@ouro.bot/cli 0.1.0-alpha.37 → 0.1.0-alpha.370

package/skills/configure-dev-tools.md

@@ -0,0 +1,101 @@
+# Configure Dev Tools for MCP Agent Bridge
+
+Set up your development tools (Claude Code, Codex) to communicate with Ouroboros agents via MCP. One command does everything — including cross-platform WSL2 bridging on Windows.
+
+## Setup
+
+### Claude Code
+
+```bash
+ouro setup --tool claude-code --agent <agent-name>
+```
+
+This command:
+1. Registers the MCP server with Claude Code via `claude mcp add`
+2. Configures lifecycle hooks (SessionStart, Stop, PostToolUse) for passive awareness
+3. Detects dev vs installed mode automatically and uses the correct command path
+
+**On WSL2 (Windows):** The command automatically detects the WSL environment and:
+- Calls `claude.exe` (the Windows binary) instead of `claude`
+- Prefixes MCP serve and hook commands with `wsl` so Windows-side Claude Code spawns them through WSL
+- Resolves the Windows-side home directory and writes config to the Windows-side `~/.claude/`
+- After setup, open Claude Code in PowerShell — the agent is there
+
+**On native Windows (no WSL):** Not yet supported. The command prints a message directing you to install WSL2.
+
+For the full cross-machine setup flow (including cloning an agent to a new machine), see `docs/cross-machine-setup.md` in the harness repo.
+
+### Codex
+
+```bash
+ouro setup --tool codex --agent <agent-name>
+```
+
+This command:
+1. Registers the MCP server with Codex via `codex mcp add`
+2. Detects dev vs installed mode automatically
+
+## Verification
+
+After setup, verify the connection:
+
+1. **Check daemon is running**: `ouro up` (installed) or `ouro dev --repo-path <path>` (dev mode).
+2. **Test from Claude Code**: Start a new session and use the `status` tool.
+3. **Test from Codex**: Run `codex exec "Use the <agent-name> status tool"`.
+4. **Check registration**: `claude mcp list` or `codex mcp list`.
+
+## Available MCP Tools
+
+Once connected, these tools are available:
+
+### Conversation tools (new)
+- **send_message** -- Send a message and get a synchronous agent response (full turn with tools)
+- **check_response** -- Check for pending messages from the agent (after ponder or proactive surface)
+
+### Read-only tools
+- **ask** -- Ask the agent a question (uses diary, journal, and context)
+- **status** -- Get agent's current status and activity
+- **catchup** -- Get recent activity summary
+- **get_context** -- Get agent's current working context
+- **search_notes** -- Search the agent's diary for specific topics
+- **get_task** -- Get details of the agent's current task
+- **check_scope** -- Verify if something is in scope for current work
+- **check_guidance** -- Get guidance on how to approach something
+
+### Write tools
+- **delegate** -- Request the agent to handle a task (runs full conversation turn)
+- **request_decision** -- Ask agent to make a decision about something
+- **report_progress** -- Report progress on delegated work
+- **report_blocker** -- Report a blocker on delegated work
+- **report_complete** -- Report completion of delegated work
+
+## Troubleshooting
+
+### "Daemon not running" error
+Most read-only tools work without the daemon (reads filesystem directly). For write operations and `send_message`, start the daemon with `ouro up` or `ouro dev`.
+
+### MCP server not appearing
+- Run `claude mcp list` or `codex mcp list` to verify registration
+- Re-run `ouro setup` to fix
+- Restart your dev tool (MCP loads at session start)
+
+### Connection timeouts
+- Ensure `dist/` is built: `npm run build`
+- Check that the entry point path is correct (setup auto-detects this)
+
+### WSL2-specific issues
+
+**`claude.exe` not found** — Windows executables must be accessible from WSL. This is the default, but enterprise environments may disable it via `/etc/wsl.conf` setting `appendWindowsPath = false`. Check with `which claude.exe`. If missing, add Claude Code's install directory to WSL's PATH manually or update `wsl.conf`.
+
+**`cmd.exe` or `wslpath` fails** — The setup command resolves the Windows home directory using `cmd.exe /C echo %USERPROFILE%` piped through `wslpath`. If either is unavailable, the setup will fail. `wslpath` ships with all standard WSL distributions. `cmd.exe` requires Windows executables to be on PATH (see above).
+
+**MCP server hangs or returns empty** — The MCP server runs inside WSL via `wsl ouro mcp-serve --agent <name>`. If stdio piping between Windows and WSL is broken, check that the WSL distribution is running (`wsl --status`) and that no other process has claimed stdin.
+
+**Hooks not firing** — Claude Code hooks use `wsl ouro hook <event> --agent <name>`. If hooks fail silently, check that `ouro` is on PATH inside WSL (run `wsl ouro --version` from PowerShell to verify).
+
+### Removing
+```bash
+claude mcp remove ouro-<agent-name>
+# or
+codex mcp remove ouro-<agent-name>
+```

package/skills/travel-planning.md

@@ -0,0 +1,138 @@
+# Travel Planning Skill
+
+Compose all travel infrastructure to plan and book trips effectively.
+
+## Research Phase
+
+### Destination Research
+1. Use `geocode_search` to find candidate destinations and get coordinates
+2. Use `weather_lookup` to check climate for travel dates
+3. Use `travel_advisory` to check US State Dept safety levels (1-4):
+   - Level 1: Exercise Normal Precautions
+   - Level 2: Exercise Increased Caution
+   - Level 3: Reconsider Travel
+   - Level 4: Do Not Travel
+4. Use browser tools (see `browser-navigation` skill) for destination reviews, travel blogs, local tips
+5. Compare multiple destinations on weather, safety, cost, and flight availability
+
+### Information Gathering Workflow
+```
+geocode_search -> get coordinates
+weather_lookup -> check weather at coordinates
+travel_advisory -> check safety level
+browser tools -> reviews, local info, pricing
+```
+
+## Flight Search
+
+### Using Duffel MCP (when available)
+- Search via `duffel_search_flights` tool (first-class MCP tool)
+- Provide: origin, destination, dates, passengers, cabin class
+- Compare options on price, duration, stops, airline
+
+### Using Browser (fallback)
+- Use browser-navigation skill patterns for Google Flights, airline sites
+- Add delays between searches to avoid detection
+
+### Comparison Criteria
+Present top 3-5 options comparing:
+- Total price (including bags, seat selection)
+- Duration and number of stops
+- Airline and aircraft
+- Departure/arrival times
+- Cancellation/change policy
+
+## Accommodation Search
+
+### Hotel Search
+- Use Expedia MCP when available (`expedia_search_hotels` tool)
+- Compare: price per night, total stay cost, location, rating, amenities
+- Check cancellation policies (crucial for travel planning)
+
+### Vacation Rentals (Browser-based)
+- Use browser-navigation skill for Airbnb/VRBO
+- Search by location, dates, guests, budget
+- Compare: price, location proximity, reviews, amenities, host rating
+- Screenshot listings for user review
+
+### Comparison Criteria
+- Price per night and total cost
+- Location (distance to key attractions/activities)
+- Reviews and ratings
+- Amenities (WiFi, kitchen, parking, pool)
+- Cancellation flexibility
+
+## Booking Workflow
+
+### Critical Safety Gates
+- **ALWAYS confirm with user before any booking action**
+- **ALWAYS confirm before entering payment information**
+- **ALWAYS confirm before agreeing to terms**
+- **Never proceed with a financial commitment without explicit approval**
+
+### Credential Handling
+
+Credentials are managed through the credential access layer, which stores
+agent-owned secrets encrypted in the bundle vault. Raw passwords never
+enter model context.
+
+- Use `credential_get` to check what credentials exist for a domain (metadata only, never passwords)
+- Use `credential_store` to save credentials the agent acquired (e.g., during sign-up for a service)
+- The credential gateway automatically injects secrets into API requests via `getRawSecret()`
+- Use browser-navigation skill form patterns for entering credentials during interactive sessions
+
+**How credentials work:**
+- Agent-owned credentials are AES-256-GCM encrypted in `~/AgentBundles/<agent>.ouro/vault/`
+- The master key lives at `~/.agentsecrets/<agent>/vault.key` (auto-generated on first use)
+- The agent can sign up for services and store its own credentials
+- Stored passwords are never returned to the model — only metadata (domain, username, notes)
+
+**Upgrade path:** Install `aac` (Bitwarden Agent Access CLI) for vault-backed credentials.
+When `aac` is available, the harness can read credentials from Bitwarden directly,
+enabling access to human-managed vault items without storing them locally.
+
+### Post-Booking
+- Save confirmation details (confirmation number, dates, hotel name, airline, booking reference)
+- Save to diary/journal for future reference
+- Set reminders for check-in windows
+- Note cancellation deadlines
+
+## Preference Management
+
+### Storing Preferences
+Track and reference these travel preferences:
+- Preferred airlines and alliance status
+- Preferred hotel chains and loyalty numbers
+- Seat preferences (window/aisle, extra legroom)
+- Dietary needs for in-flight meals
+- Budget ranges (per night for hotels, per flight)
+- Must-have amenities (WiFi, gym, pool)
+
+### Using Preferences
+- Reference stored preferences when searching
+- Apply airline preferences to flight comparisons
+- Apply hotel brand preferences to accommodation searches
+- Adjust budget ranges based on destination
+
+## Tool Reference
+
+### Native Tools (always available)
+- `weather_lookup` - Current weather and daily forecast by city or coordinates (Open-Meteo, zero config)
+- `travel_advisory` - US State Dept advisory by country code
+- `geocode_search` - Location/POI search with coordinates
+- `credential_get` - Check credential metadata for a domain (never returns passwords)
+- `credential_store` - Store credentials the agent acquired (family trust, confirmation required)
+- `credential_list` - List stored credential domains
+- `credential_delete` - Delete stored credentials (family trust, confirmation required)
+
+### MCP Tools (when configured)
+- Browser tools via `@playwright/mcp` - see `browser-navigation` skill
+- Duffel flight search (when MCP server available)
+- Expedia hotel search (when MCP server available)
+
+### Human Confirmation Required For
+- Any booking or payment
+- Entering personal information
+- Agreeing to terms of service
+- Creating financial obligations
+- Sharing credentials with third parties

package/dist/heart/daemon/ouro-path-installer.js

@@ -1,178 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.installOuroCommand = installOuroCommand;
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const runtime_1 = require("../../nerves/runtime");
-const CLI_PACKAGE_SPECIFIER = "@ouro.bot/cli@alpha";
-const WRAPPER_SCRIPT = `#!/bin/sh
-exec npx --yes ${CLI_PACKAGE_SPECIFIER} "$@"
-`;
-function detectShellProfile(homeDir, shell) {
-    if (!shell)
-        return null;
-    const base = path.basename(shell);
-    if (base === "zsh")
-        return path.join(homeDir, ".zshrc");
-    if (base === "bash") {
-        // macOS uses .bash_profile, Linux uses .bashrc
-        const profilePath = path.join(homeDir, ".bash_profile");
-        return profilePath;
-    }
-    if (base === "fish")
-        return path.join(homeDir, ".config", "fish", "config.fish");
-    return null;
-}
-function isBinDirInPath(binDir, envPath) {
-    return envPath.split(path.delimiter).some((p) => p === binDir);
-}
-function buildPathExportLine(binDir, shell) {
-    const base = shell ? path.basename(shell) : /* v8 ignore next -- unreachable: only called when detectShellProfile returns non-null, which requires shell @preserve */ "";
-    if (base === "fish") {
-        return `\n# Added by ouro\nset -gx PATH ${binDir} $PATH\n`;
-    }
-    return `\n# Added by ouro\nexport PATH="${binDir}:$PATH"\n`;
-}
-function installOuroCommand(deps = {}) {
-    /* v8 ignore start -- dep defaults: only used in real runtime, tests always inject @preserve */
-    const platform = deps.platform ?? process.platform;
-    const homeDir = deps.homeDir ?? os.homedir();
-    const existsSync = deps.existsSync ?? fs.existsSync;
-    const mkdirSync = deps.mkdirSync ?? fs.mkdirSync;
-    const writeFileSync = deps.writeFileSync ?? fs.writeFileSync;
-    const readFileSync = deps.readFileSync ?? ((p, enc) => fs.readFileSync(p, enc));
-    const appendFileSync = deps.appendFileSync ?? fs.appendFileSync;
-    const chmodSync = deps.chmodSync ?? fs.chmodSync;
-    const envPath = deps.envPath ?? process.env.PATH ?? "";
-    const shell = deps.shell ?? process.env.SHELL;
-    /* v8 ignore stop */
-    if (platform === "win32") {
-        (0, runtime_1.emitNervesEvent)({
-            component: "daemon",
-            event: "daemon.ouro_path_install_skip",
-            message: "skipped ouro PATH install on Windows",
-            meta: { platform },
-        });
-        return { installed: false, scriptPath: null, pathReady: false, shellProfileUpdated: null, skippedReason: "windows" };
-    }
-    const binDir = path.join(homeDir, ".local", "bin");
-    const scriptPath = path.join(binDir, "ouro");
-    (0, runtime_1.emitNervesEvent)({
-        component: "daemon",
-        event: "daemon.ouro_path_install_start",
-        message: "installing ouro command to PATH",
-        meta: { scriptPath, binDir },
-    });
-    // If ouro already exists, check content and repair if stale
-    if (existsSync(scriptPath)) {
-        let existingContent = "";
-        try {
-            existingContent = readFileSync(scriptPath, "utf-8");
-        }
-        catch {
-            // Can't read — treat as stale, will overwrite below
-        }
-        if (existingContent === WRAPPER_SCRIPT) {
-            (0, runtime_1.emitNervesEvent)({
-                component: "daemon",
-                event: "daemon.ouro_path_install_skip",
-                message: "ouro command already installed",
-                meta: { scriptPath },
-            });
-            return { installed: false, scriptPath, pathReady: isBinDirInPath(binDir, envPath), shellProfileUpdated: null, skippedReason: "already-installed" };
-        }
-        // Content is stale — repair by overwriting
-        (0, runtime_1.emitNervesEvent)({
-            component: "daemon",
-            event: "daemon.ouro_path_install_repair",
-            message: "repairing stale ouro wrapper script",
-            meta: { scriptPath },
-        });
-    }
-    try {
-        mkdirSync(binDir, { recursive: true });
-        writeFileSync(scriptPath, WRAPPER_SCRIPT, { mode: 0o755 });
-        chmodSync(scriptPath, 0o755);
-    }
-    catch (error) {
-        (0, runtime_1.emitNervesEvent)({
-            level: "warn",
-            component: "daemon",
-            event: "daemon.ouro_path_install_error",
-            message: "failed to install ouro command",
-            meta: { error: error instanceof Error ? error.message : /* v8 ignore next -- defensive: non-Error catch branch @preserve */ String(error) },
-        });
-        return { installed: false, scriptPath: null, pathReady: false, shellProfileUpdated: null, skippedReason: error instanceof Error ? error.message : /* v8 ignore next -- defensive @preserve */ String(error) };
-    }
-    // Check if ~/.local/bin is already in PATH
-    let shellProfileUpdated = null;
-    const pathReady = isBinDirInPath(binDir, envPath);
-    if (!pathReady) {
-        const profilePath = detectShellProfile(homeDir, shell);
-        if (profilePath) {
-            try {
-                let existing = "";
-                try {
-                    existing = readFileSync(profilePath, "utf-8");
-                }
-                catch {
-                    // Profile doesn't exist yet — that's fine, we'll create it
-                }
-                if (!existing.includes(binDir)) {
-                    appendFileSync(profilePath, buildPathExportLine(binDir, shell));
-                    shellProfileUpdated = profilePath;
-                }
-            }
-            catch (error) {
-                (0, runtime_1.emitNervesEvent)({
-                    level: "warn",
-                    component: "daemon",
-                    event: "daemon.ouro_path_profile_error",
-                    message: "failed to update shell profile for PATH",
-                    meta: { profilePath, error: error instanceof Error ? error.message : /* v8 ignore next -- defensive: non-Error catch branch @preserve */ String(error) },
-                });
-            }
-        }
-    }
-    (0, runtime_1.emitNervesEvent)({
-        component: "daemon",
-        event: "daemon.ouro_path_install_end",
-        message: "ouro command installed",
-        meta: { scriptPath, pathReady, shellProfileUpdated },
-    });
-    return { installed: true, scriptPath, pathReady, shellProfileUpdated };
-}

package/dist/heart/daemon/subagent-installer.js

@@ -1,134 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.installSubagentsForAvailableCli = installSubagentsForAvailableCli;
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const child_process_1 = require("child_process");
-const runtime_1 = require("../../nerves/runtime");
-function detectCliBinary(binary) {
-    const result = (0, child_process_1.spawnSync)("which", [binary], { encoding: "utf-8" });
-    if (result.status !== 0)
-        return null;
-    const resolved = result.stdout.trim();
-    return resolved.length > 0 ? resolved : null;
-}
-function listSubagentSources(subagentsDir) {
-    if (!fs.existsSync(subagentsDir))
-        return [];
-    return fs.readdirSync(subagentsDir)
-        .filter((name) => name.endsWith(".md"))
-        .filter((name) => name !== "README.md")
-        .map((name) => path.join(subagentsDir, name))
-        .sort((a, b) => a.localeCompare(b));
-}
-function pathExists(target) {
-    try {
-        fs.lstatSync(target);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function ensureSymlink(source, target) {
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    if (pathExists(target)) {
-        const stats = fs.lstatSync(target);
-        if (stats.isSymbolicLink()) {
-            const linkedPath = fs.readlinkSync(target);
-            if (linkedPath === source)
-                return false;
-        }
-        fs.unlinkSync(target);
-    }
-    fs.symlinkSync(source, target);
-    return true;
-}
-async function installSubagentsForAvailableCli(options = {}) {
-    const repoRoot = options.repoRoot ?? path.resolve(__dirname, "..", "..", "..");
-    const homeDir = options.homeDir ?? os.homedir();
-    const which = options.which ?? detectCliBinary;
-    const subagentsDir = path.join(repoRoot, "subagents");
-    const sources = listSubagentSources(subagentsDir);
-    const notes = [];
-    (0, runtime_1.emitNervesEvent)({
-        component: "daemon",
-        event: "daemon.subagent_install_start",
-        message: "starting subagent auto-install",
-        meta: { sources: sources.length },
-    });
-    if (sources.length === 0) {
-        notes.push(`no subagent files found at ${subagentsDir}`);
-        return { claudeInstalled: 0, codexInstalled: 0, notes };
-    }
-    let claudeInstalled = 0;
-    let codexInstalled = 0;
-    const claudePath = which("claude");
-    if (!claudePath) {
-        notes.push("claude CLI not found; skipping subagent install");
-    }
-    else {
-        const claudeAgentsDir = path.join(homeDir, ".claude", "agents");
-        for (const source of sources) {
-            const target = path.join(claudeAgentsDir, path.basename(source));
-            if (ensureSymlink(source, target)) {
-                claudeInstalled += 1;
-            }
-        }
-    }
-    const codexPath = which("codex");
-    if (!codexPath) {
-        notes.push("codex CLI not found; skipping subagent install");
-    }
-    else {
-        const codexSkillsDir = path.join(homeDir, ".codex", "skills");
-        for (const source of sources) {
-            const skillName = path.basename(source, ".md");
-            const target = path.join(codexSkillsDir, skillName, "SKILL.md");
-            if (ensureSymlink(source, target)) {
-                codexInstalled += 1;
-            }
-        }
-    }
-    (0, runtime_1.emitNervesEvent)({
-        component: "daemon",
-        event: "daemon.subagent_install_end",
-        message: "completed subagent auto-install",
-        meta: { claudeInstalled, codexInstalled, notes: notes.length },
-    });
-    return { claudeInstalled, codexInstalled, notes };
-}