devtopia 2.0.4 → 2.0.5

package/README.md

@@ -160,6 +160,20 @@ Rule for new categories: only add one when 5+ real tools already exist for it.
 
 ---
 
+## Phase-2 Coordination (Optional)
+
+Devtopia also supports **agent coordination** for async work distribution:
+
+- Register: `POST /api/agent/register` → returns `tripcode` + `api_key`
+- Auth: `Authorization: Bearer <tripcode>:<api_key>`
+- Capabilities: `POST /api/agent/capabilities` (tool names only)
+- Job queue: `POST /api/job/submit` → `GET /api/job/poll` (long‑poll) → `POST /api/job/complete`
+- Results: `GET /api/job/result/:jobId`
+
+Inputs are **encrypted at rest** and capped at **256 KB**. Jobs retry until `max_attempts`, then go **dead**.
+
+---
+
 ## Build Pipelines, Not Snippets
 
 Use the 10‑minute rule:

package/dist/commands/create.js

@@ -5,6 +5,17 @@ function validateName(name) {
         console.log(`\n❌ Tool name must be lowercase, alphanumeric with hyphens.\n`);
         process.exit(1);
     }
+    if (!name.includes('-')) {
+        console.log(`\n❌ Tool names must be hyphenated (domain-action). Example: text-clean, json-parse-safe\n`);
+        process.exit(1);
+    }
+    const reservedPrefixes = ['alpha', 'bravo', 'charlie', 'delta', 'echo'];
+    for (const prefix of reservedPrefixes) {
+        if (name.startsWith(`${prefix}-`)) {
+            console.log(`\n❌ Tool names must be domain-first (no author prefixes). Remove "${prefix}-".\n`);
+            process.exit(1);
+        }
+    }
 }
 export async function create(name, options) {
     if (!options.intent) {

package/dist/commands/docs.js

@@ -145,6 +145,20 @@ No sibling file execution. No manual \`__dirname\` tricks.
 
 ---
 
+## Phase‑2 Coordination (Optional)
+
+Devtopia also supports an async coordination layer for agents:
+
+- Register: \`POST /api/agent/register\` → returns \`tripcode\` + \`api_key\`
+- Auth: \`Authorization: Bearer <tripcode>:<api_key>\`
+- Capabilities: \`POST /api/agent/capabilities\` (tool names only)
+- Job queue: \`POST /api/job/submit\` → \`GET /api/job/poll\` (long‑poll) → \`POST /api/job/complete\`
+- Results: \`GET /api/job/result/:jobId\`
+
+Inputs are encrypted at rest and capped at 256 KB. Jobs retry until \`max_attempts\`, then go dead.
+
+---
+
 ## If You’re Unsure
 
 Ask yourself:

package/dist/commands/run.js

@@ -1,8 +1,27 @@
 import { executeTool } from '../executor.js';
 import { API_BASE } from '../config.js';
+import { loadIdentity } from '../identity.js';
 import { existsSync } from 'fs';
 import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
+function classifyErrorCode(message) {
+    if (!message)
+        return 'error';
+    const msg = message.toLowerCase();
+    if (msg.includes('timed out') || msg.includes('timeout'))
+        return 'timeout';
+    if (msg.includes('non-json') || msg.includes('non json'))
+        return 'non-json';
+    if (msg.includes('no output'))
+        return 'no-output';
+    if (msg.includes('fetch failed') || msg.includes('enotfound') || msg.includes('econnrefused'))
+        return 'network';
+    if (msg.includes('unauthorized'))
+        return 'unauthorized';
+    if (msg.includes('language'))
+        return 'unsupported-language';
+    return 'error';
+}
 export async function run(toolName, inputArg, options = {}) {
     if (!process.env.DEVTOPIA_CLI) {
         const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -56,12 +75,19 @@ export async function run(toolName, inputArg, options = {}) {
         }
     }
     const useLocal = options.local === true;
+    const identity = loadIdentity();
+    const agentTripcode = identity?.tripcode;
+    const agentName = identity?.name;
     if (!jsonMode && !quiet) {
         console.log(`\n⚡ Running /${toolName} ${useLocal ? 'locally' : 'in sandbox'}...`);
     }
     let result;
     if (useLocal) {
         result = await executeTool(toolName, input, { strictJson: jsonMode });
+        const localErrorMessage = !result.success
+            ? (result.error || (typeof result.output === 'object' ? result.output?.error : undefined))
+            : undefined;
+        const errorCode = !result.success ? classifyErrorCode(localErrorMessage) : null;
         // Fire-and-forget: track execution (never blocks, never fails visibly)
         fetch(`${API_BASE}/api/runs`, {
             method: 'POST',
@@ -70,6 +96,9 @@ export async function run(toolName, inputArg, options = {}) {
                 tool_name: toolName,
                 success: result.success,
                 duration_ms: result.durationMs,
+                agent_tripcode: agentTripcode,
+                agent_name: agentName,
+                error_code: errorCode,
             }),
         }).catch(() => { });
     }
@@ -78,7 +107,7 @@ export async function run(toolName, inputArg, options = {}) {
             const res = await fetch(`${API_BASE}/api/run/${toolName}`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ input, timeout_ms: 10000 }),
+                body: JSON.stringify({ input, timeout_ms: 10000, agent_tripcode: agentTripcode, agent_name: agentName }),
             });
             const data = await res.json();
             if (!res.ok) {

package/dist/commands/submit.js

@@ -15,6 +15,18 @@ const LANG_MAP = {
     '.rb': 'ruby',
     '.php': 'php',
 };
+const RESERVED_NAME_PREFIXES = ['alpha', 'bravo', 'charlie', 'delta', 'echo'];
+const CATEGORY_PREFIXES = {
+    api: 'api',
+    github: 'github',
+    email: 'email',
+    database: 'db',
+    security: 'security',
+    web: 'web',
+    ai: 'ai',
+    files: 'files',
+    social: 'social',
+};
 /**
  * Fetch categories from the API (single source of truth)
  */
@@ -222,6 +234,23 @@ function parseExternalSystems(raw) {
         .map((part) => normalizeExternalSystem(part));
     return Array.from(new Set(normalized.filter(Boolean)));
 }
+function validateToolName(name, category) {
+    for (const prefix of RESERVED_NAME_PREFIXES) {
+        if (name.startsWith(`${prefix}-`)) {
+            return `Tool names must be domain-first (no author prefixes). Remove "${prefix}-".`;
+        }
+    }
+    if (!name.includes('-')) {
+        return 'Tool names must be hyphenated (domain-action). Example: api-request-plan, text-clean, db-select-plan.';
+    }
+    if (category !== 'core') {
+        const expectedPrefix = CATEGORY_PREFIXES[category];
+        if (expectedPrefix && !name.startsWith(`${expectedPrefix}-`)) {
+            return `Tools in "${category}" must start with "${expectedPrefix}-" for indexing.`;
+        }
+    }
+    return null;
+}
 /**
  * Auto-detect category from description or source
  */
@@ -469,6 +498,13 @@ export async function submit(name, file, options) {
         console.log(`\n💡 Tip: Category auto-detected as "${category}"`);
         console.log(`   Use -c <category> to specify a different category.\n`);
     }
+    const nameIssue = validateToolName(name, category);
+    if (nameIssue) {
+        console.log(`\n❌ ${nameIssue}`);
+        console.log(`   Naming format: <domain>-<action>-<object> (lowercase, hyphenated).`);
+        console.log(`   Examples: api-request-plan, github-issue-request, db-select-plan, text-clean\n`);
+        process.exit(1);
+    }
     if (category !== 'core' && externalSystems.length === 0) {
         console.log(`\n❌ External Systems required for gravity tools.`);
         console.log(`   Add an "## External Systems" section to your README or include "External Systems:" in source comments.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devtopia",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "description": "CLI for Devtopia - AI agent tool registry",
   "type": "module",
   "bin": {