@ouro.bot/cli 0.1.0-alpha.553 → 0.1.0-alpha.555

package/RepairGuide.ouro/skills/diagnose-bootstrap-drift.md

@@ -1,54 +0,0 @@
-# diagnose-bootstrap-drift
-
-Bootstrap drift fires when the agent's declared intent (`agent.json`) and its observed runtime binding (`state/providers.json`) disagree on provider or model.
-
-## Inputs from the finding inventory
-
-The user message includes a `driftFindings` JSON block when drift was detected during boot. Each entry is a `DriftFinding` from `src/heart/daemon/drift-detection.ts`:
-
-```ts
-interface DriftFinding {
-  agent: string
-  lane: "outward" | "inner"     // outward = human-facing, inner = agent-to-agent
-  intentProvider: string        // what agent.json declares
-  intentModel: string           // what agent.json declares
-  observedProvider: string      // what state/providers.json records
-  observedModel: string         // what state/providers.json records
-  reason: "provider-model-changed"
-  repairCommand: string         // copy-pasteable `ouro use ...` invocation
-}
-```
-
-A finding fires when `intentProvider !== observedProvider` OR `intentModel !== observedModel`. `state/providers.json` missing entirely is treated as "no observation, nothing to drift against" (initialization in flight, not drift) and emits no finding.
-
-## Diagnosis
-
-Each `DriftFinding` indicates per-lane disagreement. Compare the intent and observed fields to characterize the situation:
-
-| Pattern | What it means | Proposed action |
-|---|---|---|
-| `intentProvider !== observedProvider` | Different providers on the same lane | `provider-use` pinning the intent provider+model |
-| `intentProvider === observedProvider` AND `intentModel !== observedModel` | Same provider, different model | `provider-use` pinning the intent model |
-| Either side carries an unexpected/legacy value | Likely stale state from a pre-rename bootstrap | `provider-use` with `--force` to rewrite the binding |
-
-The `repairCommand` field on each finding already contains the canonical `ouro use --agent X --lane Y --provider Z --model M` invocation that resolves the drift. Surface that command in the proposal; the operator runs it after confirmation in `interactive-repair.ts`.
-
-## Proposed action shape
-
-```json
-{
-  "kind": "provider-use",
-  "agent": "slugger",
-  "lane": "outward",
-  "provider": "anthropic",
-  "model": "claude-opus-4-7",
-  "reason": "drift on outward lane: agent.json declares anthropic/claude-opus-4-7 but state/providers.json recorded openai-codex/claude-sonnet-4.6"
-}
-```
-
-The `kind: "provider-use"` action is one of the seven typed `RepairAction` variants in `src/heart/daemon/readiness-repair.ts`; the parser in `agentic-repair.ts:parseRepairProposals` validates it.
-
-## When NOT to fire
-
-- `driftFindings` is empty / not present in the user message — nothing to diagnose.
-- A finding's `intentProvider` or `intentModel` is empty / missing — the intent itself is malformed; surface in `notes` rather than proposing an action.

package/dist/heart/daemon/drift-detection.js

@@ -1,146 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.detectProviderBindingDrift = detectProviderBindingDrift;
-exports.loadDriftInputsForAgent = loadDriftInputsForAgent;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const provider_state_1 = require("../provider-state");
-/**
- * Pull the per-lane intent out of an agent.json view, preferring the new
- * `outward`/`inner` keys over the legacy `humanFacing`/`agentFacing` keys
- * when both are present. Returns `null` if neither set carries a usable
- * binding for this lane (the comparator treats that as "no intent to
- * compare against" and emits no drift for that lane).
- */
-function resolveLaneIntent(agentJson, lane) {
-    const newKey = lane === "outward" ? agentJson.outward : agentJson.inner;
-    if (newKey && typeof newKey.provider === "string" && typeof newKey.model === "string") {
-        return { provider: newKey.provider, model: newKey.model };
-    }
-    const legacy = lane === "outward" ? agentJson.humanFacing : agentJson.agentFacing;
-    if (legacy && typeof legacy.provider === "string" && typeof legacy.model === "string") {
-        return { provider: legacy.provider, model: legacy.model };
-    }
-    return null;
-}
-function buildRepairCommand(agentName, lane, provider, model) {
-    return `ouro use --agent ${agentName} --lane ${lane} --provider ${provider} --model ${model}`;
-}
-/**
- * Pure intent-vs-observed comparator. Emits one `DriftFinding` per lane
- * whose intent (agent.json) does not match its observation
- * (state/providers.json).
- *
- * Returns `[]` when:
- * - `providerState === null` (fresh install, nothing to drift against), OR
- * - both lanes match, OR
- * - a lane has no intent in agent.json AND no observation in providerState
- *   (deferred to other layers — drift detection is silent on that lane).
- */
-function detectProviderBindingDrift(input) {
-    if (input.providerState === null) {
-        return [];
-    }
-    const findings = [];
-    const lanes = ["outward", "inner"];
-    for (const lane of lanes) {
-        const intent = resolveLaneIntent(input.agentJson, lane);
-        if (!intent)
-            continue;
-        const observed = input.providerState.lanes[lane];
-        if (intent.provider === observed.provider && intent.model === observed.model) {
-            continue;
-        }
-        findings.push({
-            agent: input.agentName,
-            lane,
-            intentProvider: intent.provider,
-            intentModel: intent.model,
-            observedProvider: observed.provider,
-            observedModel: observed.model,
-            reason: "provider-model-changed",
-            repairCommand: buildRepairCommand(input.agentName, lane, intent.provider, intent.model),
-        });
-    }
-    return findings;
-}
-function agentRootFor(bundlesRoot, agentName) {
-    return path.join(bundlesRoot, `${agentName}.ouro`);
-}
-function readAgentJson(agentJsonPath) {
-    let raw;
-    try {
-        raw = fs.readFileSync(agentJsonPath, "utf-8");
-    }
-    catch {
-        throw new Error(`agent.json not found at ${agentJsonPath}`);
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (error) {
-        throw new Error(`agent.json at ${agentJsonPath} contains invalid JSON: ${String(error)}`);
-    }
-    // The drift loader is intentionally permissive: it parses the file as a
-    // typed `AgentConfig` view but does not validate every field. The
-    // comparator (Unit 1) is the one that decides which intent fields are
-    // usable; non-conforming bindings just silently skip drift detection
-    // on that lane. Stricter validation belongs to `loadAgentConfig` in
-    // identity.ts (which also has side effects we don't want here).
-    return parsed;
-}
-/**
- * Loader for the drift comparator. Reads the per-agent `agent.json` and
- * `state/providers.json` off disk, returning typed inputs ready to feed
- * into `detectProviderBindingDrift`.
- *
- * - Throws when `agent.json` is missing or unparseable. The caller decides
- *   whether to swallow (drift detection has no opinion on a broken
- *   `agent.json` — that's the existing `agent-config-check` flow's job).
- * - Returns `providerState: null` when `state/providers.json` is missing
- *   (fresh install) or invalid (the comparator interprets `null` as "no
- *   observation, nothing to drift against").
- * - Never writes to disk.
- */
-function loadDriftInputsForAgent(bundlesRoot, agentName) {
-    const agentRoot = agentRootFor(bundlesRoot, agentName);
-    const agentJsonPath = path.join(agentRoot, "agent.json");
-    const agentJson = readAgentJson(agentJsonPath);
-    const stateResult = (0, provider_state_1.readProviderState)(agentRoot);
-    const providerState = stateResult.ok ? stateResult.state : null;
-    return { agentJson, providerState };
-}

package/dist/heart/provider-state.js

@@ -1,216 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateProviderState = validateProviderState;
-exports.getProviderStatePath = getProviderStatePath;
-exports.readProviderState = readProviderState;
-exports.writeProviderState = writeProviderState;
-exports.bootstrapProviderStateFromAgentConfig = bootstrapProviderStateFromAgentConfig;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const runtime_1 = require("../nerves/runtime");
-const identity_1 = require("./identity");
-const LANES = ["outward", "inner"];
-const VALID_SOURCES = new Set(["bootstrap", "local"]);
-const VALID_READINESS = new Set(["ready", "failed", "stale", "unknown"]);
-function isProvider(value) {
-    return typeof value === "string" && Object.prototype.hasOwnProperty.call(identity_1.PROVIDER_CREDENTIALS, value);
-}
-function isNonEmptyString(value) {
-    return typeof value === "string" && value.trim().length > 0;
-}
-function validateBinding(value, label) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error(`${label} must be an object`);
-    }
-    const record = value;
-    if (!isProvider(record.provider))
-        throw new Error(`${label}.provider must be a valid provider`);
-    if (!isNonEmptyString(record.model))
-        throw new Error(`${label}.model must be a non-empty string`);
-    if (!VALID_SOURCES.has(record.source)) {
-        throw new Error(`${label}.source must be bootstrap or local`);
-    }
-    if (!isNonEmptyString(record.updatedAt))
-        throw new Error(`${label}.updatedAt must be a non-empty string`);
-    return {
-        provider: record.provider,
-        model: record.model,
-        source: record.source,
-        updatedAt: record.updatedAt,
-    };
-}
-function validateReadiness(value, label) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error(`${label} must be an object`);
-    }
-    const record = value;
-    if (!VALID_READINESS.has(record.status)) {
-        throw new Error(`${label}.status must be ready, failed, stale, or unknown`);
-    }
-    if (!isProvider(record.provider))
-        throw new Error(`${label}.provider must be a valid provider`);
-    if (!isNonEmptyString(record.model))
-        throw new Error(`${label}.model must be a non-empty string`);
-    if (record.checkedAt !== undefined && typeof record.checkedAt !== "string") {
-        throw new Error(`${label}.checkedAt must be a string when present`);
-    }
-    if (record.credentialRevision !== undefined && typeof record.credentialRevision !== "string") {
-        throw new Error(`${label}.credentialRevision must be a string when present`);
-    }
-    if (record.error !== undefined && typeof record.error !== "string") {
-        throw new Error(`${label}.error must be a string when present`);
-    }
-    if (record.attempts !== undefined && typeof record.attempts !== "number") {
-        throw new Error(`${label}.attempts must be a number when present`);
-    }
-    return {
-        status: record.status,
-        provider: record.provider,
-        model: record.model,
-        ...(record.checkedAt !== undefined ? { checkedAt: record.checkedAt } : {}),
-        ...(record.credentialRevision !== undefined ? { credentialRevision: record.credentialRevision } : {}),
-        ...(record.error !== undefined ? { error: record.error } : {}),
-        ...(record.attempts !== undefined ? { attempts: record.attempts } : {}),
-    };
-}
-function validateProviderState(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error("provider state must be an object");
-    }
-    const record = value;
-    if (record.schemaVersion !== 1)
-        throw new Error("schemaVersion must be 1");
-    if (!isNonEmptyString(record.machineId))
-        throw new Error("machineId must be a non-empty string");
-    if (!isNonEmptyString(record.updatedAt))
-        throw new Error("updatedAt must be a non-empty string");
-    if (!record.lanes || typeof record.lanes !== "object" || Array.isArray(record.lanes)) {
-        throw new Error("lanes must be an object");
-    }
-    const rawLanes = record.lanes;
-    const lanes = {
-        outward: validateBinding(rawLanes.outward, "outward"),
-        inner: validateBinding(rawLanes.inner, "inner"),
-    };
-    if (!record.readiness || typeof record.readiness !== "object" || Array.isArray(record.readiness)) {
-        throw new Error("readiness must be an object");
-    }
-    const rawReadiness = record.readiness;
-    const readiness = {};
-    for (const lane of LANES) {
-        if (rawReadiness[lane] !== undefined) {
-            readiness[lane] = validateReadiness(rawReadiness[lane], `${lane}.readiness`);
-        }
-    }
-    return {
-        schemaVersion: 1,
-        machineId: record.machineId,
-        updatedAt: record.updatedAt,
-        lanes,
-        readiness,
-    };
-}
-function getProviderStatePath(agentRoot) {
-    return path.join(agentRoot, "state", "providers.json");
-}
-function readProviderState(agentRoot) {
-    const statePath = getProviderStatePath(agentRoot);
-    let raw;
-    try {
-        if (!fs.existsSync(statePath)) {
-            return { ok: false, reason: "missing", statePath, error: "provider state not found" };
-        }
-    }
-    catch (error) {
-        return { ok: false, reason: "invalid", statePath, error: String(error) };
-    }
-    try {
-        raw = fs.readFileSync(statePath, "utf-8");
-    }
-    catch (error) {
-        const code = error.code;
-        if (code === "ENOENT") {
-            return { ok: false, reason: "missing", statePath, error: "provider state not found" };
-        }
-        return { ok: false, reason: "invalid", statePath, error: String(error) };
-    }
-    try {
-        const state = validateProviderState(JSON.parse(raw));
-        (0, runtime_1.emitNervesEvent)({
-            component: "config/identity",
-            event: "config.provider_state_read",
-            message: "read provider state",
-            meta: { statePath, machineId: state.machineId },
-        });
-        return { ok: true, statePath, state };
-    }
-    catch (error) {
-        return { ok: false, reason: "invalid", statePath, error: String(error) };
-    }
-}
-function writeProviderState(agentRoot, state) {
-    const statePath = getProviderStatePath(agentRoot);
-    const validated = validateProviderState(state);
-    fs.mkdirSync(path.dirname(statePath), { recursive: true });
-    fs.writeFileSync(statePath, `${JSON.stringify(validated, null, 2)}\n`, "utf-8");
-    (0, runtime_1.emitNervesEvent)({
-        component: "config/identity",
-        event: "config.provider_state_written",
-        message: "wrote provider state",
-        meta: { statePath, machineId: validated.machineId },
-    });
-}
-function binding(provider, model, updatedAt) {
-    return {
-        provider,
-        model,
-        source: "bootstrap",
-        updatedAt,
-    };
-}
-function bootstrapProviderStateFromAgentConfig(input) {
-    const updatedAt = input.now.toISOString();
-    return {
-        schemaVersion: 1,
-        machineId: input.machineId,
-        updatedAt,
-        lanes: {
-            outward: binding(input.agentConfig.humanFacing.provider, input.agentConfig.humanFacing.model, updatedAt),
-            inner: binding(input.agentConfig.agentFacing.provider, input.agentConfig.agentFacing.model, updatedAt),
-        },
-        readiness: {},
-    };
-}