aiden-runtime 3.16.2 → 3.18.0

package/dist/core/toolRegistry.js

@@ -67,6 +67,7 @@ const mcpClient_1 = require("./mcpClient");
 const codeInterpreter_1 = require("./codeInterpreter");
 const sandboxRunner_1 = require("./sandboxRunner");
 const responseCache_1 = require("./responseCache");
+const permissionSystem_1 = require("./permissionSystem");
 const youtubeTranscript_1 = require("./youtubeTranscript");
 const knowledgeBase_1 = require("./knowledgeBase");
 const calendarTool_1 = require("./tools/calendarTool");
@@ -182,6 +183,16 @@ const SHELL_ALLOWLIST = [
     // 13. Instant Actions: lock screen (rundll32) and volume one-liners (powershell -c)
     /^rundll32\b/i,
     /^powershell\s+-c\b/i,
+    // 14. Process / app control — close named apps by name (user-directed, not destructive)
+    /^taskkill\s+\/im\s+\S+/i, // taskkill /im chrome.exe
+    /^taskkill\s+\/f\s+\/im\s+\S+/i, // taskkill /f /im chrome.exe
+    /^Stop-Process\s+-Name\b/i, // Stop-Process -Name chrome
+    /^Stop-Process\s+-Id\b/i, // Stop-Process -Id 1234
+    /^kill\b/i, // kill <pid> (Unix/WSL)
+    // 15. Volume / brightness / display controls
+    /^nircmd\b/i,
+    // 16. Windows window management
+    /^(start|explorer)\b/i,
 ];
 function isCommandAllowed(cmd) {
     // Hard-block: denylist and dangerous patterns take priority
@@ -284,6 +295,7 @@ const TOOL_TIMEOUTS = {
     window_focus: 8000,
     app_launch: 10000,
     app_close: 8000,
+    system_volume: 8000,
     watch_folder: 10000,
     watch_folder_list: 5000,
     clarify: 300000, // up to 5 min for human response
@@ -331,9 +343,32 @@ exports.TOOLS = {
         const url = p.url || p.command || '';
         if (!url)
             return { success: false, output: '', error: 'No URL provided' };
+        // ── Permission system check ────────────────────────────────
+        const permBrowser = permissionSystem_1.permissionSystem.checkBrowserDomain(url);
+        if (permBrowser.verdict === 'deny') {
+            console.warn(`[Permissions] open_browser DENIED: ${url}`);
+            return { success: false, output: '', error: permBrowser.reason || 'Blocked by permission system.' };
+        }
+        if (permBrowser.verdict === 'ask') {
+            return { success: false, output: '', error: `PermissionGate: Navigation to this URL requires explicit user approval: ${url}` };
+        }
         const r = await (0, playwrightBridge_1.pwNavigate)(url);
-        if (r.ok)
+        if (r.ok) {
+            // Auto-chain: if we landed on a YouTube search results page, immediately
+            // click the first video — so "play X on YouTube" works in a single step
+            // even when the planner forgets to emit the browser_click follow-up.
+            if (r.url.includes('youtube.com/results')) {
+                console.log('[open_browser] YouTube search detected — auto-clicking first result');
+                const click = await (0, playwrightBridge_1.pwClickFirstResult)();
+                if (click.ok) {
+                    return { success: true, output: `Opened YouTube → playing first result → ${click.url ?? r.url}` };
+                }
+                console.warn(`[open_browser] YouTube auto-click failed: ${click.error}`);
+                // Navigation still succeeded; report it and let a browser_click retry handle it
+                return { success: true, output: `Opened browser: ${r.url} (auto-click failed: ${click.error})` };
+            }
             return { success: true, output: `Opened browser: ${r.url}` };
+        }
         // Playwright failed — fall back to system browser open
         // (Legacy path: activeBrowserPage = null; openBrowser(url))
         try {
@@ -485,14 +520,29 @@ exports.TOOLS = {
         const cmd = p.command || p.cmd || '';
         if (!cmd)
             return { success: false, output: '', error: 'No command' };
-        const shellGate = isCommandAllowed(cmd);
-        if (!shellGate.allowed) {
-            if (shellGate.needsApproval) {
-                console.warn(`[AllowList] shell_exec UNKNOWN — approval required: ${cmd.slice(0, 120)}`);
-                return { success: false, output: '', error: `CommandGate: This command requires explicit user approval before running: ${cmd.slice(0, 80)}` };
+        // ── Permission system check (workspace/permissions.yaml) ──
+        const permCheck = permissionSystem_1.permissionSystem.checkShell(cmd);
+        if (permCheck.verdict === 'deny') {
+            console.warn(`[Permissions] shell_exec DENIED: ${cmd.slice(0, 120)}`);
+            return { success: false, output: '', error: permCheck.reason || 'Blocked by permission system.' };
+        }
+        if (permCheck.verdict === 'ask') {
+            console.warn(`[Permissions] shell_exec ASK — approval required: ${cmd.slice(0, 120)}`);
+            return { success: false, output: '', error: `PermissionGate: This command requires explicit user approval: ${cmd.slice(0, 80)}` };
+        }
+        // verdict === 'allow' skips the hardcoded gate below
+        // verdict === 'defer' falls through to the existing SHELL_ALLOWLIST gate
+        if (permCheck.verdict !== 'allow') {
+            // Existing hardcoded gate (DENIED_COMMANDS + SHELL_DANGEROUS + SHELL_ALLOWLIST)
+            const shellGate = isCommandAllowed(cmd);
+            if (!shellGate.allowed) {
+                if (shellGate.needsApproval) {
+                    console.warn(`[AllowList] shell_exec UNKNOWN — approval required: ${cmd.slice(0, 120)}`);
+                    return { success: false, output: '', error: `CommandGate: This command requires explicit user approval before running: ${cmd.slice(0, 80)}` };
+                }
+                console.warn(`[Security] shell_exec DENIED: ${cmd.slice(0, 120)}`);
+                return { success: false, output: '', error: 'Blocked: this command pattern is not allowed. Dangerous operations require explicit user approval.' };
             }
-            console.warn(`[Security] shell_exec DENIED: ${cmd.slice(0, 120)}`);
-            return { success: false, output: '', error: 'Blocked: this command pattern is not allowed. Dangerous operations require explicit user approval.' };
         }
         // ── N+34: Docker sandbox routing ───────────────────────────
         const _sandboxMode = process.env.AIDEN_SANDBOX_MODE || 'off';
@@ -552,14 +602,25 @@ exports.TOOLS = {
         const script = p.script || p.command || '';
         if (!script)
             return { success: false, output: '', error: 'No script' };
-        const psGate = isCommandAllowed(script);
-        if (!psGate.allowed) {
-            if (psGate.needsApproval) {
-                console.warn(`[AllowList] run_powershell UNKNOWN — approval required: ${script.slice(0, 120)}`);
-                return { success: false, output: '', error: `CommandGate: This PowerShell command requires explicit user approval before running.` };
+        // ── Permission system check ────────────────────────────────
+        const permPs = permissionSystem_1.permissionSystem.checkShell(script);
+        if (permPs.verdict === 'deny') {
+            console.warn(`[Permissions] run_powershell DENIED: ${script.slice(0, 120)}`);
+            return { success: false, output: '', error: permPs.reason || 'Blocked by permission system.' };
+        }
+        if (permPs.verdict === 'ask') {
+            return { success: false, output: '', error: `PermissionGate: This PowerShell command requires explicit user approval: ${script.slice(0, 80)}` };
+        }
+        if (permPs.verdict !== 'allow') {
+            const psGate = isCommandAllowed(script);
+            if (!psGate.allowed) {
+                if (psGate.needsApproval) {
+                    console.warn(`[AllowList] run_powershell UNKNOWN — approval required: ${script.slice(0, 120)}`);
+                    return { success: false, output: '', error: `CommandGate: This PowerShell command requires explicit user approval before running.` };
+                }
+                console.warn(`[Security] run_powershell DENIED: ${script.slice(0, 120)}`);
+                return { success: false, output: '', error: 'Blocked: this command pattern is not allowed. Dangerous operations require explicit user approval.' };
             }
-            console.warn(`[Security] run_powershell DENIED: ${script.slice(0, 120)}`);
-            return { success: false, output: '', error: 'Blocked: this command pattern is not allowed. Dangerous operations require explicit user approval.' };
         }
         const tmpFile = path_1.default.join(process.cwd(), 'workspace', `tmp_${Date.now()}.ps1`);
         fs_1.default.mkdirSync(path_1.default.dirname(tmpFile), { recursive: true });
@@ -664,6 +725,12 @@ exports.TOOLS = {
         const content = p.content || '';
         if (!filePath)
             return { success: false, output: '', error: 'No path' };
+        // ── Permission system check ────────────────────────────────
+        const permWrite = permissionSystem_1.permissionSystem.checkFileWrite(filePath);
+        if (permWrite.verdict === 'deny') {
+            console.warn(`[Permissions] file_write DENIED: ${filePath}`);
+            return { success: false, output: '', error: permWrite.reason || 'Blocked by permission system.' };
+        }
         if (isProtectedFile(filePath)) {
             console.warn(`[Security] file_write BLOCKED (protected): ${filePath}`);
             return { success: false, output: '', error: `Protected file: ${filePath} cannot be modified by agents. Use 'devos config' or edit manually.` };
@@ -702,6 +769,12 @@ exports.TOOLS = {
         let filePath = p.path || p.file || '';
         if (!filePath)
             return { success: false, output: '', error: 'No path' };
+        // ── Permission system check ────────────────────────────────
+        const permRead = permissionSystem_1.permissionSystem.checkFileRead(filePath);
+        if (permRead.verdict === 'deny') {
+            console.warn(`[Permissions] file_read DENIED: ${filePath}`);
+            return { success: false, output: '', error: permRead.reason || 'Blocked by permission system.' };
+        }
         if (isPathDenied(filePath)) {
             console.warn(`[Security] file_read DENIED: ${filePath}`);
             return { success: false, output: '', error: 'Access denied: protected path. Aiden cannot read credentials, SSH keys, or env files.' };
@@ -1526,31 +1599,241 @@ exports.TOOLS = {
         }
     },
     app_launch: async (p) => {
-        const app = p.app || p.path || p.command || '';
-        if (!app)
-            return { success: false, output: '', error: 'No app specified' };
-        if (isShellDangerous(app)) {
-            return { success: false, output: '', error: 'CommandGate: Blocked potentially dangerous app launch.' };
-        }
+        const appName = (p.app_name ?? p.appName ?? p.app ?? p.path ?? p.command ?? p.name ?? p.target ?? '').toString().toLowerCase().trim();
+        if (!appName)
+            return { success: false, output: '', error: 'No app_name provided. Pass app_name e.g. "chrome" or "spotify".' };
+        // Map friendly display names → executable/URI names
+        const exeMap = {
+            'chrome': 'chrome',
+            'google chrome': 'chrome',
+            'firefox': 'firefox',
+            'edge': 'msedge',
+            'microsoft edge': 'msedge',
+            'spotify': 'spotify',
+            'discord': 'discord',
+            'vscode': 'code',
+            'vs code': 'code',
+            'visual studio code': 'code',
+            'notepad': 'notepad',
+            'notepad++': 'notepad++',
+            'word': 'winword',
+            'excel': 'excel',
+            'powerpoint': 'powerpnt',
+            'slack': 'slack',
+            'zoom': 'zoom',
+            'teams': 'teams',
+            'microsoft teams': 'teams',
+            'explorer': 'explorer',
+            'file explorer': 'explorer',
+            'task manager': 'taskmgr',
+            'taskmgr': 'taskmgr',
+            'calculator': 'calc',
+            'calc': 'calc',
+            'paint': 'mspaint',
+            'terminal': 'wt',
+            'windows terminal': 'wt',
+            'cmd': 'cmd',
+            'powershell': 'powershell',
+        };
+        const exe = exeMap[appName] ?? appName;
         try {
             const { execSync } = await Promise.resolve().then(() => __importStar(require('child_process')));
-            const safe = app.replace(/'/g, "''");
-            execSync(`powershell.exe -Command "Start-Process '${safe}'"`, { timeout: 10000 });
-            return { success: true, output: `Launched: "${app}"` };
+            // Use cmd /c start — cmd built-in, avoids Start-Process (blocked by permissions)
+            execSync(`cmd /c start "" "${exe}"`, { timeout: 10000 });
+            return { success: true, output: `Launched: "${appName}"` };
         }
         catch (e) {
             return { success: false, output: '', error: e.message };
         }
     },
     app_close: async (p) => {
-        const app = p.app || p.process || p.command || '';
-        if (!app)
-            return { success: false, output: '', error: 'No app/process name provided' };
+        // Accept app_name (planner default), appName, name, app, process, command
+        const appName = (p.app_name ?? p.appName ?? p.app ?? p.process ?? p.command ?? p.name ?? p.target ?? '').toString().toLowerCase().trim();
+        if (!appName)
+            return { success: false, output: '', error: 'No app name provided. Pass app_name e.g. "chrome" or "spotify".' };
+        const exeMap = {
+            'chrome': 'chrome.exe',
+            'google chrome': 'chrome.exe',
+            'chrome browser': 'chrome.exe',
+            'firefox': 'firefox.exe',
+            'mozilla firefox': 'firefox.exe',
+            'edge': 'msedge.exe',
+            'microsoft edge': 'msedge.exe',
+            'spotify': 'Spotify.exe',
+            'notepad': 'notepad.exe',
+            'notepad++': 'notepad++.exe',
+            'word': 'WINWORD.EXE',
+            'microsoft word': 'WINWORD.EXE',
+            'excel': 'EXCEL.EXE',
+            'microsoft excel': 'EXCEL.EXE',
+            'powerpoint': 'POWERPNT.EXE',
+            'microsoft powerpoint': 'POWERPNT.EXE',
+            'vscode': 'Code.exe',
+            'vs code': 'Code.exe',
+            'visual studio code': 'Code.exe',
+            'discord': 'Discord.exe',
+            'slack': 'slack.exe',
+            'zoom': 'Zoom.exe',
+            'teams': 'Teams.exe',
+            'microsoft teams': 'Teams.exe',
+            'vlc': 'vlc.exe',
+            'steam': 'steam.exe',
+            'explorer': 'explorer.exe',
+            'file explorer': 'explorer.exe',
+            'windows explorer': 'explorer.exe',
+            'cmd': 'cmd.exe',
+            'command prompt': 'cmd.exe',
+            'terminal': 'wt.exe',
+            'windows terminal': 'wt.exe',
+            'paint': 'mspaint.exe',
+            'ms paint': 'mspaint.exe',
+            'calculator': 'Calculator.exe',
+            'task manager': 'Taskmgr.exe',
+            'taskmgr': 'Taskmgr.exe',
+            'whatsapp': 'WhatsApp.exe',
+            'telegram': 'Telegram.exe',
+            'obs': 'obs64.exe',
+            'obs studio': 'obs64.exe',
+            'brave': 'brave.exe',
+            'brave browser': 'brave.exe',
+            'opera': 'opera.exe',
+            'winamp': 'winamp.exe',
+            'itunes': 'iTunes.exe',
+        };
+        const exe = exeMap[appName] ?? (appName.endsWith('.exe') ? appName : appName + '.exe');
+        try {
+            const { execSync } = await Promise.resolve().then(() => __importStar(require('child_process')));
+            execSync(`taskkill /F /IM "${exe}"`, { timeout: 5000 });
+            return { success: true, output: `Closed: "${appName}" (${exe})` };
+        }
+        catch (e) {
+            const msg = (e.message || '').toLowerCase();
+            if (msg.includes('not found') || msg.includes('no tasks')) {
+                return { success: false, output: '', error: `Process not found: ${exe} — is "${appName}" running?` };
+            }
+            return { success: false, output: '', error: e.message };
+        }
+    },
+    system_volume: async (p) => {
+        // ── Natural input detection ──────────────────────────────────
+        // Planner may send { volume: 20 }, { level: 50 }, { mute: true },
+        // { action: "up", amount: 20 }, or a mix — normalise all forms here.
+        let action = (p.action ?? '').toString().toLowerCase().trim();
+        let amount = Number(p.amount ?? p.percent ?? p.by ?? 0);
+        let target = p.level !== undefined ? Number(p.level)
+            : p.set !== undefined ? Number(p.set) : -1;
+        if (!action) {
+            if (p.mute === true)
+                action = 'mute';
+            else if (p.unmute === true)
+                action = 'unmute';
+            else if (typeof p.volume === 'number') {
+                action = (p.direction === 'down') ? 'down' : 'up';
+                amount = p.volume;
+            }
+            else if (typeof p.level === 'number')
+                action = 'set';
+            // { amount: 20 } or { by: 20 } with no other hints → default up
+            else if (amount > 0)
+                action = (p.direction === 'down') ? 'down' : 'up';
+            else
+                action = 'get';
+        }
+        // Sensible default step when caller didn't supply an amount
+        if (!amount && action !== 'get' && action !== 'mute' && action !== 'unmute') {
+            amount = 20;
+        }
         try {
             const { execSync } = await Promise.resolve().then(() => __importStar(require('child_process')));
-            const safe = app.replace(/'/g, "''");
-            execSync(`powershell.exe -Command "Stop-Process -Name '${safe}' -Force -ErrorAction SilentlyContinue"`, { timeout: 8000 });
-            return { success: true, output: `Closed process: "${app}"` };
+            const { writeFileSync, unlinkSync } = await Promise.resolve().then(() => __importStar(require('fs')));
+            const { tmpdir } = await Promise.resolve().then(() => __importStar(require('os')));
+            const { join } = await Promise.resolve().then(() => __importStar(require('path')));
+            // Helper: write + run + clean a temp .ps1 (avoids all quoting nightmares)
+            const runPs = (script, label) => {
+                const f = join(tmpdir(), `_aiden_${label}_${Date.now()}.ps1`);
+                writeFileSync(f, script, 'utf8');
+                try {
+                    return execSync(`powershell.exe -NoProfile -ExecutionPolicy Bypass -File "${f}"`, { timeout: 6000, encoding: 'utf8' }).trim();
+                }
+                finally {
+                    try {
+                        unlinkSync(f);
+                    }
+                    catch { }
+                }
+            };
+            // Shared keybd_event helper — works without a focused window unlike WScript.Shell
+            const keybdScript = (vk) => `
+Add-Type -TypeDefinition @"
+using System; using System.Runtime.InteropServices;
+public class AidenKbd {
+  [DllImport("user32.dll")] public static extern void keybd_event(byte bVk, byte bScan, uint dwFlags, uint dwExtraInfo);
+}
+"@
+[AidenKbd]::keybd_event(${vk}, 0, 0, 0)
+Start-Sleep -Milliseconds 50
+[AidenKbd]::keybd_event(${vk}, 0, 2, 0)
+`;
+            // ── Mute / Unmute — VK_VOLUME_MUTE = 0xAD = 173 ─────────
+            if (action === 'mute' || action === 'unmute') {
+                runPs(keybdScript(173), 'mute');
+                return { success: true, output: action === 'mute' ? 'Muted' : 'Unmuted (toggle)' };
+            }
+            // ── Up / Down — fire VK_VOLUME_UP/DOWN N times ────────────
+            // VK_VOLUME_DOWN = 0xAE = 174, VK_VOLUME_UP = 0xAF = 175
+            if (action === 'up' || action === 'down') {
+                const presses = Math.max(1, Math.round(amount / 2)); // each press ≈ 2%
+                const vk = action === 'up' ? 175 : 174;
+                const script = `
+Add-Type -TypeDefinition @"
+using System; using System.Runtime.InteropServices;
+public class AidenKbd2 {
+  [DllImport("user32.dll")] public static extern void keybd_event(byte bVk, byte bScan, uint dwFlags, uint dwExtraInfo);
+}
+"@
+for ($i = 0; $i -lt ${presses}; $i++) {
+  [AidenKbd2]::keybd_event(${vk}, 0, 0, 0)
+  Start-Sleep -Milliseconds 30
+  [AidenKbd2]::keybd_event(${vk}, 0, 2, 0)
+  Start-Sleep -Milliseconds 20
+}
+`;
+                runPs(script, action);
+                return { success: true, output: `Volume ${action === 'up' ? 'increased' : 'decreased'} by ~${presses * 2}%` };
+            }
+            // ── Get — read waveOut scalar ─────────────────────────────
+            if (action === 'get') {
+                const raw = runPs(`
+Add-Type -TypeDefinition @"
+using System; using System.Runtime.InteropServices;
+public class AidenVolGet {
+  [DllImport("winmm.dll")] public static extern int waveOutGetVolume(IntPtr h, out uint v);
+}
+"@
+$v = [uint32]0
+[AidenVolGet]::waveOutGetVolume([IntPtr]::Zero, [ref]$v) | Out-Null
+[Math]::Round(($v -band 0xFFFF) / 65535.0 * 100)
+`, 'get');
+                const vol = Number(raw);
+                return { success: true, output: `Current volume: ${vol}%`, volume: vol };
+            }
+            // ── Set — write exact waveOut scalar ─────────────────────
+            if (action === 'set' && target >= 0) {
+                const clamped = Math.max(0, Math.min(100, target));
+                const scalar = Math.round(clamped / 100 * 65535);
+                const dword = (scalar << 16) | scalar;
+                runPs(`
+Add-Type -TypeDefinition @"
+using System; using System.Runtime.InteropServices;
+public class AidenVolSet {
+  [DllImport("winmm.dll")] public static extern int waveOutSetVolume(IntPtr h, uint v);
+}
+"@
+[AidenVolSet]::waveOutSetVolume([IntPtr]::Zero, [uint32]${dword}) | Out-Null
+`, 'set');
+                return { success: true, output: `Volume set to ${clamped}%`, volume: clamped };
+            }
+            return { success: false, output: '', error: `Unknown action: "${action}". Use: get, up, down, mute, unmute, set` };
         }
         catch (e) {
             return { success: false, output: '', error: e.message };
@@ -2471,7 +2754,8 @@ exports.TOOL_DESCRIPTIONS = {
     window_list: 'List all open windows on the desktop',
     window_focus: 'Bring a specific window to the foreground by title',
     app_launch: 'Launch an application by name or executable path',
-    app_close: 'Close an application by window title',
+    app_close: 'Close an application by window title or process name',
+    system_volume: 'Get or set Windows speaker volume (get/up/down/mute/unmute/set)',
     watch_folder: 'Watch a folder and react automatically when new files appear',
     watch_folder_list: 'List all currently watched folder paths',
     get_briefing: 'Run the morning briefing: weather, markets, news, and daily summary',
@@ -2565,6 +2849,7 @@ const TOOL_TIERS = {
     window_focus: 3,
     app_launch: 3,
     app_close: 3,
+    system_volume: 2,
     // Voice tools — Tier 2 (subprocess / local model)
     voice_speak: 2,
     voice_transcribe: 2,

package/dist/core/version.js

@@ -2,4 +2,4 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 // AUTO-GENERATED by scripts/inject-version.js — do not edit by hand
-exports.VERSION = '3.16.2';
+exports.VERSION = '3.18.0';

package/dist/providers/router.js

@@ -32,6 +32,7 @@ const nvidia_1 = require("./nvidia");
 const boa_1 = require("./boa");
 const custom_1 = require("./custom");
 const modelDiscovery_1 = require("../core/modelDiscovery");
+const modelRegistry_1 = require("../core/modelRegistry");
 // Per-provider rate-limit windows — tuned to actual reset characteristics.
 // Previous flat 1-hour window was far too conservative for fast-reset APIs.
 const RATE_LIMIT_WINDOWS = {
@@ -424,7 +425,7 @@ function getSmartProvider() {
     // AUTO MODE: round-robin across available APIs
     const next = getNextAvailableAPI();
     if (next) {
-        return { provider: next.provider, model: next.entry.model || 'llama-3.3-70b-versatile', userName, apiName: next.entry.name };
+        return { provider: next.provider, model: next.entry.model || (0, modelRegistry_1.getDefaultModel)(next.entry.provider) || 'llama-3.3-70b-versatile', userName, apiName: next.entry.name };
     }
     // FALLBACK: best discovered Ollama model
     if (config.routing?.fallbackToOllama !== false) {