@decibelsystems/tools 2.0.0

package/dist/tools/provenance.d.ts

@@ -0,0 +1,75 @@
+export type ActorType = 'human' | 'ai' | 'system';
+export type ProvenanceAction = 'create' | 'edit' | 'review' | 'approve' | 'reject' | 'link' | 'apply' | 'derive';
+export type ReasonCode = 'initial_creation' | 'refinement' | 'correction' | 'clarification' | 'implementation' | 'graduation' | 'rejection' | 'linkage';
+export interface ProvenanceEvent {
+    event_id: string;
+    timestamp: string;
+    actor_id: string;
+    actor_type: ActorType;
+    action: ProvenanceAction;
+    artifact_refs: string[];
+    reason_code: ReasonCode;
+    summary?: string;
+    fingerprint_before?: string | null;
+    fingerprint_after?: string;
+}
+export interface EmitProvenanceInput {
+    actor_id: string;
+    action: ProvenanceAction;
+    artifact_refs: string[];
+    reason_code: ReasonCode;
+    summary?: string;
+    fingerprint_before?: string | null;
+    fingerprint_after?: string;
+}
+export interface ListProvenanceInput {
+    projectId?: string;
+    artifact_ref?: string;
+    actor_id?: string;
+    limit?: number;
+}
+export interface ListProvenanceOutput {
+    events: ProvenanceEvent[];
+    total_count: number;
+}
+export interface ProjectResolutionError {
+    error: 'project_resolution_failed';
+    message: string;
+    hint: string;
+}
+/**
+ * Generate a unique event ID in format PROV-{timestamp}-{ms}
+ */
+export declare function generateEventId(): string;
+/**
+ * Hash content using SHA-256 and return first 16 characters.
+ * Format: sha256:{first16chars}
+ */
+export declare function hashContent(content: string): string;
+/**
+ * Get the default actor ID from environment or fallback.
+ * Priority: DECIBEL_ACTOR_ID env var > git config > $USER
+ */
+export declare function getDefaultActorId(): string;
+/**
+ * Emit a provenance event for an artifact action.
+ * Stores in .decibel/provenance/events/PROV-*.yml
+ *
+ * @param input - Event data (actor_id, action, artifact_refs, reason_code, summary, fingerprints)
+ * @param projectRoot - Root path of the project (or projectId to resolve)
+ * @returns The event_id of the created provenance event
+ */
+export declare function emitProvenance(input: EmitProvenanceInput, projectId?: string): Promise<string | ProjectResolutionError>;
+/**
+ * List provenance events, optionally filtered by artifact_ref or actor_id.
+ *
+ * @param input - Filter criteria (projectId, artifact_ref, actor_id, limit)
+ * @returns List of matching provenance events
+ */
+export declare function listProvenance(input: ListProvenanceInput): Promise<ListProvenanceOutput | ProjectResolutionError>;
+/**
+ * Helper to emit provenance for artifact creation.
+ * Convenience wrapper for emitProvenance with 'create' action.
+ */
+export declare function emitCreateProvenance(artifactRef: string, content: string, summary: string, projectId?: string): Promise<string | ProjectResolutionError>;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/tools/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/tools/provenance.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,CAAC;AAClD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AACjH,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,gBAAgB,GAChB,YAAY,GACZ,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAeD;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAMxC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGnD;AAsBD;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAc1C;AAgDD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,mBAAmB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAyC1C;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,GAAG,sBAAsB,CAAC,CA+CxD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAgB1C"}

package/dist/tools/provenance.js

@@ -0,0 +1,224 @@
+import fs from 'fs/promises';
+import path from 'path';
+import crypto from 'crypto';
+import { execSync } from 'child_process';
+import { log } from '../config.js';
+import { ensureDir } from '../dataRoot.js';
+import { resolveProjectPaths, validateWritePath } from '../projectRegistry.js';
+import YAML from 'yaml';
+// ============================================================================
+// Helpers
+// ============================================================================
+function makeProjectResolutionError(operation) {
+    return {
+        error: 'project_resolution_failed',
+        message: `Cannot ${operation}: No project context available.`,
+        hint: 'Either specify projectId parameter, set DECIBEL_PROJECT_ROOT env var, or run from a directory containing .decibel/',
+    };
+}
+/**
+ * Generate a unique event ID in format PROV-{timestamp}-{ms}
+ */
+export function generateEventId() {
+    const now = new Date();
+    const dateStr = now.toISOString().slice(0, 10).replace(/-/g, '');
+    const timeStr = now.toISOString().slice(11, 19).replace(/:/g, '');
+    const ms = now.getMilliseconds().toString().padStart(3, '0');
+    return `PROV-${dateStr}T${timeStr}-${ms}`;
+}
+/**
+ * Hash content using SHA-256 and return first 16 characters.
+ * Format: sha256:{first16chars}
+ */
+export function hashContent(content) {
+    const hash = crypto.createHash('sha256').update(content, 'utf-8').digest('hex');
+    return `sha256:${hash.slice(0, 16)}`;
+}
+/**
+ * Get git user identity (name <email>) from git config.
+ * Returns null if git is not available or not configured.
+ */
+function getGitUser() {
+    try {
+        const name = execSync('git config user.name', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        const email = execSync('git config user.email', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        if (name && email) {
+            return `${name} <${email}>`;
+        }
+        if (name) {
+            return name;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get the default actor ID from environment or fallback.
+ * Priority: DECIBEL_ACTOR_ID env var > git config > $USER
+ */
+export function getDefaultActorId() {
+    if (process.env.DECIBEL_ACTOR_ID) {
+        return process.env.DECIBEL_ACTOR_ID;
+    }
+    // Try git user identity
+    const gitUser = getGitUser();
+    if (gitUser) {
+        return `human:${gitUser}`;
+    }
+    // Fallback to OS username
+    const username = process.env.USER || process.env.USERNAME || 'unknown';
+    return `human:${username}`;
+}
+/**
+ * Determine actor type from actor ID prefix.
+ */
+function getActorType(actorId) {
+    if (actorId.startsWith('ai:') || actorId.startsWith('agent:') || actorId.startsWith('claude:')) {
+        return 'ai';
+    }
+    if (actorId.startsWith('system:') || actorId.startsWith('hook:') || actorId.startsWith('automation:')) {
+        return 'system';
+    }
+    return 'human';
+}
+/**
+ * Parse a provenance YAML file into a ProvenanceEvent.
+ */
+async function parseProvenanceFile(filePath) {
+    try {
+        const content = await fs.readFile(filePath, 'utf-8');
+        const data = YAML.parse(content);
+        if (!data.event_id || !data.timestamp || !data.actor_id || !data.action) {
+            return null;
+        }
+        return {
+            event_id: data.event_id,
+            timestamp: data.timestamp,
+            actor_id: data.actor_id,
+            actor_type: data.actor_type || getActorType(data.actor_id),
+            action: data.action,
+            artifact_refs: data.artifact_refs || [],
+            reason_code: data.reason_code || 'initial_creation',
+            summary: data.summary,
+            fingerprint_before: data.fingerprint_before,
+            fingerprint_after: data.fingerprint_after,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+// ============================================================================
+// Public API
+// ============================================================================
+/**
+ * Emit a provenance event for an artifact action.
+ * Stores in .decibel/provenance/events/PROV-*.yml
+ *
+ * @param input - Event data (actor_id, action, artifact_refs, reason_code, summary, fingerprints)
+ * @param projectRoot - Root path of the project (or projectId to resolve)
+ * @returns The event_id of the created provenance event
+ */
+export async function emitProvenance(input, projectId) {
+    let resolved;
+    try {
+        resolved = resolveProjectPaths(projectId);
+    }
+    catch {
+        return makeProjectResolutionError('emit provenance event');
+    }
+    const eventId = generateEventId();
+    const timestamp = new Date().toISOString();
+    const actorType = getActorType(input.actor_id);
+    const event = {
+        event_id: eventId,
+        timestamp,
+        actor_id: input.actor_id,
+        actor_type: actorType,
+        action: input.action,
+        artifact_refs: input.artifact_refs,
+        reason_code: input.reason_code,
+        summary: input.summary,
+        fingerprint_before: input.fingerprint_before,
+        fingerprint_after: input.fingerprint_after,
+    };
+    // Store in .decibel/provenance/events/
+    const eventsDir = resolved.subPath('provenance', 'events');
+    ensureDir(eventsDir);
+    const filename = `${eventId}.yml`;
+    const filePath = path.join(eventsDir, filename);
+    // Build YAML content
+    const yamlContent = YAML.stringify(event, { lineWidth: 0 });
+    validateWritePath(filePath, resolved);
+    await fs.writeFile(filePath, yamlContent, 'utf-8');
+    log(`Provenance: Emitted ${eventId} for action "${input.action}" on ${input.artifact_refs.length} artifact(s)`);
+    return eventId;
+}
+/**
+ * List provenance events, optionally filtered by artifact_ref or actor_id.
+ *
+ * @param input - Filter criteria (projectId, artifact_ref, actor_id, limit)
+ * @returns List of matching provenance events
+ */
+export async function listProvenance(input) {
+    let resolved;
+    try {
+        resolved = resolveProjectPaths(input.projectId);
+    }
+    catch {
+        return makeProjectResolutionError('list provenance events');
+    }
+    const eventsDir = resolved.subPath('provenance', 'events');
+    const limit = input.limit || 50;
+    let events = [];
+    try {
+        const files = await fs.readdir(eventsDir);
+        const yamlFiles = files.filter(f => f.endsWith('.yml') && f.startsWith('PROV-'));
+        for (const file of yamlFiles) {
+            const filePath = path.join(eventsDir, file);
+            const event = await parseProvenanceFile(filePath);
+            if (!event)
+                continue;
+            // Apply filters
+            if (input.artifact_ref && !event.artifact_refs.includes(input.artifact_ref)) {
+                continue;
+            }
+            if (input.actor_id && event.actor_id !== input.actor_id) {
+                continue;
+            }
+            events.push(event);
+        }
+    }
+    catch {
+        // Directory doesn't exist yet
+    }
+    const totalCount = events.length;
+    // Sort by timestamp descending (newest first)
+    events.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+    // Apply limit
+    events = events.slice(0, limit);
+    return {
+        events,
+        total_count: totalCount,
+    };
+}
+/**
+ * Helper to emit provenance for artifact creation.
+ * Convenience wrapper for emitProvenance with 'create' action.
+ */
+export async function emitCreateProvenance(artifactRef, content, summary, projectId) {
+    const actorId = getDefaultActorId();
+    const fingerprint = hashContent(content);
+    return emitProvenance({
+        actor_id: actorId,
+        action: 'create',
+        artifact_refs: [artifactRef],
+        reason_code: 'initial_creation',
+        summary,
+        fingerprint_before: null,
+        fingerprint_after: fingerprint,
+    }, projectId);
+}
+//# sourceMappingURL=provenance.js.map

package/dist/tools/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/tools/provenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAwB,MAAM,uBAAuB,CAAC;AACrG,OAAO,IAAI,MAAM,MAAM,CAAC;AA2DxB,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,SAAS,0BAA0B,CAAC,SAAiB;IACnD,OAAO;QACL,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,UAAU,SAAS,iCAAiC;QAC7D,IAAI,EACF,oHAAoH;KACvH,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,QAAQ,OAAO,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7G,MAAM,KAAK,GAAG,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/G,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,SAAS,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC;IACvE,OAAO,SAAS,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACtG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1D,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;YACvC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,kBAAkB;YACnD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B,EAC1B,SAAkB;IAElB,IAAI,QAA8B,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAoB;QAC7B,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC;IAEF,uCAAuC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC3D,SAAS,CAAC,SAAS,CAAC,CAAC;IAErB,MAAM,QAAQ,GAAG,GAAG,OAAO,MAAM,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhD,qBAAqB;IACrB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAE5D,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEnD,GAAG,CAAC,uBAAuB,OAAO,gBAAgB,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,aAAa,CAAC,MAAM,cAAc,CAAC,CAAC;IAEhH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,IAAI,QAA8B,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0BAA0B,CAAC,wBAAwB,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,IAAI,MAAM,GAAsB,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,gBAAgB;YAChB,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IAEjC,8CAA8C;IAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAE9D,cAAc;IACd,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEhC,OAAO;QACL,MAAM;QACN,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,OAAe,EACf,OAAe,EACf,SAAkB;IAElB,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEzC,OAAO,cAAc,CACnB;QACE,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,CAAC,WAAW,CAAC;QAC5B,WAAW,EAAE,kBAAkB;QAC/B,OAAO;QACP,kBAAkB,EAAE,IAAI;QACxB,iBAAiB,EAAE,WAAW;KAC/B,EACD,SAAS,CACV,CAAC;AACJ,CAAC"}

package/dist/tools/rateLimiter.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Rate Limiter for AI Callers
+ *
+ * Prevents runaway scenarios where AI makes too many requests.
+ * Humans bypass rate limiting entirely.
+ */
+import { CallerRole } from './dojoPolicy.js';
+interface RateLimitConfig {
+    maxRequestsPerMinute: number;
+    maxConcurrent: number;
+}
+export interface RateLimitResult {
+    allowed: boolean;
+    reason?: string;
+    retryAfterMs?: number;
+}
+/**
+ * Check if a request is allowed under rate limits.
+ * Call this BEFORE processing a request.
+ */
+export declare function checkRateLimit(callerRole?: CallerRole): RateLimitResult;
+/**
+ * Record that a request has started.
+ * Call this AFTER checkRateLimit returns allowed: true.
+ */
+export declare function recordRequestStart(callerRole?: CallerRole): void;
+/**
+ * Record that a request has completed.
+ * Call this in a finally block after processing.
+ */
+export declare function recordRequestEnd(callerRole?: CallerRole): void;
+/**
+ * Get current rate limit status for monitoring/debugging.
+ */
+export declare function getRateLimitStatus(callerRole: CallerRole): {
+    requestsInLastMinute: number;
+    concurrent: number;
+    limits: RateLimitConfig;
+};
+/**
+ * Reset rate limit state (useful for testing).
+ */
+export declare function resetRateLimits(): void;
+export {};
+//# sourceMappingURL=rateLimiter.d.ts.map

package/dist/tools/rateLimiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.d.ts","sourceRoot":"","sources":["../../src/tools/rateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAO7C,UAAU,eAAe;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACvB;AA8BD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,GAAE,UAAoB,GAAG,eAAe,CA+BhF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,GAAE,UAAoB,GAAG,IAAI,CAKzE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,GAAE,UAAoB,GAAG,IAAI,CAIvE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG;IAC1D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;CACzB,CAWA;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/tools/rateLimiter.js

@@ -0,0 +1,91 @@
+/**
+ * Rate Limiter for AI Callers
+ *
+ * Prevents runaway scenarios where AI makes too many requests.
+ * Humans bypass rate limiting entirely.
+ */
+import { log } from '../config.js';
+const DEFAULT_LIMITS = {
+    human: { maxRequestsPerMinute: Infinity, maxConcurrent: Infinity },
+    mother: { maxRequestsPerMinute: 30, maxConcurrent: 3 },
+    ai: { maxRequestsPerMinute: 20, maxConcurrent: 2 },
+};
+const state = new Map();
+function getState(role) {
+    if (!state.has(role)) {
+        state.set(role, { requests: [], concurrent: 0 });
+    }
+    return state.get(role);
+}
+/**
+ * Check if a request is allowed under rate limits.
+ * Call this BEFORE processing a request.
+ */
+export function checkRateLimit(callerRole = 'human') {
+    const limits = DEFAULT_LIMITS[callerRole];
+    const roleState = getState(callerRole);
+    const now = Date.now();
+    const oneMinuteAgo = now - 60_000;
+    // Clean old requests
+    roleState.requests = roleState.requests.filter(ts => ts > oneMinuteAgo);
+    // Check concurrent limit
+    if (roleState.concurrent >= limits.maxConcurrent) {
+        log(`rateLimiter: ${callerRole} blocked - concurrent limit (${roleState.concurrent}/${limits.maxConcurrent})`);
+        return {
+            allowed: false,
+            reason: `Concurrent request limit reached (${limits.maxConcurrent}). Wait for current requests to complete.`,
+        };
+    }
+    // Check requests per minute
+    if (roleState.requests.length >= limits.maxRequestsPerMinute) {
+        const oldestRequest = roleState.requests[0];
+        const retryAfterMs = oldestRequest + 60_000 - now;
+        log(`rateLimiter: ${callerRole} blocked - rate limit (${roleState.requests.length}/${limits.maxRequestsPerMinute}/min)`);
+        return {
+            allowed: false,
+            reason: `Rate limit exceeded (${limits.maxRequestsPerMinute} requests/minute). Try again in ${Math.ceil(retryAfterMs / 1000)}s.`,
+            retryAfterMs,
+        };
+    }
+    return { allowed: true };
+}
+/**
+ * Record that a request has started.
+ * Call this AFTER checkRateLimit returns allowed: true.
+ */
+export function recordRequestStart(callerRole = 'human') {
+    const roleState = getState(callerRole);
+    roleState.requests.push(Date.now());
+    roleState.concurrent++;
+    log(`rateLimiter: ${callerRole} request started (concurrent: ${roleState.concurrent})`);
+}
+/**
+ * Record that a request has completed.
+ * Call this in a finally block after processing.
+ */
+export function recordRequestEnd(callerRole = 'human') {
+    const roleState = getState(callerRole);
+    roleState.concurrent = Math.max(0, roleState.concurrent - 1);
+    log(`rateLimiter: ${callerRole} request ended (concurrent: ${roleState.concurrent})`);
+}
+/**
+ * Get current rate limit status for monitoring/debugging.
+ */
+export function getRateLimitStatus(callerRole) {
+    const limits = DEFAULT_LIMITS[callerRole];
+    const roleState = getState(callerRole);
+    const oneMinuteAgo = Date.now() - 60_000;
+    const recentRequests = roleState.requests.filter(ts => ts > oneMinuteAgo);
+    return {
+        requestsInLastMinute: recentRequests.length,
+        concurrent: roleState.concurrent,
+        limits,
+    };
+}
+/**
+ * Reset rate limit state (useful for testing).
+ */
+export function resetRateLimits() {
+    state.clear();
+}
+//# sourceMappingURL=rateLimiter.js.map

package/dist/tools/rateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.js","sourceRoot":"","sources":["../../src/tools/rateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAWnC,MAAM,cAAc,GAAwC;IAC1D,KAAK,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE;IAClE,MAAM,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;IACtD,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;CACnD,CAAC;AAWF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEpD,SAAS,QAAQ,CAAC,IAAgB;IAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;AAC1B,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,aAAyB,OAAO;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,GAAG,GAAG,MAAM,CAAC;IAElC,qBAAqB;IACrB,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;IAExE,yBAAyB;IACzB,IAAI,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACjD,GAAG,CAAC,gBAAgB,UAAU,gCAAgC,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;QAC/G,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,qCAAqC,MAAM,CAAC,aAAa,2CAA2C;SAC7G,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,aAAa,GAAG,MAAM,GAAG,GAAG,CAAC;QAClD,GAAG,CAAC,gBAAgB,UAAU,0BAA0B,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,OAAO,CAAC,CAAC;QACzH,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,wBAAwB,MAAM,CAAC,oBAAoB,mCAAmC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI;YAChI,YAAY;SACb,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,aAAyB,OAAO;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,SAAS,CAAC,UAAU,EAAE,CAAC;IACvB,GAAG,CAAC,gBAAgB,UAAU,iCAAiC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAyB,OAAO;IAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,gBAAgB,UAAU,+BAA+B,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC;AACxF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IAKvD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;IAE1E,OAAO;QACL,oBAAoB,EAAE,cAAc,CAAC,MAAM;QAC3C,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/tools/registry/index.d.ts

@@ -0,0 +1,10 @@
+import { ToolSpec } from '../types.js';
+export declare const projectInitTool: ToolSpec;
+export declare const projectStatusTool: ToolSpec;
+export declare const registryListTool: ToolSpec;
+export declare const registryAddTool: ToolSpec;
+export declare const registryRemoveTool: ToolSpec;
+export declare const registryAliasTool: ToolSpec;
+export declare const registryResolveTool: ToolSpec;
+export declare const registryTools: ToolSpec[];
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/registry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/registry/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAuFvC,eAAO,MAAM,eAAe,EAAE,QAyL7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QA2F/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAqC9B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QA+C7B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,QAmChC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QAqC/B,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,QAsCjC,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,QAAQ,EAQnC,CAAC"}