@ouro.bot/cli 0.1.0-alpha.50 → 0.1.0-alpha.501

package/dist/heart/cross-chat-delivery.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deliverCrossChatMessage = deliverCrossChatMessage;
+const types_1 = require("../mind/friends/types");
+const runtime_1 = require("../nerves/runtime");
+function buildPendingEnvelope(request, agentName, now) {
+    return {
+        from: agentName,
+        friendId: request.friendId,
+        channel: request.channel,
+        key: request.key,
+        content: request.content,
+        timestamp: now,
+    };
+}
+function queueForLater(request, deps, detail) {
+    deps.queuePending(buildPendingEnvelope(request, deps.agentName, (deps.now ?? Date.now)()));
+    return {
+        status: "queued_for_later",
+        detail,
+    };
+}
+function isExplicitlyAuthorized(request) {
+    return request.intent === "explicit_cross_chat"
+        && Boolean(request.authorizingSession)
+        && (0, types_1.isTrustedLevel)(request.authorizingSession?.trustLevel);
+}
+async function deliverCrossChatMessage(request, deps) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "engine",
+        event: "engine.cross_chat_delivery_start",
+        message: "resolving cross-chat delivery",
+        meta: {
+            friendId: request.friendId,
+            channel: request.channel,
+            key: request.key,
+            intent: request.intent,
+            authorizingTrustLevel: request.authorizingSession?.trustLevel ?? null,
+        },
+    });
+    if (!isExplicitlyAuthorized(request) && request.intent !== "generic_outreach") {
+        const result = {
+            status: "blocked",
+            detail: "cross-chat delivery requires a trusted asking session or generic outreach intent",
+        };
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "engine",
+            event: "engine.cross_chat_delivery_end",
+            message: "blocked cross-chat delivery",
+            meta: {
+                friendId: request.friendId,
+                channel: request.channel,
+                key: request.key,
+                status: result.status,
+            },
+        });
+        return result;
+    }
+    const deliverer = deps.deliverers?.[request.channel];
+    if (!deliverer) {
+        const result = queueForLater(request, deps, "live delivery unavailable right now; queued for the next active turn");
+        (0, runtime_1.emitNervesEvent)({
+            component: "engine",
+            event: "engine.cross_chat_delivery_end",
+            message: "queued explicit cross-chat delivery because no live deliverer was available",
+            meta: {
+                friendId: request.friendId,
+                channel: request.channel,
+                key: request.key,
+                status: result.status,
+            },
+        });
+        return result;
+    }
+    try {
+        const direct = await deliverer(request);
+        if (direct.status === "delivered_now" || direct.status === "blocked" || direct.status === "failed") {
+            const result = {
+                status: direct.status,
+                detail: direct.detail,
+            };
+            (0, runtime_1.emitNervesEvent)({
+                level: result.status === "failed" ? "error" : result.status === "blocked" ? "warn" : "info",
+                component: "engine",
+                event: "engine.cross_chat_delivery_end",
+                message: "completed direct cross-chat delivery resolution",
+                meta: {
+                    friendId: request.friendId,
+                    channel: request.channel,
+                    key: request.key,
+                    status: result.status,
+                },
+            });
+            return result;
+        }
+        const result = queueForLater(request, deps, direct.detail.trim() || "live delivery unavailable right now; queued for the next active turn");
+        (0, runtime_1.emitNervesEvent)({
+            component: "engine",
+            event: "engine.cross_chat_delivery_end",
+            message: "queued explicit cross-chat delivery after adapter reported unavailability",
+            meta: {
+                friendId: request.friendId,
+                channel: request.channel,
+                key: request.key,
+                status: result.status,
+            },
+        });
+        return result;
+    }
+    catch (error) {
+        const result = {
+            status: "failed",
+            detail: error instanceof Error ? error.message : String(error),
+        };
+        (0, runtime_1.emitNervesEvent)({
+            level: "error",
+            component: "engine",
+            event: "engine.cross_chat_delivery_end",
+            message: "cross-chat delivery threw unexpectedly",
+            meta: {
+                friendId: request.friendId,
+                channel: request.channel,
+                key: request.key,
+                status: result.status,
+                reason: result.detail,
+            },
+        });
+        return result;
+    }
+}

package/dist/heart/daemon/agent-config-check.js

@@ -0,0 +1,490 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vaultUnlockOrRecoverFix = vaultUnlockOrRecoverFix;
+exports.checkAgentConfig = checkAgentConfig;
+exports.checkAgentConfigWithProviderHealth = checkAgentConfigWithProviderHealth;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const identity_1 = require("../identity");
+const runtime_1 = require("../../nerves/runtime");
+const provider_models_1 = require("../provider-models");
+const machine_identity_1 = require("../machine-identity");
+const provider_state_1 = require("../provider-state");
+const provider_credentials_1 = require("../provider-credentials");
+const vault_unlock_1 = require("../../repertoire/vault-unlock");
+const readiness_repair_1 = require("./readiness-repair");
+const provider_ping_progress_1 = require("./provider-ping-progress");
+function isAgentProvider(value) {
+    return Object.prototype.hasOwnProperty.call(identity_1.PROVIDER_CREDENTIALS, value);
+}
+function agentRootFor(agentName, bundlesRoot) {
+    return path.join(bundlesRoot, `${agentName}.ouro`);
+}
+function configPathFor(agentName, bundlesRoot) {
+    return path.join(agentRootFor(agentName, bundlesRoot), "agent.json");
+}
+function resolveFacingProvider(parsed, facing, agentName, agentJsonPath) {
+    const raw = parsed[facing];
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: `agent.json for '${agentName}' is missing ${facing}.provider`,
+                fix: `Add ${facing}: { provider, model } to ${agentJsonPath}. Valid providers: ${Object.keys(identity_1.PROVIDER_CREDENTIALS).join(", ")}`,
+            },
+        };
+    }
+    const provider = raw.provider;
+    if (typeof provider !== "string" || provider.length === 0) {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: `agent.json for '${agentName}' is missing ${facing}.provider`,
+                fix: `Set ${facing}.provider in ${agentJsonPath}. Valid providers: ${Object.keys(identity_1.PROVIDER_CREDENTIALS).join(", ")}`,
+            },
+        };
+    }
+    if (!isAgentProvider(provider)) {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: `Unknown provider '${provider}' in ${facing}.provider for '${agentName}'`,
+                fix: `Set ${facing}.provider to one of: ${Object.keys(identity_1.PROVIDER_CREDENTIALS).join(", ")}`,
+            },
+        };
+    }
+    return { ok: true, selected: { facing, provider } };
+}
+function readAgentConfigForProviderState(agentName, bundlesRoot) {
+    const agentJsonPath = configPathFor(agentName, bundlesRoot);
+    let raw;
+    try {
+        raw = fs.readFileSync(agentJsonPath, "utf-8");
+    }
+    catch {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: `agent.json not found at ${agentJsonPath}`,
+                fix: `Run 'ouro hatch ${agentName}' to create the agent bundle, or verify that ${bundlesRoot}/${agentName}.ouro/ exists.`,
+            },
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: `agent.json at ${agentJsonPath} contains invalid JSON`,
+                fix: `Open ${agentJsonPath} and fix the JSON syntax.`,
+            },
+        };
+    }
+    if (parsed.enabled === false) {
+        return { ok: true, disabled: true, agentJsonPath, parsed };
+    }
+    return { ok: true, disabled: false, agentJsonPath, parsed };
+}
+function readFacingForBootstrap(parsed, facing, agentName, agentJsonPath) {
+    const providerResult = resolveFacingProvider(parsed, facing, agentName, agentJsonPath);
+    if (!providerResult.ok) {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: providerResult.result.error,
+                fix: `Run 'ouro use --agent ${agentName} --lane ${facing === "humanFacing" ? "outward" : "inner"} --provider <provider> --model <model>' to configure this machine's provider binding.`,
+            },
+        };
+    }
+    const raw = parsed[facing];
+    const model = typeof raw.model === "string" && raw.model.trim().length > 0
+        ? raw.model.trim()
+        : (0, provider_models_1.getDefaultModelForProvider)(providerResult.selected.provider);
+    return { ok: true, provider: providerResult.selected.provider, model };
+}
+function bootstrapMissingProviderState(input) {
+    const outward = readFacingForBootstrap(input.parsed, "humanFacing", input.agentName, input.agentJsonPath);
+    if (!outward.ok)
+        return { ok: false, error: outward.result.error, fix: outward.result.fix };
+    const inner = readFacingForBootstrap(input.parsed, "agentFacing", input.agentName, input.agentJsonPath);
+    if (!inner.ok)
+        return { ok: false, error: inner.result.error, fix: inner.result.fix };
+    const now = new Date();
+    const homeDir = (0, provider_credentials_1.providerCredentialMachineHomeDir)(input.homeDir);
+    const machine = (0, machine_identity_1.loadOrCreateMachineIdentity)({ homeDir, now: () => now });
+    const state = (0, provider_state_1.bootstrapProviderStateFromAgentConfig)({
+        machineId: machine.machineId,
+        now,
+        agentConfig: {
+            humanFacing: { provider: outward.provider, model: outward.model },
+            agentFacing: { provider: inner.provider, model: inner.model },
+        },
+    });
+    const agentRoot = agentRootFor(input.agentName, input.bundlesRoot);
+    (0, provider_state_1.writeProviderState)(agentRoot, state);
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.provider_state_bootstrapped",
+        message: "bootstrapped local provider state from agent config",
+        meta: { agent: input.agentName, agentRoot },
+    });
+    return { ok: true, agentRoot, state };
+}
+function readOrBootstrapProviderStateForCheck(agentName, bundlesRoot, deps = {}) {
+    const configResult = readAgentConfigForProviderState(agentName, bundlesRoot);
+    if (!configResult.ok)
+        return { ok: false, result: configResult.result };
+    if (configResult.disabled)
+        return { ok: true, disabled: true };
+    const agentRoot = agentRootFor(agentName, bundlesRoot);
+    const stateResult = (0, provider_state_1.readProviderState)(agentRoot);
+    if (stateResult.ok) {
+        return { ok: true, disabled: false, agentRoot, state: stateResult.state };
+    }
+    if (stateResult.reason === "invalid") {
+        return {
+            ok: false,
+            result: {
+                ok: false,
+                error: `provider state for ${agentName} is invalid at ${stateResult.statePath}: ${stateResult.error}`,
+                fix: `Run 'ouro use --agent ${agentName} --lane outward --provider <provider> --model <model> --force' to rewrite this machine's provider binding.`,
+            },
+        };
+    }
+    const bootstrap = bootstrapMissingProviderState({
+        agentName,
+        bundlesRoot,
+        parsed: configResult.parsed,
+        agentJsonPath: configResult.agentJsonPath,
+        homeDir: deps.homeDir,
+    });
+    if (!bootstrap.ok)
+        return { ok: false, result: bootstrap };
+    return { ok: true, disabled: false, agentRoot: bootstrap.agentRoot, state: bootstrap.state };
+}
+function providerCredentialConfig(record) {
+    return {
+        ...record.credentials,
+        ...record.config,
+    };
+}
+function pingAttemptCount(result) {
+    if (Array.isArray(result.attempts))
+        return result.attempts.length;
+    return undefined;
+}
+function writeLaneReadiness(input) {
+    const binding = input.state.lanes[input.lane];
+    const checkedAt = new Date().toISOString();
+    input.state.updatedAt = checkedAt;
+    input.state.readiness[input.lane] = {
+        status: input.status,
+        provider: binding.provider,
+        model: binding.model,
+        checkedAt,
+        credentialRevision: input.credentialRevision,
+        ...(input.error ? { error: input.error } : {}),
+        ...(input.attempts !== undefined ? { attempts: input.attempts } : {}),
+    };
+    (0, provider_state_1.writeProviderState)(input.agentRoot, input.state);
+}
+function missingCredentialResult(agentName, lane, provider, model, credentialPath) {
+    return {
+        ok: false,
+        error: `${lane} provider ${provider} model ${model} has no credentials in ${agentName}'s vault at ${credentialPath}`,
+        fix: `Run 'ouro auth --agent ${agentName} --provider ${provider}' to authenticate.`,
+        issue: (0, readiness_repair_1.providerCredentialMissingIssue)({
+            agentName,
+            lane,
+            provider,
+            model,
+            credentialPath,
+        }),
+    };
+}
+function isTransientVaultError(error) {
+    const normalized = error.toLowerCase();
+    return (normalized.includes("timed out") ||
+        normalized.includes("econnrefused") ||
+        normalized.includes("socket hang up") ||
+        normalized.includes("etimedout"));
+}
+function invalidPoolResult(agentName, lane, provider, model, pool) {
+    if (pool.reason === "unavailable" && isTransientVaultError(pool.error)) {
+        return {
+            ok: false,
+            error: `${lane} provider ${provider} model ${model} cannot read provider credentials from ${agentName}'s vault: ${pool.error}`,
+            fix: `Vault read timed out -- this usually resolves on retry. Run 'ouro up' again.`,
+        };
+    }
+    if (pool.reason === "unavailable" && isVaultLockedError(pool.error)) {
+        return {
+            ok: false,
+            error: `${lane} provider ${provider} model ${model} cannot read provider credentials because ${agentName}'s credential vault is locked on this machine.`,
+            fix: vaultUnlockOrRecoverFix(agentName),
+            issue: (0, readiness_repair_1.vaultLockedIssue)(agentName),
+        };
+    }
+    if (pool.reason === "unavailable" && (0, vault_unlock_1.isCredentialVaultNotConfiguredError)(pool.error)) {
+        return {
+            ok: false,
+            error: `${lane} provider ${provider} model ${model} cannot read provider credentials because ${agentName}'s credential vault is not configured in agent.json.`,
+            fix: (0, vault_unlock_1.vaultCreateRecoverFix)(agentName, `Then run 'ouro auth --agent ${agentName} --provider ${provider}' and rerun 'ouro up'.`),
+            issue: (0, readiness_repair_1.vaultUnconfiguredIssue)(agentName),
+        };
+    }
+    if (pool.reason === "invalid") {
+        return {
+            ok: false,
+            error: `${lane} provider ${provider} model ${model} cannot read provider credentials from ${agentName}'s vault at ${pool.poolPath}: ${pool.error}`,
+            fix: `Run 'ouro auth --agent ${agentName} --provider ${provider}' to rewrite this provider credential, then run 'ouro up' again.`,
+        };
+    }
+    return {
+        ok: false,
+        error: `${lane} provider ${provider} model ${model} cannot read provider credentials from ${agentName}'s vault at ${pool.poolPath}: ${pool.error}`,
+        fix: vaultUnlockOrRecoverFix(agentName, `Then run 'ouro up' again. If the credential is missing or stale after unlock or recovery, run 'ouro auth --agent ${agentName} --provider ${provider}'.`),
+    };
+}
+function isVaultLockedError(error) {
+    const normalized = error.toLowerCase();
+    return /(?:ouro )?credential vault is locked|vault(?: is)? locked/.test(normalized);
+}
+function vaultUnlockOrRecoverFix(agentName, nextStep = "Then run 'ouro up' again.") {
+    return (0, vault_unlock_1.vaultUnlockReplaceRecoverFix)(agentName, nextStep);
+}
+function failedPingResult(agentName, lane, provider, model, result) {
+    return {
+        ok: false,
+        error: `${lane} provider ${provider} model ${model} failed live check: ${result.message}`,
+        fix: (0, readiness_repair_1.providerLiveCheckFix)({
+            agentName,
+            lane,
+            provider,
+            classification: result.classification,
+        }),
+        issue: (0, readiness_repair_1.providerLiveCheckFailedIssue)({
+            agentName,
+            lane,
+            provider,
+            model,
+            classification: result.classification,
+            message: result.message,
+        }),
+    };
+}
+function credentialRecordForLane(pool, provider) {
+    return pool.providers[provider];
+}
+function laneAudienceLabel(lane) {
+    return lane === "outward" ? "chat" : "inner dialog";
+}
+function bindingLabel(binding) {
+    return `${binding.provider} / ${binding.model}`;
+}
+function selectedProviderPlan(agentName, state) {
+    return [
+        `${agentName}: checking the providers this agent uses right now`,
+        ...["outward", "inner"].map((lane) => `- ${laneAudienceLabel(lane)}: ${bindingLabel(state.lanes[lane])}`),
+    ].join("\n");
+}
+function selectedProvidersForState(state) {
+    return [...new Set(["outward", "inner"].map((lane) => state.lanes[lane].provider))];
+}
+function mapVaultRefreshProgress(agentName, onProgress) {
+    return (message) => {
+        if (message.startsWith("reading vault items for ")) {
+            onProgress(`${agentName}: opening saved provider credentials in the vault`);
+            return;
+        }
+        const providerRead = message.match(/^reading ([a-z0-9-]+) credentials\.\.\.$/i);
+        if (providerRead) {
+            onProgress(`${agentName}: reading saved ${providerRead[1]} credentials`);
+            return;
+        }
+        if (message === "parsing provider credentials...") {
+            onProgress(`${agentName}: organizing saved provider credentials`);
+        }
+    };
+}
+function providerPingSubject(agentName, lanes) {
+    const laneList = lanes.map((lane) => laneAudienceLabel(lane)).join(" + ");
+    return `${agentName} (${laneList})`;
+}
+/**
+ * Structural validation only. Live provider credential validation belongs to
+ * checkAgentConfigWithProviderHealth(), which reads the agent vault and pings.
+ */
+function checkAgentConfig(agentName, bundlesRoot) {
+    const configResult = readAgentConfigForProviderState(agentName, bundlesRoot);
+    if (!configResult.ok)
+        return configResult.result;
+    if (configResult.disabled)
+        return { ok: true };
+    const outward = readFacingForBootstrap(configResult.parsed, "humanFacing", agentName, configResult.agentJsonPath);
+    if (!outward.ok)
+        return outward.result;
+    const inner = readFacingForBootstrap(configResult.parsed, "agentFacing", agentName, configResult.agentJsonPath);
+    if (!inner.ok)
+        return inner.result;
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.agent_config_valid",
+        message: "agent config validation passed",
+        meta: {
+            agent: agentName,
+            providers: [...new Set([outward.provider, inner.provider])],
+            liveProviderCheck: false,
+        },
+    });
+    return { ok: true };
+}
+async function checkAgentConfigWithProviderHealth(agentName, bundlesRoot, deps = {}) {
+    const stateResult = readOrBootstrapProviderStateForCheck(agentName, bundlesRoot, deps);
+    if (!stateResult.ok)
+        return stateResult.result;
+    if (stateResult.disabled)
+        return { ok: true };
+    deps.onProgress?.(selectedProviderPlan(agentName, stateResult.state));
+    const ping = deps.pingProvider ?? (await Promise.resolve().then(() => __importStar(require("../provider-ping")))).pingProvider;
+    const shouldRecordReadiness = deps.recordReadiness ?? true;
+    const providers = selectedProvidersForState(stateResult.state);
+    const poolResult = await (0, provider_credentials_1.refreshProviderCredentialPool)(agentName, {
+        ...(deps.onProgress ? { onProgress: mapVaultRefreshProgress(agentName, deps.onProgress) } : {}),
+        providers,
+        skipCache: true,
+    });
+    const pingGroups = new Map();
+    const lanes = ["outward", "inner"];
+    for (const lane of lanes) {
+        const binding = stateResult.state.lanes[lane];
+        if (!poolResult.ok) {
+            if (poolResult.reason === "missing") {
+                return missingCredentialResult(agentName, lane, binding.provider, binding.model, poolResult.poolPath);
+            }
+            return invalidPoolResult(agentName, lane, binding.provider, binding.model, {
+                ...poolResult,
+                reason: poolResult.reason,
+            });
+        }
+        const record = credentialRecordForLane(poolResult.pool, binding.provider);
+        if (!record) {
+            return missingCredentialResult(agentName, lane, binding.provider, binding.model, poolResult.poolPath);
+        }
+        const key = `${binding.provider}\0${binding.model}\0${record.revision}`;
+        const group = pingGroups.get(key);
+        if (group) {
+            group.lanes.push(lane);
+        }
+        else {
+            pingGroups.set(key, {
+                provider: binding.provider,
+                model: binding.model,
+                record,
+                lanes: [lane],
+            });
+        }
+    }
+    const groups = [...pingGroups.values()];
+    const pingResults = await Promise.all(groups.map(async (group) => {
+        const result = await ping(group.provider, providerCredentialConfig(group.record), {
+            model: group.model,
+            ...(deps.providerPingOptions ?? {}),
+            ...(deps.onProgress
+                ? (0, provider_ping_progress_1.createProviderPingProgressReporter)({
+                    provider: group.provider,
+                    model: group.model,
+                    subject: providerPingSubject(agentName, group.lanes),
+                }, deps.onProgress)
+                : {}),
+        });
+        return { group, result };
+    }));
+    let firstFailure = null;
+    for (const { group, result } of pingResults) {
+        if (!result.ok) {
+            if (shouldRecordReadiness) {
+                for (const lane of group.lanes) {
+                    writeLaneReadiness({
+                        agentRoot: stateResult.agentRoot,
+                        state: stateResult.state,
+                        lane,
+                        status: "failed",
+                        credentialRevision: group.record.revision,
+                        error: result.message,
+                        attempts: pingAttemptCount(result),
+                    });
+                }
+            }
+            firstFailure ??= failedPingResult(agentName, group.lanes[0], group.provider, group.model, result);
+            continue;
+        }
+        if (shouldRecordReadiness) {
+            for (const lane of group.lanes) {
+                writeLaneReadiness({
+                    agentRoot: stateResult.agentRoot,
+                    state: stateResult.state,
+                    lane,
+                    status: "ready",
+                    credentialRevision: group.record.revision,
+                    attempts: pingAttemptCount(result),
+                });
+            }
+        }
+    }
+    if (firstFailure)
+        return firstFailure;
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.agent_config_valid",
+        message: "agent config validation passed",
+        meta: {
+            agent: agentName,
+            providers: [...new Set([...pingGroups.values()].map((group) => group.provider))],
+            liveProviderCheck: true,
+        },
+    });
+    return { ok: true };
+}