openclaw-aegis 1.5.1 → 1.5.3

package/dist/cli/index.js

@@ -116,6 +116,7 @@ var aegisConfigSchema = import_zod.z.object({
     l1BackoffMultiplier: import_zod.z.number().min(1).default(3),
     l2MaxAttempts: import_zod.z.number().int().min(1).default(2),
     l2CooldownMs: import_zod.z.number().int().min(1e3).default(6e4),
+    l3Enabled: import_zod.z.boolean().default(false),
     l3MaxAttempts: import_zod.z.number().int().min(1).default(2),
     l3CooldownMs: import_zod.z.number().int().min(1e3).default(3e4),
     l3SafeModeArgs: import_zod.z.array(import_zod.z.string()).default(["--no-plugins", "--default-routes"]),
@@ -3912,6 +3913,13 @@ var RecoveryOrchestrator = class extends import_node_events3.EventEmitter {
   getCircuitBreaker() {
     return this.circuitBreaker;
   }
+  /**
+   * Public entry point for on-demand L3 deep repair (e.g. from /repair bot command).
+   * Runs L3 patterns regardless of l3Enabled config — caller is responsible for confirmation.
+   */
+  async triggerL3() {
+    return this.attemptL3();
+  }
   async recover(_healthScore) {
     if (this.recovering) return [];
     this.recovering = true;
@@ -3931,24 +3939,36 @@ var RecoveryOrchestrator = class extends import_node_events3.EventEmitter {
         actions.push(...retryL1.actions);
         if (retryL1.success) return actions;
       }
-      const l3Result = await this.attemptL3();
-      actions.push(...l3Result.actions);
-      if (l3Result.success) {
-        const retryL1 = await this.attemptL1();
-        actions.push(...retryL1.actions);
-        if (retryL1.success) return actions;
+      let l3Success = false;
+      if (this.config.recovery.l3Enabled) {
+        const l3Result = await this.attemptL3();
+        actions.push(...l3Result.actions);
+        l3Success = l3Result.success;
+        if (l3Success) {
+          const retryL1 = await this.attemptL1();
+          actions.push(...retryL1.actions);
+          if (retryL1.success) return actions;
+        }
+      } else {
+        this.emitEvent({ type: "L3_DISABLED" });
       }
-      if (!l2Result.success && l2Result.noMatch && !l3Result.success) {
+      if (!l2Result.success && l2Result.noMatch && !l3Success) {
+        const l3Note = this.config.recovery.l3Enabled ? "" : " L3 deep repair is DISABLED \u2014 enable it with l3Enabled = true in [recovery] config if you want Aegis to attempt network repair, dependency rebuild, safe mode, and disk cleanup.";
         this.emitEvent({
           type: "FAST_PATH_L4",
-          reason: "L1+L2+L3 exhausted \u2014 no auto-repair available"
+          reason: `L1+L2 exhausted \u2014 no auto-repair available.${l3Note}`
         });
       }
       this.circuitBreaker.recordFailedCycle();
       if (this.circuitBreaker.isTripped()) {
         this.emitEvent({ type: "CIRCUIT_BREAKER_TRIPPED" });
       }
-      const reason = !l2Result.success && l2Result.noMatch && !l3Result.success ? "No matching failure pattern \u2014 cannot auto-repair" : "Recovery exhausted \u2014 L1+L2+L3 failed";
+      let reason;
+      if (!this.config.recovery.l3Enabled) {
+        reason = !l2Result.success && l2Result.noMatch ? "No matching failure pattern \u2014 cannot auto-repair. L3 deep repair is DISABLED (enable with l3Enabled = true to allow network repair, dependency rebuild, safe mode boot, and disk cleanup)" : "Recovery exhausted \u2014 L1+L2 failed. L3 deep repair is DISABLED (enable with l3Enabled = true)";
+      } else {
+        reason = !l2Result.success && l2Result.noMatch && !l3Success ? "No matching failure pattern \u2014 cannot auto-repair" : "Recovery exhausted \u2014 L1+L2+L3 failed";
+      }
       this.emitEvent({ type: "L4_ALERT", reason, actions });
       return actions;
     } finally {
@@ -4298,16 +4318,19 @@ var BotCommandHandler = class {
     this.register("alerts", "Alert channel status", this.cmdAlerts.bind(this));
     this.register("version", "Version, uptime, platform", this.cmdVersion.bind(this));
     this.register("help", "List available commands", this.cmdHelp.bind(this));
+    this.register("repair", "Attempt L3 deep repair (requires confirmation)", this.cmdRepair.bind(this));
   }
   commands = /* @__PURE__ */ new Map();
   register(name, description, handler) {
     this.commands.set(name, { description, handler });
   }
   async handle(input) {
-    const cmd = input.trim().toLowerCase().replace(/^\//, "");
+    const parts = input.trim().replace(/^\//, "").split(/\s+/);
+    const cmd = (parts[0] ?? "").toLowerCase();
+    const args = parts.slice(1).join(" ");
     const entry = this.commands.get(cmd);
     if (!entry) return null;
-    return entry.handler();
+    return entry.handler(args);
   }
   getCommandList() {
     return Array.from(this.commands.entries()).map(([name, { description }]) => ({
@@ -4316,7 +4339,7 @@ var BotCommandHandler = class {
     }));
   }
   // --- Commands ---
-  async cmdHealth() {
+  async cmdHealth(_args) {
     const score = this.deps.monitor.getLastScore() ?? await this.deps.monitor.runAllProbes();
     const passed = score.probeResults.filter((p) => p.healthy).length;
     const failed = score.probeResults.filter((p) => !p.healthy);
@@ -4332,7 +4355,7 @@ Probes: ${passed}/${score.probeResults.length} passed`;
     }
     return { text };
   }
-  async cmdStatus() {
+  async cmdStatus(_args) {
     const score = this.deps.monitor.getLastScore() ?? await this.deps.monitor.runAllProbes();
     const icon = score.band === "healthy" ? "\u2705" : score.band === "degraded" ? "\u26A0\uFE0F" : "\u{1F6A8}";
     let text = `${icon} Health: ${score.band.toUpperCase()} (score: ${score.total})
@@ -4345,7 +4368,7 @@ Probes: ${passed}/${score.probeResults.length} passed`;
     }
     return { text };
   }
-  cmdIncidents() {
+  cmdIncidents(_args) {
     if (!this.deps.incidents) {
       return { text: "No incident logger available." };
     }
@@ -4375,7 +4398,7 @@ Avg MTTR: ${(stats.averageMttrMs / 1e3).toFixed(1)}s`;
     }
     return { text };
   }
-  cmdRecovery() {
+  cmdRecovery(_args) {
     if (!this.deps.recovery) {
       return { text: "Recovery: idle (orchestrator not active)" };
     }
@@ -4398,7 +4421,7 @@ Dead man's switch: ${state}`;
     }
     return { text };
   }
-  cmdBackups() {
+  cmdBackups(_args) {
     if (!this.deps.backup) {
       return { text: "Backup manager not available." };
     }
@@ -4417,7 +4440,7 @@ Checksum: ${latest.checksum.slice(0, 12)}...`;
     }
     return { text };
   }
-  cmdAlerts() {
+  cmdAlerts(_args) {
     const channels = this.deps.config.alerts.channels;
     if (channels.length === 0) {
       return { text: "No alert channels configured. Run 'aegis init' to add one." };
@@ -4430,7 +4453,7 @@ Checksum: ${latest.checksum.slice(0, 12)}...`;
     }
     return { text };
   }
-  cmdVersion() {
+  cmdVersion(_args) {
     const uptimeMs = Date.now() - this.deps.startedAt;
     const hours = Math.floor(uptimeMs / 36e5);
     const minutes = Math.floor(uptimeMs % 36e5 / 6e4);
@@ -4445,7 +4468,7 @@ Uptime: ${hours}h ${minutes}m`;
 Host: ${os8.hostname()}`;
     return { text };
   }
-  cmdHelp() {
+  cmdHelp(_args) {
     let text = "Aegis Bot Commands:\n";
     for (const [name, { description }] of this.commands) {
       text += `
@@ -4453,6 +4476,41 @@ Host: ${os8.hostname()}`;
     }
     return { text };
   }
+  async cmdRepair(args) {
+    if (!this.deps.recovery) {
+      return { text: "Recovery orchestrator not available." };
+    }
+    if (args.trim().toLowerCase() !== "confirm") {
+      let text2 = "\u26A0\uFE0F L3 DEEP REPAIR \u2014 DESTRUCTIVE OPERATION\n";
+      text2 += "\nThis will attempt the following repairs on your server:\n";
+      text2 += "\n  1. Network repair \u2014 flush DNS cache, reset TUN interface, check default routes";
+      text2 += "\n  2. Process resurrection \u2014 reinstall gateway binary via npm install -g openclaw";
+      text2 += "\n  3. Dependency rebuild \u2014 delete and rebuild node_modules with npm install --production";
+      text2 += "\n  4. Safe mode boot \u2014 start gateway with minimal config (no plugins, default routes)";
+      text2 += "\n  5. Disk cleanup \u2014 truncate oversized logs, delete rotated logs, clear temp files";
+      text2 += "\n\n\u{1F6A8} These actions CAN affect other services on this server.";
+      text2 += "\nOnly proceed if normal recovery (L1 restart + L2 targeted repair) has failed.\n";
+      text2 += "\nTo proceed, send: /repair confirm";
+      return { text: text2 };
+    }
+    let text = "\u{1F527} Running L3 deep repair...\n";
+    try {
+      const result = await this.deps.recovery.triggerL3();
+      if (result.actions.length === 0) {
+        text += "\nNo matching failure patterns detected \u2014 nothing to repair.";
+        return { text };
+      }
+      for (const action of result.actions) {
+        const mark = action.result === "success" ? "\u2705" : "\u274C";
+        text += `
+  ${mark} ${action.action} (${action.level}, ${action.durationMs}ms)`;
+      }
+      text += result.success ? "\n\n\u2705 L3 repair succeeded. Gateway should recover shortly." : "\n\n\u274C L3 repair did not resolve the issue. Manual intervention required.";
+    } catch {
+      text += "\n\u274C L3 repair failed with an unexpected error. Check logs for details.";
+    }
+    return { text };
+  }
 };
 
 // src/bot/telegram.ts