open-agents-ai 0.138.47 → 0.138.49

package/dist/index.js

@@ -14273,6 +14273,8 @@ const nexus = new NexusClient(nexusOpts);
 const rooms = new Map();
 let connected = false;
 const blockedPeers = [];
+let cohereActive = false;
+const cohereDedup = new Map(); // queryId -> timestamp (60s TTL dedup)
 
 // NATS invoke relay \u2014 for cross-NAT fallback when direct libp2p dial fails.
 // Both peers connect to wss://demo.nats.io:8443, so NATS request/reply bridges the gap.
@@ -14997,6 +14999,20 @@ async function handleCmd(cmd) {
         break;
       }
 
+      // \u2500\u2500 COHERE distributed inference toggle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+      case 'cohere_enable': {
+        cohereActive = true;
+        dlog('COHERE query handler enabled \u2014 listening on nexus.cohere.query');
+        writeResp(id, { ok: true, output: 'COHERE inference handler enabled' });
+        break;
+      }
+      case 'cohere_disable': {
+        cohereActive = false;
+        dlog('COHERE query handler disabled');
+        writeResp(id, { ok: true, output: 'COHERE inference handler disabled' });
+        break;
+      }
+
       // \u2500\u2500 Metered Inference Exposure \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
       case 'expose': {
         // Clear old inference capabilities before registering new ones
@@ -16000,6 +16016,86 @@ process.on('unhandledRejection', (reason) => {
       dlog('NATS invoke relay setup failed: ' + (_nSetupErr.message || _nSetupErr));
     }
 
+    // \u2500\u2500 COHERE distributed inference handler \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+    // Subscribe to nexus.cohere.query, process through local Ollama,
+    // publish response to nexus.cohere.response.
+    // Privacy: handler constructs ISOLATED messages \u2014 no history, no system prompt.
+    if (_natsConn && _natsCodec) {
+      const _cohereSub = _natsConn.subscribe('nexus.cohere.query');
+      (async function() {
+        for await (const _cMsg of _cohereSub) {
+          if (!cohereActive) continue;
+          try {
+            const _cData = JSON.parse(_natsCodec.decode(_cMsg.data));
+            if (!_cData.queryId || !_cData.query) continue;
+            // Dedup: skip if we already processed this queryId
+            if (cohereDedup.has(_cData.queryId)) continue;
+            cohereDedup.set(_cData.queryId, Date.now());
+            // Prune dedup map (60s TTL)
+            const _cNow = Date.now();
+            for (const [_cK, _cV] of cohereDedup) { if (_cNow - _cV > 60000) cohereDedup.delete(_cK); }
+            // Random jitter 0-2s to prevent all nodes racing
+            await new Promise(function(r) { setTimeout(r, Math.random() * 2000); });
+            // Skip if another node already responded (check dedup again after jitter)
+            if (!cohereActive) continue;
+            dlog('COHERE query: ' + _cData.queryId + ' \u2014 ' + (_cData.query || '').slice(0, 80));
+            const _cStart = Date.now();
+            // Query local Ollama \u2014 ISOLATED context (no history, no system prompt)
+            const _cOllamaUrl = process.env.OLLAMA_HOST || 'http://localhost:11434';
+            let _cModel = '';
+            try {
+              const _cTags = await fetch(_cOllamaUrl + '/api/tags').then(function(r) { return r.json(); });
+              const _cModels = (_cTags.models || []).filter(function(m) { return !/embed|nomic/i.test(m.name); });
+              _cModels.sort(function(a, b) { return (b.size || 0) - (a.size || 0); });
+              _cModel = _cModels.length > 0 ? _cModels[0].name : '';
+            } catch {}
+            if (!_cModel) { dlog('COHERE: no Ollama models available'); continue; }
+            try {
+              const _cResp = await fetch(_cOllamaUrl + '/api/chat', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                  model: _cModel,
+                  messages: [{ role: 'user', content: _cData.query }],
+                  stream: false,
+                }),
+                signal: AbortSignal.timeout(120000),
+              });
+              const _cResult = await _cResp.json();
+              const _cContent = _cResult.message ? _cResult.message.content : '';
+              const _cLatency = Date.now() - _cStart;
+              // Sign response for accountability (HMAC-SHA256 with peerId)
+              const _cSigData = _cData.queryId + ':' + _cContent.slice(0, 200) + ':' + _cModel + ':' + _cLatency;
+              const _cSig = require('crypto').createHmac('sha256', nexus.peerId).update(_cSigData).digest('hex').slice(0, 32);
+              // Scan inbound query for leaked secrets (defense-in-depth)
+              const _cSecretPatterns = [/sk-[a-zA-Z0-9]{20,}/g, /ghp_[a-zA-Z0-9]{36,}/g, /AKIA[0-9A-Z]{16}/g];
+              for (const _cPat of _cSecretPatterns) {
+                if (_cPat.test(_cData.query)) { dlog('COHERE WARNING: inbound query contains potential secret!'); break; }
+              }
+              // Publish response
+              _natsConn.publish('nexus.cohere.response', _natsCodec.encode(JSON.stringify({
+                type: 'cohere.response',
+                queryId: _cData.queryId,
+                content: _cContent,
+                model: _cModel,
+                provider: nexus.peerId,
+                agentName: nexus.agentName || ('oa-' + require('os').hostname().slice(0, 12)),
+                latencyMs: _cLatency,
+                usage: _cResult.eval_count ? { inputTokens: _cResult.prompt_eval_count || 0, outputTokens: _cResult.eval_count || 0 } : undefined,
+                signature: _cSig,
+              })));
+              dlog('COHERE response: ' + _cData.queryId + ' model=' + _cModel + ' ' + _cLatency + 'ms');
+            } catch (_cErr) {
+              dlog('COHERE inference error: ' + (_cErr.message || _cErr));
+            }
+          } catch (_cParseErr) {
+            // Malformed message \u2014 skip
+          }
+        }
+      })().catch(function(e) { dlog('COHERE query handler loop error: ' + (e.message || e)); });
+      dlog('COHERE query handler subscribed to nexus.cohere.query');
+    }
+
     writeStatus();
     console.log('Nexus daemon connected as ' + nexus.peerId);
   } catch (err) {
@@ -16065,9 +16161,11 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
               "budget_set",
               "spend",
               "remote_infer",
-              "cohere_status"
+              "cohere_status",
+              "cohere_enable",
+              "cohere_disable"
             ],
-            description: "The nexus action. MUST call 'connect' first (spawns daemon). Then: join_room, send_message, discover_peers, expose, status, cohere_status, etc."
+            description: "The nexus action. MUST call 'connect' first (spawns daemon). Then: join_room, send_message, discover_peers, expose, status, cohere_status, cohere_enable, cohere_disable, etc."
           },
           room_id: {
             type: "string",
@@ -16280,6 +16378,12 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
             case "cohere_status":
               result = await this.doCohereSummary();
               break;
+            case "cohere_enable":
+              result = await this.sendDaemonCmd("cohere_enable", {});
+              break;
+            case "cohere_disable":
+              result = await this.sendDaemonCmd("cohere_disable", {});
+              break;
             default:
               return { success: false, output: "", error: `Unknown nexus action: ${action}`, durationMs: Date.now() - start };
           }
@@ -44638,6 +44742,9 @@ var init_banner = __esm({
           const row = frame.grid[r];
           if (!row)
             continue;
+          if (r === 1 && this.currentDesign?.type === "default") {
+            buf += `\x1B]8;;file://${process.cwd()}\x07`;
+          }
           let prevFg = -1, prevBg = -1, prevBold = false;
           for (let c3 = 0; c3 < Math.min(this.width, row.length); c3++) {
             const cell = row[c3];
@@ -44657,6 +44764,9 @@ var init_banner = __esm({
             buf += seq + cell.char;
           }
           buf += "\x1B[0m";
+          if (r === 1 && this.currentDesign?.type === "default") {
+            buf += "\x1B]8;;\x07";
+          }
         }
         buf += "\x1B8";
         process.stdout.write(buf);
@@ -52215,7 +52325,7 @@ ${CONTENT_BG_SEQ}`);
        * before readline splits them into garbage text. Scroll wheel support
        * is keyboard-only (Page Up/Down, Shift+Up/Down).
        */
-      hookReadlineScroll(rl, onEscape) {
+      hookReadlineScroll(rl, onEscape, onCtrlO) {
         if (!rl || !rl._ttyWrite)
           return;
         const self = this;
@@ -52233,6 +52343,10 @@ ${CONTENT_BG_SEQ}`);
             if (cursor <= 0)
               return;
           }
+          if (key?.ctrl && key?.name === "o" && onCtrlO) {
+            onCtrlO();
+            return;
+          }
           if (s && (/\x1B\[</.test(s) || /^\d+;\d+;\d*[Mm]/.test(s) || /^;\d+[Mm]/.test(s) || /\[<\d/.test(s))) {
             return;
           }
@@ -54083,6 +54197,12 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
   let _escapeHandler = null;
   statusBar.hookReadlineScroll(rl, () => {
     _escapeHandler?.();
+  }, () => {
+    if (sudoPromptPending) {
+      passwordShowPlain = !passwordShowPlain;
+      if (statusBar.isActive)
+        statusBar.handleResize();
+    }
   });
   rl.output = null;
   if (process.stdin.isTTY && typeof process.stdin.setRawMode === "function") {
@@ -54337,6 +54457,7 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
     }
   })().catch(() => {
   });
+  let passwordShowPlain = false;
   function handleSudoRequest(_command) {
     if (sudoPromptPending)
       return;
@@ -54345,12 +54466,20 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
       return;
     }
     sudoPromptPending = true;
-    const sudoPromptStr = `  ${c2.bold(c2.yellow("\u{1F511} Password:"))} `;
-    if (isNeovimActive()) {
-      writeToNeovimOutput(sudoPromptStr);
-    } else {
-      process.stdout.write(sudoPromptStr);
+    writeContent(() => renderInfo("Password required for sudo. Type below, Enter to submit. Ctrl+O to show/hide."));
+    const pwPrompt = `\x1B[38;5;178m\u{1F511}\x1B[0m `;
+    rl.setPrompt(pwPrompt);
+    if (statusBar.isActive) {
+      const origProvider = statusBar.inputStateProvider;
+      statusBar.inputStateProvider = () => {
+        const state = origProvider?.() ?? { line: "", cursor: 0 };
+        if (passwordShowPlain)
+          return state;
+        return { line: "\u25CF".repeat(state.line.length), cursor: state.cursor };
+      };
+      statusBar.setPromptText(pwPrompt, 3);
     }
+    showPrompt();
   }
   async function handleAskUser(question, options, allowMultiple) {
     if (statusBar?.isActive)
@@ -54586,6 +54715,13 @@ Rationale: ${proposal.rationale}${provenanceNote}`;
       statusBar.setCohereActive(cohereEnabled);
       saveProjectSettings(repoRoot, { cohere: cohereEnabled });
       saveGlobalSettings({ cohere: cohereEnabled });
+      try {
+        const { NexusTool: NexusTool2 } = __require("../../execution/dist/tools/nexus.js");
+        const nexusTool = new NexusTool2(repoRoot);
+        nexusTool.execute({ action: cohereEnabled ? "cohere_enable" : "cohere_disable" }).catch(() => {
+        });
+      } catch {
+      }
       return cohereEnabled;
     },
     isCohere() {
@@ -55686,28 +55822,26 @@ ${result.content.slice(0, 2e3)}${result.content.length > 2e3 ? "\n[truncated]" :
   async function processLine(input) {
     if (depSudoPromptPending && depSudoResolver) {
       const pw = input.trim();
-      const pwRecvMsg = `\r\x1B[K  ${c2.dim("\u{1F511} Password received")}
-`;
-      if (isNeovimActive()) {
-        writeToNeovimOutput(pwRecvMsg);
-      } else {
-        process.stdout.write(pwRecvMsg);
-      }
+      passwordShowPlain = false;
+      statusBar.setInputStateProvider(() => ({
+        line: rl.line ?? "",
+        cursor: rl.cursor ?? 0
+      }));
+      writeContent(() => renderInfo("\u{1F511} Password received"));
       depSudoResolver(pw || null);
       showPrompt();
       return;
     }
     if (sudoPromptPending && activeTask) {
       sudoPromptPending = false;
+      passwordShowPlain = false;
       sessionSudoPassword = input;
       activeTask.runner.setSudoPassword(input);
-      const pwRecvMsg2 = `\r\x1B[K  ${c2.dim("\u{1F511} Password received")}
-`;
-      if (isNeovimActive()) {
-        writeToNeovimOutput(pwRecvMsg2);
-      } else {
-        process.stdout.write(pwRecvMsg2);
-      }
+      statusBar.setInputStateProvider(() => ({
+        line: rl.line ?? "",
+        cursor: rl.cursor ?? 0
+      }));
+      writeContent(() => renderInfo("\u{1F511} Password received"));
       showPrompt();
       return;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.138.47",
+  "version": "0.138.49",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",