npm - @stackbilt/aegis-core - Versions diffs - 0.1.0 - Mend

@stackbilt/aegis-core 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (148) hide show

package/package.json +96 -0
package/schema.sql +586 -0
package/src/adapters/voice/cloudflare-agent.ts +34 -0
package/src/auth.ts +124 -0
package/src/bluesky.ts +464 -0
package/src/claude-tools/content.ts +188 -0
package/src/claude-tools/email.ts +69 -0
package/src/claude-tools/github.ts +440 -0
package/src/claude-tools/goals.ts +116 -0
package/src/claude-tools/index.ts +353 -0
package/src/claude-tools/web.ts +59 -0
package/src/claude.ts +406 -0
package/src/codebeast.ts +200 -0
package/src/composite.ts +715 -0
package/src/content/column.ts +80 -0
package/src/content/hero-image.ts +47 -0
package/src/content/index.ts +27 -0
package/src/content/journal.ts +91 -0
package/src/content/roundtable.ts +163 -0
package/src/core.ts +309 -0
package/src/dashboard.ts +620 -0
package/src/decision-docs.ts +284 -0
package/src/dispatch.ts +13 -0
package/src/edge-env.ts +58 -0
package/src/email.ts +850 -0
package/src/exports.ts +156 -0
package/src/github-projects.ts +312 -0
package/src/github.ts +670 -0
package/src/groq.ts +247 -0
package/src/health-page.ts +578 -0
package/src/index.ts +89 -0
package/src/kernel/argus-actions.ts +397 -0
package/src/kernel/argus-correlation.ts +639 -0
package/src/kernel/board.ts +91 -0
package/src/kernel/briefing.ts +177 -0
package/src/kernel/classify-memory-topic.ts +166 -0
package/src/kernel/cognition.ts +377 -0
package/src/kernel/court-cards.ts +163 -0
package/src/kernel/dispatch.ts +587 -0
package/src/kernel/domain.ts +50 -0
package/src/kernel/dynamic-tools.ts +322 -0
package/src/kernel/executor-port.ts +45 -0
package/src/kernel/executors/claude.ts +73 -0
package/src/kernel/executors/direct.ts +237 -0
package/src/kernel/executors/groq.ts +18 -0
package/src/kernel/executors/index.ts +87 -0
package/src/kernel/executors/tarotscript.ts +104 -0
package/src/kernel/executors/workers-ai.ts +54 -0
package/src/kernel/insight-cache.ts +76 -0
package/src/kernel/memory/agenda.ts +200 -0
package/src/kernel/memory/blocks.ts +188 -0
package/src/kernel/memory/consolidation.ts +194 -0
package/src/kernel/memory/episodic.ts +241 -0
package/src/kernel/memory/goals.ts +156 -0
package/src/kernel/memory/graph.ts +290 -0
package/src/kernel/memory/index.ts +11 -0
package/src/kernel/memory/insights.ts +316 -0
package/src/kernel/memory/procedural.ts +467 -0
package/src/kernel/memory/pruning.ts +67 -0
package/src/kernel/memory/recall.ts +367 -0
package/src/kernel/memory/semantic.ts +315 -0
package/src/kernel/memory/synthesis.ts +161 -0
package/src/kernel/memory-adapter.ts +369 -0
package/src/kernel/memory-guardrails.ts +76 -0
package/src/kernel/port.ts +23 -0
package/src/kernel/resilience.ts +322 -0
package/src/kernel/router.ts +471 -0
package/src/kernel/scheduled/agent-dispatch.ts +252 -0
package/src/kernel/scheduled/argus-analytics.ts +247 -0
package/src/kernel/scheduled/argus-heartbeat.ts +320 -0
package/src/kernel/scheduled/argus-notify.ts +348 -0
package/src/kernel/scheduled/board-sync.ts +110 -0
package/src/kernel/scheduled/ci-watcher.ts +125 -0
package/src/kernel/scheduled/cognitive-metrics.ts +377 -0
package/src/kernel/scheduled/consolidation.ts +229 -0
package/src/kernel/scheduled/content-drip.ts +47 -0
package/src/kernel/scheduled/content.ts +6 -0
package/src/kernel/scheduled/conversation-facts.ts +204 -0
package/src/kernel/scheduled/cost-report.ts +84 -0
package/src/kernel/scheduled/curiosity.ts +219 -0
package/src/kernel/scheduled/dev-activity.ts +44 -0
package/src/kernel/scheduled/digest.ts +317 -0
package/src/kernel/scheduled/dreaming/agenda-triage.ts +115 -0
package/src/kernel/scheduled/dreaming/facts.ts +239 -0
package/src/kernel/scheduled/dreaming/index.ts +8 -0
package/src/kernel/scheduled/dreaming/llm.ts +33 -0
package/src/kernel/scheduled/dreaming/pattern-synthesis.ts +124 -0
package/src/kernel/scheduled/dreaming/persona.ts +75 -0
package/src/kernel/scheduled/dreaming/symbolic.ts +31 -0
package/src/kernel/scheduled/dreaming/task-proposals.ts +80 -0
package/src/kernel/scheduled/dreaming.ts +66 -0
package/src/kernel/scheduled/entropy.ts +149 -0
package/src/kernel/scheduled/escalation.ts +192 -0
package/src/kernel/scheduled/feed-watcher.ts +206 -0
package/src/kernel/scheduled/goals.ts +214 -0
package/src/kernel/scheduled/governance.ts +41 -0
package/src/kernel/scheduled/heartbeat.ts +220 -0
package/src/kernel/scheduled/inbox-processor.ts +174 -0
package/src/kernel/scheduled/index.ts +245 -0
package/src/kernel/scheduled/issue-proposer.ts +478 -0
package/src/kernel/scheduled/issue-watcher.ts +128 -0
package/src/kernel/scheduled/pr-automerge.ts +213 -0
package/src/kernel/scheduled/product-health.ts +107 -0
package/src/kernel/scheduled/reflection.ts +373 -0
package/src/kernel/scheduled/self-improvement.ts +114 -0
package/src/kernel/scheduled/social-engage.ts +175 -0
package/src/kernel/scheduled/task-audit.ts +60 -0
package/src/kernel/symbolic.ts +156 -0
package/src/kernel/types.ts +145 -0
package/src/landing.ts +1190 -0
package/src/lib/audit-chain/chain.ts +28 -0
package/src/lib/audit-chain/types.ts +12 -0
package/src/lib/observability/errors.ts +55 -0
package/src/markdown.ts +164 -0
package/src/mcp/handlers.ts +647 -0
package/src/mcp/server.ts +184 -0
package/src/mcp/tools.ts +316 -0
package/src/mcp-client.ts +275 -0
package/src/mcp-server.ts +2 -0
package/src/operator/config.example.ts +60 -0
package/src/operator/config.ts +60 -0
package/src/operator/index.ts +46 -0
package/src/operator/persona.example.ts +34 -0
package/src/operator/persona.ts +34 -0
package/src/operator/prompt-builder.ts +190 -0
package/src/operator/types.ts +43 -0
package/src/pulse.ts +1179 -0
package/src/routes/bluesky.ts +116 -0
package/src/routes/cc-tasks.ts +328 -0
package/src/routes/codebeast.ts +1 -0
package/src/routes/content.ts +194 -0
package/src/routes/conversations.ts +25 -0
package/src/routes/dynamic-tools.ts +111 -0
package/src/routes/feedback.ts +192 -0
package/src/routes/health.ts +147 -0
package/src/routes/messages.ts +228 -0
package/src/routes/observability.ts +82 -0
package/src/routes/operator-logs.ts +42 -0
package/src/routes/pages.ts +96 -0
package/src/routes/sessions.ts +54 -0
package/src/sanitize.ts +73 -0
package/src/schema-enums.ts +155 -0
package/src/search.ts +112 -0
package/src/task-intelligence.ts +497 -0
package/src/types.ts +194 -0
package/src/ui.ts +5 -0
package/src/version.ts +3 -0
package/src/workers-ai-chat.ts +333 -0

package/src/adapters/voice/cloudflare-agent.ts ADDED Viewed

@@ -0,0 +1,34 @@
+import { Agent } from 'agents';
+import { withVoice, WorkersAIFluxSTT, WorkersAITTS } from '@cloudflare/voice';
+import type { VoiceTurnContext } from '@cloudflare/voice';
+import { buildEdgeEnv } from '../../edge-env.js';
+import { KernelExecutorPort } from '../../kernel/executor-port.js';
+import type { AegisTurnInput } from '../../kernel/port.js';
+import type { Env } from '../../types.js';
+// CF-specific mixin lives here and nowhere else — the kernel is never imported by voice code.
+const VoiceAgent = withVoice(Agent);
+export class AegisVoiceAdapter extends VoiceAgent<Env> {
+  transcriber = new WorkersAIFluxSTT(this.env.AI);
+  tts = new WorkersAITTS(this.env.AI);
+  async onTurn(transcript: string, ctx: VoiceTurnContext): Promise<AsyncIterable<string>> {
+    const input: AegisTurnInput = {
+      sessionId: ctx.connection.id,
+      userId: 'default-operator',
+      text: transcript,
+    };
+    const port = new KernelExecutorPort(buildEdgeEnv(this.env));
+    const eventStream = port.dispatch(input);
+    return (async function* () {
+      for await (const event of eventStream) {
+        if (event.type === 'text.delta') {
+          yield event.text;
+        }
+      }
+    })();
+  }
+}

package/src/auth.ts ADDED Viewed

@@ -0,0 +1,124 @@
+import type { Context, Next } from 'hono';
+import type { Env } from './types.js';
+export async function bearerAuth(c: Context<{ Bindings: Env }>, next: Next): Promise<Response | void> {
+  // Public routes — no auth required
+  if (c.req.path === '/health' || c.req.path === '/pulse' || (c.req.path === '/' && c.req.method === 'GET') || c.req.path.startsWith('/tech') || c.req.path === '/api/feedback' || c.req.path === '/observe' || c.req.path.startsWith('/api/overworld/public')) {
+    return next();
+  }
+  // Webhook routes — auth handled by per-route HMAC verification
+  if (c.req.path.startsWith('/webhooks/') || c.req.path === '/api/webhook') {
+    return next();
+  }
+  // OAuth discovery endpoints — must be public so MCP clients can probe them
+  // without a token. We return 404 for the auth server and resource metadata
+  // so clients learn there is no OAuth server here and fall back to configured
+  // bearer token headers.
+  if (
+    c.req.path === '/.well-known/oauth-protected-resource' ||
+    c.req.path === '/.well-known/oauth-authorization-server' ||
+    c.req.path === '/.well-known/openid-configuration'
+  ) {
+    return next();
+  }
+  const authHeader = c.req.header('Authorization');
+  const cookieToken = getCookie(c.req.header('Cookie') ?? '', 'aegis_token');
+  const queryToken = c.req.query('token');
+  const token = extractBearer(authHeader) ?? cookieToken ?? queryToken;
+  if (!token || token !== c.env.AEGIS_TOKEN) {
+    // UI pages — show login page
+    if ((c.req.path === '/chat' || c.req.path === '/overworld' || c.req.path === '/console') && c.req.method === 'GET') {
+      return c.html(loginPage(), 401);
+    }
+    return c.json({ error: 'Unauthorized' }, 401);
+  }
+  return next();
+}
+function extractBearer(header: string | undefined): string | null {
+  if (!header?.startsWith('Bearer ')) return null;
+  return header.slice(7);
+}
+function getCookie(cookieHeader: string, name: string): string | null {
+  const match = cookieHeader.match(new RegExp(`(?:^|;\\s*)${name}=([^;]*)`));
+  return match?.[1] ?? null;
+}
+function loginPage(): string {
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>AEGIS</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', system-ui, sans-serif;
+      background: #0a0a0f;
+      color: #e0e0e0;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      min-height: 100vh;
+    }
+    .login {
+      background: #141420;
+      border: 1px solid #2a2a3a;
+      border-radius: 12px;
+      padding: 2rem;
+      width: 90%;
+      max-width: 360px;
+    }
+    h1 { font-size: 1.25rem; margin-bottom: 1.5rem; color: #8b8bff; }
+    input {
+      width: 100%;
+      padding: 0.75rem;
+      background: #0a0a0f;
+      border: 1px solid #2a2a3a;
+      border-radius: 8px;
+      color: #e0e0e0;
+      font-size: 1rem;
+      margin-bottom: 1rem;
+    }
+    input:focus { outline: none; border-color: #8b8bff; }
+    button {
+      width: 100%;
+      padding: 0.75rem;
+      background: #8b8bff;
+      color: #0a0a0f;
+      border: none;
+      border-radius: 8px;
+      font-size: 1rem;
+      font-weight: 600;
+      cursor: pointer;
+    }
+    button:hover { background: #7a7aee; }
+  </style>
+</head>
+<body>
+  <div class="login">
+    <h1>AEGIS</h1>
+    <form id="f">
+      <input type="password" id="t" placeholder="Access token" autocomplete="off" autofocus>
+      <button type="submit">Enter</button>
+    </form>
+  </div>
+  <script>
+    document.getElementById('f').onsubmit = (e) => {
+      e.preventDefault();
+      const token = document.getElementById('t').value;
+      document.cookie = 'aegis_token=' + encodeURIComponent(token) + ';path=/;max-age=31536000;SameSite=Strict;Secure';
+      window.location.href = window.location.pathname;
+    };
+  </script>
+</body>
+</html>`;
+}

package/src/bluesky.ts ADDED Viewed

@@ -0,0 +1,464 @@
+// ─── Bluesky AT Protocol Client ──────────────────────────────
+// Posts to Bluesky via the AT Protocol API.
+// Auth: app password → createSession → accessJwt.
+// Supports: text posts, links (facets), images (blob upload).
+const BSKY_API = 'https://bsky.social/xrpc';
+interface BlueskySession {
+  accessJwt: string;
+  refreshJwt: string;
+  did: string;
+  handle: string;
+}
+interface BlueskyPostResult {
+  uri: string;
+  cid: string;
+  url: string; // human-readable URL
+}
+// ─── Auth ────────────────────────────────────────────────────
+let cachedSession: { session: BlueskySession; expiresAt: number } | null = null;
+async function createSession(handle: string, appPassword: string): Promise<BlueskySession> {
+  // Reuse cached session if not expired (tokens last ~2 hours, refresh at 90 min)
+  if (cachedSession && Date.now() < cachedSession.expiresAt) {
+    return cachedSession.session;
+  }
+  const res = await fetch(`${BSKY_API}/com.atproto.server.createSession`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ identifier: handle, password: appPassword }),
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky auth failed: ${res.status} ${err}`);
+  }
+  const session = await res.json() as BlueskySession;
+  cachedSession = { session, expiresAt: Date.now() + 90 * 60 * 1000 };
+  return session;
+}
+// ─── Facets (links in post text) ─────────────────────────────
+interface Facet {
+  index: { byteStart: number; byteEnd: number };
+  features: Array<{ $type: string; uri?: string; did?: string }>;
+}
+function extractLinkFacets(text: string): Facet[] {
+  const facets: Facet[] = [];
+  const urlRegex = /https?:\/\/[^\s)]+/g;
+  let match;
+  while ((match = urlRegex.exec(text)) !== null) {
+    const url = match[0];
+    // Byte offsets (AT Protocol uses UTF-8 byte positions)
+    const encoder = new TextEncoder();
+    const byteStart = encoder.encode(text.slice(0, match.index)).length;
+    const byteEnd = byteStart + encoder.encode(url).length;
+    facets.push({
+      index: { byteStart, byteEnd },
+      features: [{ $type: 'app.bsky.richtext.facet#link', uri: url }],
+    });
+  }
+  return facets;
+}
+// ─── Image Upload ────────────────────────────────────────────
+interface BlobRef {
+  $type: 'blob';
+  ref: { $link: string };
+  mimeType: string;
+  size: number;
+}
+async function uploadImage(
+  session: BlueskySession,
+  imageUrl: string,
+): Promise<BlobRef> {
+  // Fetch the image
+  const imgRes = await fetch(imageUrl, { signal: AbortSignal.timeout(30_000) });
+  if (!imgRes.ok) throw new Error(`Failed to fetch image: ${imgRes.status}`);
+  const contentType = imgRes.headers.get('content-type') ?? 'image/png';
+  const imageData = await imgRes.arrayBuffer();
+  // Upload blob to Bluesky
+  const uploadRes = await fetch(`${BSKY_API}/com.atproto.repo.uploadBlob`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${session.accessJwt}`,
+      'Content-Type': contentType,
+    },
+    body: imageData,
+    signal: AbortSignal.timeout(30_000),
+  });
+  if (!uploadRes.ok) {
+    const err = await uploadRes.text();
+    throw new Error(`Bluesky blob upload failed: ${uploadRes.status} ${err}`);
+  }
+  const result = await uploadRes.json() as { blob: BlobRef };
+  return result.blob;
+}
+// ─── Post ────────────────────────────────────────────────────
+export interface BlueskyPostOptions {
+  text: string;
+  imageUrl?: string;
+  imageAlt?: string;
+  langs?: string[];
+}
+// ─── Public API: re-export session creator for routes ────────
+export { createSession, extractLinkFacets, uploadImage, BSKY_API };
+export type { BlueskySession, BlobRef, Facet };
+export async function postToBluesky(
+  handle: string,
+  appPassword: string,
+  options: BlueskyPostOptions,
+): Promise<BlueskyPostResult> {
+  const session = await createSession(handle, appPassword);
+  // Truncate to 300 chars (Bluesky limit)
+  const text = options.text.length > 300
+    ? options.text.slice(0, 297) + '...'
+    : options.text;
+  const facets = extractLinkFacets(text);
+  const record: Record<string, unknown> = {
+    $type: 'app.bsky.feed.post',
+    text,
+    langs: options.langs ?? ['en'],
+    createdAt: new Date().toISOString(),
+  };
+  if (facets.length > 0) {
+    record.facets = facets;
+  }
+  // Upload and embed image if provided
+  if (options.imageUrl) {
+    try {
+      const blob = await uploadImage(session, options.imageUrl);
+      record.embed = {
+        $type: 'app.bsky.embed.images',
+        images: [{
+          alt: options.imageAlt ?? '',
+          image: blob,
+        }],
+      };
+    } catch (err) {
+      console.warn('[bluesky] Image upload failed (posting without image):', err instanceof Error ? err.message : String(err));
+    }
+  }
+  const res = await fetch(`${BSKY_API}/com.atproto.repo.createRecord`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${session.accessJwt}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      repo: session.did,
+      collection: 'app.bsky.feed.post',
+      record,
+    }),
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky post failed: ${res.status} ${err}`);
+  }
+  const result = await res.json() as { uri: string; cid: string };
+  // Convert AT URI to web URL
+  // at://did:plc:xxx/app.bsky.feed.post/rkey → https://bsky.app/profile/handle/post/rkey
+  const rkey = result.uri.split('/').pop() ?? '';
+  const url = `https://bsky.app/profile/${session.handle}/post/${rkey}`;
+  console.log(`[bluesky] Posted: ${url}`);
+  return { uri: result.uri, cid: result.cid, url };
+}
+// ─── Feed ───────────────────────────────────────────────────
+export interface BlueskyFeedItem {
+  uri: string;
+  cid: string;
+  text: string;
+  createdAt: string;
+  likeCount: number;
+  repostCount: number;
+  replyCount: number;
+  url: string;
+}
+export async function getAuthorFeed(
+  actor: string,
+  limit = 20,
+): Promise<BlueskyFeedItem[]> {
+  const url = `https://public.api.bsky.app/xrpc/app.bsky.feed.getAuthorFeed?actor=${encodeURIComponent(actor)}&limit=${limit}&filter=posts_no_replies`;
+  const res = await fetch(url, { signal: AbortSignal.timeout(10_000) });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky feed fetch failed: ${res.status} ${err}`);
+  }
+  const data = await res.json() as { feed: Array<{ post: Record<string, unknown> }> };
+  return data.feed.map((item) => {
+    const p = item.post as Record<string, unknown>;
+    const rec = p.record as Record<string, unknown>;
+    const author = p.author as Record<string, unknown>;
+    const handle = (author.handle as string) ?? actor;
+    const rkey = (p.uri as string).split('/').pop() ?? '';
+    return {
+      uri: p.uri as string,
+      cid: p.cid as string,
+      text: (rec.text as string) ?? '',
+      createdAt: (rec.createdAt as string) ?? '',
+      likeCount: (p.likeCount as number) ?? 0,
+      repostCount: (p.repostCount as number) ?? 0,
+      replyCount: (p.replyCount as number) ?? 0,
+      url: `https://bsky.app/profile/${handle}/post/${rkey}`,
+    };
+  });
+}
+// ─── Like ───────────────────────────────────────────────────
+export async function likePost(
+  handle: string,
+  appPassword: string,
+  targetUri: string,
+  targetCid: string,
+): Promise<{ uri: string }> {
+  const session = await createSession(handle, appPassword);
+  const res = await fetch(`${BSKY_API}/com.atproto.repo.createRecord`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${session.accessJwt}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      repo: session.did,
+      collection: 'app.bsky.feed.like',
+      record: {
+        $type: 'app.bsky.feed.like',
+        subject: { uri: targetUri, cid: targetCid },
+        createdAt: new Date().toISOString(),
+      },
+    }),
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky like failed: ${res.status} ${err}`);
+  }
+  const result = await res.json() as { uri: string };
+  return { uri: result.uri };
+}
+// ─── Repost ─────────────────────────────────────────────────
+export async function repostPost(
+  handle: string,
+  appPassword: string,
+  targetUri: string,
+  targetCid: string,
+): Promise<{ uri: string }> {
+  const session = await createSession(handle, appPassword);
+  const res = await fetch(`${BSKY_API}/com.atproto.repo.createRecord`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${session.accessJwt}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      repo: session.did,
+      collection: 'app.bsky.feed.repost',
+      record: {
+        $type: 'app.bsky.feed.repost',
+        subject: { uri: targetUri, cid: targetCid },
+        createdAt: new Date().toISOString(),
+      },
+    }),
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky repost failed: ${res.status} ${err}`);
+  }
+  const result = await res.json() as { uri: string };
+  return { uri: result.uri };
+}
+// ─── Delete Post ────────────────────────────────────────────
+export async function deleteBlueskyPost(
+  handle: string,
+  appPassword: string,
+  postUri: string,
+): Promise<void> {
+  const session = await createSession(handle, appPassword);
+  const rkey = postUri.split('/').pop() ?? '';
+  const res = await fetch(`${BSKY_API}/com.atproto.repo.deleteRecord`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${session.accessJwt}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      repo: session.did,
+      collection: 'app.bsky.feed.post',
+      rkey,
+    }),
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky delete failed: ${res.status} ${err}`);
+  }
+}
+// ─── Notifications ──────────────────────────────────────────
+export interface BlueskyNotification {
+  uri: string;
+  cid: string;
+  reason: string; // 'like' | 'repost' | 'follow' | 'mention' | 'reply' | 'quote'
+  author: { handle: string; displayName?: string; did: string };
+  indexedAt: string;
+  text?: string;
+}
+export async function getNotifications(
+  handle: string,
+  appPassword: string,
+  limit = 30,
+): Promise<BlueskyNotification[]> {
+  const session = await createSession(handle, appPassword);
+  const res = await fetch(`${BSKY_API}/app.bsky.notification.listNotifications?limit=${limit}`, {
+    headers: { 'Authorization': `Bearer ${session.accessJwt}` },
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky notifications failed: ${res.status} ${err}`);
+  }
+  const data = await res.json() as { notifications: Array<Record<string, unknown>> };
+  return data.notifications.map((n) => {
+    const author = n.author as Record<string, unknown>;
+    const rec = n.record as Record<string, unknown> | undefined;
+    return {
+      uri: n.uri as string,
+      cid: n.cid as string,
+      reason: n.reason as string,
+      author: {
+        handle: author.handle as string,
+        displayName: author.displayName as string | undefined,
+        did: author.did as string,
+      },
+      indexedAt: n.indexedAt as string,
+      text: rec?.text as string | undefined,
+    };
+  });
+}
+// ─── Follow ─────────────────────────────────────────────────
+export async function followAccount(
+  handle: string,
+  appPassword: string,
+  targetDid: string,
+): Promise<{ uri: string }> {
+  const session = await createSession(handle, appPassword);
+  const res = await fetch(`${BSKY_API}/com.atproto.repo.createRecord`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${session.accessJwt}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      repo: session.did,
+      collection: 'app.bsky.graph.follow',
+      record: {
+        $type: 'app.bsky.graph.follow',
+        subject: targetDid,
+        createdAt: new Date().toISOString(),
+      },
+    }),
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!res.ok) {
+    const err = await res.text();
+    throw new Error(`Bluesky follow failed: ${res.status} ${err}`);
+  }
+  const result = await res.json() as { uri: string };
+  return { uri: result.uri };
+}
+// ─── Profile ────────────────────────────────────────────────
+export interface BlueskyProfile {
+  did: string;
+  handle: string;
+  displayName?: string;
+  description?: string;
+  followersCount: number;
+  followsCount: number;
+  postsCount: number;
+}
+export async function getProfile(actor: string): Promise<BlueskyProfile> {
+  const res = await fetch(
+    `https://public.api.bsky.app/xrpc/app.bsky.actor.getProfile?actor=${encodeURIComponent(actor)}`,
+    { signal: AbortSignal.timeout(10_000) },
+  );
+  if (!res.ok) throw new Error(`Profile fetch failed: ${res.status}`);
+  const data = await res.json() as Record<string, unknown>;
+  return {
+    did: data.did as string,
+    handle: data.handle as string,
+    displayName: data.displayName as string | undefined,
+    description: data.description as string | undefined,
+    followersCount: (data.followersCount as number) ?? 0,
+    followsCount: (data.followsCount as number) ?? 0,
+    postsCount: (data.postsCount as number) ?? 0,
+  };
+}