morpheus-cli 0.8.5 → 0.8.7

package/dist/channels/telegram.js

@@ -14,6 +14,7 @@ import { SQLiteChatMessageHistory } from '../runtime/memory/sqlite.js';
 import { SatiRepository } from '../runtime/memory/sati/repository.js';
 import { MCPManager } from '../config/mcp-manager.js';
 import { Construtor } from '../runtime/tools/factory.js';
+import { AuditRepository } from '../runtime/audit/repository.js';
 function escapeHtml(text) {
     return text
         .replace(/&/g, '&')
@@ -310,8 +311,34 @@ export class TelegramAdapter {
                     filePath = await this.downloadToTemp(fileLink);
                     // Transcribe
                     this.display.log(`Transcribing audio for @${user}...`, { source: 'Telephonist' });
+                    const transcribeStart = Date.now();
                     const { text, usage } = await this.telephonist.transcribe(filePath, 'audio/ogg', apiKey);
+                    const transcribeDurationMs = Date.now() - transcribeStart;
                     this.display.log(`Transcription success for @${user}: "${text}"`, { source: 'Telephonist', level: 'success' });
+                    // Audit: record telephonist execution
+                    try {
+                        const sessionId = await this.history.getCurrentSessionOrCreate();
+                        AuditRepository.getInstance().insert({
+                            session_id: sessionId,
+                            event_type: 'telephonist',
+                            agent: 'telephonist',
+                            provider: config.audio.provider,
+                            model: config.audio.model,
+                            input_tokens: usage.input_tokens ?? null,
+                            output_tokens: usage.output_tokens ?? null,
+                            duration_ms: transcribeDurationMs,
+                            status: 'success',
+                            metadata: {
+                                audio_duration_seconds: usage.audio_duration_seconds ?? duration,
+                                text_preview: text.slice(0, 120),
+                                text_length: text.length,
+                                user,
+                            },
+                        });
+                    }
+                    catch {
+                        // Audit failure never breaks the main flow
+                    }
                     // Reply with transcription (optional, maybe just process it?)
                     // The prompt says "reply with the answer".
                     // "Transcribe them... and process the resulting text as a standard user prompt."
@@ -352,6 +379,22 @@ export class TelegramAdapter {
                 catch (error) {
                     const detail = error?.cause?.message || error?.response?.data?.error?.message || error.message;
                     this.display.log(`Audio processing error for @${user}: ${detail}`, { source: 'Telephonist', level: 'error' });
+                    try {
+                        const sessionId = await this.history.getCurrentSessionOrCreate();
+                        AuditRepository.getInstance().insert({
+                            session_id: sessionId,
+                            event_type: 'telephonist',
+                            agent: 'telephonist',
+                            provider: this.config.get().audio.provider,
+                            model: this.config.get().audio.model,
+                            duration_ms: null,
+                            status: 'error',
+                            metadata: { error: detail, user },
+                        });
+                    }
+                    catch {
+                        // Audit failure never breaks the main flow
+                    }
                     await ctx.reply("Sorry, I failed to process your audio message.");
                 }
                 finally {

package/dist/config/manager.js

@@ -151,7 +151,9 @@ export class ConfigManager {
                 base_url: config.sati.base_url || config.llm.base_url,
                 context_window: config.sati.context_window !== undefined ? resolveNumeric('MORPHEUS_SATI_CONTEXT_WINDOW', config.sati.context_window, config.sati.context_window) : llmConfig.context_window,
                 memory_limit: config.sati.memory_limit !== undefined ? resolveNumeric('MORPHEUS_SATI_MEMORY_LIMIT', config.sati.memory_limit, config.sati.memory_limit) : undefined,
-                enabled_archived_sessions: resolveBoolean('MORPHEUS_SATI_ENABLED_ARCHIVED_SESSIONS', config.sati.enabled_archived_sessions, true)
+                enabled_archived_sessions: resolveBoolean('MORPHEUS_SATI_ENABLED_ARCHIVED_SESSIONS', config.sati.enabled_archived_sessions, true),
+                similarity_threshold: resolveNumeric('MORPHEUS_SATI_SIMILARITY_THRESHOLD', config.sati.similarity_threshold, 0.9),
+                evaluation_interval: resolveNumeric('MORPHEUS_SATI_EVALUATION_INTERVAL', config.sati.evaluation_interval, 1),
             };
         }
         // Apply precedence to Apoc config

package/dist/config/schemas.js

@@ -21,6 +21,8 @@ export const LLMConfigSchema = z.object({
 export const SatiConfigSchema = LLMConfigSchema.extend({
     memory_limit: z.number().int().positive().optional(),
     enabled_archived_sessions: z.boolean().default(true),
+    similarity_threshold: z.number().min(0).max(1).default(0.9),
+    evaluation_interval: z.number().int().min(1).default(1),
 });
 export const ApocConfigSchema = LLMConfigSchema.extend({
     working_dir: z.string().optional(),

package/dist/http/api.js

@@ -178,8 +178,30 @@ export function createApiRouter(oracle, chronosWorker) {
                     duration_ms: row.duration_ms ?? null,
                     provider: row.provider ?? null,
                     model: row.model ?? null,
+                    audio_duration_seconds: row.audio_duration_seconds ?? null,
+                    sati_memories_count: null,
                 };
             });
+            // Enrich AI messages with Sati memory recovery counts from audit events
+            const recoveryEvents = AuditRepository.getInstance()
+                .getBySession(id, { limit: 10_000 })
+                .filter(e => e.event_type === 'memory_recovery')
+                .sort((a, b) => a.created_at - b.created_at);
+            for (let ri = 0; ri < recoveryEvents.length; ri++) {
+                const ev = recoveryEvents[ri];
+                const windowEnd = recoveryEvents[ri + 1]?.created_at ?? Infinity;
+                const count = ev.metadata ? (JSON.parse(ev.metadata).memories_count ?? 0) : 0;
+                if (count === 0)
+                    continue;
+                // Assign to the LAST ai message within this recovery's window
+                for (let mi = normalizedMessages.length - 1; mi >= 0; mi--) {
+                    const m = normalizedMessages[mi];
+                    if (m.type === 'ai' && m.created_at > ev.created_at && m.created_at < windowEnd) {
+                        m.sati_memories_count = count;
+                        break;
+                    }
+                }
+            }
             // Convert DESC to ASC for UI rendering
             res.json(normalizedMessages.reverse());
         }
@@ -190,7 +212,16 @@ export function createApiRouter(oracle, chronosWorker) {
             sessionHistory.close();
         }
     });
-    // --- Session Audit ---
+    // --- Audit ---
+    router.get('/audit/global', (_req, res) => {
+        try {
+            const summary = AuditRepository.getInstance().getGlobalSummary();
+            res.json(summary);
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
     router.get('/sessions/:id/audit', (req, res) => {
         try {
             const { id } = req.params;
@@ -238,14 +269,25 @@ export function createApiRouter(oracle, chronosWorker) {
             const originChannel = req.query.origin_channel;
             const sessionId = req.query.session_id;
             const limit = req.query.limit;
+            const pageRaw = req.query.page;
+            const perPageRaw = req.query.per_page;
             const parsedStatus = typeof status === 'string' ? TaskStatusSchema.safeParse(status) : null;
             const parsedAgent = typeof agent === 'string' ? TaskAgentSchema.safeParse(agent) : null;
             const parsedOrigin = typeof originChannel === 'string' ? OriginChannelSchema.safeParse(originChannel) : null;
-            const tasks = taskRepository.listTasks({
+            const filters = {
                 status: parsedStatus?.success ? parsedStatus.data : undefined,
                 agent: parsedAgent?.success ? parsedAgent.data : undefined,
                 origin_channel: parsedOrigin?.success ? parsedOrigin.data : undefined,
                 session_id: typeof sessionId === 'string' ? sessionId : undefined,
+            };
+            if (pageRaw !== undefined || perPageRaw !== undefined) {
+                const page = Math.max(1, parseInt(String(pageRaw ?? '1'), 10) || 1);
+                const per_page = Math.min(100, Math.max(1, parseInt(String(perPageRaw ?? '20'), 10) || 20));
+                const result = taskRepository.listTasksPaginated({ ...filters, page, per_page });
+                return res.json(result);
+            }
+            const tasks = taskRepository.listTasks({
+                ...filters,
                 limit: typeof limit === 'string' ? Math.max(1, Math.min(500, Number(limit) || 200)) : 200,
             });
             res.json(tasks);
@@ -403,7 +445,8 @@ export function createApiRouter(oracle, chronosWorker) {
         provider: z.string().min(1),
         model: z.string().min(1),
         input_price_per_1m: z.number().nonnegative(),
-        output_price_per_1m: z.number().nonnegative()
+        output_price_per_1m: z.number().nonnegative(),
+        audio_cost_per_second: z.number().nonnegative().nullable().optional(),
     });
     router.get('/model-pricing', (req, res) => {
         try {
@@ -435,7 +478,8 @@ export function createApiRouter(oracle, chronosWorker) {
         const { provider, model } = req.params;
         const partial = z.object({
             input_price_per_1m: z.number().nonnegative().optional(),
-            output_price_per_1m: z.number().nonnegative().optional()
+            output_price_per_1m: z.number().nonnegative().optional(),
+            audio_cost_per_second: z.number().nonnegative().nullable().optional(),
         }).safeParse(req.body);
         if (!partial.success) {
             return res.status(400).json({ error: 'Invalid payload', details: partial.error.issues });
@@ -451,7 +495,10 @@ export function createApiRouter(oracle, chronosWorker) {
                 provider,
                 model,
                 input_price_per_1m: partial.data.input_price_per_1m ?? existing.input_price_per_1m,
-                output_price_per_1m: partial.data.output_price_per_1m ?? existing.output_price_per_1m
+                output_price_per_1m: partial.data.output_price_per_1m ?? existing.output_price_per_1m,
+                audio_cost_per_second: 'audio_cost_per_second' in partial.data
+                    ? partial.data.audio_cost_per_second
+                    : existing.audio_cost_per_second,
             });
             h.close();
             res.json({ success: true });
@@ -680,15 +727,25 @@ export function createApiRouter(oracle, chronosWorker) {
     router.get('/sati/memories', async (req, res) => {
         try {
             const repository = SatiRepository.getInstance();
-            const memories = repository.getAllMemories();
-            // Convert dates to ISO strings for JSON serialization
-            const serializedMemories = memories.map(memory => ({
+            const pageRaw = req.query.page;
+            const perPageRaw = req.query.per_page;
+            const category = typeof req.query.category === 'string' && req.query.category !== 'all' ? req.query.category : undefined;
+            const importance = typeof req.query.importance === 'string' && req.query.importance !== 'all' ? req.query.importance : undefined;
+            const search = typeof req.query.search === 'string' && req.query.search.trim() ? req.query.search.trim() : undefined;
+            const serializeMemory = (memory) => ({
                 ...memory,
-                created_at: memory.created_at.toISOString(),
-                updated_at: memory.updated_at.toISOString(),
-                last_accessed_at: memory.last_accessed_at ? memory.last_accessed_at.toISOString() : null
-            }));
-            res.json(serializedMemories);
+                created_at: memory.created_at instanceof Date ? memory.created_at.toISOString() : memory.created_at,
+                updated_at: memory.updated_at instanceof Date ? memory.updated_at.toISOString() : memory.updated_at,
+                last_accessed_at: memory.last_accessed_at instanceof Date ? memory.last_accessed_at.toISOString() : (memory.last_accessed_at ?? null),
+            });
+            if (pageRaw !== undefined || perPageRaw !== undefined) {
+                const page = Math.max(1, parseInt(String(pageRaw ?? '1'), 10) || 1);
+                const per_page = Math.min(100, Math.max(1, parseInt(String(perPageRaw ?? '20'), 10) || 20));
+                const result = repository.getMemoriesPaginated({ category, importance, search, page, per_page });
+                return res.json({ ...result, data: result.data.map(serializeMemory) });
+            }
+            const memories = repository.getAllMemories();
+            res.json(memories.map(serializeMemory));
         }
         catch (error) {
             res.status(500).json({ error: error.message });

package/dist/http/routers/chronos.js

@@ -75,11 +75,22 @@ export function createChronosJobRouter(repo, _worker) {
             res.status(400).json({ error: err.message });
         }
     });
-    // GET /api/chronos — list jobs
+    // GET /api/chronos — list jobs (paginated)
     router.get('/', (req, res) => {
         try {
             const enabled = req.query.enabled;
             const created_by = req.query.created_by;
+            const page = req.query.page ? Math.max(1, parseInt(String(req.query.page), 10) || 1) : undefined;
+            const per_page = req.query.per_page ? Math.min(100, Math.max(1, parseInt(String(req.query.per_page), 10) || 20)) : undefined;
+            if (page !== undefined || per_page !== undefined) {
+                const result = repo.listJobsPaginated({
+                    enabled: enabled === 'true' ? true : enabled === 'false' ? false : undefined,
+                    created_by,
+                    page,
+                    per_page,
+                });
+                return res.json(result);
+            }
             const jobs = repo.listJobs({
                 enabled: enabled === 'true' ? true : enabled === 'false' ? false : undefined,
                 created_by,

package/dist/http/webhooks-router.js

@@ -74,11 +74,19 @@ export function createWebhooksRouter() {
     // ─────────────────────────────────────────────────────────────────────────────
     router.get('/notifications', authMiddleware, (req, res) => {
         try {
-            const { webhookId, unreadOnly } = req.query;
-            const notifications = repo.listNotifications({
+            const { webhookId, unreadOnly, status, page: pageRaw, per_page: perPageRaw } = req.query;
+            const filters = {
                 webhookId: typeof webhookId === 'string' ? webhookId : undefined,
                 unreadOnly: unreadOnly === 'true',
-            });
+                status: typeof status === 'string' && status !== 'all' ? status : undefined,
+            };
+            if (pageRaw !== undefined || perPageRaw !== undefined) {
+                const page = Math.max(1, parseInt(String(pageRaw ?? '1'), 10) || 1);
+                const per_page = Math.min(100, Math.max(1, parseInt(String(perPageRaw ?? '20'), 10) || 20));
+                const result = repo.listNotificationsPaginated({ ...filters, page, per_page });
+                return res.json(result);
+            }
+            const notifications = repo.listNotifications(filters);
             res.json(notifications);
         }
         catch (err) {

package/dist/runtime/ISubagent.js

@@ -0,0 +1 @@
+export {};

package/dist/runtime/apoc.js

@@ -4,7 +4,8 @@ import { ProviderFactory } from "./providers/factory.js";
 import { ProviderError } from "./errors.js";
 import { DisplayManager } from "./display.js";
 import { buildDevKit } from "../devkit/index.js";
-import { SQLiteChatMessageHistory } from "./memory/sqlite.js";
+import { extractRawUsage, persistAgentMessage, buildAgentResult, emitToolAuditEvents } from "./subagent-utils.js";
+import { buildDelegationTool } from "./tools/delegation-utils.js";
 /**
  * Apoc is a subagent of Oracle specialized in devtools operations.
  * It receives delegated tasks from Oracle and executes them using DevKit tools
@@ -17,6 +18,7 @@ import { SQLiteChatMessageHistory } from "./memory/sqlite.js";
 export class Apoc {
     static instance = null;
     static currentSessionId = undefined;
+    static _delegateTool = null;
     agent;
     config;
     display = DisplayManager.getInstance();
@@ -38,10 +40,10 @@ export class Apoc {
     }
     static resetInstance() {
         Apoc.instance = null;
+        Apoc._delegateTool = null;
     }
     async initialize() {
         const apocConfig = this.config.apoc || this.config.llm;
-        // console.log(`Apoc configuration: ${JSON.stringify(apocConfig)}`);
         const devkit = ConfigManager.getInstance().getDevKitConfig();
         const timeout_ms = devkit.timeout_ms || this.config.apoc?.timeout_ms || 30_000;
         const personality = this.config.apoc?.personality || 'pragmatic_dev';
@@ -73,8 +75,9 @@ export class Apoc {
      * @param task Natural language task description
      * @param context Optional additional context from the ongoing conversation
      * @param sessionId Session to attribute token usage to (defaults to 'apoc')
+     * @param taskContext Optional Oracle task context (unused by Apoc directly — kept for ISubagent compatibility)
      */
-    async execute(task, context, sessionId) {
+    async execute(task, context, sessionId, taskContext) {
         if (!this.agent) {
             await this.initialize();
         }
@@ -194,7 +197,7 @@ If refinement is triggered:
 
 2. Execute a second search cycle (Cycle 2).
 3. Repeat selection, navigation, extraction, verification.
-4. Choose the stronger cycle’s evidence.
+4. Choose the stronger cycle's evidence.
 5. Do NOT perform more than 2 cycles.
 
 If Cycle 2 also fails:
@@ -239,10 +242,10 @@ LOW:
 OUTPUT FORMAT (STRICT)
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 
-1. Direct Answer  
-2. Evidence Summary  
-3. Sources (URLs)  
-4. Confidence Level (HIGH / MEDIUM / LOW)  
+1. Direct Answer
+2. Evidence Summary
+3. Sources (URLs)
+4. Confidence Level (HIGH / MEDIUM / LOW)
 5. Completion Status (true / false)
 
 No conversational filler.
@@ -254,6 +257,7 @@ ${context ? `CONTEXT FROM ORACLE:\n${context}` : ""}
         const userMessage = new HumanMessage(task);
         const messages = [systemMessage, userMessage];
         try {
+            const inputCount = messages.length;
             const startMs = Date.now();
             const response = await this.agent.invoke({ messages });
             const durationMs = Date.now() - startMs;
@@ -262,45 +266,51 @@ ${context ? `CONTEXT FROM ORACLE:\n${context}` : ""}
             const content = typeof lastMessage.content === "string"
                 ? lastMessage.content
                 : JSON.stringify(lastMessage.content);
-            // Aggregate token usage across all AI messages in this invocation
-            const rawUsage = lastMessage.usage_metadata
-                ?? lastMessage.response_metadata?.usage
-                ?? lastMessage.response_metadata?.tokenUsage
-                ?? lastMessage.usage;
-            const inputTokens = rawUsage?.input_tokens ?? 0;
-            const outputTokens = rawUsage?.output_tokens ?? 0;
+            const rawUsage = extractRawUsage(lastMessage);
             const stepCount = response.messages.filter((m) => m instanceof AIMessage).length;
             const targetSession = sessionId ?? Apoc.currentSessionId ?? "apoc";
-            const history = new SQLiteChatMessageHistory({ sessionId: targetSession });
-            try {
-                const persisted = new AIMessage(content);
-                if (rawUsage)
-                    persisted.usage_metadata = rawUsage;
-                persisted.provider_metadata = { provider: apocConfig.provider, model: apocConfig.model };
-                persisted.agent_metadata = { agent: 'apoc' };
-                persisted.duration_ms = durationMs;
-                await history.addMessage(persisted);
-            }
-            finally {
-                history.close();
-            }
+            await persistAgentMessage('apoc', content, apocConfig, targetSession, rawUsage, durationMs);
+            emitToolAuditEvents(response.messages.slice(inputCount), targetSession, 'apoc');
             this.display.log("Apoc task completed.", { source: "Apoc" });
-            return {
-                output: content,
-                usage: {
-                    provider: apocConfig.provider,
-                    model: apocConfig.model,
-                    inputTokens,
-                    outputTokens,
-                    durationMs,
-                    stepCount,
-                },
-            };
+            return buildAgentResult(content, apocConfig, rawUsage, durationMs, stepCount);
         }
         catch (err) {
             throw new ProviderError(this.config.apoc?.provider || this.config.llm.provider, err, "Apoc task execution failed");
         }
     }
+    createDelegateTool() {
+        if (!Apoc._delegateTool) {
+            Apoc._delegateTool = buildDelegationTool({
+                name: "apoc_delegate",
+                description: `Delegate a devtools task to Apoc, the specialized development subagent.
+
+This tool enqueues a background task and returns an acknowledgement with task id.
+Do not expect final execution output in the same response.
+Each task must contain a single atomic action with a clear expected result.
+
+Use this tool when the user asks for ANY of the following:
+- File operations: read, write, create, delete files or directories
+- Shell commands: run scripts, execute commands, check output
+- Git: status, log, diff, commit, push, pull, clone, branch
+- Package management: npm install/update/audit, yarn, package.json inspection
+- Process management: list processes, kill processes, check ports
+- Network: ping hosts, curl URLs, DNS lookups
+- System info: environment variables, OS info, disk space, memory
+- Internet search: search DuckDuckGo and verify facts by reading at least 3 sources via browser_navigate before reporting results.
+- Browser automation: navigate websites (JS/SPA), inspect DOM, click elements, fill forms. Apoc will ask for missing user input (e.g. credentials, form fields) before proceeding.
+
+Provide a clear natural language task description. Optionally provide context
+from the current conversation to help Apoc understand the broader goal.`,
+                agentKey: "apoc",
+                agentLabel: "Apoc",
+                auditAgent: "apoc",
+                isSync: () => ConfigManager.getInstance().get().apoc?.execution_mode === 'sync',
+                notifyText: '🧑‍🔬 Apoc is executing your request...',
+                executeSync: (task, context, sessionId) => Apoc.getInstance().execute(task, context, sessionId),
+            });
+        }
+        return Apoc._delegateTool;
+    }
     /** Reload with updated config (called when settings change) */
     async reload() {
         this.config = ConfigManager.getInstance().get();