nemoris 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/.env.example +49 -49
  2. package/LICENSE +21 -21
  3. package/README.md +209 -209
  4. package/SECURITY.md +59 -119
  5. package/bin/nemoris +46 -46
  6. package/config/agents/agent.toml.example +28 -28
  7. package/config/agents/content.toml +23 -0
  8. package/config/agents/default.toml +22 -22
  9. package/config/agents/heartbeat.toml +35 -0
  10. package/config/agents/iris.toml +23 -0
  11. package/config/agents/lab.toml +23 -0
  12. package/config/agents/main.toml +45 -0
  13. package/config/agents/nemo.toml +21 -0
  14. package/config/agents/ops.toml +38 -0
  15. package/config/agents/orchestrator.toml +18 -18
  16. package/config/agents/revenue.toml +23 -0
  17. package/config/agents/testyboo.toml +19 -0
  18. package/config/delivery.toml +73 -73
  19. package/config/embeddings.toml +5 -5
  20. package/config/identity/content-purpose.md +11 -0
  21. package/config/identity/content-soul.md +45 -0
  22. package/config/identity/default-purpose.md +1 -1
  23. package/config/identity/default-soul.md +3 -3
  24. package/config/identity/heartbeat-purpose.md +9 -0
  25. package/config/identity/heartbeat-soul.md +16 -0
  26. package/config/identity/iris-purpose.md +17 -0
  27. package/config/identity/iris-soul.md +68 -0
  28. package/config/identity/lab-purpose.md +10 -0
  29. package/config/identity/lab-soul.md +38 -0
  30. package/config/identity/main-purpose.md +17 -0
  31. package/config/identity/main-soul.md +66 -0
  32. package/config/identity/main-user.md +22 -0
  33. package/config/identity/ops-purpose.md +9 -0
  34. package/config/identity/ops-soul.md +16 -0
  35. package/config/identity/orchestrator-purpose.md +1 -1
  36. package/config/identity/orchestrator-soul.md +1 -1
  37. package/config/identity/revenue-purpose.md +9 -0
  38. package/config/identity/revenue-soul.md +41 -0
  39. package/config/identity/testyboo-purpose.md +13 -0
  40. package/config/identity/testyboo-soul.md +20 -0
  41. package/config/improvement-targets.toml +15 -15
  42. package/config/jobs/heartbeat-check.toml +30 -30
  43. package/config/jobs/memory-rollup.toml +46 -46
  44. package/config/jobs/workspace-health.toml +63 -63
  45. package/config/mcp.toml +16 -16
  46. package/config/output-contracts.toml +17 -17
  47. package/config/peers.toml +32 -32
  48. package/config/peers.toml.example +32 -32
  49. package/config/policies/memory-default.toml +10 -10
  50. package/config/policies/memory-heartbeat.toml +5 -5
  51. package/config/policies/memory-ops.toml +10 -10
  52. package/config/policies/tools-heartbeat-minimal.toml +8 -8
  53. package/config/policies/tools-interactive-safe.toml +8 -8
  54. package/config/policies/tools-ops-bounded.toml +8 -8
  55. package/config/policies/tools-orchestrator.toml +7 -7
  56. package/config/providers/anthropic.toml +15 -15
  57. package/config/providers/ollama.toml +5 -5
  58. package/config/providers/openai-codex.toml +9 -9
  59. package/config/providers/openrouter.toml +5 -5
  60. package/config/router.toml +22 -22
  61. package/config/runtime.toml +114 -114
  62. package/config/skills/self-improvement.toml +15 -15
  63. package/config/skills/telegram-onboarding-spec.md +240 -240
  64. package/config/skills/workspace-monitor.toml +15 -15
  65. package/config/task-router.toml +42 -42
  66. package/install.sh +50 -50
  67. package/package.json +91 -90
  68. package/src/auth/auth-profiles.js +169 -169
  69. package/src/auth/openai-codex-oauth.js +285 -285
  70. package/src/battle.js +449 -449
  71. package/src/cli/help.js +265 -265
  72. package/src/cli/output-filter.js +49 -49
  73. package/src/cli/runtime-control.js +704 -704
  74. package/src/cli-main.js +2763 -2763
  75. package/src/cli.js +78 -78
  76. package/src/config/loader.js +332 -332
  77. package/src/config/schema-validator.js +214 -214
  78. package/src/config/toml-lite.js +8 -8
  79. package/src/daemon/action-handlers.js +71 -71
  80. package/src/daemon/healing-tick.js +87 -87
  81. package/src/daemon/health-probes.js +90 -90
  82. package/src/daemon/notifier.js +57 -57
  83. package/src/daemon/nurse.js +218 -218
  84. package/src/daemon/repair-log.js +106 -106
  85. package/src/daemon/rule-staging.js +90 -90
  86. package/src/daemon/rules.js +29 -29
  87. package/src/daemon/telegram-commands.js +54 -54
  88. package/src/daemon/updater.js +85 -85
  89. package/src/jobs/job-runner.js +78 -78
  90. package/src/mcp/consumer.js +129 -129
  91. package/src/memory/active-recall.js +171 -171
  92. package/src/memory/backend-manager.js +97 -97
  93. package/src/memory/backends/file-backend.js +38 -38
  94. package/src/memory/backends/qmd-backend.js +219 -219
  95. package/src/memory/embedding-guards.js +24 -24
  96. package/src/memory/embedding-index.js +118 -118
  97. package/src/memory/embedding-service.js +179 -179
  98. package/src/memory/file-index.js +177 -177
  99. package/src/memory/memory-signature.js +5 -5
  100. package/src/memory/memory-store.js +648 -648
  101. package/src/memory/retrieval-planner.js +66 -66
  102. package/src/memory/scoring.js +145 -145
  103. package/src/memory/simhash.js +78 -78
  104. package/src/memory/sqlite-active-store.js +824 -824
  105. package/src/memory/write-policy.js +36 -36
  106. package/src/onboarding/aliases.js +33 -33
  107. package/src/onboarding/auth/api-key.js +224 -224
  108. package/src/onboarding/auth/ollama-detect.js +42 -42
  109. package/src/onboarding/clack-prompter.js +77 -77
  110. package/src/onboarding/doctor.js +530 -530
  111. package/src/onboarding/lock.js +42 -42
  112. package/src/onboarding/model-catalog.js +344 -344
  113. package/src/onboarding/phases/auth.js +576 -589
  114. package/src/onboarding/phases/build.js +130 -130
  115. package/src/onboarding/phases/choose.js +82 -82
  116. package/src/onboarding/phases/detect.js +98 -98
  117. package/src/onboarding/phases/hatch.js +216 -216
  118. package/src/onboarding/phases/identity.js +79 -79
  119. package/src/onboarding/phases/ollama.js +345 -345
  120. package/src/onboarding/phases/scaffold.js +99 -99
  121. package/src/onboarding/phases/telegram.js +377 -377
  122. package/src/onboarding/phases/validate.js +204 -204
  123. package/src/onboarding/phases/verify.js +206 -206
  124. package/src/onboarding/platform.js +482 -482
  125. package/src/onboarding/status-bar.js +95 -95
  126. package/src/onboarding/templates.js +794 -794
  127. package/src/onboarding/toml-writer.js +38 -38
  128. package/src/onboarding/tui.js +250 -250
  129. package/src/onboarding/uninstall.js +153 -153
  130. package/src/onboarding/wizard.js +516 -499
  131. package/src/providers/anthropic.js +168 -168
  132. package/src/providers/base.js +247 -247
  133. package/src/providers/circuit-breaker.js +136 -136
  134. package/src/providers/ollama.js +163 -163
  135. package/src/providers/openai-codex.js +149 -149
  136. package/src/providers/openrouter.js +136 -136
  137. package/src/providers/registry.js +36 -36
  138. package/src/providers/router.js +16 -16
  139. package/src/runtime/bootstrap-cache.js +47 -47
  140. package/src/runtime/capabilities-prompt.js +25 -25
  141. package/src/runtime/completion-ping.js +99 -99
  142. package/src/runtime/config-validator.js +121 -121
  143. package/src/runtime/context-ledger.js +360 -360
  144. package/src/runtime/cutover-readiness.js +42 -42
  145. package/src/runtime/daemon.js +729 -729
  146. package/src/runtime/delivery-ack.js +195 -195
  147. package/src/runtime/delivery-adapters/local-file.js +41 -41
  148. package/src/runtime/delivery-adapters/openclaw-cli.js +94 -94
  149. package/src/runtime/delivery-adapters/openclaw-peer.js +98 -98
  150. package/src/runtime/delivery-adapters/shadow.js +13 -13
  151. package/src/runtime/delivery-adapters/standalone-http.js +98 -98
  152. package/src/runtime/delivery-adapters/telegram.js +104 -104
  153. package/src/runtime/delivery-adapters/tui.js +128 -128
  154. package/src/runtime/delivery-manager.js +807 -807
  155. package/src/runtime/delivery-store.js +168 -168
  156. package/src/runtime/dependency-health.js +118 -118
  157. package/src/runtime/envelope.js +114 -114
  158. package/src/runtime/evaluation.js +1089 -1089
  159. package/src/runtime/exec-approvals.js +216 -216
  160. package/src/runtime/executor.js +500 -500
  161. package/src/runtime/failure-ping.js +67 -67
  162. package/src/runtime/flows.js +83 -83
  163. package/src/runtime/guards.js +45 -45
  164. package/src/runtime/handoff.js +51 -51
  165. package/src/runtime/identity-cache.js +28 -28
  166. package/src/runtime/improvement-engine.js +109 -109
  167. package/src/runtime/improvement-harness.js +581 -581
  168. package/src/runtime/input-sanitiser.js +72 -72
  169. package/src/runtime/interaction-contract.js +347 -347
  170. package/src/runtime/lane-readiness.js +226 -226
  171. package/src/runtime/migration.js +323 -323
  172. package/src/runtime/model-resolution.js +78 -78
  173. package/src/runtime/network.js +64 -64
  174. package/src/runtime/notification-store.js +97 -97
  175. package/src/runtime/notifier.js +256 -256
  176. package/src/runtime/orchestrator.js +53 -53
  177. package/src/runtime/orphan-reaper.js +41 -41
  178. package/src/runtime/output-contract-schema.js +139 -139
  179. package/src/runtime/output-contract-validator.js +439 -439
  180. package/src/runtime/peer-readiness.js +69 -69
  181. package/src/runtime/peer-registry.js +133 -133
  182. package/src/runtime/pilot-status.js +108 -108
  183. package/src/runtime/prompt-builder.js +261 -261
  184. package/src/runtime/provider-attempt.js +582 -582
  185. package/src/runtime/report-fallback.js +71 -71
  186. package/src/runtime/result-normalizer.js +183 -183
  187. package/src/runtime/retention.js +74 -74
  188. package/src/runtime/review.js +244 -244
  189. package/src/runtime/route-job.js +15 -15
  190. package/src/runtime/run-store.js +38 -38
  191. package/src/runtime/schedule.js +88 -88
  192. package/src/runtime/scheduler-state.js +434 -434
  193. package/src/runtime/scheduler.js +656 -656
  194. package/src/runtime/session-compactor.js +182 -182
  195. package/src/runtime/session-search.js +155 -155
  196. package/src/runtime/slack-inbound.js +249 -249
  197. package/src/runtime/ssrf.js +102 -102
  198. package/src/runtime/status-aggregator.js +330 -330
  199. package/src/runtime/task-contract.js +140 -140
  200. package/src/runtime/task-packet.js +107 -107
  201. package/src/runtime/task-router.js +140 -140
  202. package/src/runtime/telegram-inbound.js +1565 -1565
  203. package/src/runtime/token-counter.js +134 -134
  204. package/src/runtime/token-estimator.js +59 -59
  205. package/src/runtime/tool-loop.js +200 -200
  206. package/src/runtime/transport-server.js +311 -311
  207. package/src/runtime/tui-server.js +411 -411
  208. package/src/runtime/ulid.js +44 -44
  209. package/src/security/ssrf-check.js +197 -197
  210. package/src/setup.js +369 -369
  211. package/src/shadow/bridge.js +303 -303
  212. package/src/skills/loader.js +84 -84
  213. package/src/tools/catalog.json +49 -49
  214. package/src/tools/cli-delegate.js +44 -44
  215. package/src/tools/mcp-client.js +106 -106
  216. package/src/tools/micro/cancel-task.js +6 -6
  217. package/src/tools/micro/complete-task.js +6 -6
  218. package/src/tools/micro/fail-task.js +6 -6
  219. package/src/tools/micro/http-fetch.js +74 -74
  220. package/src/tools/micro/index.js +36 -36
  221. package/src/tools/micro/lcm-recall.js +60 -60
  222. package/src/tools/micro/list-dir.js +17 -17
  223. package/src/tools/micro/list-skills.js +46 -46
  224. package/src/tools/micro/load-skill.js +38 -38
  225. package/src/tools/micro/memory-search.js +45 -45
  226. package/src/tools/micro/read-file.js +11 -11
  227. package/src/tools/micro/session-search.js +54 -54
  228. package/src/tools/micro/shell-exec.js +43 -43
  229. package/src/tools/micro/trigger-job.js +79 -79
  230. package/src/tools/micro/web-search.js +58 -58
  231. package/src/tools/micro/workspace-paths.js +39 -39
  232. package/src/tools/micro/write-file.js +14 -14
  233. package/src/tools/micro/write-memory.js +41 -41
  234. package/src/tools/registry.js +348 -348
  235. package/src/tools/tool-result-contract.js +36 -36
  236. package/src/tui/chat.js +835 -835
  237. package/src/tui/renderer.js +175 -175
  238. package/src/tui/socket-client.js +217 -217
  239. package/src/utils/canonical-json.js +29 -29
  240. package/src/utils/compaction.js +30 -30
  241. package/src/utils/env-loader.js +5 -5
  242. package/src/utils/errors.js +80 -80
  243. package/src/utils/fs.js +101 -101
  244. package/src/utils/ids.js +5 -5
  245. package/src/utils/model-context-limits.js +30 -30
  246. package/src/utils/token-budget.js +74 -74
  247. package/src/utils/usage-cost.js +25 -25
  248. package/src/utils/usage-metrics.js +14 -14
@@ -1,67 +1,67 @@
1
- /**
2
- * Sends a failure ping to the Telegram operator when a job fails,
3
- * and a user-friendly error message to the originating chat.
4
- * Never throws — all errors are caught and logged internally.
5
- */
6
-
7
- function isRetryableError(err) {
8
- const msg = (err?.message || "").toLowerCase();
9
- const status = err?.status || err?.statusCode || 0;
10
- return status >= 500 || err?.code === "ETIMEDOUT" ||
11
- msg.includes("etimedout") || msg.includes("timeout") || msg.includes("fetch failed");
12
- }
13
-
14
- /**
15
- * @param {object} job
16
- * @param {Error} error
17
- * @param {object} options
18
- * @param {string} options.botToken
19
- * @param {string} options.operatorChatId
20
- * @param {Function} [options.fetchImpl]
21
- */
22
- export async function sendFailurePing(job, error, options = {}) {
23
- const { botToken, operatorChatId, fetchImpl } = options;
24
-
25
- if (!botToken) return;
26
- if (job.source === "completion_ping") return;
27
-
28
- const fetchFn = fetchImpl || globalThis.fetch;
29
-
30
- // Send user-friendly error to the originating chat
31
- if (job.chat_id) {
32
- const isTurnTimeout = error?.message === "turn_timeout";
33
- let userMsg;
34
- if (isTurnTimeout) {
35
- userMsg = "⚠️ Turn timed out after 2 minutes. Try again or /stop to reset.";
36
- } else if (isRetryableError(error)) {
37
- userMsg = "⚠️ Provider hiccup — couldn't complete that. Try again in a moment.";
38
- } else {
39
- const snippet = (error?.message || "unknown error").slice(0, 120);
40
- userMsg = `⚠️ Something went wrong: ${snippet}. Try again or /stop to reset.`;
41
- }
42
- try {
43
- await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
44
- method: "POST",
45
- headers: { "content-type": "application/json" },
46
- body: JSON.stringify({ chat_id: job.chat_id, text: userMsg }),
47
- });
48
- } catch (sendErr) {
49
- console.error(JSON.stringify({ service: "error_delivery", event: "failed", error: sendErr.message, jobId: job.job_id }));
50
- }
51
- }
52
-
53
- // Operator notification (detailed)
54
- if (operatorChatId) {
55
- const errorSnippet = (error?.message || String(error)).slice(0, 120);
56
- const text = `⚠️ Job failed\nAgent: ${job.agent_id}\nJob: ${job.job_id}\nError: ${errorSnippet}\nSource: ${job.source}`;
57
- try {
58
- await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
59
- method: "POST",
60
- headers: { "content-type": "application/json" },
61
- body: JSON.stringify({ chat_id: operatorChatId, text }),
62
- });
63
- } catch (sendErr) {
64
- console.error(JSON.stringify({ service: "failure_ping", error: sendErr.message, jobId: job.job_id }));
65
- }
66
- }
67
- }
1
+ /**
2
+ * Sends a failure ping to the Telegram operator when a job fails,
3
+ * and a user-friendly error message to the originating chat.
4
+ * Never throws — all errors are caught and logged internally.
5
+ */
6
+
7
+ function isRetryableError(err) {
8
+ const msg = (err?.message || "").toLowerCase();
9
+ const status = err?.status || err?.statusCode || 0;
10
+ return status >= 500 || err?.code === "ETIMEDOUT" ||
11
+ msg.includes("etimedout") || msg.includes("timeout") || msg.includes("fetch failed");
12
+ }
13
+
14
+ /**
15
+ * @param {object} job
16
+ * @param {Error} error
17
+ * @param {object} options
18
+ * @param {string} options.botToken
19
+ * @param {string} options.operatorChatId
20
+ * @param {Function} [options.fetchImpl]
21
+ */
22
+ export async function sendFailurePing(job, error, options = {}) {
23
+ const { botToken, operatorChatId, fetchImpl } = options;
24
+
25
+ if (!botToken) return;
26
+ if (job.source === "completion_ping") return;
27
+
28
+ const fetchFn = fetchImpl || globalThis.fetch;
29
+
30
+ // Send user-friendly error to the originating chat
31
+ if (job.chat_id) {
32
+ const isTurnTimeout = error?.message === "turn_timeout";
33
+ let userMsg;
34
+ if (isTurnTimeout) {
35
+ userMsg = "⚠️ Turn timed out after 2 minutes. Try again or /stop to reset.";
36
+ } else if (isRetryableError(error)) {
37
+ userMsg = "⚠️ Provider hiccup — couldn't complete that. Try again in a moment.";
38
+ } else {
39
+ const snippet = (error?.message || "unknown error").slice(0, 120);
40
+ userMsg = `⚠️ Something went wrong: ${snippet}. Try again or /stop to reset.`;
41
+ }
42
+ try {
43
+ await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
44
+ method: "POST",
45
+ headers: { "content-type": "application/json" },
46
+ body: JSON.stringify({ chat_id: job.chat_id, text: userMsg }),
47
+ });
48
+ } catch (sendErr) {
49
+ console.error(JSON.stringify({ service: "error_delivery", event: "failed", error: sendErr.message, jobId: job.job_id }));
50
+ }
51
+ }
52
+
53
+ // Operator notification (detailed)
54
+ if (operatorChatId) {
55
+ const errorSnippet = (error?.message || String(error)).slice(0, 120);
56
+ const text = `⚠️ Job failed\nAgent: ${job.agent_id}\nJob: ${job.job_id}\nError: ${errorSnippet}\nSource: ${job.source}`;
57
+ try {
58
+ await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
59
+ method: "POST",
60
+ headers: { "content-type": "application/json" },
61
+ body: JSON.stringify({ chat_id: operatorChatId, text }),
62
+ });
63
+ } catch (sendErr) {
64
+ console.error(JSON.stringify({ service: "failure_ping", error: sendErr.message, jobId: job.job_id }));
65
+ }
66
+ }
67
+ }
@@ -1,83 +1,83 @@
1
- /**
2
- * Cross-Pillar Flows — coordinates seams between pillars.
3
- */
4
-
5
- export async function flowTaskEscalationToOperator(task, deliveryAck, telegramSend, { chatId, retryDelays } = {}) {
6
- const chain = JSON.parse(task.escalation_chain);
7
- const target = chain[task.escalation_index] || "operator";
8
- if (target !== "operator") {
9
- throw new Error(`Flow 1 only handles operator escalation, got target: ${target}`);
10
- }
11
- const body = [
12
- `${task.assigned_agent} timed out on: ${task.objective}`,
13
- task.error_slot ? `Error: ${task.error_slot}` : null,
14
- `Result so far: ${task.result_slot || "none"}`,
15
- "Want me to intervene?",
16
- ].filter(Boolean).join("\n");
17
- return deliveryAck.sendWithGuarantee({
18
- sourceAgent: task.owner_agent,
19
- criticality: "decision_required",
20
- payload: { text: body },
21
- chatId,
22
- correlationId: task.envelope_id,
23
- sendFn: (payload) => telegramSend({ text: payload.text, chatId }),
24
- retryDelays,
25
- });
26
- }
27
-
28
- export async function flowTaskCompletionToMemory(task, writeBuffer) {
29
- const summary = task.result_slot
30
- ? (typeof task.result_slot === "string" ? task.result_slot : JSON.stringify(task.result_slot))
31
- : "no result";
32
- const content = `Task "${task.objective}" completed by ${task.assigned_agent}: ${summary.slice(0, 500)}`;
33
- writeBuffer.add({
34
- content,
35
- confidence: 0.85,
36
- sourceAgent: task.assigned_agent,
37
- category: "task_result",
38
- type: "fact",
39
- });
40
- }
41
-
42
- export async function flowDecisionResponseToTask(envelope, operatorMessage, taskContract, { resolveAgent, callerAgent } = {}) {
43
- const task = taskContract.db.prepare(
44
- "SELECT * FROM tasks WHERE envelope_id = ?"
45
- ).get(envelope.correlation_id);
46
- if (!task) return { action: "unstructured", reason: "no linked task" };
47
-
48
- const msg = operatorMessage.toLowerCase();
49
-
50
- if (msg.includes("retry")) {
51
- const newTask = taskContract.createTask({
52
- ownerAgent: task.owner_agent,
53
- assignedAgent: task.assigned_agent,
54
- objective: task.objective,
55
- deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
56
- });
57
- return { action: "retry", newTaskId: newTask.task_id, originalTaskId: task.task_id };
58
- }
59
-
60
- if (msg.includes("cancel")) {
61
- try {
62
- taskContract.transition(task.task_id, "cancelled", task.owner_agent);
63
- } catch { /* may not be in cancellable state */ }
64
- return { action: "cancel", taskId: task.task_id };
65
- }
66
-
67
- if (msg.includes("reassign")) {
68
- const match = operatorMessage.match(/reassign(?:\s+to)?\s+(\w+)/i);
69
- const targetName = match?.[1];
70
- if (targetName && resolveAgent && resolveAgent(targetName)) {
71
- const newTask = taskContract.createTask({
72
- ownerAgent: task.owner_agent,
73
- assignedAgent: targetName,
74
- objective: task.objective,
75
- deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
76
- });
77
- return { action: "reassign", newTaskId: newTask.task_id, assignedAgent: targetName };
78
- }
79
- return { action: "unstructured", reason: `Could not resolve agent: ${targetName}` };
80
- }
81
-
82
- return { action: "unstructured", message: operatorMessage };
83
- }
1
+ /**
2
+ * Cross-Pillar Flows — coordinates seams between pillars.
3
+ */
4
+
5
+ export async function flowTaskEscalationToOperator(task, deliveryAck, telegramSend, { chatId, retryDelays } = {}) {
6
+ const chain = JSON.parse(task.escalation_chain);
7
+ const target = chain[task.escalation_index] || "operator";
8
+ if (target !== "operator") {
9
+ throw new Error(`Flow 1 only handles operator escalation, got target: ${target}`);
10
+ }
11
+ const body = [
12
+ `${task.assigned_agent} timed out on: ${task.objective}`,
13
+ task.error_slot ? `Error: ${task.error_slot}` : null,
14
+ `Result so far: ${task.result_slot || "none"}`,
15
+ "Want me to intervene?",
16
+ ].filter(Boolean).join("\n");
17
+ return deliveryAck.sendWithGuarantee({
18
+ sourceAgent: task.owner_agent,
19
+ criticality: "decision_required",
20
+ payload: { text: body },
21
+ chatId,
22
+ correlationId: task.envelope_id,
23
+ sendFn: (payload) => telegramSend({ text: payload.text, chatId }),
24
+ retryDelays,
25
+ });
26
+ }
27
+
28
+ export async function flowTaskCompletionToMemory(task, writeBuffer) {
29
+ const summary = task.result_slot
30
+ ? (typeof task.result_slot === "string" ? task.result_slot : JSON.stringify(task.result_slot))
31
+ : "no result";
32
+ const content = `Task "${task.objective}" completed by ${task.assigned_agent}: ${summary.slice(0, 500)}`;
33
+ writeBuffer.add({
34
+ content,
35
+ confidence: 0.85,
36
+ sourceAgent: task.assigned_agent,
37
+ category: "task_result",
38
+ type: "fact",
39
+ });
40
+ }
41
+
42
+ export async function flowDecisionResponseToTask(envelope, operatorMessage, taskContract, { resolveAgent, callerAgent } = {}) {
43
+ const task = taskContract.db.prepare(
44
+ "SELECT * FROM tasks WHERE envelope_id = ?"
45
+ ).get(envelope.correlation_id);
46
+ if (!task) return { action: "unstructured", reason: "no linked task" };
47
+
48
+ const msg = operatorMessage.toLowerCase();
49
+
50
+ if (msg.includes("retry")) {
51
+ const newTask = taskContract.createTask({
52
+ ownerAgent: task.owner_agent,
53
+ assignedAgent: task.assigned_agent,
54
+ objective: task.objective,
55
+ deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
56
+ });
57
+ return { action: "retry", newTaskId: newTask.task_id, originalTaskId: task.task_id };
58
+ }
59
+
60
+ if (msg.includes("cancel")) {
61
+ try {
62
+ taskContract.transition(task.task_id, "cancelled", task.owner_agent);
63
+ } catch { /* may not be in cancellable state */ }
64
+ return { action: "cancel", taskId: task.task_id };
65
+ }
66
+
67
+ if (msg.includes("reassign")) {
68
+ const match = operatorMessage.match(/reassign(?:\s+to)?\s+(\w+)/i);
69
+ const targetName = match?.[1];
70
+ if (targetName && resolveAgent && resolveAgent(targetName)) {
71
+ const newTask = taskContract.createTask({
72
+ ownerAgent: task.owner_agent,
73
+ assignedAgent: targetName,
74
+ objective: task.objective,
75
+ deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
76
+ });
77
+ return { action: "reassign", newTaskId: newTask.task_id, assignedAgent: targetName };
78
+ }
79
+ return { action: "unstructured", reason: `Could not resolve agent: ${targetName}` };
80
+ }
81
+
82
+ return { action: "unstructured", message: operatorMessage };
83
+ }
@@ -1,45 +1,45 @@
1
- const DEFAULT_PROVIDER_MODE = {
2
- allowProviderExecution: false,
3
- allowRemoteProviders: false,
4
- allowedJobIds: ["heartbeat-check", "workspace-health", "memory-rollup"],
5
- allowedLanes: ["local_cheap", "local_report", "report_fallback_lowcost"],
6
- requireHealthyProvider: true
7
- };
8
-
9
- function readFlag(name) {
10
- const raw = process.env[name];
11
- return raw === "1" || raw === "true";
12
- }
13
-
14
- export function getProviderModePolicy() {
15
- return {
16
- ...DEFAULT_PROVIDER_MODE,
17
- allowProviderExecution: readFlag("NEMORIS_ALLOW_PROVIDER_MODE"),
18
- allowRemoteProviders: readFlag("NEMORIS_ALLOW_REMOTE_PROVIDER_MODE")
19
- };
20
- }
21
-
22
- export function assertProviderExecutionAllowed({ jobId, modelLane, providerId, interactive = false }) {
23
- const policy = getProviderModePolicy();
24
-
25
- if (!policy.allowProviderExecution) {
26
- throw new Error("Provider mode disabled. Set NEMORIS_ALLOW_PROVIDER_MODE=1 to enable guarded shadow execution.");
27
- }
28
-
29
- // Interactive jobs (Telegram, agent dispatch) bypass job-id and lane allowlists
30
- if (!interactive) {
31
- if (!policy.allowedJobIds.includes(jobId)) {
32
- throw new Error(`Provider mode not allowed for job ${jobId}.`);
33
- }
34
-
35
- if (!policy.allowedLanes.includes(modelLane)) {
36
- throw new Error(`Provider mode not allowed for lane ${modelLane}.`);
37
- }
38
- }
39
-
40
- if (providerId !== "ollama" && !policy.allowRemoteProviders) {
41
- throw new Error(`Remote provider execution blocked for ${providerId}. Set NEMORIS_ALLOW_REMOTE_PROVIDER_MODE=1 to override.`);
42
- }
43
-
44
- return policy;
45
- }
1
+ const DEFAULT_PROVIDER_MODE = {
2
+ allowProviderExecution: false,
3
+ allowRemoteProviders: false,
4
+ allowedJobIds: ["heartbeat-check", "workspace-health", "memory-rollup"],
5
+ allowedLanes: ["local_cheap", "local_report", "report_fallback_lowcost"],
6
+ requireHealthyProvider: true
7
+ };
8
+
9
+ function readFlag(name) {
10
+ const raw = process.env[name];
11
+ return raw === "1" || raw === "true";
12
+ }
13
+
14
+ export function getProviderModePolicy() {
15
+ return {
16
+ ...DEFAULT_PROVIDER_MODE,
17
+ allowProviderExecution: readFlag("NEMORIS_ALLOW_PROVIDER_MODE"),
18
+ allowRemoteProviders: readFlag("NEMORIS_ALLOW_REMOTE_PROVIDER_MODE")
19
+ };
20
+ }
21
+
22
+ export function assertProviderExecutionAllowed({ jobId, modelLane, providerId, interactive = false }) {
23
+ const policy = getProviderModePolicy();
24
+
25
+ if (!policy.allowProviderExecution) {
26
+ throw new Error("Provider mode disabled. Set NEMORIS_ALLOW_PROVIDER_MODE=1 to enable guarded shadow execution.");
27
+ }
28
+
29
+ // Interactive jobs (Telegram, agent dispatch) bypass job-id and lane allowlists
30
+ if (!interactive) {
31
+ if (!policy.allowedJobIds.includes(jobId)) {
32
+ throw new Error(`Provider mode not allowed for job ${jobId}.`);
33
+ }
34
+
35
+ if (!policy.allowedLanes.includes(modelLane)) {
36
+ throw new Error(`Provider mode not allowed for lane ${modelLane}.`);
37
+ }
38
+ }
39
+
40
+ if (providerId !== "ollama" && !policy.allowRemoteProviders) {
41
+ throw new Error(`Remote provider execution blocked for ${providerId}. Set NEMORIS_ALLOW_REMOTE_PROVIDER_MODE=1 to override.`);
42
+ }
43
+
44
+ return policy;
45
+ }
@@ -1,51 +1,51 @@
1
- const VALID_STATUSES = ["succeeded", "failed", "halted", "escalated"];
2
- const REQUIRED_HANDOFF_FIELDS = ["fromAgent", "toAgent", "jobId", "routingReason", "parentRunId"];
3
- const REQUIRED_RESULT_FIELDS = ["status", "agentId", "runId", "parentRunId"];
4
-
5
- export function buildHandoffPacket({ fromAgent, toAgent, jobId, skill, routingReason, parentRunId, budget = {}, artifacts = [] }) {
6
- const packet = {
7
- handoff: Object.freeze({
8
- fromAgent,
9
- toAgent,
10
- jobId,
11
- skill: skill || null,
12
- routingReason,
13
- parentRunId,
14
- budget: Object.freeze({ ...budget }),
15
- artifacts: Object.freeze([...artifacts]),
16
- }),
17
- };
18
- Object.freeze(packet);
19
- return packet;
20
- }
21
-
22
- export function buildResultPacket({ status, agentId, runId, parentRunId, result = {}, toolsUsed = [], tokenUsage = {}, evalScore = null, concerns = [] }) {
23
- const packet = Object.freeze({
24
- status,
25
- agentId,
26
- runId,
27
- parentRunId,
28
- result: Object.freeze({ ...result }),
29
- toolsUsed: Object.freeze([...toolsUsed]),
30
- tokenUsage: Object.freeze({ ...tokenUsage }),
31
- evalScore,
32
- concerns: Object.freeze([...concerns]),
33
- });
34
- return packet;
35
- }
36
-
37
- export function validateHandoffPacket(packet) {
38
- if (!packet?.handoff) throw new Error("Handoff packet missing 'handoff' field");
39
- for (const field of REQUIRED_HANDOFF_FIELDS) {
40
- if (!packet.handoff[field]) throw new Error(`Handoff packet missing required field: ${field}`);
41
- }
42
- }
43
-
44
- export function validateResultPacket(packet) {
45
- for (const field of REQUIRED_RESULT_FIELDS) {
46
- if (!packet[field]) throw new Error(`Result packet missing required field: ${field}`);
47
- }
48
- if (!VALID_STATUSES.includes(packet.status)) {
49
- throw new Error(`Invalid result status: ${packet.status}. Must be one of: ${VALID_STATUSES.join(", ")}`);
50
- }
51
- }
1
+ const VALID_STATUSES = ["succeeded", "failed", "halted", "escalated"];
2
+ const REQUIRED_HANDOFF_FIELDS = ["fromAgent", "toAgent", "jobId", "routingReason", "parentRunId"];
3
+ const REQUIRED_RESULT_FIELDS = ["status", "agentId", "runId", "parentRunId"];
4
+
5
+ export function buildHandoffPacket({ fromAgent, toAgent, jobId, skill, routingReason, parentRunId, budget = {}, artifacts = [] }) {
6
+ const packet = {
7
+ handoff: Object.freeze({
8
+ fromAgent,
9
+ toAgent,
10
+ jobId,
11
+ skill: skill || null,
12
+ routingReason,
13
+ parentRunId,
14
+ budget: Object.freeze({ ...budget }),
15
+ artifacts: Object.freeze([...artifacts]),
16
+ }),
17
+ };
18
+ Object.freeze(packet);
19
+ return packet;
20
+ }
21
+
22
+ export function buildResultPacket({ status, agentId, runId, parentRunId, result = {}, toolsUsed = [], tokenUsage = {}, evalScore = null, concerns = [] }) {
23
+ const packet = Object.freeze({
24
+ status,
25
+ agentId,
26
+ runId,
27
+ parentRunId,
28
+ result: Object.freeze({ ...result }),
29
+ toolsUsed: Object.freeze([...toolsUsed]),
30
+ tokenUsage: Object.freeze({ ...tokenUsage }),
31
+ evalScore,
32
+ concerns: Object.freeze([...concerns]),
33
+ });
34
+ return packet;
35
+ }
36
+
37
+ export function validateHandoffPacket(packet) {
38
+ if (!packet?.handoff) throw new Error("Handoff packet missing 'handoff' field");
39
+ for (const field of REQUIRED_HANDOFF_FIELDS) {
40
+ if (!packet.handoff[field]) throw new Error(`Handoff packet missing required field: ${field}`);
41
+ }
42
+ }
43
+
44
+ export function validateResultPacket(packet) {
45
+ for (const field of REQUIRED_RESULT_FIELDS) {
46
+ if (!packet[field]) throw new Error(`Result packet missing required field: ${field}`);
47
+ }
48
+ if (!VALID_STATUSES.includes(packet.status)) {
49
+ throw new Error(`Invalid result status: ${packet.status}. Must be one of: ${VALID_STATUSES.join(", ")}`);
50
+ }
51
+ }
@@ -1,28 +1,28 @@
1
- const CACHE = new Map(); // key → { value, expiresAt }
2
- const DEFAULT_TTL_MS = Number(process.env.NEMORIS_IDENTITY_CACHE_TTL_MS) || 5 * 60 * 1000; // 5 minutes
3
-
4
- export function getCached(key) {
5
- const entry = CACHE.get(key);
6
- if (!entry) return null;
7
- if (Date.now() > entry.expiresAt) {
8
- CACHE.delete(key);
9
- return null;
10
- }
11
- return entry.value;
12
- }
13
-
14
- export function setCached(key, value, ttlMs = DEFAULT_TTL_MS) {
15
- CACHE.set(key, { value, expiresAt: Date.now() + ttlMs });
16
- }
17
-
18
- export function invalidateCache(key) {
19
- CACHE.delete(key);
20
- }
21
-
22
- export function clearCache() {
23
- CACHE.clear();
24
- }
25
-
26
- export function cacheSize() {
27
- return CACHE.size;
28
- }
1
+ const CACHE = new Map(); // key → { value, expiresAt }
2
+ const DEFAULT_TTL_MS = Number(process.env.NEMORIS_IDENTITY_CACHE_TTL_MS) || 5 * 60 * 1000; // 5 minutes
3
+
4
+ export function getCached(key) {
5
+ const entry = CACHE.get(key);
6
+ if (!entry) return null;
7
+ if (Date.now() > entry.expiresAt) {
8
+ CACHE.delete(key);
9
+ return null;
10
+ }
11
+ return entry.value;
12
+ }
13
+
14
+ export function setCached(key, value, ttlMs = DEFAULT_TTL_MS) {
15
+ CACHE.set(key, { value, expiresAt: Date.now() + ttlMs });
16
+ }
17
+
18
+ export function invalidateCache(key) {
19
+ CACHE.delete(key);
20
+ }
21
+
22
+ export function clearCache() {
23
+ CACHE.clear();
24
+ }
25
+
26
+ export function cacheSize() {
27
+ return CACHE.size;
28
+ }