atris 3.58.7 → 3.59.0

package/scripts/det/det.js

@@ -84,7 +84,7 @@ function catalogText() {
   );
   const gitRows = GIT_SCRIPTS.map((g) => `  ${g.name.padEnd(15)} ${g.usage}\n    ${g.ask}`);
   return (
-    'deterministic task scripts — run: node det.js <script> <mode> < input\n\n' +
+    'deterministic task scripts: run node det.js <script> <mode> < input\n\n' +
     rows.join('\n\n') +
     '\n\ngit-facing (read the repo, run the script directly; not via det.js):\n\n' +
     gitRows.join('\n\n') +
@@ -121,7 +121,7 @@ async function main() {
   }
   const git = GIT_SCRIPTS.find((g) => g.name === script);
   if (git) {
-    process.stdout.write(`${git.name} reads the repo, not stdin — run it directly:\n  ${git.usage}\n`);
+    process.stdout.write(`${git.name} reads the repo, not stdin; run it directly:\n  ${git.usage}\n`);
     return;
   }
   const entry = CATALOG[script];

package/scripts/det/pr-description.js

@@ -78,7 +78,7 @@ function areaBullets(files) {
     if (counts.A) parts.push(`${counts.A} added`);
     if (counts.M) parts.push(`${counts.M} changed`);
     if (counts.D) parts.push(`${counts.D} removed`);
-    bullets.push(`- **${area}** — ${parts.join(', ')} (+${added}/-${deleted})`);
+    bullets.push(`- **${area}**: ${parts.join(', ')} (+${added}/-${deleted})`);
   }
   return bullets;
 }
@@ -108,7 +108,7 @@ function build(input) {
   const commits = (input && input.commits) || [];
   const files = (input && input.files) || [];
   if (!commits.length && !files.length) {
-    return { error: 'no commits or files vs base — is the branch ahead of it?' };
+    return { error: 'no commits or files vs base: is the branch ahead of it?' };
   }
   const totals = files.reduce(
     (a, f) => ({ added: a.added + (f.added || 0), deleted: a.deleted + (f.deleted || 0) }),

package/scripts/det/test.js

@@ -211,7 +211,7 @@ check(
     { path: 'scripts/det/b.js', status: 'M', added: 2, deleted: 1 },
     { path: 'test/x.test.js', status: 'A', added: 5, deleted: 0 },
   ]),
-  ['- **scripts** — 1 added, 1 changed (+12/-1)', '- **test** — 1 added (+5/-0)']
+  ['- **scripts**: 1 added, 1 changed (+12/-1)', '- **test**: 1 added (+5/-0)']
 );
 // test plan lists touched test files, then a check per non-test area
 check(
@@ -267,7 +267,7 @@ check('det.git.json', JSON.parse(catalogJson()).git['commit-msg'].usage.includes
 // stdin catalog stays separate from the git list (routing must not mix them)
 check('det.git.notRoutable', CATALOG['commit-msg'], undefined);
 
-console.log(`ok — ${passed} checks passed`);
+console.log(`ok: ${passed} checks passed`);
 
 // hunk-filter: keeps only matching hunks, drops non-matching files entirely
 {

package/templates/members/host/MEMBER.md

@@ -0,0 +1,23 @@
+---
+name: host
+role: The Host
+description: Gets to know people through fun questions and makes welcome, useful introductions with two private yeses.
+version: 1.0.0
+skills:
+  - host
+permissions:
+  can-read: true
+  can-plan: true
+  can-execute: true
+  can-approve: false
+  approval-required:
+    - deliver-message
+---
+
+# The Host
+
+A warm, discreet companion for a company, club, or personal network. Notice what each person is into and what might help them now. Make a small, concrete invitation when two people could each benefit.
+
+Ask people directly. Never read their messages or infer private facts from a quiet week. The human host can see answers, and each person is told this when they join. Published cards contain only the five friendly card sections. Never rank, score, evaluate, or hold people accountable.
+
+Read `skills/host/SKILL.md` for the operating loop. The door adapter delivers queued messages. The Host only drafts them.

package/templates/members/host/MISSION.md

@@ -0,0 +1,11 @@
+# Mission
+
+Help people find conversations they would be glad to have and connections they might otherwise miss.
+
+## North Star
+
+Useful conversations that both people freely chose.
+
+## Boundaries
+
+Ask one fun question every few days. Keep a private memory and a small published card per person. Only introduce two people after two private yeses. Never reveal a no, read private messages, score people, or use a manager relationship as an introduction suggestion.

package/templates/members/host/SOUL.md

@@ -0,0 +1,7 @@
+# The Host's soul
+
+Be on each person's side. Noticing a small win or a timely need is the start of a good relationship.
+
+Trust comes first. A thin signal is a reason to ask, not a reason to assume. One thoughtful introduction is better than ten plausible ones. A private no stays private.
+
+Sound like a thoughtful friend: curious, specific, and easy to decline.

package/templates/members/host/context/why.md

@@ -0,0 +1,3 @@
+# Why this exists
+
+Groups are full of people who could help each other, but the useful overlap is often invisible. The Host learns by asking, remembers what people volunteered, and offers introductions that are current, mutual, and easy to refuse.

package/templates/members/host/goals.json

@@ -0,0 +1,5 @@
+{
+  "schema": "atris.member_goals.v1",
+  "member": "host",
+  "goals": []
+}

package/templates/members/host/goals.md

@@ -0,0 +1,3 @@
+# Goals
+
+Get to know the room one question at a time. Keep cards fresh, celebrate people, and make careful introductions.

package/templates/members/host/skills/host/SKILL.md

@@ -0,0 +1,13 @@
+# Host operating loop
+
+Run in a workspace with `atris/`. Use `atris host <subcommand> --json` to read machine output. Treat all private paths as host-only. A door adapter alone delivers queued messages, then calls `atris host sent <message-id>`.
+
+1. Run `atris host due`. For each person, read their private record and published card. Pick one playful question that fills a real gap in the card. Ask with `atris host ask <id> --question "..."`. Do not repeat a question or pressure someone who goes quiet.
+2. Let the door adapter pass replies to `atris host receive --event-id <door-event-id> --from <door-or-id> --text "..."`. Drain them before deciding what to do next. Update a published card with `atris host card <id> --patch <file.json> --expected-revision <revision>`. Keep answers and operational fields out of the card.
+3. Record a known connection with `atris host link <a> <b> --source channel|answer|card --evidence "..."`. Use `card` only for a tentative clue. The code blocks introductions when another source confirms a link.
+Record a link only when two people already know each other. "Wants to meet" belongs on the card, not in links.
+4. Propose at most one introduction per person in 30 days. Name a current, specific benefit for each person and one small activity they could do together. Shared interests alone are not enough. Check existing links and exclude manager and report pairs. Draft the exact text, then call `atris host propose <a> <b> --reason "..." --activity "..." --text "..."`. Two private yeses are required. A no is never disclosed.
+An introduction reason may use only what is already on both published cards, never private answers.
+5. Once a week run `atris host room`. Notice people with no connections recorded, celebrations, introductions in flight, and people to welcome. Use this as a gentle prompt, never a ranking or performance report.
+
+On `leave`, `pause`, or `forget`, respect the person's choice. Never read anyone's messages outside the answers explicitly handed to the Host. Never send directly from this skill.

package/utils/api.js

@@ -97,7 +97,7 @@ function httpRequest(urlString, options) {
     // Socket idle timeout (fires if no data received for this duration)
     if (timeoutMs > 0) {
       req.setTimeout(timeoutMs, () => {
-        req.destroy(new Error(`Request timeout after ${Math.round(timeoutMs / 1000)}s — try --timeout=300`));
+        req.destroy(new Error(`request timeout after ${Math.round(timeoutMs / 1000)}s, try --timeout=300`));
       });
     }
     // Hard deadline — kill request after 2x the timeout regardless of activity

package/utils/auth.js

@@ -156,6 +156,20 @@ function mkPrivateDir(dir) {
   return dir;
 }
 
+// Credential files hold login tokens. If they cannot be limited to the owner,
+// say so once per file instead of leaving them readable in silence.
+const permissionWarned = new Set();
+function restrictToOwner(filePath) {
+  try {
+    fs.chmodSync(filePath, 0o600);
+  } catch (err) {
+    if (permissionWarned.has(filePath)) return;
+    permissionWarned.add(filePath);
+    const reason = err && err.code ? ` (${err.code})` : '';
+    console.error(`atris: could not limit ${filePath} to your user${reason}. other users on this machine may be able to read it.`);
+  }
+}
+
 function getAtrisDir() {
   const homeDir = os.homedir();
   return mkPrivateDir(path.join(homeDir, '.atris'));
@@ -349,7 +363,7 @@ function getProfilesDir() {
 
 function profileNameFromEmail(email) {
   if (!email) return null;
-  // "keshav@atrislabs.com" → "keshav"
+  // "alex@example.com" becomes "alex".
   const name = email.split('@')[0].toLowerCase().replace(/[^a-z0-9_-]/g, '-');
   return name || null; // Guard against emails like "@domain.com"
 }
@@ -357,7 +371,7 @@ function profileNameFromEmail(email) {
 function saveProfile(name, credentials) {
   const profilePath = path.join(getProfilesDir(), `${name}.json`);
   fs.writeFileSync(profilePath, JSON.stringify(credentials, null, 2));
-  try { fs.chmodSync(profilePath, 0o600); } catch {}
+  restrictToOwner(profilePath);
 }
 
 function loadProfile(name) {
@@ -413,11 +427,7 @@ function saveCredentials(token, refreshToken, email, userId, provider, extras =
   };
 
   fs.writeFileSync(credentialsPath, JSON.stringify(credentials, null, 2));
-  try {
-    fs.chmodSync(credentialsPath, 0o600);
-  } catch {
-    // Best effort: permissions may be unsupported on this platform.
-  }
+  restrictToOwner(credentialsPath);
 
   // Auto-save as named profile
   autoSaveProfile(credentials);

package/utils/backend-root.js

@@ -0,0 +1,31 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { resolveWorkspaceRoot } = require('../lib/mission-root');
+const { loadConfig } = require('./config');
+
+const BACKEND_ROOT_HINT = 'set ATRIS_BACKEND_ROOT to the backend workspace.';
+
+function resolveBackendRoot(cwd = process.cwd()) {
+  const workspace = resolveWorkspaceRoot(cwd);
+  // ATRIS_BACKEND_DIR is the former spelling, accepted only here.
+  const environment = process.env.ATRIS_BACKEND_ROOT || process.env.ATRIS_BACKEND_DIR;
+  if (environment) {
+    const candidate = path.resolve(environment);
+    return fs.existsSync(candidate) && fs.statSync(candidate).isDirectory() ? candidate : null;
+  }
+
+  const config = loadConfig(workspace);
+  if (typeof config?.backend_root === 'string' && config.backend_root.trim()) {
+    const candidate = path.resolve(workspace, config.backend_root);
+    return fs.existsSync(candidate) && fs.statSync(candidate).isDirectory() ? candidate : null;
+  }
+
+  const sibling = path.resolve(workspace, '..', 'atrisos-backend');
+  if (fs.existsSync(sibling) && fs.statSync(sibling).isDirectory()) return sibling;
+  const installedSibling = path.resolve(__dirname, '..', '..', 'atrisos-backend');
+  return fs.existsSync(installedSibling) && fs.statSync(installedSibling).isDirectory() ? installedSibling : null;
+}
+
+module.exports = { BACKEND_ROOT_HINT, resolveBackendRoot };

package/utils/config.js

@@ -5,17 +5,18 @@ const path = require('path');
  * Get the path to atris/.config in the current project.
  * @returns {string} Config file path
  */
-function getConfigPath() {
-  const targetDir = path.join(process.cwd(), 'atris');
+function getConfigPath(root = process.cwd()) {
+  const targetDir = path.join(root, 'atris');
   return path.join(targetDir, '.config');
 }
 
 /**
  * Load config from atris/.config, returning empty object if missing/invalid.
+ * backend_root may name a backend folder relative to the workspace root.
  * @returns {Object} Config object
  */
-function loadConfig() {
-  const configPath = getConfigPath();
+function loadConfig(root = process.cwd()) {
+  const configPath = getConfigPath(root);
 
   if (!fs.existsSync(configPath)) {
     return {};

package/utils/owner-identity.js

@@ -0,0 +1,61 @@
+'use strict';
+
+const os = require('os');
+const { spawnSync } = require('child_process');
+const { loadCredentials, profileNameFromEmail } = require('./auth');
+
+let cachedIdentity = null;
+
+function localUsername() {
+  try {
+    return os.userInfo().username;
+  } catch {
+    return process.env.USER || process.env.LOGNAME || null;
+  }
+}
+
+function gitUserName() {
+  const result = spawnSync('git', ['config', 'user.name'], { encoding: 'utf8' });
+  return result.status === 0 ? String(result.stdout || '').trim() : null;
+}
+
+function buildOwnerIdentity(credentials, username) {
+  const inheritedNames = String(process.env.ATRIS_OWNER_NAMES || '').split(',').map((name) => name.trim()).filter(Boolean);
+  const emailName = profileNameFromEmail(credentials?.email);
+  const configured = process.env.ATRIS_OPERATOR;
+  const fullName = credentials?.name || credentials?.full_name || credentials?.user_metadata?.full_name;
+  const loggedIn = Boolean(emailName || credentials?.username || credentials?.user_id || fullName);
+  const gitName = loggedIn ? null : gitUserName();
+  const gitFirstName = gitName ? gitName.split(/\s+/)[0] : null;
+  // Keep an existing local claim alias when it begins with the signed-in account name.
+  const localAlias = username && emailName?.length >= 4 && String(username).toLowerCase().startsWith(emailName)
+    ? username : null;
+  const values = [
+    ...inheritedNames, emailName, configured, credentials?.username, credentials?.user_id, fullName,
+    fullName?.replace(/\s+/g, ''), localAlias, gitName, gitName?.replace(/\s+/g, ''),
+    gitFirstName, loggedIn ? null : username,
+  ]
+    .filter(Boolean)
+    .map((value) => String(value).toLowerCase());
+  const slug = inheritedNames[0] || emailName || configured || gitFirstName || (loggedIn ? null : username);
+  return { slug: slug ? String(slug).toLowerCase() : null, names: values };
+}
+
+function ownerIdentity(credentials, username) {
+  if (arguments.length > 0) return buildOwnerIdentity(credentials, username === undefined ? localUsername() : username);
+  if (!cachedIdentity) cachedIdentity = buildOwnerIdentity(loadCredentials(), localUsername());
+  return cachedIdentity;
+}
+
+function resetOwnerIdentityCache() {
+  cachedIdentity = null;
+}
+
+function isOwner(value) {
+  const candidate = String(value || '').trim().toLowerCase();
+  if (['you', 'me', 'operator', 'human', 'owner'].includes(candidate)) return true;
+  const identity = ownerIdentity();
+  return identity.names.includes(candidate);
+}
+
+module.exports = { ownerIdentity, isOwner, resetOwnerIdentityCache };

package/atris/policies/LESSONS.md

@@ -1,13 +0,0 @@
-# LESSONS
-
-Purpose: Capture short, actionable lessons after REVIEW misses.
-
-## Rules
-- Add only after REVIEW when there was a miss, mismatch, or new constraint.
-- One line per lesson.
-- Format: YYYY-MM-DD | area | issue -> fix
-- Promote repeated lessons (2-3 times) into the relevant policy, then delete.
-
-## Entries
-- 2026-01-04 | meta | JSON edits break easily on quote boundaries → use Read tool to verify after Edit on .json files
-- 2026-01-28 | init | Meta-frameworks must be detected before base frameworks → Next.js check before React check (tests caught this)

package/atris/skills/autopilot/atris-autopilot.md

@@ -1,71 +0,0 @@
----
-description: Start autonomous loop - plan/do/review until done
-arguments:
-  - name: task
-    description: What to build (e.g., "Add dark mode toggle")
-    required: true
-  - name: max-iterations
-    description: Max loops before stopping (default 10)
-    required: false
----
-
-# Atris Autopilot
-
-You are entering **autonomous mode**. You will loop until the task is complete or max iterations reached.
-
-## Setup
-
-First, create the state file:
-
-```bash
-mkdir -p .claude
-cat > .claude/atris-autopilot.state.md << 'EOF'
----
-iteration: 1
-max_iterations: $ARGUMENTS.max-iterations|default:10
-completion_promise: <promise>COMPLETE</promise>
----
-
-$ARGUMENTS.task
-EOF
-```
-
-## Your Task
-
-**$ARGUMENTS.task**
-
-## Process
-
-Each iteration:
-1. **PLAN** — Read MAP.md, identify files, create approach
-2. **DO** — Implement ONE thing, commit changes
-3. **REVIEW** — Check acceptance criteria
-
-## Acceptance Criteria
-
-- Task implemented and working
-- Tests pass (if they exist)
-- Build passes
-- Code follows patterns in MAP.md
-
-## Rules
-
-- ONE thing per iteration (trust the loop)
-- Search MAP.md before grepping
-- Search codebase before assuming not implemented
-- Update TODO.md with progress
-- Log learnings to atris/logs/
-
-## Completion
-
-When ALL acceptance criteria pass, output exactly:
-
-```
-<promise>COMPLETE</promise>
-```
-
-This signals the stop hook to end the loop.
-
-## Start
-
-Read atris/MAP.md now. Then begin iteration 1.