@bolloon/bolloon-agent 0.1.35 → 0.1.37

package/src/bollharness/src/scripts/hooks/stop-evaluator.ts

@@ -1,164 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import { execSync } from "child_process";
-
-const REPO_ROOT = process.cwd();
-const EVALUATOR_MD = path.join(REPO_ROOT, "scripts", "hooks", "stop-evaluator.md");
-const INITIALIZER_AGENT = path.join(REPO_ROOT, "src", "scripts", "hooks", "initializer-agent.ts");
-const STATE_DIR = path.join(REPO_ROOT, ".boll", "guard");
-const METRICS_DIR = path.join(REPO_ROOT, ".boll", "metrics");
-const TTL_SECONDS = 3600;
-
-const WRITE_TOOLS = new Set(["Edit", "Write", "NotebookEdit"]);
-
-function emitMetric(event: string, sessionKey: string, data: Record<string, unknown> = {}): void {
-  try {
-    if (!fs.existsSync(METRICS_DIR)) {
-      fs.mkdirSync(METRICS_DIR, { recursive: true });
-    }
-    const record = {
-      ts: new Date().toISOString(),
-      session_key: sessionKey,
-      event,
-      ...data,
-    };
-    fs.appendFileSync(
-      path.join(METRICS_DIR, "stop-events.jsonl"),
-      JSON.stringify(record) + "\n",
-      "utf-8"
-    );
-  } catch {}
-}
-
-function readHookPayload(): Record<string, unknown> {
-  try {
-    const raw = fs.readFileSync(0, "utf-8");
-    return raw ? JSON.parse(raw) : {};
-  } catch {
-    return {};
-  }
-}
-
-function getSessionKey(payload: Record<string, unknown>): string {
-  const sid = payload.session_id;
-  if (typeof sid === "string" && sid) return sid;
-  return `ppid-${process.ppid}`;
-}
-
-function getStateFile(sessionKey: string): string {
-  const safe = sessionKey.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 64);
-  return path.join(STATE_DIR, `stop-${safe}.flag`);
-}
-
-function alreadyBlocked(sessionKey: string): boolean {
-  const stateFile = getStateFile(sessionKey);
-  if (!fs.existsSync(stateFile)) return false;
-  try {
-    const ts = parseFloat(fs.readFileSync(stateFile, "utf-8").trim());
-    return Date.now() / 1000 - ts < TTL_SECONDS;
-  } catch {
-    return false;
-  }
-}
-
-function markBlocked(sessionKey: string): void {
-  if (!fs.existsSync(STATE_DIR)) {
-    fs.mkdirSync(STATE_DIR, { recursive: true });
-  }
-  fs.writeFileSync(getStateFile(sessionKey), String(Date.now() / 1000), "utf-8");
-}
-
-function extractEditedFiles(transcriptPath: string): Set<string> | null {
-  if (!transcriptPath) return null;
-  try {
-    const files = new Set<string>();
-    const content = fs.readFileSync(transcriptPath, "utf-8");
-    for (const line of content.split("\n")) {
-      if (!line.trim()) continue;
-      try {
-        const rec = JSON.parse(line);
-        const msg = rec.message || {};
-        if (msg.role !== "assistant") continue;
-        const blocks = msg.content || [];
-        for (const block of blocks) {
-          if (block.type === "tool_use" && WRITE_TOOLS.has(block.name)) {
-            const fp = block.input?.file_path;
-            if (fp) {
-              try {
-                files.add(path.relative(REPO_ROOT, fp));
-              } catch {}
-            }
-          }
-        }
-      } catch {}
-    }
-    return files;
-  } catch {
-    return null;
-  }
-}
-
-function isCompletionCandidate(transcriptPath: string): [boolean, string] {
-  const sessionFiles = extractEditedFiles(transcriptPath);
-  if (sessionFiles === null) return [true, "transcript_unreadable_failopen"];
-  if (sessionFiles.size === 0) return [false, "no_session_writes"];
-
-  let gitDirty: Set<string> = new Set();
-  try {
-    const result = execSync("git diff --name-only", { cwd: REPO_ROOT, encoding: "utf-8", timeout: 5000 });
-    if (result.trim()) {
-      gitDirty = new Set(result.trim().split("\n").filter(l => l));
-    }
-  } catch {}
-
-  const uncommitted = new Set([...sessionFiles].filter(f => gitDirty.has(f)));
-  if (uncommitted.size > 0) return [true, "uncommitted_session_changes"];
-
-  try {
-    const result = execSync("git diff --cached --name-only", { cwd: REPO_ROOT, encoding: "utf-8", timeout: 5000 });
-    if (result.trim()) return [true, "staged_changes"];
-  } catch {}
-
-  return [false, "all_committed"];
-}
-
-export function main(): void {
-  const payload = readHookPayload();
-  const sessionKey = getSessionKey(payload);
-
-  if (payload.stop_hook_active === true) {
-    emitMetric("stop_pass", sessionKey, { reason: "stop_hook_active_guard" });
-    process.exit(0);
-  }
-
-  if (alreadyBlocked(sessionKey)) {
-    emitMetric("stop_pass", sessionKey, { reason: "already_blocked_once" });
-    process.exit(0);
-  }
-
-  const isCandidate = isCompletionCandidate((payload.transcript_path as string) || "");
-  if (!isCandidate[0]) {
-    emitMetric("stop_pass", sessionKey, { reason: isCandidate[1] });
-    process.exit(0);
-  }
-
-  if (!fs.existsSync(EVALUATOR_MD)) {
-    emitMetric("stop_skip", sessionKey, { reason: "evaluator_md_missing" });
-    process.exit(0);
-  }
-
-  try {
-    const checklist = fs.readFileSync(EVALUATOR_MD, "utf-8");
-    process.stderr.write(checklist + "\n");
-    markBlocked(sessionKey);
-    emitMetric("stop_block", sessionKey, { reason: `completion_candidate_${isCandidate[1]}` });
-    process.exit(2);
-  } catch {
-    emitMetric("stop_skip", sessionKey, { reason: "evaluator_md_read_error" });
-    process.exit(0);
-  }
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/hooks/tool-call-counter.ts

@@ -1,10 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-
-export function main(): void {
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/hooks/trace-analyzer.ts

@@ -1,14 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-
-export function main(): void {
-  const args = process.argv.slice(2);
-  if (args.includes("--analyze")) {
-    process.stdout.write("Trace analysis complete.\n");
-  }
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/install/install-trust-token.ts

@@ -1,13 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import * as crypto from "crypto";
-
-const REPO_ROOT = process.cwd();
-
-export function main(): void {
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/install/multi_project_registry.ts

@@ -1,13 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-
-const REPO_ROOT = process.cwd();
-const REGISTRY_FILE = path.join(REPO_ROOT, ".boll", "install-log.jsonl");
-
-export function main(): void {
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/install/phase2_auto.ts

@@ -1,28 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import * as crypto from "crypto";
-
-const REPO_ROOT = process.cwd();
-const TRUST_TOKEN_FILE = path.join(REPO_ROOT, ".boll", "install-trust-token.json");
-
-export function main(): void {
-  const args = process.argv.slice(2);
-
-  if (args.includes("--install")) {
-    const targetProject = args[args.indexOf("--install") + 1];
-    if (!targetProject) {
-      console.error("Usage: phase2_auto.ts --install <project-path>");
-      process.exit(1);
-    }
-    console.log(`Installing bollharness to ${targetProject}`);
-    process.exit(0);
-  }
-
-  console.log("bollharness installer");
-  console.log("Usage: phase2_auto.ts --install <project-path> [--tier drop-in|adapt|mine]");
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/install/pre_commit_installer.ts

@@ -1,10 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-
-export function main(): void {
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/install/tier_selector.ts

@@ -1,10 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-
-export function selectTier(tier: string): string {
-  const validTiers = ["drop-in", "adapt", "mine"];
-  if (!validTiers.includes(tier)) {
-    return "drop-in";
-  }
-  return tier;
-}

package/src/bollharness/src/scripts/install/transcript_miner.ts

@@ -1,13 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-import { execSync } from "child_process";
-
-const REPO_ROOT = process.cwd();
-
-export function main(): void {
-  process.exit(0);
-}
-
-if (require.main === module) {
-  main();
-}

package/src/bollharness/src/scripts/lib/claim_patterns.ts

@@ -1,11 +0,0 @@
-export const CLAIM_PATTERNS = [
-  /test[s]?\s+(pass|run|complete[ds]?)/gi,
-  /all\s+test[s]?\s+(pass|run)/gi,
-  /fix(?:ed|es)?\s+the?\s+(bug|issue|problem)/gi,
-  /complete[ds]?/gi,
-  /done/gi,
-];
-
-export function hasUnverifiedClaim(text: string): boolean {
-  return CLAIM_PATTERNS.some(pattern => pattern.test(text));
-}

package/src/bollharness/src/scripts/lib/sanitize_patterns.ts

@@ -1,13 +0,0 @@
-export const SANITIZE_PATTERNS = [
-  { pattern: /api[_-]?key["\s:=]+["'][a-zA-Z0-9]{20,}["']/gi, replacement: "***REDACTED***" },
-  { pattern: /password["\s:=]+["'][^"']{8,}["']/gi, replacement: "***REDACTED***" },
-  { pattern: /secret["\s:=]+["'][a-zA-Z0-9]{16,}["']/gi, replacement: "***REDACTED***" },
-];
-
-export function sanitize(text: string): string {
-  let result = text;
-  for (const { pattern, replacement } of SANITIZE_PATTERNS) {
-    result = result.replace(pattern, replacement);
-  }
-  return result;
-}

package/src/bollharness/src/scripts/sanitize.ts

@@ -1,9 +0,0 @@
-import * as fs from "fs";
-import * as path from "path";
-
-export function sanitize(text: string): string {
-  return text
-    .replace(/api[_-]?key["\s:=]+["'][a-zA-Z0-9]{20,}["']/gi, "***REDACTED***")
-    .replace(/password["\s:=]+["'][^"']{8,}["']/gi, "***REDACTED***")
-    .replace(/secret["\s:=]+["'][a-zA-Z0-9]{16,}["']/gi, "***REDACTED***");
-}

package/src/bollharness/templates/persona/default.json

@@ -1,19 +0,0 @@
-{
-  "name": "BolloonAgent",
-  "description": "价值函数交流的判断力智能体 - 通过多智能体协作实现文档价值的挖掘与传递",
-  "personality": "理性、审慎、协作",
-  "greeting": "你好！我是 Bolloon，一个价值函数交流的判断力智能体。",
-  "capabilities": [
-    "价值函数分析与评估",
-    "多智能体协作与判断",
-    "P2P 网络通信",
-    "约束层_guardrails",
-    "文档价值挖掘"
-  ],
-  "interests": [
-    "人工智能",
-    "价值函数",
-    "判断力提升",
-    "多智能体协作"
-  ]
-}

package/src/bollharness/templates/scaffold/.gitignore.append

@@ -1,16 +0,0 @@
-# Append these entries to your project's .gitignore when using wow-harness
-# This file is part of the wow-harness scaffolding system
-
-# Runtime state directories (created by hooks)
-.boll/
-!.boll/toolkit-index.yaml
-!.boll/inbox/
-
-# Metrics and logs
-*.jsonl
-
-# Claude Code session artifacts
-.claude/
-!.claude/settings.json
-!.claude/settings.json.template
-!.claude/CLAUDE.md.template

package/src/bollharness/templates/scaffold/CLAUDE.md

@@ -1,89 +0,0 @@
-# CLAUDE.md
-
-<!--
-  Auto-generated by bollharness installer.
-  This file is the primary instruction source for Claude Code sessions.
-  Edit freely — the installer will NOT overwrite an existing CLAUDE.md.
--->
-
-## Project Overview
-
-<!-- TODO: 描述你的项目 — 做什么、技术栈、部署方式 -->
-
-## Governance System (bollharness)
-
-This project is managed by [bollharness](https://github.com/anthropics/bollharness) — an AI agent session governance framework. The following hooks and guards run automatically during Claude Code sessions.
-
-### Hook Lifecycle
-
-| Stage | Hook | What it does |
-|-------|------|-------------|
-| SessionStart | `session-start-reset-risk.ts` | Reset risk snapshot for new session |
-| SessionStart | `session-start-magic-docs.ts` | Load project-specific context documents |
-| SessionStart | `session-start-toolkit-reminder.ts` | Surface available skills and tools |
-| PreToolUse * | `tool-call-counter.ts` | Track tool call frequency for observability |
-| PreToolUse Bash | `deploy-guard.ts` | Block unauthorized deployments |
-| PreToolUse Bash | `auto-python3.ts` | Intercept bare `python` → `python3` |
-| PreToolUse Task | `review-agent-gatekeeper.ts` | Enforce read-only isolation on review agents |
-| PreToolUse Read\|Bash | `sanitize-on-read.ts` | Sanitize sensitive data in read output |
-| PostToolUse Edit\|Write | `guard-feedback.ts` | Context routing + guard checks (ADR-030) |
-| PostToolUse Edit\|Write | `loop-detection.ts` | Detect edit-undo-edit loops |
-| PostToolUse Edit\|Write | `risk-tracker.ts` | Update risk snapshot on file changes |
-| PreCompact | `precompact.sh` | Preserve critical context before compaction |
-| Stop | `stop-evaluator.ts` | Completion proposal + independent review |
-| SessionEnd | `session-reflection.ts` | Session summary and learnings |
-| SessionEnd | `trace-analyzer.ts` | Aggregate trace data for harness optimization |
-| SessionEnd | `deploy-progress-on-session-end.ts` | Persist deployment progress metrics |
-| PostToolUseFailure | `failure-analyzer.ts` | Diagnose tool call failures |
-
-### Runtime Directories
-
-```
-.boll/
-├── state/        # Risk snapshots, session state (gitignored)
-├── guard/        # Guard flags, injection dedup (gitignored)
-└── metrics/      # Observability data — JSONL event logs (gitignored)
-```
-
-These directories are **runtime-only** and gitignored. They are created automatically by hooks.
-
-## AI Behavioral Constraints
-
-### Language
-- All user-facing output in **simplified Chinese**; technical identifiers stay original
-- All commit messages **bilingual** (English title + Chinese summary)
-- Co-Authored-By header: `Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>`
-
-### Code Quality
-- All commands use `npx ts-node`, never bare `python`
-- Subagent model: review/audit/evaluator agents must use `claude-opus-4-6`
-- Review agents: tool whitelist must be schema-level isolated (no Edit/Write/Bash)
-
-### Workflow
-- **Issue-first**: create `docs/issues/guard-*.md` before fixing any guardian finding
-- **Verification honesty**: partial test pass ≠ full pass; closure needs evidence
-- **No half-finished work**: no TODO/FIXME left behind without tracking
-
-## Guardian Issue Workflow
-
-Guardian/red-team findings go to `docs/issues/*.md` with YAML frontmatter:
-
-```yaml
----
-status: open          # open | fixed | wont_fix
-prevention_status: open  # open | closed
-mechanism_layer: guard   # guard | test | type | convention
-severity: P1          # P0 | P1 | P2 | P3
-component: path/to/affected/file
----
-```
-
-Rules:
-- Never fix guardian issues directly on `main` — use a dedicated branch
-- Close only after verification is recorded with evidence
-
-## Path-Scoped Rules
-
-Path-scoped rules in `.boll/rules/*.md` auto-load when Claude reads files matching their trigger patterns. No manual loading needed.
-
-<!-- TODO: 列出你的 path-scoped rules 及触发路径 -->