nerves/runtime");
+// Lazy-initialized Duffel client singleton
+let _duffelClient = null;
+async function getDuffelClient() {
+    if (!_duffelClient) {
+        _duffelClient = await (0, duffel_client_1.createDuffelClient)();
+    }
+    return _duffelClient;
+}
+function requireFamilyContext(ctx) {
+    if (!ctx?.context?.friend?.id) {
+        return "no friend context — cannot access flight tools.";
+    }
+    if (ctx.context.friend.trustLevel !== "family") {
+        return "booking and cancellation require family trust level.";
+    }
+    return { friendId: ctx.context.friend.id };
+}
+function requireFriendContext(ctx) {
+    if (!ctx?.context?.friend?.id) {
+        return "no friend context — cannot search flights.";
+    }
+    return { friendId: ctx.context.friend.id };
+}
+exports.flightToolDefinitions = [
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "flight_search",
+                description: "Search for flights between two airports. Returns available offers with prices.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        origin: { type: "string", description: "Origin airport IATA code (e.g. 'SFO')" },
+                        destination: { type: "string", description: "Destination airport IATA code (e.g. 'JFK')" },
+                        departure_date: { type: "string", description: "Departure date (YYYY-MM-DD)" },
+                        return_date: { type: "string", description: "Return date for round trips (optional)" },
+                        passengers: { type: "string", description: "Number of adult passengers (default '1')" },
+                        cabin_class: { type: "string", description: "Cabin class: economy, premium_economy, business, first" },
+                    },
+                    required: ["origin", "destination", "departure_date"],
+                },
+            },
+        },
+        handler: async (args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_flight_search",
+                message: "flight_search invoked",
+                meta: { tool: "flight_search", origin: args.origin, destination: args.destination },
+            });
+            const guard = requireFriendContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            try {
+                const client = await getDuffelClient();
+                const passengerCount = parseInt(args.passengers || "1", 10);
+                const passengers = Array.from({ length: passengerCount }, () => ({ type: "adult" }));
+                const offers = await client.searchFlights({
+                    origin: args.origin,
+                    destination: args.destination,
+                    departureDate: args.departure_date,
+                    returnDate: args.return_date,
+                    passengers,
+                    cabinClass: args.cabin_class,
+                });
+                if (offers.length === 0) {
+                    return "no flights found for those criteria.";
+                }
+                return JSON.stringify(offers, null, 2);
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive @preserve */
+                return `flight search error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["origin", "destination", "departure_date"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "flight_hold",
+                description: "Hold a flight offer for a short period before committing to book. Not all airlines support holds.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        offer_id: { type: "string", description: "The Duffel offer ID to hold" },
+                    },
+                    required: ["offer_id"],
+                },
+            },
+        },
+        handler: async (args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_flight_hold",
+                message: "flight_hold invoked",
+                meta: { tool: "flight_hold", offerId: args.offer_id },
+            });
+            const guard = requireFamilyContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            // Hold functionality would call Duffel's offer hold API.
+            // For pre-build, we return a structured acknowledgment.
+            return JSON.stringify({
+                status: "hold_requested",
+                offerId: args.offer_id,
+                message: "Hold requested. Confirm or cancel before the hold expires.",
+            });
+        },
+        summaryKeys: ["offer_id"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "flight_book",
+                description: "Book a flight. Pulls passenger name/DOB/passport from the user's profile. Creates a virtual card, books the flight, then deactivates the card. Requires family trust level.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        offer_id: { type: "string", description: "The Duffel offer ID to book" },
+                        amount: { type: "string", description: "Expected total amount in dollars" },
+                        currency: { type: "string", description: "Currency code (e.g. 'usd')" },
+                    },
+                    required: ["offer_id", "amount", "currency"],
+                },
+            },
+        },
+        handler: async (args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_flight_book",
+                message: "flight_book invoked",
+                meta: { tool: "flight_book", offerId: args.offer_id },
+            });
+            const guard = requireFamilyContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            try {
+                const store = (0, credential_access_1.getCredentialStore)();
+                // Get passenger data from profile
+                const legalName = await (0, user_profile_1.getUserProfileField)(guard.friendId, "legalName", store);
+                if (!legalName) {
+                    return "passenger profile not found — please store your profile first using user_profile_store.";
+                }
+                const dateOfBirth = await (0, user_profile_1.getUserProfileField)(guard.friendId, "dateOfBirth", store);
+                const passport = await (0, user_profile_1.getUserProfileField)(guard.friendId, "passport", store);
+                const client = await getDuffelClient();
+                const result = await client.createOrder({
+                    offerId: args.offer_id,
+                    passengers: [{
+                            type: "adult",
+                            givenName: legalName.first,
+                            familyName: legalName.last,
+                            /* v8 ignore next -- reason @preserve */
+                            dateOfBirth: dateOfBirth ?? "1990-01-01",
+                            passportNumber: passport?.number,
+                            passportCountry: passport?.country,
+                            passportExpiry: passport?.expiry,
+                        }],
+                    amount: parseFloat(args.amount),
+                    currency: args.currency,
+                });
+                return JSON.stringify(result, null, 2);
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive @preserve */
+                return `booking error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["offer_id", "amount"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "flight_cancel",
+                description: "Cancel a flight booking. Not all bookings are cancellable. Requires family trust level.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        order_id: { type: "string", description: "The Duffel order ID to cancel" },
+                    },
+                    required: ["order_id"],
+                },
+            },
+        },
+        handler: async (args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_flight_cancel",
+                message: "flight_cancel invoked",
+                meta: { tool: "flight_cancel", orderId: args.order_id },
+            });
+            const guard = requireFamilyContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            try {
+                const client = await getDuffelClient();
+                const result = await client.cancelOrder(args.order_id);
+                return JSON.stringify(result, null, 2);
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive @preserve */
+                return `cancellation error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["order_id"],
+    },
+];
+/** Reset the Duffel client singleton (for testing). */
+function resetDuffelClient() {
+    _duffelClient = null;
+}

package/dist/repertoire/tools-github.js

@@ -42,7 +42,6 @@ exports.githubToolDefinitions = [
             return (0, github_client_1.githubRequest)(ctx.githubToken, "POST", `/repos/${owner}/${repo}/issues`, JSON.stringify(payload));
         },
         integration: "github",
-        confirmationRequired: true,
         summaryKeys: ["title"],
     },
 ];

package/dist/repertoire/tools-stripe.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripeToolDefinitions = void 0;
+exports.resetStripeClient = resetStripeClient;
+const stripe_client_1 = require("./stripe-client");
+const runtime_1 = require("../nerves/runtime");
+// Lazy-initialized Stripe client singleton
+let _stripeClient = null;
+async function getStripeClient() {
+    if (!_stripeClient) {
+        _stripeClient = await (0, stripe_client_1.createStripeClient)();
+    }
+    return _stripeClient;
+}
+function requireFamilyContext(ctx) {
+    if (!ctx?.context?.friend?.id) {
+        return "no friend context — cannot access payment tools.";
+    }
+    if (ctx.context.friend.trustLevel !== "family") {
+        return "payment tools require family trust level.";
+    }
+    return { friendId: ctx.context.friend.id };
+}
+exports.stripeToolDefinitions = [
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "stripe_create_card",
+                description: "Create a virtual card for a transaction. Returns card ID and last 4 digits (never the full card number). Requires family trust level.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        type: {
+                            type: "string",
+                            enum: ["single_use", "persistent"],
+                            description: "Card type: single_use (one transaction) or persistent (recurring)",
+                        },
+                        spend_limit: {
+                            type: "string",
+                            description: "Maximum spend limit in dollars (e.g. '500')",
+                        },
+                        currency: {
+                            type: "string",
+                            description: "Currency code (e.g. 'usd')",
+                        },
+                        merchant_categories: {
+                            type: "string",
+                            description: "Comma-separated allowed merchant categories (optional)",
+                        },
+                    },
+                    required: ["type", "spend_limit", "currency"],
+                },
+            },
+        },
+        handler: async (args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_stripe_create_card",
+                message: "stripe_create_card invoked",
+                meta: { tool: "stripe_create_card" },
+            });
+            const guard = requireFamilyContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            try {
+                const client = await getStripeClient();
+                const categories = args.merchant_categories
+                    ? args.merchant_categories.split(",").map((c) => c.trim())
+                    : undefined;
+                const card = await client.createVirtualCard({
+                    type: args.type,
+                    spendLimit: parseFloat(args.spend_limit),
+                    currency: args.currency,
+                    merchantCategories: categories,
+                });
+                return JSON.stringify({
+                    cardId: card.cardId,
+                    last4: card.last4,
+                    status: card.status,
+                    spendLimit: args.spend_limit,
+                });
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: Stripe errors are always Error instances @preserve */
+                return `card creation error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["type", "spend_limit", "currency"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "stripe_deactivate_card",
+                description: "Deactivate (cancel) a virtual card. Use after a transaction is complete or to revoke access. Requires family trust level.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        card_id: {
+                            type: "string",
+                            description: "The Stripe card ID to deactivate (e.g. 'ic_...')",
+                        },
+                    },
+                    required: ["card_id"],
+                },
+            },
+        },
+        handler: async (args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_stripe_deactivate_card",
+                message: "stripe_deactivate_card invoked",
+                meta: { tool: "stripe_deactivate_card", cardId: args.card_id },
+            });
+            const guard = requireFamilyContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            try {
+                const client = await getStripeClient();
+                const card = await client.deactivateCard(args.card_id);
+                return JSON.stringify({
+                    cardId: card.cardId,
+                    last4: card.last4,
+                    status: card.status,
+                });
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: Stripe errors are always Error instances @preserve */
+                return `card deactivation error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["card_id"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "stripe_list_cards",
+                description: "List all active virtual cards. Shows card IDs and last 4 digits only. Requires family trust level.",
+                parameters: {
+                    type: "object",
+                    properties: {},
+                },
+            },
+        },
+        handler: async (_args, ctx) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.tool_stripe_list_cards",
+                message: "stripe_list_cards invoked",
+                meta: { tool: "stripe_list_cards" },
+            });
+            const guard = requireFamilyContext(ctx);
+            if (typeof guard === "string")
+                return guard;
+            try {
+                const client = await getStripeClient();
+                const cards = await client.listCards();
+                if (cards.length === 0) {
+                    return "no active cards.";
+                }
+                return JSON.stringify(cards.map((c) => ({
+                    cardId: c.cardId,
+                    last4: c.last4,
+                    status: c.status,
+                })));
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: Stripe errors are always Error instances @preserve */
+                return `card listing error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: [],
+    },
+];
+/** Reset the Stripe client singleton (for testing). */
+function resetStripeClient() {
+    _stripeClient = null;
+}

package/dist/repertoire/tools-teams.js

@@ -64,7 +64,6 @@ exports.teamsToolDefinitions = [
             return (0, graph_client_1.graphRequest)(ctx.graphToken, args.method, args.path, args.body);
         },
         integration: "graph",
-        confirmationRequired: true,
         summaryKeys: ["method", "path"],
     },
     // -- Generic ADO tools --
@@ -126,7 +125,6 @@ exports.teamsToolDefinitions = [
             return (0, ado_client_1.adoRequest)(ctx.adoToken, args.method, args.organization, args.path, args.body, args.host);
         },
         integration: "ado",
-        confirmationRequired: true,
         summaryKeys: ["method", "organization", "path"],
     },
     // -- Convenience aliases (backward compat) --
@@ -237,7 +235,6 @@ exports.teamsToolDefinitions = [
             }
         },
         /* v8 ignore stop */
-        confirmationRequired: true,
         summaryKeys: ["user_name", "user_id"],
     },
     // -- Documentation tools --