@ouro.bot/cli 0.1.0-alpha.34 → 0.1.0-alpha.340

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (314) hide show
  1. package/README.md +188 -187
  2. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/agent.json +3 -2
  3. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/SOUL.md +1 -1
  4. package/changelog.json +2031 -0
  5. package/dist/arc/attention-types.js +8 -0
  6. package/dist/arc/cares.js +140 -0
  7. package/dist/arc/episodes.js +117 -0
  8. package/dist/arc/intentions.js +133 -0
  9. package/dist/arc/json-store.js +117 -0
  10. package/dist/arc/obligations.js +237 -0
  11. package/dist/arc/packets.js +193 -0
  12. package/dist/arc/presence.js +185 -0
  13. package/dist/arc/task-lifecycle.js +65 -0
  14. package/dist/heart/active-work.js +832 -0
  15. package/dist/heart/agent-entry.js +37 -2
  16. package/dist/heart/attachments/image-normalize.js +194 -0
  17. package/dist/heart/attachments/materialize.js +97 -0
  18. package/dist/heart/attachments/originals.js +88 -0
  19. package/dist/heart/attachments/render.js +29 -0
  20. package/dist/heart/attachments/sources/adapter.js +2 -0
  21. package/dist/heart/attachments/sources/bluebubbles.js +156 -0
  22. package/dist/heart/attachments/sources/cli-local-file.js +78 -0
  23. package/dist/heart/attachments/sources/index.js +16 -0
  24. package/dist/heart/attachments/store.js +103 -0
  25. package/dist/heart/attachments/types.js +93 -0
  26. package/dist/heart/auth/auth-flow.js +463 -0
  27. package/dist/heart/bridges/manager.js +358 -0
  28. package/dist/heart/bridges/state-machine.js +135 -0
  29. package/dist/heart/bridges/store.js +123 -0
  30. package/dist/heart/bundle-state.js +168 -0
  31. package/dist/heart/commitments.js +111 -0
  32. package/dist/heart/config-registry.js +304 -0
  33. package/dist/heart/config.js +53 -21
  34. package/dist/heart/core.js +695 -195
  35. package/dist/heart/cross-chat-delivery.js +131 -0
  36. package/dist/heart/daemon/agent-config-check.js +292 -0
  37. package/dist/heart/daemon/agent-discovery.js +79 -3
  38. package/dist/heart/daemon/agent-service.js +360 -0
  39. package/dist/heart/daemon/agentic-repair.js +170 -0
  40. package/dist/heart/daemon/bluebubbles-health-diagnostics.js +122 -0
  41. package/dist/heart/daemon/cadence.js +70 -0
  42. package/dist/heart/daemon/cli-defaults.js +591 -0
  43. package/dist/heart/daemon/cli-exec.js +2297 -0
  44. package/dist/heart/daemon/cli-help.js +306 -0
  45. package/dist/heart/daemon/cli-parse.js +824 -0
  46. package/dist/heart/daemon/cli-render-doctor.js +57 -0
  47. package/dist/heart/daemon/cli-render.js +512 -0
  48. package/dist/heart/daemon/cli-types.js +8 -0
  49. package/dist/heart/daemon/daemon-cli.js +30 -1171
  50. package/dist/heart/daemon/daemon-entry.js +358 -3
  51. package/dist/heart/daemon/daemon-health.js +141 -0
  52. package/dist/heart/daemon/daemon-runtime-sync.js +157 -12
  53. package/dist/heart/daemon/daemon-tombstone.js +236 -0
  54. package/dist/heart/daemon/daemon.js +751 -58
  55. package/dist/heart/daemon/doctor-types.js +8 -0
  56. package/dist/heart/daemon/doctor.js +401 -0
  57. package/dist/heart/daemon/health-monitor.js +79 -1
  58. package/dist/heart/daemon/hooks/agent-config-v2.js +33 -0
  59. package/dist/heart/daemon/hooks/bundle-meta.js +115 -1
  60. package/dist/heart/daemon/http-health-probe.js +80 -0
  61. package/dist/heart/daemon/inner-status.js +89 -0
  62. package/dist/heart/daemon/interactive-repair.js +91 -0
  63. package/dist/heart/daemon/launchd.js +46 -9
  64. package/dist/heart/daemon/log-tailer.js +82 -12
  65. package/dist/heart/daemon/logs-prune.js +105 -0
  66. package/dist/heart/daemon/message-router.js +17 -8
  67. package/dist/heart/daemon/os-cron-deps.js +134 -0
  68. package/dist/heart/daemon/ouro-bot-entry.js +1 -1
  69. package/dist/heart/daemon/process-manager.js +201 -0
  70. package/dist/heart/daemon/provider-discovery.js +105 -0
  71. package/dist/heart/daemon/pulse.js +463 -0
  72. package/dist/heart/daemon/run-hooks.js +2 -0
  73. package/dist/heart/daemon/runtime-logging.js +67 -16
  74. package/dist/heart/daemon/runtime-metadata.js +101 -0
  75. package/dist/heart/daemon/runtime-mode.js +67 -0
  76. package/dist/heart/daemon/safe-mode.js +161 -0
  77. package/dist/heart/daemon/sense-manager.js +72 -3
  78. package/dist/heart/daemon/session-id-resolver.js +131 -0
  79. package/dist/heart/daemon/skill-management-installer.js +94 -0
  80. package/dist/heart/daemon/socket-client.js +307 -0
  81. package/dist/heart/daemon/stale-bundle-prune.js +96 -0
  82. package/dist/heart/daemon/startup-tui.js +237 -0
  83. package/dist/heart/daemon/task-scheduler.js +3 -25
  84. package/dist/heart/daemon/thoughts.js +510 -0
  85. package/dist/heart/daemon/up-progress.js +135 -0
  86. package/dist/heart/delegation.js +62 -0
  87. package/dist/heart/habits/habit-migration.js +181 -0
  88. package/dist/heart/habits/habit-parser.js +140 -0
  89. package/dist/heart/habits/habit-scheduler.js +371 -0
  90. package/dist/heart/{daemon → hatch}/hatch-flow.js +32 -120
  91. package/dist/heart/{daemon → hatch}/hatch-specialist.js +3 -3
  92. package/dist/heart/{daemon → hatch}/specialist-prompt.js +10 -7
  93. package/dist/heart/{daemon → hatch}/specialist-tools.js +49 -3
  94. package/dist/heart/identity.js +154 -59
  95. package/dist/heart/kicks.js +2 -20
  96. package/dist/heart/mcp/mcp-server.js +653 -0
  97. package/dist/heart/migrate-config.js +127 -0
  98. package/dist/heart/model-capabilities.js +59 -0
  99. package/dist/heart/outlook/outlook-http-hooks.js +64 -0
  100. package/dist/heart/outlook/outlook-http-response.js +7 -0
  101. package/dist/heart/outlook/outlook-http-routes.js +232 -0
  102. package/dist/heart/outlook/outlook-http-static.js +99 -0
  103. package/dist/heart/outlook/outlook-http-transport.js +116 -0
  104. package/dist/heart/outlook/outlook-http.js +99 -0
  105. package/dist/heart/outlook/outlook-read.js +28 -0
  106. package/dist/heart/outlook/outlook-types.js +27 -0
  107. package/dist/heart/outlook/outlook-view.js +194 -0
  108. package/dist/heart/outlook/readers/agent-machine.js +355 -0
  109. package/dist/heart/outlook/readers/continuity-readers.js +332 -0
  110. package/dist/heart/outlook/readers/runtime-readers.js +660 -0
  111. package/dist/heart/outlook/readers/sessions.js +231 -0
  112. package/dist/heart/outlook/readers/shared.js +111 -0
  113. package/dist/heart/progress-story.js +42 -0
  114. package/dist/heart/provider-failover.js +135 -0
  115. package/dist/heart/provider-models.js +81 -0
  116. package/dist/heart/provider-ping.js +234 -0
  117. package/dist/heart/providers/anthropic-token.js +163 -0
  118. package/dist/heart/providers/anthropic.js +171 -50
  119. package/dist/heart/providers/azure.js +97 -11
  120. package/dist/heart/providers/error-classification.js +63 -0
  121. package/dist/heart/providers/github-copilot.js +135 -0
  122. package/dist/heart/providers/minimax-vlm.js +189 -0
  123. package/dist/heart/providers/minimax.js +23 -6
  124. package/dist/heart/providers/openai-codex.js +33 -23
  125. package/dist/heart/session-activity.js +190 -0
  126. package/dist/heart/session-events.js +726 -0
  127. package/dist/heart/session-recall.js +162 -0
  128. package/dist/heart/start-of-turn-packet.js +341 -0
  129. package/dist/heart/streaming.js +36 -27
  130. package/dist/heart/sync.js +332 -0
  131. package/dist/heart/target-resolution.js +127 -0
  132. package/dist/heart/tempo.js +93 -0
  133. package/dist/heart/temporal-view.js +41 -0
  134. package/dist/heart/tool-activity-callbacks.js +36 -0
  135. package/dist/heart/tool-description.js +135 -0
  136. package/dist/heart/tool-friction.js +55 -0
  137. package/dist/heart/tool-loop.js +200 -0
  138. package/dist/heart/turn-context.js +358 -0
  139. package/dist/heart/turn-coordinator.js +28 -0
  140. package/dist/heart/{daemon → versioning}/ouro-bot-global-installer.js +1 -1
  141. package/dist/heart/{daemon → versioning}/ouro-bot-wrapper.js +1 -1
  142. package/dist/heart/{daemon → versioning}/ouro-path-installer.js +78 -35
  143. package/dist/heart/versioning/ouro-version-manager.js +295 -0
  144. package/dist/heart/{daemon → versioning}/staged-restart.js +40 -8
  145. package/dist/heart/{daemon → versioning}/update-checker.js +12 -2
  146. package/dist/heart/{daemon → versioning}/update-hooks.js +63 -59
  147. package/dist/mind/associative-recall.js +137 -66
  148. package/dist/mind/bundle-manifest.js +7 -1
  149. package/dist/mind/context.js +89 -93
  150. package/dist/mind/diary-integrity.js +60 -0
  151. package/dist/mind/{memory.js → diary.js} +84 -96
  152. package/dist/mind/embedding-provider.js +60 -0
  153. package/dist/mind/file-state.js +179 -0
  154. package/dist/mind/first-impressions.js +14 -1
  155. package/dist/mind/friends/channel.js +56 -0
  156. package/dist/mind/friends/group-context.js +144 -0
  157. package/dist/mind/friends/resolver.js +37 -0
  158. package/dist/mind/friends/store-file.js +58 -3
  159. package/dist/mind/friends/trust-explanation.js +74 -0
  160. package/dist/mind/friends/types.js +8 -0
  161. package/dist/mind/journal-index.js +161 -0
  162. package/dist/mind/obligation-steering.js +221 -0
  163. package/dist/mind/pending.js +74 -7
  164. package/dist/mind/prompt.js +999 -111
  165. package/dist/mind/provenance-trust.js +26 -0
  166. package/dist/mind/scrutiny.js +173 -0
  167. package/dist/mind/token-estimate.js +8 -12
  168. package/dist/nerves/cli-logging.js +7 -1
  169. package/dist/nerves/coverage/audit.js +1 -1
  170. package/dist/nerves/coverage/file-completeness.js +83 -5
  171. package/dist/nerves/coverage/run-artifacts.js +1 -1
  172. package/dist/nerves/event-buffer.js +111 -0
  173. package/dist/nerves/index.js +224 -4
  174. package/dist/nerves/observation.js +20 -0
  175. package/dist/nerves/redact.js +79 -0
  176. package/dist/nerves/runtime.js +5 -1
  177. package/dist/outlook-ui/assets/index-DC7sZefn.js +61 -0
  178. package/dist/outlook-ui/assets/index-LwChZTgL.css +1 -0
  179. package/dist/outlook-ui/index.html +15 -0
  180. package/dist/repertoire/ado-client.js +15 -56
  181. package/dist/repertoire/ado-semantic.js +11 -10
  182. package/dist/repertoire/api-client.js +97 -0
  183. package/dist/repertoire/bitwarden-store.js +319 -0
  184. package/dist/repertoire/bundle-templates.js +72 -0
  185. package/dist/repertoire/bw-installer.js +79 -0
  186. package/dist/repertoire/coding/codex-jsonl.js +64 -0
  187. package/dist/repertoire/coding/context-pack.js +330 -0
  188. package/dist/repertoire/coding/feedback.js +197 -30
  189. package/dist/repertoire/coding/manager.js +158 -9
  190. package/dist/repertoire/coding/spawner.js +55 -9
  191. package/dist/repertoire/coding/tools.js +170 -7
  192. package/dist/repertoire/commerce-errors.js +109 -0
  193. package/dist/repertoire/commerce-self-test.js +156 -0
  194. package/dist/repertoire/credential-access.js +527 -0
  195. package/dist/repertoire/duffel-client.js +185 -0
  196. package/dist/repertoire/github-client.js +14 -55
  197. package/dist/repertoire/graph-client.js +11 -52
  198. package/dist/repertoire/guardrails.js +375 -0
  199. package/dist/repertoire/mcp-client.js +255 -0
  200. package/dist/repertoire/mcp-manager.js +305 -0
  201. package/dist/repertoire/mcp-tools.js +63 -0
  202. package/dist/repertoire/shell-sessions.js +133 -0
  203. package/dist/repertoire/skills.js +14 -23
  204. package/dist/repertoire/stripe-client.js +131 -0
  205. package/dist/repertoire/tasks/board.js +43 -5
  206. package/dist/repertoire/tasks/fix.js +182 -0
  207. package/dist/repertoire/tasks/index.js +28 -10
  208. package/dist/repertoire/tasks/lifecycle.js +2 -2
  209. package/dist/repertoire/tasks/parser.js +3 -2
  210. package/dist/repertoire/tasks/scanner.js +194 -37
  211. package/dist/repertoire/tasks/transitions.js +16 -79
  212. package/dist/repertoire/tool-results.js +29 -0
  213. package/dist/repertoire/tools-attachments.js +316 -0
  214. package/dist/repertoire/tools-base.js +45 -771
  215. package/dist/repertoire/tools-bluebubbles.js +1 -0
  216. package/dist/repertoire/tools-bridge.js +141 -0
  217. package/dist/repertoire/tools-bundle.js +984 -0
  218. package/dist/repertoire/tools-config.js +185 -0
  219. package/dist/repertoire/tools-continuity.js +248 -0
  220. package/dist/repertoire/tools-credential.js +182 -0
  221. package/dist/repertoire/tools-files.js +342 -0
  222. package/dist/repertoire/tools-flight.js +224 -0
  223. package/dist/repertoire/tools-flow.js +105 -0
  224. package/dist/repertoire/tools-github.js +1 -7
  225. package/dist/repertoire/tools-memory.js +376 -0
  226. package/dist/repertoire/tools-session.js +739 -0
  227. package/dist/repertoire/tools-shell.js +120 -0
  228. package/dist/repertoire/tools-stripe.js +180 -0
  229. package/dist/repertoire/tools-surface.js +243 -0
  230. package/dist/repertoire/tools-teams.js +12 -62
  231. package/dist/repertoire/tools-travel.js +125 -0
  232. package/dist/repertoire/tools-user-profile.js +144 -0
  233. package/dist/repertoire/tools-vault.js +110 -0
  234. package/dist/repertoire/tools.js +144 -138
  235. package/dist/repertoire/travel-api-client.js +360 -0
  236. package/dist/repertoire/user-profile.js +118 -0
  237. package/dist/repertoire/vault-setup.js +241 -0
  238. package/dist/scripts/claude-code-hook.js +41 -0
  239. package/dist/scripts/claude-code-stop-hook.js +47 -0
  240. package/dist/senses/attention-queue.js +116 -0
  241. package/dist/senses/bluebubbles/attachment-cache.js +53 -0
  242. package/dist/senses/bluebubbles/attachment-download.js +137 -0
  243. package/dist/senses/{bluebubbles-client.js → bluebubbles/client.js} +225 -9
  244. package/dist/senses/bluebubbles/entry.js +13 -0
  245. package/dist/senses/bluebubbles/inbound-log.js +113 -0
  246. package/dist/senses/bluebubbles/index.js +1590 -0
  247. package/dist/senses/{bluebubbles-media.js → bluebubbles/media.js} +121 -70
  248. package/dist/senses/{bluebubbles-model.js → bluebubbles/model.js} +43 -12
  249. package/dist/senses/{bluebubbles-mutation-log.js → bluebubbles/mutation-log.js} +46 -6
  250. package/dist/senses/bluebubbles/replay.js +129 -0
  251. package/dist/senses/bluebubbles/runtime-state.js +109 -0
  252. package/dist/senses/{bluebubbles-session-cleanup.js → bluebubbles/session-cleanup.js} +1 -1
  253. package/dist/senses/cli/bracketed-paste.js +82 -0
  254. package/dist/senses/cli/image-paste.js +287 -0
  255. package/dist/senses/cli/image-ref-navigation.js +75 -0
  256. package/dist/senses/cli/ink-app.js +156 -0
  257. package/dist/senses/cli/inline-diff.js +64 -0
  258. package/dist/senses/cli/input-keys.js +174 -0
  259. package/dist/senses/cli/kill-ring.js +86 -0
  260. package/dist/senses/cli/message-list.js +51 -0
  261. package/dist/senses/cli/ouro-tui.js +605 -0
  262. package/dist/senses/cli/spinner-imperative.js +135 -0
  263. package/dist/senses/cli/spinner.js +101 -0
  264. package/dist/senses/cli/status-line.js +60 -0
  265. package/dist/senses/cli/streaming-markdown.js +526 -0
  266. package/dist/senses/cli/tool-display.js +83 -0
  267. package/dist/senses/cli/tool-render.js +85 -0
  268. package/dist/senses/cli/tui-store.js +240 -0
  269. package/dist/senses/cli/virtual-list.js +35 -0
  270. package/dist/senses/cli-entry.js +1 -1
  271. package/dist/senses/cli-layout.js +187 -0
  272. package/dist/senses/cli.js +595 -246
  273. package/dist/senses/commands.js +65 -1
  274. package/dist/senses/continuity.js +94 -0
  275. package/dist/senses/habit-turn-message.js +108 -0
  276. package/dist/senses/inner-dialog-worker.js +112 -19
  277. package/dist/senses/inner-dialog.js +633 -86
  278. package/dist/senses/pipeline.js +567 -0
  279. package/dist/senses/shared-turn.js +199 -0
  280. package/dist/senses/surface-tool.js +68 -0
  281. package/dist/senses/teams.js +665 -160
  282. package/dist/senses/trust-gate.js +112 -2
  283. package/package.json +29 -7
  284. package/skills/agent-commerce.md +106 -0
  285. package/skills/browser-navigation.md +110 -0
  286. package/skills/commerce-setup-guide.md +116 -0
  287. package/skills/commerce-setup.md +84 -0
  288. package/skills/configure-dev-tools.md +81 -0
  289. package/skills/travel-planning.md +138 -0
  290. package/dist/heart/daemon/subagent-installer.js +0 -134
  291. package/dist/senses/bluebubbles-entry.js +0 -11
  292. package/dist/senses/bluebubbles.js +0 -547
  293. package/dist/senses/debug-activity.js +0 -124
  294. package/subagents/README.md +0 -73
  295. package/subagents/work-doer.md +0 -235
  296. package/subagents/work-merger.md +0 -618
  297. package/subagents/work-planner.md +0 -382
  298. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/basilisk.md +0 -0
  299. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jafar.md +0 -0
  300. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jormungandr.md +0 -0
  301. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/kaa.md +0 -0
  302. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/medusa.md +0 -0
  303. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/monty.md +0 -0
  304. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/nagini.md +0 -0
  305. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/ouroboros.md +0 -0
  306. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/python.md +0 -0
  307. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/quetzalcoatl.md +0 -0
  308. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/sir-hiss.md +0 -0
  309. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-serpent.md +0 -0
  310. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-snake.md +0 -0
  311. /package/dist/heart/{daemon → hatch}/hatch-animation.js +0 -0
  312. /package/dist/heart/{daemon → hatch}/specialist-orchestrator.js +0 -0
  313. /package/dist/heart/{daemon → versioning}/ouro-uti.js +0 -0
  314. /package/dist/heart/{daemon → versioning}/wrapper-publish-guard.js +0 -0
@@ -0,0 +1,234 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.sanitizeErrorMessage = sanitizeErrorMessage;
4
+ exports.pingGithubCopilotModel = pingGithubCopilotModel;
5
+ exports.pingProvider = pingProvider;
6
+ exports.runHealthInventory = runHealthInventory;
7
+ const identity_1 = require("./identity");
8
+ const anthropic_1 = require("./providers/anthropic");
9
+ const azure_1 = require("./providers/azure");
10
+ const minimax_1 = require("./providers/minimax");
11
+ const openai_codex_1 = require("./providers/openai-codex");
12
+ const github_copilot_1 = require("./providers/github-copilot");
13
+ const auth_flow_1 = require("./auth/auth-flow");
14
+ const provider_models_1 = require("./provider-models");
15
+ const runtime_1 = require("../nerves/runtime");
16
+ const PING_TIMEOUT_MS = 10_000;
17
+ const PING_PROMPT = "ping";
18
+ const CHAT_PING_MAX_TOKENS = 1;
19
+ const RESPONSE_PING_MAX_OUTPUT_TOKENS = 16;
20
+ const ANTHROPIC_SETUP_PING_MODEL = "claude-haiku-4-5-20251001";
21
+ const DEFAULT_AZURE_API_VERSION = "2025-04-01-preview";
22
+ const PING_CALLBACKS = {
23
+ onModelStart() { },
24
+ onModelStreamStart() { },
25
+ onTextChunk() { },
26
+ onReasoningChunk() { },
27
+ onToolStart() { },
28
+ onToolEnd() { },
29
+ onError() { },
30
+ };
31
+ function createPingMessages() {
32
+ return [{ role: "user", content: PING_PROMPT }];
33
+ }
34
+ function createChatPingRequest(model) {
35
+ return { model, max_tokens: CHAT_PING_MAX_TOKENS, messages: createPingMessages() };
36
+ }
37
+ function createResponsePingRequest(model) {
38
+ return { model, input: PING_PROMPT, max_output_tokens: RESPONSE_PING_MAX_OUTPUT_TOKENS };
39
+ }
40
+ /**
41
+ * Strip raw JSON/HTML API response bodies from error messages.
42
+ * SDK errors often include the full response: "400 {"type":"error",...}" or "403 <html>...".
43
+ * Extract just the HTTP status and a short human-readable summary.
44
+ */
45
+ function sanitizeErrorMessage(message) {
46
+ const statusMatch = message.match(/^(\d{3})\s/);
47
+ if (!statusMatch)
48
+ return message;
49
+ const status = statusMatch[1];
50
+ const body = message.slice(status.length).trim();
51
+ // HTML response (Cloudflare challenge, error pages, etc.)
52
+ if (body.startsWith("<") || body.includes("<!DOCTYPE") || body.includes("<html")) {
53
+ return `HTTP ${status}`;
54
+ }
55
+ // JSON response
56
+ if (body.startsWith("{")) {
57
+ try {
58
+ const json = JSON.parse(body);
59
+ const inner = json?.error?.message;
60
+ if (typeof inner === "string" && inner && inner !== "Error") {
61
+ return `${status} ${inner}`;
62
+ }
63
+ }
64
+ catch { /* not valid JSON */ }
65
+ return `HTTP ${status}`;
66
+ }
67
+ // Already clean (e.g., "401 Provided authentication token is expired.")
68
+ return message;
69
+ }
70
+ async function pingGithubCopilotModel(baseUrl, token, model, fetchImpl = fetch) {
71
+ const base = baseUrl.replace(/\/+$/, "");
72
+ const isClaude = model.startsWith("claude");
73
+ const url = isClaude ? `${base}/chat/completions` : `${base}/responses`;
74
+ const body = isClaude
75
+ ? JSON.stringify(createChatPingRequest(model))
76
+ : JSON.stringify(createResponsePingRequest(model));
77
+ try {
78
+ const response = await fetchImpl(url, {
79
+ method: "POST",
80
+ headers: {
81
+ Authorization: `Bearer ${token}`,
82
+ "Content-Type": "application/json",
83
+ },
84
+ body,
85
+ });
86
+ if (response.ok)
87
+ return { ok: true };
88
+ let detail = `HTTP ${response.status}`;
89
+ try {
90
+ const json = await response.json();
91
+ /* v8 ignore start -- error format parsing: all branches tested via config-models.test.ts @preserve */
92
+ if (typeof json.error === "string")
93
+ detail = json.error;
94
+ else if (typeof json.error === "object" && json.error !== null) {
95
+ const errObj = json.error;
96
+ if (typeof errObj.message === "string")
97
+ detail = errObj.message;
98
+ }
99
+ else if (typeof json.message === "string")
100
+ detail = json.message;
101
+ /* v8 ignore stop */
102
+ }
103
+ catch {
104
+ // response body not JSON — keep HTTP status
105
+ }
106
+ return { ok: false, error: detail };
107
+ }
108
+ catch (err) {
109
+ /* v8 ignore next -- defensive: fetch errors are always Error instances @preserve */
110
+ return { ok: false, error: err instanceof Error ? err.message : String(err) };
111
+ }
112
+ }
113
+ function hasEmptyCredentials(provider, config) {
114
+ const record = config;
115
+ if (provider === "azure") {
116
+ const hasManagedIdentity = typeof record.endpoint === "string" && record.endpoint.length > 0 &&
117
+ typeof record.deployment === "string" && record.deployment.length > 0 &&
118
+ typeof record.managedIdentityClientId === "string" && record.managedIdentityClientId.length > 0;
119
+ if (hasManagedIdentity)
120
+ return false;
121
+ }
122
+ return identity_1.PROVIDER_CREDENTIALS[provider].required.some((key) => !record[key]);
123
+ }
124
+ function createRuntimeForPing(provider, config) {
125
+ // Use the same provider defaults as auth switch and hatch so verification
126
+ // cannot drift to stale provider/model pairings, and pass the checked
127
+ // credentials directly so daemon-side pings do not depend on --agent globals.
128
+ const model = (0, provider_models_1.getDefaultModelForProvider)(provider);
129
+ switch (provider) {
130
+ case "anthropic":
131
+ return (0, anthropic_1.createAnthropicProviderRuntime)(model, config);
132
+ case "azure":
133
+ return (0, azure_1.createAzureProviderRuntime)(model, {
134
+ ...config,
135
+ apiVersion: config.apiVersion ?? DEFAULT_AZURE_API_VERSION,
136
+ });
137
+ case "minimax":
138
+ return (0, minimax_1.createMinimaxProviderRuntime)(model, config);
139
+ case "openai-codex":
140
+ return (0, openai_codex_1.createOpenAICodexProviderRuntime)(model, config);
141
+ case "github-copilot":
142
+ return (0, github_copilot_1.createGithubCopilotProviderRuntime)(model, config);
143
+ /* v8 ignore next 2 -- exhaustive: all providers handled above @preserve */
144
+ default:
145
+ throw new Error(`unsupported provider for ping: ${provider}`);
146
+ }
147
+ }
148
+ async function pingProvider(provider, config) {
149
+ if (hasEmptyCredentials(provider, config)) {
150
+ return { ok: false, classification: "auth-failure", message: "no credentials configured" };
151
+ }
152
+ let runtime;
153
+ try {
154
+ runtime = createRuntimeForPing(provider, config);
155
+ /* v8 ignore start -- factory creation failure: tested via individual provider init tests @preserve */
156
+ }
157
+ catch (error) {
158
+ return {
159
+ ok: false,
160
+ classification: "auth-failure",
161
+ message: error instanceof Error ? error.message : String(error),
162
+ };
163
+ }
164
+ /* v8 ignore stop */
165
+ try {
166
+ const controller = new AbortController();
167
+ /* v8 ignore next -- timeout callback: only fires after 10s, tests resolve faster @preserve */
168
+ const timeout = setTimeout(() => controller.abort(), PING_TIMEOUT_MS);
169
+ try {
170
+ // Minimal API call — no thinking, no reasoning, no tools.
171
+ if (provider === "anthropic") {
172
+ // Use haiku for the ping — setup tokens may not have access to newer
173
+ // models, but if haiku works, the credentials are valid.
174
+ // Override the beta header to exclude thinking (which requires a
175
+ // thinking param in the request body).
176
+ const client = runtime.client;
177
+ await client.messages.create(createChatPingRequest(ANTHROPIC_SETUP_PING_MODEL), { signal: controller.signal, headers: { "anthropic-beta": "claude-code-20250219,oauth-2025-04-20" } });
178
+ }
179
+ else if (provider === "openai-codex") {
180
+ await runtime.streamTurn({
181
+ messages: createPingMessages(),
182
+ activeTools: [],
183
+ callbacks: PING_CALLBACKS,
184
+ signal: controller.signal,
185
+ toolChoiceRequired: false,
186
+ });
187
+ }
188
+ else {
189
+ // OpenAI-compatible providers (azure, minimax, github-copilot)
190
+ const client = runtime.client;
191
+ await client.chat.completions.create(createChatPingRequest(runtime.model), { signal: controller.signal });
192
+ }
193
+ return { ok: true };
194
+ }
195
+ finally {
196
+ clearTimeout(timeout);
197
+ }
198
+ }
199
+ catch (error) {
200
+ const err = error instanceof Error ? error : /* v8 ignore next -- defensive @preserve */ new Error(String(error));
201
+ let classification;
202
+ try {
203
+ classification = runtime.classifyError(err);
204
+ }
205
+ catch {
206
+ /* v8 ignore next -- defensive: classifyError should not throw @preserve */
207
+ classification = "unknown";
208
+ }
209
+ (0, runtime_1.emitNervesEvent)({
210
+ component: "engine",
211
+ event: "engine.provider_ping_fail",
212
+ message: `provider ping failed: ${provider}`,
213
+ meta: { provider, classification, error: err.message },
214
+ });
215
+ return { ok: false, classification, message: sanitizeErrorMessage(err.message) };
216
+ }
217
+ }
218
+ const PINGABLE_PROVIDERS = ["anthropic", "openai-codex", "azure", "minimax", "github-copilot"];
219
+ async function runHealthInventory(agentName, currentProvider, deps = {}) {
220
+ /* v8 ignore next -- default: tests inject ping dep @preserve */
221
+ const ping = deps.ping ?? pingProvider;
222
+ const { secrets } = (0, auth_flow_1.loadAgentSecrets)(agentName);
223
+ const providers = PINGABLE_PROVIDERS.filter((p) => p !== currentProvider);
224
+ const results = await Promise.all(providers.map(async (provider) => {
225
+ const config = secrets.providers[provider];
226
+ const result = await ping(provider, config);
227
+ return [provider, result];
228
+ }));
229
+ const inventory = {};
230
+ for (const [provider, result] of results) {
231
+ inventory[provider] = result;
232
+ }
233
+ return inventory;
234
+ }
@@ -0,0 +1,163 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ exports.needsRefresh = needsRefresh;
37
+ exports.refreshAnthropicToken = refreshAnthropicToken;
38
+ exports.persistTokenState = persistTokenState;
39
+ exports.ensureFreshToken = ensureFreshToken;
40
+ /* v8 ignore start -- OAuth token lifecycle: requires live API calls, tested via integration @preserve */
41
+ const fs = __importStar(require("fs"));
42
+ const runtime_1 = require("../../nerves/runtime");
43
+ const identity_1 = require("../identity");
44
+ const OAUTH_TOKEN_ENDPOINT = "https://console.anthropic.com/v1/oauth/token";
45
+ const OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
46
+ const REFRESH_MARGIN_MS = 5 * 60 * 1000; // refresh 5 minutes before expiry
47
+ /**
48
+ * Check if the Anthropic OAuth token needs refreshing.
49
+ * Returns true if no expiresAt is set (legacy token) or if within 5 min of expiry.
50
+ */
51
+ function needsRefresh(expiresAt) {
52
+ if (!expiresAt)
53
+ return true; // legacy token with no expiry — always try refresh
54
+ return Date.now() > expiresAt - REFRESH_MARGIN_MS;
55
+ }
56
+ /**
57
+ * Refresh an Anthropic OAuth access token using the refresh token.
58
+ * Returns the new token state or null if refresh fails.
59
+ */
60
+ async function refreshAnthropicToken(refreshToken, fetchImpl = fetch) {
61
+ try {
62
+ const response = await fetchImpl(OAUTH_TOKEN_ENDPOINT, {
63
+ method: "POST",
64
+ headers: { "Content-Type": "application/json" },
65
+ body: JSON.stringify({
66
+ grant_type: "refresh_token",
67
+ refresh_token: refreshToken,
68
+ client_id: OAUTH_CLIENT_ID,
69
+ }),
70
+ });
71
+ if (!response.ok) {
72
+ (0, runtime_1.emitNervesEvent)({
73
+ level: "warn",
74
+ component: "engine",
75
+ event: "engine.anthropic_token_refresh_failed",
76
+ message: `token refresh failed: ${response.status}`,
77
+ meta: { status: response.status },
78
+ });
79
+ return null;
80
+ }
81
+ const json = await response.json();
82
+ if (!json.access_token) {
83
+ (0, runtime_1.emitNervesEvent)({
84
+ level: "warn",
85
+ component: "engine",
86
+ event: "engine.anthropic_token_refresh_failed",
87
+ message: "token refresh returned no access_token",
88
+ meta: {},
89
+ });
90
+ return null;
91
+ }
92
+ const state = {
93
+ accessToken: json.access_token,
94
+ refreshToken: json.refresh_token ?? refreshToken, // keep old if not returned
95
+ expiresAt: Date.now() + (json.expires_in ?? 28800) * 1000, // default 8h
96
+ };
97
+ (0, runtime_1.emitNervesEvent)({
98
+ component: "engine",
99
+ event: "engine.anthropic_token_refreshed",
100
+ message: "anthropic OAuth token refreshed",
101
+ meta: { expiresAt: new Date(state.expiresAt).toISOString() },
102
+ });
103
+ return state;
104
+ }
105
+ catch (error) {
106
+ (0, runtime_1.emitNervesEvent)({
107
+ level: "warn",
108
+ component: "engine",
109
+ event: "engine.anthropic_token_refresh_error",
110
+ message: "token refresh threw",
111
+ meta: { error: error instanceof Error ? error.message : String(error) },
112
+ });
113
+ return null;
114
+ }
115
+ }
116
+ /**
117
+ * Persist refreshed token state back to secrets.json.
118
+ */
119
+ function persistTokenState(agentName, state) {
120
+ try {
121
+ const secretsPath = (0, identity_1.getAgentSecretsPath)(agentName);
122
+ const raw = fs.readFileSync(secretsPath, "utf-8");
123
+ const secrets = JSON.parse(raw);
124
+ secrets.providers = secrets.providers ?? {};
125
+ secrets.providers.anthropic = secrets.providers.anthropic ?? {};
126
+ secrets.providers.anthropic.setupToken = state.accessToken;
127
+ secrets.providers.anthropic.refreshToken = state.refreshToken;
128
+ secrets.providers.anthropic.expiresAt = state.expiresAt;
129
+ fs.writeFileSync(secretsPath, JSON.stringify(secrets, null, 2) + "\n", "utf-8");
130
+ /* v8 ignore start -- defensive: persistence failure must not crash the provider @preserve */
131
+ }
132
+ catch (error) {
133
+ (0, runtime_1.emitNervesEvent)({
134
+ level: "warn",
135
+ component: "engine",
136
+ event: "engine.anthropic_token_persist_error",
137
+ message: "failed to persist refreshed token",
138
+ meta: { error: error instanceof Error ? error.message : String(error) },
139
+ });
140
+ }
141
+ /* v8 ignore stop */
142
+ }
143
+ /**
144
+ * Ensure the Anthropic token is fresh. If expired, refresh and persist.
145
+ * Returns the current valid access token, or null if refresh failed and
146
+ * the existing token is expired.
147
+ */
148
+ async function ensureFreshToken(currentToken, refreshToken, expiresAt, agentName, fetchImpl) {
149
+ if (!needsRefresh(expiresAt)) {
150
+ return currentToken; // still fresh
151
+ }
152
+ if (!refreshToken) {
153
+ // No refresh token — use the current token as-is (may be expired)
154
+ return currentToken;
155
+ }
156
+ const newState = await refreshAnthropicToken(refreshToken, fetchImpl);
157
+ if (!newState) {
158
+ return currentToken; // refresh failed — try the old token
159
+ }
160
+ persistTokenState(agentName, newState);
161
+ return newState.accessToken;
162
+ }
163
+ /* v8 ignore stop */