@ouro.bot/cli 0.1.0-alpha.9 → 0.1.0-alpha.900

package/dist/heart/sync.js

@@ -0,0 +1,505 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STALE_INDEX_LOCK_MS = void 0;
+exports.preTurnPull = preTurnPull;
+exports.postTurnPush = postTurnPush;
+exports.preTurnPullAsync = preTurnPullAsync;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const runtime_1 = require("../nerves/runtime");
+function writePendingSync(agentRoot, error, classification, conflictFiles) {
+    const pendingSyncPath = path.join(agentRoot, "state", "pending-sync.json");
+    fs.mkdirSync(path.join(agentRoot, "state"), { recursive: true });
+    const record = {
+        error,
+        failedAt: new Date().toISOString(),
+        classification,
+        conflictFiles,
+    };
+    fs.writeFileSync(pendingSyncPath, JSON.stringify(record, null, 2), "utf-8");
+}
+function collectRebaseConflictFiles(agentRoot) {
+    try {
+        const output = (0, child_process_1.execFileSync)("git", ["status", "--porcelain=v1"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 5000,
+        }).toString();
+        const files = [];
+        for (const line of output.split("\n")) {
+            // Unmerged paths in porcelain v1 are prefixed with UU/AA/DD/AU/UA/DU/UD
+            if (/^(UU|AA|DD|AU|UA|DU|UD) /.test(line)) {
+                files.push(line.slice(3).trim());
+            }
+        }
+        return files;
+    }
+    catch {
+        /* v8 ignore next -- git status --porcelain failure inside a repo would require a corrupt repo @preserve */
+        return [];
+    }
+}
+/**
+ * Check whether the bundle is initialized as a git repo.
+ * Used by both pre-turn pull and post-turn push to surface a clear,
+ * actionable error when sync is enabled but the user never ran `git init`
+ * inside their bundle. This error is propagated all the way into the
+ * agent's start-of-turn packet as a Sync warning, so the agent can
+ * either ask the user or run `git init` itself.
+ */
+function ensureGitRepo(agentRoot) {
+    if (fs.existsSync(path.join(agentRoot, ".git"))) {
+        return { ok: true };
+    }
+    const error = `bundle is not a git repo; run \`git init\` inside ${agentRoot} to enable sync (or disable sync in agent.json)`;
+    return { ok: false, error };
+}
+/**
+ * Git holds `.git/index.lock` for milliseconds to seconds, and every git call
+ * in this module has a timeout of 30s or less. A lock older than this was left
+ * behind by a git process that died mid-write; while it exists every `git add`
+ * fails, which silently stopped one bundle's sync for three months.
+ */
+exports.STALE_INDEX_LOCK_MS = 10 * 60 * 1000;
+// Only an empty lock is removed: git writes the new index into the lock right
+// after creating it, while a live `git commit` waiting in an editor holds a
+// full, unchanging lock that can be older than the threshold. When `.git` is a
+// gitdir file (worktree), statSync fails and the lock is left alone.
+function clearStaleIndexLock(agentRoot) {
+    const lockPath = path.join(agentRoot, ".git", "index.lock");
+    let ageMs;
+    try {
+        const stat = fs.statSync(lockPath);
+        if (stat.size !== 0)
+            return;
+        ageMs = Date.now() - stat.mtimeMs;
+    }
+    catch {
+        return;
+    }
+    if (ageMs < exports.STALE_INDEX_LOCK_MS)
+        return;
+    try {
+        fs.rmSync(lockPath, { force: true });
+    }
+    catch (err) {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "heart",
+            event: "heart.sync_stale_lock_clear_failed",
+            message: "post-turn push: could not remove stale git index.lock",
+            meta: { agentRoot, lockPath, error: err instanceof Error ? err.message : /* v8 ignore next -- defensive non-Error catch @preserve */ String(err) },
+        });
+        return;
+    }
+    (0, runtime_1.emitNervesEvent)({
+        level: "warn",
+        component: "heart",
+        event: "heart.sync_stale_lock_cleared",
+        message: "post-turn push: removed stale git index.lock",
+        meta: { agentRoot, lockPath, ageMs },
+    });
+}
+/**
+ * Pre-turn pull: sync the agent bundle from remote before assembling the start-of-turn packet.
+ *
+ * If the bundle has no git remote configured, the pull is skipped and the function
+ * returns ok — matching the no-remote behavior of postTurnPush. This supports the
+ * "local-only sync" mode where the bundle accumulates a commit log without ever
+ * pushing or pulling from a remote.
+ */
+function preTurnPull(agentRoot, config) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.sync_pull_start",
+        message: "pre-turn pull starting",
+        meta: { agentRoot, remote: config.remote },
+    });
+    // Check that the bundle is actually a git repo before touching git at all.
+    // Surfaces a clear, actionable error via syncFailure → start-of-turn packet
+    // so the agent can propose running `git init` (or just do it).
+    const repoCheck = ensureGitRepo(agentRoot);
+    if (!repoCheck.ok) {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "heart",
+            event: "heart.sync_not_a_repo",
+            message: "pre-turn pull failed: bundle is not a git repo",
+            meta: { agentRoot },
+        });
+        return repoCheck;
+    }
+    // Check if any remote is configured. If not, skip the pull (local-only mode).
+    try {
+        const remoteOutput = (0, child_process_1.execFileSync)("git", ["remote"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 5000,
+        }).toString().trim();
+        if (remoteOutput.length === 0) {
+            (0, runtime_1.emitNervesEvent)({
+                component: "heart",
+                event: "heart.sync_pull_end",
+                message: "pre-turn pull skipped: no remote configured",
+                meta: { agentRoot },
+            });
+            return { ok: true };
+        }
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_pull_error",
+            message: "pre-turn pull failed: git remote check failed",
+            meta: { agentRoot, error },
+        });
+        return { ok: false, error };
+    }
+    try {
+        (0, child_process_1.execFileSync)("git", ["pull", config.remote], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 30000,
+        });
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_pull_end",
+            message: "pre-turn pull complete",
+            meta: { agentRoot },
+        });
+        return { ok: true };
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_pull_error",
+            message: "pre-turn pull failed",
+            meta: { agentRoot, error },
+        });
+        return { ok: false, error };
+    }
+}
+/**
+ * Post-turn push: discover dirty files via `git status`, commit, and push.
+ * Uses git-status-based discovery instead of explicit path tracking, ensuring
+ * all file writers are captured regardless of whether they call a tracking API.
+ */
+function postTurnPush(agentRoot, config) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.sync_push_start",
+        message: "post-turn push starting",
+        meta: { agentRoot, remote: config.remote },
+    });
+    // Same git-repo check as preTurnPull. This is the more common failure path
+    // since postTurnPush runs after every turn while preTurnPull only runs on
+    // user-initiated turns. Prior to this guard, an un-init'd bundle would fail
+    // the git-status invocation below with a generic "not a git repository"
+    // error; now we catch it explicitly with an actionable message.
+    const repoCheck = ensureGitRepo(agentRoot);
+    if (!repoCheck.ok) {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "heart",
+            event: "heart.sync_not_a_repo",
+            message: "post-turn push failed: bundle is not a git repo",
+            meta: { agentRoot },
+        });
+        return repoCheck;
+    }
+    let statusOutput;
+    try {
+        statusOutput = (0, child_process_1.execFileSync)("git", ["status", "--porcelain"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 10000,
+        }).toString().trim();
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_push_error",
+            message: "post-turn push: git status failed",
+            meta: { agentRoot, error },
+        });
+        return { ok: false, error };
+    }
+    if (statusOutput.length === 0) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_push_end",
+            message: "post-turn push: no changes to sync",
+            meta: { agentRoot },
+        });
+        return { ok: true };
+    }
+    const changedCount = statusOutput.split("\n").length;
+    clearStaleIndexLock(agentRoot);
+    try {
+        (0, child_process_1.execFileSync)("git", ["add", "-A"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 10000,
+        });
+        (0, child_process_1.execFileSync)("git", ["commit", "-m", "sync: post-turn update"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 10000,
+        });
+        // Check if a remote exists
+        const remoteOutput = (0, child_process_1.execFileSync)("git", ["remote"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 5000,
+        }).toString().trim();
+        if (remoteOutput.length === 0) {
+            (0, runtime_1.emitNervesEvent)({
+                component: "heart",
+                event: "heart.sync_push_end",
+                message: "post-turn push: committed locally, no remote configured",
+                meta: { agentRoot, changedCount },
+            });
+            return { ok: true };
+        }
+        try {
+            (0, child_process_1.execFileSync)("git", ["push", config.remote], {
+                cwd: agentRoot,
+                stdio: "pipe",
+                timeout: 30000,
+            });
+        }
+        catch {
+            // Push rejected -- try pull-rebase-push
+            let rebaseError = null;
+            try {
+                (0, child_process_1.execFileSync)("git", ["pull", "--rebase", config.remote], {
+                    cwd: agentRoot,
+                    stdio: "pipe",
+                    timeout: 30000,
+                });
+            }
+            catch (err) {
+                rebaseError = err instanceof Error ? err.message : String(err);
+            }
+            if (rebaseError === null) {
+                try {
+                    (0, child_process_1.execFileSync)("git", ["push", config.remote], {
+                        cwd: agentRoot,
+                        stdio: "pipe",
+                        timeout: 30000,
+                    });
+                    // rebase + retry push both succeeded — fall through to success
+                    (0, runtime_1.emitNervesEvent)({
+                        component: "heart",
+                        event: "heart.sync_push_end",
+                        message: "post-turn push complete after rebase retry",
+                        meta: { agentRoot, changedCount },
+                    });
+                    return { ok: true };
+                }
+                catch (retryErr) {
+                    // Second push rejected — remote advanced again during rebase
+                    const retryError = retryErr instanceof Error ? retryErr.message : /* v8 ignore next -- defensive non-Error catch @preserve */ String(retryErr);
+                    writePendingSync(agentRoot, retryError, "push_rejected", []);
+                    (0, runtime_1.emitNervesEvent)({
+                        component: "heart",
+                        event: "heart.sync_push_error",
+                        message: "post-turn push failed after retry: push_rejected",
+                        meta: { agentRoot, error: retryError, classification: "push_rejected" },
+                    });
+                    return { ok: false, error: retryError };
+                }
+            }
+            // Rebase failed — detect conflict files via git status. Preserve
+            // the original rebase error message so callers see the real cause.
+            const conflictFiles = collectRebaseConflictFiles(agentRoot);
+            const classification = conflictFiles.length > 0 ? "pull_rebase_conflict" : "unknown";
+            writePendingSync(agentRoot, rebaseError, classification, conflictFiles);
+            (0, runtime_1.emitNervesEvent)({
+                component: "heart",
+                event: "heart.sync_push_error",
+                message: `post-turn push failed: ${classification}`,
+                meta: { agentRoot, error: rebaseError, classification, conflictFiles },
+            });
+            return { ok: false, error: rebaseError };
+        }
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_push_end",
+            message: "post-turn push complete",
+            meta: { agentRoot, changedCount },
+        });
+        return { ok: true };
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        // Record it so the start-of-turn packet surfaces the failure; otherwise a
+        // failing local commit is visible only in nerves logs.
+        try {
+            writePendingSync(agentRoot, error, "unknown", []);
+        }
+        catch {
+            // Best effort: the nerves event below still records the failure.
+        }
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_push_error",
+            message: "post-turn push failed",
+            meta: { agentRoot, error },
+        });
+        return { ok: false, error };
+    }
+}
+/**
+ * Layer 2 — async, signal-aware sibling of `preTurnPull`.
+ *
+ * Used by `runBootSyncProbe` (the `ouro up` boot orchestrator) to perform
+ * the pre-flight pull with end-to-end `AbortSignal` propagation. The
+ * underlying `child_process.execFile` accepts the signal and kills the git
+ * child process when it aborts, so a hung remote (DNS hole, slow server)
+ * can be cut by the boot timeout wrapper rather than hanging the whole
+ * boot.
+ *
+ * The legacy sync `preTurnPull` is preserved unchanged for the per-turn
+ * pipeline at `src/senses/pipeline.ts:522`. The two functions share the
+ * same `.git` and remote-availability gates — the only difference is the
+ * pull itself: `execFileSync` (no signal) vs `execFile` + `{ signal }`.
+ *
+ * Honour-the-signal contract:
+ *   - If `options.signal` is already aborted at call time, the pull is
+ *     skipped and the result is `{ ok: false, error: "aborted" }`.
+ *   - If `options.signal` aborts mid-fetch, the child receives `SIGTERM`
+ *     via Node's built-in AbortSignal handling, and the result is
+ *     `{ ok: false, error: <abort message> }`.
+ *   - With no signal supplied, behaviour matches the sync version (subject
+ *     to the small differences listed above — same git-repo / no-remote
+ *     gates and same nerves events).
+ */
+function preTurnPullAsync(agentRoot, config, options = {}) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "heart",
+        event: "heart.sync_pull_start",
+        message: "pre-turn pull starting (async)",
+        meta: { agentRoot, remote: config.remote },
+    });
+    // Bail early when the caller has already aborted — saves a git invocation
+    // and signals failure consistently.
+    if (options.signal?.aborted) {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "heart",
+            event: "heart.sync_pull_aborted",
+            message: "pre-turn pull skipped: signal already aborted",
+            meta: { agentRoot },
+        });
+        return Promise.resolve({ ok: false, error: "aborted before pull started" });
+    }
+    // Same .git presence check as the sync version.
+    const repoCheck = ensureGitRepo(agentRoot);
+    if (!repoCheck.ok) {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "heart",
+            event: "heart.sync_not_a_repo",
+            message: "pre-turn pull failed: bundle is not a git repo (async)",
+            meta: { agentRoot },
+        });
+        return Promise.resolve(repoCheck);
+    }
+    // Remote-presence check stays sync — it's a fast local op and doesn't
+    // need cancellation. The hangable op is the actual pull.
+    try {
+        const remoteOutput = (0, child_process_1.execFileSync)("git", ["remote"], {
+            cwd: agentRoot,
+            stdio: "pipe",
+            timeout: 5000,
+        }).toString().trim();
+        if (remoteOutput.length === 0) {
+            (0, runtime_1.emitNervesEvent)({
+                component: "heart",
+                event: "heart.sync_pull_end",
+                message: "pre-turn pull skipped: no remote configured (async)",
+                meta: { agentRoot },
+            });
+            return Promise.resolve({ ok: true });
+        }
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        (0, runtime_1.emitNervesEvent)({
+            component: "heart",
+            event: "heart.sync_pull_error",
+            message: "pre-turn pull failed: git remote check failed (async)",
+            meta: { agentRoot, error },
+        });
+        return Promise.resolve({ ok: false, error });
+    }
+    // The hangable op. `execFile` accepts `{ signal }` and kills the child
+    // when the signal aborts — that's the whole point of the async path.
+    const execOptions = {
+        cwd: agentRoot,
+        timeout: 30000,
+    };
+    if (options.signal) {
+        execOptions.signal = options.signal;
+    }
+    return new Promise((resolve) => {
+        (0, child_process_1.execFile)("git", ["pull", config.remote], execOptions, (err) => {
+            if (err) {
+                const error = err instanceof Error ? err.message : String(err);
+                (0, runtime_1.emitNervesEvent)({
+                    component: "heart",
+                    event: "heart.sync_pull_error",
+                    message: "pre-turn pull failed (async)",
+                    meta: { agentRoot, error },
+                });
+                resolve({ ok: false, error });
+                return;
+            }
+            (0, runtime_1.emitNervesEvent)({
+                component: "heart",
+                event: "heart.sync_pull_end",
+                message: "pre-turn pull complete (async)",
+                meta: { agentRoot },
+            });
+            resolve({ ok: true });
+        });
+    });
+}

package/dist/heart/target-resolution.js

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listTargetSessionCandidates = listTargetSessionCandidates;
+exports.formatTargetSessionCandidates = formatTargetSessionCandidates;
+const friends_1 = require("@ouro.bot/friends");
+const session_transcript_1 = require("./session-transcript");
+const session_activity_1 = require("./session-activity");
+const runtime_1 = require("../nerves/runtime");
+function synthesizeFriendRecord(candidate) {
+    return {
+        id: candidate.friendId,
+        name: candidate.friendName,
+        role: "stranger",
+        trustLevel: "stranger",
+        connections: [],
+        externalIds: [],
+        tenantMemberships: [],
+        toolPreferences: {},
+        notes: {},
+        totalTokens: 0,
+        createdAt: new Date(0).toISOString(),
+        updatedAt: new Date(0).toISOString(),
+        schemaVersion: 1,
+    };
+}
+function deliveryPriority(mode) {
+    if (mode === "deliver_now")
+        return 0;
+    if (mode === "queue_only")
+        return 1;
+    return 2;
+}
+function activityPriority(source) {
+    return source === "friend-facing" ? 0 : 1;
+}
+function describeDelivery(candidate) {
+    if (candidate.channel === "mcp") {
+        // MCP can't push (no proactive API), but can queue — dev tool picks up via check_response
+        return { mode: "queue_only", reason: "MCP session — message queued for dev tool to pick up via check_response" };
+    }
+    if (candidate.channel !== "bluebubbles" && candidate.channel !== "teams") {
+        return { mode: "blocked", reason: "this channel does not support proactive outward delivery yet" };
+    }
+    if (candidate.trust.level === "family" || candidate.trust.level === "friend") {
+        return { mode: "deliver_now", reason: "directly trusted target on a proactive-delivery channel" };
+    }
+    return { mode: "queue_only", reason: "visible as a live chat, but immediate delivery still needs explicit cross-chat authorization" };
+}
+async function listTargetSessionCandidates(input) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "engine",
+        event: "engine.target_resolution_start",
+        message: "listing live target session candidates",
+        meta: {
+            sessionsDir: input.sessionsDir,
+            currentSession: input.currentSession
+                ? `${input.currentSession.friendId}/${input.currentSession.channel}/${input.currentSession.key}`
+                : null,
+        },
+    });
+    const activity = (0, session_activity_1.listSessionActivity)({
+        sessionsDir: input.sessionsDir,
+        friendsDir: input.friendsDir,
+        agentName: input.agentName,
+        currentSession: input.currentSession ?? null,
+    }).filter((entry) => entry.channel !== "inner");
+    const candidates = [];
+    for (const entry of activity) {
+        const friend = await input.friendStore.get(entry.friendId) ?? synthesizeFriendRecord(entry);
+        const trust = (0, friends_1.describeTrustContext)({
+            friend,
+            channel: entry.channel,
+        });
+        const sessionTail = await (0, session_transcript_1.summarizeSessionTail)({
+            sessionPath: entry.sessionPath,
+            friendId: entry.friendId,
+            channel: entry.channel,
+            key: entry.key,
+            messageCount: 6,
+            summarize: input.summarize,
+            trustLevel: trust.level,
+        });
+        const snapshot = sessionTail.kind === "ok"
+            ? sessionTail.snapshot
+            : sessionTail.kind === "empty"
+                ? "recent focus: no recent visible messages"
+                : "recent focus: session transcript unavailable";
+        const delivery = describeDelivery({
+            channel: entry.channel,
+            trust,
+        });
+        candidates.push({
+            friendId: entry.friendId,
+            friendName: entry.friendName,
+            channel: entry.channel,
+            key: entry.key,
+            sessionPath: entry.sessionPath,
+            snapshot,
+            trust,
+            delivery,
+            lastActivityAt: entry.lastActivityAt,
+            lastActivityMs: entry.lastActivityMs,
+            activitySource: entry.activitySource,
+        });
+    }
+    return candidates.sort((a, b) => {
+        const deliveryDiff = deliveryPriority(a.delivery.mode) - deliveryPriority(b.delivery.mode);
+        if (deliveryDiff !== 0)
+            return deliveryDiff;
+        const sourceDiff = activityPriority(a.activitySource) - activityPriority(b.activitySource);
+        if (sourceDiff !== 0)
+            return sourceDiff;
+        return b.lastActivityMs - a.lastActivityMs;
+    });
+}
+function formatTargetSessionCandidates(candidates) {
+    if (candidates.length === 0)
+        return "";
+    const lines = ["## candidate target chats"];
+    for (const candidate of candidates) {
+        lines.push(`- ${candidate.friendName} [${candidate.friendId}] via ${candidate.channel}/${candidate.key}`);
+        lines.push(`  trust: ${candidate.trust.level} (${candidate.trust.basis}) — ${candidate.trust.summary}`);
+        lines.push(`  delivery: ${candidate.delivery.mode} — ${candidate.delivery.reason}`);
+        lines.push(`  snapshot: ${candidate.snapshot}`);
+    }
+    return lines.join("\n");
+}