nodal-agents 0.5.0 → 0.5.3

package/README.md

@@ -215,7 +215,7 @@ pnpm deps:check   # runs locally and in CI before every release
 
 ## Status
 
-**Current release:** `0.5.0` on npm `latest`. Used daily by the
+**Current release:** `0.5.2` on npm `latest`. Used daily by the
 maintainer, stable enough for personal production. Pre-1.0 — breaking
 changes are still possible between minors.
 
@@ -270,6 +270,14 @@ changes are still possible between minors.
 - ROOT agent — your first orchestrator automatically becomes the workspace ROOT (the single top-level agent; later orchestrators slot under it). It can create *and update* skills, create agents and assign them, and create MCP servers + API connectors — each gated by per-grant toggles + an autonomy/approval level (powers start off, opt in per grant). Provisioning verifies before it writes (an MCP server is connected and its tools listed first); skill authoring is grounded in the workspace's real tools (a linter rejects skills referencing tools the agent doesn't have)
 - Office file editing — Excel in-place edit, Word/PowerPoint create, in the agent workspace (office-editing skill)
 - Multiple filesystem folders per agent (sandboxed `file_*` tools)
+- **Shell execution** — agents can run shell commands in their workspace
+  (`run_command`: install deps, run scripts, build steps) via an opt-in
+  `command-execution` skill. Safe-by-default: every command pauses for your
+  approval, with an optional per-agent auto-run ("Yolo"). On a shared / LAN
+  install auto-run is gated behind an explicit workspace-owner opt-in and
+  **enforced at execution time** — flip the workspace switch off and even an
+  already-trusted agent drops back to requiring approval. A live bell surfaces
+  pending approvals from anywhere in the dashboard
 - Telegram delivery (long-poll, group filters, multi-agent routing,
   delegation gracefulness) — exactly-once delivery contract: anti-spam guard
   against runaway message loops + a guard that re-prompts (then fails loud)

package/cli.js

@@ -12127,12 +12127,16 @@ var init_root_agent = __esm({
     AutonomyLevelSchema = z18.enum(["propose_confirm", "destructive_gate", "fully_autonomous"]);
     RootGrantsSchema = z18.object({
       createAgent: z18.boolean(),
+      updateAgent: z18.boolean(),
       attachAgent: z18.boolean(),
       createSkill: z18.boolean(),
       updateSkill: z18.boolean(),
       assignSkill: z18.boolean(),
       createMcp: z18.boolean(),
+      attachMcp: z18.boolean(),
       createConnector: z18.boolean(),
+      attachConnector: z18.boolean(),
+      manageSchedules: z18.boolean(),
       autonomy: AutonomyLevelSchema
     });
   }
@@ -12152,6 +12156,13 @@ var init_model_catalog = __esm({
   }
 });
 
+// ../../packages/shared/src/timezone.ts
+var init_timezone = __esm({
+  "../../packages/shared/src/timezone.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/shared/src/index.ts
 var init_src2 = __esm({
   "../../packages/shared/src/index.ts"() {
@@ -12177,6 +12188,7 @@ var init_src2 = __esm({
     init_root_agent();
     init_connector_catalog();
     init_model_catalog();
+    init_timezone();
   }
 });
 
@@ -12265,6 +12277,11 @@ var init_entities = __esm({
         icon: text("icon").default("\u{1F3E2}"),
         industry: text("industry"),
         goal: text("goal"),
+        // IANA timezone for this workspace (e.g. 'Europe/Paris'). Captured from the
+        // user's browser at onboarding, editable in Settings. Authoritative for the
+        // agent: it reads the current local time and schedules crons in THIS zone.
+        // null = fall back to the server's resolved timezone (legacy / pre-capture).
+        timezone: text("timezone"),
         mcpToken: uuid("mcp_token").defaultRandom(),
         // ROOT agent designation (Wave 1 — V4 ROOT agent, 2026-05-29).
         // Points at the agent that receives meta-tools. Set null when no root
@@ -12284,7 +12301,12 @@ var init_entities = __esm({
         reflectionEnabled: boolean("reflection_enabled").notNull().default(false),
         // Controls whether agent-authored skills are auto-assigned to the authoring
         // agent ('auto') or queued for the entity owner to approve ('approval').
-        skillAssignmentMode: text("skill_assignment_mode").notNull().default("approval").$type()
+        skillAssignmentMode: text("skill_assignment_mode").notNull().default("approval").$type(),
+        // Allows the workspace OWNER to opt into Yolo (auto-approve run_command)
+        // even in non-local-trust (LAN/local-auth) mode. Off by default: in
+        // local-auth mode, commands always require approval unless the owner
+        // explicitly opts in here.
+        lanCommandYolo: boolean("lan_command_yolo").notNull().default(false)
       },
       (table) => [
         uniqueIndex("entities_mcp_token_idx").on(table.mcpToken),
@@ -12991,6 +13013,12 @@ var init_skills = __esm({
         approvalOverrides: jsonb("approval_overrides").default(sql`'{}'::jsonb`),
         useCustomInstructions: boolean("use_custom_instructions").notNull().default(false),
         enabledOperations: text("enabled_operations").array(),
+        // Per-skill × per-agent authorization to EXECUTE the skill's bundled scripts
+        // (installed_scripts) via run_skill_script. Owner opt-in, default FALSE. A
+        // community skill may ship .py/.sh scripts, but the runtime refuses to run
+        // them unless the owner flips this for a specific agent × skill — the
+        // case-by-case execution gate. Loaded by the runner into the ToolContext.
+        scriptsAuthorized: boolean("scripts_authorized").notNull().default(false),
         createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
       },
       () => []
@@ -13016,6 +13044,10 @@ var init_schedules = __esm({
         type: text("type").notNull().default("cron"),
         name: text("name").notNull(),
         cronExpr: text("cron_expr").notNull(),
+        // IANA timezone the cron is evaluated in (e.g. 'Asia/Singapore'). null = the
+        // server's local timezone (legacy rows). New schedules capture an explicit tz
+        // so "9am" stays 9am in the user's zone regardless of where the runner hosts.
+        timezone: text("timezone"),
         task: text("task"),
         objectives: text("objectives"),
         active: boolean("active").default(true),
@@ -13347,6 +13379,20 @@ var init_chat_messages = __esm({
   }
 });
 
+// ../../packages/db/src/schema/app-settings.ts
+var appSettings;
+var init_app_settings = __esm({
+  "../../packages/db/src/schema/app-settings.ts"() {
+    "use strict";
+    init_pg_core();
+    appSettings = pgTable("app_settings", {
+      key: text("key").primaryKey(),
+      value: text("value").default("").notNull(),
+      updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow().notNull()
+    });
+  }
+});
+
 // ../../packages/db/src/schema/index.ts
 var schema_exports = {};
 __export(schema_exports, {
@@ -13384,6 +13430,7 @@ __export(schema_exports, {
   agentTasks: () => agentTasks,
   agentWorkspaces: () => agentWorkspaces,
   agents: () => agents,
+  appSettings: () => appSettings,
   approvalRequests: () => approvalRequests,
   approvalRules: () => approvalRules,
   chatMessages: () => chatMessages,
@@ -13430,6 +13477,7 @@ var init_schema2 = __esm({
     init_agent_connector_assignments();
     init_agent_workspaces();
     init_chat_messages();
+    init_app_settings();
   }
 });
 
@@ -13513,6 +13561,14 @@ var init_retention = __esm({
   }
 });
 
+// ../../packages/db/src/repos/app-settings.ts
+var init_app_settings2 = __esm({
+  "../../packages/db/src/repos/app-settings.ts"() {
+    "use strict";
+    init_schema2();
+  }
+});
+
 // ../../packages/db/src/index.ts
 var init_src4 = __esm({
   "../../packages/db/src/index.ts"() {
@@ -13524,6 +13580,7 @@ var init_src4 = __esm({
     init_agents2();
     init_skills2();
     init_retention();
+    init_app_settings2();
     init_drizzle_orm();
   }
 });
@@ -13997,17 +14054,13 @@ async function runUp(opts = {}) {
       await stopOrphanPostgres();
       if (isPidAlive(pgOrphan.pid)) {
         try {
-          if (process.platform === "win32") {
-            await execa4("taskkill", ["/T", "/F", "/PID", String(pgOrphan.pid)], { reject: false });
-          } else {
-            process.kill(pgOrphan.pid, "SIGKILL");
-          }
+          process.kill(pgOrphan.pid, "SIGKILL");
         } catch {
         }
         await waitForPidDead(pgOrphan.pid, 5e3);
       }
       if (isPidAlive(pgOrphan.pid)) {
-        const killCmd = process.platform === "win32" ? `taskkill /T /F /PID ${pgOrphan.pid}` : `kill -9 ${pgOrphan.pid}`;
+        const killCmd = process.platform === "win32" ? `powershell Stop-Process -Id ${pgOrphan.pid} -Force` : `kill -9 ${pgOrphan.pid}`;
         throw new Error(
           `An orphaned Postgres (pid ${pgOrphan.pid}) is still running and holds the shared-memory block for the data dir. Rotating ports won't help \u2014 the SHM segment is keyed to the data dir, not the port.
   Fix: run \`nodal-agents down\`, then \`${killCmd}\`. If it persists, reboot to clear the orphan kernel object. No data is lost \u2014 pg-data is preserved.`

package/migrations/0037_agent_jobs_total_cost_usd.sql

@@ -1,11 +1,11 @@
--- Real dollar cost budget (Guard 1e). Track what was ACTUALLY BILLED per job
--- (not token proxies) so the runner can enforce a hard dollar cap and the
--- dashboard can surface real $/job cost. Populated by OpenRouter when
--- `usage:{include:true}` is sent — `usage.cost` in the response lands in
--- providerMetadata.openrouter.usage.cost on the AI SDK result. NULL / 0 for
--- providers that don't report per-call cost (Anthropic, Ollama, etc.).
---
--- Stored as real (float4) — sub-cent values are common (e.g. $0.00056).
--- Default 0 so existing rows are valid without a backfill.
-ALTER TABLE "agent_jobs"
-  ADD COLUMN IF NOT EXISTS "total_cost_usd" real DEFAULT 0;
+-- Real dollar cost budget (Guard 1e). Track what was ACTUALLY BILLED per job
+-- (not token proxies) so the runner can enforce a hard dollar cap and the
+-- dashboard can surface real $/job cost. Populated by OpenRouter when
+-- `usage:{include:true}` is sent — `usage.cost` in the response lands in
+-- providerMetadata.openrouter.usage.cost on the AI SDK result. NULL / 0 for
+-- providers that don't report per-call cost (Anthropic, Ollama, etc.).
+--
+-- Stored as real (float4) — sub-cent values are common (e.g. $0.00056).
+-- Default 0 so existing rows are valid without a backfill.
+ALTER TABLE "agent_jobs"
+  ADD COLUMN IF NOT EXISTS "total_cost_usd" real DEFAULT 0;

package/migrations/0038_agent_jobs_served_provider.sql

@@ -1,7 +1,7 @@
--- Served-upstream observability (P0-B). Tracks which upstream provider actually
--- handled a given job execution (e.g. 'DeepSeek' when routed via OpenRouter's
--- provider-order preference). Populated from providerMetadata.openrouter.provider
--- on each LLM call; only the LAST non-empty value is stored per job. NULL for
--- providers that don't report upstream identity (Anthropic, Ollama, etc.).
-ALTER TABLE "agent_jobs"
-  ADD COLUMN IF NOT EXISTS "served_provider" text;
+-- Served-upstream observability (P0-B). Tracks which upstream provider actually
+-- handled a given job execution (e.g. 'DeepSeek' when routed via OpenRouter's
+-- provider-order preference). Populated from providerMetadata.openrouter.provider
+-- on each LLM call; only the LAST non-empty value is stored per job. NULL for
+-- providers that don't report upstream identity (Anthropic, Ollama, etc.).
+ALTER TABLE "agent_jobs"
+  ADD COLUMN IF NOT EXISTS "served_provider" text;

package/migrations/0039_agent_skills_learning_loop.sql

@@ -1,20 +1,20 @@
--- Learning-loop columns for agent_skills (Phase A).
--- created_by: provenance — who created this skill ('user' | 'system' | 'agent').
---   Default 'user' for forward-compatibility; backfilled to 'system' for
---   community/bundled skills below.
--- state: lifecycle state — 'active' (default) | 'stale' | 'archived'.
---   No hard-delete path — skills are archived, never deleted.
--- last_used_at: fire-and-forget timestamp, bumped each time the skill is injected
---   into a job's system prompt. NULL = never used. Used to surface stale skills.
--- patch_count: how many agent-authored patches have been applied. Starts at 0.
--- archived_at: when the skill was moved to state='archived'. NULL while active.
-
-ALTER TABLE "agent_skills"
-  ADD COLUMN IF NOT EXISTS "created_by" text NOT NULL DEFAULT 'user',
-  ADD COLUMN IF NOT EXISTS "state" text NOT NULL DEFAULT 'active',
-  ADD COLUMN IF NOT EXISTS "last_used_at" timestamptz,
-  ADD COLUMN IF NOT EXISTS "patch_count" integer NOT NULL DEFAULT 0,
-  ADD COLUMN IF NOT EXISTS "archived_at" timestamptz;
-
--- Backfill: community/bundled skills are 'system' provenance
-UPDATE "agent_skills" SET "created_by" = 'system' WHERE "is_community" = true;
+-- Learning-loop columns for agent_skills (Phase A).
+-- created_by: provenance — who created this skill ('user' | 'system' | 'agent').
+--   Default 'user' for forward-compatibility; backfilled to 'system' for
+--   community/bundled skills below.
+-- state: lifecycle state — 'active' (default) | 'stale' | 'archived'.
+--   No hard-delete path — skills are archived, never deleted.
+-- last_used_at: fire-and-forget timestamp, bumped each time the skill is injected
+--   into a job's system prompt. NULL = never used. Used to surface stale skills.
+-- patch_count: how many agent-authored patches have been applied. Starts at 0.
+-- archived_at: when the skill was moved to state='archived'. NULL while active.
+
+ALTER TABLE "agent_skills"
+  ADD COLUMN IF NOT EXISTS "created_by" text NOT NULL DEFAULT 'user',
+  ADD COLUMN IF NOT EXISTS "state" text NOT NULL DEFAULT 'active',
+  ADD COLUMN IF NOT EXISTS "last_used_at" timestamptz,
+  ADD COLUMN IF NOT EXISTS "patch_count" integer NOT NULL DEFAULT 0,
+  ADD COLUMN IF NOT EXISTS "archived_at" timestamptz;
+
+-- Backfill: community/bundled skills are 'system' provenance
+UPDATE "agent_skills" SET "created_by" = 'system' WHERE "is_community" = true;

package/migrations/0040_entities_last_curator_run.sql

@@ -1,7 +1,7 @@
--- Tier-2 CURATOR cadence tracker.
--- Per-entity timestamp of the last LLM consolidation pass. NULL = never run.
--- Used by run-curator.ts to gate the first-run-deferred pattern (skip first
--- run, set to now(), run on subsequent ticks beyond CURATOR_INTERVAL_DAYS).
-
-ALTER TABLE "entities"
-  ADD COLUMN IF NOT EXISTS "last_curator_run_at" timestamptz;
+-- Tier-2 CURATOR cadence tracker.
+-- Per-entity timestamp of the last LLM consolidation pass. NULL = never run.
+-- Used by run-curator.ts to gate the first-run-deferred pattern (skip first
+-- run, set to now(), run on subsequent ticks beyond CURATOR_INTERVAL_DAYS).
+
+ALTER TABLE "entities"
+  ADD COLUMN IF NOT EXISTS "last_curator_run_at" timestamptz;

package/migrations/0041_reflection_enabled.sql

@@ -1 +1 @@
-ALTER TABLE entities ADD COLUMN reflection_enabled boolean NOT NULL DEFAULT false;
+ALTER TABLE entities ADD COLUMN reflection_enabled boolean NOT NULL DEFAULT false;

package/migrations/0042_drop_agent_runs.sql

@@ -1 +1 @@
-DROP TABLE IF EXISTS "agent_runs" CASCADE;
+DROP TABLE IF EXISTS "agent_runs" CASCADE;

package/migrations/0043_skill_assignment.sql

@@ -1,2 +1,2 @@
-ALTER TABLE entities ADD COLUMN skill_assignment_mode text NOT NULL DEFAULT 'approval';
-ALTER TABLE agent_skills ADD COLUMN created_by_agent_id uuid REFERENCES agents(id) ON DELETE SET NULL;
+ALTER TABLE entities ADD COLUMN skill_assignment_mode text NOT NULL DEFAULT 'approval';
+ALTER TABLE agent_skills ADD COLUMN created_by_agent_id uuid REFERENCES agents(id) ON DELETE SET NULL;

package/migrations/0044_entities_lan_command_yolo.sql

@@ -0,0 +1 @@
+ALTER TABLE "entities" ADD COLUMN "lan_command_yolo" boolean DEFAULT false NOT NULL;

package/migrations/0045_app_settings.sql

@@ -0,0 +1,5 @@
+CREATE TABLE "app_settings" (
+	"key" text PRIMARY KEY NOT NULL,
+	"value" text DEFAULT '' NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);

package/migrations/0046_skill_assignment_scripts_authorized.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent_skill_assignments" ADD COLUMN "scripts_authorized" boolean DEFAULT false NOT NULL;

package/migrations/0047_agent_schedules_timezone.sql

@@ -0,0 +1 @@
+ALTER TABLE "agent_schedules" ADD COLUMN "timezone" text;

package/migrations/0048_entities_timezone.sql

@@ -0,0 +1 @@
+ALTER TABLE "entities" ADD COLUMN "timezone" text;