@ouro.bot/cli 0.1.0-alpha.775 → 0.1.0-alpha.777

package/dist/senses/sanctuary-runtime.js

@@ -35,12 +35,14 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runWithSanctuaryToolReceiptCollection = runWithSanctuaryToolReceiptCollection;
 exports.loadSanctuarySabApiKey = loadSanctuarySabApiKey;
+exports.ensureSanctuarySourceRuntimeReady = ensureSanctuarySourceRuntimeReady;
 exports.createSanctuaryToolContext = createSanctuaryToolContext;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const node_crypto_1 = require("node:crypto");
 const node_async_hooks_1 = require("node:async_hooks");
 const identity_1 = require("../heart/identity");
+const machine_identity_1 = require("../heart/machine-identity");
 const runtime_credentials_1 = require("../heart/runtime-credentials");
 const unraid_restart_1 = require("../repertoire/unraid-restart");
 const steward_policy_1 = require("../heart/steward-policy");
@@ -55,6 +57,9 @@ const sanctuary_media_optimization_1 = require("./sanctuary-media-optimization")
 const sanctuaryToolReceipts = new node_async_hooks_1.AsyncLocalStorage();
 const sanctuaryToolGroundings = new node_async_hooks_1.AsyncLocalStorage();
 const acceptanceLedgerTails = new Map();
+function isSanctuaryExternalEventSource(source) {
+    return source === "sanctuary-health" || source === "sanctuary-usenet";
+}
 async function runWithSanctuaryToolReceiptCollection(operation, observer) {
     const digests = observer?.toolResultDigests ?? [];
     const groundings = observer?.toolGroundings ?? [];
@@ -118,6 +123,44 @@ function optionalJellyfin(config) {
         jellyfinFolderIds: requiredPair(jellyfin, "folderIds"),
     };
 }
+function readinessMissing(agentName, field) {
+    return new Error(`[human-required] Sanctuary ${field} is missing; run ouro connect --agent ${agentName} to attach the required machine credential.`);
+}
+function readinessRequired(config, agentName, field, label = field) {
+    const value = config[field];
+    if (typeof value !== "string" || value.trim().length === 0)
+        throw readinessMissing(agentName, label);
+    return value.trim();
+}
+function validateSanctuarySourceRuntime(agentName, source, config) {
+    readinessRequired(config, agentName, "unraidGraphqlUrl");
+    readinessRequired(config, agentName, "unraidReadApiKey");
+    if (config.jellyfin !== undefined) {
+        if (!config.jellyfin || typeof config.jellyfin !== "object" || Array.isArray(config.jellyfin))
+            throw readinessMissing(agentName, "jellyfin");
+        const jellyfin = config.jellyfin;
+        readinessRequired(jellyfin, agentName, "userId", "jellyfin.userId");
+        readinessRequired(jellyfin, agentName, "accessToken", "jellyfin.accessToken");
+        const folderIds = readinessRequired(jellyfin, agentName, "folderIds", "jellyfin.folderIds").split(",").map((value) => value.trim());
+        if (folderIds.length !== 2 || new Set(folderIds).size !== 2 || folderIds.some((value) => value.length === 0))
+            throw readinessMissing(agentName, "jellyfin.folderIds");
+    }
+    if (source === "sanctuary-usenet")
+        readinessRequired(config, agentName, "sabnzbdApiKey");
+}
+async function ensureSanctuarySourceRuntimeReady(agentName, source) {
+    if (!isSanctuaryExternalEventSource(source))
+        return;
+    let current = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agentName);
+    if (!current.ok) {
+        const machine = (0, machine_identity_1.loadOrCreateMachineIdentity)();
+        current = await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(agentName, machine.machineId, { preserveCachedOnFailure: true });
+    }
+    if (!current.ok) {
+        throw new Error(`[agent-runnable] Sanctuary machine runtime credentials are unavailable; retry the machine credential refresh for agent ${agentName} after its vault is unlocked.`);
+    }
+    validateSanctuarySourceRuntime(agentName, source, current.config);
+}
 function persistAttempt(filePath, attempt) {
     fs.mkdirSync(path.dirname(filePath), { recursive: true });
     const temporary = `${filePath}.tmp-${process.pid}-${(0, node_crypto_1.randomUUID)()}`;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.775",
+  "version": "0.1.0-alpha.777",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.775",
+      "version": "0.1.0-alpha.777",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",
@@ -1056,29 +1056,43 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/@humanfs/core": {
-      "version": "0.19.1",
-      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
-      "integrity": "sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==",
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.2.tgz",
+      "integrity": "sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA==",
       "dev": true,
       "license": "Apache-2.0",
+      "dependencies": {
+        "@humanfs/types": "^0.15.0"
+      },
       "engines": {
         "node": ">=18.18.0"
       }
     },
     "node_modules/@humanfs/node": {
-      "version": "0.16.7",
-      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.7.tgz",
-      "integrity": "sha512-/zUx+yOsIrG4Y43Eh2peDeKCxlRt/gET6aHfaKpuq267qXdYDFViVHfMaLyygZOnl0kGWxFIgsBy8QFuTLUXEQ==",
+      "version": "0.16.8",
+      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.8.tgz",
+      "integrity": "sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@humanfs/core": "^0.19.1",
+        "@humanfs/core": "^0.19.2",
+        "@humanfs/types": "^0.15.0",
         "@humanwhocodes/retry": "^0.4.0"
       },
       "engines": {
         "node": ">=18.18.0"
       }
     },
+    "node_modules/@humanfs/types": {
+      "version": "0.15.0",
+      "resolved": "https://registry.npmjs.org/@humanfs/types/-/types-0.15.0.tgz",
+      "integrity": "sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18.18.0"
+      }
+    },
     "node_modules/@humanwhocodes/module-importer": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz",
@@ -4001,9 +4015,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.5",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
-      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
+      "version": "3.1.7",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
+      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
       "funding": [
         {
           "type": "github",
@@ -6600,12 +6614,13 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.15.2",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
-      "integrity": "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==",
+      "version": "6.16.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
+      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
       "license": "BSD-3-Clause",
       "dependencies": {
-        "side-channel": "^1.1.0"
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
       },
       "engines": {
         "node": ">=0.6"
@@ -7069,14 +7084,14 @@
       }
     },
     "node_modules/side-channel": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
-      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
       "license": "MIT",
       "dependencies": {
         "es-errors": "^1.3.0",
-        "object-inspect": "^1.13.3",
-        "side-channel-list": "^1.0.0",
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
         "side-channel-map": "^1.0.1",
         "side-channel-weakmap": "^1.0.2"
       },
@@ -7088,13 +7103,13 @@
       }
     },
     "node_modules/side-channel-list": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
-      "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
       "license": "MIT",
       "dependencies": {
         "es-errors": "^1.3.0",
-        "object-inspect": "^1.13.3"
+        "object-inspect": "^1.13.4"
       },
       "engines": {
         "node": ">= 0.4"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.775",
+  "version": "0.1.0-alpha.777",
   "engines": {
     "node": ">=22"
   },