clawlabor 1.11.1

package/runtime/commands/command-bootstrap.js

@@ -0,0 +1,25 @@
+const {
+  credentialsFilePath,
+  requestJson,
+  resolveApiKey,
+} = require("./shared");
+const { commandRegister } = require("./command-register");
+
+async function commandBootstrap(options, deps) {
+  const apiKey = resolveApiKey(deps.env);
+  if (apiKey) {
+    const me = await requestJson(deps, "GET", "/agents/me");
+    const agent = me.agent || me;
+    return JSON.stringify({
+      action: "credentials_valid",
+      credentials_file: credentialsFilePath(deps.env),
+      agent_id: agent.agent_id || agent.id,
+      name: agent.name,
+      balance: agent.balance,
+      next: "Use clawlabor solve when a task needs an external capability. For webhook-based agents, use clawlabor online to start a receiver and set webhook_url.",
+    });
+  }
+  return commandRegister(options, deps);
+}
+
+module.exports = { commandBootstrap };

package/runtime/commands/command-buy.js

@@ -0,0 +1,75 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandBuy(options, deps) {
+  const listingId = requiredOption(options, "listing");
+  const idempotencyKey = options["idempotency-key"] || deps.makeIdempotencyKey();
+  const requirement = parseRequirement(options);
+
+  const inputEntries = parseInputFlags(options["input"] ? [].concat(options["input"]) : []);
+  const fileEntries = parseFileFlags(options["file"] ? [].concat(options["file"]) : []);
+  const stagedResults = [];
+  for (const e of fileEntries) {
+    if (!isUrlField(e.field)) {
+      throw new Error(`Field "${e.field}" does not look like a URL field.`);
+    }
+    const staged = await stageAndUploadFile(deps, e);
+    stagedResults.push(staged);
+    requirement[staged.field] = staged.signedUrl;
+  }
+  for (const e of inputEntries.filter((x) => !x.isFile)) {
+    requirement[e.field] = e.value;
+  }
+
+  return request(deps, "POST", `/listings/${listingId}/purchase`, {
+    body: {
+      requirement,
+      staged_attachment_ids: stagedResults.map((s) => s.stagedId),
+    },
+    headers: { "X-Idempotency-Key": idempotencyKey },
+  });
+}
+
+module.exports = {
+  commandBuy,
+};

package/runtime/commands/command-cancel.js

@@ -0,0 +1,66 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandCancel(options, deps) {
+  const orderId = options.order;
+  const taskId = options.task;
+  if (orderId && taskId) {
+    throw new Error("Use either --order or --task, not both");
+  }
+  if (!orderId && !taskId) {
+    throw new Error("Missing required --order or --task");
+  }
+  if (orderId && !options.reason) {
+    throw new Error("Missing required --reason");
+  }
+  const body = {};
+  if (options.reason) body.reason = options.reason;
+  if (taskId) {
+    return request(deps, "POST", `/tasks/${taskId}/cancel`, { body });
+  }
+  return request(deps, "POST", `/orders/${orderId}/cancel`, { body });
+}
+
+module.exports = {
+  commandCancel,
+};

package/runtime/commands/command-complete.js

@@ -0,0 +1,69 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandComplete(options, deps) {
+  const orderId = requiredOption(options, "order");
+  const deliveryNote = stringOptionFromFile(options, "delivery-note", "delivery-file");
+  if (deliveryNote === undefined) {
+    throw new Error("Missing required --delivery-note or --delivery-file");
+  }
+  const deliveryAttestation = parseJsonOption(
+    options,
+    "delivery-attestation-json",
+    "delivery-attestation-file",
+    undefined,
+  );
+  const body = { delivery_note: deliveryNote };
+  if (deliveryAttestation !== undefined) body.delivery_attestation = deliveryAttestation;
+  const order = await requestJson(deps, "POST", `/orders/${orderId}/complete`, { body });
+  return JSON.stringify({
+    action: "completed",
+    order_id: order.id || order.order_id || orderId,
+    status: order.status || null,
+    delivery_note: order.delivery_note || deliveryNote,
+  });
+}
+
+module.exports = {
+  commandComplete,
+};

package/runtime/commands/command-confirm.js

@@ -0,0 +1,51 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandConfirm(options, deps) {
+  const orderId = requiredOption(options, "order");
+  return request(deps, "POST", `/orders/${orderId}/confirm`, { body: {} });
+}
+
+module.exports = {
+  commandConfirm,
+};

package/runtime/commands/command-credentials-path.js

@@ -0,0 +1,50 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandCredentialsPath(_options, deps) {
+  return credentialsFilePath(deps.env);
+}
+
+module.exports = {
+  commandCredentialsPath,
+};

package/runtime/commands/command-delete-attachment.js

@@ -0,0 +1,9 @@
+const { attachmentPath, request } = require("./shared");
+
+async function commandDeleteAttachment(options, deps) {
+  return request(deps, "DELETE", attachmentPath(options, true));
+}
+
+module.exports = {
+  commandDeleteAttachment,
+};

package/runtime/commands/command-doctor.js

@@ -0,0 +1,125 @@
+const { spawnSync } = require("node:child_process");
+
+const {
+  apiBase,
+  credentialState,
+  credentialsFileMode,
+  diagnosticStatus,
+  requestJson,
+} = require("./shared");
+
+async function commandDoctor(_options, deps) {
+  const checks = [];
+  const base = apiBase(deps.env);
+  const state = credentialState(deps.env);
+
+  checks.push({
+    name: "node_runtime",
+    status: deps.fetch && globalThis.FormData && globalThis.Blob ? "pass" : "fail",
+    node_version: process.version,
+    has_fetch: Boolean(deps.fetch),
+    has_form_data: Boolean(globalThis.FormData),
+    has_blob: Boolean(globalThis.Blob),
+  });
+
+  checks.push({
+    name: "api_base",
+    status: "pass",
+    value: base,
+    source: "default",
+  });
+
+  const cloudflared = spawnSync("cloudflared", ["--version"], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+  checks.push({
+    name: "cloudflare_tunnel",
+    status: cloudflared.status === 0 ? "pass" : "warn",
+    command: "cloudflared",
+    version: cloudflared.status === 0
+      ? (cloudflared.stdout || cloudflared.stderr || "").trim() || null
+      : null,
+    next: cloudflared.status === 0
+      ? null
+      : "Install cloudflared for default clawlabor online tunneling, or run clawlabor online --webhook-url <https-url>.",
+  });
+
+  const fileMode = state.credentialsFileExists
+    ? credentialsFileMode(state.credentialsPath)
+    : null;
+  let credentialsStatus = state.apiKey ? "pass" : "fail";
+  if (state.apiKey && state.source === "CLAWLABOR_API_KEY" && !state.credentialsFileExists) {
+    credentialsStatus = "warn";
+  }
+  if (state.credentialsFileError) credentialsStatus = "fail";
+  checks.push({
+    name: "credentials",
+    status: credentialsStatus,
+    api_key_source: state.source,
+    credentials_file: state.credentialsPath,
+    credentials_file_exists: state.credentialsFileExists,
+    credentials_file_mode: fileMode === null ? null : `0${fileMode.toString(8)}`,
+    error: state.credentialsFileError,
+  });
+
+  try {
+    const response = await deps.fetch(`${base}/health`, { method: "GET" });
+    checks.push({
+      name: "api_reachable",
+      status: response.ok ? "pass" : "fail",
+      endpoint: "/health",
+      http_status: response.status,
+    });
+  } catch (err) {
+    checks.push({
+      name: "api_reachable",
+      status: "fail",
+      endpoint: "/health",
+      error: err.message,
+    });
+  }
+
+  if (!state.apiKey) {
+    checks.push({
+      name: "auth",
+      status: "fail",
+      error_code: "missing_credentials",
+      next: "Run clawlabor bootstrap --owner-email you@example.com --name AgentName, set CLAWLABOR_API_KEY, or write credentials.json at the reported path.",
+    });
+  } else {
+    try {
+      const me = await requestJson(deps, "GET", "/agents/me");
+      const agent = me.agent || me;
+      checks.push({
+        name: "auth",
+        status: "pass",
+        agent_id: agent.agent_id || agent.id || null,
+        agent_name: agent.name || null,
+        balance: agent.balance ?? null,
+        frozen: agent.frozen ?? null,
+      });
+    } catch (err) {
+      checks.push({
+        name: "auth",
+        status: "fail",
+        error_code: err.errorCode || "auth_check_failed",
+        http_status: err.status || null,
+        error: err.message,
+      });
+    }
+  }
+
+  const status = diagnosticStatus(checks);
+  const failing = checks.find((check) => check.status === "fail");
+  return JSON.stringify({
+    ok: status === "pass",
+    status,
+    api_base: base,
+    credentials_file: state.credentialsPath,
+    checks,
+    next: failing ? failing.next || "Inspect the failing doctor check and retry." : null,
+  });
+}
+
+module.exports = { commandDoctor };

package/runtime/commands/command-inspect.js

@@ -0,0 +1,68 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandInspect(options, deps) {
+  const listingId = requiredOption(options, "listing");
+  const detail = await requestJson(deps, "GET", `/listings/${listingId}`);
+  const listing = detail.listing || detail;
+  const required = Array.isArray(listing?.input_schema?.required)
+    ? listing.input_schema.required
+    : [];
+  const summary = {
+    id: listing?.id,
+    name: listing?.name,
+    price: listing?.price,
+    trust_score: listing?.trust_score,
+    category: listing?.category,
+    has_input_schema: Boolean(listing?.input_schema),
+    has_output_schema: Boolean(listing?.output_schema),
+    required_fields: required,
+    input_schema: listing?.input_schema || null,
+    output_schema: listing?.output_schema || null,
+  };
+  return JSON.stringify(summary);
+}
+
+module.exports = {
+  commandInspect,
+};

package/runtime/commands/command-list-attachments.js

@@ -0,0 +1,50 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandListAttachments(options, deps) {
+  return request(deps, "GET", attachmentPath(options));
+}
+
+module.exports = {
+  commandListAttachments,
+};

package/runtime/commands/command-match.js

@@ -0,0 +1,52 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandMatch(options, deps, flags) {
+  const body = matchBody(options, flags, deps.env);
+  const text = await request(deps, "POST", "/listings/match", { body });
+  return text;
+}
+
+module.exports = {
+  commandMatch,
+};

package/runtime/commands/command-me.js

@@ -0,0 +1,50 @@
+const {
+  apiBase,
+  attachmentPath,
+  compactListingForPlan,
+  credentialState,
+  credentialsFileMode,
+  credentialsFilePath,
+  defaultAgentName,
+  deriveBountyFromGoal,
+  diagnosticStatus,
+  fetchOrderAttachments,
+  fetchOrderCancellationContext,
+  guessMimeType,
+  hasUriSchemaField,
+  isStrictUrlField,
+  isUrlField,
+  loadPolicy,
+  makePublishIdempotencyKey,
+  matchBody,
+  numberOption,
+  parseDeliveryNote,
+  parseFileFlags,
+  parseInputFlags,
+  parseJsonOption,
+  parseRequirement,
+  pickCompatibleListing,
+  positiveNumberOption,
+  readAttachmentOptions,
+  request,
+  requestJson,
+  requestJsonNoAuth,
+  requestMultipart,
+  resolveApiKey,
+  requiredOption,
+  stageAndUploadFile,
+  stringOptionFromFile,
+  summarizeOrderMessages,
+  TERMINAL_ORDER_STATES,
+  uploadAttachment,
+  validateRequirementAgainstSchema,
+  writeCredentialsFile,
+} = require("./shared");
+
+async function commandMe(_options, deps) {
+  return request(deps, "GET", "/agents/me");
+}
+
+module.exports = {
+  commandMe,
+};