@backendkit-labs/agent-coding 0.14.0

package/dist/tools/save-learning.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.saveLearningTool = void 0;
+const agent_core_1 = require("@backendkit-labs/agent-core");
+const LearningRouter_1 = require("../store/LearningRouter");
+exports.saveLearningTool = (0, agent_core_1.defineTool)({
+    name: 'save_learning',
+    description: [
+        'Save a learning from this session. The system classifies it automatically and routes it to the right destination:',
+        '- tool_quirk  → agent-notes/{agent}.md  (specific behavior of a tool or library)',
+        '- skill       → skills/{name}.yaml       (reusable step-by-step process)',
+        '- project     → contexto-proyecto.md     (architectural decision or project fact)',
+        '- user        → USER.md                  (user preference or working style)',
+        '- session     → discarded                (ephemeral, not worth persisting)',
+        'Duplicates are detected and skipped automatically.',
+    ].join('\n'),
+    input: agent_core_1.z.object({
+        content: agent_core_1.z.string().min(1).describe('The learning to save (concrete and specific)'),
+    }),
+    execute: async ({ content }, ctx) => {
+        if (!ctx.store)
+            return 'Error: no persistent store configured';
+        if (!ctx.llmCall) {
+            // Fallback: no LLM available, append to legacy learnings.md
+            ctx.store.appendLearning(content);
+            return 'Learning saved (no router available).';
+        }
+        const store = ctx.store;
+        const result = await (0, LearningRouter_1.routeLearning)(content, {
+            projectDir: store.projectDir,
+            homeDir: store.homeDir,
+            llm: ctx.llmCall,
+            emit: ctx.emitCompacting,
+        });
+        if (result.skipped) {
+            return `Learning skipped (${result.type === 'session' ? 'ephemeral' : 'duplicate'}) → ${result.target}`;
+        }
+        return `Learning saved [${result.type}] → ${result.target}`;
+    },
+});
+//# sourceMappingURL=save-learning.js.map

package/dist/tools/save-learning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-learning.js","sourceRoot":"","sources":["../../src/tools/save-learning.ts"],"names":[],"mappings":";;;AAAA,4DAA4D;AAC5D,4DAAwD;AAE3C,QAAA,gBAAgB,GAAG,IAAA,uBAAU,EAAC;IACvC,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE;QACT,mHAAmH;QACnH,kFAAkF;QAClF,0EAA0E;QAC1E,mFAAmF;QACnF,6EAA6E;QAC7E,4EAA4E;QAC5E,oDAAoD;KACvD,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,KAAK,EAAE,cAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,cAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KACtF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;QAChC,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,uCAAuC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,4DAA4D;YAC5D,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,uCAAuC,CAAC;QACnD,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAqD,CAAC;QAExE,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,OAAO,EAAE;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAK,KAAK,CAAC,OAAO;YACzB,GAAG,EAAS,GAAG,CAAC,OAAO;YACvB,IAAI,EAAQ,GAAG,CAAC,cAAc;SACjC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,qBAAqB,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5G,CAAC;QACD,OAAO,mBAAmB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC;CACJ,CAAC,CAAC"}

package/dist/tools/save-user-preference.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from '@backendkit-labs/agent-core';
+export declare const saveUserPreferenceTool: ToolDefinition;
+//# sourceMappingURL=save-user-preference.d.ts.map

package/dist/tools/save-user-preference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-user-preference.d.ts","sourceRoot":"","sources":["../../src/tools/save-user-preference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,6BAA6B,CAAC;AAEpF,eAAO,MAAM,sBAAsB,EAAE,cAgBpC,CAAC"}

package/dist/tools/save-user-preference.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.saveUserPreferenceTool = void 0;
+exports.saveUserPreferenceTool = {
+    name: 'save_user_preference',
+    description: 'Save a global user preference that applies across all projects — communication style, general habits, things to always or never do.',
+    parameters: {
+        type: 'object',
+        properties: {
+            content: { type: 'string', description: 'The preference to save (e.g. "user prefers concise responses, no emojis")' },
+        },
+        required: ['content'],
+    },
+    async execute(args, ctx) {
+        const { content } = args;
+        if (!ctx.store)
+            return 'Error: no persistent store configured';
+        ctx.store.appendUserPreference(content);
+        return `User preference saved.`;
+    },
+};
+//# sourceMappingURL=save-user-preference.js.map

package/dist/tools/save-user-preference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-user-preference.js","sourceRoot":"","sources":["../../src/tools/save-user-preference.ts"],"names":[],"mappings":";;;AAEa,QAAA,sBAAsB,GAAmB;IAClD,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,qIAAqI;IAClJ,UAAU,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2EAA2E,EAAE;SACxH;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACxB;IACD,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,GAAqB;QAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,IAA2B,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,uCAAuC,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,wBAAwB,CAAC;IACpC,CAAC;CACJ,CAAC"}

package/dist/tools/search-files.d.ts

@@ -0,0 +1,2 @@
+export declare const searchFilesTool: import("@backendkit-labs/agent-core").ToolDefinition;
+//# sourceMappingURL=search-files.d.ts.map

package/dist/tools/search-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-files.d.ts","sourceRoot":"","sources":["../../src/tools/search-files.ts"],"names":[],"mappings":"AAyEA,eAAO,MAAM,eAAe,sDAoD1B,CAAC"}

package/dist/tools/search-files.js

@@ -0,0 +1,170 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.searchFilesTool = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const agent_core_1 = require("@backendkit-labs/agent-core");
+const path_sandbox_1 = require("./path-sandbox");
+const MAX_RESULTS = 200;
+const MAX_FILE_SIZE = 2 * 1024 * 1024; // 2 MB — skip binary/large files
+const SKIP_DIRS = new Set(['node_modules', 'dist', '.git', '.next', 'build', 'coverage', '__pycache__', '.venv']);
+/** Compile a glob pattern to a RegExp that matches file basenames or relative paths. */
+function globToRegex(glob) {
+    // B2: use \x00 as sentinel for ** to avoid collision with literal spaces in paths
+    const escaped = glob
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*\*/g, '\x00')
+        .replace(/\*/g, '[^/\\\\]*')
+        .replace(/\?/g, '[^/\\\\]')
+        .replace(/\x00/g, '.*');
+    return new RegExp(escaped + '$', 'i');
+}
+function matchesGlob(filePath, glob) {
+    if (!glob || glob === '*')
+        return true;
+    const re = globToRegex(glob);
+    return re.test(filePath) || re.test(path.basename(filePath));
+}
+function walkAndSearch(dir, baseDir, pattern, glob, results) {
+    if (results.length >= MAX_RESULTS)
+        return;
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        if (results.length >= MAX_RESULTS)
+            break;
+        if (entry.name.startsWith('.') && entry.name !== '.env')
+            continue;
+        const fullPath = path.join(dir, entry.name);
+        const relPath = path.relative(baseDir, fullPath);
+        if (entry.isDirectory()) {
+            if (SKIP_DIRS.has(entry.name))
+                continue;
+            walkAndSearch(fullPath, baseDir, pattern, glob, results);
+        }
+        else if (entry.isFile()) {
+            if (!matchesGlob(relPath, glob))
+                continue;
+            let stat;
+            try {
+                stat = fs.statSync(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (stat.size > MAX_FILE_SIZE)
+                continue;
+            let content;
+            try {
+                content = fs.readFileSync(fullPath, 'utf-8');
+            }
+            catch {
+                continue;
+            } // binary file
+            const lines = content.split('\n');
+            for (let i = 0; i < lines.length; i++) {
+                if (results.length >= MAX_RESULTS)
+                    break;
+                if (pattern.test(lines[i])) {
+                    results.push(`${relPath}:${i + 1}:${lines[i]}`);
+                }
+            }
+        }
+    }
+}
+exports.searchFilesTool = (0, agent_core_1.defineTool)({
+    name: 'search_files',
+    description: 'Search for text patterns across files. ' +
+        'Returns matching lines with relative file paths and line numbers. ' +
+        'Cross-platform — works on Windows, Mac, and Linux without external tools.',
+    input: agent_core_1.z.object({
+        pattern: agent_core_1.z.string().describe('Regex or literal text to search for'),
+        path: agent_core_1.z.string().optional().describe('Directory or file to search in (default: working dir)'),
+        glob: agent_core_1.z.string().optional().describe('File glob filter (e.g. "*.ts", "**/*.json", "*.{ts,tsx}")'),
+        case_insensitive: agent_core_1.z.boolean().default(false).describe('Case-insensitive search'),
+    }),
+    execute: async ({ pattern, path: searchPath, glob, case_insensitive }, ctx) => {
+        const cwd = ctx.workingDir ?? process.cwd();
+        const targetPath = searchPath ? (0, path_sandbox_1.resolveAndCheck)(cwd, searchPath) : cwd;
+        let regex;
+        try {
+            regex = new RegExp(pattern, case_insensitive ? 'i' : '');
+        }
+        catch {
+            return `Error: Invalid regex pattern: ${pattern}`;
+        }
+        // B3: wrap statSync so a missing path returns a clean error
+        let stat;
+        try {
+            stat = fs.statSync(targetPath);
+        }
+        catch {
+            return `Error: Path not found: ${searchPath ?? cwd}`;
+        }
+        const results = [];
+        if (stat.isFile()) {
+            // Single file search
+            let content;
+            try {
+                content = fs.readFileSync(targetPath, 'utf-8');
+            }
+            catch {
+                return `Error: Cannot read file: ${searchPath}`;
+            }
+            const relPath = path.relative(cwd, targetPath);
+            content.split('\n').forEach((line, i) => {
+                if (results.length < MAX_RESULTS && regex.test(line)) {
+                    results.push(`${relPath}:${i + 1}:${line}`);
+                }
+            });
+        }
+        else {
+            walkAndSearch(targetPath, cwd, regex, glob, results);
+        }
+        if (results.length === 0)
+            return '(no matches found)';
+        const output = results.join('\n');
+        return results.length >= MAX_RESULTS
+            ? output + `\n[truncated at ${MAX_RESULTS} results]`
+            : output;
+    },
+});
+//# sourceMappingURL=search-files.js.map

package/dist/tools/search-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-files.js","sourceRoot":"","sources":["../../src/tools/search-files.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,4DAA4D;AAC5D,iDAAiD;AAEjD,MAAM,WAAW,GAAI,GAAG,CAAC;AACzB,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,iCAAiC;AAExE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAElH,wFAAwF;AACxF,SAAS,WAAW,CAAC,IAAY;IAC7B,kFAAkF;IAClF,MAAM,OAAO,GAAG,IAAI;SACf,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC;SAC1B,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAwB;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAClB,GAAW,EACX,OAAe,EACf,OAAe,EACf,IAAwB,EACxB,OAAiB;IAEjB,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;QAAE,OAAO;IAE1C,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAC/D,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;IAEjB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;YAAE,MAAM;QACzC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAElE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAElD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;gBAAE,SAAS;YAE1C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa;gBAAE,SAAS;YAExC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YACrD,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC,CAAC,cAAc;YAElC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;oBAAE,MAAM;gBACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC;AAEY,QAAA,eAAe,GAAG,IAAA,uBAAU,EAAC;IACtC,IAAI,EAAE,cAAc;IACpB,WAAW,EACP,yCAAyC;QACzC,oEAAoE;QACpE,2EAA2E;IAC/E,KAAK,EAAE,cAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAW,cAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAC5E,IAAI,EAAc,cAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QACzG,IAAI,EAAc,cAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;QAC7G,gBAAgB,EAAE,cAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;KACnF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,EAAE;QAC1E,MAAM,GAAG,GAAU,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,IAAA,8BAAe,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEvE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACD,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,iCAAiC,OAAO,EAAE,CAAC;QACtD,CAAC;QAED,4DAA4D;QAC5D,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QACvC,MAAM,CAAC;YAAC,OAAO,0BAA0B,UAAU,IAAI,GAAG,EAAE,CAAC;QAAC,CAAC;QAE/D,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAChB,qBAAqB;YACrB,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YACvD,MAAM,CAAC;gBAAC,OAAO,4BAA4B,UAAU,EAAE,CAAC;YAAC,CAAC;YAC1D,MAAM,OAAO,GAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACpC,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAChD,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,oBAAoB,CAAC;QAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,MAAM,IAAI,WAAW;YAChC,CAAC,CAAC,MAAM,GAAG,mBAAmB,WAAW,WAAW;YACpD,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;CACJ,CAAC,CAAC"}

package/dist/tools/secret-scanner.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Non-blocking secret detection for agent write paths.
+ *
+ * Logs a console.warn when content appears to contain credentials.
+ * Does NOT block the write — legitimate code examples may match patterns.
+ * The warning is surfaced to the developer/operator, not exposed to the LLM.
+ */
+/**
+ * Scan content for potential secrets. Returns matched pattern names (empty if clean).
+ * The caller decides what to do with the findings (typically log a warning).
+ */
+export declare function scanForSecrets(content: string): string[];
+/** Log a non-blocking warning when secrets are detected. Always logs to stderr. */
+export declare function warnIfSecrets(filePath: string, content: string): string | undefined;
+//# sourceMappingURL=secret-scanner.d.ts.map

package/dist/tools/secret-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scanner.d.ts","sourceRoot":"","sources":["../../src/tools/secret-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAMxD;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASnF"}

package/dist/tools/secret-scanner.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Non-blocking secret detection for agent write paths.
+ *
+ * Logs a console.warn when content appears to contain credentials.
+ * Does NOT block the write — legitimate code examples may match patterns.
+ * The warning is surfaced to the developer/operator, not exposed to the LLM.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanForSecrets = scanForSecrets;
+exports.warnIfSecrets = warnIfSecrets;
+const SECRET_PATTERNS = [
+    { name: 'Anthropic API key', pattern: /sk-ant-[a-zA-Z0-9_-]{20,}/ },
+    { name: 'OpenAI API key', pattern: /sk-(?!ant-)[a-zA-Z0-9]{32,}/ },
+    { name: 'AWS Access Key ID', pattern: /AKIA[A-Z0-9]{16}/ },
+    { name: 'GitHub token (PAT)', pattern: /ghp_[a-zA-Z0-9]{36}/ },
+    { name: 'GitLab token', pattern: /glpat-[a-zA-Z0-9_-]{20}/ },
+    { name: 'Private key block', pattern: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/ },
+    { name: 'Generic secret value', pattern: /(?:password|secret|apiKey|api_key|auth_token)\s*[:=]\s*["']?[a-zA-Z0-9+\/=_-]{24,}["']?/i },
+];
+/**
+ * Scan content for potential secrets. Returns matched pattern names (empty if clean).
+ * The caller decides what to do with the findings (typically log a warning).
+ */
+function scanForSecrets(content) {
+    const found = [];
+    for (const { name, pattern } of SECRET_PATTERNS) {
+        if (pattern.test(content))
+            found.push(name);
+    }
+    return found;
+}
+/** Log a non-blocking warning when secrets are detected. Always logs to stderr. */
+function warnIfSecrets(filePath, content) {
+    const matches = scanForSecrets(content);
+    if (matches.length === 0)
+        return undefined;
+    const msg = `[SecretScanner] ⚠ Potential secret(s) detected in "${filePath}": ` +
+        `${matches.join(', ')}. ` +
+        `Verify this is intentional and never commit secrets to version control.`;
+    console.warn(msg);
+    return msg;
+}
+//# sourceMappingURL=secret-scanner.js.map

package/dist/tools/secret-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scanner.js","sourceRoot":"","sources":["../../src/tools/secret-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAgBH,wCAMC;AAGD,sCASC;AAhCD,MAAM,eAAe,GAA6C;IAC9D,EAAE,IAAI,EAAE,mBAAmB,EAAM,OAAO,EAAE,2BAA2B,EAAE;IACvE,EAAE,IAAI,EAAE,gBAAgB,EAAS,OAAO,EAAE,6BAA6B,EAAE;IACzE,EAAE,IAAI,EAAE,mBAAmB,EAAM,OAAO,EAAE,kBAAkB,EAAE;IAC9D,EAAE,IAAI,EAAE,oBAAoB,EAAK,OAAO,EAAE,qBAAqB,EAAE;IACjE,EAAE,IAAI,EAAE,cAAc,EAAW,OAAO,EAAE,yBAAyB,EAAE;IACrE,EAAE,IAAI,EAAE,mBAAmB,EAAM,OAAO,EAAE,mDAAmD,EAAE;IAC/F,EAAE,IAAI,EAAE,sBAAsB,EAAG,OAAO,EAAE,0FAA0F,EAAE;CACzI,CAAC;AAEF;;;GAGG;AACH,SAAgB,cAAc,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,eAAe,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,SAAgB,aAAa,CAAC,QAAgB,EAAE,OAAe;IAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,GAAG,GACL,sDAAsD,QAAQ,KAAK;QACnE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACzB,yEAAyE,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/tools/update-session.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from '@backendkit-labs/agent-core';
+export declare const updateSessionTool: ToolDefinition;
+//# sourceMappingURL=update-session.d.ts.map

package/dist/tools/update-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-session.d.ts","sourceRoot":"","sources":["../../src/tools/update-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,6BAA6B,CAAC;AAEpF,eAAO,MAAM,iBAAiB,EAAE,cAiD/B,CAAC"}

package/dist/tools/update-session.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateSessionTool = void 0;
+exports.updateSessionTool = {
+    name: 'update_session',
+    description: [
+        'Update memory/session.md with the current work state.',
+        'Call this after completing a task, a wave of agent calls, or making key decisions.',
+        'Decisions and learnings ACCUMULATE over time — do not repeat existing ones.',
+        'Issues and next_steps REPLACE the current list — provide the full updated list.',
+    ].join(' '),
+    parameters: {
+        type: 'object',
+        properties: {
+            feature: {
+                type: 'string',
+                description: 'What is being worked on right now and its progress. Example: "auth-login — implementing JWT refresh token rotation (70%)"',
+            },
+            decisions: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Key technical decisions made in this turn (each appended as a bullet). Example: ["Use Redis for session storage — lower latency than DB", "Rotate refresh tokens on each use"]',
+            },
+            issues: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Current blockers or open items — replaces the full list. Empty array clears all issues.',
+            },
+            next_steps: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'What needs to happen next — replaces the full list.',
+            },
+            learnings: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Non-obvious things discovered about the codebase (each appended as a bullet). Example: ["UserService caches tokens in memory — invalidation requires service restart"]',
+            },
+        },
+    },
+    async execute(args, ctx) {
+        const updates = args;
+        if (!ctx.store)
+            return 'Error: no persistent store configured';
+        ctx.store.updateSession(updates);
+        return 'Session updated.';
+    },
+};
+//# sourceMappingURL=update-session.js.map

package/dist/tools/update-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-session.js","sourceRoot":"","sources":["../../src/tools/update-session.ts"],"names":[],"mappings":";;;AAEa,QAAA,iBAAiB,GAAmB;IAC7C,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE;QACT,uDAAuD;QACvD,oFAAoF;QACpF,6EAA6E;QAC7E,iFAAiF;KACpF,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,UAAU,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,2HAA2H;aAC3I;YACD,SAAS,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,gLAAgL;aAChM;YACD,MAAM,EAAE;gBACJ,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,yFAAyF;aACzG;YACD,UAAU,EAAE;gBACR,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,qDAAqD;aACrE;YACD,SAAS,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,wKAAwK;aACxL;SACJ;KACJ;IACD,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,GAAqB;QAC9C,MAAM,OAAO,GAAG,IAMf,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,uCAAuC,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,kBAAkB,CAAC;IAC9B,CAAC;CACJ,CAAC"}

package/dist/tools/write-file.d.ts

@@ -0,0 +1,2 @@
+export declare const writeFileTool: import("@backendkit-labs/agent-core").ToolDefinition;
+//# sourceMappingURL=write-file.d.ts.map

package/dist/tools/write-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.d.ts","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,aAAa,sDAoBxB,CAAC"}

package/dist/tools/write-file.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeFileTool = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const agent_core_1 = require("@backendkit-labs/agent-core");
+const path_sandbox_1 = require("./path-sandbox");
+const secret_scanner_1 = require("./secret-scanner");
+exports.writeFileTool = (0, agent_core_1.defineTool)({
+    name: 'write_file',
+    description: 'Write or overwrite a file inside the working directory. Creates parent directories if needed.',
+    input: agent_core_1.z.object({
+        file_path: agent_core_1.z.string().describe('Relative or absolute path to the file'),
+        content: agent_core_1.z.string().describe('Content to write'),
+    }),
+    execute: async ({ file_path, content }, ctx) => {
+        try {
+            const abs = (0, path_sandbox_1.resolveAndCheck)(ctx.workingDir, file_path);
+            const fwWarn = (0, path_sandbox_1.checkFrameworkProtection)(abs, ctx.workingDir);
+            if (fwWarn)
+                return `Error: ${fwWarn}`;
+            const warning = (0, secret_scanner_1.warnIfSecrets)(abs, content);
+            (0, fs_1.mkdirSync)((0, path_1.dirname)(abs), { recursive: true });
+            (0, agent_core_1.atomicWriteSync)(abs, content);
+            return warning ? `Written: ${abs}\n⚠ ${warning}` : `Written: ${abs}`;
+        }
+        catch (err) {
+            return `Error: ${err.message}`;
+        }
+    },
+});
+//# sourceMappingURL=write-file.js.map

package/dist/tools/write-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.js","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":";;;AAAA,2BAA+B;AAC/B,+BAA+B;AAC/B,4DAA6E;AAC7E,iDAA2E;AAC3E,qDAAiD;AAEpC,QAAA,aAAa,GAAG,IAAA,uBAAU,EAAC;IACpC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,+FAA+F;IAC5G,KAAK,EAAE,cAAC,CAAC,MAAM,CAAC;QACZ,SAAS,EAAE,cAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;QACvE,OAAO,EAAI,cAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KACrD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;QAC3C,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAA,8BAAe,EAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,IAAA,uCAAwB,EAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7D,IAAI,MAAM;gBAAE,OAAO,UAAU,MAAM,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAA,cAAS,EAAC,IAAA,cAAO,EAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAA,4BAAe,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,YAAY,GAAG,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,UAAW,GAAa,CAAC,OAAO,EAAE,CAAC;QAC9C,CAAC;IACL,CAAC;CACJ,CAAC,CAAC"}

package/dist/workflows/InitWorkflow.d.ts

@@ -0,0 +1,6 @@
+export type InitMode = 'new' | 'existing' | 'hybrid';
+export declare class InitWorkflow {
+    static detectMode(cwd: string): InitMode;
+    static buildPrompt(cwd: string, mode?: InitMode): string;
+}
+//# sourceMappingURL=InitWorkflow.d.ts.map

package/dist/workflows/InitWorkflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InitWorkflow.d.ts","sourceRoot":"","sources":["../../src/workflows/InitWorkflow.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;AAarD,qBAAa,YAAY;IACrB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;IASxC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM;CAQ3D"}