@git.zone/tsagent 1.1.0

package/dist_ts/cli.js

@@ -0,0 +1,129 @@
+import * as plugins from './plugins.js';
+import * as paths from './paths.js';
+import { TsAgent, inspectChatGptAuthSources, loginChatGptAuth } from './classes.tsagent.js';
+const sensitiveConfigKeyRegex = /(^apiKey$|api[_-]?key|token|secret|password|credential|authorization)/i;
+const redactSensitiveConfigValues = (valueArg, keyArg) => {
+    if (keyArg && sensitiveConfigKeyRegex.test(keyArg)) {
+        return valueArg ? '[redacted]' : valueArg;
+    }
+    if (Array.isArray(valueArg)) {
+        return valueArg.map(value => redactSensitiveConfigValues(value));
+    }
+    if (typeof valueArg === 'object' && valueArg !== null) {
+        return Object.fromEntries(Object.entries(valueArg).map(([key, value]) => [
+            key,
+            redactSensitiveConfigValues(value, key),
+        ]));
+    }
+    return valueArg;
+};
+export const redactConfigForOutput = (configArg) => {
+    return redactSensitiveConfigValues(configArg);
+};
+const getPrompt = async (argvArg) => {
+    const positional = (argvArg._ || []).slice(1).join(' ').trim();
+    if (positional)
+        return positional;
+    if (typeof argvArg.prompt === 'string')
+        return argvArg.prompt;
+    const interact = new plugins.smartinteract.SmartInteract();
+    const answer = await interact.askQuestion({
+        type: 'input',
+        name: 'prompt',
+        message: 'What should tsagent help with?',
+        default: '',
+    });
+    return answer.value;
+};
+const runChat = async (argvArg) => {
+    const prompt = await getPrompt(argvArg);
+    const agent = new TsAgent({ argvArg, projectDir: paths.cwd });
+    await agent.start();
+    try {
+        const tools = argvArg.repo ? await agent.createReadOnlyProjectTools(paths.cwd) : undefined;
+        const result = await agent.runAgent({
+            taskName: 'chat',
+            projectDir: paths.cwd,
+            system: argvArg.repo
+                ? 'You are a concise repo-aware engineering assistant. You can read files but must not reveal secrets.'
+                : 'You are a concise engineering assistant.',
+            prompt,
+            tools,
+            maxSteps: argvArg.repo ? 20 : 3,
+            useCompaction: true,
+            onToolCall: (toolName) => console.log(`[tool] ${toolName}`),
+        });
+        console.log(result.text);
+    }
+    finally {
+        await agent.stop();
+    }
+};
+const runAuth = async (argvArg) => {
+    const subcommand = argvArg._?.[1] || 'status';
+    if (subcommand === 'login') {
+        await loginChatGptAuth();
+        return;
+    }
+    const inspections = await inspectChatGptAuthSources();
+    console.log('OpenAI ChatGPT auth sources:');
+    for (const inspection of inspections) {
+        const status = inspection.usable
+            ? 'usable'
+            : inspection.exists
+                ? inspection.expired
+                    ? 'expired'
+                    : 'not usable'
+                : 'missing';
+        const account = inspection.email ? ` (${inspection.email})` : '';
+        console.log(`  ${inspection.source}: ${status}${account} - ${inspection.filePath}`);
+    }
+};
+const runConfig = async (argvArg) => {
+    const subcommand = argvArg._?.[1] || 'show';
+    if (subcommand !== 'show') {
+        throw new Error(`Unknown config subcommand: ${subcommand}`);
+    }
+    const agent = new TsAgent({ argvArg, projectDir: paths.cwd });
+    await agent.start();
+    try {
+        console.log(JSON.stringify({
+            config: redactConfigForOutput(agent.config),
+            selectedAuthSource: agent.selectedAuthSource,
+        }, null, 2));
+    }
+    finally {
+        await agent.stop();
+    }
+};
+const printHelp = () => {
+    console.log(`
+Usage: tsagent <command> [options]
+
+Commands:
+  chat [--repo] [prompt]      Chat directly with the configured model
+  auth [status|login]         Inspect or create ChatGPT subscription auth
+  config show                 Show resolved tsagent config
+
+Examples:
+  tsagent chat "explain this project"
+  tsagent chat --repo "which file exports the public API?"
+  tsagent auth status
+`);
+};
+export const runCli = async () => {
+    const cli = new plugins.smartcli.Smartcli();
+    cli.standardCommand().subscribe(async (argvArg) => {
+        if (argvArg.help || argvArg.h) {
+            printHelp();
+            return;
+        }
+        await runChat(argvArg);
+    });
+    cli.addCommand('chat').subscribe(runChat);
+    cli.addCommand('auth').subscribe(runAuth);
+    cli.addCommand('config').subscribe(runConfig);
+    cli.addCommand('help').subscribe(async () => printHelp());
+    cli.startParse();
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/index.d.ts

@@ -0,0 +1,3 @@
+export * from './classes.tsagent.js';
+export * from './tools.project.js';
+export * from './cli.js';

package/dist_ts/index.js

@@ -0,0 +1,4 @@
+export * from './classes.tsagent.js';
+export * from './tools.project.js';
+export * from './cli.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLHNCQUFzQixDQUFDO0FBQ3JDLGNBQWMsb0JBQW9CLENBQUM7QUFDbkMsY0FBYyxVQUFVLENBQUMifQ==

package/dist_ts/paths.d.ts

@@ -0,0 +1,2 @@
+export declare const cwd: string;
+export declare const packageBase: string;

package/dist_ts/paths.js

@@ -0,0 +1,4 @@
+import * as plugins from './plugins.js';
+export const cwd = process.cwd();
+export const packageBase = plugins.path.resolve(new URL('..', import.meta.url).pathname);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGF0aHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9wYXRocy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGNBQWMsQ0FBQztBQUV4QyxNQUFNLENBQUMsTUFBTSxHQUFHLEdBQUcsT0FBTyxDQUFDLEdBQUcsRUFBRSxDQUFDO0FBQ2pDLE1BQU0sQ0FBQyxNQUFNLFdBQVcsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxJQUFJLEdBQUcsQ0FBQyxJQUFJLEVBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQyxRQUFRLENBQUMsQ0FBQyJ9

package/dist_ts/plugins.d.ts

@@ -0,0 +1,14 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+export { fs, path };
+import * as qenv from '@push.rocks/qenv';
+import * as smartagent from '@push.rocks/smartagent';
+import * as smartagentCompaction from '@push.rocks/smartagent/compaction';
+import * as smartai from '@push.rocks/smartai';
+import * as smartaiOpenAiChatGptAuth from '@push.rocks/smartai/openai-chatgpt-auth';
+import * as smartcli from '@push.rocks/smartcli';
+import * as smartconfig from '@push.rocks/smartconfig';
+import * as smartdelay from '@push.rocks/smartdelay';
+import * as smartinteract from '@push.rocks/smartinteract';
+import * as smartpath from '@push.rocks/smartpath';
+export { qenv, smartagent, smartagentCompaction, smartai, smartaiOpenAiChatGptAuth, smartcli, smartconfig, smartdelay, smartinteract, smartpath, };

package/dist_ts/plugins.js

@@ -0,0 +1,17 @@
+// node native scope
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+export { fs, path };
+// @push.rocks scope
+import * as qenv from '@push.rocks/qenv';
+import * as smartagent from '@push.rocks/smartagent';
+import * as smartagentCompaction from '@push.rocks/smartagent/compaction';
+import * as smartai from '@push.rocks/smartai';
+import * as smartaiOpenAiChatGptAuth from '@push.rocks/smartai/openai-chatgpt-auth';
+import * as smartcli from '@push.rocks/smartcli';
+import * as smartconfig from '@push.rocks/smartconfig';
+import * as smartdelay from '@push.rocks/smartdelay';
+import * as smartinteract from '@push.rocks/smartinteract';
+import * as smartpath from '@push.rocks/smartpath';
+export { qenv, smartagent, smartagentCompaction, smartai, smartaiOpenAiChatGptAuth, smartcli, smartconfig, smartdelay, smartinteract, smartpath, };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/tools.project.d.ts

@@ -0,0 +1,2 @@
+import * as plugins from './plugins.js';
+export declare const createReadOnlyProjectTools: (rootDirArg: string) => Promise<plugins.smartai.ToolSet>;

package/dist_ts/tools.project.js

@@ -0,0 +1,126 @@
+import * as plugins from './plugins.js';
+const defaultDeniedSegments = new Set([
+    '.cache',
+    '.git',
+    '.next',
+    '.nogit',
+    '.rpt2_cache',
+    'build',
+    'coverage',
+    'dist',
+    'node_modules',
+    'out',
+]);
+const defaultDeniedBasenames = new Set([
+    '.npmrc',
+    'bun.lockb',
+    'credentials.json',
+    'deno.lock',
+    'npm-shrinkwrap.json',
+    'package-lock.json',
+    'pnpm-lock.yaml',
+    'yarn.lock',
+]);
+const assertAllowedRelativePath = (relativePath) => {
+    const normalized = relativePath.split(plugins.path.sep).join('/');
+    const parts = normalized.split('/').filter(Boolean);
+    const basename = parts.at(-1) ?? normalized;
+    if (basename === '.env' || basename.startsWith('.env.')) {
+        throw new Error(`Access denied: ${relativePath} may contain environment secrets.`);
+    }
+    if (basename.endsWith('.pem') || basename.endsWith('.key') || basename.endsWith('.p12')) {
+        throw new Error(`Access denied: ${relativePath} may contain private key material.`);
+    }
+    if (defaultDeniedBasenames.has(basename)) {
+        throw new Error(`Access denied: ${relativePath} is excluded from AI file access.`);
+    }
+    for (const segment of parts) {
+        if (defaultDeniedSegments.has(segment) || segment.startsWith('dist_')) {
+            throw new Error(`Access denied: ${relativePath} is excluded from AI file access.`);
+        }
+    }
+};
+const realpathIfExists = async (pathArg) => {
+    try {
+        return await plugins.fs.realpath(pathArg);
+    }
+    catch {
+        return plugins.path.resolve(pathArg);
+    }
+};
+const resolveAllowedPath = async (rootDirArg, inputPathArg) => {
+    const rootReal = await plugins.fs.realpath(plugins.path.resolve(rootDirArg));
+    const resolvedCandidate = plugins.path.resolve(plugins.path.isAbsolute(inputPathArg)
+        ? inputPathArg
+        : plugins.path.join(rootReal, inputPathArg));
+    const resolvedReal = await realpathIfExists(resolvedCandidate);
+    if (resolvedReal !== rootReal && !resolvedReal.startsWith(`${rootReal}${plugins.path.sep}`)) {
+        throw new Error(`Access denied: "${inputPathArg}" is outside allowed root "${rootDirArg}"`);
+    }
+    const relativePath = plugins.path.relative(rootReal, resolvedReal) || '.';
+    assertAllowedRelativePath(relativePath);
+    return { resolvedPath: resolvedReal, relativePath };
+};
+const listDirectory = async (rootDirArg, dirPathArg, recursive = false) => {
+    const { resolvedPath } = await resolveAllowedPath(rootDirArg, dirPathArg);
+    const entries = await plugins.fs.readdir(resolvedPath, { withFileTypes: true });
+    const result = [];
+    for (const entry of entries) {
+        const childPath = plugins.path.join(resolvedPath, entry.name);
+        const childRelativeInput = plugins.path.relative(rootDirArg, childPath) || entry.name;
+        try {
+            const allowed = await resolveAllowedPath(rootDirArg, childRelativeInput);
+            const stat = await plugins.fs.stat(allowed.resolvedPath);
+            result.push(`${allowed.relativePath}${stat.isDirectory() ? '/' : ''}`);
+            if (recursive && stat.isDirectory()) {
+                result.push(...await listDirectory(rootDirArg, allowed.relativePath, true));
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return result.sort();
+};
+export const createReadOnlyProjectTools = async (rootDirArg) => {
+    const rootDir = await plugins.fs.realpath(plugins.path.resolve(rootDirArg));
+    return {
+        read_file: plugins.smartagent.tool({
+            description: 'Read file contents within the project. Secret and generated paths are blocked.',
+            inputSchema: plugins.smartagent.z.object({
+                path: plugins.smartagent.z.string().describe('Absolute or project-relative path to the file'),
+                startLine: plugins.smartagent.z.number().optional().describe('First line, 1-indexed and inclusive'),
+                endLine: plugins.smartagent.z.number().optional().describe('Last line, 1-indexed and inclusive'),
+            }),
+            execute: async ({ path: filePath, startLine, endLine }) => {
+                const { resolvedPath } = await resolveAllowedPath(rootDir, filePath);
+                const stat = await plugins.fs.stat(resolvedPath);
+                if (!stat.isFile()) {
+                    throw new Error(`Cannot read non-file path: ${filePath}`);
+                }
+                const content = await plugins.fs.readFile(resolvedPath, 'utf8');
+                const selectedContent = startLine !== undefined || endLine !== undefined
+                    ? content.split('\n').slice((startLine ?? 1) - 1, endLine).join('\n')
+                    : content;
+                return plugins.smartagent.truncateOutput(selectedContent).content;
+            },
+        }),
+        list_directory: plugins.smartagent.tool({
+            description: 'List project files and directories. Secret and generated paths are omitted.',
+            inputSchema: plugins.smartagent.z.object({
+                path: plugins.smartagent.z.string().describe('Absolute or project-relative directory path to list'),
+                recursive: plugins.smartagent.z.boolean().optional().describe('List recursively'),
+            }),
+            execute: async ({ path: dirPath, recursive }) => {
+                const { resolvedPath } = await resolveAllowedPath(rootDir, dirPath);
+                const stat = await plugins.fs.stat(resolvedPath);
+                if (!stat.isDirectory()) {
+                    throw new Error(`Cannot list non-directory path: ${dirPath}`);
+                }
+                const entries = await listDirectory(rootDir, dirPath, recursive === true);
+                return plugins.smartagent.truncateOutput(entries.join('\n')).content;
+            },
+        }),
+    };
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidG9vbHMucHJvamVjdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzL3Rvb2xzLnByb2plY3QudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxjQUFjLENBQUM7QUFFeEMsTUFBTSxxQkFBcUIsR0FBRyxJQUFJLEdBQUcsQ0FBQztJQUNwQyxRQUFRO0lBQ1IsTUFBTTtJQUNOLE9BQU87SUFDUCxRQUFRO0lBQ1IsYUFBYTtJQUNiLE9BQU87SUFDUCxVQUFVO0lBQ1YsTUFBTTtJQUNOLGNBQWM7SUFDZCxLQUFLO0NBQ04sQ0FBQyxDQUFDO0FBRUgsTUFBTSxzQkFBc0IsR0FBRyxJQUFJLEdBQUcsQ0FBQztJQUNyQyxRQUFRO0lBQ1IsV0FBVztJQUNYLGtCQUFrQjtJQUNsQixXQUFXO0lBQ1gscUJBQXFCO0lBQ3JCLG1CQUFtQjtJQUNuQixnQkFBZ0I7SUFDaEIsV0FBVztDQUNaLENBQUMsQ0FBQztBQUVILE1BQU0seUJBQXlCLEdBQUcsQ0FBQyxZQUFvQixFQUFRLEVBQUU7SUFDL0QsTUFBTSxVQUFVLEdBQUcsWUFBWSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUNsRSxNQUFNLEtBQUssR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUNwRCxNQUFNLFFBQVEsR0FBRyxLQUFLLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksVUFBVSxDQUFDO0lBRTVDLElBQUksUUFBUSxLQUFLLE1BQU0sSUFBSSxRQUFRLENBQUMsVUFBVSxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7UUFDeEQsTUFBTSxJQUFJLEtBQUssQ0FBQyxrQkFBa0IsWUFBWSxtQ0FBbUMsQ0FBQyxDQUFDO0lBQ3JGLENBQUM7SUFDRCxJQUFJLFFBQVEsQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLElBQUksUUFBUSxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsSUFBSSxRQUFRLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUM7UUFDeEYsTUFBTSxJQUFJLEtBQUssQ0FBQyxrQkFBa0IsWUFBWSxvQ0FBb0MsQ0FBQyxDQUFDO0lBQ3RGLENBQUM7SUFDRCxJQUFJLHNCQUFzQixDQUFDLEdBQUcsQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO1FBQ3pDLE1BQU0sSUFBSSxLQUFLLENBQUMsa0JBQWtCLFlBQVksbUNBQW1DLENBQUMsQ0FBQztJQUNyRixDQUFDO0lBQ0QsS0FBSyxNQUFNLE9BQU8sSUFBSSxLQUFLLEVBQUUsQ0FBQztRQUM1QixJQUFJLHFCQUFxQixDQUFDLEdBQUcsQ0FBQyxPQUFPLENBQUMsSUFBSSxPQUFPLENBQUMsVUFBVSxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7WUFDdEUsTUFBTSxJQUFJLEtBQUssQ0FBQyxrQkFBa0IsWUFBWSxtQ0FBbUMsQ0FBQyxDQUFDO1FBQ3JGLENBQUM7SUFDSCxDQUFDO0FBQ0gsQ0FBQyxDQUFDO0FBRUYsTUFBTSxnQkFBZ0IsR0FBRyxLQUFLLEVBQUUsT0FBZSxFQUFtQixFQUFFO0lBQ2xFLElBQUksQ0FBQztRQUNILE9BQU8sTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUM1QyxDQUFDO0lBQUMsTUFBTSxDQUFDO1FBQ1AsT0FBTyxPQUFPLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUN2QyxDQUFDO0FBQ0gsQ0FBQyxDQUFDO0FBRUYsTUFBTSxrQkFBa0IsR0FBRyxLQUFLLEVBQUUsVUFBa0IsRUFBRSxZQUFvQixFQUd2RSxFQUFFO0lBQ0gsTUFBTSxRQUFRLEdBQUcsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDO0lBQzdFLE1BQU0saUJBQWlCLEdBQUcsT0FBTyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQzVDLE9BQU8sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLFlBQVksQ0FBQztRQUNuQyxDQUFDLENBQUMsWUFBWTtRQUNkLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxRQUFRLEVBQUUsWUFBWSxDQUFDLENBQzlDLENBQUM7SUFDRixNQUFNLFlBQVksR0FBRyxNQUFNLGdCQUFnQixDQUFDLGlCQUFpQixDQUFDLENBQUM7SUFFL0QsSUFBSSxZQUFZLEtBQUssUUFBUSxJQUFJLENBQUMsWUFBWSxDQUFDLFVBQVUsQ0FBQyxHQUFHLFFBQVEsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDLEVBQUUsQ0FBQztRQUM1RixNQUFNLElBQUksS0FBSyxDQUFDLG1CQUFtQixZQUFZLDhCQUE4QixVQUFVLEdBQUcsQ0FBQyxDQUFDO0lBQzlGLENBQUM7SUFFRCxNQUFNLFlBQVksR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLEVBQUUsWUFBWSxDQUFDLElBQUksR0FBRyxDQUFDO0lBQzFFLHlCQUF5QixDQUFDLFlBQVksQ0FBQyxDQUFDO0lBQ3hDLE9BQU8sRUFBRSxZQUFZLEVBQUUsWUFBWSxFQUFFLFlBQVksRUFBRSxDQUFDO0FBQ3RELENBQUMsQ0FBQztBQUVGLE1BQU0sYUFBYSxHQUFHLEtBQUssRUFBRSxVQUFrQixFQUFFLFVBQWtCLEVBQUUsU0FBUyxHQUFHLEtBQUssRUFBcUIsRUFBRTtJQUMzRyxNQUFNLEVBQUUsWUFBWSxFQUFFLEdBQUcsTUFBTSxrQkFBa0IsQ0FBQyxVQUFVLEVBQUUsVUFBVSxDQUFDLENBQUM7SUFDMUUsTUFBTSxPQUFPLEdBQUcsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLE9BQU8sQ0FBQyxZQUFZLEVBQUUsRUFBRSxhQUFhLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztJQUNoRixNQUFNLE1BQU0sR0FBYSxFQUFFLENBQUM7SUFDNUIsS0FBSyxNQUFNLEtBQUssSUFBSSxPQUFPLEVBQUUsQ0FBQztRQUM1QixNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxZQUFZLEVBQUUsS0FBSyxDQUFDLElBQUksQ0FBQyxDQUFDO1FBQzlELE1BQU0sa0JBQWtCLEdBQUcsT0FBTyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsVUFBVSxFQUFFLFNBQVMsQ0FBQyxJQUFJLEtBQUssQ0FBQyxJQUFJLENBQUM7UUFDdEYsSUFBSSxDQUFDO1lBQ0gsTUFBTSxPQUFPLEdBQUcsTUFBTSxrQkFBa0IsQ0FBQyxVQUFVLEVBQUUsa0JBQWtCLENBQUMsQ0FBQztZQUN6RSxNQUFNLElBQUksR0FBRyxNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxZQUFZLENBQUMsQ0FBQztZQUN6RCxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsT0FBTyxDQUFDLFlBQVksR0FBRyxJQUFJLENBQUMsV0FBVyxFQUFFLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztZQUN2RSxJQUFJLFNBQVMsSUFBSSxJQUFJLENBQUMsV0FBVyxFQUFFLEVBQUUsQ0FBQztnQkFDcEMsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLE1BQU0sYUFBYSxDQUFDLFVBQVUsRUFBRSxPQUFPLENBQUMsWUFBWSxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUM7WUFDOUUsQ0FBQztRQUNILENBQUM7UUFBQyxNQUFNLENBQUM7WUFDUCxTQUFTO1FBQ1gsQ0FBQztJQUNILENBQUM7SUFDRCxPQUFPLE1BQU0sQ0FBQyxJQUFJLEVBQUUsQ0FBQztBQUN2QixDQUFDLENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSwwQkFBMEIsR0FBRyxLQUFLLEVBQUUsVUFBa0IsRUFBb0MsRUFBRTtJQUN2RyxNQUFNLE9BQU8sR0FBRyxNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUM7SUFFNUUsT0FBTztRQUNMLFNBQVMsRUFBRSxPQUFPLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQztZQUNqQyxXQUFXLEVBQUUsZ0ZBQWdGO1lBQzdGLFdBQVcsRUFBRSxPQUFPLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUM7Z0JBQ3ZDLElBQUksRUFBRSxPQUFPLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxRQUFRLENBQUMsK0NBQStDLENBQUM7Z0JBQzdGLFNBQVMsRUFBRSxPQUFPLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxRQUFRLEVBQUUsQ0FBQyxRQUFRLENBQUMscUNBQXFDLENBQUM7Z0JBQ25HLE9BQU8sRUFBRSxPQUFPLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxRQUFRLEVBQUUsQ0FBQyxRQUFRLENBQUMsb0NBQW9DLENBQUM7YUFDakcsQ0FBQztZQUNGLE9BQU8sRUFBRSxLQUFLLEVBQUUsRUFBRSxJQUFJLEVBQUUsUUFBUSxFQUFFLFNBQVMsRUFBRSxPQUFPLEVBSW5ELEVBQUUsRUFBRTtnQkFDSCxNQUFNLEVBQUUsWUFBWSxFQUFFLEdBQUcsTUFBTSxrQkFBa0IsQ0FBQyxPQUFPLEVBQUUsUUFBUSxDQUFDLENBQUM7Z0JBQ3JFLE1BQU0sSUFBSSxHQUFHLE1BQU0sT0FBTyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLENBQUM7Z0JBQ2pELElBQUksQ0FBQyxJQUFJLENBQUMsTUFBTSxFQUFFLEVBQUUsQ0FBQztvQkFDbkIsTUFBTSxJQUFJLEtBQUssQ0FBQyw4QkFBOEIsUUFBUSxFQUFFLENBQUMsQ0FBQztnQkFDNUQsQ0FBQztnQkFDRCxNQUFNLE9BQU8sR0FBRyxNQUFNLE9BQU8sQ0FBQyxFQUFFLENBQUMsUUFBUSxDQUFDLFlBQVksRUFBRSxNQUFNLENBQUMsQ0FBQztnQkFDaEUsTUFBTSxlQUFlLEdBQUcsU0FBUyxLQUFLLFNBQVMsSUFBSSxPQUFPLEtBQUssU0FBUztvQkFDdEUsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsU0FBUyxJQUFJLENBQUMsQ0FBQyxHQUFHLENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDO29CQUNyRSxDQUFDLENBQUMsT0FBTyxDQUFDO2dCQUNaLE9BQU8sT0FBTyxDQUFDLFVBQVUsQ0FBQyxjQUFjLENBQUMsZUFBZSxDQUFDLENBQUMsT0FBTyxDQUFDO1lBQ3BFLENBQUM7U0FDRixDQUFDO1FBQ0YsY0FBYyxFQUFFLE9BQU8sQ0FBQyxVQUFVLENBQUMsSUFBSSxDQUFDO1lBQ3RDLFdBQVcsRUFBRSw2RUFBNkU7WUFDMUYsV0FBVyxFQUFFLE9BQU8sQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQztnQkFDdkMsSUFBSSxFQUFFLE9BQU8sQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLFFBQVEsQ0FBQyxxREFBcUQsQ0FBQztnQkFDbkcsU0FBUyxFQUFFLE9BQU8sQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLE9BQU8sRUFBRSxDQUFDLFFBQVEsRUFBRSxDQUFDLFFBQVEsQ0FBQyxrQkFBa0IsQ0FBQzthQUNsRixDQUFDO1lBQ0YsT0FBTyxFQUFFLEtBQUssRUFBRSxFQUFFLElBQUksRUFBRSxPQUFPLEVBQUUsU0FBUyxFQUF5QyxFQUFFLEVBQUU7Z0JBQ3JGLE1BQU0sRUFBRSxZQUFZLEVBQUUsR0FBRyxNQUFNLGtCQUFrQixDQUFDLE9BQU8sRUFBRSxPQUFPLENBQUMsQ0FBQztnQkFDcEUsTUFBTSxJQUFJLEdBQUcsTUFBTSxPQUFPLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxZQUFZLENBQUMsQ0FBQztnQkFDakQsSUFBSSxDQUFDLElBQUksQ0FBQyxXQUFXLEVBQUUsRUFBRSxDQUFDO29CQUN4QixNQUFNLElBQUksS0FBSyxDQUFDLG1DQUFtQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO2dCQUNoRSxDQUFDO2dCQUNELE1BQU0sT0FBTyxHQUFHLE1BQU0sYUFBYSxDQUFDLE9BQU8sRUFBRSxPQUFPLEVBQUUsU0FBUyxLQUFLLElBQUksQ0FBQyxDQUFDO2dCQUMxRSxPQUFPLE9BQU8sQ0FBQyxVQUFVLENBQUMsY0FBYyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUM7WUFDdkUsQ0FBQztTQUNGLENBQUM7S0FDSCxDQUFDO0FBQ0osQ0FBQyxDQUFDIn0=

package/license.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Task Venture Capital GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@git.zone/tsagent",
+  "version": "1.1.0",
+  "private": false,
+  "description": "Shared AI agent runtime, authentication, and CLI for git.zone TypeScript tooling.",
+  "main": "dist_ts/index.js",
+  "typings": "dist_ts/index.d.ts",
+  "type": "module",
+  "bin": {
+    "tsagent": "./cli.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://code.foss.global/git.zone/tsagent.git"
+  },
+  "keywords": [
+    "AI",
+    "agent",
+    "smartagent",
+    "smartai",
+    "TypeScript",
+    "CLI",
+    "tooling",
+    "git.zone"
+  ],
+  "author": "Task Venture Capital GmbH",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://code.foss.global/git.zone/tsagent/issues"
+  },
+  "homepage": "https://code.foss.global/git.zone/tsagent#readme",
+  "dependencies": {
+    "@push.rocks/qenv": "^6.1.4",
+    "@push.rocks/smartagent": "^3.3.0",
+    "@push.rocks/smartai": "^4.0.0",
+    "@push.rocks/smartcli": "^4.0.21",
+    "@push.rocks/smartconfig": "^6.1.1",
+    "@push.rocks/smartdelay": "^3.1.0",
+    "@push.rocks/smartfs": "^1.5.1",
+    "@push.rocks/smartinteract": "^2.0.16",
+    "@push.rocks/smartpath": "^6.0.0"
+  },
+  "devDependencies": {
+    "@git.zone/tsbuild": "^4.4.2",
+    "@git.zone/tsrun": "^2.0.4",
+    "@git.zone/tstest": "^3.6.6",
+    "@types/node": "^25.9.1"
+  },
+  "files": [
+    "ts/**/*",
+    "dist/**/*",
+    "dist_*/**/*",
+    "dist_ts/**/*",
+    "assets/**/*",
+    "cli.js",
+    ".smartconfig.json",
+    "readme.md",
+    "license.md"
+  ],
+  "browserslist": [
+    "last 1 chrome versions"
+  ],
+  "scripts": {
+    "test": "tstest test/ --verbose --logfile --timeout 120",
+    "build": "tsbuild tsfolders",
+    "buildDocs": "tsdoc"
+  }
+}

package/readme.md

@@ -0,0 +1,126 @@
+# @git.zone/tsagent
+
+`tsagent` is the shared AI runtime for `@git.zone` tools. It centralizes model setup, ChatGPT/API-key auth, safe read-only project tools, structured agent tasks, and a small direct chat CLI.
+
+## Issue Reporting and Security
+
+For reporting bugs, issues, or security vulnerabilities, please visit [community.foss.global/](https://community.foss.global/). This is the central community hub for all issue reporting. Developers who sign and comply with our contribution agreement and go through identification can also get a [code.foss.global/](https://code.foss.global/) account to submit Pull Requests directly.
+
+## Install
+
+```sh
+pnpm add @git.zone/tsagent
+```
+
+For CLI-only development tooling, install it as a dev dependency:
+
+```sh
+pnpm add --save-dev @git.zone/tsagent
+```
+
+## CLI
+
+```sh
+tsagent chat "explain this repository"
+tsagent chat --repo "which files define the public API?"
+tsagent auth status
+tsagent auth login
+tsagent config show
+```
+
+## Configuration
+
+Project defaults live in `.smartconfig.json` under `@git.zone/tsagent`:
+
+```json
+{
+  "@git.zone/tsagent": {
+    "provider": "openai",
+    "model": "gpt-5.5",
+    "authMode": "auto",
+    "chatGptAuthSources": ["opencode", "codex", "smartai"],
+    "providerOptions": {
+      "openai": {
+        "reasoningEffort": "xhigh"
+      }
+    },
+    "cache": "auto"
+  }
+}
+```
+
+Auth state is user-local. API-key fallback is stored in `~/.smartconfig/kv/@git.zone/tsagent.json`; ChatGPT subscription auth uses the existing `opencode`, `codex`, or `smartai` auth sources.
+
+Environment overrides:
+
+```sh
+TSAGENT_AI_PROVIDER=openai
+TSAGENT_AI_MODEL=gpt-5.5
+TSAGENT_AUTH_MODE=auto
+TSAGENT_CHATGPT_AUTH_SOURCES=opencode,codex,smartai
+TSAGENT_OPENAI_REASONING_EFFORT=xhigh
+OPENAI_TOKEN=...
+```
+
+Provider API-key environment variables use `OPENAI_TOKEN` or `OPENAI_API_KEY` for OpenAI, and `<PROVIDER>_TOKEN` or `<PROVIDER>_API_KEY` for other providers.
+
+## Library
+
+```ts
+import { TsAgent } from '@git.zone/tsagent';
+
+const agent = new TsAgent({ projectDir: process.cwd() });
+await agent.start();
+
+const result = await agent.runJsonTask({
+  taskName: 'inspect-project',
+  projectDir: process.cwd(),
+  system: 'Return JSON only.',
+  prompt: 'Identify the main package purpose.',
+  validate: (value) => {
+    if (typeof value !== 'object' || !value) return 'Return an object.';
+  },
+});
+
+await agent.stop();
+```
+
+Project tools are read-only by default and block common secret, generated, dependency, and private paths.
+
+## API
+
+Top-level exports:
+
+```ts
+import {
+  TsAgent,
+  createReadOnlyProjectTools,
+  defaultTsAgentConfig,
+  inspectChatGptAuthSources,
+  loginChatGptAuth,
+  runCli,
+} from '@git.zone/tsagent';
+```
+
+`TsAgent` is the main runtime facade. `createReadOnlyProjectTools()` exposes safe `read_file` and `list_directory` tools for agent tasks. `inspectChatGptAuthSources()` and `loginChatGptAuth()` are CLI/auth helpers for ChatGPT subscription auth.
+
+## License and Legal Information
+
+This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the repository license file.
+
+**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
+
+### Trademarks
+
+This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.
+
+Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.
+
+### Company Information
+
+Task Venture Capital GmbH<br>
+Registered at District Court Bremen HRB 35230 HB, Germany
+
+For any legal inquiries or further information, please contact us via email at hello@task.vc.
+
+By using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.

package/ts/00_commitinfo_data.ts

@@ -0,0 +1,8 @@
+/**
+ * autocreated commitinfo by @push.rocks/commitinfo
+ */
+export const commitinfo = {
+  name: '@git.zone/tsagent',
+  version: '1.1.0',
+  description: 'Shared AI agent runtime, authentication, and CLI for git.zone TypeScript tooling.'
+}