nomarmy 0.1.0-alpha.0

package/scripts/lib.sh

@@ -0,0 +1,198 @@
+#!/usr/bin/env bash
+set -euo pipefail
+nomarmy_root(){ cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd; }
+
+# v1.3 renamed the configuration namespace RAYSON_* -> NOMARMY_*. Anything a
+# user or unit file still exports under the old prefix is translated once, so
+# existing installs keep working while they migrate.
+nomarmy_compat_prefix(){
+  local old new warned=0
+  for old in $(compgen -v | grep '^RAYSON_' || true); do
+    new="NOMARMY_${old#RAYSON_}"
+    [[ -n "${!new:-}" ]] && continue
+    export "$new=${!old}"
+    if [[ "$warned" -eq 0 ]]; then
+      echo "WARN: RAYSON_* environment variables are deprecated; use NOMARMY_* instead." >&2
+      warned=1
+    fi
+    echo "WARN:   $old -> $new" >&2
+  done
+}
+
+nomarmy_available_profiles(){
+  local root; root="$(nomarmy_root)"
+  find "$root/config/profiles" -name '*.env' -exec basename {} .env \; | sort | tr '\n' ' '
+}
+
+# True when the active profile runs inference on a hosted endpoint rather than
+# a local llama-server. Scripts branch on this instead of on the profile name.
+nomarmy_is_cloud(){ [[ "${NOMARMY_EXECUTION:-local}" != "local" ]]; }
+
+nomarmy_validate_cloud(){
+  local missing=()
+  [[ -n "${NOMARMY_BEDROCK_REGION:-}" ]] || missing+=(NOMARMY_BEDROCK_REGION)
+  [[ -n "${NOMARMY_WORKER_MODEL:-}" ]] || missing+=(NOMARMY_WORKER_MODEL)
+  [[ -n "${NOMARMY_WORKER_PROVIDER:-}" ]] || missing+=(NOMARMY_WORKER_PROVIDER)
+  if [[ "${#missing[@]}" -gt 0 ]]; then
+    echo "ERROR: profile '$NOMARMY_PROFILE' is a cloud profile but these are unset: ${missing[*]}" >&2
+    exit 2
+  fi
+  # Fail here rather than let a malformed region surface as an opaque 400 from
+  # Bedrock in the middle of a worker job.
+  if [[ ! "$NOMARMY_BEDROCK_REGION" =~ ^[a-z]{2}(-gov)?-[a-z]+-[0-9]$ ]]; then
+    echo "ERROR: NOMARMY_BEDROCK_REGION='$NOMARMY_BEDROCK_REGION' is not a valid AWS region name." >&2
+    exit 2
+  fi
+  export NOMARMY_BEDROCK_BASE_URL="${NOMARMY_BEDROCK_BASE_URL:-https://bedrock-runtime.${NOMARMY_BEDROCK_REGION}.amazonaws.com/openai/v1}"
+}
+
+# Precedence is environment > profile > common.env. The config files assign
+# unconditionally, so a `${VAR:-default}` in a profile cannot tell a real user
+# override from a value common.env set moments earlier. Snapshot what the caller
+# exported before sourcing anything, and re-apply it afterwards.
+NOMARMY_ENV_OVERRIDES=()
+nomarmy_snapshot_env(){
+  local v
+  NOMARMY_ENV_OVERRIDES=()
+  for v in $(compgen -v | grep '^NOMARMY_' || true); do
+    # NOMARMY_PROFILE is resolved explicitly by load_profile; an explicit
+    # argument must beat an exported one, so it is not restored here.
+    [[ "$v" == "NOMARMY_PROFILE" || "$v" == "NOMARMY_ENV_OVERRIDES" ]] && continue
+    NOMARMY_ENV_OVERRIDES+=("$v=${!v}")
+  done
+}
+nomarmy_restore_env(){
+  local pair name value
+  for pair in ${NOMARMY_ENV_OVERRIDES[@]+"${NOMARMY_ENV_OVERRIDES[@]}"}; do
+    name="${pair%%=*}"; value="${pair#*=}"
+    export "$name=$value"
+  done
+}
+
+# llama.cpp divides -c across -np, so per-nom context is the quotient. Surface
+# the real figure and the two ways a profile can lie about its nom count.
+nomarmy_validate_local(){
+  local parallel="${NOMARMY_LLAMA_PARALLEL:-1}" workers="${NOMARMY_MAX_WORKERS:-1}" ctx="${NOMARMY_LLAMA_CONTEXT:-0}" per_nom
+  [[ "$parallel" -ge 1 ]] || parallel=1
+  per_nom=$(( ctx / parallel ))
+  export NOMARMY_CONTEXT_PER_NOM="$per_nom"
+
+  if [[ "$workers" -gt "$parallel" ]]; then
+    echo "WARN: NOMARMY_MAX_WORKERS=$workers exceeds NOMARMY_LLAMA_PARALLEL=$parallel." >&2
+    echo "WARN: only $parallel nom(s) can infer at once; the rest queue for a slot while" >&2
+    echo "WARN: still holding a Podman sandbox each. Run 'nomarmy sizing' for a recommendation." >&2
+  fi
+  if [[ "$ctx" -gt 0 && "$per_nom" -lt 65536 ]]; then
+    if [[ "$parallel" -gt 1 ]]; then
+      # The surprising case: the operator set 65536 and the slot division ate it.
+      echo "WARN: context per nom is $per_nom ($ctx total / $parallel slots), below the" >&2
+      echo "WARN: v1.3 target of 65536. Raise NOMARMY_LLAMA_CONTEXT to $(( 65536 * parallel ))" >&2
+      echo "WARN: or reduce NOMARMY_LLAMA_PARALLEL. Run 'nomarmy sizing' for a recommendation." >&2
+    else
+      # Single slot: the operator chose this context directly, so just state it.
+      echo "INFO: context per nom is $per_nom; the v1.3 autonomous loop targets 65536." >&2
+    fi
+  fi
+}
+
+load_profile(){
+  local root profile profile_file os
+  nomarmy_compat_prefix
+  nomarmy_snapshot_env
+  root="$(nomarmy_root)"; profile="${1:-${NOMARMY_PROFILE:-}}"; os="$(uname -s)"
+  if [[ -z "$profile" ]]; then
+    if [[ "$os" == Darwin ]]; then profile=macbook-pro
+    elif command -v nvidia-smi >/dev/null 2>&1; then profile=nvidia-linux
+    else profile=cpu-linux; fi
+  fi
+  profile_file="$root/config/profiles/$profile.env"
+  if [[ ! -f "$profile_file" ]]; then
+    echo "ERROR: unknown profile '$profile'. Available: $(nomarmy_available_profiles)" >&2
+    exit 2
+  fi
+  set -a
+  # shellcheck disable=SC1091
+  source "$root/config/common.env"
+  # shellcheck disable=SC1090
+  source "$profile_file"
+  set +a
+  nomarmy_restore_env
+  export NOMARMY_PROFILE="$profile"
+  export NOMARMY_INSTALL_ROOT="${NOMARMY_INSTALL_ROOT/\$HOME/$HOME}"
+
+  if nomarmy_is_cloud; then
+    # Cloud profiles host no local model, so they carry no hardware or OS
+    # requirement and are the only profiles usable on a machine without a GPU.
+    nomarmy_validate_cloud
+  else
+    if [[ "$os" == Darwin && "$profile" != macbook-pro ]]; then
+      echo "ERROR: profile '$profile' requires Linux. Use macbook-pro on macOS." >&2
+      exit 2
+    fi
+    if [[ "$os" == Linux && "$profile" == macbook-pro ]]; then
+      echo "ERROR: profile 'macbook-pro' requires macOS. Use dgx-spark, nvidia-linux, or cpu-linux on Linux." >&2
+      exit 2
+    fi
+    nomarmy_validate_local
+  fi
+
+  if [[ "${NOMARMY_ORCHESTRATOR_TRUST:-frontier}" == "degraded" ]]; then
+    echo "WARN: profile '$profile' runs a DEGRADED orchestrator (${NOMARMY_ORCHESTRATOR_MODEL:-unset})." >&2
+    echo "WARN: coordinator and worker are the same capability class; acceptance is not an independent check." >&2
+    echo "WARN: see policies/reviewer.md before trusting this profile for anything costly to get wrong." >&2
+  fi
+}
+
+need(){ command -v "$1" >/dev/null 2>&1 || { echo "ERROR: missing $1" >&2; return 1; }; }
+
+run_as_root(){
+  if [[ "${EUID}" -eq 0 ]]; then "$@"; else need sudo; sudo "$@"; fi
+}
+
+linux_package_manager(){
+  if command -v apt-get >/dev/null 2>&1; then echo apt
+  elif command -v dnf >/dev/null 2>&1; then echo dnf
+  elif command -v yum >/dev/null 2>&1; then echo yum
+  elif command -v zypper >/dev/null 2>&1; then echo zypper
+  elif command -v pacman >/dev/null 2>&1; then echo pacman
+  elif command -v apk >/dev/null 2>&1; then echo apk
+  fi
+}
+
+install_build_dependencies(){
+  local manager; manager="$(linux_package_manager)"
+  if [[ -z "$manager" ]]; then
+    echo 'ERROR: unsupported Linux package manager. Install a C++ compiler, CMake, curl, Git, and CA certificates, then rerun.' >&2
+    return 1
+  fi
+
+  echo "==> Installing build prerequisites with $manager"
+  case "$manager" in
+    apt) run_as_root apt-get update; run_as_root apt-get install -y build-essential cmake curl git ca-certificates nodejs npm ;;
+    dnf) run_as_root dnf install -y gcc-c++ cmake curl git ca-certificates nodejs npm ;;
+    yum) run_as_root yum install -y gcc-c++ cmake curl git ca-certificates nodejs npm ;;
+    zypper) run_as_root zypper --non-interactive install gcc-c++ cmake curl git ca-certificates nodejs npm ;;
+    pacman) run_as_root pacman --noconfirm --needed -S base-devel cmake curl git ca-certificates nodejs npm ;;
+    apk) run_as_root apk add build-base cmake curl git ca-certificates nodejs npm ;;
+  esac
+}
+
+# Podman is required on every Linux profile, cloud included -- unlike the
+# build toolchain above, which cloud profiles skip entirely.
+install_podman(){
+  local manager; manager="$(linux_package_manager)"
+  if [[ -z "$manager" ]]; then
+    echo 'ERROR: unsupported Linux package manager. Install Podman yourself, then rerun.' >&2
+    return 1
+  fi
+
+  echo "==> Installing Podman with $manager"
+  case "$manager" in
+    apt) run_as_root apt-get update; run_as_root apt-get install -y podman ;;
+    dnf) run_as_root dnf install -y podman ;;
+    yum) run_as_root yum install -y podman ;;
+    zypper) run_as_root zypper --non-interactive install podman ;;
+    pacman) run_as_root pacman --noconfirm --needed -S podman ;;
+    apk) run_as_root apk add podman ;;
+  esac
+}

package/scripts/select-model.mjs

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+
+const root = path.resolve(path.dirname(new URL(import.meta.url).pathname), "..");
+const args = process.argv.slice(2);
+let query = "";
+let repo = "";
+let configPath = path.join(root, "config", "common.env");
+
+for (let index = 0; index < args.length; index += 1) {
+  const value = args[index];
+  if (value === "--repo") repo = args[++index] ?? "";
+  else if (value === "--config") configPath = path.resolve(args[++index] ?? "");
+  else if (value === "--help" || value === "-h") {
+    console.log("Usage: ./scripts/select-model.sh <search term> | --repo <owner/model-GGUF> [--config <env file>]");
+    process.exit(0);
+  } else if (!query) query = value;
+  else throw new Error(`Unexpected argument: ${value}`);
+}
+
+if (!repo && !query) throw new Error("Provide a model search term or --repo <owner/model-GGUF>.");
+if (!process.stdin.isTTY) throw new Error("Model selection requires an interactive terminal so the configuration change can be confirmed.");
+
+const rl = createInterface({ input, output });
+const hf = async (endpoint) => {
+  const response = await fetch(`https://huggingface.co/api/${endpoint}`, {
+    headers: { "User-Agent": "nomArmy-model-selector/1.2" },
+  });
+  if (!response.ok) throw new Error(`Hugging Face request failed: ${response.status} ${response.statusText}`);
+  return response.json();
+};
+
+try {
+  if (!repo) {
+    const models = await hf(`models?search=${encodeURIComponent(query)}&filter=gguf&sort=downloads&direction=-1&limit=12&full=true`);
+    if (!Array.isArray(models) || models.length === 0) {
+      throw new Error(`No GGUF repositories matched "${query}". Try a more specific search or pass --repo owner/model-GGUF.`);
+    }
+    console.log(`\nGGUF repositories matching "${query}":`);
+    models.forEach((model, index) => console.log(`  ${index + 1}. ${model.id} (${model.downloads ?? 0} downloads)`));
+    const choice = Number.parseInt(await rl.question("Choose a repository number (or press Enter to cancel): "), 10);
+    if (!Number.isInteger(choice) || choice < 1 || choice > models.length) throw new Error("Canceled; no model configuration changed.");
+    repo = models[choice - 1].id;
+  }
+
+  if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) throw new Error("Repository must use the form owner/model.");
+  // encodeURIComponent(repo) as one call also escapes the real path-separating
+  // "/" between owner and name into "%2F" -- confirmed live: the HF API
+  // returns 400 for .../models/unsloth%2FMuse-Glimmer-30B-GGUF and 200 for
+  // .../models/unsloth/Muse-Glimmer-30B-GGUF. Encode each segment on its own
+  // and rejoin with a literal "/" so an owner or model name with its own
+  // special characters is still escaped correctly.
+  const details = await hf(`models/${repo.split("/").map(encodeURIComponent).join("/")}?blobs=true`);
+  const files = (details.siblings ?? []).map((file) => file.rfilename).filter((name) => /\.gguf$/i.test(name));
+  if (files.length === 0) throw new Error(`${repo} has no GGUF files. Choose a GGUF conversion repository for llama.cpp.`);
+
+  const preferred = ["Q4_K_M", "Q4_K_S", "Q4_0", "Q5_K_M", "Q5_K_S", "Q6_K", "Q8_0"];
+  const quants = [...new Set(files.map((name) => name.match(/(?:[._-])(IQ\d+_[A-Z0-9_]+|Q\d+_[A-Z0-9_]+)(?:[._-]|\.gguf$)/i)?.[1]?.toUpperCase()).filter(Boolean))];
+  quants.sort((left, right) => (preferred.indexOf(left) === -1 ? 99 : preferred.indexOf(left)) - (preferred.indexOf(right) === -1 ? 99 : preferred.indexOf(right)) || left.localeCompare(right));
+  const quant = quants[0] ?? "Q4_K_M";
+  console.log(`\nSelected repository: ${repo}`);
+  console.log(`Available quants: ${quants.length ? quants.join(", ") : "not detected; llama.cpp will choose its default"}`);
+  const requestedQuant = (await rl.question(`Quantization [${quant}]: `)).trim().toUpperCase() || quant;
+  if (!/^[A-Z0-9_]+$/.test(requestedQuant)) throw new Error("Quantization may contain only uppercase letters, numbers, and underscores.");
+  if (quants.length && !quants.includes(requestedQuant)) throw new Error(`Quantization ${requestedQuant} is not available in ${repo}.`);
+  const defaultAlias = repo.split("/").at(-1).replace(/-GGUF$/i, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+  const alias = (await rl.question(`Local model alias [${defaultAlias}]: `)).trim() || defaultAlias;
+  if (!/^[A-Za-z0-9._-]+$/.test(alias)) throw new Error("Alias may contain only letters, numbers, dots, underscores, and hyphens.");
+
+  console.log(`\nReady to update ${path.relative(root, configPath)}:`);
+  console.log(`  NOMARMY_MODEL_REPO=${repo}`);
+  console.log(`  NOMARMY_MODEL_QUANT=${requestedQuant}`);
+  console.log(`  NOMARMY_MODEL_ALIAS=${alias}`);
+  if ((await rl.question("Apply this model configuration? [y/N] ")).trim().toLowerCase() !== "y") {
+    console.log("Canceled; no model configuration changed.");
+    process.exit(0);
+  }
+
+  const existing = await readFile(configPath, "utf8");
+  const replace = (key, value, text) => {
+    const line = `${key}=${value}`;
+    return new RegExp(`^${key}=.*$`, "m").test(text) ? text.replace(new RegExp(`^${key}=.*$`, "m"), line) : `${text.trimEnd()}\n${line}\n`;
+  };
+  let updated = replace("NOMARMY_MODEL_REPO", repo, existing);
+  updated = replace("NOMARMY_MODEL_QUANT", requestedQuant, updated);
+  updated = replace("NOMARMY_MODEL_ALIAS", alias, updated);
+  await writeFile(configPath, updated);
+  console.log("Configuration updated. Restart inference to download and load the new model:");
+  console.log("  ./scripts/stop-inference.sh");
+  console.log("  ./scripts/start-inference.sh <profile>");
+} finally {
+  rl.close();
+}

package/scripts/select-model.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+exec node "$ROOT/scripts/select-model.mjs" "$@"

package/scripts/setup-sandbox.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+IMAGE="${NOMARMY_AGENT_IMAGE:-openclaw-nomarmy-coder:bookworm}"
+command -v podman >/dev/null || { echo "ERROR: podman not found"; exit 1; }
+command -v openclaw >/dev/null || { echo "ERROR: openclaw not found"; exit 1; }
+
+# Linux runs Podman rootless, directly on the host kernel -- no VM. macOS
+# needs a lightweight VM (`podman machine`), the same category of thing as
+# Docker Desktop but with a 2 GiB default ceiling instead of Docker Desktop's
+# ~31 GiB, and no commercial licensing tier at any company size. Both calls
+# are idempotent by design: an already-initialized/already-running machine
+# just no-ops here, and `podman info` below is the real verification gate,
+# not either exit code.
+if [[ "$(uname -s)" == "Darwin" ]]; then
+  podman machine init 2>/dev/null || true
+  podman machine start 2>/dev/null || true
+fi
+podman info >/dev/null
+
+echo "==> Building $IMAGE"
+podman build -t "$IMAGE" -f "$ROOT/docker/Dockerfile" "$ROOT/docker"
+echo "==> Configuring mandatory sandbox"
+openclaw config set agents.defaults.sandbox.mode all
+openclaw config set agents.defaults.sandbox.backend podman
+openclaw config set agents.defaults.sandbox.scope session
+openclaw config set agents.defaults.sandbox.workspaceAccess rw
+# Still the "docker" config namespace even though the backend is podman --
+# OpenClaw's schema nests both engines' image/network/readOnlyRoot settings
+# under the same key.
+openclaw config set agents.defaults.sandbox.docker.image "$IMAGE"
+openclaw config set agents.defaults.sandbox.docker.network none
+openclaw config set agents.defaults.sandbox.docker.readOnlyRoot true
+openclaw config set tools.exec.host auto
+openclaw config set tools.elevated.enabled false || true
+openclaw sandbox recreate --all || true
+echo "==> Sandbox configured"
+openclaw config get agents.defaults.sandbox

package/scripts/start-inference.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"; source "$ROOT/scripts/lib.sh"; load_profile "${1:-}"
+if nomarmy_is_cloud; then echo "Profile '$NOMARMY_PROFILE' uses hosted inference at $NOMARMY_BEDROCK_BASE_URL; no local llama-server to start."; exit 0; fi
+mkdir -p "$NOMARMY_INSTALL_ROOT/run" "$NOMARMY_INSTALL_ROOT/logs"
+PID="$NOMARMY_INSTALL_ROOT/run/llama.pid"; LOG="$NOMARMY_INSTALL_ROOT/logs/llama-server.log"
+if [[ -f "$PID" ]] && kill -0 "$(cat "$PID")" 2>/dev/null; then echo "llama-server already running PID $(cat "$PID")"; exit 0; fi
+BIN="$NOMARMY_INSTALL_ROOT/llama-server"; [[ -x "$BIN" ]] || { echo "ERROR: $BIN missing"; exit 1; }
+ARGS=(-hf "$NOMARMY_MODEL_REPO:$NOMARMY_MODEL_QUANT" --alias "$NOMARMY_MODEL_ALIAS" --host "$NOMARMY_LLAMA_HOST" --port "$NOMARMY_LLAMA_PORT" -c "$NOMARMY_LLAMA_CONTEXT" -np "$NOMARMY_LLAMA_PARALLEL" -ngl "$NOMARMY_LLAMA_GPU_LAYERS" -t "$NOMARMY_LLAMA_THREADS" --metrics)
+# Everything below is optional advanced tuning, unset by default: nothing
+# here changes behavior for anyone who hasn't set these. See README's
+# "Advanced llama-server tuning" section for what each one is for.
+[[ -n "${NOMARMY_LLAMA_CACHE_TYPE_K:-}" ]] && ARGS+=(--cache-type-k "$NOMARMY_LLAMA_CACHE_TYPE_K")
+[[ -n "${NOMARMY_LLAMA_CACHE_TYPE_V:-}" ]] && ARGS+=(--cache-type-v "$NOMARMY_LLAMA_CACHE_TYPE_V")
+[[ -n "${NOMARMY_LLAMA_FLASH_ATTN:-}" ]] && ARGS+=(--flash-attn "$NOMARMY_LLAMA_FLASH_ATTN")
+[[ -n "${NOMARMY_LLAMA_REASONING_BUDGET:-}" ]] && ARGS+=(--reasoning-budget "$NOMARMY_LLAMA_REASONING_BUDGET")
+if [[ -n "${NOMARMY_LLAMA_REASONING_PRESERVE:-}" ]]; then
+  if [[ "$NOMARMY_LLAMA_REASONING_PRESERVE" == "true" ]]; then ARGS+=(--reasoning-preserve)
+  else ARGS+=(--no-reasoning-preserve)
+  fi
+fi
+# Raw escape hatch for any current or future llama-server flag this script
+# does not name explicitly. Word-split intentionally; quote-embedded spaces
+# are not supported, matching how every other *_EXTRA_ARGS-style env var works.
+if [[ -n "${NOMARMY_LLAMA_EXTRA_ARGS:-}" ]]; then
+  # shellcheck disable=SC2206
+  EXTRA=($NOMARMY_LLAMA_EXTRA_ARGS)
+  ARGS+=("${EXTRA[@]}")
+fi
+nohup "$BIN" "${ARGS[@]}" >"$LOG" 2>&1 &
+echo $! > "$PID"
+echo "Started llama-server PID $(cat "$PID"); first model download/load may take time. Log: $LOG"
+became_healthy=0
+for i in $(seq 1 180); do curl -fsS "http://$NOMARMY_LLAMA_HOST:$NOMARMY_LLAMA_PORT/health" >/dev/null 2>&1 && { became_healthy=1; break; }; sleep 2; done
+if [[ "$became_healthy" -ne 1 ]]; then
+  echo "ERROR: inference did not become healthy; tail $LOG"; tail -80 "$LOG"; exit 1
+fi
+# /health only reports that a model is loaded into slots, not that the backend
+# can actually compute -- a Metal/CUDA allocation failure during load (seen in
+# practice: a real "Insufficient Memory" GPU error, kIOGPUCommandBufferCallbackErrorOutOfMemory)
+# still leaves /health reporting fine. Do one real forward pass before calling it healthy.
+if curl -fsS -m 30 -X POST "http://$NOMARMY_LLAMA_HOST:$NOMARMY_LLAMA_PORT/completion" \
+    -H "Content-Type: application/json" -d '{"prompt":"ok","n_predict":1}' >/dev/null 2>&1; then
+  echo 'Inference healthy'; exit 0
+fi
+echo "ERROR: model loaded but a real completion request failed -- likely a GPU/compute allocation error, not a startup timing issue; tail $LOG"; tail -80 "$LOG"; exit 1

package/scripts/stop-inference.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"; source "$ROOT/scripts/lib.sh"; load_profile "${1:-}"
+if nomarmy_is_cloud; then echo "Profile '$NOMARMY_PROFILE' uses hosted inference; nothing local to stop."; exit 0; fi
+PID="$NOMARMY_INSTALL_ROOT/run/llama.pid"; if [[ -f "$PID" ]] && kill -0 "$(cat "$PID")" 2>/dev/null; then kill "$(cat "$PID")"; fi; rm -f "$PID"; echo stopped

package/scripts/uninstall.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -euo pipefail
+INSTALL_DIR="${NOMARMY_AGENT_INSTALL_DIR:-$HOME/.local/share/nomarmy-local-worker}"
+claude mcp remove nomarmy-local-worker >/dev/null 2>&1 || true
+rm -rf "$INSTALL_DIR"
+echo "Removed nomarmy-local-worker MCP installation. Retained ~/.local/share/nomarmy-local-agents/jobs for recovery/audit."

package/scripts/verify-install.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"; source "$ROOT/scripts/lib.sh"; load_profile "${1:-}"
+fail=0
+check(){ if "$@" >/dev/null 2>&1; then echo "PASS $*"; else echo "FAIL $*"; fail=1; fi; }
+
+check git --version; check podman info; check openclaw --version
+
+if nomarmy_is_cloud; then
+  echo "INFO cloud profile '$NOMARMY_PROFILE' (region $NOMARMY_BEDROCK_REGION): no local inference expected"
+  check aws --version
+  if [[ -n "${NOMARMY_BEDROCK_API_KEY:-${AWS_BEARER_TOKEN_BEDROCK:-}}" ]]; then
+    echo 'PASS Bedrock API key present in environment'
+  else
+    check aws sts get-caller-identity --region "$NOMARMY_BEDROCK_REGION"
+  fi
+  # Catch a model ID that is wrong or not enabled in this account/region here,
+  # rather than as an opaque failure in the middle of a worker job.
+  for model in "$NOMARMY_WORKER_MODEL" "$NOMARMY_WORKER_MODEL_FALLBACK"; do
+    if aws bedrock list-foundation-models --region "$NOMARMY_BEDROCK_REGION" \
+         --query 'modelSummaries[].modelId' --output text 2>/dev/null | grep -qF "$model"; then
+      echo "PASS Bedrock model available: $model"
+    else
+      echo "FAIL Bedrock model not listed in $NOMARMY_BEDROCK_REGION: $model"; fail=1
+    fi
+  done
+else
+  check "$NOMARMY_INSTALL_ROOT/llama-server" --version
+  if [[ "$(uname -s)" == Darwin ]]; then
+    system_profiler SPDisplaysDataType 2>/dev/null | grep -qi 'Metal' && echo 'PASS Apple Metal detected' || echo 'WARN Metal detection inconclusive'
+  elif [[ "$NOMARMY_PROFILE" == dgx-spark || "$NOMARMY_PROFILE" == nvidia-linux ]]; then
+    check nvidia-smi
+  else
+    echo 'PASS CPU-only Linux profile'
+  fi
+  check curl -fsS "http://$NOMARMY_LLAMA_HOST:$NOMARMY_LLAMA_PORT/health"
+fi
+
+openclaw models list --provider "$NOMARMY_WORKER_PROVIDER" | grep -q "$NOMARMY_WORKER_MODEL" \
+  && echo "PASS OpenClaw worker model ($NOMARMY_WORKER_PROVIDER/$NOMARMY_WORKER_MODEL)" \
+  || { echo "FAIL OpenClaw worker model ($NOMARMY_WORKER_PROVIDER/$NOMARMY_WORKER_MODEL)"; fail=1; }
+# The sandbox config keeps its "docker" sub-key namespace regardless of
+# backend, so grepping the whole block for "docker" would falsely pass even
+# when the backend is podman. Check the actual backend value instead.
+SANDBOX_BACKEND="$(openclaw config get agents.defaults.sandbox.backend 2>/dev/null | tr -d '[:space:]"' || true)"
+[[ "$SANDBOX_BACKEND" == "podman" ]] && echo 'PASS Podman sandbox configured' || { echo "FAIL Podman sandbox (backend is '$SANDBOX_BACKEND')"; fail=1; }
+
+# The no-network sandbox is what keeps repository content away from any
+# credential the host process holds. It is a hard requirement on cloud profiles.
+SANDBOX_NET="$(openclaw config get agents.defaults.sandbox.docker.network 2>/dev/null | tr -d '[:space:]"' || true)"
+if [[ "$SANDBOX_NET" == "none" ]]; then
+  echo 'PASS Sandbox network isolated'
+elif nomarmy_is_cloud; then
+  echo "FAIL Sandbox network is '$SANDBOX_NET', must be 'none' on a cloud profile"; fail=1
+else
+  echo "WARN Sandbox network is '$SANDBOX_NET', expected 'none'"
+fi
+
+node --check "$ROOT/mcp/server.mjs" && echo 'PASS MCP syntax'
+
+if [[ "${NOMARMY_ORCHESTRATOR_TRUST:-frontier}" == "degraded" ]]; then
+  echo "WARN Orchestrator trust is DEGRADED (${NOMARMY_ORCHESTRATOR_MODEL:-unset}): acceptance is not an independent check"
+else
+  echo "PASS Orchestrator trust is frontier (${NOMARMY_ORCHESTRATOR_MODEL:-local coordinator})"
+fi
+
+if command -v claude >/dev/null 2>&1; then claude mcp get nomarmy-local-worker >/dev/null 2>&1 && echo 'PASS Claude MCP registration' || echo 'WARN Claude installed but MCP not registered'; else echo 'INFO Claude Code not installed on this node'; fi
+exit "$fail"