@claude-flow/cli 3.10.9 → 3.10.10

package/dist/src/mcp-tools/tool-loop-guardrail.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Tool-loop circuit breaker (hermes-agent tool_guardrails pattern).
+ *
+ * Detects an agent stuck repeating the same failing command — a real silent
+ * failure mode where a loop burns turns with no signal. This is ORTHOGONAL to
+ * the security `tool-output-guardrail` (which detects indirect prompt injection
+ * in tool *output*); this one watches the agent's own *call* pattern.
+ *
+ * Design (deterministic, in-memory, bounded):
+ *  - `recordCommandOutcome` (called by post-command) appends (command, success)
+ *    to a small ring buffer.
+ *  - `checkCommandLoop` (called by pre-command) returns a verdict for a command
+ *    about to run, based on its recent consecutive-failure streak.
+ *  - Verdict is advisory by default (`warn`); callers decide whether to block.
+ *    An orchestration layer that doesn't own the UI should not hard-stop.
+ */
+export type LoopVerdict = 'allow' | 'warn' | 'block';
+/** Record a command's outcome. Called from the post-command hook. */
+export declare function recordCommandOutcome(command: string, success: boolean): void;
+/**
+ * Verdict for a command about to execute. Called from the pre-command hook.
+ * Returns the verdict, the failure streak, and a recovery hint when looping.
+ */
+export declare function checkCommandLoop(command: string): {
+    verdict: LoopVerdict;
+    consecutiveFailures: number;
+    hint?: string;
+};
+/** Test/reset helper — clears the in-memory history. */
+export declare function _resetLoopHistory(): void;
+//# sourceMappingURL=tool-loop-guardrail.d.ts.map

package/dist/src/mcp-tools/tool-loop-guardrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-loop-guardrail.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/tool-loop-guardrail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAerD,qEAAqE;AACrE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAG5E;AAeD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;IACjD,OAAO,EAAE,WAAW,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAiBA;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/src/mcp-tools/tool-loop-guardrail.js

@@ -0,0 +1,71 @@
+/**
+ * Tool-loop circuit breaker (hermes-agent tool_guardrails pattern).
+ *
+ * Detects an agent stuck repeating the same failing command — a real silent
+ * failure mode where a loop burns turns with no signal. This is ORTHOGONAL to
+ * the security `tool-output-guardrail` (which detects indirect prompt injection
+ * in tool *output*); this one watches the agent's own *call* pattern.
+ *
+ * Design (deterministic, in-memory, bounded):
+ *  - `recordCommandOutcome` (called by post-command) appends (command, success)
+ *    to a small ring buffer.
+ *  - `checkCommandLoop` (called by pre-command) returns a verdict for a command
+ *    about to run, based on its recent consecutive-failure streak.
+ *  - Verdict is advisory by default (`warn`); callers decide whether to block.
+ *    An orchestration layer that doesn't own the UI should not hard-stop.
+ */
+const MAX_HISTORY = 64;
+const history = [];
+/** Consecutive-failure thresholds for the same command (exact match). */
+const WARN_AT = 3;
+const BLOCK_AT = 5;
+function normalize(command) {
+    return command.trim().replace(/\s+/g, ' ');
+}
+/** Record a command's outcome. Called from the post-command hook. */
+export function recordCommandOutcome(command, success) {
+    history.push({ command: normalize(command), success, at: history.length });
+    if (history.length > MAX_HISTORY)
+        history.shift();
+}
+/** Count the trailing run of consecutive failures of `command` (exact match),
+ * stopping at the first success of that command or a gap. */
+function consecutiveFailures(command) {
+    const norm = normalize(command);
+    let streak = 0;
+    for (let i = history.length - 1; i >= 0; i--) {
+        if (history[i].command !== norm)
+            continue; // ignore interleaved other commands
+        if (history[i].success)
+            break; // a success breaks the streak
+        streak++;
+    }
+    return streak;
+}
+/**
+ * Verdict for a command about to execute. Called from the pre-command hook.
+ * Returns the verdict, the failure streak, and a recovery hint when looping.
+ */
+export function checkCommandLoop(command) {
+    const fails = consecutiveFailures(command);
+    if (fails >= BLOCK_AT) {
+        return {
+            verdict: 'block',
+            consecutiveFailures: fails,
+            hint: `This exact command has failed ${fails}× in a row. Stop repeating it — inspect state first (e.g. \`pwd && ls -la\`), change the approach, or ask for help.`,
+        };
+    }
+    if (fails >= WARN_AT) {
+        return {
+            verdict: 'warn',
+            consecutiveFailures: fails,
+            hint: `This command has failed ${fails}× in a row. Before retrying, verify preconditions (paths, args, prior step output) rather than re-running the same call.`,
+        };
+    }
+    return { verdict: 'allow', consecutiveFailures: fails };
+}
+/** Test/reset helper — clears the in-memory history. */
+export function _resetLoopHistory() {
+    history.length = 0;
+}
+//# sourceMappingURL=tool-loop-guardrail.js.map

package/dist/src/mcp-tools/tool-loop-guardrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-loop-guardrail.js","sourceRoot":"","sources":["../../../src/mcp-tools/tool-loop-guardrail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,OAAO,GAAc,EAAE,CAAC;AAE9B,yEAAyE;AACzE,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,OAAgB;IACpE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AACpD,CAAC;AAED;6DAC6D;AAC7D,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS,CAAC,oCAAoC;QAC/E,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;YAAE,MAAM,CAAa,8BAA8B;QACzE,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAK9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,mBAAmB,EAAE,KAAK;YAC1B,IAAI,EAAE,iCAAiC,KAAK,qHAAqH;SAClK,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,mBAAmB,EAAE,KAAK;YAC1B,IAAI,EAAE,2BAA2B,KAAK,0HAA0H;SACjK,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AACrB,CAAC"}