@ouro.bot/cli 0.1.0-alpha.665 → 0.1.0-alpha.667

package/dist/heart/mailbox/mailbox-http-routes.js

@@ -36,11 +36,77 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createMailboxHttpRequestHandler = createMailboxHttpRequestHandler;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
+const mailbox_http_hooks_1 = require("./mailbox-http-hooks");
 const mailbox_http_response_1 = require("./mailbox-http-response");
 const mailbox_http_static_1 = require("./mailbox-http-static");
+function decodePathSegment(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return null;
+    }
+}
+function rawRequestTargetsUnsafeAgent(urlValue = "/") {
+    const rawTarget = urlValue.split(/[?#]/, 1)[0];
+    const rawPath = rawTarget.replace(/\/+$/, "") || "/";
+    const pathname = (0, mailbox_http_static_1.normalizeLegacyMailboxApiPath)(rawPath);
+    const rawAgentMatch = /^\/api\/agents\/([^/]+)(?:\/|$)/.exec(pathname);
+    if (!rawAgentMatch)
+        return false;
+    const agent = decodePathSegment(rawAgentMatch[1]);
+    return !agent || !(0, mailbox_http_hooks_1.isSafeMailboxAgentName)(agent);
+}
+function parseHabitRunLimit(urlValue) {
+    const rawLimit = new URL(urlValue, "http://127.0.0.1").searchParams.get("limit");
+    if (rawLimit === null)
+        return undefined;
+    if (!/^[1-9][0-9]*$/.test(rawLimit))
+        return null;
+    const limit = Number.parseInt(rawLimit, 10);
+    return limit >= 1 && limit <= 100 ? limit : null;
+}
+const VALID_HABIT_SUMMARY_WHICH = new Set(["latest", "previous", "latest-success", "latest-failure"]);
+function firstQueryValue(params, names) {
+    for (const name of names) {
+        const value = params.get(name);
+        if (value !== null && value.trim().length > 0)
+            return value;
+    }
+    return undefined;
+}
+function parseHabitSummarySelector(urlValue) {
+    const params = new URL(urlValue, "http://127.0.0.1").searchParams;
+    const runId = firstQueryValue(params, ["runId", "run-id"]);
+    const habitName = firstQueryValue(params, ["habitName", "habit"]);
+    const operationId = firstQueryValue(params, ["operationId", "operation-id"]);
+    const which = firstQueryValue(params, ["which"]);
+    if (runId !== undefined && (habitName !== undefined || operationId !== undefined || which !== undefined)) {
+        return { ok: false, error: "--run-id cannot be combined with --habit, --operation-id, or --which" };
+    }
+    if (runId === undefined && habitName === undefined && operationId === undefined) {
+        return { ok: false, error: "provide runId, habitName, or operationId" };
+    }
+    if (which !== undefined && !VALID_HABIT_SUMMARY_WHICH.has(which)) {
+        return { ok: false, error: "which must be latest, previous, latest-success, or latest-failure" };
+    }
+    return {
+        ok: true,
+        selector: {
+            ...(runId ? { runId } : {}),
+            ...(habitName ? { habitName } : {}),
+            ...(operationId ? { operationId } : {}),
+            ...(which ? { which } : {}),
+        },
+    };
+}
 function createMailboxHttpRequestHandler(options) {
     const staticFiles = options.staticFiles ?? { resolveSpaDistDir: mailbox_http_static_1.resolveSpaDistDir, serveStaticFile: mailbox_http_static_1.serveStaticFile };
     return (request, response) => {
+        if (rawRequestTargetsUnsafeAgent(request.url)) {
+            (0, mailbox_http_response_1.writeJson)(response, 400, { ok: false, error: "agent name must be a safe bundle name" });
+            return;
+        }
         let pathname = (0, mailbox_http_static_1.normalizeMailboxRequestPath)(request.url);
         const origin = `http://${options.host}:${options.getPort()}`;
         if (pathname.startsWith("/assets/")) {
@@ -82,8 +148,14 @@ function createMailboxHttpRequestHandler(options) {
         }
         const agentMatch = /^\/api\/agents\/([^/]+)(?:\/(.+))?$/.exec(pathname);
         if (agentMatch) {
+            const agent = decodePathSegment(agentMatch[1]);
+            /* v8 ignore next -- rawRequestTargetsUnsafeAgent rejects unsafe/malformed agent segments before normalization @preserve */
+            if (!agent || !(0, mailbox_http_hooks_1.isSafeMailboxAgentName)(agent)) {
+                (0, mailbox_http_response_1.writeJson)(response, 400, { ok: false, error: "agent name must be a safe bundle name" });
+                return;
+            }
             void handleAgentRoute(request, response, {
-                agent: decodeURIComponent(agentMatch[1]),
+                agent,
                 surface: agentMatch[2] ?? null,
                 options,
             }).catch((error) => {
@@ -200,6 +272,55 @@ async function handleAgentRoute(request, response, context) {
         (0, mailbox_http_response_1.writeJson)(response, 200, options.hooks.readAgentHabits(agent));
         return;
     }
+    if (surface === "habit-runs") {
+        const limit = parseHabitRunLimit(request.url);
+        if (limit === null) {
+            (0, mailbox_http_response_1.writeJson)(response, 400, { ok: false, error: "limit must be an integer between 1 and 100" });
+            return;
+        }
+        const view = limit === undefined
+            ? options.hooks.readAgentHabitRuns(agent)
+            : options.hooks.readAgentHabitRuns(agent, { limit });
+        (0, mailbox_http_response_1.writeJson)(response, 200, view);
+        return;
+    }
+    if (surface === "habit-run-summaries") {
+        const limit = parseHabitRunLimit(request.url);
+        if (limit === null) {
+            (0, mailbox_http_response_1.writeJson)(response, 400, { ok: false, error: "limit must be an integer between 1 and 100" });
+            return;
+        }
+        const view = limit === undefined
+            ? options.hooks.readAgentHabitRunSummaries(agent)
+            : options.hooks.readAgentHabitRunSummaries(agent, { limit });
+        (0, mailbox_http_response_1.writeJson)(response, 200, view);
+        return;
+    }
+    if (surface === "habit-run-summary") {
+        const parsed = parseHabitSummarySelector(request.url);
+        if (!parsed.ok) {
+            (0, mailbox_http_response_1.writeJson)(response, 400, { ok: false, error: parsed.error });
+            return;
+        }
+        const summary = options.hooks.readAgentHabitRunSummary(agent, parsed.selector);
+        if (!summary) {
+            (0, mailbox_http_response_1.writeJson)(response, 404, { ok: false, error: "habit summary not found" });
+            return;
+        }
+        (0, mailbox_http_response_1.writeJson)(response, 200, summary);
+        return;
+    }
+    if (surface.startsWith("habit-runs/")) {
+        const rawRunId = surface.slice("habit-runs/".length);
+        const runId = decodePathSegment(rawRunId);
+        const view = runId ? options.hooks.readAgentHabitRun(agent, runId) : null;
+        if (!view) {
+            (0, mailbox_http_response_1.writeJson)(response, 404, { ok: false, error: `habit run '${rawRunId}' not found` });
+            return;
+        }
+        (0, mailbox_http_response_1.writeJson)(response, 200, view);
+        return;
+    }
     if (surface === "mail") {
         (0, mailbox_http_response_1.writeJson)(response, 200, await options.hooks.readAgentMail(agent));
         return;

package/dist/heart/mailbox/mailbox-read.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readSelfFixView = exports.readMailboxContinuity = exports.readOrientationView = exports.readObligationDetailView = exports.readNoteDecisionView = exports.readSentinelView = exports.readContextLossGauntletView = exports.readChangesView = exports.readNeedsMeView = exports.readNotesView = exports.readLogView = exports.readHabitView = exports.readFriendView = exports.readDeskPrefs = exports.readDaemonHealthDeep = exports.readCodingDeep = exports.readBridgeInventory = exports.readAttentionView = exports.readMailView = exports.readMailMessageView = exports.readSessionTranscript = exports.readSessionInventory = exports.readMailboxMachineState = exports.readMailboxAgentState = exports.readObligationSummary = void 0;
+exports.readSelfFixView = exports.readMailboxContinuity = exports.readOrientationView = exports.readObligationDetailView = exports.readNoteDecisionView = exports.readSentinelView = exports.readContextLossGauntletView = exports.readChangesView = exports.readNeedsMeView = exports.readNotesView = exports.readLogView = exports.readHabitView = exports.readHabitRunView = exports.readHabitRunReceiptView = exports.readHabitSessionSummaryView = exports.readHabitSessionSummaryListView = exports.readFriendView = exports.readDeskPrefs = exports.readDaemonHealthDeep = exports.readCodingDeep = exports.readBridgeInventory = exports.readAttentionView = exports.readMailView = exports.readMailMessageView = exports.readSessionTranscript = exports.readSessionInventory = exports.readMailboxMachineState = exports.readMailboxAgentState = exports.readObligationSummary = void 0;
 var agent_machine_1 = require("./readers/agent-machine");
 Object.defineProperty(exports, "readObligationSummary", { enumerable: true, get: function () { return agent_machine_1.readObligationSummary; } });
 Object.defineProperty(exports, "readMailboxAgentState", { enumerable: true, get: function () { return agent_machine_1.readMailboxAgentState; } });
@@ -18,6 +18,10 @@ Object.defineProperty(exports, "readCodingDeep", { enumerable: true, get: functi
 Object.defineProperty(exports, "readDaemonHealthDeep", { enumerable: true, get: function () { return runtime_readers_1.readDaemonHealthDeep; } });
 Object.defineProperty(exports, "readDeskPrefs", { enumerable: true, get: function () { return runtime_readers_1.readDeskPrefs; } });
 Object.defineProperty(exports, "readFriendView", { enumerable: true, get: function () { return runtime_readers_1.readFriendView; } });
+Object.defineProperty(exports, "readHabitSessionSummaryListView", { enumerable: true, get: function () { return runtime_readers_1.readHabitSessionSummaryListView; } });
+Object.defineProperty(exports, "readHabitSessionSummaryView", { enumerable: true, get: function () { return runtime_readers_1.readHabitSessionSummaryView; } });
+Object.defineProperty(exports, "readHabitRunReceiptView", { enumerable: true, get: function () { return runtime_readers_1.readHabitRunReceiptView; } });
+Object.defineProperty(exports, "readHabitRunView", { enumerable: true, get: function () { return runtime_readers_1.readHabitRunView; } });
 Object.defineProperty(exports, "readHabitView", { enumerable: true, get: function () { return runtime_readers_1.readHabitView; } });
 Object.defineProperty(exports, "readLogView", { enumerable: true, get: function () { return runtime_readers_1.readLogView; } });
 Object.defineProperty(exports, "readNotesView", { enumerable: true, get: function () { return runtime_readers_1.readNotesView; } });

package/dist/heart/mailbox/readers/runtime-readers.js

@@ -41,6 +41,10 @@ exports.readNotesView = readNotesView;
 exports.readFriendView = readFriendView;
 exports.readLogView = readLogView;
 exports.readHabitView = readHabitView;
+exports.readHabitRunView = readHabitRunView;
+exports.readHabitRunReceiptView = readHabitRunReceiptView;
+exports.readHabitSessionSummaryListView = readHabitSessionSummaryListView;
+exports.readHabitSessionSummaryView = readHabitSessionSummaryView;
 exports.readNeedsMeView = readNeedsMeView;
 exports.readDeskPrefs = readDeskPrefs;
 const fs = __importStar(require("fs"));
@@ -48,13 +52,17 @@ const path = __importStar(require("path"));
 const runtime_1 = require("../../../nerves/runtime");
 const habit_parser_1 = require("../../habits/habit-parser");
 const habit_runtime_state_1 = require("../../habits/habit-runtime-state");
+const habit_session_summary_1 = require("../../habits/habit-session-summary");
 const identity_1 = require("../../identity");
 const daemon_health_1 = require("../../daemon/daemon-health");
+const flight_recorder_1 = require("../../../arc/flight-recorder");
 const shared_1 = require("./shared");
 const agent_machine_1 = require("./agent-machine");
 const sessions_1 = require("./sessions");
 const record_paths_1 = require("../../../mind/record-paths");
 const NOTES_VIEW_LIMIT = 20;
+const DEFAULT_HABIT_RUN_LIMIT = 20;
+const MAX_HABIT_RUN_LIMIT = 100;
 /* v8 ignore start — defensive parsing of on-disk JSON, fallback branches are safety nets */
 function readCodingDeep(agentRoot) {
     const stateFilePath = path.join(agentRoot, "state", "coding", "sessions.json");
@@ -600,6 +608,85 @@ function readHabitView(agentRoot, options = {}) {
         items,
     };
 }
+function normalizeHabitRunLimit(limit) {
+    if (limit === undefined || !Number.isInteger(limit))
+        return DEFAULT_HABIT_RUN_LIMIT;
+    return Math.min(MAX_HABIT_RUN_LIMIT, Math.max(1, limit));
+}
+function summarizeHabitRunReceipt(receipt) {
+    return {
+        runId: receipt.runId,
+        habitName: receipt.habitName,
+        trigger: receipt.trigger,
+        startedAt: receipt.startedAt,
+        endedAt: receipt.endedAt,
+        outcome: receipt.outcome,
+        nextRunAt: receipt.nextRunAt,
+        permissionEnvelope: receipt.permissionEnvelope,
+        toolPolicy: receipt.toolPolicy,
+        producedRefs: receipt.producedRefs,
+        surfaceAttempts: receipt.surfaceAttempts,
+        errorCount: receipt.errors.length,
+        errors: receipt.errors,
+        receiptLocator: receipt.receiptLocator,
+        sessionLocator: receipt.sessionLocator,
+        runtimeStateLocator: receipt.runtimeStateLocator,
+    };
+}
+function readHabitRunView(agentRoot, options = {}) {
+    const limit = normalizeHabitRunLimit(options.limit);
+    const receipts = (0, flight_recorder_1.listHabitRunReceipts)(agentRoot);
+    const items = receipts.slice(0, limit).map(summarizeHabitRunReceipt);
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.mailbox_habit_runs_read",
+        message: "reading mailbox habit run receipts",
+        meta: { agentRoot, totalCount: receipts.length, limit, itemCount: items.length },
+    });
+    return {
+        totalCount: receipts.length,
+        limit,
+        items,
+    };
+}
+function readHabitRunReceiptView(agentRoot, runId) {
+    const receipt = (0, flight_recorder_1.readHabitRunReceipt)(agentRoot, runId);
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.mailbox_habit_run_receipt_read",
+        message: "reading mailbox habit run receipt",
+        meta: { agentRoot, runId, found: receipt !== null },
+    });
+    return receipt ? { receipt } : null;
+}
+function readHabitSessionSummaryListView(agentRoot, options = {}) {
+    const limit = normalizeHabitRunLimit(options.limit);
+    const receipts = (0, flight_recorder_1.listHabitRunReceipts)(agentRoot);
+    const items = receipts.slice(0, limit)
+        .map((receipt) => (0, habit_session_summary_1.readHabitSessionSummary)(agentRoot, { runId: receipt.runId }))
+        .filter((summary) => summary !== null);
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.mailbox_habit_run_summaries_read",
+        message: "reading mailbox habit run summaries",
+        meta: { agentRoot, totalCount: receipts.length, limit, itemCount: items.length },
+    });
+    return {
+        totalCount: receipts.length,
+        limit,
+        items,
+    };
+}
+function readHabitSessionSummaryView(agentRoot, selector) {
+    const summary = (0, habit_session_summary_1.readHabitSessionSummary)(agentRoot, selector);
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.mailbox_habit_run_summary_read",
+        message: "reading mailbox habit run summary",
+        meta: { agentRoot, runId: summary?.runId ?? null, habitName: summary?.habitName ?? selector.habitName ?? null, found: summary !== null },
+    });
+    return summary;
+}
 function readNeedsMeView(agentName, options = {}) {
     const bundlesRoot = options.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
     const now = options.now?.() ?? new Date();