nodal-agents 0.5.0 → 0.5.2

package/README.md

@@ -215,7 +215,7 @@ pnpm deps:check   # runs locally and in CI before every release
 
 ## Status
 
-**Current release:** `0.5.0` on npm `latest`. Used daily by the
+**Current release:** `0.5.2` on npm `latest`. Used daily by the
 maintainer, stable enough for personal production. Pre-1.0 — breaking
 changes are still possible between minors.
 
@@ -270,6 +270,14 @@ changes are still possible between minors.
 - ROOT agent — your first orchestrator automatically becomes the workspace ROOT (the single top-level agent; later orchestrators slot under it). It can create *and update* skills, create agents and assign them, and create MCP servers + API connectors — each gated by per-grant toggles + an autonomy/approval level (powers start off, opt in per grant). Provisioning verifies before it writes (an MCP server is connected and its tools listed first); skill authoring is grounded in the workspace's real tools (a linter rejects skills referencing tools the agent doesn't have)
 - Office file editing — Excel in-place edit, Word/PowerPoint create, in the agent workspace (office-editing skill)
 - Multiple filesystem folders per agent (sandboxed `file_*` tools)
+- **Shell execution** — agents can run shell commands in their workspace
+  (`run_command`: install deps, run scripts, build steps) via an opt-in
+  `command-execution` skill. Safe-by-default: every command pauses for your
+  approval, with an optional per-agent auto-run ("Yolo"). On a shared / LAN
+  install auto-run is gated behind an explicit workspace-owner opt-in and
+  **enforced at execution time** — flip the workspace switch off and even an
+  already-trusted agent drops back to requiring approval. A live bell surfaces
+  pending approvals from anywhere in the dashboard
 - Telegram delivery (long-poll, group filters, multi-agent routing,
   delegation gracefulness) — exactly-once delivery contract: anti-spam guard
   against runaway message loops + a guard that re-prompts (then fails loud)

package/cli.js

@@ -12284,7 +12284,12 @@ var init_entities = __esm({
         reflectionEnabled: boolean("reflection_enabled").notNull().default(false),
         // Controls whether agent-authored skills are auto-assigned to the authoring
         // agent ('auto') or queued for the entity owner to approve ('approval').
-        skillAssignmentMode: text("skill_assignment_mode").notNull().default("approval").$type()
+        skillAssignmentMode: text("skill_assignment_mode").notNull().default("approval").$type(),
+        // Allows the workspace OWNER to opt into Yolo (auto-approve run_command)
+        // even in non-local-trust (LAN/local-auth) mode. Off by default: in
+        // local-auth mode, commands always require approval unless the owner
+        // explicitly opts in here.
+        lanCommandYolo: boolean("lan_command_yolo").notNull().default(false)
       },
       (table) => [
         uniqueIndex("entities_mcp_token_idx").on(table.mcpToken),
@@ -13997,17 +14002,13 @@ async function runUp(opts = {}) {
       await stopOrphanPostgres();
       if (isPidAlive(pgOrphan.pid)) {
         try {
-          if (process.platform === "win32") {
-            await execa4("taskkill", ["/T", "/F", "/PID", String(pgOrphan.pid)], { reject: false });
-          } else {
-            process.kill(pgOrphan.pid, "SIGKILL");
-          }
+          process.kill(pgOrphan.pid, "SIGKILL");
         } catch {
         }
         await waitForPidDead(pgOrphan.pid, 5e3);
       }
       if (isPidAlive(pgOrphan.pid)) {
-        const killCmd = process.platform === "win32" ? `taskkill /T /F /PID ${pgOrphan.pid}` : `kill -9 ${pgOrphan.pid}`;
+        const killCmd = process.platform === "win32" ? `powershell Stop-Process -Id ${pgOrphan.pid} -Force` : `kill -9 ${pgOrphan.pid}`;
         throw new Error(
           `An orphaned Postgres (pid ${pgOrphan.pid}) is still running and holds the shared-memory block for the data dir. Rotating ports won't help \u2014 the SHM segment is keyed to the data dir, not the port.
   Fix: run \`nodal-agents down\`, then \`${killCmd}\`. If it persists, reboot to clear the orphan kernel object. No data is lost \u2014 pg-data is preserved.`

package/migrations/0037_agent_jobs_total_cost_usd.sql

@@ -1,11 +1,11 @@
--- Real dollar cost budget (Guard 1e). Track what was ACTUALLY BILLED per job
--- (not token proxies) so the runner can enforce a hard dollar cap and the
--- dashboard can surface real $/job cost. Populated by OpenRouter when
--- `usage:{include:true}` is sent — `usage.cost` in the response lands in
--- providerMetadata.openrouter.usage.cost on the AI SDK result. NULL / 0 for
--- providers that don't report per-call cost (Anthropic, Ollama, etc.).
---
--- Stored as real (float4) — sub-cent values are common (e.g. $0.00056).
--- Default 0 so existing rows are valid without a backfill.
-ALTER TABLE "agent_jobs"
-  ADD COLUMN IF NOT EXISTS "total_cost_usd" real DEFAULT 0;
+-- Real dollar cost budget (Guard 1e). Track what was ACTUALLY BILLED per job
+-- (not token proxies) so the runner can enforce a hard dollar cap and the
+-- dashboard can surface real $/job cost. Populated by OpenRouter when
+-- `usage:{include:true}` is sent — `usage.cost` in the response lands in
+-- providerMetadata.openrouter.usage.cost on the AI SDK result. NULL / 0 for
+-- providers that don't report per-call cost (Anthropic, Ollama, etc.).
+--
+-- Stored as real (float4) — sub-cent values are common (e.g. $0.00056).
+-- Default 0 so existing rows are valid without a backfill.
+ALTER TABLE "agent_jobs"
+  ADD COLUMN IF NOT EXISTS "total_cost_usd" real DEFAULT 0;

package/migrations/0038_agent_jobs_served_provider.sql

@@ -1,7 +1,7 @@
--- Served-upstream observability (P0-B). Tracks which upstream provider actually
--- handled a given job execution (e.g. 'DeepSeek' when routed via OpenRouter's
--- provider-order preference). Populated from providerMetadata.openrouter.provider
--- on each LLM call; only the LAST non-empty value is stored per job. NULL for
--- providers that don't report upstream identity (Anthropic, Ollama, etc.).
-ALTER TABLE "agent_jobs"
-  ADD COLUMN IF NOT EXISTS "served_provider" text;
+-- Served-upstream observability (P0-B). Tracks which upstream provider actually
+-- handled a given job execution (e.g. 'DeepSeek' when routed via OpenRouter's
+-- provider-order preference). Populated from providerMetadata.openrouter.provider
+-- on each LLM call; only the LAST non-empty value is stored per job. NULL for
+-- providers that don't report upstream identity (Anthropic, Ollama, etc.).
+ALTER TABLE "agent_jobs"
+  ADD COLUMN IF NOT EXISTS "served_provider" text;

package/migrations/0039_agent_skills_learning_loop.sql

@@ -1,20 +1,20 @@
--- Learning-loop columns for agent_skills (Phase A).
--- created_by: provenance — who created this skill ('user' | 'system' | 'agent').
---   Default 'user' for forward-compatibility; backfilled to 'system' for
---   community/bundled skills below.
--- state: lifecycle state — 'active' (default) | 'stale' | 'archived'.
---   No hard-delete path — skills are archived, never deleted.
--- last_used_at: fire-and-forget timestamp, bumped each time the skill is injected
---   into a job's system prompt. NULL = never used. Used to surface stale skills.
--- patch_count: how many agent-authored patches have been applied. Starts at 0.
--- archived_at: when the skill was moved to state='archived'. NULL while active.
-
-ALTER TABLE "agent_skills"
-  ADD COLUMN IF NOT EXISTS "created_by" text NOT NULL DEFAULT 'user',
-  ADD COLUMN IF NOT EXISTS "state" text NOT NULL DEFAULT 'active',
-  ADD COLUMN IF NOT EXISTS "last_used_at" timestamptz,
-  ADD COLUMN IF NOT EXISTS "patch_count" integer NOT NULL DEFAULT 0,
-  ADD COLUMN IF NOT EXISTS "archived_at" timestamptz;
-
--- Backfill: community/bundled skills are 'system' provenance
-UPDATE "agent_skills" SET "created_by" = 'system' WHERE "is_community" = true;
+-- Learning-loop columns for agent_skills (Phase A).
+-- created_by: provenance — who created this skill ('user' | 'system' | 'agent').
+--   Default 'user' for forward-compatibility; backfilled to 'system' for
+--   community/bundled skills below.
+-- state: lifecycle state — 'active' (default) | 'stale' | 'archived'.
+--   No hard-delete path — skills are archived, never deleted.
+-- last_used_at: fire-and-forget timestamp, bumped each time the skill is injected
+--   into a job's system prompt. NULL = never used. Used to surface stale skills.
+-- patch_count: how many agent-authored patches have been applied. Starts at 0.
+-- archived_at: when the skill was moved to state='archived'. NULL while active.
+
+ALTER TABLE "agent_skills"
+  ADD COLUMN IF NOT EXISTS "created_by" text NOT NULL DEFAULT 'user',
+  ADD COLUMN IF NOT EXISTS "state" text NOT NULL DEFAULT 'active',
+  ADD COLUMN IF NOT EXISTS "last_used_at" timestamptz,
+  ADD COLUMN IF NOT EXISTS "patch_count" integer NOT NULL DEFAULT 0,
+  ADD COLUMN IF NOT EXISTS "archived_at" timestamptz;
+
+-- Backfill: community/bundled skills are 'system' provenance
+UPDATE "agent_skills" SET "created_by" = 'system' WHERE "is_community" = true;

package/migrations/0040_entities_last_curator_run.sql

@@ -1,7 +1,7 @@
--- Tier-2 CURATOR cadence tracker.
--- Per-entity timestamp of the last LLM consolidation pass. NULL = never run.
--- Used by run-curator.ts to gate the first-run-deferred pattern (skip first
--- run, set to now(), run on subsequent ticks beyond CURATOR_INTERVAL_DAYS).
-
-ALTER TABLE "entities"
-  ADD COLUMN IF NOT EXISTS "last_curator_run_at" timestamptz;
+-- Tier-2 CURATOR cadence tracker.
+-- Per-entity timestamp of the last LLM consolidation pass. NULL = never run.
+-- Used by run-curator.ts to gate the first-run-deferred pattern (skip first
+-- run, set to now(), run on subsequent ticks beyond CURATOR_INTERVAL_DAYS).
+
+ALTER TABLE "entities"
+  ADD COLUMN IF NOT EXISTS "last_curator_run_at" timestamptz;

package/migrations/0041_reflection_enabled.sql

@@ -1 +1 @@
-ALTER TABLE entities ADD COLUMN reflection_enabled boolean NOT NULL DEFAULT false;
+ALTER TABLE entities ADD COLUMN reflection_enabled boolean NOT NULL DEFAULT false;

package/migrations/0042_drop_agent_runs.sql

@@ -1 +1 @@
-DROP TABLE IF EXISTS "agent_runs" CASCADE;
+DROP TABLE IF EXISTS "agent_runs" CASCADE;

package/migrations/0043_skill_assignment.sql

@@ -1,2 +1,2 @@
-ALTER TABLE entities ADD COLUMN skill_assignment_mode text NOT NULL DEFAULT 'approval';
-ALTER TABLE agent_skills ADD COLUMN created_by_agent_id uuid REFERENCES agents(id) ON DELETE SET NULL;
+ALTER TABLE entities ADD COLUMN skill_assignment_mode text NOT NULL DEFAULT 'approval';
+ALTER TABLE agent_skills ADD COLUMN created_by_agent_id uuid REFERENCES agents(id) ON DELETE SET NULL;

package/migrations/0044_entities_lan_command_yolo.sql

@@ -0,0 +1 @@
+ALTER TABLE "entities" ADD COLUMN "lan_command_yolo" boolean DEFAULT false NOT NULL;

package/migrations/meta/_journal.json

@@ -302,6 +302,13 @@
       "when": 1782300000000,
       "tag": "0043_skill_assignment",
       "breakpoints": true
+    },
+    {
+      "idx": 44,
+      "version": "7",
+      "when": 1782400000000,
+      "tag": "0044_entities_lan_command_yolo",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodal-agents",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Local-first AI agent platform with a web dashboard — install in one command.",
   "license": "MIT",
   "repository": {