@ouro.bot/cli 0.1.0-alpha.92 → 0.1.0-alpha.920

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (716) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +154 -23
  3. package/RepairGuide.ouro/agent.json +5 -0
  4. package/RepairGuide.ouro/psyche/IDENTITY.md +19 -0
  5. package/RepairGuide.ouro/psyche/SOUL.md +55 -0
  6. package/RepairGuide.ouro/skills/diagnose-broken-remote.md +63 -0
  7. package/RepairGuide.ouro/skills/diagnose-stacked-typed-issues.md +35 -0
  8. package/RepairGuide.ouro/skills/diagnose-sync-blocked.md +54 -0
  9. package/RepairGuide.ouro/skills/diagnose-vault-expired.md +60 -0
  10. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/agent.json +4 -2
  11. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/SOUL.md +2 -2
  12. package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-serpent.md +1 -1
  13. package/assets/bluebubbles-host +264 -0
  14. package/assets/sanctuary-host-launcher.sh +16 -0
  15. package/changelog.json +5819 -16
  16. package/deploy/unraid/Dockerfile +58 -0
  17. package/deploy/unraid/README.txt +2997 -0
  18. package/deploy/unraid/audit-container-spec.sh +4 -0
  19. package/deploy/unraid/container-runtime.json +1 -0
  20. package/deploy/unraid/docker-man-template-transaction.mjs +711 -0
  21. package/deploy/unraid/docker-man-template-xml.cjs +105 -0
  22. package/deploy/unraid/migrate-sanctuary-bundle.mjs +60 -0
  23. package/deploy/unraid/ouro-events/bootstrap-spool.sh +92 -0
  24. package/deploy/unraid/ouro-events/emit-event.mjs +310 -0
  25. package/deploy/unraid/ouro-events/emit-usenet-event.sh +54 -0
  26. package/deploy/unraid/ouro-events/install-usenet-guard.sh +435 -0
  27. package/deploy/unraid/ouro-events/usenet-health.sh +176 -0
  28. package/deploy/unraid/sanctuary-acceptance-adapter.sh +43 -0
  29. package/deploy/unraid/sanctuary-acceptance-contract.json +198 -0
  30. package/deploy/unraid/sanctuary-acceptance-harness.sh +23 -0
  31. package/deploy/unraid/sanctuary-authority-installation.json +36 -0
  32. package/deploy/unraid/sanctuary-authority-service.sh +30 -0
  33. package/deploy/unraid/sanctuary-butler-upgrade.mjs +1254 -0
  34. package/deploy/unraid/sanctuary-deployment-target.mjs +710 -0
  35. package/deploy/unraid/sanctuary-replay-gate.mjs +1564 -0
  36. package/deploy/unraid/sanctuary-safe-rename.py +24 -0
  37. package/deploy/unraid/sanctuary-unit16-host-broker.mjs +2086 -0
  38. package/deploy/unraid/sanctuary-unit16-run.sh +560 -0
  39. package/deploy/unraid/sanctuary-unit18-target-audit.sh +27 -0
  40. package/deploy/unraid/sanctuary.ouro/agent.json +66 -0
  41. package/deploy/unraid/sanctuary.ouro/arc/README.md +3 -0
  42. package/deploy/unraid/sanctuary.ouro/awaiting/house-care-sweep.md +17 -0
  43. package/deploy/unraid/sanctuary.ouro/bundle-meta.json +5 -0
  44. package/deploy/unraid/sanctuary.ouro/habits/sanctuary-health.md +8 -0
  45. package/deploy/unraid/sanctuary.ouro/mcp/media-mcp.mjs +2231 -0
  46. package/deploy/unraid/sanctuary.ouro/provider-readiness.json +11 -0
  47. package/deploy/unraid/sanctuary.ouro/psyche/ASPIRATIONS.md +5 -0
  48. package/deploy/unraid/sanctuary.ouro/psyche/IDENTITY.md +5 -0
  49. package/deploy/unraid/sanctuary.ouro/psyche/LORE.md +33 -0
  50. package/deploy/unraid/sanctuary.ouro/psyche/SOUL.md +27 -0
  51. package/deploy/unraid/sanctuary.ouro/psyche/TACIT.md +22 -0
  52. package/deploy/unraid/sanctuary.ouro/state/policy/steward.json +7 -0
  53. package/deploy/unraid/sanctuary.ouro/tool-profiles.json +232 -0
  54. package/deploy/unraid/sanctuary.xml +30 -0
  55. package/dist/a2a/card.js +57 -0
  56. package/dist/a2a/client.js +250 -0
  57. package/dist/a2a/config.js +50 -0
  58. package/dist/a2a/delegated-command-grants.js +93 -0
  59. package/dist/a2a/delegated-command.js +197 -0
  60. package/dist/a2a/delegation-stores.js +56 -0
  61. package/dist/a2a/did-resolution.js +93 -0
  62. package/dist/a2a/escalation-grants.js +84 -0
  63. package/dist/a2a/escalation-wiring.js +60 -0
  64. package/dist/a2a/identity.js +258 -0
  65. package/dist/a2a/inbound-share.js +110 -0
  66. package/dist/a2a/mission-result-wire.js +196 -0
  67. package/dist/a2a/onboarding.js +133 -0
  68. package/dist/a2a/operator-trust.js +382 -0
  69. package/dist/a2a/outbox-client.js +57 -0
  70. package/dist/a2a/outbox-store.js +188 -0
  71. package/dist/a2a/outbox-wire.js +95 -0
  72. package/dist/a2a/pin-store.js +132 -0
  73. package/dist/a2a/replay-grant-holders.js +33 -0
  74. package/dist/a2a/replay-harness.js +188 -0
  75. package/dist/a2a/resolution-proof.js +53 -0
  76. package/dist/a2a/sealed-chat.js +113 -0
  77. package/dist/a2a/seen-ledger.js +120 -0
  78. package/dist/a2a/server.js +771 -0
  79. package/dist/a2a/task-store.js +69 -0
  80. package/dist/a2a/transport.js +45 -0
  81. package/dist/a2a/trust-commands.js +203 -0
  82. package/dist/a2a/trusted-files.js +185 -0
  83. package/dist/a2a/types.js +3 -0
  84. package/dist/arc/attention-types.js +8 -0
  85. package/dist/arc/cares.js +360 -0
  86. package/dist/arc/episodes.js +118 -0
  87. package/dist/arc/evolution.js +490 -0
  88. package/dist/arc/flight-recorder.js +1034 -0
  89. package/dist/arc/intentions.js +134 -0
  90. package/dist/arc/json-store.js +117 -0
  91. package/dist/arc/obligations.js +386 -0
  92. package/dist/arc/packets.js +336 -0
  93. package/dist/arc/presence.js +185 -0
  94. package/dist/arc/task-lifecycle.js +57 -0
  95. package/dist/commerce/store.js +755 -0
  96. package/dist/commerce/types.js +3 -0
  97. package/dist/heart/active-work.js +798 -40
  98. package/dist/heart/agent-entry.js +252 -3
  99. package/dist/heart/approval-files.js +113 -0
  100. package/dist/heart/approval-store.js +960 -0
  101. package/dist/heart/attachments/image-normalize.js +194 -0
  102. package/dist/heart/attachments/materialize.js +97 -0
  103. package/dist/heart/attachments/originals.js +88 -0
  104. package/dist/heart/attachments/render.js +29 -0
  105. package/dist/heart/attachments/sources/bluebubbles.js +156 -0
  106. package/dist/heart/attachments/sources/cli-local-file.js +78 -0
  107. package/dist/heart/attachments/sources/index.js +18 -0
  108. package/dist/heart/attachments/sources/telegram.js +71 -0
  109. package/dist/heart/attachments/store.js +132 -0
  110. package/dist/heart/attachments/types.js +93 -0
  111. package/dist/heart/auth/auth-flow.js +495 -0
  112. package/dist/heart/autonomy-budget.js +478 -0
  113. package/dist/heart/awaiting/a2a-await-delivery.js +109 -0
  114. package/dist/heart/awaiting/await-alert.js +152 -0
  115. package/dist/heart/awaiting/await-expiry.js +143 -0
  116. package/dist/heart/awaiting/await-loader.js +91 -0
  117. package/dist/heart/awaiting/await-parser.js +152 -0
  118. package/dist/heart/awaiting/await-runtime-state.js +111 -0
  119. package/dist/heart/awaiting/await-scheduler.js +391 -0
  120. package/dist/heart/background-operations.js +281 -0
  121. package/dist/heart/bluebubbles-host-account.js +78 -0
  122. package/dist/heart/bridges/manager.js +137 -17
  123. package/dist/heart/bridges/store.js +14 -2
  124. package/dist/heart/bundle-state.js +168 -0
  125. package/dist/heart/commitments.js +44 -18
  126. package/dist/heart/config-registry.js +331 -0
  127. package/dist/heart/config.js +174 -131
  128. package/dist/heart/context-loss-gauntlet.js +387 -0
  129. package/dist/heart/context-loss-sentinel.js +1159 -0
  130. package/dist/heart/core.js +2364 -578
  131. package/dist/heart/cross-chat-delivery.js +9 -22
  132. package/dist/heart/daemon/agent-config-check.js +451 -0
  133. package/dist/heart/daemon/agent-discovery.js +283 -3
  134. package/dist/heart/daemon/agent-home.js +319 -0
  135. package/dist/heart/daemon/agent-service.js +542 -0
  136. package/dist/heart/daemon/agentic-repair.js +547 -0
  137. package/dist/heart/daemon/await-private-wake.js +59 -0
  138. package/dist/heart/daemon/bluebubbles-cli-integration.js +71 -0
  139. package/dist/heart/daemon/bluebubbles-health-diagnostics.js +122 -0
  140. package/dist/heart/daemon/bluebubbles-host-protocol.js +433 -0
  141. package/dist/heart/daemon/bluebubbles-host.js +273 -0
  142. package/dist/heart/daemon/boot-sync-probe.js +197 -0
  143. package/dist/heart/daemon/cadence.js +180 -0
  144. package/dist/heart/daemon/cli-arg-redaction.js +26 -0
  145. package/dist/heart/daemon/cli-defaults.js +876 -0
  146. package/dist/heart/daemon/cli-desk.js +322 -0
  147. package/dist/heart/daemon/cli-exec.js +9199 -0
  148. package/dist/heart/daemon/cli-help.js +735 -0
  149. package/dist/heart/daemon/cli-parse.js +3211 -0
  150. package/dist/heart/daemon/cli-render-doctor.js +57 -0
  151. package/dist/heart/daemon/cli-render.js +819 -0
  152. package/dist/heart/daemon/cli-types.js +8 -0
  153. package/dist/heart/daemon/connect-bay.js +323 -0
  154. package/dist/heart/daemon/container-credential-bootstrap.js +273 -0
  155. package/dist/heart/daemon/container-healthcheck.js +112 -0
  156. package/dist/heart/daemon/container-runtime.js +97 -0
  157. package/dist/heart/daemon/container-spec-auditor-main.js +171 -0
  158. package/dist/heart/daemon/container-spec-auditor.js +235 -0
  159. package/dist/heart/daemon/daemon-bootstrap-startup.js +115 -0
  160. package/dist/heart/daemon/daemon-cli.js +29 -2350
  161. package/dist/heart/daemon/daemon-entry.js +953 -11
  162. package/dist/heart/daemon/daemon-health.js +186 -0
  163. package/dist/heart/daemon/daemon-rollup.js +57 -0
  164. package/dist/heart/daemon/daemon-runtime-sync.js +88 -13
  165. package/dist/heart/daemon/daemon-tombstone.js +236 -0
  166. package/dist/heart/daemon/daemon.js +2084 -105
  167. package/dist/heart/daemon/dns-workflow.js +394 -0
  168. package/dist/heart/daemon/doctor-types.js +8 -0
  169. package/dist/heart/daemon/doctor.js +1766 -0
  170. package/dist/heart/daemon/freshness.js +345 -0
  171. package/dist/heart/daemon/habit-private-wake.js +61 -0
  172. package/dist/heart/daemon/health-monitor.js +154 -11
  173. package/dist/heart/daemon/hooks/agent-config-v2.js +33 -0
  174. package/dist/heart/daemon/hooks/bundle-meta.js +135 -1
  175. package/dist/heart/daemon/http-health-probe.js +80 -0
  176. package/dist/heart/daemon/human-command-screens.js +234 -0
  177. package/dist/heart/daemon/human-readiness.js +114 -0
  178. package/dist/heart/daemon/inner-status.js +78 -0
  179. package/dist/heart/daemon/interactive-repair.js +394 -0
  180. package/dist/heart/daemon/launchd.js +37 -8
  181. package/dist/heart/daemon/log-tailer.js +79 -10
  182. package/dist/heart/daemon/logs-prune.js +132 -0
  183. package/dist/heart/daemon/mcp-canary.js +524 -0
  184. package/dist/heart/daemon/message-router.js +65 -5
  185. package/dist/heart/daemon/migrate-to-desk.js +848 -0
  186. package/dist/heart/daemon/os-cron-deps.js +135 -0
  187. package/dist/heart/daemon/os-cron.js +22 -14
  188. package/dist/heart/daemon/ouro-bot-entry.js +6 -3
  189. package/dist/heart/daemon/ouro-entry.js +5 -2
  190. package/dist/heart/daemon/plugin-cli.js +432 -0
  191. package/dist/heart/daemon/process-manager.js +760 -61
  192. package/dist/heart/daemon/provider-discovery.js +137 -0
  193. package/dist/heart/daemon/provider-ping-progress.js +83 -0
  194. package/dist/heart/daemon/prunable-bundle.js +144 -0
  195. package/dist/heart/daemon/pulse.js +511 -0
  196. package/dist/heart/daemon/readiness-repair.js +365 -0
  197. package/dist/heart/daemon/run-hooks.js +2 -0
  198. package/dist/heart/daemon/runtime-logging.js +47 -14
  199. package/dist/heart/daemon/runtime-metadata.js +2 -30
  200. package/dist/heart/daemon/runtime-mode.js +13 -2
  201. package/dist/heart/daemon/safe-mode.js +161 -0
  202. package/dist/heart/daemon/sanctuary-acceptance-adapter.js +2654 -0
  203. package/dist/heart/daemon/sanctuary-acceptance-harness.js +1830 -0
  204. package/dist/heart/daemon/sanctuary-acceptance-marker.js +267 -0
  205. package/dist/heart/daemon/sanctuary-acceptance-scenarios.js +955 -0
  206. package/dist/heart/daemon/sanctuary-authority-codec.js +86 -0
  207. package/dist/heart/daemon/sanctuary-authority-epoch.js +281 -0
  208. package/dist/heart/daemon/sanctuary-authority-installation.js +161 -0
  209. package/dist/heart/daemon/sanctuary-authority-ledger.js +241 -0
  210. package/dist/heart/daemon/sanctuary-authority-root-lifecycle.js +1267 -0
  211. package/dist/heart/daemon/sanctuary-authority-vault-migration.js +79 -0
  212. package/dist/heart/daemon/sanctuary-bundle-migration.js +730 -0
  213. package/dist/heart/daemon/sanctuary-host-authority.js +1008 -0
  214. package/dist/heart/daemon/sanctuary-host-detached-supervisor.js +493 -0
  215. package/dist/heart/daemon/sanctuary-host-executor.js +670 -0
  216. package/dist/heart/daemon/sanctuary-host-linux-kernel.js +334 -0
  217. package/dist/heart/daemon/sanctuary-host-supervisor-entry.js +207 -0
  218. package/dist/heart/daemon/sanctuary-host-supervisor.js +95 -0
  219. package/dist/heart/daemon/sanctuary-package-management.js +103 -0
  220. package/dist/heart/daemon/sanctuary-scheduler-liveness.js +227 -0
  221. package/dist/heart/daemon/sanctuary-scheduler-origin.js +132 -0
  222. package/dist/heart/daemon/sanctuary-telegram-authority-entry.js +475 -0
  223. package/dist/heart/daemon/sanctuary-telegram-authority-gateway.js +585 -0
  224. package/dist/heart/daemon/sanctuary-telegram-authority-service.js +676 -0
  225. package/dist/heart/daemon/sense-manager.js +733 -48
  226. package/dist/heart/daemon/session-id-resolver.js +131 -0
  227. package/dist/heart/daemon/skill-management-installer.js +1 -1
  228. package/dist/heart/daemon/socket-client.js +180 -12
  229. package/dist/heart/daemon/stale-bundle-prune.js +113 -0
  230. package/dist/heart/daemon/startup-tui.js +339 -0
  231. package/dist/heart/daemon/supercronic-supervisor.js +282 -0
  232. package/dist/heart/daemon/task-scheduler.js +117 -39
  233. package/dist/heart/daemon/terminal-ui.js +503 -0
  234. package/dist/heart/daemon/thoughts.js +138 -54
  235. package/dist/heart/daemon/up-progress.js +366 -0
  236. package/dist/heart/daemon/vault-items.js +56 -0
  237. package/dist/heart/delegation.js +1 -4
  238. package/dist/heart/external-events/router.js +1516 -0
  239. package/dist/heart/failure-reports.js +336 -0
  240. package/dist/heart/file-lock.js +109 -0
  241. package/dist/heart/frontend-approval-runtime.js +506 -0
  242. package/dist/heart/frontend-journal.js +215 -0
  243. package/dist/heart/frontend-session-service.js +237 -0
  244. package/dist/heart/frontend-socket-client.js +164 -0
  245. package/dist/heart/frontend-socket.js +400 -0
  246. package/dist/heart/habits/habit-cancel.js +810 -0
  247. package/dist/heart/habits/habit-lifecycle.js +1327 -0
  248. package/dist/heart/habits/habit-migration.js +194 -0
  249. package/dist/heart/habits/habit-parser.js +278 -0
  250. package/dist/heart/habits/habit-runtime-state.js +93 -0
  251. package/dist/heart/habits/habit-scheduler.js +653 -0
  252. package/dist/heart/habits/habit-session-summary.js +318 -0
  253. package/dist/heart/habits/habit-session.js +636 -0
  254. package/dist/heart/{daemon → hatch}/hatch-flow.js +55 -62
  255. package/dist/heart/{daemon → hatch}/hatch-specialist.js +6 -8
  256. package/dist/heart/{daemon → hatch}/specialist-prompt.js +12 -9
  257. package/dist/heart/{daemon → hatch}/specialist-tools.js +53 -18
  258. package/dist/heart/identity.js +230 -59
  259. package/dist/heart/kept-notes.js +289 -0
  260. package/dist/heart/kicks.js +1 -1
  261. package/dist/heart/machine-identity.js +175 -0
  262. package/dist/heart/mail-import-discovery.js +356 -0
  263. package/dist/heart/mailbox/mailbox-http-hooks.js +98 -0
  264. package/dist/heart/mailbox/mailbox-http-response.js +7 -0
  265. package/dist/heart/mailbox/mailbox-http-routes.js +398 -0
  266. package/dist/heart/mailbox/mailbox-http-static.js +103 -0
  267. package/dist/heart/mailbox/mailbox-http-transport.js +272 -0
  268. package/dist/heart/mailbox/mailbox-http.js +99 -0
  269. package/dist/heart/mailbox/mailbox-read.js +39 -0
  270. package/dist/heart/mailbox/mailbox-types.js +27 -0
  271. package/dist/heart/mailbox/mailbox-view.js +197 -0
  272. package/dist/heart/mailbox/readers/agent-machine.js +428 -0
  273. package/dist/heart/mailbox/readers/continuity-readers.js +329 -0
  274. package/dist/heart/mailbox/readers/mail.js +375 -0
  275. package/dist/heart/mailbox/readers/runtime-readers.js +823 -0
  276. package/dist/heart/mailbox/readers/sessions.js +231 -0
  277. package/dist/heart/mailbox/readers/shared.js +111 -0
  278. package/dist/heart/mcp/mcp-server.js +696 -0
  279. package/dist/heart/migrate-config.js +100 -0
  280. package/dist/heart/model-capabilities.js +83 -16
  281. package/dist/heart/orientation-frame.js +345 -0
  282. package/dist/heart/platform.js +81 -0
  283. package/dist/heart/primitives.js +1 -1
  284. package/dist/heart/private-runtime/decision-renderer.js +158 -0
  285. package/dist/heart/private-runtime/index.js +18 -0
  286. package/dist/heart/private-runtime/ledger.js +221 -0
  287. package/dist/heart/private-runtime/policy.js +260 -0
  288. package/dist/heart/private-runtime/types.js +2 -0
  289. package/dist/heart/progress-story.js +1 -1
  290. package/dist/heart/provider-attempt.js +137 -0
  291. package/dist/heart/provider-binding-resolver.js +273 -0
  292. package/dist/heart/provider-credentials.js +449 -0
  293. package/dist/heart/provider-failover.js +311 -0
  294. package/dist/heart/provider-models.js +96 -0
  295. package/dist/heart/provider-ping.js +265 -0
  296. package/dist/heart/provider-readiness-cache.js +119 -0
  297. package/dist/heart/provider-visibility.js +188 -0
  298. package/dist/heart/providers/anthropic-token.js +131 -0
  299. package/dist/heart/providers/anthropic.js +173 -60
  300. package/dist/heart/providers/azure.js +23 -11
  301. package/dist/heart/providers/error-classification.js +127 -0
  302. package/dist/heart/providers/github-copilot.js +38 -39
  303. package/dist/heart/providers/minimax-vlm.js +189 -0
  304. package/dist/heart/providers/minimax.js +26 -8
  305. package/dist/heart/providers/openai-codex-token.js +349 -0
  306. package/dist/heart/providers/openai-codex.js +55 -40
  307. package/dist/heart/providers/openai-compatible.js +177 -0
  308. package/dist/heart/reply-style.js +52 -0
  309. package/dist/heart/run-ledger.js +247 -0
  310. package/dist/heart/runtime-capability-check.js +170 -0
  311. package/dist/heart/runtime-credentials.js +607 -0
  312. package/dist/heart/runtime-cwd.js +87 -0
  313. package/dist/heart/sense-truth.js +24 -4
  314. package/dist/heart/session-activity.js +92 -24
  315. package/dist/heart/session-events.js +1504 -0
  316. package/dist/heart/session-playback-cli-main.js +5 -0
  317. package/dist/heart/session-playback-cli.js +36 -0
  318. package/dist/heart/session-playback.js +231 -0
  319. package/dist/heart/session-redaction-repair-cli-main.js +31 -0
  320. package/dist/heart/session-redaction-repair.js +552 -0
  321. package/dist/heart/session-stats-cli-main.js +5 -0
  322. package/dist/heart/session-stats.js +183 -0
  323. package/dist/heart/session-transcript.js +133 -0
  324. package/dist/heart/shelf-claims.js +78 -0
  325. package/dist/heart/shepherd-config.js +113 -0
  326. package/dist/heart/source-grounding.js +297 -0
  327. package/dist/heart/start-of-turn-packet.js +372 -0
  328. package/dist/heart/steward-policy.js +656 -0
  329. package/dist/heart/streaming.js +609 -207
  330. package/dist/heart/structured-output.js +196 -0
  331. package/dist/heart/sync-classification.js +176 -0
  332. package/dist/heart/sync-health.js +152 -0
  333. package/dist/heart/sync.js +726 -0
  334. package/dist/heart/target-resolution.js +11 -7
  335. package/dist/heart/tempo.js +93 -0
  336. package/dist/heart/temporal-view.js +41 -0
  337. package/dist/heart/timeouts.js +101 -0
  338. package/dist/heart/tool-activity-callbacks.js +59 -0
  339. package/dist/heart/tool-approval.js +382 -0
  340. package/dist/heart/tool-description.js +155 -0
  341. package/dist/heart/tool-friction.js +55 -0
  342. package/dist/heart/tool-loop.js +206 -0
  343. package/dist/heart/turn-context.js +496 -0
  344. package/dist/heart/turn-execution-lease.js +30 -0
  345. package/dist/heart/{daemon → versioning}/ouro-bot-global-installer.js +6 -5
  346. package/dist/heart/{daemon → versioning}/ouro-bot-wrapper.js +3 -2
  347. package/dist/heart/versioning/ouro-path-installer.js +432 -0
  348. package/dist/heart/versioning/ouro-recovery-launcher.js +76 -0
  349. package/dist/heart/versioning/ouro-version-manager.js +432 -0
  350. package/dist/heart/versioning/release-sources.js +173 -0
  351. package/dist/heart/versioning/self-update-defaults.js +294 -0
  352. package/dist/heart/versioning/self-update.js +196 -0
  353. package/dist/heart/{daemon → versioning}/staged-restart.js +40 -8
  354. package/dist/heart/{daemon → versioning}/update-checker.js +6 -1
  355. package/dist/heart/versioning/update-hooks.js +154 -0
  356. package/dist/heart/versioning/update-state.js +126 -0
  357. package/dist/heart/versioning/updater-launchd.js +150 -0
  358. package/dist/heart/versioning/version-intent.js +114 -0
  359. package/dist/heart/work-card.js +380 -0
  360. package/dist/mailbox-ui/assets/index-Cyv4mw3Y.js +1 -0
  361. package/dist/mailbox-ui/assets/index-Du_9G9WO.css +1 -0
  362. package/dist/mailbox-ui/assets/vendor-CcN1XpQ9.js +61 -0
  363. package/dist/mailbox-ui/index.html +16 -0
  364. package/dist/mailroom/attention.js +167 -0
  365. package/dist/mailroom/autonomy.js +209 -0
  366. package/dist/mailroom/blob-store.js +889 -0
  367. package/dist/mailroom/body-cache.js +61 -0
  368. package/dist/mailroom/cache-sync-cli.js +58 -0
  369. package/dist/mailroom/core.js +803 -0
  370. package/dist/mailroom/entry.js +160 -0
  371. package/dist/mailroom/file-store.js +568 -0
  372. package/dist/mailroom/hosted-cache-sync.js +384 -0
  373. package/dist/mailroom/mbox-import.js +393 -0
  374. package/dist/mailroom/migration.js +164 -0
  375. package/dist/mailroom/outbound.js +380 -0
  376. package/dist/mailroom/policy.js +263 -0
  377. package/dist/mailroom/reader.js +292 -0
  378. package/dist/mailroom/search-cache.js +513 -0
  379. package/dist/mailroom/search-relevance.js +319 -0
  380. package/dist/mailroom/smtp-ingress.js +176 -0
  381. package/dist/mailroom/source-state.js +176 -0
  382. package/dist/mailroom/thread.js +109 -0
  383. package/dist/mailroom/travel-extract.js +89 -0
  384. package/dist/mind/bundle-manifest.js +24 -2
  385. package/dist/mind/context.js +307 -139
  386. package/dist/mind/desk-section.js +362 -0
  387. package/dist/mind/diary-integrity.js +60 -0
  388. package/dist/mind/{memory.js → diary.js} +68 -77
  389. package/dist/mind/embedding-provider.js +60 -0
  390. package/dist/mind/file-state.js +179 -0
  391. package/dist/mind/friend-link-codes.js +209 -0
  392. package/dist/mind/friend-merge.js +330 -0
  393. package/dist/mind/{associative-recall.js → note-search.js} +47 -58
  394. package/dist/mind/obligation-steering.js +199 -3
  395. package/dist/mind/pending.js +36 -10
  396. package/dist/mind/prompt-budget.js +479 -0
  397. package/dist/mind/prompt-refresh.js +3 -2
  398. package/dist/mind/prompt.js +1085 -198
  399. package/dist/mind/provenance-trust.js +26 -0
  400. package/dist/mind/record-paths.js +312 -0
  401. package/dist/mind/scrutiny.js +173 -0
  402. package/dist/mind/session-transaction.js +564 -0
  403. package/dist/nerves/cli-logging.js +7 -1
  404. package/dist/nerves/coverage/audit-rules.js +15 -6
  405. package/dist/nerves/coverage/audit.js +28 -2
  406. package/dist/nerves/coverage/cli.js +1 -1
  407. package/dist/nerves/coverage/contract.js +5 -5
  408. package/dist/nerves/coverage/file-completeness.js +139 -5
  409. package/dist/nerves/coverage/run-artifacts.js +55 -35
  410. package/dist/nerves/coverage/source-scanner.js +4 -4
  411. package/dist/nerves/event-buffer.js +111 -0
  412. package/dist/nerves/index.js +293 -9
  413. package/dist/nerves/observation.js +20 -0
  414. package/dist/nerves/redact.js +79 -0
  415. package/dist/nerves/review/cli-main.js +5 -0
  416. package/dist/nerves/review/cli.js +156 -0
  417. package/dist/nerves/review/core.js +159 -0
  418. package/dist/nerves/runtime.js +17 -1
  419. package/dist/repertoire/ado-client.js +15 -56
  420. package/dist/repertoire/ado-semantic.js +16 -10
  421. package/dist/repertoire/api-client.js +97 -0
  422. package/dist/repertoire/bitwarden-store.js +1201 -0
  423. package/dist/repertoire/bundle-templates.js +71 -0
  424. package/dist/repertoire/bw-installer.js +231 -0
  425. package/dist/repertoire/coding/codex-jsonl.js +64 -0
  426. package/dist/repertoire/coding/context-pack.js +331 -0
  427. package/dist/repertoire/coding/feedback.js +174 -32
  428. package/dist/repertoire/coding/index.js +15 -3
  429. package/dist/repertoire/coding/manager.js +159 -10
  430. package/dist/repertoire/coding/spawner.js +40 -11
  431. package/dist/repertoire/coding/tools.js +182 -18
  432. package/dist/repertoire/coding/workbench-client.js +272 -0
  433. package/dist/repertoire/coding/workbench-manager.js +346 -0
  434. package/dist/repertoire/commerce-errors.js +109 -0
  435. package/dist/repertoire/commerce-self-test.js +156 -0
  436. package/dist/repertoire/credential-access.js +183 -0
  437. package/dist/repertoire/desk/classifier.js +362 -0
  438. package/dist/repertoire/duffel-client.js +185 -0
  439. package/dist/repertoire/github-client.js +14 -55
  440. package/dist/repertoire/graph-client.js +11 -52
  441. package/dist/repertoire/guardrails.js +968 -20
  442. package/dist/repertoire/house-sweep.js +469 -0
  443. package/dist/repertoire/mcp-client.js +58 -5
  444. package/dist/repertoire/mcp-manager.js +427 -139
  445. package/dist/repertoire/mcp-tools.js +132 -0
  446. package/dist/repertoire/mcp-write-guard.js +46 -0
  447. package/dist/repertoire/plugin-mcp.js +175 -0
  448. package/dist/repertoire/plugins.js +253 -0
  449. package/dist/repertoire/relationship-authorization.js +322 -0
  450. package/dist/repertoire/sanctuary-container-policy.js +46 -0
  451. package/dist/repertoire/shell-sessions.js +134 -0
  452. package/dist/repertoire/skills.js +48 -4
  453. package/dist/repertoire/stripe-client.js +131 -0
  454. package/dist/repertoire/tool-arguments.js +182 -0
  455. package/dist/repertoire/tool-results.js +29 -0
  456. package/dist/repertoire/tools-a2a.js +699 -0
  457. package/dist/repertoire/tools-attachments.js +322 -0
  458. package/dist/repertoire/tools-awaiting.js +872 -0
  459. package/dist/repertoire/tools-base.js +83 -1168
  460. package/dist/repertoire/tools-bluebubbles.js +2 -0
  461. package/dist/repertoire/tools-bridge.js +144 -0
  462. package/dist/repertoire/tools-bundle.js +995 -0
  463. package/dist/repertoire/tools-commerce.js +253 -0
  464. package/dist/repertoire/tools-config.js +186 -0
  465. package/dist/repertoire/tools-continuity.js +575 -0
  466. package/dist/repertoire/tools-credential.js +383 -0
  467. package/dist/repertoire/tools-escalation.js +84 -0
  468. package/dist/repertoire/tools-evolution.js +527 -0
  469. package/dist/repertoire/tools-files.js +344 -0
  470. package/dist/repertoire/tools-flight.js +290 -0
  471. package/dist/repertoire/tools-flow.js +119 -0
  472. package/dist/repertoire/tools-friend-link.js +57 -0
  473. package/dist/repertoire/tools-github.js +3 -8
  474. package/dist/repertoire/tools-habits.js +103 -0
  475. package/dist/repertoire/tools-house-care.js +174 -0
  476. package/dist/repertoire/tools-mail.js +1828 -0
  477. package/dist/repertoire/tools-notes.js +496 -0
  478. package/dist/repertoire/tools-obligations.js +182 -0
  479. package/dist/repertoire/tools-orientation.js +31 -0
  480. package/dist/repertoire/tools-record.js +482 -0
  481. package/dist/repertoire/tools-rsvp.js +139 -0
  482. package/dist/repertoire/tools-runtime.js +238 -0
  483. package/dist/repertoire/tools-sanctuary-host.js +202 -0
  484. package/dist/repertoire/tools-session.js +1133 -0
  485. package/dist/repertoire/tools-shell.js +149 -0
  486. package/dist/repertoire/tools-shepherd.js +262 -0
  487. package/dist/repertoire/tools-steward-policy.js +147 -0
  488. package/dist/repertoire/tools-stripe.js +224 -0
  489. package/dist/repertoire/tools-surface.js +369 -0
  490. package/dist/repertoire/tools-teams.js +12 -39
  491. package/dist/repertoire/tools-telegram-contacts.js +37 -0
  492. package/dist/repertoire/tools-travel.js +125 -0
  493. package/dist/repertoire/tools-trip.js +982 -0
  494. package/dist/repertoire/tools-unraid.js +556 -0
  495. package/dist/repertoire/tools-user-profile.js +146 -0
  496. package/dist/repertoire/tools-vault.js +40 -0
  497. package/dist/repertoire/tools-voice-local.js +198 -0
  498. package/dist/repertoire/tools-voice.js +145 -0
  499. package/dist/repertoire/tools.js +514 -156
  500. package/dist/repertoire/travel-api-client.js +360 -0
  501. package/dist/repertoire/unraid-client.js +155 -0
  502. package/dist/repertoire/unraid-restart.js +339 -0
  503. package/dist/repertoire/user-profile.js +131 -0
  504. package/dist/repertoire/vault-setup.js +246 -0
  505. package/dist/repertoire/vault-unlock.js +686 -0
  506. package/dist/rsvp/aisleplanner-client.js +354 -0
  507. package/dist/rsvp/cli.js +936 -0
  508. package/dist/rsvp/config.js +327 -0
  509. package/dist/rsvp/cutover.js +433 -0
  510. package/dist/rsvp/diagnostics.js +232 -0
  511. package/dist/rsvp/diff-renderer.js +176 -0
  512. package/dist/rsvp/habit-policy.js +110 -0
  513. package/dist/rsvp/habit-stage.js +123 -0
  514. package/dist/rsvp/incident-bundle.js +97 -0
  515. package/dist/rsvp/migration.js +204 -0
  516. package/dist/rsvp/native-habit-runner.js +630 -0
  517. package/dist/rsvp/outbound-state.js +628 -0
  518. package/dist/rsvp/query.js +118 -0
  519. package/dist/rsvp/replay.js +233 -0
  520. package/dist/rsvp/snapshot.js +232 -0
  521. package/dist/rsvp/spend-ledger.js +175 -0
  522. package/dist/scripts/claude-code-hook.js +41 -0
  523. package/dist/scripts/claude-code-stop-hook.js +47 -0
  524. package/dist/senses/a2a-entry.js +132 -0
  525. package/dist/senses/acp-server.js +386 -0
  526. package/dist/senses/attention-queue.js +186 -0
  527. package/dist/senses/await-turn-message.js +65 -0
  528. package/dist/senses/bluebubbles/active-turns.js +216 -0
  529. package/dist/senses/bluebubbles/attachment-cache.js +53 -0
  530. package/dist/senses/bluebubbles/attachment-download.js +137 -0
  531. package/dist/senses/{bluebubbles-client.js → bluebubbles/client.js} +379 -41
  532. package/dist/senses/bluebubbles/context-packet.js +207 -0
  533. package/dist/senses/bluebubbles/context-smoke.js +144 -0
  534. package/dist/senses/bluebubbles/entry.js +90 -0
  535. package/dist/senses/bluebubbles/host-account-verifier.js +88 -0
  536. package/dist/senses/{bluebubbles-inbound-log.js → bluebubbles/inbound-log.js} +21 -3
  537. package/dist/senses/bluebubbles/index.js +3878 -0
  538. package/dist/senses/bluebubbles/latest-turn.js +311 -0
  539. package/dist/senses/{bluebubbles-media.js → bluebubbles/media.js} +121 -71
  540. package/dist/senses/{bluebubbles-model.js → bluebubbles/model.js} +159 -28
  541. package/dist/senses/{bluebubbles-mutation-log.js → bluebubbles/mutation-log.js} +24 -13
  542. package/dist/senses/bluebubbles/outbound-state.js +308 -0
  543. package/dist/senses/bluebubbles/processed-log.js +133 -0
  544. package/dist/senses/bluebubbles/reaction-policy.js +47 -0
  545. package/dist/senses/bluebubbles/replay.js +284 -0
  546. package/dist/senses/{bluebubbles-runtime-state.js → bluebubbles/runtime-state.js} +30 -2
  547. package/dist/senses/bluebubbles/semantic-receipts.js +1986 -0
  548. package/dist/senses/{bluebubbles-session-cleanup.js → bluebubbles/session-cleanup.js} +1 -1
  549. package/dist/senses/bluebubbles/webhook-registration.js +257 -0
  550. package/dist/senses/bluebubbles-meta-guard.js +39 -0
  551. package/dist/senses/cli/bracketed-paste.js +82 -0
  552. package/dist/senses/cli/image-paste.js +287 -0
  553. package/dist/senses/cli/image-ref-navigation.js +75 -0
  554. package/dist/senses/cli/ink-app.js +156 -0
  555. package/dist/senses/cli/inline-diff.js +64 -0
  556. package/dist/senses/cli/input-keys.js +174 -0
  557. package/dist/senses/cli/kill-ring.js +86 -0
  558. package/dist/senses/cli/message-list.js +51 -0
  559. package/dist/senses/cli/ouro-tui.js +607 -0
  560. package/dist/senses/cli/spinner-imperative.js +135 -0
  561. package/dist/senses/cli/spinner.js +101 -0
  562. package/dist/senses/cli/status-line.js +60 -0
  563. package/dist/senses/cli/streaming-markdown.js +526 -0
  564. package/dist/senses/cli/tool-display.js +85 -0
  565. package/dist/senses/cli/tool-render.js +85 -0
  566. package/dist/senses/cli/tui-store.js +241 -0
  567. package/dist/senses/cli/virtual-list.js +35 -0
  568. package/dist/senses/cli-entry.js +60 -8
  569. package/dist/senses/cli.js +601 -304
  570. package/dist/senses/commands.js +66 -3
  571. package/dist/senses/context-packet-ledger.js +371 -0
  572. package/dist/senses/context-packets.js +154 -0
  573. package/dist/senses/habit-lifecycle-guard.js +24 -0
  574. package/dist/senses/habit-turn-message.js +160 -0
  575. package/dist/senses/ingress-evidence.js +2 -0
  576. package/dist/senses/mail-entry.js +66 -0
  577. package/dist/senses/mail.js +524 -0
  578. package/dist/senses/pipeline.js +1158 -204
  579. package/dist/senses/private-runtime-worker.js +859 -0
  580. package/dist/senses/private-runtime.js +1627 -0
  581. package/dist/senses/proactive-content-guard.js +51 -0
  582. package/dist/senses/root-host-approval-port.js +345 -0
  583. package/dist/senses/root-host-approval-runtime.js +393 -0
  584. package/dist/senses/sanctuary-authority-resident.js +102 -0
  585. package/dist/senses/sanctuary-download-credit-presentation.js +31 -0
  586. package/dist/senses/sanctuary-full-visibility-contract.js +302 -0
  587. package/dist/senses/sanctuary-grounding.js +118 -0
  588. package/dist/senses/sanctuary-health-acceptance-probe-entry.js +12 -0
  589. package/dist/senses/sanctuary-health-acceptance-probe.js +774 -0
  590. package/dist/senses/sanctuary-health-runner.js +104 -0
  591. package/dist/senses/sanctuary-health.js +422 -0
  592. package/dist/senses/sanctuary-install-state-contract.js +169 -0
  593. package/dist/senses/sanctuary-interactive-control.js +410 -0
  594. package/dist/senses/sanctuary-media-catalog-contract.js +259 -0
  595. package/dist/senses/sanctuary-media-optimization.js +514 -0
  596. package/dist/senses/sanctuary-runtime.js +369 -0
  597. package/dist/senses/sanctuary-sab.js +85 -0
  598. package/dist/senses/sanctuary-storage-optimization-contract.js +32 -0
  599. package/dist/senses/shared-turn.js +793 -0
  600. package/dist/senses/shepherd/client.js +196 -0
  601. package/dist/senses/shepherd/cmux.js +344 -0
  602. package/dist/senses/shepherd/herdr.js +315 -0
  603. package/dist/senses/shepherd/host.js +14 -0
  604. package/dist/senses/shepherd/judge.js +137 -0
  605. package/dist/senses/shepherd/owner-notice.js +245 -0
  606. package/dist/senses/shepherd/redact.js +66 -0
  607. package/dist/senses/shepherd/returns.js +79 -0
  608. package/dist/senses/shepherd/sense.js +309 -0
  609. package/dist/senses/shepherd-entry.js +78 -0
  610. package/dist/senses/surface-tool.js +109 -0
  611. package/dist/senses/teams-entry.js +68 -8
  612. package/dist/senses/teams.js +598 -233
  613. package/dist/senses/telegram-admission.js +718 -0
  614. package/dist/senses/telegram-approval-runtime.js +793 -0
  615. package/dist/senses/telegram-attachments.js +186 -0
  616. package/dist/senses/telegram-audit-ledger.js +220 -0
  617. package/dist/senses/telegram-authority-transport.js +231 -0
  618. package/dist/senses/telegram-client.js +1749 -0
  619. package/dist/senses/telegram-effect-adapter.js +900 -0
  620. package/dist/senses/telegram-entry.js +83 -0
  621. package/dist/senses/telegram-handoff.js +80 -0
  622. package/dist/senses/telegram.js +2405 -0
  623. package/dist/senses/trust-gate.js +104 -9
  624. package/dist/senses/voice/audio-playback.js +237 -0
  625. package/dist/senses/voice/audio-routing.js +119 -0
  626. package/dist/senses/voice/call-auth.js +250 -0
  627. package/dist/senses/voice/elevenlabs.js +202 -0
  628. package/dist/senses/voice/floor-control.js +431 -0
  629. package/dist/senses/voice/floor-controller.js +115 -0
  630. package/dist/senses/voice/golden-path.js +116 -0
  631. package/dist/senses/voice/index.js +29 -0
  632. package/dist/senses/voice/local-audio-control.js +344 -0
  633. package/dist/senses/voice/local-audio-devices.js +516 -0
  634. package/dist/senses/voice/local-audio-disclosure.js +174 -0
  635. package/dist/senses/voice/local-audio-identity.js +103 -0
  636. package/dist/senses/voice/local-audio-join.js +325 -0
  637. package/dist/senses/voice/local-audio-mute.js +199 -0
  638. package/dist/senses/voice/local-audio-notify.js +121 -0
  639. package/dist/senses/voice/local-audio-prompts.js +116 -0
  640. package/dist/senses/voice/local-audio-transport.js +427 -0
  641. package/dist/senses/voice/local-audio.js +281 -0
  642. package/dist/senses/voice/local-media-stream.js +145 -0
  643. package/dist/senses/voice/meeting.js +113 -0
  644. package/dist/senses/voice/outbound.js +190 -0
  645. package/dist/senses/voice/phone.js +33 -0
  646. package/dist/senses/voice/playback.js +139 -0
  647. package/dist/senses/voice/process-guards.js +51 -0
  648. package/dist/senses/voice/realtime-eval.js +496 -0
  649. package/dist/senses/voice/realtime-tool-schema.js +195 -0
  650. package/dist/senses/voice/realtime-trace.js +531 -0
  651. package/dist/senses/voice/transcript.js +70 -0
  652. package/dist/senses/voice/turn.js +191 -0
  653. package/dist/senses/voice/twilio-phone-runtime.js +836 -0
  654. package/dist/senses/voice/twilio-phone.js +5454 -0
  655. package/dist/senses/voice/types.js +2 -0
  656. package/dist/senses/voice/whisper.js +161 -0
  657. package/dist/senses/voice-entry.js +83 -0
  658. package/dist/senses/voice-realtime-eval-command.js +99 -0
  659. package/dist/senses/voice-realtime-eval-entry.js +21 -0
  660. package/dist/senses/voice-twilio-entry.js +87 -0
  661. package/dist/trips/core.js +138 -0
  662. package/dist/trips/store.js +265 -0
  663. package/dist/util/frontmatter.js +69 -0
  664. package/npm-shrinkwrap.json +8100 -0
  665. package/package.json +74 -13
  666. package/skills/agent-commerce.md +113 -0
  667. package/skills/browser-navigation.md +117 -0
  668. package/skills/commerce-setup-guide.md +116 -0
  669. package/skills/commerce-setup.md +84 -0
  670. package/skills/configure-dev-tools.md +99 -0
  671. package/skills/travel-planning.md +138 -0
  672. package/dist/heart/daemon/auth-flow.js +0 -430
  673. package/dist/heart/daemon/ouro-path-installer.js +0 -260
  674. package/dist/heart/daemon/ouro-version-manager.js +0 -171
  675. package/dist/heart/daemon/update-hooks.js +0 -138
  676. package/dist/heart/obligations.js +0 -191
  677. package/dist/heart/safe-workspace.js +0 -362
  678. package/dist/heart/session-recall.js +0 -116
  679. package/dist/mind/friends/channel.js +0 -84
  680. package/dist/mind/friends/group-context.js +0 -144
  681. package/dist/mind/friends/resolver.js +0 -84
  682. package/dist/mind/friends/store-file.js +0 -190
  683. package/dist/mind/friends/store.js +0 -4
  684. package/dist/mind/friends/tokens.js +0 -26
  685. package/dist/mind/friends/trust-explanation.js +0 -74
  686. package/dist/mind/friends/types.js +0 -29
  687. package/dist/repertoire/tasks/board.js +0 -134
  688. package/dist/repertoire/tasks/index.js +0 -224
  689. package/dist/repertoire/tasks/lifecycle.js +0 -80
  690. package/dist/repertoire/tasks/middleware.js +0 -65
  691. package/dist/repertoire/tasks/parser.js +0 -173
  692. package/dist/repertoire/tasks/scanner.js +0 -132
  693. package/dist/repertoire/tasks/transitions.js +0 -144
  694. package/dist/senses/bluebubbles-entry.js +0 -13
  695. package/dist/senses/bluebubbles.js +0 -1181
  696. package/dist/senses/debug-activity.js +0 -154
  697. package/dist/senses/inner-dialog-worker.js +0 -90
  698. package/dist/senses/inner-dialog.js +0 -525
  699. package/subagents/README.md +0 -7
  700. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/basilisk.md +0 -0
  701. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jafar.md +0 -0
  702. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/jormungandr.md +0 -0
  703. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/kaa.md +0 -0
  704. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/medusa.md +0 -0
  705. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/monty.md +0 -0
  706. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/nagini.md +0 -0
  707. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/ouroboros.md +0 -0
  708. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/python.md +0 -0
  709. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/quetzalcoatl.md +0 -0
  710. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/sir-hiss.md +0 -0
  711. /package/{AdoptionSpecialist.ouro → SerpentGuide.ouro}/psyche/identities/the-snake.md +0 -0
  712. /package/dist/{repertoire/tasks/types.js → heart/attachments/sources/adapter.js} +0 -0
  713. /package/dist/heart/{daemon → hatch}/hatch-animation.js +0 -0
  714. /package/dist/heart/{daemon → hatch}/specialist-orchestrator.js +0 -0
  715. /package/dist/heart/{daemon → versioning}/ouro-uti.js +0 -0
  716. /package/dist/heart/{daemon → versioning}/wrapper-publish-guard.js +0 -0
@@ -35,22 +35,36 @@ var __importStar = (this && this.__importStar) || (function () {
35
35
  Object.defineProperty(exports, "__esModule", { value: true });
36
36
  exports.DaemonSenseManager = void 0;
37
37
  const fs = __importStar(require("fs"));
38
+ const bluebubbles_host_account_1 = require("../bluebubbles-host-account");
38
39
  const os = __importStar(require("os"));
39
40
  const path = __importStar(require("path"));
40
41
  const runtime_1 = require("../../nerves/runtime");
41
- const bluebubbles_runtime_state_1 = require("../../senses/bluebubbles-runtime-state");
42
42
  const identity_1 = require("../identity");
43
+ const runtime_credentials_1 = require("../runtime-credentials");
44
+ const provider_credentials_1 = require("../provider-credentials");
43
45
  const sense_truth_1 = require("../sense-truth");
46
+ const machine_identity_1 = require("../machine-identity");
47
+ const shepherd_config_1 = require("../shepherd-config");
44
48
  const process_manager_1 = require("./process-manager");
49
+ const config_1 = require("../../a2a/config");
45
50
  const DEFAULT_TEAMS_PORT = 3978;
46
51
  const DEFAULT_BLUEBUBBLES_PORT = 18790;
47
52
  const DEFAULT_BLUEBUBBLES_WEBHOOK_PATH = "/bluebubbles-webhook";
48
53
  const BLUEBUBBLES_RUNTIME_FRESHNESS_WINDOW_MS = 90_000;
54
+ const SENSE_CONFIG_RETRY_DELAYS_MS = [1_000, 2_000, 5_000, 10_000, 30_000, 60_000];
55
+ const WORKBENCH_RUNTIME_INJECTION_DETAIL = "runtime-injected by Workbench app; no agent.json entry required";
56
+ const WORKBENCH_STALE_BUNDLE_DETAIL = "stale agent.json Workbench entry; run 'ouro connect workbench' to clean it and use runtime injection";
49
57
  function defaultSenses() {
50
58
  return {
51
59
  cli: { ...identity_1.DEFAULT_AGENT_SENSES.cli },
52
60
  teams: { ...identity_1.DEFAULT_AGENT_SENSES.teams },
53
61
  bluebubbles: { ...identity_1.DEFAULT_AGENT_SENSES.bluebubbles },
62
+ mail: { ...identity_1.DEFAULT_AGENT_SENSES.mail },
63
+ voice: { ...identity_1.DEFAULT_AGENT_SENSES.voice },
64
+ a2a: { ...identity_1.DEFAULT_AGENT_SENSES.a2a },
65
+ telegram: { ...identity_1.DEFAULT_AGENT_SENSES.telegram },
66
+ workbench: { ...identity_1.DEFAULT_AGENT_SENSES.workbench },
67
+ shepherd: { ...identity_1.DEFAULT_AGENT_SENSES.shepherd },
54
68
  };
55
69
  }
56
70
  function readAgentSenses(agentJsonPath) {
@@ -70,13 +84,27 @@ function readAgentSenses(agentJsonPath) {
70
84
  reason: error instanceof Error ? error.message : String(error),
71
85
  },
72
86
  });
73
- return defaults;
87
+ return { senses: defaults, workbenchHasStaleBundleEntry: false };
74
88
  }
75
89
  const rawSenses = parsed.senses;
76
90
  if (!rawSenses || typeof rawSenses !== "object" || Array.isArray(rawSenses)) {
77
- return defaults;
91
+ const rawMcpServers = parsed.mcpServers;
92
+ const workbenchHasStaleBundleEntry = !!rawMcpServers
93
+ && typeof rawMcpServers === "object"
94
+ && !Array.isArray(rawMcpServers)
95
+ && Object.prototype.hasOwnProperty.call(rawMcpServers, "ouro_workbench");
96
+ if (workbenchHasStaleBundleEntry)
97
+ defaults.workbench = { enabled: true };
98
+ return { senses: defaults, workbenchHasStaleBundleEntry };
78
99
  }
79
- for (const sense of ["cli", "teams", "bluebubbles"]) {
100
+ const workbenchSensePresent = Object.prototype.hasOwnProperty.call(rawSenses, "workbench");
101
+ const rawMcpServers = parsed.mcpServers;
102
+ const workbenchMcpPresent = !!rawMcpServers
103
+ && typeof rawMcpServers === "object"
104
+ && !Array.isArray(rawMcpServers)
105
+ && Object.prototype.hasOwnProperty.call(rawMcpServers, "ouro_workbench");
106
+ const workbenchHasStaleBundleEntry = workbenchSensePresent || workbenchMcpPresent;
107
+ for (const sense of ["cli", "teams", "bluebubbles", "mail", "voice", "a2a", "telegram", "workbench", "shepherd"]) {
80
108
  const rawSense = rawSenses[sense];
81
109
  if (!rawSense || typeof rawSense !== "object" || Array.isArray(rawSense)) {
82
110
  continue;
@@ -84,45 +112,103 @@ function readAgentSenses(agentJsonPath) {
84
112
  const enabled = rawSense.enabled;
85
113
  if (typeof enabled === "boolean") {
86
114
  defaults[sense] = { enabled };
115
+ const hostUsername = rawSense.hostUsername;
116
+ // A missing or malformed host account stays unset, so BlueBubbles fails closed.
117
+ if (sense === "bluebubbles" && typeof hostUsername === "string" && hostUsername.trim().length > 0) {
118
+ defaults[sense] = { enabled, hostUsername: hostUsername.trim() };
119
+ }
87
120
  }
88
121
  }
89
- return defaults;
90
- }
91
- function readSecretsPayload(secretsPath) {
92
- try {
93
- const raw = fs.readFileSync(secretsPath, "utf-8");
94
- const parsed = JSON.parse(raw);
95
- if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
96
- return { payload: {}, error: "invalid secrets.json object" };
97
- }
98
- return { payload: parsed, error: null };
99
- }
100
- catch (error) {
101
- return {
102
- payload: {},
103
- error: error instanceof Error ? error.message : String(error),
104
- };
122
+ if (workbenchHasStaleBundleEntry) {
123
+ defaults.workbench = { enabled: true };
105
124
  }
125
+ return { senses: defaults, workbenchHasStaleBundleEntry };
106
126
  }
107
127
  function textField(record, key) {
108
128
  const value = record?.[key];
109
129
  return typeof value === "string" ? value.trim() : "";
110
130
  }
131
+ function booleanField(record, key) {
132
+ return record?.[key] === true;
133
+ }
111
134
  function numberField(record, key, fallback) {
112
135
  const value = record?.[key];
113
136
  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
114
137
  }
115
- function senseFactsFromSecrets(agent, senses, secretsPath) {
138
+ function a2aMachineRuntimeConfig(agent) {
139
+ const runtimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
140
+ const payload = runtimeConfig.ok ? runtimeConfig.config : {};
141
+ const a2a = payload.a2a;
142
+ return a2a && typeof a2a === "object" && !Array.isArray(a2a) ? a2a : undefined;
143
+ }
144
+ function managedA2AArgs(agent) {
145
+ const a2a = a2aMachineRuntimeConfig(agent);
146
+ const args = ["--port", String(numberField(a2a, "port", (0, config_1.defaultA2APort)(agent)))];
147
+ const host = textField(a2a, "host");
148
+ const endpointPath = (0, config_1.normalizeA2APath)(textField(a2a, "path") || config_1.A2A_DEFAULT_PATH);
149
+ const publicUrl = textField(a2a, "publicUrl");
150
+ if (host)
151
+ args.push("--host", host);
152
+ args.push("--path", endpointPath);
153
+ if (publicUrl)
154
+ args.push("--base-url", publicUrl);
155
+ return args;
156
+ }
157
+ function compactRuntimeConfigError(agent, error) {
158
+ const compact = error.replace(/\s+/g, " ").trim();
159
+ if (/credential vault is locked|vault locked|vault is locked/i.test(compact)) {
160
+ return `vault locked; run 'ouro vault unlock --agent ${agent}' if you have the saved secret, or 'ouro vault replace --agent ${agent}' if none was saved`;
161
+ }
162
+ return compact || "unavailable";
163
+ }
164
+ function runtimeConfigUnavailableDetail(agent, runtimeConfig) {
165
+ if (runtimeConfig.ok)
166
+ return "";
167
+ const itemName = /^vault:[^:]+:(.+)$/.exec(runtimeConfig.itemPath)?.[1] ?? "runtime/config";
168
+ if (runtimeConfig.reason === "missing")
169
+ return `missing vault ${itemName} (${agent})`;
170
+ return `vault ${itemName} unavailable (${compactRuntimeConfigError(agent, runtimeConfig.error)})`;
171
+ }
172
+ function needsMachineRuntimeConfig(agent, sense) {
173
+ return sense === "bluebubbles" || sense === "voice" || sense === "a2a" || sense === "shepherd" || (agent === "sanctuary" && sense === "telegram");
174
+ }
175
+ function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent), workbenchHasStaleBundleEntry = false) {
116
176
  const base = {
117
177
  cli: { configured: true, detail: "local interactive terminal" },
118
178
  teams: { configured: false, detail: "not enabled in agent.json" },
119
179
  bluebubbles: { configured: false, detail: "not enabled in agent.json" },
180
+ mail: { configured: false, detail: "not enabled in agent.json" },
181
+ voice: { configured: false, detail: "not enabled in agent.json" },
182
+ a2a: { configured: false, detail: "not enabled in agent.json" },
183
+ telegram: { configured: false, detail: "not enabled in agent.json" },
184
+ workbench: { configured: false, detail: "not enabled in agent.json" },
185
+ shepherd: { configured: false, detail: "not enabled in agent.json" },
120
186
  };
121
- const { payload, error } = readSecretsPayload(secretsPath);
187
+ const payload = runtimeConfig.ok ? runtimeConfig.config : {};
188
+ const unavailableDetail = runtimeConfigUnavailableDetail(agent, runtimeConfig);
122
189
  const teams = payload.teams;
123
190
  const teamsChannel = payload.teamsChannel;
124
- const bluebubbles = payload.bluebubbles;
125
- const bluebubblesChannel = payload.bluebubblesChannel;
191
+ const machinePayload = machineRuntimeConfig.ok ? machineRuntimeConfig.config : {};
192
+ const bluebubbles = machinePayload.bluebubbles;
193
+ const bluebubblesChannel = machinePayload.bluebubblesChannel;
194
+ const mailroom = payload.mailroom;
195
+ const integrations = payload.integrations;
196
+ const voice = machinePayload.voice;
197
+ const a2a = machinePayload.a2a;
198
+ if (senses.telegram.enabled && agent === "sanctuary") {
199
+ const ready = runtimeConfig.ok && machineRuntimeConfig.ok
200
+ && !Object.hasOwn(payload, "telegramBotToken") && !Object.hasOwn(machinePayload, "telegramBotToken");
201
+ base.telegram = ready
202
+ ? { configured: true, detail: "root authority transport; gateway validated at process startup" }
203
+ : { configured: false, detail: "root authority migration requires available tokenless credential inventories" };
204
+ }
205
+ else if (senses.telegram.enabled) {
206
+ const missing = ["telegramBotToken", "telegramAuthorizedUserId", "telegramAuthorizedChatId"]
207
+ .filter((field) => !textField(payload, field));
208
+ base.telegram = missing.length === 0
209
+ ? { configured: true, detail: "private long poll" }
210
+ : { configured: false, detail: `missing runtime/config: ${missing.join(", ")}` };
211
+ }
126
212
  if (senses.teams.enabled) {
127
213
  const missing = [];
128
214
  if (!textField(teams, "clientId"))
@@ -138,9 +224,9 @@ function senseFactsFromSecrets(agent, senses, secretsPath) {
138
224
  }
139
225
  : {
140
226
  configured: false,
141
- detail: error && !fs.existsSync(secretsPath)
142
- ? `missing secrets.json (${agent})`
143
- : `missing ${missing.join("/")}`,
227
+ detail: runtimeConfig.ok
228
+ ? `missing ${missing.join("/")}`
229
+ : unavailableDetail,
144
230
  };
145
231
  }
146
232
  if (senses.bluebubbles.enabled) {
@@ -156,19 +242,170 @@ function senseFactsFromSecrets(agent, senses, secretsPath) {
156
242
  }
157
243
  : {
158
244
  configured: false,
159
- detail: error && !fs.existsSync(secretsPath)
160
- ? `missing secrets.json (${agent})`
161
- : `missing ${missing.join("/")}`,
245
+ optional: !machineRuntimeConfig.ok && machineRuntimeConfig.reason === "missing",
246
+ detail: !machineRuntimeConfig.ok && machineRuntimeConfig.reason === "missing"
247
+ ? "not attached on this machine"
248
+ : machineRuntimeConfig.ok
249
+ ? `missing ${missing.join("/")}`
250
+ : runtimeConfigUnavailableDetail(agent, machineRuntimeConfig),
162
251
  };
163
252
  }
253
+ if (senses.bluebubbles.enabled && base.bluebubbles.configured) {
254
+ // Attached here, but whose Apple ID? Without a declared host, never start.
255
+ const declared = (0, bluebubbles_host_account_1.checkBlueBubblesHostDeclared)(agent, senses.bluebubbles.hostUsername);
256
+ if (!declared.ok)
257
+ base.bluebubbles = { configured: false, hostRefused: true, detail: declared.message };
258
+ }
259
+ if (senses.mail.enabled) {
260
+ const privateKeys = mailroom?.privateKeys;
261
+ const hasPrivateKeys = !!privateKeys && typeof privateKeys === "object" && !Array.isArray(privateKeys) && Object.values(privateKeys).some((value) => typeof value === "string" && value.trim().length > 0);
262
+ const mailboxAddress = textField(mailroom, "mailboxAddress");
263
+ const missing = [];
264
+ if (!mailboxAddress)
265
+ missing.push("mailroom.mailboxAddress");
266
+ if (!hasPrivateKeys)
267
+ missing.push("mailroom.privateKeys");
268
+ base.mail = missing.length === 0
269
+ ? { configured: true, detail: mailboxAddress }
270
+ : {
271
+ configured: false,
272
+ detail: runtimeConfig.ok
273
+ ? `missing ${missing.join("/")}`
274
+ : unavailableDetail,
275
+ };
276
+ }
277
+ if (senses.voice.enabled) {
278
+ const portableVoice = payload.voice;
279
+ const conversationEngine = (textField(voice, "twilioConversationEngine")
280
+ || textField(voice, "conversationEngine")
281
+ || textField(portableVoice, "twilioConversationEngine")
282
+ || textField(portableVoice, "conversationEngine")
283
+ || "cascade").toLowerCase();
284
+ const twilioTransportMode = (textField(voice, "twilioTransportMode") || "record-play").toLowerCase();
285
+ const twilioPublicUrl = textField(voice, "twilioPublicUrl");
286
+ const hasOpenAIRealtimeKey = !!(textField(portableVoice, "openaiRealtimeApiKey")
287
+ || textField(integrations, "openaiApiKey")
288
+ || textField(integrations, "openaiEmbeddingsApiKey"));
289
+ const missing = [];
290
+ /* v8 ignore start -- voice setup missing-field matrix is enforced by the voice runtime resolver; sense-manager only renders human-readable readiness facts @preserve */
291
+ if (conversationEngine === "openai-realtime" || conversationEngine === "openai-sip") {
292
+ if (conversationEngine === "openai-realtime" && twilioTransportMode !== "media-stream") {
293
+ missing.push("voice.twilioTransportMode=media-stream");
294
+ }
295
+ if (!hasOpenAIRealtimeKey) {
296
+ missing.push("voice.openaiRealtimeApiKey");
297
+ }
298
+ if (conversationEngine === "openai-sip") {
299
+ if (!textField(portableVoice, "openaiSipProjectId") && !textField(voice, "openaiSipProjectId")) {
300
+ missing.push("voice.openaiSipProjectId");
301
+ }
302
+ const allowUnsignedWebhooks = booleanField(portableVoice, "openaiSipAllowUnsignedWebhooks")
303
+ || booleanField(voice, "openaiSipAllowUnsignedWebhooks");
304
+ if (!allowUnsignedWebhooks && !textField(portableVoice, "openaiSipWebhookSecret") && !textField(voice, "openaiSipWebhookSecret")) {
305
+ missing.push("voice.openaiSipWebhookSecret");
306
+ }
307
+ }
308
+ }
309
+ else {
310
+ if (!textField(integrations, "elevenLabsApiKey"))
311
+ missing.push("integrations.elevenLabsApiKey");
312
+ if (!textField(integrations, "elevenLabsVoiceId") && !textField(portableVoice, "elevenLabsVoiceId")) {
313
+ missing.push("integrations.elevenLabsVoiceId");
314
+ }
315
+ if (!textField(voice, "whisperCliPath"))
316
+ missing.push("voice.whisperCliPath");
317
+ if (!textField(voice, "whisperModelPath"))
318
+ missing.push("voice.whisperModelPath");
319
+ }
320
+ /* v8 ignore stop */
321
+ base.voice = missing.length === 0
322
+ ? {
323
+ configured: true,
324
+ /* v8 ignore start -- voice detail copy mirrors runtime resolver modes; resolver tests own the matrix @preserve */
325
+ detail: conversationEngine === "openai-sip"
326
+ ? twilioPublicUrl
327
+ ? "OpenAI Realtime SIP speech-to-speech; Twilio phone transport attached"
328
+ : "OpenAI Realtime SIP speech-to-speech"
329
+ : conversationEngine === "openai-realtime"
330
+ ? twilioPublicUrl
331
+ ? "OpenAI Realtime speech-to-speech; Twilio phone transport attached"
332
+ : "OpenAI Realtime speech-to-speech"
333
+ : twilioPublicUrl
334
+ ? "local Whisper.cpp STT + ElevenLabs TTS; Twilio phone transport attached"
335
+ : "local Whisper.cpp STT + ElevenLabs TTS",
336
+ /* v8 ignore stop */
337
+ }
338
+ : {
339
+ configured: false,
340
+ optional: !machineRuntimeConfig.ok && machineRuntimeConfig.reason === "missing",
341
+ detail: !machineRuntimeConfig.ok && machineRuntimeConfig.reason === "missing"
342
+ ? "not attached on this machine"
343
+ : runtimeConfig.ok && machineRuntimeConfig.ok
344
+ ? `missing ${missing.join("/")}`
345
+ : !runtimeConfig.ok
346
+ ? unavailableDetail
347
+ : runtimeConfigUnavailableDetail(agent, machineRuntimeConfig),
348
+ };
349
+ }
350
+ if (senses.a2a.enabled) {
351
+ const port = numberField(a2a, "port", (0, config_1.defaultA2APort)(agent));
352
+ const endpointPath = (0, config_1.normalizeA2APath)(textField(a2a, "path") || config_1.A2A_DEFAULT_PATH);
353
+ const publicUrl = textField(a2a, "publicUrl");
354
+ base.a2a = {
355
+ configured: true,
356
+ /* v8 ignore next -- listSenseRows tests cover the public URL; daemon defaults cover the local port in live startup smoke @preserve */
357
+ detail: publicUrl ? `${publicUrl}${endpointPath}` : `:${port} ${endpointPath}`,
358
+ };
359
+ }
360
+ if (senses.shepherd.enabled) {
361
+ base.shepherd = !machineRuntimeConfig.ok && machineRuntimeConfig.reason !== "missing"
362
+ ? { configured: false, detail: runtimeConfigUnavailableDetail(agent, machineRuntimeConfig) }
363
+ : (0, shepherd_config_1.shepherdConfigFacts)(machinePayload);
364
+ }
365
+ if (workbenchHasStaleBundleEntry || senses.workbench.enabled) {
366
+ base.workbench = {
367
+ configured: false,
368
+ detail: WORKBENCH_STALE_BUNDLE_DETAIL,
369
+ };
370
+ }
164
371
  return base;
165
372
  }
373
+ function senseRepairHint(agent, sense) {
374
+ if (sense === "teams") {
375
+ return `Run 'ouro vault config set --agent ${agent} --key teams.clientId', teams.clientSecret, and teams.tenantId; then run 'ouro up' again.`;
376
+ }
377
+ if (sense === "mail") {
378
+ return `Agent-runnable: provision Mailroom access with 'ouro connect mail --agent ${agent}', then restart with 'ouro up'.`;
379
+ }
380
+ if (sense === "voice") {
381
+ return `Agent-runnable: run 'ouro connect voice --agent ${agent}' for config guidance; use voice.twilioConversationEngine=openai-sip with voice.openaiRealtimeApiKey, voice.openaiSipProjectId, and voice.openaiSipWebhookSecret for preferred SIP phone voice; use openai-realtime for Media Streams fallback, or save ElevenLabs and local Whisper.cpp settings for cascade fallback; then run 'ouro up' again.`;
382
+ }
383
+ /* v8 ignore next -- A2A currently has no credential-gated not-configured state; kept for future repair copy symmetry @preserve */
384
+ if (sense === "a2a") {
385
+ return `Agent-runnable: run 'ouro connect a2a --agent ${agent}', then restart with 'ouro up'.`;
386
+ }
387
+ if (sense === "telegram") {
388
+ return agent === "sanctuary"
389
+ ? "Agent-runnable: complete or recover the root authority migration; do not restore a resident Telegram token."
390
+ : `Agent-runnable: store Telegram bot/user/chat coordinates with 'ouro connect telegram --agent ${agent}', then restart with 'ouro up'.`;
391
+ }
392
+ if (sense === "shepherd")
393
+ return (0, shepherd_config_1.shepherdRepairHint)(agent);
394
+ /* v8 ignore next -- Workbench is deliberately not daemon-managed, so getSenseInventory never asks the daemon manager for a repair hint @preserve */
395
+ if (sense === "workbench") {
396
+ return `Agent-runnable: install Ouro Workbench.app, then launch the boss through Workbench or run 'ouro acp-serve --agent ${agent} --workbench-mcp'; 'ouro connect workbench --agent ${agent}' only cleans stale bundle entries.`;
397
+ }
398
+ return `Run 'ouro connect bluebubbles --agent ${agent}' to attach BlueBubbles on this machine; then run 'ouro up' again.`;
399
+ }
400
+ function currentMachineId() {
401
+ return (0, machine_identity_1.loadOrCreateMachineIdentity)({ homeDir: os.homedir() }).machineId;
402
+ }
166
403
  function parseSenseSnapshotName(name) {
167
404
  const parts = name.split(":");
168
405
  if (parts.length !== 2)
169
406
  return null;
170
407
  const [agent, sense] = parts;
171
- if (sense !== "teams" && sense !== "bluebubbles")
408
+ if (sense !== "teams" && sense !== "bluebubbles" && sense !== "mail" && sense !== "voice" && sense !== "a2a" && sense !== "telegram" && sense !== "shepherd")
172
409
  return null;
173
410
  return { agent, sense };
174
411
  }
@@ -177,6 +414,41 @@ function runtimeInfoFor(status) {
177
414
  return { runtime: "running" };
178
415
  return { runtime: "error" };
179
416
  }
417
+ function managedSenseEntry(sense) {
418
+ if (sense === "teams")
419
+ return "senses/teams-entry.js";
420
+ if (sense === "bluebubbles")
421
+ return "senses/bluebubbles/entry.js";
422
+ if (sense === "voice")
423
+ return "senses/voice-entry.js";
424
+ if (sense === "a2a")
425
+ return "senses/a2a-entry.js";
426
+ if (sense === "telegram")
427
+ return "senses/telegram-entry.js";
428
+ if (sense === "shepherd")
429
+ return "senses/shepherd-entry.js";
430
+ return "senses/mail-entry.js";
431
+ }
432
+ function runtimeCredentialBootstrapFor(agent, sense) {
433
+ const runtime = (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent);
434
+ const usesMachineConfig = sense === "bluebubbles" || sense === "voice" || sense === "a2a" || sense === "telegram" || sense === "shepherd";
435
+ const machineId = usesMachineConfig ? currentMachineId() : undefined;
436
+ const machine = usesMachineConfig ? (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent) : null;
437
+ const providerPool = (0, provider_credentials_1.readProviderCredentialPool)(agent);
438
+ const providerCredentialRecords = providerPool.ok
439
+ ? Object.values(providerPool.pool.providers).filter((record) => !!record)
440
+ : [];
441
+ const bootstrap = {
442
+ agentName: agent,
443
+ runtimeConfig: runtime.ok ? runtime.config : undefined,
444
+ machineRuntimeConfig: machine?.ok ? machine.config : undefined,
445
+ machineId,
446
+ providerCredentialRecords: providerCredentialRecords.length > 0 ? providerCredentialRecords : undefined,
447
+ };
448
+ if (!bootstrap.runtimeConfig && !bootstrap.machineRuntimeConfig && !bootstrap.providerCredentialRecords)
449
+ return null;
450
+ return bootstrap;
451
+ }
180
452
  function blueBubblesRuntimeStateIsFresh(lastCheckedAt, now = Date.now()) {
181
453
  if (!lastCheckedAt) {
182
454
  return false;
@@ -187,53 +459,189 @@ function blueBubblesRuntimeStateIsFresh(lastCheckedAt, now = Date.now()) {
187
459
  }
188
460
  return checkedAt >= now - BLUEBUBBLES_RUNTIME_FRESHNESS_WINDOW_MS;
189
461
  }
462
+ function readBlueBubblesRuntimeJson(runtimePath) {
463
+ try {
464
+ const raw = fs.readFileSync(runtimePath, "utf-8");
465
+ const parsed = JSON.parse(raw);
466
+ /* v8 ignore start -- branches: ternary fallbacks for missing/malformed BB runtime fields @preserve */
467
+ return {
468
+ upstreamStatus: parsed.upstreamStatus === "ok" || parsed.upstreamStatus === "error"
469
+ ? parsed.upstreamStatus
470
+ : "unknown",
471
+ detail: typeof parsed.detail === "string" && parsed.detail.trim()
472
+ ? parsed.detail
473
+ : "startup health probe pending",
474
+ lastCheckedAt: typeof parsed.lastCheckedAt === "string" ? parsed.lastCheckedAt : undefined,
475
+ proofMethod: typeof parsed.proofMethod === "string" && parsed.proofMethod.trim()
476
+ ? parsed.proofMethod
477
+ : undefined,
478
+ pendingRecoveryCount: typeof parsed.pendingRecoveryCount === "number" && Number.isFinite(parsed.pendingRecoveryCount)
479
+ ? parsed.pendingRecoveryCount
480
+ : 0,
481
+ failedRecoveryCount: typeof parsed.failedRecoveryCount === "number" && Number.isFinite(parsed.failedRecoveryCount)
482
+ ? parsed.failedRecoveryCount
483
+ : 0,
484
+ oldestPendingRecoveryAt: typeof parsed.oldestPendingRecoveryAt === "string" ? parsed.oldestPendingRecoveryAt : undefined,
485
+ oldestPendingRecoveryAgeMs: typeof parsed.oldestPendingRecoveryAgeMs === "number" && Number.isFinite(parsed.oldestPendingRecoveryAgeMs)
486
+ ? parsed.oldestPendingRecoveryAgeMs
487
+ : undefined,
488
+ activeTurnCount: typeof parsed.activeTurnCount === "number" && Number.isFinite(parsed.activeTurnCount)
489
+ ? parsed.activeTurnCount
490
+ : undefined,
491
+ stalledTurnCount: typeof parsed.stalledTurnCount === "number" && Number.isFinite(parsed.stalledTurnCount)
492
+ ? parsed.stalledTurnCount
493
+ : undefined,
494
+ oldestActiveTurnStartedAt: typeof parsed.oldestActiveTurnStartedAt === "string" ? parsed.oldestActiveTurnStartedAt : undefined,
495
+ oldestActiveTurnAgeMs: typeof parsed.oldestActiveTurnAgeMs === "number" && Number.isFinite(parsed.oldestActiveTurnAgeMs)
496
+ ? parsed.oldestActiveTurnAgeMs
497
+ : undefined,
498
+ };
499
+ /* v8 ignore stop */
500
+ /* v8 ignore start -- defensive: catch for missing/corrupt BB runtime state file @preserve */
501
+ }
502
+ catch {
503
+ return { upstreamStatus: "unknown", detail: "startup health probe pending", pendingRecoveryCount: 0, failedRecoveryCount: 0 };
504
+ }
505
+ /* v8 ignore stop */
506
+ }
190
507
  function readBlueBubblesRuntimeFacts(agent, bundlesRoot, snapshot) {
191
508
  const agentRoot = path.join(bundlesRoot, `${agent}.ouro`);
192
509
  const runtimePath = path.join(agentRoot, "state", "senses", "bluebubbles", "runtime.json");
193
510
  if (!fs.existsSync(runtimePath)) {
194
511
  return { runtime: snapshot?.runtime };
195
512
  }
196
- const state = (0, bluebubbles_runtime_state_1.readBlueBubblesRuntimeState)(agent, agentRoot);
513
+ const state = readBlueBubblesRuntimeJson(runtimePath);
514
+ const checkedAtMs = state.lastCheckedAt ? Date.parse(state.lastCheckedAt) : Number.NaN;
515
+ const proofFacts = {
516
+ proofMethod: state.proofMethod ?? "bluebubbles.checkHealth",
517
+ lastProofAt: state.lastCheckedAt,
518
+ proofAgeMs: Number.isFinite(checkedAtMs) ? Math.max(0, Date.now() - checkedAtMs) : undefined,
519
+ pendingRecoveryCount: state.pendingRecoveryCount,
520
+ failedRecoveryCount: state.failedRecoveryCount,
521
+ oldestPendingRecoveryAt: state.oldestPendingRecoveryAt,
522
+ oldestPendingRecoveryAgeMs: state.oldestPendingRecoveryAgeMs,
523
+ activeTurnCount: state.activeTurnCount,
524
+ stalledTurnCount: state.stalledTurnCount,
525
+ oldestActiveTurnStartedAt: state.oldestActiveTurnStartedAt,
526
+ oldestActiveTurnAgeMs: state.oldestActiveTurnAgeMs,
527
+ };
197
528
  if (!blueBubblesRuntimeStateIsFresh(state.lastCheckedAt)) {
198
- return { runtime: snapshot?.runtime };
529
+ return {
530
+ runtime: snapshot?.runtime,
531
+ lastFailure: state.lastCheckedAt ? "BlueBubbles proof is stale" : undefined,
532
+ failureLayer: state.lastCheckedAt ? "proof_freshness" : undefined,
533
+ };
534
+ }
535
+ if (snapshot?.runtime !== "running") {
536
+ return {
537
+ runtime: "error",
538
+ detail: "BlueBubbles listener is not running",
539
+ ...proofFacts,
540
+ lastFailure: "listener process is not running",
541
+ failureLayer: "listener",
542
+ recoveryAction: "daemon process manager will restart the BlueBubbles listener after an unsolicited exit",
543
+ };
199
544
  }
200
545
  if (state.upstreamStatus === "error") {
201
546
  return {
202
547
  runtime: "error",
203
548
  detail: state.detail,
549
+ ...proofFacts,
550
+ lastFailure: state.detail,
551
+ failureLayer: "upstream",
552
+ recoveryAction: "verify BlueBubbles server/app auth and local machine attachment, then retry the listener",
553
+ };
554
+ }
555
+ if (state.pendingRecoveryCount > 0) {
556
+ return {
557
+ runtime: "error",
558
+ detail: state.detail,
559
+ ...proofFacts,
560
+ lastFailure: state.detail,
561
+ failureLayer: "recovery_queue",
562
+ recoveryAction: "queued recovery will retry; inspect BlueBubbles inbound/recovery sidecar logs if age keeps growing",
563
+ };
564
+ }
565
+ if ((state.stalledTurnCount ?? 0) > 0) {
566
+ return {
567
+ runtime: "error",
568
+ detail: state.detail,
569
+ ...proofFacts,
570
+ lastFailure: state.detail,
571
+ failureLayer: "live_turn_stall",
572
+ recoveryAction: "live iMessage turn timeout/watchdog will release the lane and recovery will retry captured messages",
204
573
  };
205
574
  }
206
575
  if (state.upstreamStatus === "ok") {
207
- return { runtime: "running" };
576
+ return {
577
+ runtime: "running",
578
+ ...proofFacts,
579
+ ...(state.failedRecoveryCount > 0 ? { detail: state.detail } : {}),
580
+ ...(state.failedRecoveryCount > 0 ? {
581
+ lastFailure: state.detail,
582
+ failureLayer: "recovery_quarantine",
583
+ recoveryAction: "inspect quarantined BlueBubbles recovery failures; live transport remains reachable",
584
+ } : {}),
585
+ };
208
586
  }
209
- return { runtime: snapshot?.runtime };
587
+ return { runtime: snapshot?.runtime, ...proofFacts };
210
588
  }
211
589
  class DaemonSenseManager {
212
590
  processManager;
213
591
  contexts;
592
+ pendingConfigRefreshes = new Set();
593
+ configRefreshRetryTimers = new Map();
594
+ configRefreshRetryAttempts = new Map();
214
595
  bundlesRoot;
215
596
  constructor(options) {
216
597
  const bundlesRoot = options.bundlesRoot ?? path.join(os.homedir(), "AgentBundles");
217
- const secretsRoot = options.secretsRoot ?? path.join(os.homedir(), ".agentsecrets");
218
598
  this.bundlesRoot = bundlesRoot;
219
599
  this.contexts = new Map(options.agents.map((agent) => {
220
- const senses = readAgentSenses(path.join(bundlesRoot, `${agent}.ouro`, "agent.json"));
221
- const facts = senseFactsFromSecrets(agent, senses, path.join(secretsRoot, agent, "secrets.json"));
222
- return [agent, { senses, facts }];
600
+ const { senses, workbenchHasStaleBundleEntry } = readAgentSenses(path.join(bundlesRoot, `${agent}.ouro`, "agent.json"));
601
+ const facts = senseFactsFromRuntimeConfig(agent, senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent), workbenchHasStaleBundleEntry);
602
+ return [agent, { senses, workbenchHasStaleBundleEntry, facts }];
223
603
  }));
224
604
  const managedSenseAgents = [...this.contexts.entries()].flatMap(([agent, context]) => {
225
- return ["teams", "bluebubbles"]
226
- .filter((sense) => context.senses[sense].enabled && context.facts[sense].configured)
605
+ return ["teams", "bluebubbles", "mail", "voice", "a2a", "telegram", "shepherd"]
606
+ .filter((sense) => context.senses[sense].enabled)
227
607
  .map((sense) => ({
228
608
  name: `${agent}:${sense}`,
229
609
  agentArg: agent,
230
- entry: sense === "teams" ? "senses/teams-entry.js" : "senses/bluebubbles-entry.js",
610
+ entry: managedSenseEntry(sense),
231
611
  channel: sense,
232
612
  autoStart: true,
613
+ ...(sense === "a2a" ? { args: managedA2AArgs(agent), getArgs: () => managedA2AArgs(agent) } : {}),
614
+ getRuntimeCredentialBootstrap: () => runtimeCredentialBootstrapFor(agent, sense),
233
615
  }));
234
616
  });
235
617
  this.processManager = options.processManager ?? new process_manager_1.DaemonProcessManager({
236
618
  agents: managedSenseAgents,
619
+ configCheck: async (name) => {
620
+ const parsed = parseSenseSnapshotName(name);
621
+ if (!parsed)
622
+ return { ok: true };
623
+ const context = this.contexts.get(parsed.agent);
624
+ if (!context)
625
+ return { ok: true };
626
+ context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(parsed.agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent), context.workbenchHasStaleBundleEntry);
627
+ const fact = context.facts[parsed.sense];
628
+ if (fact.configured)
629
+ return { ok: true };
630
+ this.scheduleSenseConfigRefresh(name, parsed);
631
+ if (fact.optional) {
632
+ return {
633
+ ok: false,
634
+ skip: true,
635
+ error: `${parsed.sense} is enabled for ${parsed.agent} but not attached on this machine`,
636
+ };
637
+ }
638
+ return {
639
+ ok: false,
640
+ skip: true,
641
+ error: `${parsed.sense} is enabled for ${parsed.agent} but runtime credentials are not ready: ${fact.detail}`,
642
+ fix: senseRepairHint(parsed.agent, parsed.sense),
643
+ };
644
+ },
237
645
  });
238
646
  (0, runtime_1.emitNervesEvent)({
239
647
  component: "channels",
@@ -245,12 +653,236 @@ class DaemonSenseManager {
245
653
  },
246
654
  });
247
655
  }
656
+ scheduleSenseConfigRefresh(name, parsed, delayMs = 0) {
657
+ if (this.pendingConfigRefreshes.has(name) || this.configRefreshRetryTimers.has(name))
658
+ return;
659
+ if (delayMs > 0) {
660
+ const timer = setTimeout(() => {
661
+ this.configRefreshRetryTimers.delete(name);
662
+ this.pendingConfigRefreshes.add(name);
663
+ void this.refreshSenseConfigAndRetry(name, parsed);
664
+ }, delayMs);
665
+ this.configRefreshRetryTimers.set(name, timer);
666
+ (0, runtime_1.emitNervesEvent)({
667
+ level: "warn",
668
+ component: "channels",
669
+ event: "channel.daemon_sense_config_retry_scheduled",
670
+ message: "scheduled managed sense config retry",
671
+ meta: {
672
+ agent: parsed.agent,
673
+ sense: parsed.sense,
674
+ managedName: name,
675
+ delayMs,
676
+ attempt: this.configRefreshRetryAttempts.get(name),
677
+ },
678
+ });
679
+ return;
680
+ }
681
+ this.pendingConfigRefreshes.add(name);
682
+ void this.refreshSenseConfigAndRetry(name, parsed);
683
+ }
684
+ nextConfigRetryDelayMs(name) {
685
+ const attempt = (this.configRefreshRetryAttempts.get(name) ?? 0) + 1;
686
+ this.configRefreshRetryAttempts.set(name, attempt);
687
+ return SENSE_CONFIG_RETRY_DELAYS_MS[Math.min(attempt - 1, SENSE_CONFIG_RETRY_DELAYS_MS.length - 1)];
688
+ }
689
+ clearConfigRetryState(name) {
690
+ clearTimeout(this.configRefreshRetryTimers.get(name));
691
+ this.configRefreshRetryTimers.delete(name);
692
+ this.configRefreshRetryAttempts.delete(name);
693
+ }
694
+ shouldRetryConfigRefresh(agent, sense, runtimeConfig, machineRuntimeConfig) {
695
+ if (!runtimeConfig.ok && runtimeConfig.reason === "unavailable")
696
+ return true;
697
+ if (needsMachineRuntimeConfig(agent, sense) &&
698
+ !machineRuntimeConfig.ok &&
699
+ machineRuntimeConfig.reason === "unavailable")
700
+ return true;
701
+ return false;
702
+ }
703
+ async refreshSenseConfigAndRetry(name, parsed) {
704
+ let retryAfterMs = null;
705
+ try {
706
+ const refreshed = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(parsed.agent, { preserveCachedOnFailure: true });
707
+ const machineRefreshed = needsMachineRuntimeConfig(parsed.agent, parsed.sense)
708
+ ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(parsed.agent, currentMachineId(), { preserveCachedOnFailure: true })
709
+ : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent);
710
+ const context = this.contexts.get(parsed.agent);
711
+ /* v8 ignore next -- defensive: config refreshes are only scheduled for known agent contexts @preserve */
712
+ if (!context)
713
+ return;
714
+ context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, refreshed, machineRefreshed, context.workbenchHasStaleBundleEntry);
715
+ if (!context.facts[parsed.sense].configured) {
716
+ if (this.shouldRetryConfigRefresh(parsed.agent, parsed.sense, refreshed, machineRefreshed)) {
717
+ retryAfterMs = this.nextConfigRetryDelayMs(name);
718
+ }
719
+ else {
720
+ this.clearConfigRetryState(name);
721
+ }
722
+ return;
723
+ }
724
+ this.clearConfigRetryState(name);
725
+ setTimeout(() => {
726
+ void this.processManager.startAgent?.(name).catch((error) => {
727
+ (0, runtime_1.emitNervesEvent)({
728
+ level: "error",
729
+ component: "channels",
730
+ event: "channel.daemon_sense_autostart_error",
731
+ message: "sense autostart failed",
732
+ /* v8 ignore next -- defensive: process manager rejects with Error instances in normal use @preserve */
733
+ meta: { error: error instanceof Error ? error.message : String(error) },
734
+ });
735
+ });
736
+ }, 0);
737
+ }
738
+ catch (error) {
739
+ (0, runtime_1.emitNervesEvent)({
740
+ level: "error",
741
+ component: "channels",
742
+ event: "channel.daemon_sense_autostart_error",
743
+ message: "sense config refresh failed",
744
+ /* v8 ignore next -- defensive: runtime credential refresh rejects with Error instances in normal use @preserve */
745
+ meta: { error: error instanceof Error ? error.message : String(error) },
746
+ });
747
+ }
748
+ finally {
749
+ this.pendingConfigRefreshes.delete(name);
750
+ if (retryAfterMs !== null) {
751
+ this.scheduleSenseConfigRefresh(name, parsed, retryAfterMs);
752
+ }
753
+ }
754
+ }
755
+ async refreshEnabledSenseConfigs() {
756
+ const refreshes = [...this.contexts.entries()].map(async ([agent, context]) => {
757
+ const enabledManagedSenses = ["teams", "bluebubbles", "mail", "voice", "a2a", "telegram", "shepherd"]
758
+ .filter((sense) => context.senses[sense].enabled);
759
+ /* v8 ignore next -- periodic refresh work only exists when a managed background sense is enabled @preserve */
760
+ if (enabledManagedSenses.length === 0)
761
+ return;
762
+ const runtimeConfig = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(agent, { preserveCachedOnFailure: true });
763
+ const needsMachineConfig = enabledManagedSenses.some((sense) => needsMachineRuntimeConfig(agent, sense));
764
+ const machineRuntimeConfig = needsMachineConfig
765
+ ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(agent, currentMachineId(), { preserveCachedOnFailure: true })
766
+ : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
767
+ context.facts = senseFactsFromRuntimeConfig(agent, context.senses, runtimeConfig, machineRuntimeConfig, context.workbenchHasStaleBundleEntry);
768
+ });
769
+ await Promise.all(refreshes);
770
+ }
248
771
  async startAutoStartSenses() {
772
+ await this.refreshEnabledSenseConfigs();
249
773
  await this.processManager.startAutoStartAgents();
250
774
  }
775
+ triggerAutoStartSenses() {
776
+ void this.refreshEnabledSenseConfigs()
777
+ .catch((error) => {
778
+ (0, runtime_1.emitNervesEvent)({
779
+ level: "error",
780
+ component: "channels",
781
+ event: "channel.daemon_sense_autostart_error",
782
+ message: "sense config refresh failed",
783
+ meta: { error: error instanceof Error ? error.message : /* v8 ignore next -- defensive non-Error refresh rejection @preserve */ String(error) },
784
+ });
785
+ })
786
+ .then(() => {
787
+ if (this.processManager.triggerAutoStartAgents) {
788
+ this.processManager.triggerAutoStartAgents();
789
+ return;
790
+ }
791
+ void this.processManager.startAutoStartAgents().catch((error) => {
792
+ (0, runtime_1.emitNervesEvent)({
793
+ level: "error",
794
+ component: "channels",
795
+ event: "channel.daemon_sense_autostart_error",
796
+ message: "sense autostart failed",
797
+ meta: { error: error instanceof Error ? error.message : String(error) },
798
+ });
799
+ });
800
+ });
801
+ }
251
802
  async stopAll() {
803
+ for (const timer of this.configRefreshRetryTimers.values()) {
804
+ clearTimeout(timer);
805
+ }
806
+ this.configRefreshRetryTimers.clear();
807
+ this.configRefreshRetryAttempts.clear();
252
808
  await this.processManager.stopAll();
253
809
  }
810
+ /* v8 ignore start -- pid collection for orphan cleanup pidfile @preserve */
811
+ listManagedPids() {
812
+ return this.processManager.listAgentSnapshots()
813
+ .map((s) => s.pid)
814
+ .filter((pid) => pid !== null && pid !== undefined);
815
+ }
816
+ /* v8 ignore stop */
817
+ listHealthProbes() {
818
+ const probes = [];
819
+ for (const [agent, context] of this.contexts.entries()) {
820
+ const runtimeConfig = (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent);
821
+ const machineRuntimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
822
+ context.facts = senseFactsFromRuntimeConfig(agent, context.senses, runtimeConfig, machineRuntimeConfig, context.workbenchHasStaleBundleEntry);
823
+ if (!context.senses.bluebubbles.enabled || !context.facts.bluebubbles.configured || !machineRuntimeConfig.ok) {
824
+ continue;
825
+ }
826
+ // DELIBERATELY no HTTP health probe for BlueBubbles.
827
+ //
828
+ // We used to register `createHttpHealthProbe(...)` here, which GETs the
829
+ // sense's /health endpoint every ~60s with a 5s timeout. On 2026-05-11
830
+ // that caused a death spiral:
831
+ // 1. Sense gets busy with real work (e.g. VLM image describe → 20+s)
832
+ // 2. /health probe times out at 5s
833
+ // 3. Daemon declares the sense "critical" → SIGTERMs it mid-work
834
+ // 4. Sense respawns, recovery loop replays the same inbound message
835
+ // into the agent's BB session (visible side-effect — an affected
836
+ // agent saw the same user text injected 76 times)
837
+ // 5. New sense hits the same VLM call, gets killed at 5s, repeat
838
+ //
839
+ // The probe was redundant supervision: dead processes are already
840
+ // recaptured by `processManager`'s child-process exit handler. The
841
+ // probe specifically caught "alive but hung" cases — but the cost
842
+ // (killing genuinely-busy processes and replaying messages) far
843
+ // outweighed the benefit. For "alive but hung" detection we now
844
+ // rely on the agent's own awareness: BB sense's runtime.json carries
845
+ // pendingRecoveryCount + lastRecoveredAt, surfaced in the agent
846
+ // prompt. If recovery has been wedged for too long, the agent can
847
+ // call `restart_runtime` itself (see alpha.598 / PR #723).
848
+ //
849
+ // The respawn-loop guard in processManager is the backstop: even if
850
+ // something else triggers a tight respawn cycle for any reason, the
851
+ // guard fires and refuses further restarts after N attempts in M
852
+ // minutes, so we can never re-enter the 2026-05-11 spiral.
853
+ }
854
+ return probes;
855
+ }
856
+ async restartSense(managedName) {
857
+ if (this.processManager.restartAgent) {
858
+ await this.processManager.restartAgent(managedName);
859
+ return;
860
+ }
861
+ await this.processManager.startAgent?.(managedName);
862
+ }
863
+ async reviveSense(agent, sense) {
864
+ const parsed = parseSenseSnapshotName(`${agent}:${sense}`);
865
+ if (!parsed)
866
+ return null;
867
+ const context = this.contexts.get(parsed.agent);
868
+ if (!context || !context.senses[parsed.sense].enabled)
869
+ return null;
870
+ const managedName = `${parsed.agent}:${parsed.sense}`;
871
+ const currentRow = () => this.listSenseRows().find((row) => row.agent === parsed.agent && row.sense === parsed.sense) ?? null;
872
+ const runtimeConfig = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(parsed.agent, { preserveCachedOnFailure: true });
873
+ const needsMachineConfig = needsMachineRuntimeConfig(parsed.agent, parsed.sense);
874
+ const machineRuntimeConfig = needsMachineConfig
875
+ ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(parsed.agent, currentMachineId(), { preserveCachedOnFailure: true })
876
+ : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent);
877
+ context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, runtimeConfig, machineRuntimeConfig, context.workbenchHasStaleBundleEntry);
878
+ if (context.facts[parsed.sense].hostRefused) {
879
+ // Never start iMessage without a declared host account.
880
+ return currentRow();
881
+ }
882
+ this.processManager.resetAgentFailureState?.(managedName);
883
+ await this.processManager.startAgent?.(managedName);
884
+ return currentRow();
885
+ }
254
886
  listSenseRows() {
255
887
  const runtime = new Map();
256
888
  for (const snapshot of this.processManager.listAgentSnapshots()) {
@@ -262,16 +894,49 @@ class DaemonSenseManager {
262
894
  runtime.set(parsed.agent, current);
263
895
  }
264
896
  const rows = [...this.contexts.entries()].flatMap(([agent, context]) => {
897
+ context.facts = senseFactsFromRuntimeConfig(agent, context.senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent), context.workbenchHasStaleBundleEntry);
265
898
  const blueBubblesRuntimeFacts = readBlueBubblesRuntimeFacts(agent, this.bundlesRoot, runtime.get(agent)?.bluebubbles);
899
+ const blueBubblesConfigured = context.facts.bluebubbles.configured;
266
900
  const runtimeInfo = {
267
901
  cli: { configured: true },
268
902
  teams: {
269
903
  configured: context.facts.teams.configured,
270
904
  ...(runtime.get(agent)?.teams ?? {}),
271
905
  },
272
- bluebubbles: {
273
- configured: context.facts.bluebubbles.configured,
274
- ...blueBubblesRuntimeFacts,
906
+ bluebubbles: blueBubblesConfigured
907
+ ? {
908
+ configured: true,
909
+ optional: context.facts.bluebubbles.optional,
910
+ ...blueBubblesRuntimeFacts,
911
+ }
912
+ : {
913
+ configured: false,
914
+ optional: context.facts.bluebubbles.optional,
915
+ },
916
+ mail: {
917
+ configured: context.facts.mail.configured,
918
+ ...(runtime.get(agent)?.mail ?? {}),
919
+ },
920
+ voice: {
921
+ configured: context.facts.voice.configured,
922
+ optional: context.facts.voice.optional,
923
+ ...(runtime.get(agent)?.voice ?? {}),
924
+ },
925
+ a2a: {
926
+ configured: context.facts.a2a.configured,
927
+ ...(runtime.get(agent)?.a2a ?? {}),
928
+ },
929
+ telegram: {
930
+ configured: context.facts.telegram.configured,
931
+ ...(runtime.get(agent)?.telegram ?? {}),
932
+ },
933
+ workbench: {
934
+ configured: context.facts.workbench.configured,
935
+ },
936
+ shepherd: {
937
+ configured: context.facts.shepherd.configured,
938
+ optional: context.facts.shepherd.optional,
939
+ ...(runtime.get(agent)?.shepherd ?? {}),
275
940
  },
276
941
  };
277
942
  const inventory = (0, sense_truth_1.getSenseInventory)({ senses: context.senses }, runtimeInfo);
@@ -283,10 +948,30 @@ class DaemonSenseManager {
283
948
  status: entry.status,
284
949
  detail: entry.enabled
285
950
  ? entry.sense === "bluebubbles"
286
- ? blueBubblesRuntimeFacts.detail
287
- ?? context.facts[entry.sense].detail
951
+ ? blueBubblesConfigured
952
+ ? blueBubblesRuntimeFacts.detail
953
+ ?? context.facts[entry.sense].detail
954
+ : context.facts[entry.sense].detail
288
955
  : context.facts[entry.sense].detail
289
- : "not enabled in agent.json",
956
+ : entry.sense === "workbench"
957
+ ? WORKBENCH_RUNTIME_INJECTION_DETAIL
958
+ : "not enabled in agent.json",
959
+ ...(entry.sense === "bluebubbles" && blueBubblesConfigured ? {
960
+ proofMethod: blueBubblesRuntimeFacts.proofMethod,
961
+ lastProofAt: blueBubblesRuntimeFacts.lastProofAt,
962
+ proofAgeMs: blueBubblesRuntimeFacts.proofAgeMs,
963
+ lastFailure: blueBubblesRuntimeFacts.lastFailure,
964
+ failureLayer: blueBubblesRuntimeFacts.failureLayer,
965
+ recoveryAction: blueBubblesRuntimeFacts.recoveryAction,
966
+ pendingRecoveryCount: blueBubblesRuntimeFacts.pendingRecoveryCount,
967
+ failedRecoveryCount: blueBubblesRuntimeFacts.failedRecoveryCount,
968
+ oldestPendingRecoveryAt: blueBubblesRuntimeFacts.oldestPendingRecoveryAt,
969
+ oldestPendingRecoveryAgeMs: blueBubblesRuntimeFacts.oldestPendingRecoveryAgeMs,
970
+ activeTurnCount: blueBubblesRuntimeFacts.activeTurnCount,
971
+ stalledTurnCount: blueBubblesRuntimeFacts.stalledTurnCount,
972
+ oldestActiveTurnStartedAt: blueBubblesRuntimeFacts.oldestActiveTurnStartedAt,
973
+ oldestActiveTurnAgeMs: blueBubblesRuntimeFacts.oldestActiveTurnAgeMs,
974
+ } : {}),
290
975
  }));
291
976
  });
292
977
  (0, runtime_1.emitNervesEvent)({