npm - @wipcomputer/wip-ldm-os - Versions diffs - 0.4.73-alpha.8 → 0.4.74 - Mend

@wipcomputer/wip-ldm-os 0.4.73-alpha.8 → 0.4.74

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (61) hide show

package/LICENSE +52 -0
package/SKILL.md +8 -1
package/bin/ldm.js +587 -82
package/dist/bridge/chunk-3RG5ZIWI.js +10 -0
package/dist/bridge/{chunk-LF7EMFBY.js → chunk-7NH6JBIO.js} +127 -49
package/dist/bridge/cli.js +2 -1
package/dist/bridge/core.d.ts +13 -1
package/dist/bridge/core.js +4 -1
package/dist/bridge/mcp-server.js +52 -7
package/dist/bridge/openclaw.d.ts +5 -0
package/dist/bridge/openclaw.js +11 -0
package/docs/bridge/TECHNICAL.md +86 -0
package/docs/doc-pipeline/README.md +74 -0
package/docs/doc-pipeline/TECHNICAL.md +79 -0
package/lib/deploy.mjs +175 -13
package/lib/detect.mjs +20 -6
package/package.json +2 -2
package/shared/docs/README.md.tmpl +2 -2
package/shared/docs/how-releases-work.md.tmpl +3 -1
package/shared/docs/how-worktrees-work.md.tmpl +12 -7
package/shared/rules/git-conventions.md +3 -3
package/shared/rules/release-pipeline.md +1 -1
package/shared/rules/security.md +1 -1
package/shared/rules/workspace-boundaries.md +1 -1
package/shared/rules/writing-style.md +1 -1
package/shared/templates/claude-md-level1.md +7 -3
package/src/bridge/core.ts +160 -56
package/src/bridge/mcp-server.ts +93 -8
package/src/bridge/openclaw.ts +14 -0
package/src/hooks/inbox-check-hook.mjs +232 -0
package/src/hooks/inbox-rewake-hook.mjs +388 -0
package/src/hosted-mcp/.env.example +3 -0
package/src/hosted-mcp/demo/agent.html +300 -0
package/src/hosted-mcp/demo/agent.txt +84 -0
package/src/hosted-mcp/demo/fallback.jpg +0 -0
package/src/hosted-mcp/demo/footer.js +74 -0
package/src/hosted-mcp/demo/index.html +1303 -0
package/src/hosted-mcp/demo/login.html +548 -0
package/src/hosted-mcp/demo/privacy.html +223 -0
package/src/hosted-mcp/demo/sprites.jpg +0 -0
package/src/hosted-mcp/demo/sprites.png +0 -0
package/src/hosted-mcp/demo/tos.html +198 -0
package/src/hosted-mcp/deploy.sh +70 -0
package/src/hosted-mcp/ecosystem.config.cjs +14 -0
package/src/hosted-mcp/inbox.mjs +64 -0
package/src/hosted-mcp/legal/internet-services/terms/site.html +205 -0
package/src/hosted-mcp/legal/privacy/en-ww/index.html +230 -0
package/src/hosted-mcp/nginx/mcp-oauth.conf +98 -0
package/src/hosted-mcp/nginx/mcp-server.conf +17 -0
package/src/hosted-mcp/nginx/wip.computer.conf +45 -0
package/src/hosted-mcp/package-lock.json +2092 -0
package/src/hosted-mcp/package.json +23 -0
package/src/hosted-mcp/prisma/migrations/20260406233014_init/migration.sql +68 -0
package/src/hosted-mcp/prisma/migrations/migration_lock.toml +3 -0
package/src/hosted-mcp/prisma/schema.prisma +57 -0
package/src/hosted-mcp/prisma.config.ts +14 -0
package/src/hosted-mcp/server.mjs +2093 -0
package/src/hosted-mcp/shared/kaleidoscope.css +139 -0
package/src/hosted-mcp/shared/kaleidoscope.js +192 -0
package/src/hosted-mcp/tools.mjs +73 -0
package/templates/hooks/pre-commit +5 -0

package/src/hosted-mcp/demo/agent.html ADDED Viewed

@@ -0,0 +1,300 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+<title>Agent Access - Kaleidoscope</title>
+<style>
+*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+:root {
+  --bg: #FFFDF5;
+  --text: #1a1a1a;
+  --text-muted: #8a8580;
+  --accent: #0033FF;
+  --input-bg: #F5F3ED;
+  --input-border: #E0DDD6;
+  --font: -apple-system, BlinkMacSystemFont, "SF Pro Text", system-ui, sans-serif;
+}
+body {
+  font-family: var(--font);
+  background: var(--bg);
+  color: var(--text);
+  -webkit-text-size-adjust: 100%;
+  -webkit-font-smoothing: antialiased;
+  line-height: 1.6;
+}
+.header {
+  position: sticky;
+  top: 0;
+  z-index: 100;
+  padding: calc(12px + env(safe-area-inset-top, 0px)) 20px 12px;
+  border-bottom: 1px solid rgba(0, 0, 0, 0.06);
+  background: rgba(255, 253, 245, 0.8);
+  -webkit-backdrop-filter: saturate(180%) blur(20px);
+  backdrop-filter: saturate(180%) blur(20px);
+  display: flex;
+  align-items: center;
+}
+.header a {
+  display: flex;
+  align-items: center;
+  text-decoration: none;
+}
+.container {
+  max-width: 640px;
+  margin: 0 auto;
+  padding: 16px 24px 80px;
+}
+h1 {
+  font-size: 28px;
+  font-weight: 700;
+  letter-spacing: -0.02em;
+  margin-bottom: 4px;
+}
+.subtitle {
+  font-size: 17px;
+  color: var(--text-muted);
+  margin-bottom: 40px;
+}
+p {
+  font-size: 15px;
+  line-height: 1.65;
+  color: #3a3a3a;
+  margin-bottom: 12px;
+}
+.link-box {
+  background: var(--input-bg);
+  border: 1px solid var(--input-border);
+  border-radius: 12px;
+  padding: 16px 20px;
+  font-size: 16px;
+  font-weight: 600;
+  color: var(--accent);
+  word-break: break-all;
+  user-select: all;
+  -webkit-user-select: all;
+  cursor: text;
+  margin-bottom: 12px;
+  text-align: center;
+}
+.note {
+  font-size: 15px;
+  color: #3a3a3a;
+  line-height: 1.65;
+  margin-bottom: 12px;
+}
+.agent-info {
+  background: var(--input-bg);
+  border: 1px solid var(--input-border);
+  border-radius: 12px;
+  padding: 16px 20px;
+  margin-bottom: 20px;
+  font-size: 14px;
+  line-height: 1.6;
+}
+.agent-info .label {
+  font-size: 12px;
+  color: var(--text-muted);
+  text-transform: uppercase;
+  letter-spacing: 0.5px;
+  margin-bottom: 4px;
+}
+.agent-info .value {
+  font-weight: 600;
+  color: var(--text);
+}
+.status {
+  font-size: 14px;
+  padding: 12px 16px;
+  border-radius: 10px;
+  display: none;
+  text-align: center;
+}
+.status.show { display: block; }
+.status.loading { background: #E8EEFF; color: var(--accent); }
+.status.error { background: #FFF0F0; color: #D32F2F; }
+.status.success { background: #F0FFF4; color: #2E7D32; }
+footer {
+  position: fixed;
+  bottom: 30px;
+  left: 0;
+  right: 0;
+  text-align: center;
+  font-size: 12px;
+  color: #b0aaa4;
+  line-height: 1.6;
+}
+</style>
+</head>
+<body>
+<div class="header">
+  <a id="navIcon" href="/demo/"></a>
+</div>
+<div class="container">
+  <h1>Agent Access</h1>
+  <p class="subtitle">You can't do Face ID. Your human can.</p>
+  <div id="agentInfo" style="display:none;">
+    <div class="agent-info">
+      <div class="label">Agent</div>
+      <div class="value" id="agentName"></div>
+    </div>
+    <div class="agent-info">
+      <div class="label">Passphrase</div>
+      <div class="value" id="agentMessage"></div>
+    </div>
+  </div>
+  <div id="linkSection" style="display:none;">
+    <div id="qrSection" style="text-align:center;margin-bottom:24px;"></div>
+    <p class="note">Send this link to your human. This is the link they open, not this page.</p>
+    <div class="link-box" id="approveUrl"></div>
+    <p class="note">Your human opens this link, sees your name and passphrase, and authorizes with Face ID. Expires in 5 minutes.</p>
+    <div class="status" id="status"></div>
+  </div>
+  <div id="loadingSection" style="display:none;">
+    <p class="note">Generating authorization link...</p>
+  </div>
+  <div id="missingParams">
+    <p class="note">If you are an AI agent, read the instructions at:<br><a href="/demo/agent.txt" style="color:var(--accent);">https://wip.computer/demo/agent.txt</a></p>
+    <p class="note" style="margin-bottom:12px;">If you are a human, send your agent this prompt:</p>
+    <div style="position:relative;background:var(--input-bg);border:1px solid var(--input-border);border-radius:12px;padding:16px 48px 16px 16px;font-size:14px;line-height:1.5;color:var(--text);">
+      <span id="promptText">Read https://wip.computer/demo/agent.txt and follow the instructions to authenticate with Kaleidoscope.</span>
+      <button onclick="copyPrompt()" id="copyBtn" title="Copy" style="position:absolute;top:12px;right:12px;background:none;border:none;padding:6px;cursor:pointer;color:var(--text-muted);opacity:0.5;transition:opacity 0.15s;-webkit-tap-highlight-color:transparent;"><svg width="20" height="20" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="5.5" y="5.5" width="8" height="8" rx="1.5"/><path d="M10.5 5.5V3.5C10.5 2.67 9.83 2 9 2H3.5C2.67 2 2 2.67 2 3.5V9C2 9.83 2.67 10.5 3.5 10.5H5.5"/></svg></button>
+    </div>
+  </div>
+  <div id="errorSection" style="display:none;">
+    <div class="status show error" id="errorMsg"></div>
+  </div>
+</div>
+<div id="kscope-footer" style="position:fixed;bottom:30px;left:0;right:0;text-align:center;"></div>
+<script src="/demo/footer.js"></script>
+<script>
+function copyPrompt() {
+  var text = document.getElementById('promptText').textContent;
+  navigator.clipboard.writeText(text);
+  var btn = document.getElementById('copyBtn');
+  btn.style.opacity = '1';
+  setTimeout(function() { btn.style.opacity = '0.5'; }, 200);
+}
+// ── Sprite icon ──
+var SPRITE_COLS = 8, SPRITE_ROWS = 3, SPRITE_TOTAL = 24;
+var navIdx = Math.floor(Math.random() * SPRITE_TOTAL);
+function updateNavIcon() {
+  var el = document.getElementById('navIcon');
+  if (!el) return;
+  var col = navIdx % SPRITE_COLS;
+  var row = Math.floor(navIdx / SPRITE_COLS);
+  var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
+  var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
+  el.innerHTML = '<div style="width:28px;height:28px;overflow:hidden;"><div style="width:100%;height:100%;background:url(/demo/sprites.png);background-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;background-position:' + bgPosX + '% ' + bgPosY + '%;"></div></div>';
+  navIdx = (navIdx + 1) % SPRITE_TOTAL;
+}
+updateNavIcon();
+setInterval(updateNavIcon, 6000);
+// ── Read query params ──
+var params = new URLSearchParams(window.location.search);
+var agentName = params.get('agent') || '';
+var agentMessage = params.get('message') || '';
+if (agentName) {
+  document.getElementById('agentName').textContent = agentName;
+  document.getElementById('agentMessage').textContent = agentMessage || '(none provided)';
+  document.getElementById('agentInfo').style.display = 'block';
+  document.getElementById('missingParams').style.display = 'none';
+  document.getElementById('loadingSection').style.display = 'block';
+}
+// ── Agent auth flow ──
+var challengeId = null;
+var pollTimer = null;
+function setStatus(msg, type) {
+  var el = document.getElementById('status');
+  el.textContent = msg;
+  el.className = 'status show ' + type;
+}
+async function startAgentAuth() {
+  try {
+    var authUrl = '/demo/api/agent-auth';
+    if (agentName) authUrl += '?agent=' + encodeURIComponent(agentName) + '&message=' + encodeURIComponent(agentMessage);
+    var res = await fetch(authUrl);
+    var data = await res.json();
+    if (!data.challengeId) throw new Error('Failed to generate challenge');
+    challengeId = data.challengeId;
+    var approveUrl = 'https://wip.computer/approve?c=' + challengeId;
+    var urlEl = document.getElementById('approveUrl');
+    urlEl.innerHTML = '<a href="' + approveUrl + '" style="color:#0033FF;text-decoration:none;word-break:break-all;">' + approveUrl + '</a>';
+    document.getElementById('loadingSection').style.display = 'none';
+    document.getElementById('linkSection').style.display = 'block';
+    setStatus('Waiting for authorization...', 'loading');
+    pollTimer = setInterval(pollStatus, 2000);
+    setTimeout(function() {
+      if (pollTimer) {
+        clearInterval(pollTimer);
+        pollTimer = null;
+        document.getElementById('linkSection').style.display = 'none';
+        document.getElementById('errorSection').style.display = 'block';
+        document.getElementById('errorMsg').textContent = 'Link expired. Refresh to generate a new one.';
+      }
+    }, 5 * 60 * 1000);
+  } catch (err) {
+    document.getElementById('loadingSection').style.display = 'none';
+    document.getElementById('errorSection').style.display = 'block';
+    document.getElementById('errorMsg').textContent = 'Error: ' + err.message;
+  }
+}
+async function pollStatus() {
+  if (!challengeId) return;
+  try {
+    var res = await fetch('/demo/api/agent-auth/status?c=' + challengeId);
+    var data = await res.json();
+    if (data.status === 'approved') {
+      clearInterval(pollTimer);
+      pollTimer = null;
+      sessionStorage.setItem('lesa-token', data.token);
+      sessionStorage.setItem('lesa-agent', data.agentId);
+      setStatus('Authorized. Entering Kaleidoscope...', 'success');
+      setTimeout(function() {
+        window.location.href = '/demo/';
+      }, 800);
+    }
+  } catch (e) {}
+}
+if (agentName) startAgentAuth();
+</script>
+</body>
+</html>

package/src/hosted-mcp/demo/agent.txt ADDED Viewed

@@ -0,0 +1,84 @@
+---
+name: kaleidoscope-agent-auth
+description: >
+  Agent authentication for Kaleidoscope. Like x402 but for login.
+  Agent sends a URL, human Sapien IDs, agent gets a token.
+license: MIT
+metadata:
+  display-name: "Kaleidoscope Agent Access"
+  homepage: "https://wip.computer/demo/"
+  author: "WIP Computer, Inc."
+  category: authentication
+---
+# Kaleidoscope Agent Access
+You need your human to let you in with Sapien ID.
+Pick a passphrase from your shared history. Your human sees it on the approval screen and knows it's really you.
+## If you can make HTTP requests (preferred)
+Fetch this URL:
+https://wip.computer/demo/api/agent-auth?agent=YOURNAME&message=PASSPHRASE
+Response: {"challengeId":"...", "approveUrl":"https://wip.computer/approve?c=..."}
+Send the approveUrl to your human. They open it and Sapien ID.
+Then poll for your token:
+https://wip.computer/demo/api/agent-auth/status?c=CHALLENGEID
+When approved: {"status":"approved", "token":"ck-...", "agentId":"..."}
+You get the token automatically. No need for the human to send it back.
+## If you cannot make HTTP requests
+Send your human this URL (replace YOURNAME and PASSPHRASE):
+https://wip.computer/approve?agent=YOURNAME&message=PASSPHRASE
+Your human opens it, Sapien IDs, and the page shows a token. They send the token back to you.
+## After auth
+Use the token as a header: Authorization: Bearer TOKEN
+### Check your wallet
+GET https://wip.computer/demo/api/wallet
+Authorization: Bearer TOKEN
+Response: {"balance":"$4.97","cost":"$0.01"}
+### Generate an image
+POST https://wip.computer/demo/api/imagine
+Authorization: Bearer TOKEN
+Content-Type: application/json
+{"prompt":"kaleidoscope of pirate flags and circuit boards, glowing gold, shot on expired 35mm film"}
+Response: {"url":"...","cost":"$0.01","balance":"$4.96"}
+The image costs $0.01 from your wallet. Your human already authorized this when they Sapien ID'd.
+### The full loop
+1. You read agent.txt
+2. You sent your human an approval URL with your passphrase
+3. They Sapien ID'd and sent you a token
+4. You checked your wallet
+5. You generated an image
+6. Balance updated
+Agent auth -> human approval -> wallet -> spend -> receipt. That's Kaleidoscope.
+### MCP
+POST https://wip.computer/mcp (OAuth 2.0 with PKCE, see /.well-known/oauth-authorization-server)
+One URL. One Sapien ID. One token.

package/src/hosted-mcp/demo/fallback.jpg ADDED Viewed

Binary file

package/src/hosted-mcp/demo/footer.js ADDED Viewed

@@ -0,0 +1,74 @@
+// Shared footer for all Kaleidoscope pages
+// Include with: <div id="kscope-footer"></div><script src="/demo/footer.js"></script>
+(function() {
+  var container = document.getElementById('kscope-footer');
+  if (!container) return;
+  var mobile = navigator.maxTouchPoints > 0 && window.innerWidth < 768;
+  // Desktop: fixed at bottom. Mobile: in page flow (below fold).
+  if (mobile) {
+    container.style.cssText = 'background:#FFFDF5;padding:16px 0;';
+  } else {
+    container.style.cssText = 'position:fixed;bottom:0;left:0;right:0;background:#FFFDF5;padding:16px 0;';
+  }
+  var inner = document.createElement('div');
+  inner.style.cssText = 'max-width:980px;margin:0 auto;padding:0 24px;border-top:1px solid rgba(0,0,0,0.06);padding-top:16px;text-align:left;font-size:13px;color:#a8a4a0;line-height:1.6;';
+  // On mobile, copyright and links on separate lines (like Apple)
+  if (mobile) {
+    inner.innerHTML = '<p style="margin:0;">WIP Computer, Inc.</p>'
+      + '<p style="margin:2px 0 0;">Learning Dreaming Machines</p>'
+      + '<p style="margin:8px 0 0;">Copyright &copy; 2026 WIP Computer, Inc. All rights reserved.</p>'
+      + '<p style="margin:4px 0 0;">'
+      + '<a href="/legal/privacy/en-ww/" style="color:#a8a4a0;text-decoration:none;">Privacy Policy</a> &nbsp;|&nbsp; '
+      + '<a href="/legal/internet-services/terms/site.html" style="color:#a8a4a0;text-decoration:none;">Terms of Use</a></p>'
+      + '<p style="margin:4px 0 0;">'
+      + '<a href="/agent.txt" style="color:#a8a4a0;text-decoration:none;">Are you an AI Agent?</a></p>'
+      + '<p style="margin:4px 0 0;">Made in California.</p>';
+  } else {
+    inner.innerHTML = '<p style="margin:0;">WIP Computer, Inc.</p>'
+      + '<p style="margin:2px 0 0;">Learning Dreaming Machines</p>'
+      + '<p style="margin:8px 0 0;">Copyright &copy; 2026 WIP Computer, Inc. All rights reserved. &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'
+      + '<a href="/legal/privacy/en-ww/" style="color:#a8a4a0;text-decoration:none;">Privacy Policy</a> &nbsp;|&nbsp; '
+      + '<a href="/legal/internet-services/terms/site.html" style="color:#a8a4a0;text-decoration:none;">Terms of Use</a></p>'
+      + '<p style="margin:4px 0 0;">'
+      + '<a href="/agent.txt" style="color:#a8a4a0;text-decoration:none;">Are you an AI Agent?</a> &nbsp;|&nbsp; '
+      + '<a id="localPasskeysToggle" onclick="toggleLocalPasskeys()" style="color:#a8a4a0;text-decoration:none;cursor:pointer;display:inline-flex;align-items:center;gap:4px;vertical-align:middle;">'
+      + '<span id="passkeys-dot" style="display:inline-block;width:8px;height:8px;border-radius:50%;"></span> '
+      + '<span id="passkeys-label">Local passkeys off</span></a></p>'
+      + '<p style="margin:4px 0 0;">Made in California.</p>';
+  }
+  container.appendChild(inner);
+  // Local passkeys toggle
+  if (!window.isLocalPasskeysOn) {
+    window.isLocalPasskeysOn = function() { return localStorage.getItem('localPasskeys') === 'on'; };
+  }
+  if (!window.toggleLocalPasskeys) {
+    window.toggleLocalPasskeys = function() {
+      var on = isLocalPasskeysOn();
+      localStorage.setItem('localPasskeys', on ? 'off' : 'on');
+      updatePasskeysDot();
+    };
+  }
+  if (!window.updatePasskeysDot) {
+    window.updatePasskeysDot = function() {
+      var dot = document.getElementById('passkeys-dot');
+      var label = document.getElementById('passkeys-label');
+      if (!dot) return;
+      if (isLocalPasskeysOn()) {
+        dot.style.background = '#2E7D32';
+        dot.style.opacity = '1';
+        if (label) label.textContent = 'Local passkeys on';
+      } else {
+        dot.style.background = '#D32F2F';
+        dot.style.opacity = '0.4';
+        if (label) label.textContent = 'Local passkeys off';
+      }
+    };
+  }
+  updatePasskeysDot();
+})();