rewritable 0.11.0 → 0.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rewritable",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "CLI for re-writeable: emit and import single-file rwa documents.",
   "type": "module",
   "bin": {

package/seeds/rewritable.html

@@ -2322,6 +2322,18 @@ async function renderActionsModePanel(panel) {
   const skillRows = skillAffs.length ? skillAffs.map(a =>
     '<div class="rwa-mode-row"><div><div class="rwa-mode-title">' + escRuntimeHtml(a.name) + '</div><div class="rwa-mode-meta">' + escRuntimeHtml(a.kind || 'skill') + ' · ' + escRuntimeHtml(a.skillId) + '</div></div><button type="button" data-action-skill="' + escRuntimeHtml(a.skillId) + '">Open in Skills</button></div>'
   ).join('') : '<div class="rwa-mode-empty">No installed skills.</div>';
+  // Intelligences (rwa-agent/1 roles) — list + activate/deactivate. Activating offers the role's
+  // recommended model (intelligence/0.2 I-A). A verified role can be activated; unverified cannot.
+  const agentList = (typeof runtimeListAgents === 'function') ? runtimeListAgents() : [];
+  const activeRole = (runtimeAgentActive() || {}).role || null;
+  const agentRows = agentList.length ? agentList.map(a => {
+    const isActive = a.role === activeRole;
+    const meta = (a.verified ? 'verified' : 'unverified') + (isActive ? ' · active' : '');
+    const btn = !a.verified ? '' : (isActive
+      ? '<button type="button" data-agent-off="1">Deactivate</button>'
+      : '<button type="button" data-agent-on="' + escRuntimeHtml(a.role) + '">Activate</button>');
+    return '<div class="rwa-mode-row"><div><div class="rwa-mode-title">' + escRuntimeHtml(a.role) + '</div><div class="rwa-mode-meta">' + escRuntimeHtml('intelligence · ' + meta) + '</div></div>' + btn + '</div>';
+  }).join('') : '<div class="rwa-mode-empty">No intelligences installed.</div>';
   panel.innerHTML = [
     '<div class="rwa-mode-section">',
     '<div class="rwa-mode-kicker">Activity</div>',
@@ -2336,6 +2348,7 @@ async function renderActionsModePanel(panel) {
     '<div class="rwa-mode-section"><div class="rwa-mode-kicker">Recent runs</div>' + histRows + '</div>',
     '<div class="rwa-mode-section"><div class="rwa-mode-kicker">Live affordances</div>' + affRows + '</div>',
     '<div class="rwa-mode-section"><div class="rwa-mode-kicker">Installed skill actions</div>' + skillRows + '</div>',
+    '<div class="rwa-mode-section"><div class="rwa-mode-kicker">Intelligences</div>' + agentRows + '</div>',
   ].join('');
   const undoBtn = panel.querySelector('#rwa-actions-undo');
   if (undoBtn) undoBtn.addEventListener('click', () => runtimeUndo());
@@ -2352,6 +2365,13 @@ async function renderActionsModePanel(panel) {
   panel.querySelectorAll('[data-action-skill]').forEach(btn => {
     btn.addEventListener('click', () => runtimeSetMode('skills'));
   });
+  panel.querySelectorAll('[data-agent-on]').forEach(btn => btn.addEventListener('click', () => {
+    try { runtimeActivateAgent(btn.getAttribute('data-agent-on')); } // setActive + offer recommended model
+    catch (e) { if (typeof setStatus === 'function') setStatus('err', '✗ ' + (e && (e.code || e.message))); }
+    renderActionsModePanel(panel);
+  }));
+  const agentOff = panel.querySelector('[data-agent-off]');
+  if (agentOff) agentOff.addEventListener('click', () => { runtimeSetActiveAgent(null); renderActionsModePanel(panel); });
 }
 
 // ─── Agent (rwa-edit/1) ─────────────────────────────────────────────
@@ -7991,13 +8011,157 @@ function showAgentInstallDialog(envelope) {
     const ib = card.querySelector('[data-act=install]'); if (ib) ib.onclick = async () => close(await runtimeInstallAgent(envelope));
   }));
 }
-// §1.3 / §12 — install trigger: pick a .rwa-skill.json OR .rwa-agent.json, parse, dispatch by format.
+// §1.3 / §12 — install trigger: pick a .rwa-skill.json / .rwa-agent.json envelope OR an
+// intelligence carrier .html (a rewritable carrying a signed rwa-agent/1 record), then route.
 function runtimePromptInstall() {
-  const inp = document.createElement('input'); inp.type = 'file'; inp.accept = '.rwa-skill.json,.rwa-agent.json,application/json,.json';
-  inp.onchange = () => { const f = inp.files && inp.files[0]; if (!f) return; const rd = new FileReader(); rd.onload = () => { let env; try { env = JSON.parse(rd.result); } catch (_) { setStatus && setStatus('err', 'invalid skill/agent JSON'); return; } if (env && env.format === 'rwa-agent/1') showAgentInstallDialog(env); else showSkillInstallDialog(env); }; rd.readAsText(f); };
+  const inp = document.createElement('input'); inp.type = 'file'; inp.accept = '.rwa-skill.json,.rwa-agent.json,application/json,.json,.html,.htm,text/html';
+  inp.onchange = () => { const f = inp.files && inp.files[0]; if (!f) return; const rd = new FileReader(); rd.onload = () => { routeInstallFromText(String(rd.result || '')); }; rd.readAsText(f); };
   inp.click();
 }
 
+// ── intelligence/0.2 (docs/specs/rwa-intelligence-spec.md §5) — the file-drop bridge.
+// An "intelligence" ships as a CARRIER: a (skill-host) rewritable carrying a signed rwa-agent/1
+// record in its frozen #rwa-agents zone (the overlay half is the v0.9 agent role — see
+// runtime.agents / buildAgentZone above). Dropping a carrier onto a target extracts that record
+// and routes it to the existing consent dialog + runtime.agents.install. In a carrier's RAW bytes
+// the record lives inside INLINE_DOC, so its closing script tag is backslash-escaped (the zone
+// <div>/</div> delimiters are not). We extract + un-escape INLINE_DOC (the inverse of buildFile's
+// escapeTL — every escape is one backslash + one char), then parse the zone exactly as
+// readTrustworthyAgents does. The signature stays the trust anchor: the dialog re-verifies.
+function _carrierDoc(html) {
+  const marker = 'const INLINE_DOC = `';
+  const i = String(html || '').indexOf(marker);
+  if (i < 0) return String(html || ''); // not a full container — treat the text itself as the doc
+  let j = i + marker.length;
+  for (; j < html.length; j++) { const c = html[j]; if (c === '\\') { j++; continue; } if (c === '`') break; }
+  return html.slice(i + marker.length, j).replace(/\\([\s\S])/g, '$1');
+}
+function extractAgentEnvelopesFromCarrier(html) {
+  const zone = _agExtractZone(_carrierDoc(html));
+  if (!zone) return [];
+  const out = [];
+  for (const m of zone.matchAll(/<script\s+type="application\/rwa-agent\+json">([\s\S]*?)<\/script>/g)) {
+    let env; try { env = JSON.parse(new TextDecoder().decode(_skFromB64(m[1].trim()))); } catch (_) { continue; }
+    if (env && env.agent && typeof env.agent.role === 'string') out.push(env);
+  }
+  return out;
+}
+// Classify a dropped/picked file's text: a carrier .html, a bare envelope JSON, or nothing.
+function classifyInstallText(text) {
+  const s = String(text || '');
+  let obj = null; try { obj = JSON.parse(s); } catch (_) {}
+  if (obj && typeof obj === 'object') {
+    if (obj.agent || obj.format === 'rwa-agent/1') return { kind: 'json-agent', envelope: obj };
+    if (obj.skill || obj.format === 'rwa-skill/1') return { kind: 'json-skill', envelope: obj };
+    return { kind: 'none' };
+  }
+  const envelopes = extractAgentEnvelopesFromCarrier(s);
+  if (envelopes.length) return { kind: 'agent-carrier', envelopes };
+  return { kind: 'none' };
+}
+// Route extracted content to the right consent dialog. Install stays behind the dialog (the trust
+// anchor); the dialog is fire-and-forget so the drop handler returns immediately. Multiple records
+// in one carrier are queued (each dialog awaits the previous close).
+async function routeInstallFromText(text) {
+  const c = classifyInstallText(text);
+  if (c.kind === 'json-agent') showAgentInstallDialog(c.envelope);
+  else if (c.kind === 'json-skill') showSkillInstallDialog(c.envelope);
+  else if (c.kind === 'agent-carrier') { (async () => { for (const env of c.envelopes) { await showAgentInstallDialog(env); } })(); }
+  else if (typeof setStatus === 'function') setStatus('err', 'no installable skill or intelligence found in that file');
+  return c;
+}
+async function _readDroppedText(file) {
+  if (file && typeof file.text === 'function') return file.text();
+  return new Promise((res, rej) => { const rd = new FileReader(); rd.onload = () => res(String(rd.result || '')); rd.onerror = rej; rd.readAsText(file); });
+}
+// Drop gesture — capture phase, so a carrier is claimed before the Edit-mode image-mount drop.
+// Acts only on an .html/.htm file; any other drop flows through untouched to existing handlers.
+// A carrier is a self-contained .html (seed + doc, ~0.6 MB; larger with embedded images); cap the
+// read so a wildly oversized drop can't be slurped into memory (mirrors the image-ingest size cap).
+const CARRIER_MAX_BYTES = 32 * 1024 * 1024;
+async function handleCarrierDrop(e) {
+  const files = Array.from((e && e.dataTransfer && e.dataTransfer.files) || []);
+  const carrier = files.find(f => /text\/html/i.test(f.type || '') || /\.html?$/i.test(f.name || ''));
+  if (!carrier) return; // not a carrier — let the image/other drop handlers run
+  if (e.preventDefault) e.preventDefault();
+  if (e.stopPropagation) e.stopPropagation();
+  if (carrier.size > CARRIER_MAX_BYTES) { if (typeof setStatus === 'function') setStatus('err', 'that file is too large to be an intelligence carrier (' + Math.round(carrier.size / 1048576) + ' MB)'); return; }
+  try { await routeInstallFromText(await _readDroppedText(carrier)); }
+  catch (_) { if (typeof setStatus === 'function') setStatus('err', 'could not read the dropped file'); }
+}
+function handleCarrierDragOver(e) {
+  // Let a file drop fire anywhere on the page (a carrier can be dropped onto the document, not only
+  // the edit mount). Idempotent with the mount's own dragover; the drop handler decides whether to claim it.
+  const t = e && e.dataTransfer;
+  if (t && (Array.from(t.items || []).some(i => i.kind === 'file') || Array.from(t.types || []).includes('Files'))) e.preventDefault();
+}
+window.addEventListener('dragover', handleCarrierDragOver, true);
+window.addEventListener('drop', handleCarrierDrop, true);
+// Automation/test hooks (mirror window.__ingestImageFile).
+window.__rwaExtractAgentCarrier = extractAgentEnvelopesFromCarrier;
+window.__rwaClassifyInstallText = classifyInstallText;
+window.__rwaInstallFromText = routeInstallFromText;
+window.__rwaHandleCarrierDrop = handleCarrierDrop;
+
+// ── intelligence/0.2 I-A (docs/specs/rwa-intelligence-spec.md §6) — recommended model on activation.
+// A carrier may carry a NON-SECRET recommended_model / recommended_backend on its rwa-agent/1
+// ENVELOPE (OUTSIDE the signed `agent`, so canonicalAgent is unchanged and the signature still
+// verifies — this stays seed-only). On activation the runtime OFFERS to apply it to sessionStorage
+// behind a one-line consent: it never auto-applies, never sets a base-URL, never touches the API
+// key. A recommendation is a suggestion, not a stored credential (key/model are sessionStorage-only).
+const REC_MODEL_RE = /^[A-Za-z0-9._:\/-]{1,200}$/; // a model id: provider/name, dots, colon (ollama), hyphen
+const REC_BACKENDS = ['openrouter', 'ollama', 'lmstudio', 'atomic', 'bridge', 'bridge-session'];
+function getRecommendation(envelope) {
+  const e = envelope || {};
+  const out = {};
+  if (typeof e.recommended_model === 'string' && REC_MODEL_RE.test(e.recommended_model.trim())) out.model = e.recommended_model.trim();
+  if (typeof e.recommended_backend === 'string' && REC_BACKENDS.includes(e.recommended_backend.trim())) out.backend = e.recommended_backend.trim();
+  return (out.model || out.backend) ? out : null;
+}
+function applyRecommendation(rec) {
+  const r = rec || {};
+  const applied = {};
+  if (r.model && REC_MODEL_RE.test(String(r.model))) { sessionStorage.setItem(RWA.K_MODEL, String(r.model)); applied.model = String(r.model); }
+  if (r.backend && REC_BACKENDS.includes(String(r.backend))) { sessionStorage.setItem(RWA.K_BACKEND, String(r.backend)); applied.backend = String(r.backend); }
+  try { const m = document.getElementById('rwa-model'); if (m && applied.model) m.value = applied.model; const b = document.getElementById('rwa-backend'); if (b && applied.backend) { b.value = applied.backend; b.dispatchEvent(new Event('change')); } } catch (_) {}
+  return applied;
+}
+// Offer the role's recommended model, if any and if it differs from the current session. Fire-and-
+// forget consent dialog; resolves with the choice. Activation already happened — this only proposes.
+function offerRecommendedModel(role) {
+  const recRec = Array.from(installedAgents.values()).find(a => a.role === role);
+  const rec = recRec && getRecommendation(recRec.envelope);
+  if (!rec) return Promise.resolve({ offered: false });
+  const curModel = sessionStorage.getItem(RWA.K_MODEL) || RWA.MODEL;
+  const curBackend = sessionStorage.getItem(RWA.K_BACKEND) || 'openrouter';
+  if ((!rec.model || rec.model === curModel) && (!rec.backend || rec.backend === curBackend)) return Promise.resolve({ offered: false });
+  return new Promise(resolve => {
+    const prev = document.getElementById('rwa-model-offer'); if (prev) prev.remove();
+    const overlay = document.createElement('div'); overlay.id = 'rwa-model-offer';
+    overlay.style.cssText = 'position:fixed;inset:0;z-index:99999;background:rgba(0,0,0,.45);display:flex;align-items:center;justify-content:center;';
+    const card = document.createElement('div');
+    card.style.cssText = 'background:#fff;max-width:480px;width:92%;border-radius:18px;padding:24px 26px;font:14px/1.5 var(--font-ui,system-ui);box-shadow:0 12px 48px rgba(0,0,0,.28);';
+    const what = [rec.model ? 'model <code>' + _skEsc(rec.model) + '</code>' : '', rec.backend ? 'backend <code>' + _skEsc(rec.backend) + '</code>' : ''].filter(Boolean).join(' on ');
+    card.innerHTML =
+      '<h2 style="margin:0 0 .4em;font-size:1.15rem">Use this intelligence’s recommended ' + (rec.model ? 'model' : 'backend') + '?</h2>' +
+      '<p style="margin:.2em 0;color:#444">The <strong>' + _skEsc(role) + '</strong> role suggests ' + what + ' for ⌘K. This is a <em>recommendation</em> (not part of the signed role) — applying it changes only your session’s model/backend selection. Your API key is untouched.</p>' +
+      '<div style="display:flex;gap:10px;margin-top:1.2em;justify-content:flex-end">' +
+        '<button data-act="keep" style="padding:9px 16px;border:1px solid #ccc;border-radius:10px;background:#fff;cursor:pointer">Keep current</button>' +
+        '<button data-act="apply" style="padding:9px 16px;border:none;border-radius:10px;background:var(--gray-900,#111);color:#fff;cursor:pointer">Use it</button>' +
+      '</div>';
+    overlay.appendChild(card); document.body.appendChild(overlay);
+    const close = (choice) => { overlay.remove(); resolve(choice); };
+    card.querySelector('[data-act=keep]').onclick = () => close({ offered: true, applied: null });
+    card.querySelector('[data-act=apply]').onclick = () => close({ offered: true, applied: applyRecommendation(rec) });
+  });
+}
+// Activate a role AND offer its recommended model — the "on activation" entry the UI calls.
+function runtimeActivateAgent(role) { runtimeSetActiveAgent(role); return offerRecommendedModel(role); }
+window.__rwaGetRecommendation = getRecommendation;
+window.__rwaApplyRecommendation = applyRecommendation;
+window.__rwaOfferRecommendedModel = offerRecommendedModel;
+window.__rwaActivateAgent = runtimeActivateAgent;
+
 // §4/§5a — does a network: host pattern admit a host? Mirror of cli/src/skill-manifest.mjs
 // matchNetworkOrigin (keep in step). The bridge's per-call origin check.
 function _skMatchNetworkOrigin(pattern, host) {
@@ -9530,7 +9694,7 @@ document.addEventListener('keydown', e => {
       discoverSkills: runtimeDiscoverSkills, // v0.9 §11 (I6) — GET the marketplace index (opt-in network)
       fetchSkillFromIndex: runtimeFetchSkillFromIndex, // v0.9 §11 (I6) — fetch + client-side-verify an indexed skill
       vault: { get: runtimeVaultGet, set: runtimeVaultSet, has: runtimeVaultHas, namespaces: runtimeVaultNamespaces, unlock: runtimeVaultUnlock, lock: runtimeVaultLock, isLocked: runtimeVaultIsLocked, export: runtimeVaultExport, import: runtimeVaultImport }, // v0.8 §6 + v0.9 §14 (I13) portable export/import
-      agents: { list: runtimeListAgents, active: runtimeAgentActive, setActive: runtimeSetActiveAgent, install: runtimeInstallAgent, uninstall: runtimeUninstallAgent, message: runtimeAgentMessage, showInstallDialog: showAgentInstallDialog }, // v0.9 §12 — multi-agent roles
+      agents: { list: runtimeListAgents, active: runtimeAgentActive, setActive: runtimeSetActiveAgent, activate: runtimeActivateAgent, install: runtimeInstallAgent, uninstall: runtimeUninstallAgent, message: runtimeAgentMessage, showInstallDialog: showAgentInstallDialog, offerModel: offerRecommendedModel }, // v0.9 §12 — multi-agent roles; `activate` = setActive + offer recommended model (intelligence/0.2 I-A)
       hookLog: runtimeHookLog, // v0.9 §9 — the hook audit trail (rwa_hook_log)
     };
     // `status` is a getter so each read returns a fresh snapshot of