@ouro.bot/cli 0.1.0-alpha.81 → 0.1.0-alpha.810

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (623) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +154 -23
  3. package/RepairGuide.ouro/agent.json +5 -0
  4. package/RepairGuide.ouro/psyche/IDENTITY.md +19 -0
  5. package/RepairGuide.ouro/psyche/SOUL.md +55 -0
  6. package/RepairGuide.ouro/skills/diagnose-broken-remote.md +63 -0
  7. package/RepairGuide.ouro/skills/diagnose-stacked-typed-issues.md +35 -0
  8. package/RepairGuide.ouro/skills/diagnose-sync-blocked.md +54 -0
  9. package/RepairGuide.ouro/skills/diagnose-vault-expired.md +60 -0
  10. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/agent.json +4 -2
  11. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/SOUL.md +2 -2
  12. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-serpent.md +1 -1
  13. package/assets/bluebubbles-host +264 -0
  14. package/changelog.json +5177 -16
  15. package/deploy/unraid/Dockerfile +48 -0
  16. package/deploy/unraid/README.txt +3032 -0
  17. package/deploy/unraid/audit-container-spec.sh +4 -0
  18. package/deploy/unraid/container-runtime.json +1 -0
  19. package/deploy/unraid/docker-man-template-transaction.mjs +526 -0
  20. package/deploy/unraid/docker-man-template-xml.cjs +105 -0
  21. package/deploy/unraid/migrate-sanctuary-bundle.mjs +60 -0
  22. package/deploy/unraid/ouro-events/bootstrap-spool.sh +92 -0
  23. package/deploy/unraid/ouro-events/emit-event.mjs +310 -0
  24. package/deploy/unraid/ouro-events/emit-usenet-event.sh +54 -0
  25. package/deploy/unraid/ouro-events/install-usenet-guard.sh +435 -0
  26. package/deploy/unraid/ouro-events/usenet-health.sh +176 -0
  27. package/deploy/unraid/sanctuary-acceptance-adapter.sh +43 -0
  28. package/deploy/unraid/sanctuary-acceptance-contract.json +198 -0
  29. package/deploy/unraid/sanctuary-acceptance-harness.sh +23 -0
  30. package/deploy/unraid/sanctuary-deployment-target.mjs +709 -0
  31. package/deploy/unraid/sanctuary-safe-rename.py +24 -0
  32. package/deploy/unraid/sanctuary-unit16-host-broker.mjs +2030 -0
  33. package/deploy/unraid/sanctuary-unit16-run.sh +560 -0
  34. package/deploy/unraid/sanctuary-unit18-target-audit.sh +27 -0
  35. package/deploy/unraid/sanctuary.ouro/agent.json +24 -0
  36. package/deploy/unraid/sanctuary.ouro/arc/README.md +3 -0
  37. package/deploy/unraid/sanctuary.ouro/bundle-meta.json +5 -0
  38. package/deploy/unraid/sanctuary.ouro/habits/sanctuary-health.md +8 -0
  39. package/deploy/unraid/sanctuary.ouro/provider-readiness.json +11 -0
  40. package/deploy/unraid/sanctuary.ouro/psyche/ASPIRATIONS.md +5 -0
  41. package/deploy/unraid/sanctuary.ouro/psyche/IDENTITY.md +5 -0
  42. package/deploy/unraid/sanctuary.ouro/psyche/LORE.md +11 -0
  43. package/deploy/unraid/sanctuary.ouro/psyche/SOUL.md +25 -0
  44. package/deploy/unraid/sanctuary.ouro/psyche/TACIT.md +11 -0
  45. package/deploy/unraid/sanctuary.ouro/state/policy/steward.json +7 -0
  46. package/deploy/unraid/sanctuary.ouro/tool-profiles.json +23 -0
  47. package/deploy/unraid/sanctuary.xml +27 -0
  48. package/dist/a2a/card.js +57 -0
  49. package/dist/a2a/client.js +180 -0
  50. package/dist/a2a/config.js +50 -0
  51. package/dist/a2a/delegation-stores.js +56 -0
  52. package/dist/a2a/did-resolution.js +93 -0
  53. package/dist/a2a/identity.js +170 -0
  54. package/dist/a2a/inbound-share.js +107 -0
  55. package/dist/a2a/mission-result-wire.js +196 -0
  56. package/dist/a2a/onboarding.js +115 -0
  57. package/dist/a2a/pin-store.js +132 -0
  58. package/dist/a2a/seen-ledger.js +120 -0
  59. package/dist/a2a/server.js +604 -0
  60. package/dist/a2a/task-store.js +69 -0
  61. package/dist/a2a/transport.js +45 -0
  62. package/dist/a2a/types.js +3 -0
  63. package/dist/arc/attention-types.js +8 -0
  64. package/dist/arc/cares.js +360 -0
  65. package/dist/arc/episodes.js +118 -0
  66. package/dist/arc/evolution.js +490 -0
  67. package/dist/arc/flight-recorder.js +1034 -0
  68. package/dist/arc/intentions.js +134 -0
  69. package/dist/arc/json-store.js +117 -0
  70. package/dist/arc/obligations.js +386 -0
  71. package/dist/arc/packets.js +336 -0
  72. package/dist/arc/presence.js +185 -0
  73. package/dist/arc/task-lifecycle.js +57 -0
  74. package/dist/commerce/store.js +755 -0
  75. package/dist/commerce/types.js +3 -0
  76. package/dist/heart/active-work.js +820 -29
  77. package/dist/heart/agent-entry.js +252 -3
  78. package/dist/heart/approval-files.js +113 -0
  79. package/dist/heart/approval-store.js +950 -0
  80. package/dist/heart/attachments/image-normalize.js +194 -0
  81. package/dist/heart/attachments/materialize.js +97 -0
  82. package/dist/heart/attachments/originals.js +88 -0
  83. package/dist/heart/attachments/render.js +29 -0
  84. package/dist/heart/attachments/sources/bluebubbles.js +156 -0
  85. package/dist/heart/attachments/sources/cli-local-file.js +78 -0
  86. package/dist/heart/attachments/sources/index.js +18 -0
  87. package/dist/heart/attachments/sources/telegram.js +71 -0
  88. package/dist/heart/attachments/store.js +132 -0
  89. package/dist/heart/attachments/types.js +93 -0
  90. package/dist/heart/auth/auth-flow.js +495 -0
  91. package/dist/heart/autonomy-budget.js +478 -0
  92. package/dist/heart/awaiting/await-alert.js +148 -0
  93. package/dist/heart/awaiting/await-expiry.js +143 -0
  94. package/dist/heart/awaiting/await-loader.js +91 -0
  95. package/dist/heart/awaiting/await-parser.js +149 -0
  96. package/dist/heart/awaiting/await-runtime-state.js +100 -0
  97. package/dist/heart/awaiting/await-scheduler.js +382 -0
  98. package/dist/heart/background-operations.js +281 -0
  99. package/dist/heart/bridges/manager.js +137 -17
  100. package/dist/heart/bridges/store.js +14 -2
  101. package/dist/heart/bundle-state.js +168 -0
  102. package/dist/heart/commitments.js +64 -18
  103. package/dist/heart/config-registry.js +331 -0
  104. package/dist/heart/config.js +142 -129
  105. package/dist/heart/context-loss-gauntlet.js +387 -0
  106. package/dist/heart/context-loss-sentinel.js +1157 -0
  107. package/dist/heart/core.js +2105 -574
  108. package/dist/heart/cross-chat-delivery.js +9 -22
  109. package/dist/heart/daemon/agent-config-check.js +451 -0
  110. package/dist/heart/daemon/agent-discovery.js +185 -3
  111. package/dist/heart/daemon/agent-service.js +542 -0
  112. package/dist/heart/daemon/agentic-repair.js +547 -0
  113. package/dist/heart/daemon/await-private-wake.js +59 -0
  114. package/dist/heart/daemon/bluebubbles-cli-integration.js +71 -0
  115. package/dist/heart/daemon/bluebubbles-health-diagnostics.js +122 -0
  116. package/dist/heart/daemon/bluebubbles-host-protocol.js +433 -0
  117. package/dist/heart/daemon/bluebubbles-host.js +273 -0
  118. package/dist/heart/daemon/boot-sync-probe.js +197 -0
  119. package/dist/heart/daemon/cadence.js +180 -0
  120. package/dist/heart/daemon/cli-defaults.js +854 -0
  121. package/dist/heart/daemon/cli-desk.js +322 -0
  122. package/dist/heart/daemon/cli-exec.js +8822 -0
  123. package/dist/heart/daemon/cli-help.js +716 -0
  124. package/dist/heart/daemon/cli-parse.js +2771 -0
  125. package/dist/heart/daemon/cli-render-doctor.js +57 -0
  126. package/dist/heart/daemon/cli-render.js +777 -0
  127. package/dist/heart/daemon/cli-types.js +8 -0
  128. package/dist/heart/daemon/connect-bay.js +323 -0
  129. package/dist/heart/daemon/container-credential-bootstrap.js +273 -0
  130. package/dist/heart/daemon/container-healthcheck.js +112 -0
  131. package/dist/heart/daemon/container-runtime.js +97 -0
  132. package/dist/heart/daemon/container-spec-auditor-main.js +170 -0
  133. package/dist/heart/daemon/container-spec-auditor.js +236 -0
  134. package/dist/heart/daemon/daemon-bootstrap-startup.js +115 -0
  135. package/dist/heart/daemon/daemon-cli.js +29 -2317
  136. package/dist/heart/daemon/daemon-entry.js +921 -11
  137. package/dist/heart/daemon/daemon-health.js +186 -0
  138. package/dist/heart/daemon/daemon-rollup.js +57 -0
  139. package/dist/heart/daemon/daemon-runtime-sync.js +88 -13
  140. package/dist/heart/daemon/daemon-tombstone.js +236 -0
  141. package/dist/heart/daemon/daemon.js +2073 -104
  142. package/dist/heart/daemon/dns-workflow.js +394 -0
  143. package/dist/heart/daemon/doctor-types.js +8 -0
  144. package/dist/heart/daemon/doctor.js +1755 -0
  145. package/dist/heart/daemon/freshness.js +345 -0
  146. package/dist/heart/daemon/habit-private-wake.js +61 -0
  147. package/dist/heart/daemon/health-monitor.js +142 -11
  148. package/dist/heart/daemon/hooks/agent-config-v2.js +33 -0
  149. package/dist/heart/daemon/hooks/bundle-meta.js +135 -1
  150. package/dist/heart/daemon/http-health-probe.js +80 -0
  151. package/dist/heart/daemon/human-command-screens.js +234 -0
  152. package/dist/heart/daemon/human-readiness.js +114 -0
  153. package/dist/heart/daemon/inner-status.js +78 -0
  154. package/dist/heart/daemon/interactive-repair.js +394 -0
  155. package/dist/heart/daemon/launchd.js +37 -8
  156. package/dist/heart/daemon/log-tailer.js +79 -10
  157. package/dist/heart/daemon/logs-prune.js +132 -0
  158. package/dist/heart/daemon/mcp-canary.js +524 -0
  159. package/dist/heart/daemon/message-router.js +65 -5
  160. package/dist/heart/daemon/migrate-to-desk.js +848 -0
  161. package/dist/heart/daemon/os-cron-deps.js +135 -0
  162. package/dist/heart/daemon/os-cron.js +22 -14
  163. package/dist/heart/daemon/ouro-bot-entry.js +4 -2
  164. package/dist/heart/daemon/ouro-entry.js +3 -1
  165. package/dist/heart/daemon/plugin-cli.js +432 -0
  166. package/dist/heart/daemon/process-manager.js +733 -61
  167. package/dist/heart/daemon/provider-discovery.js +137 -0
  168. package/dist/heart/daemon/provider-ping-progress.js +83 -0
  169. package/dist/heart/daemon/prunable-bundle.js +144 -0
  170. package/dist/heart/daemon/pulse.js +511 -0
  171. package/dist/heart/daemon/readiness-repair.js +365 -0
  172. package/dist/heart/daemon/run-hooks.js +2 -0
  173. package/dist/heart/daemon/runtime-logging.js +47 -14
  174. package/dist/heart/daemon/runtime-metadata.js +2 -30
  175. package/dist/heart/daemon/runtime-mode.js +13 -2
  176. package/dist/heart/daemon/safe-mode.js +161 -0
  177. package/dist/heart/daemon/sanctuary-acceptance-adapter.js +2609 -0
  178. package/dist/heart/daemon/sanctuary-acceptance-harness.js +1866 -0
  179. package/dist/heart/daemon/sanctuary-acceptance-marker.js +267 -0
  180. package/dist/heart/daemon/sanctuary-acceptance-scenarios.js +976 -0
  181. package/dist/heart/daemon/sanctuary-bundle-migration.js +728 -0
  182. package/dist/heart/daemon/sanctuary-package-management.js +103 -0
  183. package/dist/heart/daemon/sanctuary-scheduler-liveness.js +227 -0
  184. package/dist/heart/daemon/sanctuary-scheduler-origin.js +132 -0
  185. package/dist/heart/daemon/sense-manager.js +689 -48
  186. package/dist/heart/daemon/session-id-resolver.js +131 -0
  187. package/dist/heart/daemon/skill-management-installer.js +1 -1
  188. package/dist/heart/daemon/socket-client.js +180 -12
  189. package/dist/heart/daemon/stale-bundle-prune.js +113 -0
  190. package/dist/heart/daemon/startup-tui.js +339 -0
  191. package/dist/heart/daemon/supercronic-supervisor.js +282 -0
  192. package/dist/heart/daemon/task-scheduler.js +117 -39
  193. package/dist/heart/daemon/terminal-ui.js +499 -0
  194. package/dist/heart/daemon/thoughts.js +138 -54
  195. package/dist/heart/daemon/up-progress.js +366 -0
  196. package/dist/heart/daemon/vault-items.js +56 -0
  197. package/dist/heart/delegation.js +1 -4
  198. package/dist/heart/external-events/router.js +1414 -0
  199. package/dist/heart/frontend-approval-runtime.js +432 -0
  200. package/dist/heart/frontend-journal.js +215 -0
  201. package/dist/heart/frontend-session-service.js +237 -0
  202. package/dist/heart/frontend-socket-client.js +154 -0
  203. package/dist/heart/frontend-socket.js +400 -0
  204. package/dist/heart/habits/habit-cancel.js +810 -0
  205. package/dist/heart/habits/habit-lifecycle.js +1327 -0
  206. package/dist/heart/habits/habit-migration.js +194 -0
  207. package/dist/heart/habits/habit-parser.js +278 -0
  208. package/dist/heart/habits/habit-runtime-state.js +93 -0
  209. package/dist/heart/habits/habit-scheduler.js +653 -0
  210. package/dist/heart/habits/habit-session-summary.js +318 -0
  211. package/dist/heart/habits/habit-session.js +636 -0
  212. package/dist/heart/{daemon → hatch}/hatch-flow.js +55 -62
  213. package/dist/heart/{daemon → hatch}/hatch-specialist.js +6 -8
  214. package/dist/heart/{daemon → hatch}/specialist-prompt.js +12 -9
  215. package/dist/heart/{daemon → hatch}/specialist-tools.js +53 -18
  216. package/dist/heart/identity.js +184 -59
  217. package/dist/heart/kept-notes.js +289 -0
  218. package/dist/heart/kicks.js +1 -1
  219. package/dist/heart/machine-identity.js +161 -0
  220. package/dist/heart/mail-import-discovery.js +356 -0
  221. package/dist/heart/mailbox/mailbox-http-hooks.js +98 -0
  222. package/dist/heart/mailbox/mailbox-http-response.js +7 -0
  223. package/dist/heart/mailbox/mailbox-http-routes.js +398 -0
  224. package/dist/heart/mailbox/mailbox-http-static.js +103 -0
  225. package/dist/heart/mailbox/mailbox-http-transport.js +129 -0
  226. package/dist/heart/mailbox/mailbox-http.js +99 -0
  227. package/dist/heart/mailbox/mailbox-read.js +39 -0
  228. package/dist/heart/mailbox/mailbox-types.js +27 -0
  229. package/dist/heart/mailbox/mailbox-view.js +197 -0
  230. package/dist/heart/mailbox/readers/agent-machine.js +428 -0
  231. package/dist/heart/mailbox/readers/continuity-readers.js +329 -0
  232. package/dist/heart/mailbox/readers/mail.js +375 -0
  233. package/dist/heart/mailbox/readers/runtime-readers.js +823 -0
  234. package/dist/heart/mailbox/readers/sessions.js +231 -0
  235. package/dist/heart/mailbox/readers/shared.js +111 -0
  236. package/dist/heart/mcp/mcp-server.js +696 -0
  237. package/dist/heart/migrate-config.js +100 -0
  238. package/dist/heart/model-capabilities.js +11 -0
  239. package/dist/heart/orientation-frame.js +345 -0
  240. package/dist/heart/platform.js +81 -0
  241. package/dist/heart/primitives.js +1 -1
  242. package/dist/heart/private-runtime/decision-renderer.js +158 -0
  243. package/dist/heart/private-runtime/index.js +18 -0
  244. package/dist/heart/private-runtime/ledger.js +221 -0
  245. package/dist/heart/private-runtime/policy.js +252 -0
  246. package/dist/heart/private-runtime/types.js +2 -0
  247. package/dist/heart/progress-story.js +1 -1
  248. package/dist/heart/provider-attempt.js +137 -0
  249. package/dist/heart/provider-binding-resolver.js +273 -0
  250. package/dist/heart/provider-credentials.js +449 -0
  251. package/dist/heart/provider-failover.js +311 -0
  252. package/dist/heart/provider-models.js +96 -0
  253. package/dist/heart/provider-ping.js +265 -0
  254. package/dist/heart/provider-readiness-cache.js +119 -0
  255. package/dist/heart/provider-visibility.js +188 -0
  256. package/dist/heart/providers/anthropic-token.js +131 -0
  257. package/dist/heart/providers/anthropic.js +173 -60
  258. package/dist/heart/providers/azure.js +23 -11
  259. package/dist/heart/providers/error-classification.js +127 -0
  260. package/dist/heart/providers/github-copilot.js +34 -38
  261. package/dist/heart/providers/minimax-vlm.js +189 -0
  262. package/dist/heart/providers/minimax.js +26 -8
  263. package/dist/heart/providers/openai-codex-token.js +349 -0
  264. package/dist/heart/providers/openai-codex.js +55 -40
  265. package/dist/heart/providers/openai-compatible.js +177 -0
  266. package/dist/heart/run-ledger.js +247 -0
  267. package/dist/heart/runtime-capability-check.js +170 -0
  268. package/dist/heart/runtime-credentials.js +607 -0
  269. package/dist/heart/runtime-cwd.js +87 -0
  270. package/dist/heart/sense-truth.js +22 -4
  271. package/dist/heart/session-activity.js +92 -24
  272. package/dist/heart/session-events.js +1433 -0
  273. package/dist/heart/session-playback-cli-main.js +5 -0
  274. package/dist/heart/session-playback-cli.js +36 -0
  275. package/dist/heart/session-playback.js +231 -0
  276. package/dist/heart/session-redaction-repair-cli-main.js +31 -0
  277. package/dist/heart/session-redaction-repair.js +543 -0
  278. package/dist/heart/session-stats-cli-main.js +5 -0
  279. package/dist/heart/session-stats.js +182 -0
  280. package/dist/heart/session-transcript.js +133 -0
  281. package/dist/heart/start-of-turn-packet.js +372 -0
  282. package/dist/heart/steward-policy.js +302 -0
  283. package/dist/heart/streaming.js +604 -207
  284. package/dist/heart/structured-output.js +196 -0
  285. package/dist/heart/sync-classification.js +176 -0
  286. package/dist/heart/sync.js +449 -0
  287. package/dist/heart/target-resolution.js +11 -7
  288. package/dist/heart/tempo.js +93 -0
  289. package/dist/heart/temporal-view.js +41 -0
  290. package/dist/heart/timeouts.js +101 -0
  291. package/dist/heart/tool-activity-callbacks.js +59 -0
  292. package/dist/heart/tool-approval.js +342 -0
  293. package/dist/heart/tool-description.js +155 -0
  294. package/dist/heart/tool-friction.js +55 -0
  295. package/dist/heart/tool-loop.js +200 -0
  296. package/dist/heart/turn-context.js +482 -0
  297. package/dist/heart/turn-execution-lease.js +30 -0
  298. package/dist/heart/{daemon → versioning}/ouro-bot-global-installer.js +6 -5
  299. package/dist/heart/{daemon → versioning}/ouro-bot-wrapper.js +1 -1
  300. package/dist/heart/versioning/ouro-path-installer.js +432 -0
  301. package/dist/heart/versioning/ouro-recovery-launcher.js +76 -0
  302. package/dist/heart/versioning/ouro-version-manager.js +409 -0
  303. package/dist/heart/{daemon → versioning}/staged-restart.js +40 -8
  304. package/dist/heart/{daemon → versioning}/update-checker.js +6 -1
  305. package/dist/heart/versioning/update-hooks.js +154 -0
  306. package/dist/heart/versioning/version-intent.js +114 -0
  307. package/dist/heart/work-card.js +380 -0
  308. package/dist/mailbox-ui/assets/index-Du_9G9WO.css +1 -0
  309. package/dist/mailbox-ui/assets/index-J8zDwHmE.js +1 -0
  310. package/dist/mailbox-ui/assets/vendor-CcN1XpQ9.js +61 -0
  311. package/dist/mailbox-ui/index.html +16 -0
  312. package/dist/mailroom/attention.js +167 -0
  313. package/dist/mailroom/autonomy.js +209 -0
  314. package/dist/mailroom/blob-store.js +889 -0
  315. package/dist/mailroom/body-cache.js +61 -0
  316. package/dist/mailroom/cache-sync-cli.js +58 -0
  317. package/dist/mailroom/core.js +803 -0
  318. package/dist/mailroom/entry.js +160 -0
  319. package/dist/mailroom/file-store.js +568 -0
  320. package/dist/mailroom/hosted-cache-sync.js +384 -0
  321. package/dist/mailroom/mbox-import.js +393 -0
  322. package/dist/mailroom/migration.js +164 -0
  323. package/dist/mailroom/outbound.js +380 -0
  324. package/dist/mailroom/policy.js +263 -0
  325. package/dist/mailroom/reader.js +292 -0
  326. package/dist/mailroom/search-cache.js +513 -0
  327. package/dist/mailroom/search-relevance.js +319 -0
  328. package/dist/mailroom/smtp-ingress.js +176 -0
  329. package/dist/mailroom/source-state.js +176 -0
  330. package/dist/mailroom/thread.js +109 -0
  331. package/dist/mailroom/travel-extract.js +89 -0
  332. package/dist/mind/bundle-manifest.js +24 -2
  333. package/dist/mind/context.js +279 -111
  334. package/dist/mind/desk-section.js +362 -0
  335. package/dist/mind/diary-integrity.js +60 -0
  336. package/dist/mind/{memory.js → diary.js} +68 -77
  337. package/dist/mind/embedding-provider.js +60 -0
  338. package/dist/mind/file-state.js +179 -0
  339. package/dist/mind/{associative-recall.js → note-search.js} +47 -58
  340. package/dist/mind/obligation-steering.js +227 -0
  341. package/dist/mind/pending.js +34 -8
  342. package/dist/mind/prompt-budget.js +479 -0
  343. package/dist/mind/prompt-refresh.js +3 -2
  344. package/dist/mind/prompt.js +1059 -187
  345. package/dist/mind/provenance-trust.js +26 -0
  346. package/dist/mind/record-paths.js +312 -0
  347. package/dist/mind/scrutiny.js +173 -0
  348. package/dist/mind/session-transaction.js +564 -0
  349. package/dist/nerves/cli-logging.js +7 -1
  350. package/dist/nerves/coverage/audit-rules.js +15 -6
  351. package/dist/nerves/coverage/audit.js +28 -2
  352. package/dist/nerves/coverage/cli.js +1 -1
  353. package/dist/nerves/coverage/contract.js +5 -5
  354. package/dist/nerves/coverage/file-completeness.js +139 -5
  355. package/dist/nerves/coverage/run-artifacts.js +55 -35
  356. package/dist/nerves/coverage/source-scanner.js +4 -4
  357. package/dist/nerves/event-buffer.js +111 -0
  358. package/dist/nerves/index.js +293 -9
  359. package/dist/nerves/observation.js +20 -0
  360. package/dist/nerves/redact.js +79 -0
  361. package/dist/nerves/review/cli-main.js +5 -0
  362. package/dist/nerves/review/cli.js +156 -0
  363. package/dist/nerves/review/core.js +159 -0
  364. package/dist/nerves/runtime.js +17 -1
  365. package/dist/repertoire/ado-client.js +15 -56
  366. package/dist/repertoire/ado-semantic.js +16 -10
  367. package/dist/repertoire/api-client.js +97 -0
  368. package/dist/repertoire/bitwarden-store.js +1045 -0
  369. package/dist/repertoire/bundle-templates.js +71 -0
  370. package/dist/repertoire/bw-installer.js +180 -0
  371. package/dist/repertoire/coding/codex-jsonl.js +64 -0
  372. package/dist/repertoire/coding/context-pack.js +331 -0
  373. package/dist/repertoire/coding/feedback.js +218 -30
  374. package/dist/repertoire/coding/index.js +15 -3
  375. package/dist/repertoire/coding/manager.js +166 -10
  376. package/dist/repertoire/coding/spawner.js +58 -11
  377. package/dist/repertoire/coding/tools.js +242 -14
  378. package/dist/repertoire/coding/workbench-client.js +272 -0
  379. package/dist/repertoire/coding/workbench-manager.js +346 -0
  380. package/dist/repertoire/commerce-errors.js +109 -0
  381. package/dist/repertoire/commerce-self-test.js +156 -0
  382. package/dist/repertoire/credential-access.js +178 -0
  383. package/dist/repertoire/desk/classifier.js +362 -0
  384. package/dist/repertoire/duffel-client.js +185 -0
  385. package/dist/repertoire/github-client.js +14 -55
  386. package/dist/repertoire/graph-client.js +11 -52
  387. package/dist/repertoire/guardrails.js +811 -18
  388. package/dist/repertoire/mcp-client.js +44 -3
  389. package/dist/repertoire/mcp-manager.js +331 -27
  390. package/dist/repertoire/mcp-tools.js +83 -0
  391. package/dist/repertoire/plugin-mcp.js +175 -0
  392. package/dist/repertoire/plugins.js +253 -0
  393. package/dist/repertoire/relationship-authorization.js +194 -0
  394. package/dist/repertoire/shell-sessions.js +133 -0
  395. package/dist/repertoire/skills.js +48 -4
  396. package/dist/repertoire/stripe-client.js +131 -0
  397. package/dist/repertoire/tool-arguments.js +148 -0
  398. package/dist/repertoire/tool-results.js +29 -0
  399. package/dist/repertoire/tools-a2a.js +699 -0
  400. package/dist/repertoire/tools-attachments.js +322 -0
  401. package/dist/repertoire/tools-awaiting.js +575 -0
  402. package/dist/repertoire/tools-base.js +82 -1139
  403. package/dist/repertoire/tools-bluebubbles.js +2 -0
  404. package/dist/repertoire/tools-bridge.js +144 -0
  405. package/dist/repertoire/tools-bundle.js +993 -0
  406. package/dist/repertoire/tools-commerce.js +253 -0
  407. package/dist/repertoire/tools-config.js +186 -0
  408. package/dist/repertoire/tools-continuity.js +575 -0
  409. package/dist/repertoire/tools-credential.js +383 -0
  410. package/dist/repertoire/tools-evolution.js +527 -0
  411. package/dist/repertoire/tools-files.js +344 -0
  412. package/dist/repertoire/tools-flight.js +290 -0
  413. package/dist/repertoire/tools-flow.js +119 -0
  414. package/dist/repertoire/tools-github.js +3 -8
  415. package/dist/repertoire/tools-habits.js +103 -0
  416. package/dist/repertoire/tools-mail.js +1828 -0
  417. package/dist/repertoire/tools-notes.js +485 -0
  418. package/dist/repertoire/tools-obligations.js +182 -0
  419. package/dist/repertoire/tools-orientation.js +31 -0
  420. package/dist/repertoire/tools-record.js +482 -0
  421. package/dist/repertoire/tools-rsvp.js +139 -0
  422. package/dist/repertoire/tools-runtime.js +150 -0
  423. package/dist/repertoire/tools-session.js +1108 -0
  424. package/dist/repertoire/tools-shell.js +133 -0
  425. package/dist/repertoire/tools-steward-policy.js +95 -0
  426. package/dist/repertoire/tools-stripe.js +224 -0
  427. package/dist/repertoire/tools-surface.js +369 -0
  428. package/dist/repertoire/tools-teams.js +12 -39
  429. package/dist/repertoire/tools-telegram-contacts.js +37 -0
  430. package/dist/repertoire/tools-travel.js +125 -0
  431. package/dist/repertoire/tools-trip.js +982 -0
  432. package/dist/repertoire/tools-unraid.js +484 -0
  433. package/dist/repertoire/tools-user-profile.js +146 -0
  434. package/dist/repertoire/tools-vault.js +40 -0
  435. package/dist/repertoire/tools-voice.js +145 -0
  436. package/dist/repertoire/tools.js +377 -80
  437. package/dist/repertoire/travel-api-client.js +360 -0
  438. package/dist/repertoire/unraid-client.js +155 -0
  439. package/dist/repertoire/unraid-restart.js +212 -0
  440. package/dist/repertoire/user-profile.js +131 -0
  441. package/dist/repertoire/vault-setup.js +246 -0
  442. package/dist/repertoire/vault-unlock.js +628 -0
  443. package/dist/rsvp/aisleplanner-client.js +354 -0
  444. package/dist/rsvp/cli.js +926 -0
  445. package/dist/rsvp/config.js +327 -0
  446. package/dist/rsvp/cutover.js +433 -0
  447. package/dist/rsvp/diagnostics.js +232 -0
  448. package/dist/rsvp/diff-renderer.js +176 -0
  449. package/dist/rsvp/habit-policy.js +110 -0
  450. package/dist/rsvp/habit-stage.js +123 -0
  451. package/dist/rsvp/incident-bundle.js +97 -0
  452. package/dist/rsvp/migration.js +204 -0
  453. package/dist/rsvp/native-habit-runner.js +630 -0
  454. package/dist/rsvp/outbound-state.js +628 -0
  455. package/dist/rsvp/query.js +118 -0
  456. package/dist/rsvp/replay.js +233 -0
  457. package/dist/rsvp/snapshot.js +232 -0
  458. package/dist/rsvp/spend-ledger.js +175 -0
  459. package/dist/scripts/claude-code-hook.js +41 -0
  460. package/dist/scripts/claude-code-stop-hook.js +47 -0
  461. package/dist/senses/a2a-entry.js +115 -0
  462. package/dist/senses/acp-server.js +386 -0
  463. package/dist/senses/attention-queue.js +186 -0
  464. package/dist/senses/await-turn-message.js +58 -0
  465. package/dist/senses/bluebubbles/active-turns.js +216 -0
  466. package/dist/senses/bluebubbles/attachment-cache.js +53 -0
  467. package/dist/senses/bluebubbles/attachment-download.js +137 -0
  468. package/dist/senses/{bluebubbles-client.js → bluebubbles/client.js} +355 -40
  469. package/dist/senses/bluebubbles/context-packet.js +207 -0
  470. package/dist/senses/bluebubbles/context-smoke.js +144 -0
  471. package/dist/senses/bluebubbles/entry.js +90 -0
  472. package/dist/senses/{bluebubbles-inbound-log.js → bluebubbles/inbound-log.js} +21 -3
  473. package/dist/senses/bluebubbles/index.js +3839 -0
  474. package/dist/senses/bluebubbles/latest-turn.js +311 -0
  475. package/dist/senses/{bluebubbles-media.js → bluebubbles/media.js} +121 -71
  476. package/dist/senses/{bluebubbles-model.js → bluebubbles/model.js} +159 -28
  477. package/dist/senses/{bluebubbles-mutation-log.js → bluebubbles/mutation-log.js} +24 -13
  478. package/dist/senses/bluebubbles/outbound-state.js +308 -0
  479. package/dist/senses/bluebubbles/processed-log.js +133 -0
  480. package/dist/senses/bluebubbles/reaction-policy.js +47 -0
  481. package/dist/senses/bluebubbles/replay.js +284 -0
  482. package/dist/senses/{bluebubbles-runtime-state.js → bluebubbles/runtime-state.js} +30 -2
  483. package/dist/senses/bluebubbles/semantic-receipts.js +1986 -0
  484. package/dist/senses/{bluebubbles-session-cleanup.js → bluebubbles/session-cleanup.js} +1 -1
  485. package/dist/senses/bluebubbles/webhook-registration.js +228 -0
  486. package/dist/senses/bluebubbles-meta-guard.js +39 -0
  487. package/dist/senses/cli/bracketed-paste.js +82 -0
  488. package/dist/senses/cli/image-paste.js +287 -0
  489. package/dist/senses/cli/image-ref-navigation.js +75 -0
  490. package/dist/senses/cli/ink-app.js +156 -0
  491. package/dist/senses/cli/inline-diff.js +64 -0
  492. package/dist/senses/cli/input-keys.js +174 -0
  493. package/dist/senses/cli/kill-ring.js +86 -0
  494. package/dist/senses/cli/message-list.js +51 -0
  495. package/dist/senses/cli/ouro-tui.js +607 -0
  496. package/dist/senses/cli/spinner-imperative.js +135 -0
  497. package/dist/senses/cli/spinner.js +101 -0
  498. package/dist/senses/cli/status-line.js +60 -0
  499. package/dist/senses/cli/streaming-markdown.js +526 -0
  500. package/dist/senses/cli/tool-display.js +85 -0
  501. package/dist/senses/cli/tool-render.js +85 -0
  502. package/dist/senses/cli/tui-store.js +241 -0
  503. package/dist/senses/cli/virtual-list.js +35 -0
  504. package/dist/senses/cli-entry.js +60 -8
  505. package/dist/senses/cli.js +600 -317
  506. package/dist/senses/commands.js +66 -3
  507. package/dist/senses/context-packet-ledger.js +371 -0
  508. package/dist/senses/context-packets.js +154 -0
  509. package/dist/senses/habit-lifecycle-guard.js +24 -0
  510. package/dist/senses/habit-turn-message.js +160 -0
  511. package/dist/senses/ingress-evidence.js +2 -0
  512. package/dist/senses/mail-entry.js +66 -0
  513. package/dist/senses/mail.js +524 -0
  514. package/dist/senses/pipeline.js +1115 -204
  515. package/dist/senses/private-runtime-worker.js +859 -0
  516. package/dist/senses/private-runtime.js +1496 -0
  517. package/dist/senses/proactive-content-guard.js +51 -0
  518. package/dist/senses/sanctuary-download-credit-presentation.js +31 -0
  519. package/dist/senses/sanctuary-full-visibility-contract.js +302 -0
  520. package/dist/senses/sanctuary-grounding.js +118 -0
  521. package/dist/senses/sanctuary-health-acceptance-probe-entry.js +12 -0
  522. package/dist/senses/sanctuary-health-acceptance-probe.js +774 -0
  523. package/dist/senses/sanctuary-health-runner.js +101 -0
  524. package/dist/senses/sanctuary-health.js +408 -0
  525. package/dist/senses/sanctuary-install-state-contract.js +126 -0
  526. package/dist/senses/sanctuary-interactive-control.js +306 -0
  527. package/dist/senses/sanctuary-media-catalog-contract.js +235 -0
  528. package/dist/senses/sanctuary-media-optimization.js +514 -0
  529. package/dist/senses/sanctuary-runtime.js +338 -0
  530. package/dist/senses/sanctuary-sab.js +85 -0
  531. package/dist/senses/sanctuary-storage-optimization-contract.js +32 -0
  532. package/dist/senses/shared-turn.js +756 -0
  533. package/dist/senses/surface-tool.js +109 -0
  534. package/dist/senses/teams-entry.js +60 -8
  535. package/dist/senses/teams.js +515 -217
  536. package/dist/senses/telegram-admission.js +711 -0
  537. package/dist/senses/telegram-approval-runtime.js +566 -0
  538. package/dist/senses/telegram-attachments.js +182 -0
  539. package/dist/senses/telegram-audit-ledger.js +220 -0
  540. package/dist/senses/telegram-client.js +1677 -0
  541. package/dist/senses/telegram-effect-adapter.js +859 -0
  542. package/dist/senses/telegram-entry.js +83 -0
  543. package/dist/senses/telegram.js +2045 -0
  544. package/dist/senses/trust-gate.js +104 -9
  545. package/dist/senses/voice/audio-playback.js +237 -0
  546. package/dist/senses/voice/audio-routing.js +119 -0
  547. package/dist/senses/voice/elevenlabs.js +202 -0
  548. package/dist/senses/voice/floor-control.js +431 -0
  549. package/dist/senses/voice/floor-controller.js +115 -0
  550. package/dist/senses/voice/golden-path.js +116 -0
  551. package/dist/senses/voice/index.js +29 -0
  552. package/dist/senses/voice/meeting.js +113 -0
  553. package/dist/senses/voice/outbound.js +190 -0
  554. package/dist/senses/voice/phone.js +33 -0
  555. package/dist/senses/voice/playback.js +139 -0
  556. package/dist/senses/voice/realtime-eval.js +496 -0
  557. package/dist/senses/voice/realtime-trace.js +531 -0
  558. package/dist/senses/voice/transcript.js +70 -0
  559. package/dist/senses/voice/turn.js +191 -0
  560. package/dist/senses/voice/twilio-phone-runtime.js +807 -0
  561. package/dist/senses/voice/twilio-phone.js +5081 -0
  562. package/dist/senses/voice/types.js +2 -0
  563. package/dist/senses/voice/whisper.js +161 -0
  564. package/dist/senses/voice-entry.js +81 -0
  565. package/dist/senses/voice-realtime-eval-command.js +99 -0
  566. package/dist/senses/voice-realtime-eval-entry.js +21 -0
  567. package/dist/senses/voice-twilio-entry.js +87 -0
  568. package/dist/trips/core.js +138 -0
  569. package/dist/trips/store.js +265 -0
  570. package/dist/util/frontmatter.js +69 -0
  571. package/npm-shrinkwrap.json +8138 -0
  572. package/package.json +72 -13
  573. package/skills/agent-commerce.md +113 -0
  574. package/skills/browser-navigation.md +117 -0
  575. package/skills/commerce-setup-guide.md +116 -0
  576. package/skills/commerce-setup.md +84 -0
  577. package/skills/configure-dev-tools.md +99 -0
  578. package/skills/travel-planning.md +138 -0
  579. package/dist/heart/daemon/auth-flow.js +0 -430
  580. package/dist/heart/daemon/ouro-path-installer.js +0 -260
  581. package/dist/heart/daemon/ouro-version-manager.js +0 -164
  582. package/dist/heart/daemon/update-hooks.js +0 -138
  583. package/dist/heart/obligations.js +0 -141
  584. package/dist/heart/safe-workspace.js +0 -228
  585. package/dist/heart/session-recall.js +0 -116
  586. package/dist/mind/friends/channel.js +0 -84
  587. package/dist/mind/friends/group-context.js +0 -144
  588. package/dist/mind/friends/resolver.js +0 -84
  589. package/dist/mind/friends/store-file.js +0 -190
  590. package/dist/mind/friends/store.js +0 -4
  591. package/dist/mind/friends/tokens.js +0 -26
  592. package/dist/mind/friends/trust-explanation.js +0 -74
  593. package/dist/mind/friends/types.js +0 -29
  594. package/dist/repertoire/tasks/board.js +0 -134
  595. package/dist/repertoire/tasks/index.js +0 -224
  596. package/dist/repertoire/tasks/lifecycle.js +0 -80
  597. package/dist/repertoire/tasks/middleware.js +0 -65
  598. package/dist/repertoire/tasks/parser.js +0 -173
  599. package/dist/repertoire/tasks/scanner.js +0 -132
  600. package/dist/repertoire/tasks/transitions.js +0 -144
  601. package/dist/senses/bluebubbles-entry.js +0 -13
  602. package/dist/senses/bluebubbles.js +0 -1181
  603. package/dist/senses/debug-activity.js +0 -154
  604. package/dist/senses/inner-dialog-worker.js +0 -90
  605. package/dist/senses/inner-dialog.js +0 -525
  606. package/subagents/README.md +0 -7
  607. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/basilisk.md +0 -0
  608. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jafar.md +0 -0
  609. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jormungandr.md +0 -0
  610. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/kaa.md +0 -0
  611. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/medusa.md +0 -0
  612. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/monty.md +0 -0
  613. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/nagini.md +0 -0
  614. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/ouroboros.md +0 -0
  615. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/python.md +0 -0
  616. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/quetzalcoatl.md +0 -0
  617. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/sir-hiss.md +0 -0
  618. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-snake.md +0 -0
  619. /package/dist/{repertoire/tasks/types.js → heart/attachments/sources/adapter.js} +0 -0
  620. /package/dist/heart/{daemon → hatch}/hatch-animation.js +0 -0
  621. /package/dist/heart/{daemon → hatch}/specialist-orchestrator.js +0 -0
  622. /package/dist/heart/{daemon → versioning}/ouro-uti.js +0 -0
  623. /package/dist/heart/{daemon → versioning}/wrapper-publish-guard.js +0 -0
@@ -1,18 +1,37 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.goInwardTool = exports.noResponseTool = exports.finalAnswerTool = exports.tools = void 0;
3
+ exports.surfaceToolDef = exports.speakTool = exports.restTool = exports.ponderTool = exports.observeTool = exports.settleTool = exports.tools = void 0;
4
+ exports.resetMcpDefinitions = resetMcpDefinitions;
5
+ exports.getSanctuaryRelationshipTools = getSanctuaryRelationshipTools;
4
6
  exports.getToolsForChannel = getToolsForChannel;
5
- exports.isConfirmationRequired = isConfirmationRequired;
7
+ exports.resolveToolDefinition = resolveToolDefinition;
8
+ exports.approvalPolicyForToolName = approvalPolicyForToolName;
9
+ exports.classifyApprovalForInvocation = classifyApprovalForInvocation;
10
+ exports.approvalPolicyForInvocation = approvalPolicyForInvocation;
11
+ exports.shellRiskProfile = shellRiskProfile;
12
+ exports.riskProfileForTool = riskProfileForTool;
13
+ exports.riskProfileForToolName = riskProfileForToolName;
6
14
  exports.execTool = execTool;
7
15
  exports.summarizeArgs = summarizeArgs;
16
+ exports.buildToolResultSummary = buildToolResultSummary;
8
17
  const tools_base_1 = require("./tools-base");
9
18
  const tools_teams_1 = require("./tools-teams");
10
19
  const tools_bluebubbles_1 = require("./tools-bluebubbles");
11
20
  const ado_semantic_1 = require("./ado-semantic");
12
21
  const tools_github_1 = require("./tools-github");
22
+ const tools_bundle_1 = require("./tools-bundle");
13
23
  const runtime_1 = require("../nerves/runtime");
14
24
  const guardrails_1 = require("./guardrails");
15
25
  const identity_1 = require("../heart/identity");
26
+ const store_1 = require("../commerce/store");
27
+ const tools_surface_1 = require("./tools-surface");
28
+ const mcp_tools_1 = require("./mcp-tools");
29
+ const tools_voice_1 = require("./tools-voice");
30
+ const shell_sessions_1 = require("./shell-sessions");
31
+ const tools_unraid_1 = require("./tools-unraid");
32
+ const tools_flow_1 = require("./tools-flow");
33
+ const tools_steward_policy_1 = require("./tools-steward-policy");
34
+ const steward_policy_1 = require("../heart/steward-policy");
16
35
  function safeGetAgentRoot() {
17
36
  try {
18
37
  return (0, identity_1.getAgentRoot)();
@@ -21,18 +40,98 @@ function safeGetAgentRoot() {
21
40
  return undefined;
22
41
  }
23
42
  }
43
+ function isSanctuaryAgent() {
44
+ try {
45
+ return (0, identity_1.getAgentName)() === "sanctuary";
46
+ }
47
+ catch {
48
+ return false;
49
+ }
50
+ }
51
+ const SANCTUARY_RELATIONSHIP_BASE_TOOLS = new Set([
52
+ "external_event_disposition",
53
+ "query_active_work",
54
+ "save_friend_note",
55
+ "telegram_contact_manage",
56
+ "query_cares",
57
+ "care_manage",
58
+ "await_condition",
59
+ "resolve_await",
60
+ "cancel_await",
61
+ "list_recent_attachments",
62
+ "materialize_attachment",
63
+ "describe_image",
64
+ "send_message",
65
+ ]);
66
+ const SANCTUARY_TELEGRAM_SURFACE = new Set([
67
+ "query_active_work",
68
+ "save_friend_note",
69
+ "telegram_contact_manage",
70
+ "query_cares",
71
+ "care_manage",
72
+ "await_condition",
73
+ "resolve_await",
74
+ "cancel_await",
75
+ "list_recent_attachments",
76
+ "materialize_attachment",
77
+ "describe_image",
78
+ ...tools_unraid_1.unraidToolDefinitions.map((definition) => definition.tool.function.name),
79
+ "steward_policy_manage",
80
+ "ponder",
81
+ "settle",
82
+ "speak",
83
+ ]);
24
84
  // Re-export types and constants used by the rest of the codebase
25
85
  var tools_base_2 = require("./tools-base");
26
86
  Object.defineProperty(exports, "tools", { enumerable: true, get: function () { return tools_base_2.tools; } });
27
- Object.defineProperty(exports, "finalAnswerTool", { enumerable: true, get: function () { return tools_base_2.finalAnswerTool; } });
28
- Object.defineProperty(exports, "noResponseTool", { enumerable: true, get: function () { return tools_base_2.noResponseTool; } });
29
- Object.defineProperty(exports, "goInwardTool", { enumerable: true, get: function () { return tools_base_2.goInwardTool; } });
87
+ Object.defineProperty(exports, "settleTool", { enumerable: true, get: function () { return tools_base_2.settleTool; } });
88
+ Object.defineProperty(exports, "observeTool", { enumerable: true, get: function () { return tools_base_2.observeTool; } });
89
+ Object.defineProperty(exports, "ponderTool", { enumerable: true, get: function () { return tools_base_2.ponderTool; } });
90
+ Object.defineProperty(exports, "restTool", { enumerable: true, get: function () { return tools_base_2.restTool; } });
91
+ Object.defineProperty(exports, "speakTool", { enumerable: true, get: function () { return tools_base_2.speakTool; } });
92
+ // Re-export surface tool schema for consumers (e.g. heart/core.ts)
93
+ var tools_surface_2 = require("./tools-surface");
94
+ Object.defineProperty(exports, "surfaceToolDef", { enumerable: true, get: function () { return tools_surface_2.surfaceToolDef; } });
30
95
  // All tool definitions in a single registry
31
- const allDefinitions = [...tools_base_1.baseToolDefinitions, ...tools_bluebubbles_1.bluebubblesToolDefinitions, ...tools_teams_1.teamsToolDefinitions, ...ado_semantic_1.adoSemanticToolDefinitions, ...tools_github_1.githubToolDefinitions];
96
+ const allDefinitions = [...tools_base_1.baseToolDefinitions, ...tools_bluebubbles_1.bluebubblesToolDefinitions, ...tools_teams_1.teamsToolDefinitions, ...ado_semantic_1.adoSemanticToolDefinitions, ...tools_github_1.githubToolDefinitions, ...tools_bundle_1.bundleToolDefinitions, ...tools_voice_1.voiceToolDefinitions, ...tools_unraid_1.unraidToolDefinitions, tools_steward_policy_1.stewardPolicyToolDefinition, tools_surface_1.surfaceToolDefinition];
97
+ const COMMERCE_AUTHORITY_TOOLS = new Set(["stripe_create_card", "flight_hold", "flight_book"]);
98
+ // MCP tool definitions — populated each time getToolsForChannel() is called with an mcpManager.
99
+ // Kept separate from allDefinitions so execTool can find them.
100
+ let mcpDefinitions = [];
101
+ /** Exported for testing — reset the MCP definitions cache. */
102
+ function resetMcpDefinitions() {
103
+ mcpDefinitions = [];
104
+ }
32
105
  function baseToolsForCapabilities() {
33
106
  // Use baseToolDefinitions at call time so dynamically-added tools are included
34
107
  return tools_base_1.baseToolDefinitions.map((d) => d.tool);
35
108
  }
109
+ function uniqueToolSchemas(tools) {
110
+ const seen = new Set();
111
+ return tools.filter((tool) => {
112
+ if (seen.has(tool.function.name))
113
+ return false;
114
+ seen.add(tool.function.name);
115
+ return true;
116
+ });
117
+ }
118
+ /**
119
+ * Resolve Sanctuary relationship tools from one canonical definition pool.
120
+ * Durable relationship profiles can only reduce this surface; they cannot
121
+ * introduce an arbitrary base tool by naming it in configuration.
122
+ */
123
+ function getSanctuaryRelationshipTools(advertisedToolNames) {
124
+ const advertised = new Set(advertisedToolNames);
125
+ return uniqueToolSchemas([
126
+ ...tools_base_1.baseToolDefinitions.filter((definition) => SANCTUARY_RELATIONSHIP_BASE_TOOLS.has(definition.tool.function.name)).map((definition) => definition.tool),
127
+ ...tools_unraid_1.unraidToolDefinitions.map((definition) => definition.tool),
128
+ tools_steward_policy_1.stewardPolicyToolDefinition.tool,
129
+ tools_flow_1.ponderTool,
130
+ tools_flow_1.restTool,
131
+ tools_flow_1.settleTool,
132
+ tools_flow_1.speakTool,
133
+ ]).filter((tool) => advertised.has(tool.function.name));
134
+ }
36
135
  // Apply a single tool preference to a tool schema, returning a new object.
37
136
  function applyPreference(tool, pref) {
38
137
  return {
@@ -59,14 +158,20 @@ function filterByCapability(toolList, providerCapabilities) {
59
158
  // Teams/integration tools are included only if their integration is in availableIntegrations.
60
159
  // When toolPreferences is provided, matching preferences are appended to tool descriptions.
61
160
  // When providerCapabilities is provided, tools with requiredCapability are filtered.
62
- function getToolsForChannel(capabilities, toolPreferences, _context, providerCapabilities) {
161
+ function getToolsForChannel(capabilities, toolPreferences, _context, providerCapabilities, mcpManager, _chatModel) {
162
+ if (capabilities?.channel === "telegram" && isSanctuaryAgent()) {
163
+ return getSanctuaryRelationshipTools([...SANCTUARY_TELEGRAM_SURFACE]);
164
+ }
63
165
  const baseTools = baseToolsForCapabilities();
64
166
  const bluebubblesTools = capabilities?.channel === "bluebubbles"
65
167
  ? tools_bluebubbles_1.bluebubblesToolDefinitions.map((d) => d.tool)
66
168
  : [];
169
+ const voiceTools = capabilities?.channel === "voice"
170
+ ? tools_voice_1.voiceToolDefinitions.map((d) => d.tool)
171
+ : [];
67
172
  let result;
68
173
  if (!capabilities || capabilities.availableIntegrations.length === 0) {
69
- result = [...baseTools, ...bluebubblesTools];
174
+ result = [...baseTools, ...bluebubblesTools, ...voiceTools];
70
175
  }
71
176
  else {
72
177
  const available = new Set(capabilities.availableIntegrations);
@@ -74,7 +179,7 @@ function getToolsForChannel(capabilities, toolPreferences, _context, providerCap
74
179
  // Include tools whose integration is available, plus channel tools with no integration gate (e.g. teams_send_message)
75
180
  const integrationDefs = channelDefs.filter((d) => d.integration ? available.has(d.integration) : capabilities.channel === "teams");
76
181
  if (!toolPreferences || Object.keys(toolPreferences).length === 0) {
77
- result = [...baseTools, ...bluebubblesTools, ...integrationDefs.map((d) => d.tool)];
182
+ result = [...baseTools, ...bluebubblesTools, ...voiceTools, ...integrationDefs.map((d) => d.tool)];
78
183
  }
79
184
  else {
80
185
  // Build a map of integration -> preference text for fast lookup
@@ -88,16 +193,149 @@ function getToolsForChannel(capabilities, toolPreferences, _context, providerCap
88
193
  const pref = prefMap.get(d.integration);
89
194
  return pref ? applyPreference(d.tool, pref) : d.tool;
90
195
  });
91
- result = [...baseTools, ...bluebubblesTools, ...enrichedIntegrationTools];
196
+ result = [...baseTools, ...bluebubblesTools, ...voiceTools, ...enrichedIntegrationTools];
92
197
  }
93
198
  }
199
+ // Append first-class MCP tools when mcpManager is provided
200
+ if (mcpManager) {
201
+ mcpDefinitions = (0, mcp_tools_1.mcpToolsAsDefinitions)(mcpManager);
202
+ const mcpSchemas = mcpDefinitions.map((d) => d.tool);
203
+ result = [...result, ...mcpSchemas];
204
+ }
94
205
  return filterByCapability(result, providerCapabilities);
95
206
  }
96
- // Check whether a tool requires user confirmation before execution.
97
- // Reads from ToolDefinition.confirmationRequired instead of a separate Set.
98
- function isConfirmationRequired(toolName) {
99
- const def = allDefinitions.find((d) => d.tool.function.name === toolName);
100
- return def?.confirmationRequired === true;
207
+ // Look up a tool definition from the live combined registry (native + MCP).
208
+ // The base registry is intentionally consulted at call time so tests and
209
+ // runtime extensions cannot leave execution metadata behind a stale snapshot.
210
+ function resolveToolDefinition(toolName) {
211
+ return tools_base_1.baseToolDefinitions.find((d) => d.tool.function.name === toolName)
212
+ ?? allDefinitions.find((d) => d.tool.function.name === toolName)
213
+ ?? mcpDefinitions.find((d) => d.tool.function.name === toolName);
214
+ }
215
+ function approvalPolicyForToolName(name, args) {
216
+ return resolveToolDefinition(name)?.approvalPolicy?.(args) ?? { kind: "not_required" };
217
+ }
218
+ async function routineActionInvocation(name, args, ctx) {
219
+ const target = typeof args.container === "string" ? args.container : "";
220
+ if (name !== "unraid_restart_container" || !ctx?.agentRoot || !(0, tools_base_1.routineActionRequester)(ctx) || !target)
221
+ return null;
222
+ const relationshipAuthorization = ctx.relationshipAuthorization;
223
+ if (!relationshipAuthorization)
224
+ return null;
225
+ let authorization;
226
+ try {
227
+ authorization = await relationshipAuthorization.authorizeTool(name, args);
228
+ }
229
+ catch {
230
+ return null;
231
+ }
232
+ if (!authorization.allowed || !Number.isInteger(authorization.profileVersion) || Number(authorization.profileVersion) < 1)
233
+ return null;
234
+ const key = `unraid.restart:${target}`;
235
+ const decision = (0, steward_policy_1.inspectRoutineActionGrant)(ctx.agentRoot, { key, action: "unraid.container.restart", target });
236
+ return decision.allowed ? { key, target, expectedPolicyVersion: decision.policyVersion } : null;
237
+ }
238
+ async function classifyApprovalForInvocation(name, args, ctx) {
239
+ const fallback = approvalPolicyForToolName(name, args);
240
+ if (name !== "unraid_restart_container" || fallback.kind !== "required")
241
+ return { policy: fallback };
242
+ const routineActionSelection = await routineActionInvocation(name, args, ctx);
243
+ return routineActionSelection ? { policy: { kind: "not_required" }, routineActionSelection } : { policy: fallback };
244
+ }
245
+ async function approvalPolicyForInvocation(name, args, ctx) {
246
+ return (await classifyApprovalForInvocation(name, args, ctx)).policy;
247
+ }
248
+ const findDefinition = resolveToolDefinition;
249
+ function normalizeGuardArgs(_name, args) {
250
+ return args;
251
+ }
252
+ const READ_ONLY_OURO_SHELL_COMMANDS = new Set([
253
+ "help",
254
+ "-h",
255
+ "--help",
256
+ "-v",
257
+ "--version",
258
+ "status",
259
+ "whoami",
260
+ "versions",
261
+ "changelog",
262
+ "mailbox",
263
+ "inner",
264
+ "thoughts",
265
+ "check",
266
+ "session list",
267
+ "mcp list",
268
+ "config models",
269
+ "auth verify",
270
+ "vault status",
271
+ "vault config status",
272
+ "vault item status",
273
+ "vault item list",
274
+ ]);
275
+ function shellTokens(command) {
276
+ return command.trim().split(/\s+/).filter(Boolean);
277
+ }
278
+ function ouroShellRiskReason(command) {
279
+ const tokens = shellTokens(command);
280
+ if (tokens[0] !== "ouro")
281
+ return null;
282
+ const first = tokens[1] ?? "";
283
+ const second = tokens[2] ?? "";
284
+ const third = tokens[3] ?? "";
285
+ const twoWord = second ? `${first} ${second}` : first;
286
+ const threeWord = third ? `${twoWord} ${third}` : twoWord;
287
+ if (READ_ONLY_OURO_SHELL_COMMANDS.has(threeWord)
288
+ || READ_ONLY_OURO_SHELL_COMMANDS.has(twoWord)
289
+ || READ_ONLY_OURO_SHELL_COMMANDS.has(first)) {
290
+ return null;
291
+ }
292
+ const hint = first === "restart_runtime"
293
+ ? " Hint: use the restart_runtime tool instead of shell."
294
+ : "";
295
+ return `ouro CLI command may mutate runtime/config state or be unavailable from shell.${hint}`;
296
+ }
297
+ function shellRiskProfile(args) {
298
+ const command = String(args.command);
299
+ const destructive = (0, shell_sessions_1.detectDestructivePatterns)(command);
300
+ if (destructive.length > 0) {
301
+ return { mutates: "external_side_effect", risk: "high", reason: `destructive shell pattern: ${destructive.join(", ")}` };
302
+ }
303
+ const ouroRiskReason = ouroShellRiskReason(command);
304
+ if (ouroRiskReason) {
305
+ return { mutates: "external_side_effect", risk: "high", reason: ouroRiskReason };
306
+ }
307
+ if (/(^|\s)(rm|mv|cp|touch|mkdir|rmdir)\b/.test(command)
308
+ || /(^|\s)(npm|pnpm|yarn)\s+(install|add|remove|update|upgrade)\b/.test(command)
309
+ || /(^|\s)git\s+(add|apply|checkout|clean|commit|merge|pull|push|rebase|reset|restore|switch)\b/.test(command)
310
+ || /(^|\s)(sed\s+-i|perl\s+-pi)\b/.test(command)
311
+ || /(^|\s)(tee|truncate)\b/.test(command)
312
+ || /(^|[^<])>>?\s*\S+/.test(command)) {
313
+ return { mutates: "external_side_effect", risk: "high", reason: "shell command appears to mutate files, packages, git state, or external state" };
314
+ }
315
+ return { mutates: "none", risk: "low" };
316
+ }
317
+ function riskProfileForTool(def, name, args) {
318
+ if (name === "shell")
319
+ return shellRiskProfile(args);
320
+ if (typeof def.riskProfile === "function")
321
+ return def.riskProfile(args);
322
+ return def.riskProfile ?? { mutates: "none", risk: "low" };
323
+ }
324
+ function riskProfileForToolName(name, args) {
325
+ const def = findDefinition(name);
326
+ return def ? riskProfileForTool(def, name, args) : null;
327
+ }
328
+ function orientationHoldMessage(name, profile, reason) {
329
+ return `orientation hold: ${reason} Available: orientation_get plus read-only inspection tools like trip_status, query_session, read_config, read_file, grep, search_facts, consult_diary, and consult_notes. Resolve the referent/correction, then retry ${name} if the action is still correct. Blocked ${mutationKindsFor(profile).join(", ")}. ${profile.reason}.`;
330
+ }
331
+ function mutationKindsFor(profile) {
332
+ const mutates = profile.mutates;
333
+ return typeof mutates === "string" ? [mutates] : [...mutates];
334
+ }
335
+ function orientationPolicyBlocks(profile, blockedMutationKinds) {
336
+ if (profile.risk !== "high")
337
+ return false;
338
+ return mutationKindsFor(profile).some((kind) => blockedMutationKinds.includes(kind));
101
339
  }
102
340
  async function execTool(name, args, ctx) {
103
341
  (0, runtime_1.emitNervesEvent)({
@@ -106,8 +344,8 @@ async function execTool(name, args, ctx) {
106
344
  message: "tool execution started",
107
345
  meta: { name, ...(name === "shell" && args.command ? { command: args.command } : {}) },
108
346
  });
109
- // Look up from combined registry
110
- const def = allDefinitions.find((d) => d.tool.function.name === name);
347
+ // Look up from combined registry (native + MCP)
348
+ const def = findDefinition(name);
111
349
  if (!def) {
112
350
  (0, runtime_1.emitNervesEvent)({
113
351
  level: "error",
@@ -118,13 +356,44 @@ async function execTool(name, args, ctx) {
118
356
  });
119
357
  return `unknown: ${name}`;
120
358
  }
359
+ const relationshipDecision = await ctx?.relationshipAuthorization?.authorizeTool(name, args);
360
+ if (relationshipDecision && !relationshipDecision.allowed) {
361
+ (0, runtime_1.emitNervesEvent)({
362
+ level: "warn",
363
+ event: "tool.relationship_authorization_block",
364
+ component: "tools",
365
+ message: "relationship authorization blocked tool execution",
366
+ meta: { name, reason: relationshipDecision.reason },
367
+ });
368
+ return `relationship authorization required: ${relationshipDecision.reason}`;
369
+ }
370
+ const riskProfile = riskProfileForTool(def, name, args);
371
+ const orientationPolicy = ctx?.orientationFrame?.actionPolicy;
372
+ if (orientationPolicy?.mode === "correction_hold"
373
+ && orientationPolicyBlocks(riskProfile, orientationPolicy.blockedMutationKinds)) {
374
+ const reason = orientationPolicy.reason;
375
+ const message = orientationHoldMessage(name, riskProfile, reason);
376
+ (0, runtime_1.emitNervesEvent)({
377
+ level: "warn",
378
+ event: "tool.orientation_hold_block",
379
+ component: "tools",
380
+ message: "orientation hold blocked high-risk tool execution",
381
+ meta: { name, mutates: mutationKindsFor(riskProfile), reason },
382
+ });
383
+ return message;
384
+ }
121
385
  // Guardrail check: structural + trust-level
386
+ const mcpDef = mcpDefinitions.find((d) => d.tool.function.name === name);
122
387
  const guardContext = {
123
388
  readPaths: tools_base_1.editFileReadTracker,
124
389
  trustLevel: ctx?.context?.friend?.trustLevel,
125
- agentRoot: safeGetAgentRoot(),
390
+ agentRoot: ctx?.agentRoot ?? safeGetAgentRoot(),
391
+ friendId: ctx?.context?.friend?.id,
392
+ ...(mcpDef?.mcpServer ? { mcpServerName: mcpDef.mcpServer } : {}),
393
+ ...(ctx?.context?.isGroupChat !== undefined ? { isGroupChat: (ctx?.context).isGroupChat } : {}),
126
394
  };
127
- const guardResult = (0, guardrails_1.guardInvocation)(name, args, guardContext);
395
+ const guardArgs = normalizeGuardArgs(name, args);
396
+ const guardResult = (0, guardrails_1.guardInvocation)(name, guardArgs, guardContext);
128
397
  if (!guardResult.allowed) {
129
398
  (0, runtime_1.emitNervesEvent)({
130
399
  level: "warn",
@@ -135,8 +404,38 @@ async function execTool(name, args, ctx) {
135
404
  });
136
405
  return guardResult.reason;
137
406
  }
407
+ const commerceReservation = COMMERCE_AUTHORITY_TOOLS.has(name) && guardContext.agentRoot
408
+ ? (0, store_1.reserveCommerceAuthority)({
409
+ agentRoot: guardContext.agentRoot,
410
+ token: guardArgs.commerce_authority,
411
+ toolName: name,
412
+ args: guardArgs,
413
+ friendId: guardContext.friendId,
414
+ })
415
+ : null;
416
+ if (commerceReservation && !commerceReservation.ok) {
417
+ (0, runtime_1.emitNervesEvent)({
418
+ level: "warn",
419
+ event: "tool.guardrail_block",
420
+ component: "tools",
421
+ message: "guardrail blocked tool execution",
422
+ meta: { name, reason: commerceReservation.reason },
423
+ });
424
+ return `commerce authority required: ${commerceReservation.reason}`;
425
+ }
426
+ const authorizedContext = ctx;
427
+ const toolContext = commerceReservation?.ok
428
+ ? {
429
+ ...authorizedContext,
430
+ agentRoot: guardContext.agentRoot,
431
+ commerceAuthority: {
432
+ checkoutId: commerceReservation.checkoutId,
433
+ reservationToken: commerceReservation.reservationToken,
434
+ },
435
+ }
436
+ : authorizedContext;
138
437
  try {
139
- const result = await def.handler(args, ctx);
438
+ const result = await def.handler(args, toolContext);
140
439
  (0, runtime_1.emitNervesEvent)({
141
440
  event: "tool.end",
142
441
  component: "tools",
@@ -155,6 +454,22 @@ async function execTool(name, args, ctx) {
155
454
  });
156
455
  throw error;
157
456
  }
457
+ finally {
458
+ if (commerceReservation?.ok && guardContext.agentRoot) {
459
+ try {
460
+ (0, store_1.releaseReservedCommerceAuthority)({
461
+ agentRoot: guardContext.agentRoot,
462
+ checkoutId: commerceReservation.checkoutId,
463
+ reservationToken: commerceReservation.reservationToken,
464
+ toolName: name,
465
+ friendId: guardContext.friendId,
466
+ });
467
+ }
468
+ catch {
469
+ /* v8 ignore next -- external tool result/error should not be masked by best-effort reservation cleanup @preserve */
470
+ }
471
+ }
472
+ }
158
473
  }
159
474
  function summarizeKeyValues(args, keys, maxValueLength = 60) {
160
475
  const parts = [];
@@ -177,65 +492,47 @@ function summarizeUnknownArgs(args) {
177
492
  return summarizeKeyValues(args, keys);
178
493
  }
179
494
  function summarizeArgs(name, args) {
180
- // Check teams tools first
181
- const teamsSummary = (0, tools_teams_1.summarizeTeamsArgs)(name, args);
182
- if (teamsSummary !== undefined)
183
- return teamsSummary;
184
- // Check github tools
185
- const githubSummary = (0, tools_github_1.summarizeGithubArgs)(name, args);
186
- if (githubSummary !== undefined)
187
- return githubSummary;
188
- // Base tools
189
- if (name === "read_file" || name === "write_file")
190
- return summarizeKeyValues(args, ["path"]);
191
- if (name === "edit_file")
192
- return summarizeKeyValues(args, ["path"]);
193
- if (name === "glob")
194
- return summarizeKeyValues(args, ["pattern", "cwd"]);
195
- if (name === "grep")
196
- return summarizeKeyValues(args, ["pattern", "path", "include"]);
197
- if (name === "shell")
198
- return summarizeKeyValues(args, ["command"]);
199
- if (name === "load_skill")
200
- return summarizeKeyValues(args, ["name"]);
201
- if (name === "coding_spawn")
202
- return summarizeKeyValues(args, ["runner", "workdir", "taskRef"]);
203
- if (name === "coding_status")
204
- return summarizeKeyValues(args, ["sessionId"]);
205
- if (name === "coding_tail")
206
- return summarizeKeyValues(args, ["sessionId"]);
207
- if (name === "coding_send_input")
208
- return summarizeKeyValues(args, ["sessionId", "input"]);
209
- if (name === "coding_kill")
210
- return summarizeKeyValues(args, ["sessionId"]);
211
- if (name === "bluebubbles_set_reply_target")
212
- return summarizeKeyValues(args, ["target", "threadOriginatorGuid"]);
213
- if (name === "set_reasoning_effort")
214
- return summarizeKeyValues(args, ["level"]);
215
- if (name === "claude")
216
- return summarizeKeyValues(args, ["prompt"]);
217
- if (name === "web_search")
218
- return summarizeKeyValues(args, ["query"]);
219
- if (name === "memory_search")
220
- return summarizeKeyValues(args, ["query"]);
221
- if (name === "memory_save")
222
- return summarizeKeyValues(args, ["text", "about"]);
223
- if (name === "get_friend_note")
224
- return summarizeKeyValues(args, ["friendId"]);
225
- if (name === "save_friend_note") {
226
- return summarizeKeyValues(args, ["type", "key", "content"]);
227
- }
228
- if (name === "bridge_manage")
229
- return summarizeKeyValues(args, ["action", "bridgeId", "objective", "friendId", "channel", "key"]);
230
- if (name === "ado_backlog_list")
231
- return summarizeKeyValues(args, ["organization", "project"]);
232
- if (name === "ado_batch_update")
233
- return summarizeKeyValues(args, ["organization", "project"]);
234
- if (name === "ado_create_epic" || name === "ado_create_issue")
235
- return summarizeKeyValues(args, ["organization", "project", "title"]);
236
- if (name === "ado_move_items")
237
- return summarizeKeyValues(args, ["organization", "project", "workItemIds"]);
238
- if (name === "ado_restructure_backlog")
239
- return summarizeKeyValues(args, ["organization", "project"]);
495
+ const def = findDefinition(name);
496
+ if (def && def.summaryKeys !== undefined) {
497
+ return summarizeKeyValues(args, def.summaryKeys);
498
+ }
240
499
  return summarizeUnknownArgs(args);
241
500
  }
501
+ /**
502
+ * Build an enriched tool result summary for display on remote channels.
503
+ * For recognized tools, includes result-derived info (diff stats, exit codes, etc.).
504
+ * Falls back to arg-based summary for unrecognized tools.
505
+ */
506
+ function buildToolResultSummary(name, args, _result, success) {
507
+ /* v8 ignore start -- branches: ?? fallbacks and ternaries in tool summary formatting @preserve */
508
+ switch (name) {
509
+ case "edit_file": {
510
+ if (!success)
511
+ return summarizeArgs(name, args);
512
+ const addedLines = (args.new_string ?? "").split("\n").length;
513
+ const removedLines = (args.old_string ?? "").split("\n").length;
514
+ return `+${addedLines} -${removedLines} lines in ${args.path ?? "unknown"}`;
515
+ }
516
+ case "shell": {
517
+ const cmd = args.command ?? "?";
518
+ const exitCode = success ? 0 : 1;
519
+ return `$ ${cmd} (exit ${exitCode})`;
520
+ }
521
+ case "read_file":
522
+ return `path=${args.path ?? "unknown"}`;
523
+ case "write_file":
524
+ return `path=${args.path ?? "unknown"}`;
525
+ case "glob":
526
+ return `pattern=${args.pattern ?? "?"} ${args.cwd ? `cwd=${args.cwd}` : ""}`.trim();
527
+ case "grep":
528
+ return `pattern=${args.pattern ?? "?"} ${args.path ? `path=${args.path}` : ""}`.trim();
529
+ case "coding_spawn": {
530
+ const taskRef = args.taskRef ?? "unknown";
531
+ const status = success ? "spawned" : "failed";
532
+ return `${taskRef} -> ${status}`;
533
+ }
534
+ default:
535
+ return summarizeArgs(name, args);
536
+ }
537
+ /* v8 ignore stop */
538
+ }