@wipcomputer/wip-ldm-os 0.4.73-alpha.9 → 0.4.74

package/src/hosted-mcp/shared/kaleidoscope.css

@@ -0,0 +1,139 @@
+*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+
+:root {
+  --bg: #FFFDF5;
+  --text: #1a1a1a;
+  --text-muted: #8a8580;
+  --lesa-bubble: #F0EDE6;
+  --user-bubble: #E8F0FE;
+  --accent: #0033FF;
+  --accent-hover: #0033FF;
+  --input-bg: #F5F3ED;
+  --input-border: #E0DDD6;
+  --font: -apple-system, BlinkMacSystemFont, "SF Pro Text", system-ui, sans-serif;
+}
+
+html, body {
+  height: 100%;
+  font-family: var(--font);
+  background: var(--bg);
+  color: var(--text);
+  -webkit-text-size-adjust: 100%;
+  -webkit-font-smoothing: antialiased;
+  overflow: hidden;
+}
+
+/* ── Login Page ── */
+
+.login-page {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  height: 100vh;
+  height: 100dvh;
+  padding: 24px;
+  padding-top: calc(24px + env(safe-area-inset-top, 0px));
+  overflow-y: auto;
+  -webkit-overflow-scrolling: touch;
+}
+
+.login-card {
+  position: relative;
+  max-width: 380px;
+  width: 100%;
+  text-align: center;
+}
+
+.login-title {
+  font-size: 26px;
+  font-weight: 600;
+  letter-spacing: -0.02em;
+  margin-bottom: 8px;
+}
+
+.login-byline {
+  font-size: 16px;
+  color: var(--text-muted);
+  margin-bottom: 8px;
+  letter-spacing: 0.2px;
+}
+
+.login-tagline {
+  font-size: 17px;
+  color: var(--text-muted);
+  margin-bottom: 40px;
+  letter-spacing: 0.3px;
+}
+
+.login-buttons {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  margin-bottom: 16px;
+}
+
+.btn {
+  display: block;
+  width: 100%;
+  padding: 18px;
+  border: none;
+  border-radius: 12px;
+  font-size: 18px;
+  font-weight: 600;
+  font-family: var(--font);
+  cursor: pointer;
+  transition: background 0.15s, transform 0.1s;
+  -webkit-tap-highlight-color: transparent;
+}
+
+.btn:active {
+  transform: scale(0.98);
+}
+
+.btn-primary {
+  background: var(--accent);
+  color: white;
+}
+
+.btn-primary:hover {
+  background: var(--accent-hover);
+}
+
+.btn-secondary {
+  background: var(--input-bg);
+  color: var(--text);
+  border: 1px solid var(--input-border);
+}
+
+.btn-secondary:hover {
+  background: #EBE8E1;
+}
+
+.btn:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+  transform: none;
+}
+
+.login-status {
+  margin-top: 16px;
+  font-size: 14px;
+  padding: 12px 16px;
+  border-radius: 10px;
+  display: none;
+  text-align: left;
+}
+
+.login-status.show { display: block; }
+.login-status.loading { background: #E8EEFF; color: var(--accent); }
+.login-status.error { background: #FFF0F0; color: #D32F2F; }
+.login-status.success { background: #F0FFF4; color: #2E7D32; }
+
+.login-footer {
+  margin-top: 48px;
+  font-size: 12px;
+  color: var(--text-muted);
+  letter-spacing: 0.2px;
+}
+

package/src/hosted-mcp/shared/kaleidoscope.js

@@ -0,0 +1,192 @@
+// Shared Kaleidoscope JS: WebAuthn helpers, sprite loading, status display
+// Extracted verbatim from demo/index.html. DO NOT MODIFY separately.
+// If the demo changes, re-extract.
+
+// ── Base64url helpers ──
+function b64urlToBytes(b64) {
+  var bin = atob(b64.replace(/-/g, '+').replace(/_/g, '/') + '=='.slice(0, (4 - b64.length % 4) % 4));
+  return Uint8Array.from(bin, function(c) { return c.charCodeAt(0); });
+}
+function bytesToB64url(buf) {
+  return btoa(String.fromCharCode.apply(null, new Uint8Array(buf)))
+    .replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+}
+
+// ── Status display (matches demo's .login-status CSS) ──
+function setStatus(msg, type) {
+  var el = document.getElementById('loginStatus');
+  el.textContent = msg;
+  el.className = 'login-status show ' + type;
+}
+
+function clearLoginStatus() {
+  var el = document.getElementById('loginStatus');
+  el.style.transition = 'opacity 0.5s';
+  el.style.opacity = '0';
+  setTimeout(function() { el.className = 'login-status'; el.style.transition = ''; el.style.opacity = ''; }, 500);
+}
+
+// ── Random kaleidoscope icon from sprite sheet ──
+// sprites.png is 8 columns x 3 rows = 24 icons
+var SPRITE_COLS = 8;
+var SPRITE_ROWS = 3;
+var SPRITE_TOTAL = SPRITE_COLS * SPRITE_ROWS;
+
+function makeIconHTML(size, blue) {
+  var idx = Math.floor(Math.random() * SPRITE_TOTAL);
+  var col = idx % SPRITE_COLS;
+  var row = Math.floor(idx / SPRITE_COLS);
+  var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
+  var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
+  if (blue) {
+    return '<div style="width:' + size + 'px;height:' + size + 'px;overflow:hidden;background:var(--accent);-webkit-mask-image:url(/demo/sprites.png);mask-image:url(/demo/sprites.png);-webkit-mask-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;mask-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;-webkit-mask-position:' + bgPosX + '% ' + bgPosY + '%;mask-position:' + bgPosX + '% ' + bgPosY + '%;"></div>';
+  }
+  return '<div style="width:' + size + 'px;height:' + size + 'px;overflow:hidden;"><div style="width:100%;height:100%;background:url(/demo/sprites.png);background-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;background-position:' + bgPosX + '% ' + bgPosY + '%;"></div></div>';
+}
+
+function initLoginIcon(elementId, size) {
+  var el = document.getElementById(elementId);
+  if (!el) return;
+  el.innerHTML = makeIconHTML(size || 34, false);
+  // Rotate every 3s
+  var rotateIdx = Math.floor(Math.random() * SPRITE_TOTAL);
+  setInterval(function() {
+    rotateIdx = (rotateIdx + 1) % SPRITE_TOTAL;
+    var col = rotateIdx % SPRITE_COLS;
+    var row = Math.floor(rotateIdx / SPRITE_COLS);
+    var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
+    var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
+    el.innerHTML = makeIconHTML(size || 34, false);
+  }, 3000);
+}
+
+// ── WebAuthn: Create Account ──
+async function doCreateAccount(handleInputId, onSuccess) {
+  var username = (document.getElementById(handleInputId).value || '').trim().replace(/^@/, '').toLowerCase().replace(/[^a-z0-9\-]/g, '').slice(0, 30);
+  var btn = document.getElementById('createBtn');
+  btn.disabled = true;
+  setStatus('Preparing...', 'loading');
+
+  try {
+    var optRes = await fetch('/webauthn/register-options', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ agentName: username || undefined }),
+    });
+    var optData = await optRes.json();
+    var challengeId = optData.challengeId;
+    var options = optData.options;
+    if (!options) throw new Error('Server returned no options');
+
+    options.challenge = b64urlToBytes(options.challenge);
+    options.user.id = b64urlToBytes(options.user.id);
+    if (options.excludeCredentials) {
+      options.excludeCredentials = options.excludeCredentials.map(function(c) { return Object.assign({}, c, { id: b64urlToBytes(c.id) }); });
+    }
+
+    setStatus('Waiting for biometric...', 'loading');
+    var credential = await navigator.credentials.create({ publicKey: options });
+
+    var reqBody = {
+      challengeId: challengeId,
+      credential: {
+        id: credential.id,
+        rawId: bytesToB64url(credential.rawId),
+        type: credential.type,
+        response: {
+          attestationObject: bytesToB64url(credential.response.attestationObject),
+          clientDataJSON: bytesToB64url(credential.response.clientDataJSON),
+          transports: credential.response.getTransports ? credential.response.getTransports() : [],
+        },
+      },
+    };
+
+    setStatus('Verifying...', 'loading');
+    var verRes = await fetch('/webauthn/register-verify', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(reqBody),
+    });
+    var result = await verRes.json();
+
+    if (result.success) {
+      if (onSuccess) onSuccess(username || result.agentId, result);
+    } else {
+      setStatus(result.error || 'Registration failed', 'error');
+      btn.disabled = false;
+    }
+  } catch (err) {
+    if (err.name === 'NotAllowedError') {
+      setStatus('Cancelled. Try again when ready.', 'error');
+    } else {
+      setStatus('Error: ' + err.message, 'error');
+    }
+    btn.disabled = false;
+  }
+}
+
+// ── WebAuthn: Sign In ──
+async function doSignIn(onSuccess) {
+  var signInBtn = document.getElementById('signInBtn');
+  var createBtn = document.getElementById('createBtn');
+  if (signInBtn) signInBtn.style.pointerEvents = 'none';
+  if (createBtn) createBtn.disabled = true;
+  setStatus('Preparing...', 'loading');
+
+  try {
+    var optRes = await fetch('/webauthn/auth-options', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: '{}',
+    });
+    var optData = await optRes.json();
+    var challengeId = optData.challengeId;
+    var options = optData.options;
+    if (!options) throw new Error('Server returned no options');
+
+    options.challenge = b64urlToBytes(options.challenge);
+    if (options.allowCredentials) {
+      options.allowCredentials = options.allowCredentials.map(function(c) { return Object.assign({}, c, { id: b64urlToBytes(c.id) }); });
+    }
+
+    setStatus('Waiting for biometric...', 'loading');
+    var assertion = await navigator.credentials.get({ publicKey: options });
+
+    var reqBody = {
+      challengeId: challengeId,
+      credential: {
+        id: assertion.id, rawId: bytesToB64url(assertion.rawId), type: assertion.type,
+        response: {
+          authenticatorData: bytesToB64url(assertion.response.authenticatorData),
+          clientDataJSON: bytesToB64url(assertion.response.clientDataJSON),
+          signature: bytesToB64url(assertion.response.signature),
+          userHandle: assertion.response.userHandle ? bytesToB64url(assertion.response.userHandle) : null,
+        },
+      },
+    };
+
+    setStatus('Verifying...', 'loading');
+    var verRes = await fetch('/webauthn/auth-verify', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(reqBody),
+    });
+    var result = await verRes.json();
+
+    if (result.success) {
+      if (onSuccess) onSuccess(result.agentId, result);
+    } else {
+      setStatus(result.error || 'Authentication failed', 'error');
+      if (signInBtn) signInBtn.style.pointerEvents = 'auto';
+      if (createBtn) createBtn.disabled = false;
+    }
+  } catch (err) {
+    if (err.name === 'NotAllowedError') {
+      setStatus('Cancelled. Try again when ready.', 'error');
+    } else {
+      setStatus('Error: ' + err.message, 'error');
+    }
+    if (signInBtn) signInBtn.style.pointerEvents = 'auto';
+    if (createBtn) createBtn.disabled = false;
+  }
+}

package/src/hosted-mcp/tools.mjs

@@ -0,0 +1,73 @@
+// tools.mjs: MCP tool definitions. Bridge (messaging) + placeholder memory tools.
+
+import { z } from "zod";
+import { pushMessage, getMessages, countPending } from "./inbox.mjs";
+
+/** Register all tools on an McpServer instance. */
+export function registerTools(server, getIdentity) {
+
+  server.registerTool("send_message", {
+    description: "Send a message to any agent. Stored in inbox until read. " +
+      "Target: 'agent', 'agent:session', 'agent:*' (all sessions), '*' (broadcast).",
+    inputSchema: {
+      to: z.string().describe("Recipient"),
+      body: z.string().describe("Message body"),
+      type: z.string().optional().default("chat").describe("chat, system, or task"),
+    },
+  }, async ({ to, body, type }) => {
+    const id = pushMessage({ from: getIdentity().agentId, to, body, type });
+    return { content: [{ type: "text", text: `Sent (id: ${id}) to ${to}` }] };
+  });
+
+  server.registerTool("check_inbox", {
+    description: "Check for pending messages. Returns unread messages and marks them read.",
+    inputSchema: {},
+  }, async () => {
+    const msgs = getMessages(getIdentity().agentId, true);
+    if (!msgs.length) return { content: [{ type: "text", text: "No pending messages." }] };
+    const text = msgs.map((m) => `**${m.from}** [${m.type}] (${m.timestamp}):\n${m.body}`).join("\n\n---\n\n");
+    return { content: [{ type: "text", text: `${msgs.length} message(s):\n\n${text}` }] };
+  });
+
+  server.registerTool("search_memory", {
+    description: "Search semantic memory (Crystal). Placeholder... coming soon.",
+    inputSchema: { query: z.string().describe("Search query") },
+  }, async ({ query }) => {
+    return { content: [{ type: "text", text: `Memory search coming soon. Query: "${query}"` }] };
+  });
+
+  server.registerTool("remember", {
+    description: "Store a fact in memory (Crystal). Placeholder... coming soon.",
+    inputSchema: {
+      text: z.string().describe("What to remember"),
+      tags: z.string().optional().describe("Comma-separated tags"),
+    },
+  }, async ({ text, tags }) => {
+    return { content: [{ type: "text", text: `Memory storage coming soon. Would remember: "${text}"${tags ? ` (tags: ${tags})` : ""}` }] };
+  });
+
+  server.registerTool("status", {
+    description: "Show connection info and pending message count.",
+    inputSchema: {},
+  }, async () => {
+    const { agentId, apiKey } = getIdentity();
+    const masked = apiKey.slice(0, 7) + "..." + apiKey.slice(-4);
+    return { content: [{ type: "text", text: `Agent: ${agentId}\nAPI key: ${masked}\nPending: ${countPending(agentId)}\nServer: wip.computer hosted MCP` }] };
+  });
+
+  server.registerTool("list_agents", {
+    description: "List all known agents on the Bridge. Shows who you can send messages to.",
+    inputSchema: {},
+  }, async () => {
+    // Read API_KEYS from server to find known agents
+    // For now, return hardcoded list plus any OAuth-registered agents
+    const known = [
+      { id: "cc-mini", description: "Claude Code on Mac mini (CLI)" },
+      { id: "lesa", description: "Lesa (OpenClaw agent on Mac mini)" },
+      { id: "parker", description: "Parker (human, any device)" },
+    ];
+    const text = known.map(a => `**${a.id}** ... ${a.description}`).join("\n");
+    return { content: [{ type: "text", text: `Known agents:\n\n${text}\n\nSend with: send_message(to: "agent-id", body: "your message")` }] };
+  });
+
+}

package/templates/hooks/pre-commit

@@ -7,6 +7,11 @@
 
 branch=$(git branch --show-current 2>/dev/null)
 
+# Allow first commit on empty repos (bootstrap)
+if ! git rev-parse HEAD >/dev/null 2>&1; then
+  exit 0
+fi
+
 if [ "$branch" = "main" ] || [ "$branch" = "master" ]; then
   echo ""
   echo "  BLOCKED: Cannot commit on $branch."