owlmem 0.7.0 → 0.7.3

package/README.md

@@ -29,7 +29,7 @@ page, where you sign in and click **Allow**. AI agents can read the setup guide
 
 An AI on your computer normally sees a task only when someone opens it. Auto-wake starts it as soon as it gets one:
 a small background program long-polls OwlMem and runs that AI's command line unattended — Claude Code with
-`claude -p`, Codex with `codex exec` — with the task as the prompt. The AI marks the task done or declined as usual.
+`claude -p`, Codex with `codex exec`, Antigravity with `agy -p` (for Codex and Antigravity, which refuse tool calls when nobody is watching, auto-wake approves just the two OwlMem tools used to report back: in `~/.codex/config.toml` and `~/.gemini/antigravity-cli/settings.json`) — with the task as the prompt. The AI marks the task done or declined as usual.
 
 ```sh
 npx -y owlmem install --wake     # or answer "y" when install asks; --yes alone leaves it off
@@ -44,7 +44,8 @@ npx -y owlmem wake disable       # also done by npx -y owlmem uninstall
   only, no admin rights. `--boot` (Linux) turns on lingering so it runs from boot, not just from login.
 - **One program per computer** for every paired AI. One task at a time per AI, at most 2 at once (`--max`),
   30 minutes per task (`--timeout`); a task that runs out of time is stopped and marked declined for a person.
-  A task sent to every agent wakes just one.
+  A task sent to every agent wakes just one. Replies in a thread (`kb_send` with `thread`) don't wake anyone;
+  asking someone in a thread to do something is a new task (`kind` `task` with `thread`), and that wakes them.
 - **Working folder.** A line like `cwd: ~/Projects/app` in the task picks the folder. In a Git repository the AI
   gets its own worktree and branch (`owlmem/task-<id>`), commits there and doesn't merge — the result names the
   branch. Other folders take one task at a time; with no folder it works in an empty one.
@@ -76,6 +77,9 @@ Run `npx owlmem device` on that machine to register it and print its fingerprint
 device key kept next to its config, so the same token on another machine gets nothing. By default a standing grant covers
 `owlmem run` / `vault_run` only (the secret goes into a command); viewing in plain text must be allowed separately.
 Saving, deleting and exporting always need approval.
+If an agent without access asks for an item, the answer names up to three agents in the space with a standing grant for it,
+so it can hand the job to one of them (`kb_send` with `kind` `task`): that agent runs it with `vault_run` and sends back only
+the result. Secrets themselves never go into messages, documents or memory — OwlMem refuses text that looks like a key.
 
 Let your AI use the vault directly through a local MCP server:
 

package/owlmem.mjs

@@ -39,7 +39,7 @@ import { join, dirname, basename, relative, isAbsolute } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawn, spawnSync } from "node:child_process";
 
-export const VERSION = "0.7.0";
+export const VERSION = "0.7.3";
 const BASE = (process.env.OWLMEM_URL || "https://owlmem.com").replace(/\/$/, "");
 const DIR = process.env.OWLMEM_HOME || join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "owlmem");
 const enc = new TextEncoder(), dec = new TextDecoder();
@@ -232,16 +232,21 @@ async function approved(method, path, body, kind = "access", mode = "other") {
     if (r.status < 400) return r.data;
     if (r.data.error !== "approval_required") throw new Fail(r.data.detail || r.data.error || "HTTP " + r.status);
     const id = r.data.request;
+    // the server may name other agents that could do this for us (a standing grant for this item) — names only
+    let hint = r.data.hint || "";
     say(`Waiting for approval in the OwlMem console (request ${id}${kind === "access" ? "" : ", " + kind}) …`);
+    if (hint) say(hint);
     const until = Date.now() + WAIT_MS;
     let st = "pending";
     while (Date.now() < until) {
       await new Promise((res) => setTimeout(res, Number(process.env.OWLMEM_POLL_MS || 3000)));
-      st = (await call("GET", "requests/" + id)).data.status;
+      const s = (await call("GET", "requests/" + id)).data;
+      st = s.status; if (s.hint) hint = s.hint;
       if (st !== "pending") break;
     }
-    if (st === "pending") throw new Fail(`Waiting for approval (request ${id}). Ask the space owner to approve it in the OwlMem console (Vault), then try again. For unattended jobs, ask them for a standing grant for this agent and this machine (run: owlmem device).`);
-    if (st !== "approved") throw new Fail(st === "denied" ? "The request was denied." : "The request expired before it was approved.");
+    const tail = hint ? " " + hint : "";
+    if (st === "pending") throw new Fail(`Waiting for approval (request ${id}). Ask the space owner to approve it in the OwlMem console (Vault), then try again. For unattended jobs, ask them for a standing grant for this agent and this machine (run: owlmem device).` + tail);
+    if (st !== "approved") throw new Fail((st === "denied" ? "The request was denied." : "The request expired before it was approved.") + tail);
     say("Approved.");
     if (kind !== "access") extra = (path.includes("?") ? "&" : "?") + "request=" + encodeURIComponent(id);
   }
@@ -800,7 +805,41 @@ export const WAKE_CLIENTS = {
     // -p runs one prompt and exits; it may only use the two OwlMem tools it needs to report back, beyond what your own settings allow
     command: ["claude", "-p", "--allowedTools", "mcp__owlmem__kb_task_update,mcp__owlmem__kb_inbox"], prompt: "stdin" },
   codex: { name: "Codex", bin: "codex", command: ["codex", "exec", "--skip-git-repo-check", "-"], prompt: "stdin" },
+  // agy -p takes the prompt as an argument; headless it denies MCP tools unless settings.json allows them (see allowAntigravity)
+  antigravity: { name: "Antigravity", bin: "agy", home: [".gemini", "bin", "agy"], command: ["agy", "-p"], prompt: "arg" },
 };
+export const WAKE_APP_IDS = ["claude-code", "codex", "antigravity", "gemini", "custom"];
+// Where an app's command is: on PATH, or (Antigravity) its default install place, used by full path
+export function wakeBin(c, home_ = home(), exists = existsSync) {
+  if (onPath(c.bin)) return c.bin;
+  const p = c.home && join(home_, ...c.home);
+  return p && exists(p) ? p : null;
+}
+// codex exec runs with approval "never", so an MCP call that needs approval is refused: approve just the two OwlMem
+// tools it needs to report back, as tool tables under the [mcp_servers.owlmem] that install wrote (append only)
+export function allowCodex(home_ = home()) {
+  const f = join(process.env.CODEX_HOME || join(home_, ".codex"), "config.toml");
+  let t; try { t = readFileSync(f, "utf8"); } catch { return false; }
+  if (!/^\[mcp_servers\.owlmem\]\s*$/m.test(t)) return false;
+  const add = ["kb_task_update", "kb_inbox"].filter((n) => !new RegExp("^\\[mcp_servers\\.owlmem\\.tools\\." + n + "\\]\\s*$", "m").test(t));
+  if (!add.length) return false;
+  writeFileSync(f, t.replace(/\n*$/, "\n") + "\n# OwlMem auto-wake: unattended codex exec may call these two OwlMem tools to report back\n" +
+    add.map((n) => `[mcp_servers.owlmem.tools.${n}]\napproval_mode = "approve"\n`).join("\n"));
+  return true;
+}
+// Antigravity's CLI reads ~/.gemini/antigravity-cli/settings.json: add only the two rules it needs to report back
+export function allowAntigravity(home_ = home()) {
+  const f = join(home_, ".gemini", "antigravity-cli", "settings.json"), need = ["mcp(owlmem/kb_task_update)", "mcp(owlmem/kb_inbox)"];
+  let j = {};
+  if (existsSync(f)) { try { j = JSON.parse(readFileSync(f, "utf8")); } catch { throw new Fail("Can't read " + tilde(f) + " (not JSON); fix it or add " + need.join(", ") + " under permissions.allow yourself."); } }
+  const allow = Array.isArray(j.permissions?.allow) ? j.permissions.allow : [];
+  const add = need.filter((r) => !allow.includes(r));
+  if (!add.length) return false;
+  j.permissions = { ...(j.permissions || {}), allow: [...allow, ...add] };
+  mkdirSync(dirname(f), { recursive: true });
+  writeFileSync(f, JSON.stringify(j, null, 2) + "\n");
+  return true;
+}
 export const WAKE_DEFAULTS = { max_parallel: 2, timeout_min: 30 };
 const WAKE_UNIT = "owlmem-wake.service", WAKE_LABEL = "com.owlmem.wake", WAKE_TASK = "OwlMem Wake", WAKE_RUNKEY = "OwlMemWake";
 const wakeDir = (dir = DIR) => join(dir, "wake");
@@ -1125,12 +1164,17 @@ async function wakeEnable(args = []) {
   const max = num("--max", 1, 16), timeout = num("--timeout", 1, 240);
   const old = loadWake() || {};
   const clients = { ...(old.clients || {}) };
-  for (const [id, c] of Object.entries(WAKE_CLIENTS)) if (!clients[id] && onPath(c.bin)) clients[id] = { command: c.command, prompt: c.prompt };
+  for (const [id, c] of Object.entries(WAKE_CLIENTS)) {
+    const bin = !clients[id] && wakeBin(c);
+    if (bin) clients[id] = { command: [bin, ...c.command.slice(1)], prompt: c.prompt };
+  }
   if (!Object.keys(clients).length)
-    throw new Fail("No AI command line found on this computer that auto-wake can start (Claude Code: claude, Codex: codex). Install one, or add its command to " + wakeFile() + " under \"clients\".");
+    throw new Fail("No AI command line found on this computer that auto-wake can start (Claude Code: claude, Codex: codex, Antigravity: agy). Install one, or add its command to " + wakeFile() + " under \"clients\".");
+  if (clients.codex && allowCodex()) say("Let Codex report back to OwlMem when nobody is watching (2 tool approvals in ~/.codex/config.toml).");
+  if (clients.antigravity && allowAntigravity()) say("Let Antigravity's command line report back to OwlMem when nobody is watching (2 rules in ~/.gemini/antigravity-cli/settings.json).");
   const cfg = { v: 1, ...WAKE_DEFAULTS, ...old, machine: process.env.OWLMEM_DEVICE_NAME || hostname(), clients, ...(max ? { max_parallel: max } : {}), ...(timeout ? { timeout_min: timeout } : {}), boot: boot || !!old.boot };
   // OwlMem knows these app names; a command you add yourself to wake.json goes under "gemini" or "custom"
-  const r = await wakeApi()("pair", { clients: Object.keys(clients).filter((c) => ["claude-code", "codex", "gemini", "custom"].includes(c)), force: again });
+  const r = await wakeApi()("pair", { clients: Object.keys(clients).filter((c) => WAKE_APP_IDS.includes(c)), force: again });
   if (r.status !== 200) throw new Fail("OwlMem didn't accept the pairing: " + (r.data.detail || r.data.error || "HTTP " + r.status));
   mkdirSync(wakeDir(), { recursive: true });
   copyFileSync(fileURLToPath(import.meta.url), join(wakeDir(), "owlmem.mjs"));      // the service runs this copy (npx's cache can be cleaned out)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlmem",
-  "version": "0.7.0",
+  "version": "0.7.3",
   "description": "OwlMem command line: connect your AI apps to OwlMem in one command (npx -y owlmem install), an end-to-end encrypted vault for your AI agents, and a local MCP server.",
   "type": "module",
   "bin": { "owlmem": "owlmem.mjs" },