@superjackfruitlabs/salaam 0.0.1 → 0.0.2

package/dist/src/claude-provider.js

@@ -1,179 +1,2 @@
-import { createAssistantMessageEventStream, } from '@earendil-works/pi-ai';
-import { streamSimple as streamClaude } from '@earendil-works/pi-ai/api/anthropic-messages';
-import { randomUUID } from 'node:crypto';
-import { digest, textDigest } from './protocol.js';
-import { getClaudeModel, validateClaudePayload } from './provider-config.js';
-export function registerClaude(pi, route, frame, tools, bridge, fail) {
-    const catalog = getClaudeModel(route.model);
-    if (!catalog)
-        throw new Error('Pinned Claude model missing');
-    const key = process.env.ANTHROPIC_API_KEY;
-    if (!key)
-        throw new Error('Claude API key unavailable to worker');
-    pi.registerProvider('anthropic', {
-        baseUrl: 'https://api.anthropic.com',
-        apiKey: '$ANTHROPIC_API_KEY',
-        api: 'anthropic-messages',
-        models: [{ ...catalog, maxTokens: route.max_tokens }],
-        streamSimple(model, context, options) {
-            const output = createAssistantMessageEventStream();
-            const source = 'salaam-request:' + randomUUID();
-            let dispatched = false, gateFailed = false, status;
-            let last;
-            const normalize = (message) => ({
-                ...message,
-                responseId: source,
-            });
-            void (async () => {
-                try {
-                    if (model.provider !== route.provider || model.id !== route.model)
-                        throw new Error('Unapproved Claude route');
-                    const native = {
-                        ...catalog,
-                        provider: 'anthropic',
-                        api: 'anthropic-messages',
-                        baseUrl: 'https://api.anthropic.com',
-                        compat: {
-                            ...catalog.compat,
-                            supportsMidConvoSystemMessages: false,
-                            supportsMidConvoToolChanges: false,
-                            supportsMidConvoEffort: false,
-                        },
-                    };
-                    const headers = {};
-                    for (const [name, value] of Object.entries(options?.headers ?? {}))
-                        headers[name.toLowerCase()] = value;
-                    delete headers.authorization;
-                    delete headers['x-api-key'];
-                    delete headers['anthropic-workspace-id'];
-                    if (route.workspace_id)
-                        headers['anthropic-workspace-id'] = route.workspace_id;
-                    let approvedDigest;
-                    const upstream = streamClaude(native, context, {
-                        ...options,
-                        apiKey: key,
-                        env: {},
-                        headers,
-                        maxTokens: route.max_tokens,
-                        reasoning: 'low',
-                        maxRetries: 0,
-                        timeoutMs: 120000,
-                        onPayload: async (payload, rawModel) => {
-                            const replacement = await options?.onPayload?.(payload, rawModel);
-                            const actual = replacement === undefined ? payload : replacement;
-                            try {
-                                validateClaudePayload(actual, route, frame(), tools);
-                                approvedDigest = digest(actual);
-                            }
-                            catch {
-                                gateFailed = true;
-                                throw new Error('Claude payload denied');
-                            }
-                            return actual;
-                        },
-                        onResponse: async (response, rawModel) => {
-                            status = response.status;
-                            await options?.onResponse?.(response, rawModel);
-                        },
-                        fetch: async (input, init) => {
-                            try {
-                                const url = new URL(input instanceof Request ? input.url : String(input));
-                                if (url.href !== 'https://api.anthropic.com/v1/messages?beta=true' &&
-                                    url.href !== 'https://api.anthropic.com/v1/messages')
-                                    throw new Error('Unapproved Claude endpoint');
-                                if (init?.method !== 'POST' || typeof init.body !== 'string' || dispatched)
-                                    throw new Error('Claude request replay denied');
-                                const sentHeaders = new Headers(init.headers);
-                                if (sentHeaders.get('x-api-key') !== key || sentHeaders.has('authorization'))
-                                    throw new Error('Unapproved Claude authentication');
-                                const payload = JSON.parse(init.body);
-                                validateClaudePayload(payload, route, frame(), tools);
-                                if (approvedDigest !== digest(payload))
-                                    throw new Error('Claude payload changed after validation');
-                                dispatched = true;
-                                await bridge('model', {
-                                    source_key: source,
-                                    provider: 'anthropic',
-                                    model: route.model,
-                                    context_digest: textDigest(frame()),
-                                    payload_digest: approvedDigest,
-                                    payload,
-                                });
-                            }
-                            catch {
-                                gateFailed = true;
-                                throw new Error('Claude request denied by Salaam');
-                            }
-                            return globalThis.fetch(input, { ...init, redirect: 'error' });
-                        },
-                    });
-                    for await (const event of upstream) {
-                        if ('partial' in event)
-                            last = normalize(event.partial);
-                        if (event.type === 'done') {
-                            const message = normalize(event.message);
-                            last = message;
-                            await bridge('usage', {
-                                source_key: source,
-                                usage: message.usage,
-                                provider_response_id: event.message.responseId ?? null,
-                            });
-                            output.push({ ...event, message });
-                        }
-                        else if (event.type === 'error') {
-                            const message = normalize(event.error);
-                            const code = /^(?:Error:\s*)?(\d{3})\b/.exec(message.errorMessage ?? '')?.[1];
-                            status = status ?? (code ? Number(code) : undefined);
-                            delete message.diagnostics;
-                            message.errorMessage = options?.signal?.aborted
-                                ? 'Claude request cancelled'
-                                : `Claude request failed${status ? ` (HTTP ${status})` : ''}`;
-                            message.content = [];
-                            last = message;
-                            output.push({ ...event, error: message });
-                        }
-                        else
-                            output.push(('partial' in event
-                                ? { ...event, partial: last }
-                                : event));
-                    }
-                    output.end();
-                    if (gateFailed)
-                        await fail();
-                }
-                catch {
-                    const error = {
-                        role: 'assistant',
-                        content: [],
-                        api: 'anthropic-messages',
-                        provider: 'anthropic',
-                        model: route.model,
-                        timestamp: Date.now(),
-                        stopReason: options?.signal?.aborted ? 'aborted' : 'error',
-                        usage: last?.usage ?? {
-                            input: 0,
-                            output: 0,
-                            cacheRead: 0,
-                            cacheWrite: 0,
-                            totalTokens: 0,
-                            cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
-                        },
-                        responseId: source,
-                        errorMessage: options?.signal?.aborted
-                            ? 'Claude request cancelled'
-                            : 'Claude required control failed',
-                    };
-                    output.push({
-                        type: 'error',
-                        reason: error.stopReason === 'aborted' ? 'aborted' : 'error',
-                        error,
-                    });
-                    output.end();
-                    if (!options?.signal?.aborted)
-                        await fail();
-                }
-            })();
-            return output;
-        },
-    });
-}
+// Kept as an internal compatibility entry point for existing extensions.
+export { registerLiveProvider as registerClaude } from './live-provider.js';

package/dist/src/cli-help.js

@@ -1,4 +1,58 @@
 const commands = {
+    a2a: `salaam a2a credential PEER_ID --file NEW_OWNER_ONLY_FILE
+salaam a2a discover --peer ID --endpoint URL --card-url URL --credential-file FILE --addresses IP[,IP] [--local]
+salaam a2a pin --peer ID --endpoint URL --card-url URL --card-file REVIEWED_JSON --credential-file FILE --addresses IP[,IP] --skill SKILL [--tenant TENANT --files PATH[,PATH] --local]
+salaam a2a peers
+salaam a2a grant --assignment ID --peer ID --credential-file OWNER_ONLY_JSON [--tenant TENANT --skill SKILL] [--peer-client openclaw-2026.10.5]
+salaam a2a inspect CHILD_ID
+salaam a2a reconcile CHILD_ID --run-id EXACT_RUN_ID
+
+Use --a2a-config FILE for outbound peers and --a2a-listen-config FILE for private
+inbound one-use analysis grants. Peer credentials grant no human/operator powers.
+Remote internal model usage and execution remain unobserved.`,
+    harness: `salaam harness probe --pin FILE
+salaam harness prepare --runtime-root NEW_DIR --arch linux-arm64|linux-x64
+salaam harness config --target TARGET --runtime-root PREPARED_DIR [--id ID]
+salaam harness list
+salaam harness inspect CHILD_ID
+salaam harness reconcile CHILD_ID --run-id RUN_ID
+
+Negotiate an operator-pinned external harness in a disposable empty home, with no
+repository, credentials or model request. FILE contains target, executable,
+executable_digest and version. Targets: gemini-acp, claude-acp, codex-app-server.
+Advertised capabilities are separate from enforced authority. A probe grants no
+file, command or worker-dispatch permission. A service started with an owner-only
+--harness-config FILE runs fresh Docker readiness proofs before admitting configured
+targets. Reconcile confirms stopped resources; it never resends a prompt.`,
+    workers: `salaam workers proposal CHILD_ID [--offset N]
+salaam workers integrate CHILD_ID --revision N --root-digest SHA256 --patch-digest SHA256
+salaam workers integration RECEIPT_ID
+salaam workers resolve RECEIPT_ID --revision N --root-digest SHA256
+
+Writing specialists use private drafts. Review every proposal page and the root digest before integration.
+Integration does not verify a task. Resolution explicitly admits a new apply only against its unchanged original root.
+Mutations accept --request-id ID and --takeover.`,
+    team: `salaam team show TASK_ID
+salaam team assign TASK_ID --step STEP_ID --profile PROFILE_ID --requests N --revision N
+salaam team assign TASK_ID --step STEP_ID --profile PROFILE_ID --runtime RUNTIME_ID --invocations 1 --revision N
+salaam team run TASK_ID --assignment ID --generation N --revision N [--instruction TEXT --continues ATTEMPT_ID]
+salaam team send TASK_ID --to ASSIGNMENT_ID --text TEXT
+salaam team receive TASK_ID --assignment ID
+salaam team ack TASK_ID --assignment ID --message MESSAGE_ID
+salaam team reject TASK_ID --assignment ID --generation N --revision N --reason TEXT
+
+Mutations accept --request-id ID and --takeover. Claims bind the plan, admitted profile and generation.
+Messages never wake workers. Use run for an explicit new claim or follow-up.
+External assignments require a task with explicit limits.invocations and
+token_units:null. Their internal model usage is reported as unknown.`,
+    agents: `salaam agents list --session SESSION_ID
+salaam agents inspect PROFILE_ID --session SESSION_ID
+salaam agents admit PROFILE_ID --session SESSION_ID --digest REVIEWED_DIGEST [--facts ID,ID]
+salaam agents revoke GRANT_ID --session SESSION_ID
+
+Profiles are data in .salaam/agents/*.md with JSON front matter and a prompt body.
+Inspect the effective tools and digest before admission. Project definitions cannot
+grant themselves authority. Mutations accept --request-id and --takeover.`,
     tui: `salaam tui [--session SESSION_ID] [--observe|--takeover] [--theme night|paper]
            [--cwd DIR] [--coding-root PRIVATE_DIR] [--coding-socket DOCKER_SOCKET]
 
@@ -110,6 +164,8 @@ salaam tasks cancel TASK_ID --revision N
 Mutations accept --request-id ID and --takeover. Reuse the same request ID and input
 when retrying a lost response. One task per session. Automatic progression is opt-in
 and bounded by step, request, runtime, concurrency and declared token limits.
+Plans may explicitly set limits.token_units to null to disable token budgeting;
+request/runtime limits and approvals still apply. Unsupported output caps are rejected.
 Success requires fresh command receipts and deliverables at the exact workspace revision.
 Operator exceptions are reported separately. Checkpoints preserve conflicting human edits.
 Legacy task facts remain under the singular task command.`,
@@ -123,18 +179,33 @@ Updates are explicit and versioned. Corrections retain the original fact and its
 Read bounded evidence/history pages, including entries preceding compaction.`,
     compactions: `salaam compactions inspect COMPACTION_ID
 salaam compactions cancel COMPACTION_ID [--takeover] [--request-id ID]`,
-    auth: `salaam auth set anthropic
+    providers: `salaam providers list
+
+List every provider in the pinned Pi registry, its chat APIs and auth methods.
+Catalog support does not imply live account access or verification.`,
+    models: `salaam models list [PROVIDER]
+
+List pinned chat model IDs without network requests or credentials.`,
+    auth: `salaam auth set PROVIDER
+salaam auth login PROVIDER [--oauth]
+salaam auth status [PROVIDER]
+salaam auth logout PROVIDER
 
-Enter a Claude API key at a hidden prompt. It is saved privately under
-~/.config/salaam/credentials/anthropic. ANTHROPIC_API_KEY takes precedence.`,
-    service: `salaam service start [--foreground] [--provider offline|anthropic]
+Set an API key at a hidden prompt (or pipe it on stdin). Login uses Pi's provider-owned
+setup, including cloud configuration and browser OAuth. Credentials are private under
+~/.config/salaam/credentials; refresh is serialized across processes.
+Status prints metadata only. Existing Anthropic keys remain compatible.`,
+    service: `salaam service start [--foreground] [--provider PROVIDER]
                      [--model MODEL] [--max-output-tokens N] [--workspace-id ID]
                      [--effect-socket PATH] [--effect-opaque]
                      [--coding-root PRIVATE_DIR] [--coding-socket DOCKER_SOCKET]
+                     [--harness-config OWNER_ONLY_FILE] [--a2a-config OWNER_ONLY_FILE]
+                     [--a2a-listen-config OWNER_ONLY_FILE]
 salaam service status
 salaam service stop
 
-The default provider is offline. Claude defaults to claude-sonnet-5-5.
+The default provider is offline. Anthropic defaults to claude-sonnet-5-5.
+Other providers require --model; use salaam providers list and salaam models list PROVIDER.
 Start with --foreground for process-supervisor use; otherwise the service detaches.`,
     session: `salaam session create [--cwd DIR] [--request-id ID] [--coding]
 salaam session list
@@ -193,7 +264,9 @@ Usage: salaam <command> [options]
 Commands:
   tui           Open the Salaam terminal interface (also bare sal)
   remote        Open the same session over SSH
-  auth          Configure the Claude API key locally
+  providers     List pinned Pi providers and capabilities
+  models        List pinned chat models
+  auth          Configure provider credentials or OAuth
   service       Start, inspect or stop the session service
   session       Create, inspect, submit, resume or cancel work
   attach        Open an interactive terminal on a session
@@ -212,6 +285,11 @@ Commands:
   compactions   Inspect or cancel a managed checkpoint
   execution     Prove the container boundary with disposable fixtures
   workspace     Inspect coding copies, review diffs or acknowledge human edits
+  agents        Inspect and admit specialist profiles
+  team          Assign task steps and inspect the durable team inbox
+  workers       Inspect and explicitly integrate isolated coding proposals
+  harness       Prepare, inspect and reconcile pinned external workers
+  a2a           Configure bounded peer analysis and inspect remote work
   commands      Start, inspect, cancel or reconcile isolated commands
 
 ${globalOptions}
@@ -256,6 +334,28 @@ const valueOptions = new Set([
     '--run-id',
     '--coding-root',
     '--coding-socket',
+    '--harness-config',
+    '--a2a-config',
+    '--a2a-listen-config',
+    '--assignment',
+    '--peer',
+    '--peer-client',
+    '--file',
+    '--endpoint',
+    '--card-url',
+    '--card-file',
+    '--addresses',
+    '--files',
+    '--retention',
+    '--credential-file',
+    '--tenant',
+    '--skill',
+    '--runtime-root',
+    '--arch',
+    '--target',
+    '--id',
+    '--runtime',
+    '--invocations',
     '--step-key',
     '--command',
     '--plan',
@@ -275,6 +375,7 @@ const valueOptions = new Set([
     '--status',
     '--manifest',
     '--config',
+    '--pin',
     '--platform',
 ]);
 /** Skip option values so a prompt containing "--help" stays a prompt. */