@ouro.bot/cli 0.1.0-alpha.934 → 0.1.0-alpha.936

package/dist/senses/shepherd/operations.js

@@ -0,0 +1,159 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runShepherdOperation = runShepherdOperation;
+const node_crypto_1 = require("node:crypto");
+const path = __importStar(require("node:path"));
+const mandates_1 = require("../../heart/shepherd/mandates");
+const mailbox_supervision_1 = require("../../heart/mailbox/mailbox-supervision");
+const supervision_1 = require("../../heart/shepherd/supervision");
+const guidance_1 = require("./guidance");
+const checkin_store_1 = require("./checkin-store");
+const recovery_1 = require("./recovery");
+const runtime_1 = require("../../nerves/runtime");
+function fingerprint(command) {
+    return (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(command, Object.keys(command).sort())).digest("hex");
+}
+/** Same-UID local administration only. No evidence, actor, or lifecycle claims come from argv. */
+async function runShepherdOperation(command, deps) {
+    try {
+        const { actorId } = await deps.resolveOwner(command.agent);
+        const actor = { kind: "local_owner_administration", actorId };
+        const root = deps.agentRoot(command.agent);
+        const file = (0, checkin_store_1.checkInStorePath)(root);
+        if (command.kind === "shepherd.status")
+            return {
+                boundary: "same_uid_local_owner_administration_not_human_presence",
+                automation: { mode: "legacy_unqualified", mandatesEnforcedForAllTriggers: false, unattendedKeysPossible: true, warning: supervision_1.SHEPHERD_ALPHA_AUTOMATION_WARNING },
+                supervision: (0, mailbox_supervision_1.readMailboxSupervision)(command.agent, { agentRoot: root }),
+                guidance: (0, guidance_1.readGuidance)(root), mandates: (0, mandates_1.readShepherdMandates)(root),
+                custody: (0, recovery_1.readCheckInSnapshot)(file, { limit: 50 }),
+            };
+        if (command.kind === "shepherd.inspect")
+            return (0, recovery_1.readCheckInSnapshot)(file, command);
+        if (command.kind === "shepherd.mandate.grant")
+            return await (0, mandates_1.updateShepherdMandate)(root, {
+                operation: "grant", context: { ...actor, requestId: command.requestId }, expectedRevision: command.expectedRevision,
+                target: {
+                    project: command.project, ...(command.host ? { host: command.host } : {}),
+                    ...(command.session ? { session: command.session } : {}), ...(command.instance ? { instance: command.instance } : {}),
+                },
+                task: command.task, expiresAt: command.expiresAt,
+            });
+        if (command.kind === "shepherd.mandate.revoke")
+            return await (0, mandates_1.updateShepherdMandate)(root, {
+                operation: "revoke", context: { ...actor, requestId: command.requestId }, expectedRevision: command.expectedRevision,
+                mandateId: command.id.startsWith("mandate:") ? command.id : `mandate:${command.id}`,
+            });
+        if (command.kind === "shepherd.pause" || command.kind === "shepherd.resume") {
+            const host = await deps.host(command.agent);
+            if (host.name !== command.host)
+                throw new Error("requested host does not match the configured host");
+            const matches = (await host.list()).filter(session => session.id === command.session);
+            if (matches.length !== 1)
+                throw new Error("a unique verified live terminal is required");
+            const target = { host: host.name, session: matches[0].id, cwd: matches[0].cwd ?? null, task: null };
+            return await (0, guidance_1.setShepherdSessionPause)(root, {
+                actorId, requestId: command.requestId, expectedRevision: command.expectedRevision,
+                requestFingerprint: fingerprint(command), target, paused: command.kind === "shepherd.pause",
+            }, [target]);
+        }
+        if (command.kind === "shepherd.reconcile") {
+            if (command.resolution === "delivered")
+                throw new Error("confirmed delivery is unsupported: no qualified guarded host receipt lookup is available");
+            const snapshot = (0, recovery_1.readCheckInSnapshot)(file, { limit: 1, id: command.id });
+            const entry = snapshot.entries[0];
+            if (!entry)
+                throw new Error("dispatch not found");
+            const host = await deps.host(command.agent);
+            if (host.name !== entry.host)
+                throw new Error("custody host does not match the configured host");
+            // Foreground inventories cannot prove that an older process in a surviving terminal exited.
+            if (!host.retirementInventory)
+                throw new Error("qualified complete retirement inventory is unavailable");
+            if ((await host.retirementInventory()).includes(entry.session))
+                throw new Error("terminal still exists; foreground inventory cannot prove process retirement");
+            const evidence = {
+                kind: "host_process_inventory", host: entry.host, session: entry.session, instance: entry.instance,
+                checkedAt: new Date().toISOString(), gone: true, wholeSessionRetired: true,
+            };
+            return await (0, recovery_1.reconcileShepherdDispatch)(root, { id: command.id, expectedRevision: command.expectedRevision, requestId: command.requestId, actor, evidence });
+        }
+        if (command.kind !== "shepherd.maintenance")
+            throw new Error("unsupported Shepherd administration operation");
+        const sense = await deps.senseStopped(command.agent);
+        const host = await deps.host(command.agent);
+        if (!host.retirementInventory)
+            throw new Error("qualified complete retirement inventory is unavailable");
+        const sessions = await host.retirementInventory();
+        const retiredInstances = [];
+        const seen = new Set();
+        let cursor;
+        do {
+            const page = (0, recovery_1.readMaintenanceCheckInSnapshot)(file, { limit: 200, ...(cursor ? { cursor } : {}) }, sense);
+            if (page.state !== "ready")
+                throw new Error("custody store is missing");
+            for (const entry of page.entries) {
+                if (entry.host !== host.name || sessions.includes(entry.session))
+                    continue;
+                const key = JSON.stringify([entry.host, entry.session, entry.instance]);
+                if (seen.has(key))
+                    continue;
+                seen.add(key);
+                retiredInstances.push({
+                    kind: "host_process_inventory", host: entry.host, session: entry.session, instance: entry.instance,
+                    checkedAt: new Date().toISOString(), gone: true, wholeSessionRetired: true,
+                });
+                if (retiredInstances.length > 200)
+                    throw new Error("maintenance exceeds 200 retired instances; narrower native retirement qualification is required");
+            }
+            cursor = page.nextCursor ?? undefined;
+        } while (cursor);
+        if (!path.isAbsolute(command.destination))
+            throw new Error("maintenance destination must be absolute");
+        return await (0, recovery_1.maintainShepherdCustody)(root, {
+            expectedRevision: command.expectedRevision, requestId: command.requestId, actor, sense, retiredInstances,
+            destination: command.destination, requestFingerprint: fingerprint(command),
+        });
+    }
+    catch (error) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "senses", level: "warn", event: "senses.shepherd_administration_failed",
+            message: "local-owner Shepherd operation failed; no inferred authority or evidence substituted",
+            meta: { operation: command.kind },
+        });
+        throw error;
+    }
+}