atris 3.67.0 → 3.68.1

package/atris/skills/youtube/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: youtube
 description: "YouTube discovery and learning. Get watch permalinks with atris youtube search QUERY (free, local ytsearch/yt-dlp). On 429 use printed rows if any; else the CLI retries once, then cached rows if printed, else STOP. Never run --paid after a 429. --paid only when the user explicitly asked to buy permalinks (5 credits). After a URL is picked, atris youtube notes URL (free, ephemeral unless --save). atris youtube process only to store knowledge (5 credits). Never paste tokens. Never /auth/cli. Mint with atris login --agent from a stored login. Never summarize a video from model memory. Triggers on: youtube search, find videos, paid youtube search, any youtube.com or youtu.be link, youtube, video, watch this, notes on this."
-version: 2.18.23
+version: 2.18.24
 tags:
   - youtube
   - research
@@ -11,6 +11,17 @@ tags:
 
 # YouTube Skill
 
+## Route first: learning vs product
+
+Two rails. Pick one before running anything.
+
+- **Learning rail (free):** `atris youtube notes URL` or `atris youtube teach URL`. Local yt-dlp captions plus a local AI writer, zero credits, no login. Use it when the ask is "learn from", "notes on", "alpha", "rabbit hole", "what does this say". This replaces the old alpha-learn skill.
+- **Product rail (5 credits):** `atris youtube process URL` (bare `atris youtube URL` is the same call). Stores the analysis in the Atris backend, needs a stored login, and is gated on a filled Apply. Use it only when the ask is "process", "store", "add to knowledge", or `--agent ID --store`.
+
+Process is gated. It exits 2 with `write one apply (change + receipt) before process.` until `atris/wiki/briefs/youtube-<id>.apply.md` (relative to the current directory) has real `change:` and `receipt:` lines. `fill this` does not count, and a notes/search keep-sidecar (`change: apply atris/experiments/...`) does not count. The CLI prints the exact file on the next line. It writes a fill-this stub there only when `atris/wiki/` already exists; otherwise create the file yourself. The gate runs before any login or billing, so a refusal never spends credits. Write the Apply from what the person will actually change, not a placeholder.
+
+Notes writer: Gemini Flash through the Antigravity CLI (`agy -p`) when installed, else Haiku (`claude`), then Codex, then Cursor. The Antigravity editor's own `agy` launcher has no `-p` mode and is skipped. `notes by <writer>` names who wrote them. `check: fill this` after notes, teach, or search means the video had no number or named mechanism to build a check from; it is not an error.
+
 ## Feature map
 
 Hard path. Follow in order. Soft memory does not override this.

package/commands/member.js

@@ -5889,6 +5889,26 @@ function fallbackSupervisorAnalysis(receipts) {
 async function runSupervisorWake(name, paths, { execute = false } = {}) {
   const mode = execute ? 'execute' : 'dry_run';
   const root = process.cwd();
+  const llmConfigured = Boolean(process.env.ATRIS_SUPERVISOR_LLM_JSON)
+    || process.env.ATRIS_SUPERVISOR_LLM === '1';
+  if (!execute && !llmConfigured) {
+    return {
+      ok: true,
+      skipped: true,
+      action: 'wake',
+      member: name,
+      mode,
+      decision: 'wait',
+      reason: 'skipped_llm_not_configured',
+      executed: false,
+      needs_user: false,
+      ask: null,
+      next_command: null,
+      receipt_path: null,
+      log_path: null,
+      recommendations_path: supervisorRecommendationsPath(root),
+    };
+  }
   const receipts = listRecentSupervisorReceipts(root);
   const logs = readSupervisorMemberLogs(root);
   let llm = null;
@@ -8139,6 +8159,7 @@ const WAKE_REASON_TEXT = {
   heuristic_objective_proposal_dry_run: 'it previewed an objective proposal using its built-in heuristics, without writing it',
   install_requires_clean_git: 'installing needs a clean git tree first',
   insufficient_world_model_data: 'its world model is too thin to act on yet',
+  skipped_llm_not_configured: 'no model is configured here, so it skipped quietly instead of writing another dry-run receipt',
   llm_json_parse_failed: 'the model reply did not parse, so it stopped rather than act on garbage',
   llm_json_parse_failed_heuristic_used: 'the model reply did not parse, so it fell back to built-in heuristics',
   missing_domain_input: 'it needs a domain file or domain text from you to work on',
@@ -8231,7 +8252,9 @@ function wakeBootLines(name, result) {
       || /^open_experiment_/.test(result.reason || '');
     lines.push('', `  ${s.bold(ballWithHuman ? 'Your move' : 'Next step')}`, `    ${s.cyan(result.next_command)}`);
   }
-  lines.push('', `  ${s.dim(`receipt \u00b7 ${path.relative(process.cwd(), result.receipt_path)}`)}`, '');
+  if (result.receipt_path) {
+    lines.push('', `  ${s.dim(`receipt \u00b7 ${path.relative(process.cwd(), result.receipt_path)}`)}`, '');
+  }
   return lines;
 }
 

package/commands/signup.js

@@ -11,8 +11,10 @@
 // Backend: backend/routers/agent_auth_router.py (POST /auth/agent/signup).
 
 const crypto = require('crypto');
+const fs = require('fs');
 const { apiRequestJson, getApiBaseUrl } = require('../utils/api');
-const { saveCredentials } = require('../utils/auth');
+const { saveCredentials, saveProfile, saveAgentClientCredentials, getCredentialsPath } = require('../utils/auth');
+const agentClient = require('../utils/agent-client');
 const { argsWantHelp, isHelpToken } = require('../lib/noninteractive');
 
 // Mirror the server rule exactly (^[a-z0-9]{3,30}$) so we fail fast and friendly
@@ -45,6 +47,36 @@ function parseHandle(args = []) {
   return (positional || '').trim().toLowerCase();
 }
 
+// Newer servers also hand back an agent client (id + secret) so the agent can
+// renew its own login forever. Store it the way `atris login` does with the
+// secret in ATRIS_CLIENT_SECRET: a private 0600 copy under
+// ~/.atris/agent-clients/, then make the client the active login. The 30-day
+// token just saved stays reachable as a profile named after the handle.
+// Returns { ok: true } or { ok: false, secretFile, clientId }. Never throws,
+// never prints the secret or a token.
+async function adoptSignupClient(client, handle, deps = {}) {
+  const clientId = client && typeof client.client_id === 'string' ? client.client_id.trim() : '';
+  const secret = client && typeof client.client_secret === 'string' ? client.client_secret.trim() : '';
+  if (!clientId.startsWith(agentClient.CLIENT_ID_PREFIX) || !secret) return { ok: false };
+
+  let secretFile = null;
+  try {
+    const target = agentClient.managedSecretPath(clientId);
+    agentClient.writeFileAtomic(target, `${secret}\n`);
+    secretFile = target;
+    const entry = await agentClient.requestClientToken({ clientId, secret, scope: null }, deps);
+
+    // Keep the 30-day login as a profile named after the handle, then switch.
+    const fallback = JSON.parse(fs.readFileSync(getCredentialsPath(), 'utf8'));
+    saveProfile(handle, fallback);
+    saveAgentClientCredentials({ client_id: clientId, client_secret_file: secretFile, scope: null });
+    agentClient.writeTokenCache(clientId, entry);
+    return { ok: true, clientId };
+  } catch (error) {
+    return { ok: false, clientId, secretFile, reason: agentClient.scrub(error && error.message, [secret]) };
+  }
+}
+
 function printSignupUsage() {
   console.error('Usage: atris signup <handle>');
   console.error('  handle: 3–30 characters, lowercase letters and digits only.');
@@ -79,9 +111,20 @@ async function signupCommand(args = []) {
     const { token, email, user_id: userId } = res.data;
     const identity = email || `${handle}@atrismail.com`;
     saveCredentials(token, null, identity, userId || null, 'atrisos');
+    const hasClient = Boolean(res.data.client);
+    const adopted = hasClient ? await adoptSignupClient(res.data.client, handle) : { ok: false };
     console.log(`\n✓ You're in: ${identity}`);
+    if (adopted.ok) console.log('This agent renews its own login; no human needed.');
     console.log('  Inert starter account (0 credits): identity is free, capability is earned.');
     console.log('  Saved to your active profile.');
+    if (adopted.ok) {
+      console.log(`  The 30-day login is kept as a backup. switch to it: atris switch ${handle} --global`);
+    } else if (hasClient && adopted.secretFile) {
+      console.log(`  Could not sign in with the agent client yet${adopted.reason ? ` (${adopted.reason})` : ''}. Using the 30-day login for now.`);
+      console.log(`  Try again: atris login --client-id ${adopted.clientId} --client-secret-file ${adopted.secretFile}`);
+    } else if (hasClient || typeof res.data.client_error === 'string') {
+      console.log('  This login lasts 30 days; after that, renewing it will need a fresh signup login.');
+    }
     console.log('\nNext:');
     console.log('  atris play     # claim a starter mission and earn your first proof-backed rep');
     console.log('  atris xp       # see where you stand on the board');
@@ -107,4 +150,4 @@ async function signupCommand(args = []) {
   return 1;
 }
 
-module.exports = { signupCommand, parseHandle, HANDLE_RE };
+module.exports = { signupCommand, parseHandle, HANDLE_RE, adoptSignupClient };

package/commands/youtube.js

@@ -1021,16 +1021,26 @@ function runYoutubeUnsave(args = [], deps = {}) {
 
 function ensureProcessApply({ cwd, url, now, output } = {}) {
   const id = videoIdFromUrl(url);
-  return applyGate.ensureApply({
+  const rel = id ? applySidecarRel(id) : null;
+  const code = applyGate.ensureApply({
     cwd,
     source: url,
-    rel: id ? applySidecarRel(id) : null,
+    rel,
     now,
     output,
     incompleteMessage: PROCESS_APPLY_MESSAGE,
     required: true,
     human: true,
   });
+  if (code !== 0 && rel) {
+    // Name the file so the gate is passable, including in a workspace with no atris/wiki yet.
+    const print = typeof output === 'function' ? output : (line = '') => console.error(line);
+    const exists = Boolean(cwd) && fs.existsSync(path.join(cwd, rel));
+    print(exists
+      ? `next: fill change: and receipt: in ${rel}, then rerun process`
+      : `next: create ${rel} with change: and receipt: lines, then rerun process`);
+  }
+  return code;
 }
 
 function processExperimentSlug(id) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "atris",
-  "version": "3.67.0",
+  "version": "3.68.1",
   "description": "you say what you want in plain words. atris builds it, checks it, and shows you proof.",
   "main": "bin/atris.js",
   "bin": {

package/scripts/det/ytnotes

@@ -379,8 +379,18 @@ run_haiku() {
 # Gemini Flash through the Antigravity CLI (agy). On an 85-minute transcript it
 # writes notes in about 8s; Haiku takes 30-40s. The old gemini CLI is retired.
 # Low effort is the floor for notes: high effort is slower and not sharper here.
+# The Antigravity editor ships its own `agy` (a VS Code-style launcher script).
+# It has no -p mode: it hands -p and --model to Electron and prints nothing, so
+# it is not a writer. Only the Antigravity CLI is.
+agy_is_cli() {
+  local bin
+  bin=$(command -v agy 2>/dev/null) || return 1
+  ! head -c 4096 "$bin" 2>/dev/null | grep -q 'VSCODE_IPC_HOOK_CLI'
+}
+
 run_gemini() {
   command -v agy >/dev/null 2>&1 || { echo "agy is not installed" >&2; return 127; }
+  agy_is_cli || { echo "agy on PATH is the Antigravity editor launcher, which has no -p mode. Install the Antigravity CLI for Gemini notes." >&2; return 127; }
   run_with_timeout 120 agy -p "$PROMPT" --model "${ATRIS_YTNOTES_GEMINI_MODEL:-${1:-gemini-3.8-flash}}" \
     --effort "${2:-low}" --print-timeout 110s </dev/null
 }
@@ -448,6 +458,7 @@ run_auto() {
   for entry in $(writer_list); do
     IFS='|' read -r cmd model effort label <<< "$entry"
     command -v "$cmd" >/dev/null 2>&1 || continue
+    if [ "$cmd" = agy ] && ! agy_is_cli; then continue; fi
     if [ -n "$tried" ]; then
       echo "$tried did not answer; writing the notes with $label instead." >&2
     fi