Files
gbrain/package.json
T
cb5bf1d332 v0.31.10 feat: add cold-start and ask-user skills (#802)
* feat: add cold-start and ask-user skills

cold-start: Day-one brain bootstrapping that sequences the highest-leverage
data sources (contacts, calendar, email, conversations, social, archives)
to go from empty brain to useful brain. Recommends ClawVisor for credential
safety. Each phase is independently valuable and gated on user consent.
Includes resume protocol for interrupted sessions.

ask-user: Platform-agnostic choice-gate pattern for presenting users with
2-4 options and stopping execution until they respond. Works with Telegram
inline buttons, Discord, CLI, or Hermes clarify tool. Adapted from the
Wintermute ask-user pattern for the general gbrain ecosystem.

Also:
- Updated manifest.json with both new skills
- Updated RESOLVER.md with cold-start triggers and ask-user convention
- Updated setup/SKILL.md to point to cold-start as natural next step
- Updated GBRAIN_SKILLPACK.md with Getting Started section

* fix: make cold-start the automatic next step after setup

- Add Phase J to setup skill — transitions directly into cold-start
  after verification passes, not as a 'next steps' bullet
- Agent MUST offer cold-start, not just mention it
- Add anti-pattern: 'ending setup without offering cold-start'
- Update output format to flow into cold-start prompt
- Track deferred state if user declines

* safety: make ClawVisor required for API access, not optional

Phase 0 is now 'ClawVisor Setup (Required for API Access)' — not
'Credential Gateway Setup' with three options. The framing changed:

- ClawVisor is the safe path. Direct OAuth is not offered as an alternative.
- If user declines ClawVisor, agent skips to offline-only imports
  (markdown, conversation exports, Twitter archive, file archives).
- Explicitly: 'Do NOT offer direct OAuth as an alternative.'
- Safety boundary callout explains why: raw OAuth tokens + AI agent =
  uncontrolled attack surface (prompt injection → full Google account).
- Anti-pattern #1 is now 'Giving the agent raw OAuth tokens.'
- Revocation advantage highlighted: disable access in one click.

The contract, description, manifest, and skillpack doc all updated
to say 'uses' not 'recommends'.

* fix: PR #802 ask-user/cold-start clear repo test gates

Four contributor bugs in PR #802 fail existing test gates:

- ask-user/SKILL.md missing required Contract / Anti-Patterns /
  Output Format sections (test/skills-conformance.test.ts).
- cold-start/SKILL.md description references trigger phrase
  "now what?" but the triggers: list omits it
  (test/resolver.test.ts round-trip).
- ask-user is in skills/manifest.json but has no trigger row in
  RESOLVER.md, breaking manifest reachability
  (test/resolver.test.ts).
- cold-start/SKILL.md writes_to: declares daily/, media/,
  conversations/ which aren't in skills/_brain-filing-rules.json,
  failing test/check-resolvable.test.ts.

Adds the missing skill sections, the missing trigger entries, and
three filing-rules entries to legitimize cold-start's writes_to.
The filing-rules additions describe daily/ as date-keyed (calendar +
daily notes), media/ as format-prefixed for source-format ingest
(media/x/{handle}/), and conversations/ for chat exports.

Test surface:
- bun test test/skills-conformance.test.ts → was 207 pass / 3 fail,
  now 209 pass / 0 fail.
- bun test test/resolver.test.ts → was 82 pass / 2 fail, now 84
  pass / 0 fail.
- bun test test/check-resolvable.test.ts → was 24 pass / 1 fail,
  now 25 pass / 0 fail.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore: scrub 'Hermes Agent' references from PR #802-introduced files

CLAUDE.md privacy doctrine forbids naming private agent forks
(Wintermute, Hermes, Neuromancer) in any public artifact: skills,
README, CHANGELOG, PR titles, commit messages, comments. The
canonical phrasing is "OpenClaw" or "your OpenClaw".

PR #802 introduced three sites that violated the rule:

- skills/ask-user/SKILL.md:79 section heading "With the `clarify`
  tool (Hermes Agent)".
- skills/ask-user/SKILL.md:80 body line "Hermes agents have a
  built-in `clarify` tool".
- skills/manifest.json ask-user description listed "Hermes clarify
  tool" alongside Telegram / Discord / CLI.

Scrub is narrow: only the three PR-introduced sites. Pre-existing
"Hermes" references elsewhere in the repo (README.md links to
NousResearch/hermes-agent, docs/integrations/credential-gateway.md,
docs/guides/cron-schedule.md, etc.) are intentional public-project
references to the open-source Hermes Agent and stay in place.

scripts/check-privacy.sh enforces the wintermute layer of the rule
on every push; the Hermes / Neuromancer doctrine layer is doctrinal
only. Future hardening (extending the script to also ban Hermes /
Neuromancer in a precise allow-listed way) is filed as TODOS.md P8.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* v0.31.10 feat: cold-start + ask-user skills

PR #802 ships the cold-start skill (day-one brain bootstrapping
across 8 phases) and the ask-user skill (choice-gate pattern).
Setup skill's Phase J auto-launches cold-start when verification
passes, closing the "now what?" gap that every new gbrain user hits.

Cold-start orchestrates existing recipes (email-to-brain,
calendar-to-brain, x-to-brain) and skills (meeting-ingestion); it
does not reinvent ingestion logic. State persists across agent
crashes via ~/.gbrain/cold-start-state.json, matching the existing
update-state.json convention. Trigger phrases include "cold start",
"fill my brain", "now what?", "bootstrap", "import my data".

Known limitations explicitly flagged in CHANGELOG:

- ClawVisor required for API-backed phases (Contacts / Calendar /
  Gmail). v0.32 will restore the dual A / B pattern that
  recipes/email-to-brain.md and recipes/calendar-to-brain.md
  already document.
- Phase-level resume granularity. Mid-phase failure restarts the
  phase from item 1; idempotent slug writes prevent duplicates.
  Per-item resume lands with the gbrain cold-start CLI counterpart
  in v0.32.

CHANGELOG entry follows the canonical release-summary spec from
CLAUDE.md:930: bold headline, 3-5 sentence lead, "What you can
now do" section, "How it works under the hood", "Known limitations",
"To take advantage of v0.31.10" block, "For contributors".

Version bumps from 0.31.2 (branch base) past master's 0.31.3 to
0.31.10. Slots 0.31.4 through 0.31.9 are reserved for in-flight
work; the gap is deliberate.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Neuromancer <neuromancer@garryslist.org>
Co-authored-by: Garry Tan <garrytan@gmail.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-10 13:53:30 -07:00

113 lines
5.1 KiB
JSON

{
"name": "gbrain",
"version": "0.31.10",
"description": "Postgres-native personal knowledge brain with hybrid RAG search",
"type": "module",
"main": "src/core/index.ts",
"bin": {
"gbrain": "src/cli.ts"
},
"exports": {
".": "./src/core/index.ts",
"./engine": "./src/core/engine.ts",
"./types": "./src/core/types.ts",
"./operations": "./src/core/operations.ts",
"./minions": "./src/core/minions/index.ts",
"./engine-factory": "./src/core/engine-factory.ts",
"./pglite-engine": "./src/core/pglite-engine.ts",
"./link-extraction": "./src/core/link-extraction.ts",
"./import-file": "./src/core/import-file.ts",
"./transcription": "./src/core/transcription.ts",
"./embedding": "./src/core/embedding.ts",
"./config": "./src/core/config.ts",
"./markdown": "./src/core/markdown.ts",
"./backoff": "./src/core/backoff.ts",
"./search/hybrid": "./src/core/search/hybrid.ts",
"./search/expansion": "./src/core/search/expansion.ts",
"./extract": "./src/commands/extract.ts"
},
"scripts": {
"dev": "bun run src/cli.ts",
"build": "bun build --compile --outfile bin/gbrain src/cli.ts",
"build:all": "bun build --compile --target=bun-darwin-arm64 --outfile bin/gbrain-darwin-arm64 src/cli.ts && bun build --compile --target=bun-linux-x64 --outfile bin/gbrain-linux-x64 src/cli.ts",
"build:admin": "cd admin && bun run build",
"build:schema": "bash scripts/build-schema.sh",
"build:llms": "bun run scripts/build-llms.ts",
"build:pglite-snapshot": "bun run scripts/build-pglite-snapshot.ts",
"test": "bash scripts/run-unit-parallel.sh",
"test:full": "bun run verify && bash scripts/run-unit-parallel.sh && bun run test:slow && ([ -n \"$DATABASE_URL\" ] && bash scripts/run-e2e.sh || echo '[test:full] skipped E2E (no DATABASE_URL); run docker-compose -f docker-compose.ci.yml up + bun run test:e2e to include' 1>&2)",
"verify": "bun run check:privacy && bun run check:jsonb && bun run check:progress && bun run check:test-isolation && bun run check:wasm && bun run check:admin-build && bun run check:admin-scope-drift && bun run check:cli-exec && bun run typecheck",
"check:admin-scope-drift": "scripts/check-admin-scope-drift.sh",
"check:cli-exec": "scripts/check-cli-executable.sh",
"check:all": "scripts/check-privacy.sh && scripts/check-jsonb-pattern.sh && scripts/check-progress-to-stdout.sh && scripts/check-no-legacy-getconnection.sh && scripts/check-test-isolation.sh && scripts/check-trailing-newline.sh && scripts/check-wasm-embedded.sh && scripts/check-exports-count.sh && scripts/check-admin-build.sh && scripts/check-admin-scope-drift.sh && scripts/check-cli-executable.sh",
"check:wasm": "scripts/check-wasm-embedded.sh",
"check:newlines": "scripts/check-trailing-newline.sh",
"test:e2e": "bash scripts/run-e2e.sh",
"test:slow": "bash scripts/run-slow-tests.sh",
"test:profile": "bash scripts/profile-tests.sh",
"test:serial": "bash scripts/run-serial-tests.sh",
"ci:local": "bash scripts/ci-local.sh",
"ci:local:diff": "bash scripts/ci-local.sh --diff",
"ci:select-e2e": "bun run scripts/select-e2e.ts",
"typecheck": "tsc --noEmit",
"check:jsonb": "scripts/check-jsonb-pattern.sh",
"check:privacy": "scripts/check-privacy.sh",
"check:progress": "scripts/check-progress-to-stdout.sh",
"check:exports-count": "scripts/check-exports-count.sh",
"check:admin-build": "scripts/check-admin-build.sh",
"check:test-isolation": "scripts/check-test-isolation.sh",
"postinstall": "command -v gbrain >/dev/null 2>&1 && gbrain apply-migrations --yes --non-interactive || echo '[gbrain] postinstall skipped. If installed via bun install -g github:...: run `gbrain doctor` and `gbrain apply-migrations --yes` manually. See https://github.com/garrytan/gbrain/issues/218' 1>&2",
"prepublish:clawhub": "bun run build:all",
"publish:clawhub": "clawhub package publish . --family bundle-plugin"
},
"openclaw": {
"compat": {
"pluginApi": ">=2026.4.0"
}
},
"dependencies": {
"@ai-sdk/anthropic": "^3.0.71",
"@ai-sdk/google": "^3.0.64",
"@ai-sdk/openai": "^3.0.53",
"@ai-sdk/openai-compatible": "^2.0.41",
"@anthropic-ai/sdk": "^0.30.0",
"@aws-sdk/client-s3": "^3.1028.0",
"@dqbd/tiktoken": "^1.0.22",
"@electric-sql/pglite": "0.4.3",
"@jsquash/avif": "^2.1.1",
"@jsquash/png": "^3.1.1",
"@modelcontextprotocol/sdk": "1.29.0",
"ai": "^6.0.168",
"cookie-parser": "^1.4.7",
"cors": "^2.8.5",
"eventsource-parser": "^3.0.8",
"exifr": "^7.1.3",
"express": "^5.1.0",
"express-rate-limit": "^7.5.0",
"gray-matter": "^4.0.3",
"heic-decode": "^2.1.0",
"marked": "^18.0.0",
"openai": "^4.0.0",
"pgvector": "^0.2.0",
"postgres": "^3.4.0",
"tree-sitter-wasms": "0.1.13",
"web-tree-sitter": "0.22.6",
"zod": "^4.3.6"
},
"devDependencies": {
"@types/bun": "latest",
"@types/cookie-parser": "^1.4.7",
"@types/cors": "^2.8.19",
"@types/express": "^5.0.6",
"bun-types": "^1.3.13",
"typescript": "^5.6.0"
},
"trustedDependencies": [
"@electric-sql/pglite"
],
"engines": {
"bun": ">=1.3.10"
},
"license": "MIT"
}