nemoris 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +49 -49
- package/LICENSE +21 -21
- package/README.md +209 -209
- package/SECURITY.md +59 -119
- package/bin/nemoris +46 -46
- package/config/agents/agent.toml.example +28 -28
- package/config/agents/content.toml +23 -0
- package/config/agents/default.toml +22 -22
- package/config/agents/heartbeat.toml +35 -0
- package/config/agents/iris.toml +23 -0
- package/config/agents/lab.toml +23 -0
- package/config/agents/main.toml +45 -0
- package/config/agents/nemo.toml +21 -0
- package/config/agents/ops.toml +38 -0
- package/config/agents/orchestrator.toml +18 -18
- package/config/agents/revenue.toml +23 -0
- package/config/agents/testyboo.toml +19 -0
- package/config/delivery.toml +73 -73
- package/config/embeddings.toml +5 -5
- package/config/identity/content-purpose.md +11 -0
- package/config/identity/content-soul.md +45 -0
- package/config/identity/default-purpose.md +1 -1
- package/config/identity/default-soul.md +3 -3
- package/config/identity/heartbeat-purpose.md +9 -0
- package/config/identity/heartbeat-soul.md +16 -0
- package/config/identity/iris-purpose.md +17 -0
- package/config/identity/iris-soul.md +68 -0
- package/config/identity/lab-purpose.md +10 -0
- package/config/identity/lab-soul.md +38 -0
- package/config/identity/main-purpose.md +17 -0
- package/config/identity/main-soul.md +66 -0
- package/config/identity/main-user.md +22 -0
- package/config/identity/ops-purpose.md +9 -0
- package/config/identity/ops-soul.md +16 -0
- package/config/identity/orchestrator-purpose.md +1 -1
- package/config/identity/orchestrator-soul.md +1 -1
- package/config/identity/revenue-purpose.md +9 -0
- package/config/identity/revenue-soul.md +41 -0
- package/config/identity/testyboo-purpose.md +13 -0
- package/config/identity/testyboo-soul.md +20 -0
- package/config/improvement-targets.toml +15 -15
- package/config/jobs/heartbeat-check.toml +30 -30
- package/config/jobs/memory-rollup.toml +46 -46
- package/config/jobs/workspace-health.toml +63 -63
- package/config/mcp.toml +16 -16
- package/config/output-contracts.toml +17 -17
- package/config/peers.toml +32 -32
- package/config/peers.toml.example +32 -32
- package/config/policies/memory-default.toml +10 -10
- package/config/policies/memory-heartbeat.toml +5 -5
- package/config/policies/memory-ops.toml +10 -10
- package/config/policies/tools-heartbeat-minimal.toml +8 -8
- package/config/policies/tools-interactive-safe.toml +8 -8
- package/config/policies/tools-ops-bounded.toml +8 -8
- package/config/policies/tools-orchestrator.toml +7 -7
- package/config/providers/anthropic.toml +15 -15
- package/config/providers/ollama.toml +5 -5
- package/config/providers/openai-codex.toml +9 -9
- package/config/providers/openrouter.toml +5 -5
- package/config/router.toml +22 -22
- package/config/runtime.toml +114 -114
- package/config/skills/self-improvement.toml +15 -15
- package/config/skills/telegram-onboarding-spec.md +240 -240
- package/config/skills/workspace-monitor.toml +15 -15
- package/config/task-router.toml +42 -42
- package/install.sh +50 -50
- package/package.json +91 -90
- package/src/auth/auth-profiles.js +169 -169
- package/src/auth/openai-codex-oauth.js +285 -285
- package/src/battle.js +449 -449
- package/src/cli/help.js +265 -265
- package/src/cli/output-filter.js +49 -49
- package/src/cli/runtime-control.js +704 -704
- package/src/cli-main.js +2763 -2763
- package/src/cli.js +78 -78
- package/src/config/loader.js +332 -332
- package/src/config/schema-validator.js +214 -214
- package/src/config/toml-lite.js +8 -8
- package/src/daemon/action-handlers.js +71 -71
- package/src/daemon/healing-tick.js +87 -87
- package/src/daemon/health-probes.js +90 -90
- package/src/daemon/notifier.js +57 -57
- package/src/daemon/nurse.js +218 -218
- package/src/daemon/repair-log.js +106 -106
- package/src/daemon/rule-staging.js +90 -90
- package/src/daemon/rules.js +29 -29
- package/src/daemon/telegram-commands.js +54 -54
- package/src/daemon/updater.js +85 -85
- package/src/jobs/job-runner.js +78 -78
- package/src/mcp/consumer.js +129 -129
- package/src/memory/active-recall.js +171 -171
- package/src/memory/backend-manager.js +97 -97
- package/src/memory/backends/file-backend.js +38 -38
- package/src/memory/backends/qmd-backend.js +219 -219
- package/src/memory/embedding-guards.js +24 -24
- package/src/memory/embedding-index.js +118 -118
- package/src/memory/embedding-service.js +179 -179
- package/src/memory/file-index.js +177 -177
- package/src/memory/memory-signature.js +5 -5
- package/src/memory/memory-store.js +648 -648
- package/src/memory/retrieval-planner.js +66 -66
- package/src/memory/scoring.js +145 -145
- package/src/memory/simhash.js +78 -78
- package/src/memory/sqlite-active-store.js +824 -824
- package/src/memory/write-policy.js +36 -36
- package/src/onboarding/aliases.js +33 -33
- package/src/onboarding/auth/api-key.js +224 -224
- package/src/onboarding/auth/ollama-detect.js +42 -42
- package/src/onboarding/clack-prompter.js +77 -77
- package/src/onboarding/doctor.js +530 -530
- package/src/onboarding/lock.js +42 -42
- package/src/onboarding/model-catalog.js +344 -344
- package/src/onboarding/phases/auth.js +576 -589
- package/src/onboarding/phases/build.js +130 -130
- package/src/onboarding/phases/choose.js +82 -82
- package/src/onboarding/phases/detect.js +98 -98
- package/src/onboarding/phases/hatch.js +216 -216
- package/src/onboarding/phases/identity.js +79 -79
- package/src/onboarding/phases/ollama.js +345 -345
- package/src/onboarding/phases/scaffold.js +99 -99
- package/src/onboarding/phases/telegram.js +377 -377
- package/src/onboarding/phases/validate.js +204 -204
- package/src/onboarding/phases/verify.js +206 -206
- package/src/onboarding/platform.js +482 -482
- package/src/onboarding/status-bar.js +95 -95
- package/src/onboarding/templates.js +794 -794
- package/src/onboarding/toml-writer.js +38 -38
- package/src/onboarding/tui.js +250 -250
- package/src/onboarding/uninstall.js +153 -153
- package/src/onboarding/wizard.js +516 -499
- package/src/providers/anthropic.js +168 -168
- package/src/providers/base.js +247 -247
- package/src/providers/circuit-breaker.js +136 -136
- package/src/providers/ollama.js +163 -163
- package/src/providers/openai-codex.js +149 -149
- package/src/providers/openrouter.js +136 -136
- package/src/providers/registry.js +36 -36
- package/src/providers/router.js +16 -16
- package/src/runtime/bootstrap-cache.js +47 -47
- package/src/runtime/capabilities-prompt.js +25 -25
- package/src/runtime/completion-ping.js +99 -99
- package/src/runtime/config-validator.js +121 -121
- package/src/runtime/context-ledger.js +360 -360
- package/src/runtime/cutover-readiness.js +42 -42
- package/src/runtime/daemon.js +729 -729
- package/src/runtime/delivery-ack.js +195 -195
- package/src/runtime/delivery-adapters/local-file.js +41 -41
- package/src/runtime/delivery-adapters/openclaw-cli.js +94 -94
- package/src/runtime/delivery-adapters/openclaw-peer.js +98 -98
- package/src/runtime/delivery-adapters/shadow.js +13 -13
- package/src/runtime/delivery-adapters/standalone-http.js +98 -98
- package/src/runtime/delivery-adapters/telegram.js +104 -104
- package/src/runtime/delivery-adapters/tui.js +128 -128
- package/src/runtime/delivery-manager.js +807 -807
- package/src/runtime/delivery-store.js +168 -168
- package/src/runtime/dependency-health.js +118 -118
- package/src/runtime/envelope.js +114 -114
- package/src/runtime/evaluation.js +1089 -1089
- package/src/runtime/exec-approvals.js +216 -216
- package/src/runtime/executor.js +500 -500
- package/src/runtime/failure-ping.js +67 -67
- package/src/runtime/flows.js +83 -83
- package/src/runtime/guards.js +45 -45
- package/src/runtime/handoff.js +51 -51
- package/src/runtime/identity-cache.js +28 -28
- package/src/runtime/improvement-engine.js +109 -109
- package/src/runtime/improvement-harness.js +581 -581
- package/src/runtime/input-sanitiser.js +72 -72
- package/src/runtime/interaction-contract.js +347 -347
- package/src/runtime/lane-readiness.js +226 -226
- package/src/runtime/migration.js +323 -323
- package/src/runtime/model-resolution.js +78 -78
- package/src/runtime/network.js +64 -64
- package/src/runtime/notification-store.js +97 -97
- package/src/runtime/notifier.js +256 -256
- package/src/runtime/orchestrator.js +53 -53
- package/src/runtime/orphan-reaper.js +41 -41
- package/src/runtime/output-contract-schema.js +139 -139
- package/src/runtime/output-contract-validator.js +439 -439
- package/src/runtime/peer-readiness.js +69 -69
- package/src/runtime/peer-registry.js +133 -133
- package/src/runtime/pilot-status.js +108 -108
- package/src/runtime/prompt-builder.js +261 -261
- package/src/runtime/provider-attempt.js +582 -582
- package/src/runtime/report-fallback.js +71 -71
- package/src/runtime/result-normalizer.js +183 -183
- package/src/runtime/retention.js +74 -74
- package/src/runtime/review.js +244 -244
- package/src/runtime/route-job.js +15 -15
- package/src/runtime/run-store.js +38 -38
- package/src/runtime/schedule.js +88 -88
- package/src/runtime/scheduler-state.js +434 -434
- package/src/runtime/scheduler.js +656 -656
- package/src/runtime/session-compactor.js +182 -182
- package/src/runtime/session-search.js +155 -155
- package/src/runtime/slack-inbound.js +249 -249
- package/src/runtime/ssrf.js +102 -102
- package/src/runtime/status-aggregator.js +330 -330
- package/src/runtime/task-contract.js +140 -140
- package/src/runtime/task-packet.js +107 -107
- package/src/runtime/task-router.js +140 -140
- package/src/runtime/telegram-inbound.js +1565 -1565
- package/src/runtime/token-counter.js +134 -134
- package/src/runtime/token-estimator.js +59 -59
- package/src/runtime/tool-loop.js +200 -200
- package/src/runtime/transport-server.js +311 -311
- package/src/runtime/tui-server.js +411 -411
- package/src/runtime/ulid.js +44 -44
- package/src/security/ssrf-check.js +197 -197
- package/src/setup.js +369 -369
- package/src/shadow/bridge.js +303 -303
- package/src/skills/loader.js +84 -84
- package/src/tools/catalog.json +49 -49
- package/src/tools/cli-delegate.js +44 -44
- package/src/tools/mcp-client.js +106 -106
- package/src/tools/micro/cancel-task.js +6 -6
- package/src/tools/micro/complete-task.js +6 -6
- package/src/tools/micro/fail-task.js +6 -6
- package/src/tools/micro/http-fetch.js +74 -74
- package/src/tools/micro/index.js +36 -36
- package/src/tools/micro/lcm-recall.js +60 -60
- package/src/tools/micro/list-dir.js +17 -17
- package/src/tools/micro/list-skills.js +46 -46
- package/src/tools/micro/load-skill.js +38 -38
- package/src/tools/micro/memory-search.js +45 -45
- package/src/tools/micro/read-file.js +11 -11
- package/src/tools/micro/session-search.js +54 -54
- package/src/tools/micro/shell-exec.js +43 -43
- package/src/tools/micro/trigger-job.js +79 -79
- package/src/tools/micro/web-search.js +58 -58
- package/src/tools/micro/workspace-paths.js +39 -39
- package/src/tools/micro/write-file.js +14 -14
- package/src/tools/micro/write-memory.js +41 -41
- package/src/tools/registry.js +348 -348
- package/src/tools/tool-result-contract.js +36 -36
- package/src/tui/chat.js +835 -835
- package/src/tui/renderer.js +175 -175
- package/src/tui/socket-client.js +217 -217
- package/src/utils/canonical-json.js +29 -29
- package/src/utils/compaction.js +30 -30
- package/src/utils/env-loader.js +5 -5
- package/src/utils/errors.js +80 -80
- package/src/utils/fs.js +101 -101
- package/src/utils/ids.js +5 -5
- package/src/utils/model-context-limits.js +30 -30
- package/src/utils/token-budget.js +74 -74
- package/src/utils/usage-cost.js +25 -25
- package/src/utils/usage-metrics.js +14 -14
|
@@ -1,67 +1,67 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Sends a failure ping to the Telegram operator when a job fails,
|
|
3
|
-
* and a user-friendly error message to the originating chat.
|
|
4
|
-
* Never throws — all errors are caught and logged internally.
|
|
5
|
-
*/
|
|
6
|
-
|
|
7
|
-
function isRetryableError(err) {
|
|
8
|
-
const msg = (err?.message || "").toLowerCase();
|
|
9
|
-
const status = err?.status || err?.statusCode || 0;
|
|
10
|
-
return status >= 500 || err?.code === "ETIMEDOUT" ||
|
|
11
|
-
msg.includes("etimedout") || msg.includes("timeout") || msg.includes("fetch failed");
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
/**
|
|
15
|
-
* @param {object} job
|
|
16
|
-
* @param {Error} error
|
|
17
|
-
* @param {object} options
|
|
18
|
-
* @param {string} options.botToken
|
|
19
|
-
* @param {string} options.operatorChatId
|
|
20
|
-
* @param {Function} [options.fetchImpl]
|
|
21
|
-
*/
|
|
22
|
-
export async function sendFailurePing(job, error, options = {}) {
|
|
23
|
-
const { botToken, operatorChatId, fetchImpl } = options;
|
|
24
|
-
|
|
25
|
-
if (!botToken) return;
|
|
26
|
-
if (job.source === "completion_ping") return;
|
|
27
|
-
|
|
28
|
-
const fetchFn = fetchImpl || globalThis.fetch;
|
|
29
|
-
|
|
30
|
-
// Send user-friendly error to the originating chat
|
|
31
|
-
if (job.chat_id) {
|
|
32
|
-
const isTurnTimeout = error?.message === "turn_timeout";
|
|
33
|
-
let userMsg;
|
|
34
|
-
if (isTurnTimeout) {
|
|
35
|
-
userMsg = "⚠️ Turn timed out after 2 minutes. Try again or /stop to reset.";
|
|
36
|
-
} else if (isRetryableError(error)) {
|
|
37
|
-
userMsg = "⚠️ Provider hiccup — couldn't complete that. Try again in a moment.";
|
|
38
|
-
} else {
|
|
39
|
-
const snippet = (error?.message || "unknown error").slice(0, 120);
|
|
40
|
-
userMsg = `⚠️ Something went wrong: ${snippet}. Try again or /stop to reset.`;
|
|
41
|
-
}
|
|
42
|
-
try {
|
|
43
|
-
await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
|
|
44
|
-
method: "POST",
|
|
45
|
-
headers: { "content-type": "application/json" },
|
|
46
|
-
body: JSON.stringify({ chat_id: job.chat_id, text: userMsg }),
|
|
47
|
-
});
|
|
48
|
-
} catch (sendErr) {
|
|
49
|
-
console.error(JSON.stringify({ service: "error_delivery", event: "failed", error: sendErr.message, jobId: job.job_id }));
|
|
50
|
-
}
|
|
51
|
-
}
|
|
52
|
-
|
|
53
|
-
// Operator notification (detailed)
|
|
54
|
-
if (operatorChatId) {
|
|
55
|
-
const errorSnippet = (error?.message || String(error)).slice(0, 120);
|
|
56
|
-
const text = `⚠️ Job failed\nAgent: ${job.agent_id}\nJob: ${job.job_id}\nError: ${errorSnippet}\nSource: ${job.source}`;
|
|
57
|
-
try {
|
|
58
|
-
await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
|
|
59
|
-
method: "POST",
|
|
60
|
-
headers: { "content-type": "application/json" },
|
|
61
|
-
body: JSON.stringify({ chat_id: operatorChatId, text }),
|
|
62
|
-
});
|
|
63
|
-
} catch (sendErr) {
|
|
64
|
-
console.error(JSON.stringify({ service: "failure_ping", error: sendErr.message, jobId: job.job_id }));
|
|
65
|
-
}
|
|
66
|
-
}
|
|
67
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Sends a failure ping to the Telegram operator when a job fails,
|
|
3
|
+
* and a user-friendly error message to the originating chat.
|
|
4
|
+
* Never throws — all errors are caught and logged internally.
|
|
5
|
+
*/
|
|
6
|
+
|
|
7
|
+
function isRetryableError(err) {
|
|
8
|
+
const msg = (err?.message || "").toLowerCase();
|
|
9
|
+
const status = err?.status || err?.statusCode || 0;
|
|
10
|
+
return status >= 500 || err?.code === "ETIMEDOUT" ||
|
|
11
|
+
msg.includes("etimedout") || msg.includes("timeout") || msg.includes("fetch failed");
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
/**
|
|
15
|
+
* @param {object} job
|
|
16
|
+
* @param {Error} error
|
|
17
|
+
* @param {object} options
|
|
18
|
+
* @param {string} options.botToken
|
|
19
|
+
* @param {string} options.operatorChatId
|
|
20
|
+
* @param {Function} [options.fetchImpl]
|
|
21
|
+
*/
|
|
22
|
+
export async function sendFailurePing(job, error, options = {}) {
|
|
23
|
+
const { botToken, operatorChatId, fetchImpl } = options;
|
|
24
|
+
|
|
25
|
+
if (!botToken) return;
|
|
26
|
+
if (job.source === "completion_ping") return;
|
|
27
|
+
|
|
28
|
+
const fetchFn = fetchImpl || globalThis.fetch;
|
|
29
|
+
|
|
30
|
+
// Send user-friendly error to the originating chat
|
|
31
|
+
if (job.chat_id) {
|
|
32
|
+
const isTurnTimeout = error?.message === "turn_timeout";
|
|
33
|
+
let userMsg;
|
|
34
|
+
if (isTurnTimeout) {
|
|
35
|
+
userMsg = "⚠️ Turn timed out after 2 minutes. Try again or /stop to reset.";
|
|
36
|
+
} else if (isRetryableError(error)) {
|
|
37
|
+
userMsg = "⚠️ Provider hiccup — couldn't complete that. Try again in a moment.";
|
|
38
|
+
} else {
|
|
39
|
+
const snippet = (error?.message || "unknown error").slice(0, 120);
|
|
40
|
+
userMsg = `⚠️ Something went wrong: ${snippet}. Try again or /stop to reset.`;
|
|
41
|
+
}
|
|
42
|
+
try {
|
|
43
|
+
await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
|
|
44
|
+
method: "POST",
|
|
45
|
+
headers: { "content-type": "application/json" },
|
|
46
|
+
body: JSON.stringify({ chat_id: job.chat_id, text: userMsg }),
|
|
47
|
+
});
|
|
48
|
+
} catch (sendErr) {
|
|
49
|
+
console.error(JSON.stringify({ service: "error_delivery", event: "failed", error: sendErr.message, jobId: job.job_id }));
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
|
|
53
|
+
// Operator notification (detailed)
|
|
54
|
+
if (operatorChatId) {
|
|
55
|
+
const errorSnippet = (error?.message || String(error)).slice(0, 120);
|
|
56
|
+
const text = `⚠️ Job failed\nAgent: ${job.agent_id}\nJob: ${job.job_id}\nError: ${errorSnippet}\nSource: ${job.source}`;
|
|
57
|
+
try {
|
|
58
|
+
await fetchFn(`https://api.telegram.org/bot${botToken}/sendMessage`, {
|
|
59
|
+
method: "POST",
|
|
60
|
+
headers: { "content-type": "application/json" },
|
|
61
|
+
body: JSON.stringify({ chat_id: operatorChatId, text }),
|
|
62
|
+
});
|
|
63
|
+
} catch (sendErr) {
|
|
64
|
+
console.error(JSON.stringify({ service: "failure_ping", error: sendErr.message, jobId: job.job_id }));
|
|
65
|
+
}
|
|
66
|
+
}
|
|
67
|
+
}
|
package/src/runtime/flows.js
CHANGED
|
@@ -1,83 +1,83 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Cross-Pillar Flows — coordinates seams between pillars.
|
|
3
|
-
*/
|
|
4
|
-
|
|
5
|
-
export async function flowTaskEscalationToOperator(task, deliveryAck, telegramSend, { chatId, retryDelays } = {}) {
|
|
6
|
-
const chain = JSON.parse(task.escalation_chain);
|
|
7
|
-
const target = chain[task.escalation_index] || "operator";
|
|
8
|
-
if (target !== "operator") {
|
|
9
|
-
throw new Error(`Flow 1 only handles operator escalation, got target: ${target}`);
|
|
10
|
-
}
|
|
11
|
-
const body = [
|
|
12
|
-
`${task.assigned_agent} timed out on: ${task.objective}`,
|
|
13
|
-
task.error_slot ? `Error: ${task.error_slot}` : null,
|
|
14
|
-
`Result so far: ${task.result_slot || "none"}`,
|
|
15
|
-
"Want me to intervene?",
|
|
16
|
-
].filter(Boolean).join("\n");
|
|
17
|
-
return deliveryAck.sendWithGuarantee({
|
|
18
|
-
sourceAgent: task.owner_agent,
|
|
19
|
-
criticality: "decision_required",
|
|
20
|
-
payload: { text: body },
|
|
21
|
-
chatId,
|
|
22
|
-
correlationId: task.envelope_id,
|
|
23
|
-
sendFn: (payload) => telegramSend({ text: payload.text, chatId }),
|
|
24
|
-
retryDelays,
|
|
25
|
-
});
|
|
26
|
-
}
|
|
27
|
-
|
|
28
|
-
export async function flowTaskCompletionToMemory(task, writeBuffer) {
|
|
29
|
-
const summary = task.result_slot
|
|
30
|
-
? (typeof task.result_slot === "string" ? task.result_slot : JSON.stringify(task.result_slot))
|
|
31
|
-
: "no result";
|
|
32
|
-
const content = `Task "${task.objective}" completed by ${task.assigned_agent}: ${summary.slice(0, 500)}`;
|
|
33
|
-
writeBuffer.add({
|
|
34
|
-
content,
|
|
35
|
-
confidence: 0.85,
|
|
36
|
-
sourceAgent: task.assigned_agent,
|
|
37
|
-
category: "task_result",
|
|
38
|
-
type: "fact",
|
|
39
|
-
});
|
|
40
|
-
}
|
|
41
|
-
|
|
42
|
-
export async function flowDecisionResponseToTask(envelope, operatorMessage, taskContract, { resolveAgent, callerAgent } = {}) {
|
|
43
|
-
const task = taskContract.db.prepare(
|
|
44
|
-
"SELECT * FROM tasks WHERE envelope_id = ?"
|
|
45
|
-
).get(envelope.correlation_id);
|
|
46
|
-
if (!task) return { action: "unstructured", reason: "no linked task" };
|
|
47
|
-
|
|
48
|
-
const msg = operatorMessage.toLowerCase();
|
|
49
|
-
|
|
50
|
-
if (msg.includes("retry")) {
|
|
51
|
-
const newTask = taskContract.createTask({
|
|
52
|
-
ownerAgent: task.owner_agent,
|
|
53
|
-
assignedAgent: task.assigned_agent,
|
|
54
|
-
objective: task.objective,
|
|
55
|
-
deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
|
|
56
|
-
});
|
|
57
|
-
return { action: "retry", newTaskId: newTask.task_id, originalTaskId: task.task_id };
|
|
58
|
-
}
|
|
59
|
-
|
|
60
|
-
if (msg.includes("cancel")) {
|
|
61
|
-
try {
|
|
62
|
-
taskContract.transition(task.task_id, "cancelled", task.owner_agent);
|
|
63
|
-
} catch { /* may not be in cancellable state */ }
|
|
64
|
-
return { action: "cancel", taskId: task.task_id };
|
|
65
|
-
}
|
|
66
|
-
|
|
67
|
-
if (msg.includes("reassign")) {
|
|
68
|
-
const match = operatorMessage.match(/reassign(?:\s+to)?\s+(\w+)/i);
|
|
69
|
-
const targetName = match?.[1];
|
|
70
|
-
if (targetName && resolveAgent && resolveAgent(targetName)) {
|
|
71
|
-
const newTask = taskContract.createTask({
|
|
72
|
-
ownerAgent: task.owner_agent,
|
|
73
|
-
assignedAgent: targetName,
|
|
74
|
-
objective: task.objective,
|
|
75
|
-
deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
|
|
76
|
-
});
|
|
77
|
-
return { action: "reassign", newTaskId: newTask.task_id, assignedAgent: targetName };
|
|
78
|
-
}
|
|
79
|
-
return { action: "unstructured", reason: `Could not resolve agent: ${targetName}` };
|
|
80
|
-
}
|
|
81
|
-
|
|
82
|
-
return { action: "unstructured", message: operatorMessage };
|
|
83
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Cross-Pillar Flows — coordinates seams between pillars.
|
|
3
|
+
*/
|
|
4
|
+
|
|
5
|
+
export async function flowTaskEscalationToOperator(task, deliveryAck, telegramSend, { chatId, retryDelays } = {}) {
|
|
6
|
+
const chain = JSON.parse(task.escalation_chain);
|
|
7
|
+
const target = chain[task.escalation_index] || "operator";
|
|
8
|
+
if (target !== "operator") {
|
|
9
|
+
throw new Error(`Flow 1 only handles operator escalation, got target: ${target}`);
|
|
10
|
+
}
|
|
11
|
+
const body = [
|
|
12
|
+
`${task.assigned_agent} timed out on: ${task.objective}`,
|
|
13
|
+
task.error_slot ? `Error: ${task.error_slot}` : null,
|
|
14
|
+
`Result so far: ${task.result_slot || "none"}`,
|
|
15
|
+
"Want me to intervene?",
|
|
16
|
+
].filter(Boolean).join("\n");
|
|
17
|
+
return deliveryAck.sendWithGuarantee({
|
|
18
|
+
sourceAgent: task.owner_agent,
|
|
19
|
+
criticality: "decision_required",
|
|
20
|
+
payload: { text: body },
|
|
21
|
+
chatId,
|
|
22
|
+
correlationId: task.envelope_id,
|
|
23
|
+
sendFn: (payload) => telegramSend({ text: payload.text, chatId }),
|
|
24
|
+
retryDelays,
|
|
25
|
+
});
|
|
26
|
+
}
|
|
27
|
+
|
|
28
|
+
export async function flowTaskCompletionToMemory(task, writeBuffer) {
|
|
29
|
+
const summary = task.result_slot
|
|
30
|
+
? (typeof task.result_slot === "string" ? task.result_slot : JSON.stringify(task.result_slot))
|
|
31
|
+
: "no result";
|
|
32
|
+
const content = `Task "${task.objective}" completed by ${task.assigned_agent}: ${summary.slice(0, 500)}`;
|
|
33
|
+
writeBuffer.add({
|
|
34
|
+
content,
|
|
35
|
+
confidence: 0.85,
|
|
36
|
+
sourceAgent: task.assigned_agent,
|
|
37
|
+
category: "task_result",
|
|
38
|
+
type: "fact",
|
|
39
|
+
});
|
|
40
|
+
}
|
|
41
|
+
|
|
42
|
+
export async function flowDecisionResponseToTask(envelope, operatorMessage, taskContract, { resolveAgent, callerAgent } = {}) {
|
|
43
|
+
const task = taskContract.db.prepare(
|
|
44
|
+
"SELECT * FROM tasks WHERE envelope_id = ?"
|
|
45
|
+
).get(envelope.correlation_id);
|
|
46
|
+
if (!task) return { action: "unstructured", reason: "no linked task" };
|
|
47
|
+
|
|
48
|
+
const msg = operatorMessage.toLowerCase();
|
|
49
|
+
|
|
50
|
+
if (msg.includes("retry")) {
|
|
51
|
+
const newTask = taskContract.createTask({
|
|
52
|
+
ownerAgent: task.owner_agent,
|
|
53
|
+
assignedAgent: task.assigned_agent,
|
|
54
|
+
objective: task.objective,
|
|
55
|
+
deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
|
|
56
|
+
});
|
|
57
|
+
return { action: "retry", newTaskId: newTask.task_id, originalTaskId: task.task_id };
|
|
58
|
+
}
|
|
59
|
+
|
|
60
|
+
if (msg.includes("cancel")) {
|
|
61
|
+
try {
|
|
62
|
+
taskContract.transition(task.task_id, "cancelled", task.owner_agent);
|
|
63
|
+
} catch { /* may not be in cancellable state */ }
|
|
64
|
+
return { action: "cancel", taskId: task.task_id };
|
|
65
|
+
}
|
|
66
|
+
|
|
67
|
+
if (msg.includes("reassign")) {
|
|
68
|
+
const match = operatorMessage.match(/reassign(?:\s+to)?\s+(\w+)/i);
|
|
69
|
+
const targetName = match?.[1];
|
|
70
|
+
if (targetName && resolveAgent && resolveAgent(targetName)) {
|
|
71
|
+
const newTask = taskContract.createTask({
|
|
72
|
+
ownerAgent: task.owner_agent,
|
|
73
|
+
assignedAgent: targetName,
|
|
74
|
+
objective: task.objective,
|
|
75
|
+
deadlineMinutes: Math.max(10, Math.round((new Date(task.deadline_at) - new Date(task.created_at)) / 60000)),
|
|
76
|
+
});
|
|
77
|
+
return { action: "reassign", newTaskId: newTask.task_id, assignedAgent: targetName };
|
|
78
|
+
}
|
|
79
|
+
return { action: "unstructured", reason: `Could not resolve agent: ${targetName}` };
|
|
80
|
+
}
|
|
81
|
+
|
|
82
|
+
return { action: "unstructured", message: operatorMessage };
|
|
83
|
+
}
|
package/src/runtime/guards.js
CHANGED
|
@@ -1,45 +1,45 @@
|
|
|
1
|
-
const DEFAULT_PROVIDER_MODE = {
|
|
2
|
-
allowProviderExecution: false,
|
|
3
|
-
allowRemoteProviders: false,
|
|
4
|
-
allowedJobIds: ["heartbeat-check", "workspace-health", "memory-rollup"],
|
|
5
|
-
allowedLanes: ["local_cheap", "local_report", "report_fallback_lowcost"],
|
|
6
|
-
requireHealthyProvider: true
|
|
7
|
-
};
|
|
8
|
-
|
|
9
|
-
function readFlag(name) {
|
|
10
|
-
const raw = process.env[name];
|
|
11
|
-
return raw === "1" || raw === "true";
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
export function getProviderModePolicy() {
|
|
15
|
-
return {
|
|
16
|
-
...DEFAULT_PROVIDER_MODE,
|
|
17
|
-
allowProviderExecution: readFlag("NEMORIS_ALLOW_PROVIDER_MODE"),
|
|
18
|
-
allowRemoteProviders: readFlag("NEMORIS_ALLOW_REMOTE_PROVIDER_MODE")
|
|
19
|
-
};
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
export function assertProviderExecutionAllowed({ jobId, modelLane, providerId, interactive = false }) {
|
|
23
|
-
const policy = getProviderModePolicy();
|
|
24
|
-
|
|
25
|
-
if (!policy.allowProviderExecution) {
|
|
26
|
-
throw new Error("Provider mode disabled. Set NEMORIS_ALLOW_PROVIDER_MODE=1 to enable guarded shadow execution.");
|
|
27
|
-
}
|
|
28
|
-
|
|
29
|
-
// Interactive jobs (Telegram, agent dispatch) bypass job-id and lane allowlists
|
|
30
|
-
if (!interactive) {
|
|
31
|
-
if (!policy.allowedJobIds.includes(jobId)) {
|
|
32
|
-
throw new Error(`Provider mode not allowed for job ${jobId}.`);
|
|
33
|
-
}
|
|
34
|
-
|
|
35
|
-
if (!policy.allowedLanes.includes(modelLane)) {
|
|
36
|
-
throw new Error(`Provider mode not allowed for lane ${modelLane}.`);
|
|
37
|
-
}
|
|
38
|
-
}
|
|
39
|
-
|
|
40
|
-
if (providerId !== "ollama" && !policy.allowRemoteProviders) {
|
|
41
|
-
throw new Error(`Remote provider execution blocked for ${providerId}. Set NEMORIS_ALLOW_REMOTE_PROVIDER_MODE=1 to override.`);
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
return policy;
|
|
45
|
-
}
|
|
1
|
+
const DEFAULT_PROVIDER_MODE = {
|
|
2
|
+
allowProviderExecution: false,
|
|
3
|
+
allowRemoteProviders: false,
|
|
4
|
+
allowedJobIds: ["heartbeat-check", "workspace-health", "memory-rollup"],
|
|
5
|
+
allowedLanes: ["local_cheap", "local_report", "report_fallback_lowcost"],
|
|
6
|
+
requireHealthyProvider: true
|
|
7
|
+
};
|
|
8
|
+
|
|
9
|
+
function readFlag(name) {
|
|
10
|
+
const raw = process.env[name];
|
|
11
|
+
return raw === "1" || raw === "true";
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export function getProviderModePolicy() {
|
|
15
|
+
return {
|
|
16
|
+
...DEFAULT_PROVIDER_MODE,
|
|
17
|
+
allowProviderExecution: readFlag("NEMORIS_ALLOW_PROVIDER_MODE"),
|
|
18
|
+
allowRemoteProviders: readFlag("NEMORIS_ALLOW_REMOTE_PROVIDER_MODE")
|
|
19
|
+
};
|
|
20
|
+
}
|
|
21
|
+
|
|
22
|
+
export function assertProviderExecutionAllowed({ jobId, modelLane, providerId, interactive = false }) {
|
|
23
|
+
const policy = getProviderModePolicy();
|
|
24
|
+
|
|
25
|
+
if (!policy.allowProviderExecution) {
|
|
26
|
+
throw new Error("Provider mode disabled. Set NEMORIS_ALLOW_PROVIDER_MODE=1 to enable guarded shadow execution.");
|
|
27
|
+
}
|
|
28
|
+
|
|
29
|
+
// Interactive jobs (Telegram, agent dispatch) bypass job-id and lane allowlists
|
|
30
|
+
if (!interactive) {
|
|
31
|
+
if (!policy.allowedJobIds.includes(jobId)) {
|
|
32
|
+
throw new Error(`Provider mode not allowed for job ${jobId}.`);
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
if (!policy.allowedLanes.includes(modelLane)) {
|
|
36
|
+
throw new Error(`Provider mode not allowed for lane ${modelLane}.`);
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
if (providerId !== "ollama" && !policy.allowRemoteProviders) {
|
|
41
|
+
throw new Error(`Remote provider execution blocked for ${providerId}. Set NEMORIS_ALLOW_REMOTE_PROVIDER_MODE=1 to override.`);
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
return policy;
|
|
45
|
+
}
|
package/src/runtime/handoff.js
CHANGED
|
@@ -1,51 +1,51 @@
|
|
|
1
|
-
const VALID_STATUSES = ["succeeded", "failed", "halted", "escalated"];
|
|
2
|
-
const REQUIRED_HANDOFF_FIELDS = ["fromAgent", "toAgent", "jobId", "routingReason", "parentRunId"];
|
|
3
|
-
const REQUIRED_RESULT_FIELDS = ["status", "agentId", "runId", "parentRunId"];
|
|
4
|
-
|
|
5
|
-
export function buildHandoffPacket({ fromAgent, toAgent, jobId, skill, routingReason, parentRunId, budget = {}, artifacts = [] }) {
|
|
6
|
-
const packet = {
|
|
7
|
-
handoff: Object.freeze({
|
|
8
|
-
fromAgent,
|
|
9
|
-
toAgent,
|
|
10
|
-
jobId,
|
|
11
|
-
skill: skill || null,
|
|
12
|
-
routingReason,
|
|
13
|
-
parentRunId,
|
|
14
|
-
budget: Object.freeze({ ...budget }),
|
|
15
|
-
artifacts: Object.freeze([...artifacts]),
|
|
16
|
-
}),
|
|
17
|
-
};
|
|
18
|
-
Object.freeze(packet);
|
|
19
|
-
return packet;
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
export function buildResultPacket({ status, agentId, runId, parentRunId, result = {}, toolsUsed = [], tokenUsage = {}, evalScore = null, concerns = [] }) {
|
|
23
|
-
const packet = Object.freeze({
|
|
24
|
-
status,
|
|
25
|
-
agentId,
|
|
26
|
-
runId,
|
|
27
|
-
parentRunId,
|
|
28
|
-
result: Object.freeze({ ...result }),
|
|
29
|
-
toolsUsed: Object.freeze([...toolsUsed]),
|
|
30
|
-
tokenUsage: Object.freeze({ ...tokenUsage }),
|
|
31
|
-
evalScore,
|
|
32
|
-
concerns: Object.freeze([...concerns]),
|
|
33
|
-
});
|
|
34
|
-
return packet;
|
|
35
|
-
}
|
|
36
|
-
|
|
37
|
-
export function validateHandoffPacket(packet) {
|
|
38
|
-
if (!packet?.handoff) throw new Error("Handoff packet missing 'handoff' field");
|
|
39
|
-
for (const field of REQUIRED_HANDOFF_FIELDS) {
|
|
40
|
-
if (!packet.handoff[field]) throw new Error(`Handoff packet missing required field: ${field}`);
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
export function validateResultPacket(packet) {
|
|
45
|
-
for (const field of REQUIRED_RESULT_FIELDS) {
|
|
46
|
-
if (!packet[field]) throw new Error(`Result packet missing required field: ${field}`);
|
|
47
|
-
}
|
|
48
|
-
if (!VALID_STATUSES.includes(packet.status)) {
|
|
49
|
-
throw new Error(`Invalid result status: ${packet.status}. Must be one of: ${VALID_STATUSES.join(", ")}`);
|
|
50
|
-
}
|
|
51
|
-
}
|
|
1
|
+
const VALID_STATUSES = ["succeeded", "failed", "halted", "escalated"];
|
|
2
|
+
const REQUIRED_HANDOFF_FIELDS = ["fromAgent", "toAgent", "jobId", "routingReason", "parentRunId"];
|
|
3
|
+
const REQUIRED_RESULT_FIELDS = ["status", "agentId", "runId", "parentRunId"];
|
|
4
|
+
|
|
5
|
+
export function buildHandoffPacket({ fromAgent, toAgent, jobId, skill, routingReason, parentRunId, budget = {}, artifacts = [] }) {
|
|
6
|
+
const packet = {
|
|
7
|
+
handoff: Object.freeze({
|
|
8
|
+
fromAgent,
|
|
9
|
+
toAgent,
|
|
10
|
+
jobId,
|
|
11
|
+
skill: skill || null,
|
|
12
|
+
routingReason,
|
|
13
|
+
parentRunId,
|
|
14
|
+
budget: Object.freeze({ ...budget }),
|
|
15
|
+
artifacts: Object.freeze([...artifacts]),
|
|
16
|
+
}),
|
|
17
|
+
};
|
|
18
|
+
Object.freeze(packet);
|
|
19
|
+
return packet;
|
|
20
|
+
}
|
|
21
|
+
|
|
22
|
+
export function buildResultPacket({ status, agentId, runId, parentRunId, result = {}, toolsUsed = [], tokenUsage = {}, evalScore = null, concerns = [] }) {
|
|
23
|
+
const packet = Object.freeze({
|
|
24
|
+
status,
|
|
25
|
+
agentId,
|
|
26
|
+
runId,
|
|
27
|
+
parentRunId,
|
|
28
|
+
result: Object.freeze({ ...result }),
|
|
29
|
+
toolsUsed: Object.freeze([...toolsUsed]),
|
|
30
|
+
tokenUsage: Object.freeze({ ...tokenUsage }),
|
|
31
|
+
evalScore,
|
|
32
|
+
concerns: Object.freeze([...concerns]),
|
|
33
|
+
});
|
|
34
|
+
return packet;
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
export function validateHandoffPacket(packet) {
|
|
38
|
+
if (!packet?.handoff) throw new Error("Handoff packet missing 'handoff' field");
|
|
39
|
+
for (const field of REQUIRED_HANDOFF_FIELDS) {
|
|
40
|
+
if (!packet.handoff[field]) throw new Error(`Handoff packet missing required field: ${field}`);
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
export function validateResultPacket(packet) {
|
|
45
|
+
for (const field of REQUIRED_RESULT_FIELDS) {
|
|
46
|
+
if (!packet[field]) throw new Error(`Result packet missing required field: ${field}`);
|
|
47
|
+
}
|
|
48
|
+
if (!VALID_STATUSES.includes(packet.status)) {
|
|
49
|
+
throw new Error(`Invalid result status: ${packet.status}. Must be one of: ${VALID_STATUSES.join(", ")}`);
|
|
50
|
+
}
|
|
51
|
+
}
|
|
@@ -1,28 +1,28 @@
|
|
|
1
|
-
const CACHE = new Map(); // key → { value, expiresAt }
|
|
2
|
-
const DEFAULT_TTL_MS = Number(process.env.NEMORIS_IDENTITY_CACHE_TTL_MS) || 5 * 60 * 1000; // 5 minutes
|
|
3
|
-
|
|
4
|
-
export function getCached(key) {
|
|
5
|
-
const entry = CACHE.get(key);
|
|
6
|
-
if (!entry) return null;
|
|
7
|
-
if (Date.now() > entry.expiresAt) {
|
|
8
|
-
CACHE.delete(key);
|
|
9
|
-
return null;
|
|
10
|
-
}
|
|
11
|
-
return entry.value;
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
export function setCached(key, value, ttlMs = DEFAULT_TTL_MS) {
|
|
15
|
-
CACHE.set(key, { value, expiresAt: Date.now() + ttlMs });
|
|
16
|
-
}
|
|
17
|
-
|
|
18
|
-
export function invalidateCache(key) {
|
|
19
|
-
CACHE.delete(key);
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
export function clearCache() {
|
|
23
|
-
CACHE.clear();
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
export function cacheSize() {
|
|
27
|
-
return CACHE.size;
|
|
28
|
-
}
|
|
1
|
+
const CACHE = new Map(); // key → { value, expiresAt }
|
|
2
|
+
const DEFAULT_TTL_MS = Number(process.env.NEMORIS_IDENTITY_CACHE_TTL_MS) || 5 * 60 * 1000; // 5 minutes
|
|
3
|
+
|
|
4
|
+
export function getCached(key) {
|
|
5
|
+
const entry = CACHE.get(key);
|
|
6
|
+
if (!entry) return null;
|
|
7
|
+
if (Date.now() > entry.expiresAt) {
|
|
8
|
+
CACHE.delete(key);
|
|
9
|
+
return null;
|
|
10
|
+
}
|
|
11
|
+
return entry.value;
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export function setCached(key, value, ttlMs = DEFAULT_TTL_MS) {
|
|
15
|
+
CACHE.set(key, { value, expiresAt: Date.now() + ttlMs });
|
|
16
|
+
}
|
|
17
|
+
|
|
18
|
+
export function invalidateCache(key) {
|
|
19
|
+
CACHE.delete(key);
|
|
20
|
+
}
|
|
21
|
+
|
|
22
|
+
export function clearCache() {
|
|
23
|
+
CACHE.clear();
|
|
24
|
+
}
|
|
25
|
+
|
|
26
|
+
export function cacheSize() {
|
|
27
|
+
return CACHE.size;
|
|
28
|
+
}
|