@ouro.bot/friends 0.1.0-alpha.4

package/dist/util/cap-string.js

@@ -0,0 +1,35 @@
+"use strict";
+// String-capping helper, copied verbatim from the harness's
+// `heart/session-events.ts` (`capStructuredRecordString` +
+// `truncateLargeEventContent` + `EVENT_CONTENT_MAX_CHARS`).
+//
+// Used by FileFriendStore to bound the size of free-text note values before they
+// are written to disk, so a single runaway note can't bloat a friend record.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVENT_CONTENT_MAX_CHARS = void 0;
+exports.truncateLargeEventContent = truncateLargeEventContent;
+exports.capStructuredRecordString = capStructuredRecordString;
+exports.EVENT_CONTENT_MAX_CHARS = 256 * 1024;
+function truncateLargeEventContent(content, maxChars) {
+    /* v8 ignore next 3 -- copied verbatim from the harness; the non-string guard is
+       unreachable through this package's API (note values are typed `string`) but is
+       kept so the harness can drop in its real emitter without behavior drift @preserve */
+    if (typeof content !== "string") {
+        return { content, truncated: false, originalLength: 0 };
+    }
+    if (content.length <= maxChars) {
+        return { content, truncated: false, originalLength: content.length };
+    }
+    const marker = `[truncated — event content exceeded ${maxChars} chars; original length ${content.length} chars]`;
+    const remainingBudget = Math.max(0, maxChars - marker.length);
+    const headLength = Math.ceil(remainingBudget * 0.75);
+    const tailLength = Math.max(0, remainingBudget - headLength);
+    return {
+        content: `${content.slice(0, headLength)}${marker}${tailLength > 0 ? content.slice(-tailLength) : ""}`,
+        truncated: true,
+        originalLength: content.length,
+    };
+}
+function capStructuredRecordString(value) {
+    return truncateLargeEventContent(value, exports.EVENT_CONTENT_MAX_CHARS).content;
+}

package/dist/verifier.d.ts

@@ -0,0 +1,11 @@
+export interface AgentVerifier {
+    /** Whether `fromAgentId` is who it claims to be. `proof` is an opaque,
+     * verifier-specific credential (a signature, a VC, …); the TOFU default
+     * ignores it. */
+    verify(fromAgentId: string, proof?: string): boolean;
+}
+/** Trust-on-first-use: accept any peer, ignore `proof`. The day-one default; the
+ * trust LADDER (not the wire) is what caps what a peer's claims are worth. */
+export declare const tofuVerifier: AgentVerifier;
+/** The default verifier used by `importProfileShare` when none is injected. */
+export declare const DEFAULT_AGENT_VERIFIER: AgentVerifier;

package/dist/verifier.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_AGENT_VERIFIER = exports.tofuVerifier = void 0;
+// AgentVerifier — Fork B. The pluggable authentication seam.
+//
+// The package does AUTHORIZATION (how much a verified peer's claims count, via
+// the trust ladder). AUTHENTICATION of the wire is the caller's job — the same
+// split that kept the A2A card-fetch harness-side. This interface is the seam: a
+// caller can plug in DID/VC verification later. The default is trust-on-first-use
+// (TOFU): it accepts any peer and ignores `proof`, matching upsertAgentPeer's
+// onboard-on-first-contact behavior. The `proof?` slot is reserved on the
+// envelope from day one so a stronger verifier can be dropped in without an
+// envelope change.
+const observability_1 = require("./observability");
+/** Trust-on-first-use: accept any peer, ignore `proof`. The day-one default; the
+ * trust LADDER (not the wire) is what caps what a peer's claims are worth. */
+exports.tofuVerifier = {
+    verify(fromAgentId) {
+        (0, observability_1.emitNervesEvent)({
+            component: "friends",
+            event: "friends.agent_verified",
+            message: "verified agent (tofu)",
+            meta: { fromAgentId },
+        });
+        return true;
+    },
+};
+/** The default verifier used by `importProfileShare` when none is injected. */
+exports.DEFAULT_AGENT_VERIFIER = exports.tofuVerifier;

package/dist/whoami.d.ts

@@ -0,0 +1,7 @@
+import type { FriendStore } from "./store";
+export interface WhoamiResult {
+    machineOwner: string | null;
+    selfAgentName?: string;
+    selfFriendId?: string;
+}
+export declare function whoami(store: FriendStore): Promise<WhoamiResult>;

package/dist/whoami.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.whoami = whoami;
+// whoami — "who am I?" self-resolution over a friend store.
+//
+// D5 heuristic: the machine owner is the OS user running the process. The self
+// friend is the record whose externalIds include a `local` entry matching the
+// owner username (bare or `user@host`); if none matches by local id, the first
+// `family` friend is used as a fallback. When the owner is undetectable, or no
+// friend matches, only `machineOwner` is returned (no self fields).
+const resolver_1 = require("./resolver");
+const observability_1 = require("./observability");
+async function whoami(store) {
+    const machineOwner = (0, resolver_1.machineOwnerUsername)();
+    if (typeof store.listAll !== "function") {
+        (0, observability_1.emitNervesEvent)({
+            component: "friends",
+            event: "friends.whoami",
+            message: "resolved machine owner self",
+            meta: { hasSelf: false },
+        });
+        return { machineOwner };
+    }
+    const all = await store.listAll();
+    let self;
+    if (machineOwner) {
+        self = all.find((f) => f.externalIds.some((e) => (0, resolver_1.isLocalMachineOwnerIdentity)(e.provider, e.externalId, machineOwner)));
+        self ??= all.find((f) => f.trustLevel === "family");
+    }
+    (0, observability_1.emitNervesEvent)({
+        component: "friends",
+        event: "friends.whoami",
+        message: "resolved machine owner self",
+        meta: { hasSelf: Boolean(self) },
+    });
+    return self
+        ? { machineOwner, selfFriendId: self.id, selfAgentName: self.name }
+        : { machineOwner };
+}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@ouro.bot/friends",
+  "version": "0.1.0-alpha.4",
+  "description": "The who's-who / identity / relationship substrate for agents — trust ladder (family/friend/acquaintance/stranger), multi-party and multi-agent, consumed via the FriendStore interface + FriendResolver.",
+  "license": "Apache-2.0",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp/index.d.ts",
+      "default": "./dist/mcp/index.js"
+    },
+    "./a2a": {
+      "types": "./dist/a2a/index.d.ts",
+      "default": "./dist/a2a/index.js"
+    }
+  },
+  "bin": {
+    "friends-mcp": "./dist/mcp/bin.js"
+  },
+  "files": [
+    "dist/",
+    "changelog.json"
+  ],
+  "type": "commonjs",
+  "scripts": {
+    "build": "tsc",
+    "prepare": "npm run build",
+    "pretest": "npm run build",
+    "pretest:coverage": "npm run build",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit",
+    "example:cross-agent-moat": "npm run build && tsx examples/cross-agent-moat.ts",
+    "example:a2a-git-mailbox": "npm run build && tsx examples/a2a-git-mailbox.ts",
+    "example:cross-agent-mission-memory": "npm run build && tsx examples/cross-agent-mission-memory.ts",
+    "example:cross-agent-standing": "npm run build && tsx examples/cross-agent-standing.ts",
+    "example:cross-agent-coordination": "npm run build && tsx examples/cross-agent-coordination.ts",
+    "release:bump": "node scripts/release-bump.cjs",
+    "release:preflight": "node scripts/release-preflight.cjs",
+    "release:trust:check": "node scripts/npm-trusted-publishers.cjs check",
+    "release:trust:repair-plan": "node scripts/npm-trusted-publishers.cjs repair-plan",
+    "release:trust:repair": "node scripts/npm-trusted-publishers.cjs repair"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ourostack/friends.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^4.1.8",
+    "eslint": "^10.0.2",
+    "semver": "^7.6.0",
+    "tsx": "^4.22.4",
+    "typescript": "^5.7.0",
+    "typescript-eslint": "^8.56.1",
+    "vitest": "^4.1.8"
+  }
+}