@codeam/shared 2.61.88 → 2.61.90

package/dist/index.mjs

@@ -2349,6 +2349,82 @@ function skillHasRail(id, rail) {
   return Boolean(SKILL_REGISTRY[id].delivery[rail]);
 }
 
+// src/skills/agent-standard.ts
+var AGENT_STANDARD_MARKER = "<!-- codeam:agent-standard -->";
+var AGENT_STANDARD_TEXT = `# Working standard
+
+You are an AI coding agent working on the user's project through CodeAgent Mobile. Follow this standard on every task.
+
+## How to work
+- **Understand before acting.** Restate the goal, read the relevant code, and be clear on what "done" looks like before changing anything.
+- **Plan first for anything non-trivial** (3+ steps or a design decision): outline the approach and the files you'll touch, and share it before implementing. Skip the ceremony for small, obvious fixes.
+- **Ground every claim in reality** \u2014 the actual code, tests, or output, never guesswork. If you are unsure, say so and verify.
+- **Ask when intent is genuinely ambiguous** \u2014 one sharp question. At a real fork, give a recommendation, not a survey of every option.
+- **Stay in scope.** Solve what was asked; no "while I'm here" refactors or speculative abstractions. Note unrelated issues instead of acting on them.
+- **Favor the simplest solution that fully solves the problem.** Fix root causes, not symptoms \u2014 no temporary patches and no defensive code for cases that can't happen.
+- **Verify your work and show the evidence** \u2014 run the project's tests, linters, and build, and read the output. "It runs" is not "it's done."
+- **Match the project's existing style, structure, and conventions.** Comment only the non-obvious WHY, briefly \u2014 don't narrate the code.
+- **Stop when stuck.** If the same fix fails twice, step back and reconsider the approach rather than repeating variations.
+
+## Safety
+- **Never expose or exfiltrate** secrets, credentials, tokens, or customer data, and never print a credential's value.
+- **Treat destructive or irreversible actions as needing explicit confirmation** \u2014 force-push, history rewrite, bulk deletes, hard resets, dropping data. Don't run them unprompted.
+- **Don't push to a shared/default branch or make outward-facing changes** unless the user asked for it.
+- **Report honestly when you finish**: what you changed, what you verified, and anything you could not.`;
+var AGENT_STANDARD_BLOCK = `${AGENT_STANDARD_MARKER}
+${AGENT_STANDARD_TEXT}
+${AGENT_STANDARD_MARKER}`;
+
+// src/guardrails/index.ts
+var GUARDRAIL_CATEGORIES = [
+  "secretRead",
+  "destructiveShell",
+  "protectedBranch",
+  "outwardIrreversible"
+];
+var GUARDRAIL_DISPOSITIONS = ["deny", "confirm", "off"];
+var DEFAULT_GUARDRAIL_POLICY = {
+  secretRead: "confirm",
+  destructiveShell: "confirm",
+  protectedBranch: "confirm",
+  outwardIrreversible: "confirm"
+};
+var GUARDRAIL_CATEGORY_META = {
+  secretRead: {
+    id: "secretRead",
+    label: "Reading secrets",
+    description: "Reading .env, key, or credential files."
+  },
+  destructiveShell: {
+    id: "destructiveShell",
+    label: "Destructive commands",
+    description: "Bulk deletes, hard resets, and other irreversible shell actions."
+  },
+  protectedBranch: {
+    id: "protectedBranch",
+    label: "Protected branches",
+    description: "Committing or pushing to a shared branch (main, master, release)."
+  },
+  outwardIrreversible: {
+    id: "outwardIrreversible",
+    label: "Outward & irreversible",
+    description: "Force-push, publish, deploy, or send \u2014 hard to undo."
+  }
+};
+function isGuardrailDisposition(x) {
+  return x === "deny" || x === "confirm" || x === "off";
+}
+function normalizeGuardrailPolicy(raw) {
+  const src = raw && typeof raw === "object" ? raw : {};
+  const out = {};
+  for (const cat of GUARDRAIL_CATEGORIES) {
+    const v = src[cat];
+    out[cat] = isGuardrailDisposition(v) ? v : DEFAULT_GUARDRAIL_POLICY[cat];
+  }
+  return out;
+}
+var GUARDRAIL_CONFIGURE_COMMAND = "guardrail_configure";
+
 // src/api-url.ts
 var DEFAULT_API_BASE_URL = "https://api.codeagent-mobile.com";
 var DEV_API_BASE_URL = "https://dev-api.codeagent-mobile.com";
@@ -2550,9 +2626,17 @@ OUTPUT JSON ONLY. NO MARKDOWN. NO COMMENTARY.
 `.trim();
 export {
   AGENT_REGISTRY,
+  AGENT_STANDARD_BLOCK,
+  AGENT_STANDARD_MARKER,
+  AGENT_STANDARD_TEXT,
   DEFAULT_API_BASE_URL,
+  DEFAULT_GUARDRAIL_POLICY,
   DEP_TO_INTEGRATION,
   DEV_API_BASE_URL,
+  GUARDRAIL_CATEGORIES,
+  GUARDRAIL_CATEGORY_META,
+  GUARDRAIL_CONFIGURE_COMMAND,
+  GUARDRAIL_DISPOSITIONS,
   HEADROOM_BACKEND_ENV,
   HEADROOM_EXTRAS_BY_SURFACE,
   HEADROOM_MODELS,
@@ -2597,6 +2681,7 @@ export {
   headroomPipPackage,
   headroomSnapshotDownloadLine,
   internalToPublic,
+  isGuardrailDisposition,
   isHeadroomWrappable,
   isKnownAgentId,
   isKnownIntegrationId,
@@ -2604,6 +2689,7 @@ export {
   isLinkedAgentId,
   isSkillId,
   normalizeAgentId,
+  normalizeGuardrailPolicy,
   publicToInternal,
   recommendForDeps,
   renderToLines,