0xray 4.0.13 → 4.0.15

package/dist/enforcement/enforcer-tools.js

@@ -0,0 +1,818 @@
+/**
+ * Enforcer Tools - Integration layer between enforcer agent and rule enforcement system
+ * Provides tools for codex compliance, rule validation, and contextual analysis enforcement
+ */
+import { ruleEnforcer, } from "./rule-enforcer.js";
+import { frameworkLogger } from "../core/framework-logger.js";
+import { AgentDelegator } from "../delegation/agent-delegator.js";
+import { XrayStateManager } from "../state/state-manager.js";
+import { xrayConfigLoader } from "../core/config-loader.js";
+import * as fs from "fs";
+import * as path from "path";
+// Minimum confidence to auto-delegate to another agent
+const DELEGATION_CONFIDENCE_THRESHOLD = 0.50;
+// Agents that enforcer should NOT delegate to (enforcer handles these itself)
+const ENFORCER_HANDLES = new Set(["code-reviewer"]);
+// Community skills are OPTIONAL - they may not be installed
+// These mappings have lower confidence (0.55-0.7) since skills may not be available
+// The system will fall back gracefully if the skill isn't installed
+const ROUTING_MAPPINGS = [
+    // Core built-in skills (high confidence)
+    { keywords: ["write", "file", "create"], skill: "code-review", agent: "code-reviewer", confidence: 0.9 },
+    { keywords: ["review", "audit", "assess", "evaluate", "check", "inspect", "quality", "validate", "code-review"], skill: "code-review", agent: "code-reviewer", confidence: 0.9 },
+    { keywords: ["test", "testing", "jest", "coverage", "unit", "e2e", "cypress", "spec", "verify"], skill: "testing-best-practices", agent: "testing-lead", confidence: 0.95 },
+    { keywords: ["fix", "debug", "triage", "broken", "error", "crash", "bug", "issue", "resolve"], skill: "bug-triage", agent: "bug-triage-specialist", confidence: 0.92 },
+    { keywords: ["security", "vulnerability", "threat", "scan", "risk", "exploit", "secure", "pentest"], skill: "security-audit", agent: "security-auditor", confidence: 0.95 },
+    { keywords: ["refactor", "cleanup", "improve", "restructure", "modernize", "debt"], skill: "refactoring-strategies", agent: "refactorer", confidence: 0.92 },
+    { keywords: ["performance", "optimize", "bottleneck", "benchmark", "profile", "speed"], skill: "performance-optimization", agent: "performance-engineer", confidence: 0.93 },
+    { keywords: ["frontend", "react", "vue", "angular", "ui", "ux", "interface", "component"], skill: "frontend-development", agent: "frontend-engineer", confidence: 0.95 },
+    { keywords: ["backend", "api", "server", "microservice", "endpoint"], skill: "backend-development", agent: "backend-engineer", confidence: 0.95 },
+    { keywords: ["docs", "documentation", "readme", "wiki", "guide", "manual"], skill: "documentation-generation", agent: "tech-writer", confidence: 0.9 },
+    { keywords: ["database", "db", "sql", "schema", "migration", "query"], skill: "database-design", agent: "database-engineer", confidence: 0.95 },
+    { keywords: ["deploy", "ci/cd", "pipeline", "docker", "kubernetes", "infrastructure"], skill: "devops-deployment", agent: "devops-engineer", confidence: 0.94 },
+    { keywords: ["mobile", "ios", "android", "react-native", "flutter"], skill: "mobile-development", agent: "mobile-developer", confidence: 0.95 },
+    { keywords: ["enforce", "compliance", "rule", "standard", "codex", "block", "prevent"], skill: "code-review", agent: "code-reviewer", confidence: 0.95 },
+    { keywords: ["design", "architect", "plan", "system", "model", "pattern", "architecture"], skill: "architecture-patterns", agent: "architect", confidence: 0.95 },
+    { keywords: ["codebase", "explore", "research", "discover", "implementation"], skill: "git-workflow", agent: "researcher", confidence: 0.88 },
+    // Additional built-in skill mappings
+    { keywords: ["api", "rest", "graphql", "openapi", "endpoint", "swagger"], skill: "api-design", agent: "backend-engineer", confidence: 0.9 },
+    { keywords: ["strategy", "roadmap", "planning", "technical", "decision", "architecture"], skill: "architecture-patterns", agent: "strategist", confidence: 0.88 },
+    { keywords: ["reflection", "story", "narrative", "saga", "journey", "document"], skill: "storyteller", agent: "tech-writer", confidence: 0.85 },
+    { keywords: ["analyze", "metrics", "complexity", "maintainability", "quality"], skill: "code-analyzer", agent: "code-analyzer", confidence: 0.9 },
+    { keywords: ["growth", "marketing", "conversion", "acquisition", "user-acquisition"], skill: "growth-strategist", agent: "growth-strategist", confidence: 0.9 },
+    { keywords: ["seo", "search", "organic", "traffic", "keywords", "ranking"], skill: "seo-consultant", agent: "seo-consultant", confidence: 0.92 },
+    { keywords: ["content", "copy", "blog", "marketing", "social"], skill: "content-creator", agent: "content-creator", confidence: 0.88 },
+    { keywords: ["format", "lint", "prettier", "eslint", "style", "formatting"], skill: "auto-format", agent: "code-reviewer", confidence: 0.85 },
+    { keywords: ["project", "structure", "health", "dependencies", "architecture"], skill: "project-analysis", agent: "architect", confidence: 0.88 },
+    { keywords: ["compliance", "audit", "standards", "framework", "validation"], skill: "framework-compliance-audit", agent: "code-reviewer", confidence: 0.9 },
+    { keywords: ["session", "state", "persistence", "storage", "cache"], skill: "session-management", agent: "backend-engineer", confidence: 0.85 },
+    { keywords: ["image", "visual", "pdf", "diagram", "multimedia", "media"], skill: "multimodal-looker", agent: "multimodal-looker", confidence: 0.92 },
+    { keywords: ["testing", "strategy", "coverage", "test-plan"], skill: "testing-strategy", agent: "testing-lead", confidence: 0.92 },
+    { keywords: ["inference", "model", "llm", "tuning", "optimization"], skill: "inference-improve", agent: "performance-engineer", confidence: 0.88 },
+    { keywords: ["orchestrate", "boot", "initialize", "startup", "bootstrap"], skill: "boot-orchestrator", agent: "architect", confidence: 0.9 },
+    // Additional unmapped skills
+    { keywords: ["tool", "utility", "helper", "instrument"], skill: "architect-tools", agent: "architect", confidence: 0.85 },
+    { keywords: ["design", "visual", "style", "theme", "css", "accessibility"], skill: "ui-ux-design", agent: "frontend-ui-ux-engineer", confidence: 0.9 },
+    { keywords: ["agent", "multi-agent", "coordination", "hermes", "communication"], skill: "hermes-agent", agent: "architect", confidence: 0.88 },
+    { keywords: ["log", "diagnostic", "trace", "monitor", "watch"], skill: "log-monitor", agent: "log-monitor", confidence: 0.9 },
+    { keywords: ["health", "diagnostic", "model-health", "validate-llm"], skill: "model-health-check", agent: "performance-engineer", confidence: 0.88 },
+    { keywords: ["analyze", "profiling", "memory", "cpu", "latency"], skill: "performance-analysis", agent: "performance-engineer", confidence: 0.9 },
+    { keywords: ["pipeline", "stream", "etl", "batch", "process"], skill: "processor-pipeline", agent: "backend-engineer", confidence: 0.88 },
+    { keywords: ["vulnerability", "cve", "sast", "dast", "dependency-check"], skill: "security-scan", agent: "security-auditor", confidence: 0.92 },
+    { keywords: ["state", "store", "redux", "context", "persistence"], skill: "state-manager", agent: "backend-engineer", confidence: 0.88 },
+    // ============================================================
+    // Community Skills (optional, lower confidence)
+    // These skills are from antigravity and may not be installed
+    // ============================================================
+    // UI/UX Design & Themes (antigravity)
+    { keywords: ["theme", "design-system", "color", "font", "typography", "palette"], skill: "antigravity--theme-factory", agent: "frontend-ui-ux-engineer", confidence: 0.6 },
+    { keywords: ["hig", "salesforce design", "lightning design", "slds"], skill: "antigravity--hig-components-system", agent: "frontend-ui-ux-engineer", confidence: 0.65 },
+    { keywords: ["slide", "deck", "presentation", "powerpoint"], skill: "antigravity--theme-factory", agent: "content-creator", confidence: 0.55 },
+    // SEO (antigravity)
+    { keywords: ["seo technical", "crawl", "indexability", "core web vitals", "sitemap"], skill: "antigravity--seo-technical", agent: "seo-consultant", confidence: 0.7 },
+    { keywords: ["seo structure", "content hierarchy", "schema", "internal linking"], skill: "antigravity--seo-structure-architect", agent: "seo-consultant", confidence: 0.7 },
+    { keywords: ["seo snippet", "meta description", "title tag"], skill: "antigravity--seo-snippet-hunter", agent: "seo-consultant", confidence: 0.7 },
+    { keywords: ["seo hreflang", "international seo", "multilingual"], skill: "antigravity--seo-hreflang", agent: "seo-consultant", confidence: 0.65 },
+    // Security (antigravity)
+    { keywords: ["backend security", "secure coding", "input validation", "authentication"], skill: "antigravity--backend-security-coder", agent: "security-auditor", confidence: 0.7 },
+    { keywords: ["mobile security", "ios security", "android security"], skill: "antigravity--mobile-security-coder", agent: "security-auditor", confidence: 0.65 },
+    { keywords: ["security audit", "vulnerability assessment", "penetration test"], skill: "security-audit", agent: "security-auditor", confidence: 0.75 },
+    // Vector/AI Databases (antigravity)
+    { keywords: ["vector", "embeddings", "similarity search", "pinecone", "qdrant", "chroma"], skill: "antigravity--vector-database-engineer", agent: "database-engineer", confidence: 0.65 },
+    { keywords: ["similarity search", "approximate nearest neighbor"], skill: "antigravity--similarity-search-patterns", agent: "database-engineer", confidence: 0.65 },
+    // Frameworks & Libraries (antigravity)
+    { keywords: ["svelte", "sveltekit", "svelte.js"], skill: "antigravity--sveltekit", agent: "frontend-engineer", confidence: 0.65 },
+    { keywords: ["trpc", "typescript rpc", "tRPC"], skill: "antigravity--trpc-fullstack", agent: "backend-engineer", confidence: 0.65 },
+    { keywords: ["vercel ai", "ai sdk", "vapi"], skill: "antigravity--vercel-ai-sdk-expert", agent: "backend-engineer", confidence: 0.65 },
+    { keywords: ["threejs", "3d web", "webgl", "3d graphics"], skill: "antigravity--threejs-loaders", agent: "frontend-engineer", confidence: 0.6 },
+    { keywords: ["comfyui", "ai image generation", "stable diffusion"], skill: "antigravity--comfyui-gateway", agent: "multimodal-looker", confidence: 0.6 },
+    // Mobile (antigravity)
+    { keywords: ["swiftui", "ios development"], skill: "antigravity--swiftui-liquid-glass", agent: "mobile-developer", confidence: 0.7 },
+    { keywords: ["ios performance", "swift optimization"], skill: "antigravity--swiftui-performance-audit", agent: "mobile-developer", confidence: 0.65 },
+    { keywords: ["react native", "rn"], skill: "mobile-development", agent: "mobile-developer", confidence: 0.7 },
+    // Backend/Golang (antigravity)
+    { keywords: ["golang", "go", "gopher"], skill: "antigravity--golang-pro", agent: "backend-engineer", confidence: 0.65 },
+    { keywords: ["temporal", "workflow", " durable execution"], skill: "antigravity--temporal-golang-pro", agent: "backend-engineer", confidence: 0.65 },
+    { keywords: ["python async", "asyncio", "uvloop"], skill: "antigravity--async-python-patterns", agent: "backend-engineer", confidence: 0.65 },
+    { keywords: ["pydantic", "data validation", "python models"], skill: "antigravity--pydantic-models-py", agent: "backend-engineer", confidence: 0.65 },
+    { keywords: ["scala", "spark", "big data"], skill: "antigravity--scala-pro", agent: "backend-engineer", confidence: 0.6 },
+    { keywords: ["dotnet", "c#", ".net"], skill: "antigravity--dotnet-backend-patterns", agent: "backend-engineer", confidence: 0.6 },
+    // Cloud/Azure (antigravity)
+    { keywords: ["azure", "azd", "azure deploy"], skill: "antigravity--azd-deployment", agent: "devops-engineer", confidence: 0.65 },
+    { keywords: ["azure storage", "file share"], skill: "antigravity--azure-storage-file-share-ts", agent: "devops-engineer", confidence: 0.6 },
+    { keywords: ["azure service bus", "messaging"], skill: "antigravity--azure-servicebus-py", agent: "devops-engineer", confidence: 0.6 },
+    // Automation/Bots (antigravity)
+    { keywords: ["discord bot", "discord automation"], skill: "antigravity--discord-bot-architect", agent: "backend-engineer", confidence: 0.6 },
+    { keywords: ["n8n", "workflow automation"], skill: "antigravity--n8n-expression-syntax", agent: "devops-engineer", confidence: 0.6 },
+    { keywords: ["linkedin automation", "social posting"], skill: "antigravity--linkedin-automation", agent: "growth-strategist", confidence: 0.55 },
+    { keywords: ["reddit automation"], skill: "antigravity--reddit-automation", agent: "growth-strategist", confidence: 0.55 },
+    { keywords: ["freshdesk", "customer support automation"], skill: "antigravity--freshdesk-automation", agent: "devops-engineer", confidence: 0.55 },
+    { keywords: ["pagerduty", "incident management"], skill: "antigravity--pagerduty-automation", agent: "devops-engineer", confidence: 0.55 },
+    // AI/ML (antigravity)
+    { keywords: ["local llm", "ollama", "llama", "local model"], skill: "antigravity--local-llm-expert", agent: "performance-engineer", confidence: 0.65 },
+    { keywords: ["agent", "mcp", "model context protocol"], skill: "antigravity--agent-memory-mcp", agent: "architect", confidence: 0.65 },
+    { keywords: ["agent evaluation", "agent testing"], skill: "antigravity--agent-evaluation", agent: "testing-lead", confidence: 0.65 },
+    { keywords: ["ai agent", "autonomous agent"], skill: "antigravity--ai-agent-development", agent: "backend-engineer", confidence: 0.65 },
+    // Content/Marketing (antigravity)
+    { keywords: ["marketing content", "ad creative", "campaign"], skill: "antigravity--marketing-ideas", agent: "content-creator", confidence: 0.6 },
+    { keywords: ["conversion", "cro", "optimization"], skill: "antigravity--onboarding-cro", agent: "growth-strategist", confidence: 0.6 },
+    // Documentation & Code Quality (antigravity)
+    { keywords: ["code documentation", "code explain", "explain code"], skill: "antigravity--code-documentation-code-explain", agent: "tech-writer", confidence: 0.65 },
+    { keywords: ["code refactoring", "clean code"], skill: "antigravity--code-refactoring-refactor-clean", agent: "refactorer", confidence: 0.65 },
+    { keywords: ["code review checklist"], skill: "antigravity--code-review-checklist", agent: "code-reviewer", confidence: 0.7 },
+    // Microservices & Architecture (antigravity)
+    { keywords: ["microservices", "service mesh", "distributed systems"], skill: "antigravity--microservices-patterns", agent: "architect", confidence: 0.65 },
+    { keywords: ["architecture decision", "adr", "decision records"], skill: "antigravity--architecture-decision-records", agent: "architect", confidence: 0.65 },
+    // Context/Memory Management (antigravity)
+    { keywords: ["context management", "context compression", "token optimization"], skill: "antigravity--context-compression", agent: "performance-engineer", confidence: 0.65 },
+    { keywords: ["context guardian", "memory safety"], skill: "antigravity--context-guardian", agent: "performance-engineer", confidence: 0.6 },
+    { keywords: ["context fundamentals"], skill: "antigravity--context-fundamentals", agent: "performance-engineer", confidence: 0.6 },
+    // Specialized Skills
+    { keywords: ["interview", "technical interview", "coding interview"], skill: "antigravity--interview-coach", agent: "growth-strategist", confidence: 0.6 },
+    { keywords: ["i18n", "localization", "translation"], skill: "antigravity--i18n-localization", agent: "frontend-engineer", confidence: 0.6 },
+    { keywords: ["accessibility", "a11y", "wcag"], skill: "antigravity--accessibility-compliance-accessibility-audit", agent: "frontend-ui-ux-engineer", confidence: 0.7 },
+    { keywords: ["pwa", "progressive web app"], skill: "antigravity--progressive-web-app", agent: "frontend-engineer", confidence: 0.6 },
+    { keywords: ["data migration", "sql migration"], skill: "antigravity--database-migrations-sql-migrations", agent: "database-engineer", confidence: 0.65 },
+    // Requesting Code Review (superpowers)
+    { keywords: ["request code review", "pr review", "pull request"], skill: "superpowers--requesting-code-review", agent: "code-reviewer", confidence: 0.7 },
+];
+export function getTaskRoutingRecommendation(taskDescription) {
+    const desc = taskDescription.toLowerCase();
+    for (const mapping of ROUTING_MAPPINGS) {
+        for (const keyword of mapping.keywords) {
+            if (desc.includes(keyword.toLowerCase())) {
+                return {
+                    suggestedAgent: mapping.agent,
+                    suggestedSkill: mapping.skill,
+                    confidence: mapping.confidence,
+                    matchedKeyword: keyword,
+                };
+            }
+        }
+    }
+    return {
+        suggestedAgent: "code-reviewer",
+        suggestedSkill: "code-review",
+        confidence: 0.5,
+        matchedKeyword: "none",
+    };
+}
+/**
+ * Pre-process and validate that the routing is appropriate for the operation
+ * This is the integration point between TaskSkillRouter and RuleEnforcer
+ */
+export async function preProcessAndRoute(operation, context) {
+    // Build task description from operation and context
+    const taskDescription = buildTaskDescription(operation, context);
+    // Get routing recommendation
+    const routing = getTaskRoutingRecommendation(taskDescription);
+    // Log the routing decision
+    await frameworkLogger.log("enforcer-tools", "task-routed", "debug", {
+        operation,
+        taskDescription: taskDescription.substring(0, 100),
+        suggestedAgent: routing.suggestedAgent,
+        suggestedSkill: routing.suggestedSkill,
+        confidence: routing.confidence,
+    });
+    // Enhance context with routing information
+    const enhancedContext = {
+        ...context,
+        operation,
+        // Add routing info to context for rule validators to use
+        ...context.routing,
+    };
+    return {
+        enhancedContext,
+        routing,
+    };
+}
+/**
+ * Build a task description from operation and context for routing
+ */
+function buildTaskDescription(operation, context) {
+    const parts = [operation];
+    if (context.component) {
+        parts.push(context.component);
+    }
+    if (context.files && context.files.length > 0) {
+        parts.push(`files: ${context.files.join(", ")}`);
+    }
+    return parts.join(" ");
+}
+/** Foundry mill ships. The worn exo must not bump, commit, or publish. */
+export const FOUNDRY_EXO_CANNOT_SHIP = "Exo cannot ship. Use: node scripts/node/release.mjs [patch|minor|major]";
+/**
+ * Release keyword used to run version-manager + git add -A + npm publish from the exo.
+ * That path is refused. Canonical mill: reconcile → artifacts-only → gate → PUT → tag.
+ */
+export async function executeReleaseWorkflow(operation, _context, jobId, _routing) {
+    await frameworkLogger.log("enforcer-tools", "release-workflow-refused", "error", {
+        jobId,
+        operation,
+        reason: "foundry-exo-cannot-ship",
+    });
+    return {
+        operation: "release",
+        passed: false,
+        blocked: true,
+        errors: [FOUNDRY_EXO_CANNOT_SHIP],
+        warnings: [],
+        fixes: [],
+        report: {
+            passed: false,
+            operation: "release",
+            errors: [FOUNDRY_EXO_CANNOT_SHIP],
+            warnings: [],
+            results: [],
+            timestamp: new Date(),
+        },
+    };
+}
+/**
+ * Delegate a task to another agent via AgentDelegator
+ * This is the key integration that ensures enforcer routes to best agent
+ */
+async function delegateToAgent(agentName, operation, context, jobId) {
+    try {
+        // Create a minimal state manager and config loader for the delegator
+        const stateManager = new XrayStateManager();
+        // Create the delegator
+        const delegator = new AgentDelegator(stateManager, xrayConfigLoader);
+        // Build task description for the delegated agent
+        const taskDescription = buildTaskDescription(operation, context);
+        // Build the delegation request
+        const request = {
+            operation,
+            description: taskDescription,
+            context: {
+                ...context,
+                originalJobId: jobId,
+            },
+            sessionId: stateManager.get("current_session_id") || `delegated-${jobId}`,
+        };
+        // Analyze and get delegation strategy
+        const analysis = await delegator.analyzeDelegation(request);
+        // Execute the delegation
+        const result = await delegator.executeDelegation(analysis, request);
+        await frameworkLogger.log("enforcer-tools", "delegation-complete", "info", {
+            jobId,
+            delegatedTo: agentName,
+            success: result.success,
+            agentsUsed: result.agents,
+        });
+        // Convert delegation result to EnforcementResult format
+        return {
+            operation,
+            passed: result.success,
+            blocked: !result.success,
+            errors: result.errors || [],
+            warnings: [],
+            fixes: [],
+            report: {
+                passed: result.success,
+                operation,
+                timestamp: new Date(),
+                errors: result.errors || [],
+                warnings: [],
+                results: [],
+            },
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        await frameworkLogger.log("enforcer-tools", "delegation-failed", "error", {
+            jobId,
+            delegatedTo: agentName,
+            error: errorMessage,
+        });
+        // Fall back to self-execution if delegation fails
+        return await ruleValidationSelf(operation, context, jobId);
+    }
+}
+/**
+ * Fallback: Execute validation ourselves if delegation fails
+ */
+async function ruleValidationSelf(operation, context, jobId) {
+    const report = await ruleEnforcer.validateOperation(operation, context);
+    return {
+        operation,
+        passed: report.passed,
+        blocked: report.errors.length > 0,
+        errors: report.errors,
+        warnings: report.warnings,
+        fixes: [],
+        report,
+    };
+}
+/**
+ * Run pre-commit validation with auto-fix enabled
+ * This is the integration point that automatically creates test files when needed
+ */
+async function runPreCommitValidationWithAutoFix(files, operation = "commit") {
+    try {
+        // Dynamically import to avoid circular dependencies
+        const { testAutoCreationProcessor } = await import("../processors/implementations/test-auto-creation-processor.js");
+        let fixesApplied = 0;
+        // Process each file
+        for (const filePath of files) {
+            // Only process TypeScript source files
+            if (filePath.endsWith(".ts") && !filePath.endsWith(".test.ts")) {
+                const result = await testAutoCreationProcessor.execute({
+                    tool: "write",
+                    args: { filePath },
+                    directory: process.cwd(),
+                    filePath,
+                    operation,
+                });
+                if (result.success) {
+                    fixesApplied++;
+                }
+            }
+        }
+        return { success: true, fixesApplied };
+    }
+    catch (error) {
+        return {
+            success: false,
+            fixesApplied: 0,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+/**
+ * Rule Validation Tool - Validates operations against rule hierarchy
+ * Now with intelligent task routing via TaskSkillRouter
+ * Automatically delegates to best agent when confidence is high
+ */
+export async function ruleValidation(operation, context) {
+    const jobId = `rule-validation-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
+    // PRE-PROCESS: Get intelligent routing recommendation
+    const { enhancedContext, routing } = await preProcessAndRoute(operation, context);
+    await frameworkLogger.log("enforcer-tools", "rule-validation-start", "info", {
+        jobId,
+        operation,
+        files: context.files?.length || 0,
+        hasExistingCode: !!context.existingCode,
+        // Add routing info to logs
+        routedTo: routing.suggestedAgent,
+        routingSkill: routing.suggestedSkill,
+        routingConfidence: routing.confidence,
+    });
+    // DELEGATION LOGIC: If high confidence and recommended agent is not self-handled, delegate!
+    const shouldDelegate = routing.confidence >= DELEGATION_CONFIDENCE_THRESHOLD &&
+        !ENFORCER_HANDLES.has(routing.suggestedAgent) &&
+        routing.suggestedAgent !== "code-reviewer";
+    // SPECIAL CASE: Release workflow - execute full release process
+    if (routing.matchedKeyword === "release-workflow") {
+        await frameworkLogger.log("enforcer-tools", "release-workflow-triggered", "info", {
+            jobId,
+            operation,
+            reason: "foundry-exo-cannot-ship",
+        });
+        // Execute the release workflow
+        return await executeReleaseWorkflow(operation, context, jobId, routing);
+    }
+    if (shouldDelegate) {
+        await frameworkLogger.log("enforcer-tools", "delegating-to-agent", "info", {
+            jobId,
+            operation,
+            delegatedTo: routing.suggestedAgent,
+            confidence: routing.confidence,
+            reason: `High confidence (${routing.confidence}) routing to specialized agent`,
+        });
+        // Delegate to the recommended agent instead of doing work itself
+        return await delegateToAgent(routing.suggestedAgent, operation, context, jobId);
+    }
+    // Use enhanced context with routing for validation
+    const report = await ruleEnforcer.validateOperation(operation, enhancedContext);
+    const result = {
+        operation,
+        passed: report.passed,
+        blocked: report.errors.length > 0,
+        errors: report.errors,
+        warnings: report.warnings,
+        fixes: [],
+        report,
+    };
+    // Generate fixes for common issues
+    if (!report.passed) {
+        result.fixes = generateFixes(report, context);
+    }
+    // AUTO-FIX: Run pre-commit validation with auto-fix for missing tests
+    // This integrates the auto-fix path into the standard validation flow
+    if (!report.passed && context.files && context.files.length > 0) {
+        const autoFixResult = await runPreCommitValidationWithAutoFix(context.files, operation);
+        if (autoFixResult.success && autoFixResult.fixesApplied > 0) {
+            await frameworkLogger.log("enforcer-tools", "auto-fix-applied", "info", {
+                jobId,
+                fixesApplied: autoFixResult.fixesApplied,
+                files: context.files,
+            });
+        }
+    }
+    // INTEGRATION POINT: Check for reporting rules and trigger report generation
+    // This integrates reporting triggers into the existing rule validation pipeline
+    if (!report.passed) {
+        // Trigger report generation for rule violations
+        await frameworkLogger.log("enforcer-tools", "reporting-triggered", "info", {
+            jobId,
+            operation,
+            hasViolations: report.errors.length > 0,
+            hasWarnings: report.warnings.length > 0,
+            context: {
+                files: context.files?.length,
+                operation,
+                timestamp: new Date().toISOString(),
+            },
+        });
+    }
+    await frameworkLogger.log("enforcer-tools", "rule-validation-complete", result.passed ? "success" : "error", {
+        jobId,
+        operation,
+        passed: result.passed,
+        blocked: result.blocked,
+        errorCount: result.errors.length,
+        warningCount: result.warnings.length,
+        fixCount: result.fixes.length,
+    });
+    return result;
+}
+/**
+ * Context Analysis Validation Tool - Validates contextual analysis integration
+ */
+export async function contextAnalysisValidation(files, operation) {
+    const jobId = `context-validation-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
+    await frameworkLogger.log("enforcer-tools", "context-validation-start", "info", {
+        jobId,
+        operation,
+        fileCount: files.length,
+    });
+    // Check if files exist and are readable
+    const existingFiles = new Map();
+    const missingFiles = [];
+    for (const file of files) {
+        try {
+            const content = fs.readFileSync(file, "utf8");
+            existingFiles.set(file, content);
+        }
+        catch (error) {
+            missingFiles.push(file);
+        }
+    }
+    const context = {
+        operation,
+        files,
+        existingCode: existingFiles,
+    };
+    // Run comprehensive validation
+    const validationResult = await ruleValidation(operation, context);
+    // Additional context-specific checks
+    const contextIssues = await validateContextIntegration(files, existingFiles);
+    const result = {
+        ...validationResult,
+        errors: [...validationResult.errors, ...contextIssues.errors],
+        warnings: [...validationResult.warnings, ...contextIssues.warnings],
+        blocked: validationResult.blocked,
+    };
+    await frameworkLogger.log("enforcer-tools", "context-validation-complete", result.passed ? "success" : "error", {
+        jobId,
+        operation,
+        fileCount: files.length,
+        contextErrors: contextIssues.errors.length,
+        contextWarnings: contextIssues.warnings.length,
+    });
+    return result;
+}
+/**
+ * Codex Enforcement Tool - Comprehensive codex compliance validation
+ */
+export async function codexEnforcement(operation, files, newCode) {
+    const jobId = `codex-enforcement-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
+    await frameworkLogger.log("enforcer-tools", "codex-enforcement-start", "info", {
+        jobId,
+        operation,
+        fileCount: files.length,
+        hasNewCode: !!newCode,
+    });
+    // Load existing code for comparison
+    const existingCode = new Map();
+    for (const file of files) {
+        try {
+            const content = fs.readFileSync(file, "utf8");
+            existingCode.set(file, content);
+        }
+        catch (error) {
+            // File doesn't exist yet (new file)
+        }
+    }
+    const context = {
+        operation,
+        files,
+        existingCode,
+        ...(newCode && { newCode }),
+        dependencies: extractDependencies(newCode || "", files),
+    };
+    const validationResult = await ruleValidation(operation, context);
+    // Generate codex compliance report
+    const codexReport = await generateCodexComplianceReport(files, newCode);
+    const combinedErrors = [...validationResult.errors, ...codexReport.violations];
+    const combinedWarnings = [...validationResult.warnings, ...codexReport.warnings];
+    const result = {
+        ...validationResult,
+        errors: combinedErrors,
+        warnings: combinedWarnings,
+        blocked: combinedErrors.length > 0,
+    };
+    await frameworkLogger.log("enforcer-tools", "codex-enforcement-complete", result.passed ? "success" : "error", {
+        jobId,
+        operation,
+        codexViolations: codexReport.violations.length,
+        codexWarnings: codexReport.warnings.length,
+        complianceScore: codexReport.complianceScore,
+    });
+    return result;
+}
+/**
+ * Quality Gate Check Tool - Final validation before commit/execution
+ */
+export async function qualityGateCheck(operation, context) {
+    const jobId = `quality-gate-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
+    await frameworkLogger.log("enforcer-tools", "quality-gate-start", "info", {
+        jobId,
+        operation,
+        files: context.files.length,
+        hasTests: !!(context.tests && context.tests.length > 0),
+    });
+    // Run all validations
+    const validations = await Promise.all([
+        ruleValidation(operation, {
+            operation,
+            files: context.files,
+            ...(context.newCode && { newCode: context.newCode }),
+            ...(context.tests && { tests: context.tests }),
+            ...(context.dependencies && { dependencies: context.dependencies }),
+        }),
+        contextAnalysisValidation(context.files, operation),
+        codexEnforcement(operation, context.files, context.newCode),
+    ]);
+    // Combine results
+    const combinedErrors = validations.flatMap((v) => v.errors);
+    const combinedWarnings = validations.flatMap((v) => v.warnings);
+    const combinedFixes = validations.flatMap((v) => v.fixes);
+    const passed = combinedErrors.length === 0;
+    const blocked = !passed; // Quality gates block on any error
+    const result = {
+        operation,
+        passed,
+        blocked,
+        errors: combinedErrors,
+        warnings: combinedWarnings,
+        fixes: combinedFixes,
+        report: validations[0].report, // Use first report as primary
+    };
+    // Execute automatic fixes if operation would pass after fixes
+    if (blocked && combinedFixes.some((f) => f.type === "auto")) {
+        await executeAutomaticFixes(combinedFixes.filter((f) => f.type === "auto"));
+        result.blocked = false; // Allow after auto-fixes
+    }
+    await frameworkLogger.log("enforcer-tools", "quality-gate-complete", passed ? "success" : "error", {
+        jobId,
+        operation,
+        passed,
+        blocked: result.blocked,
+        totalErrors: combinedErrors.length,
+        totalWarnings: combinedWarnings.length,
+        autoFixes: combinedFixes.filter((f) => f.type === "auto").length,
+    });
+    return result;
+}
+// Helper functions
+function generateFixes(report, context) {
+    const fixes = [];
+    for (const result of report.results) {
+        if (result.fixes) {
+            for (const fix of result.fixes) {
+                if (fix.type === "create-file") {
+                    fixes.push({
+                        type: "auto",
+                        description: fix.description,
+                        action: async () => {
+                            if (fix.filePath && fix.content) {
+                                const dir = path.dirname(fix.filePath);
+                                if (!fs.existsSync(dir)) {
+                                    fs.mkdirSync(dir, { recursive: true });
+                                }
+                                fs.writeFileSync(fix.filePath, fix.content);
+                            }
+                        },
+                    });
+                }
+                else {
+                    fixes.push({
+                        type: "manual",
+                        description: fix.description,
+                    });
+                }
+            }
+        }
+    }
+    return fixes;
+}
+async function validateContextIntegration(files, existingCode) {
+    const errors = [];
+    const warnings = [];
+    for (const [filePath, content] of existingCode) {
+        // Check for proper context provider usage
+        if (content.includes("CodebaseContextAnalyzer") &&
+            !content.includes("memoryConfig")) {
+            warnings.push(`${filePath}: CodebaseContextAnalyzer should use memory configuration`);
+        }
+        if (content.includes("ASTCodeParser") &&
+            !content.includes("try") &&
+            !content.includes("catch")) {
+            errors.push(`${filePath}: ASTCodeParser initialization should handle missing ast-grep gracefully`);
+        }
+        if (content.includes("DependencyGraphBuilder") &&
+            !content.includes("contextAnalyzer")) {
+            errors.push(`${filePath}: DependencyGraphBuilder requires context analyzer parameter`);
+        }
+    }
+    return { errors, warnings };
+}
+async function generateCodexComplianceReport(files, newCode) {
+    const violations = [];
+    const warnings = [];
+    // Basic codex checks (simplified - would integrate with full codex validation)
+    if (newCode) {
+        if (newCode.includes("any") || newCode.includes("@ts-ignore")) {
+            violations.push('Codex violation: Type safety first - no "any" types or ts-ignore allowed');
+        }
+        // Check for actual console.log() calls - only flag if NOT in a comment
+        const consoleLogCallMatches = newCode.match(/console\.log\(/g);
+        if (consoleLogCallMatches && consoleLogCallMatches.length > 0) {
+            const lines = newCode.split('\n');
+            let hasConsoleLogInCode = false;
+            for (const line of lines) {
+                const trimmed = line.trim();
+                if (trimmed.includes('console.log(')) {
+                    const beforeConsole = trimmed.substring(0, trimmed.indexOf('console.log('));
+                    if (!beforeConsole.includes('//') && !beforeConsole.includes('/*')) {
+                        hasConsoleLogInCode = true;
+                        break;
+                    }
+                }
+            }
+            if (hasConsoleLogInCode) {
+                violations.push('Codex violation: console.log() statements detected in production code - use frameworkLogger instead');
+            }
+        }
+        if (!newCode.includes("try") &&
+            (newCode.includes("await") || newCode.includes("Promise"))) {
+            warnings.push("Codex warning: Async operations should have error handling");
+        }
+    }
+    const complianceScore = violations.length === 0
+        ? 100
+        : Math.max(0, 100 - violations.length * 20 - warnings.length * 5);
+    return { violations, warnings, complianceScore };
+}
+function extractDependencies(code, files) {
+    const dependencies = [];
+    // Simple regex-based dependency extraction (would be enhanced with proper AST parsing)
+    const importRegex = /import\s+.*?\s+from\s+['"]([^'"]+)['"]/g;
+    let match;
+    while ((match = importRegex.exec(code)) !== null) {
+        const dep = match[1];
+        if (dep && !dep.startsWith(".") && !dep.startsWith("/")) {
+            dependencies.push(dep);
+        }
+    }
+    return dependencies;
+}
+async function executeAutomaticFixes(fixes) {
+    for (const fix of fixes) {
+        if (fix.action) {
+            try {
+                await fix.action();
+                await frameworkLogger.log("enforcer-tools", "auto-fix-executed", "success", {
+                    description: fix.description,
+                });
+            }
+            catch (error) {
+                await frameworkLogger.log("enforcer-tools", "auto-fix-failed", "error", {
+                    description: fix.description,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+    }
+}
+// Additional utility functions for enforcer operations
+/**
+ * Get comprehensive enforcement status
+ */
+export async function getEnforcementStatus() {
+    try {
+        const stats = ruleEnforcer.getRuleStats();
+        return {
+            rules: stats.totalRules,
+            validations: 0, // Would be tracked in real implementation
+            violations: 0, // Would be tracked in real implementation
+            fixes: 0, // Would be tracked in real implementation
+            success: true,
+        };
+    }
+    catch (error) {
+        await frameworkLogger.log("enforcer-tools", "status-check-failed", "error", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return {
+            rules: 0,
+            validations: 0,
+            violations: 0,
+            fixes: 0,
+            success: false,
+        };
+    }
+}
+/**
+ * Run comprehensive pre-commit validation
+ */
+export async function runPreCommitValidation(files, operation = "commit") {
+    const jobId = `pre-commit-validation-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
+    await frameworkLogger.log("enforcer-tools", "pre-commit-validation-start", "info", {
+        jobId,
+        files: files.length,
+        operation,
+    });
+    try {
+        // Run all validation types
+        const validations = await Promise.allSettled([
+            ruleValidation(operation, { operation, files }),
+            contextAnalysisValidation(files, operation),
+            codexEnforcement(operation, files),
+        ]);
+        // Aggregate results
+        const errors = [];
+        const warnings = [];
+        const fixes = [];
+        for (const result of validations) {
+            if (result.status === "fulfilled") {
+                errors.push(...result.value.errors);
+                warnings.push(...result.value.warnings);
+                fixes.push(...result.value.fixes);
+            }
+            else {
+                errors.push(`Validation failed: ${result.reason}`);
+            }
+        }
+        const finalResult = {
+            operation,
+            passed: errors.length === 0,
+            blocked: errors.length > 0,
+            errors,
+            warnings,
+            fixes,
+            report: validations[0]?.status === "fulfilled"
+                ? validations[0].value.report
+                : {},
+        };
+        await frameworkLogger.log("enforcer-tools", "pre-commit-validation-complete", finalResult.passed ? "success" : "error", {
+            jobId,
+            operation,
+            passed: finalResult.passed,
+            blocked: finalResult.blocked,
+            errors: errors.length,
+            warnings: warnings.length,
+            fixes: fixes.length,
+        });
+        return finalResult;
+    }
+    catch (error) {
+        await frameworkLogger.log("enforcer-tools", "pre-commit-validation-failed", "error", {
+            jobId,
+            operation,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return {
+            operation,
+            passed: false,
+            blocked: true,
+            errors: [
+                `Pre-commit validation failed: ${error instanceof Error ? error.message : String(error)}`,
+            ],
+            warnings: [],
+            fixes: [],
+            report: {},
+        };
+    }
+}
+// Export tools for MCP integration
+export const enforcerTools = {
+    ruleValidation,
+    contextAnalysisValidation,
+    codexEnforcement,
+    qualityGateCheck,
+    getEnforcementStatus,
+    runPreCommitValidation,
+};