@haoyiyin/workflow 0.2.0

package/dist/src/router/guard.js

@@ -0,0 +1,370 @@
+/**
+ * Main Agent Guard - enforces that the main agent NEVER does substantive work.
+ *
+ * The guard is the enforcement mechanism for the "thin dispatcher" pattern.
+ * When embargo is active, the main agent is blocked from everything except
+ * meta-operations (reading plan files, state files, and dispatching subagents).
+ *
+ * Usage:
+ * ```typescript
+ * const guard = MainAgentGuard.create({
+ *   defaultModel: 'haiku',
+ *   planningThreshold: 0.6,
+ *   maxMainAgentTokens: 10000,
+ *   autoRoute: true,
+ * })
+ *
+ * const check = guard.checkOperation('read-source', { path: 'src/main.ts' })
+ * if (!check.allowed) {
+ *   throw new Error(check.reason)
+ * }
+ * ```
+ */
+import { MAIN_AGENT_PROHIBITED } from './types.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+const META_OPERATIONS = new Set([
+    'dispatch-subagent',
+    'relay-results',
+    'read-meta-file',
+    'read-plan',
+    'read-state',
+    'list-plans',
+    'check-state',
+    'read-config',
+]);
+const ALWAYS_ALLOWED_PATHS = [
+    '.pi/plans/**',
+    '.pi/yi-workflow/state/**',
+    'SKILL.md',
+    'AGENTS.md',
+    'CLAUDE.md',
+    'package.json',
+    '.claude/**',
+];
+const ALWAYS_FORBIDDEN_PATHS = [
+    'src/**',
+    'lib/**',
+    'app/**',
+    'dist/**',
+    'node_modules/**',
+    '**/*.test.ts',
+    '**/*.spec.ts',
+    '**/*.test.tsx',
+    '**/*.spec.tsx',
+];
+/**
+ * Parses a simple glob pattern into a regex for matching.
+ * Supports ** for recursive matching and * for single-segment.
+ */
+function globToRegex(pattern) {
+    const escaped = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*\*/g, '___DOUBLESTAR___')
+        .replace(/\*/g, '[^/]*')
+        .replace(/___DOUBLESTAR___/g, '.*');
+    return new RegExp(`^${escaped}$`);
+}
+/** Check whether a path matches any of the given glob patterns. */
+function matchesAnyGlob(filePath, patterns) {
+    const normalized = filePath.replace(/^\.\//, '');
+    for (const pattern of patterns) {
+        const regex = globToRegex(pattern);
+        if (regex.test(normalized)) {
+            return true;
+        }
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// MainAgentGuard
+// ---------------------------------------------------------------------------
+/**
+ * Enforces the "main agent as thin dispatcher" constraint.
+ *
+ * When embargoActive is true, the main agent is FORBIDDEN from doing
+ * ANY substantive work. It can only read meta-files and dispatch subagents.
+ */
+export class MainAgentGuard {
+    config;
+    violations;
+    pendingSubagents;
+    embargoActive;
+    tokensUsed;
+    constructor(config) {
+        this.config = Object.freeze({ ...config });
+        this.violations = [];
+        this.pendingSubagents = new Set();
+        this.embargoActive = false;
+        this.tokensUsed = 0;
+    }
+    // -----------------------------------------------------------------------
+    // Factory methods
+    // -----------------------------------------------------------------------
+    /** Create a guard with embargo active (strictest mode). */
+    static createEmbargoAll(config) {
+        const guard = new MainAgentGuard(config);
+        guard.activateEmbargo();
+        return guard;
+    }
+    /** Create a guard with embargo lifted (use with extreme caution). */
+    static createDisabled(config) {
+        return new MainAgentGuard(config);
+    }
+    /** Convenience: create with default config. */
+    static create(config) {
+        return new MainAgentGuard(config);
+    }
+    // -----------------------------------------------------------------------
+    // Operation checks
+    // -----------------------------------------------------------------------
+    /**
+     * Check whether an operation is permitted for the main agent.
+     *
+     * @param operation - The operation being attempted
+     * @returns GuardCheckResult with allowed flag and reason
+     */
+    checkOperation(operation) {
+        // If embargo is inactive, everything is permitted
+        if (!this.embargoActive) {
+            return {
+                allowed: true,
+                reason: 'Embargo is inactive - main agent may operate',
+                rule: 'embargo-off',
+            };
+        }
+        // Meta-operations are always allowed (they ARE the main agent's job)
+        if (META_OPERATIONS.has(operation)) {
+            return {
+                allowed: true,
+                reason: 'Meta-operation permitted for orchestration',
+                rule: 'meta-operation',
+            };
+        }
+        // Check against prohibited operations
+        const prohibitionMap = {
+            'read-source': MAIN_AGENT_PROHIBITED.readSourceFiles,
+            'search-codebase': MAIN_AGENT_PROHIBITED.searchCodebase,
+            'write-files': MAIN_AGENT_PROHIBITED.writeFiles,
+            'edit-files': MAIN_AGENT_PROHIBITED.writeFiles,
+            'run-build': MAIN_AGENT_PROHIBITED.runBuildCommands,
+            'run-tests': MAIN_AGENT_PROHIBITED.runTests,
+            'git-commit': MAIN_AGENT_PROHIBITED.writeFiles,
+            'git-push': MAIN_AGENT_PROHIBITED.writeFiles,
+            'read-diffs': MAIN_AGENT_PROHIBITED.readSourceFiles,
+            'long-running-task': MAIN_AGENT_PROHIBITED.longRunningTasks,
+        };
+        if (prohibitionMap[operation]) {
+            return {
+                allowed: false,
+                reason: `Operation "${operation}" is prohibited for the main agent`,
+                rule: 'prohibited-operation',
+            };
+        }
+        // Unknown operations under embargo: deny by default
+        return {
+            allowed: false,
+            reason: `Operation "${operation}" is not recognized and embargo is active`,
+            rule: 'unknown-operation-deny',
+        };
+    }
+    /**
+     * Check whether a file path is permitted to be read by the main agent.
+     */
+    checkReadPath(filePath) {
+        if (!this.embargoActive) {
+            return { allowed: true, reason: 'Embargo is inactive', rule: 'embargo-off' };
+        }
+        const normalized = filePath.replace(/^\.\//, '');
+        // Explicitly forbidden paths take precedence
+        if (matchesAnyGlob(normalized, ALWAYS_FORBIDDEN_PATHS)) {
+            return {
+                allowed: false,
+                reason: `Path "${filePath}" is forbidden under embargo`,
+                rule: 'forbidden-path',
+            };
+        }
+        // Check if path is in the allowed list
+        if (matchesAnyGlob(normalized, ALWAYS_ALLOWED_PATHS)) {
+            return { allowed: true, reason: 'Path is in the allowed list', rule: 'allowed-path' };
+        }
+        // Default: deny
+        return {
+            allowed: false,
+            reason: `Path "${filePath}" is not in the allowed list and embargo is active`,
+            rule: 'default-deny-path',
+        };
+    }
+    /**
+     * Comprehensive check combining operation and optional file path/context.
+     */
+    check(context) {
+        // Check the operation
+        const opCheck = this.checkOperation(context.operation);
+        if (!opCheck.allowed) {
+            return opCheck;
+        }
+        // If a path is provided, check read access
+        if (context.path) {
+            const pathCheck = this.checkReadPath(context.path);
+            if (!pathCheck.allowed) {
+                return pathCheck;
+            }
+        }
+        // Check token budget
+        if (this.tokensUsed > this.config.maxMainAgentTokens) {
+            return {
+                allowed: false,
+                reason: `Token budget exceeded: ${this.tokensUsed}/${this.config.maxMainAgentTokens}`,
+                rule: 'token-budget-exceeded',
+            };
+        }
+        return { allowed: true, reason: 'All checks passed' };
+    }
+    /**
+     * Assert an operation is allowed. Throws if violated.
+     */
+    assertAllowed(context) {
+        const result = this.check(context);
+        if (!result.allowed) {
+            const error = new Error(`GUARD VIOLATION: ${result.reason}\n` +
+                `Operation: ${context.operation}\n` +
+                `${context.path ? `Path: ${context.path}\n` : ''}` +
+                `Rule: ${result.rule}`);
+            this.violations.push({
+                operation: context.operation,
+                path: context.path,
+                timestamp: new Date(),
+                reason: result.reason,
+            });
+            throw error;
+        }
+    }
+    /**
+     * Record a violation without throwing (for audit trail).
+     */
+    recordViolation(context) {
+        const result = this.check(context);
+        this.violations.push({
+            operation: context.operation,
+            path: context.path,
+            timestamp: new Date(),
+            reason: result.reason,
+        });
+    }
+    // -----------------------------------------------------------------------
+    // Embargo control
+    // -----------------------------------------------------------------------
+    /** Activate embargo mode - main agent must delegate everything. */
+    activateEmbargo() {
+        this.embargoActive = true;
+    }
+    /** Deactivate embargo mode - main agent regains limited capabilities. */
+    deactivateEmbargo() {
+        this.embargoActive = false;
+    }
+    /** Check if embargo is currently active. */
+    isEmbargoActive() {
+        return this.embargoActive;
+    }
+    // -----------------------------------------------------------------------
+    // Subagent tracking
+    // -----------------------------------------------------------------------
+    /** Register a dispatched subagent. */
+    registerSubagent(id) {
+        this.pendingSubagents.add(id);
+    }
+    /** Mark a subagent as completed. */
+    completeSubagent(id) {
+        this.pendingSubagents.delete(id);
+    }
+    /** Check if there are any subagents still pending. */
+    hasPendingSubagents() {
+        return this.pendingSubagents.size > 0;
+    }
+    // -----------------------------------------------------------------------
+    // Token tracking
+    // -----------------------------------------------------------------------
+    /** Track token usage by the main agent. */
+    trackTokens(count) {
+        this.tokensUsed += count;
+    }
+    /** Get current token usage. */
+    getTokensUsed() {
+        return this.tokensUsed;
+    }
+    /** Percentage of token budget consumed (0-1). */
+    tokenBudgetUtilization() {
+        return this.tokensUsed / this.config.maxMainAgentTokens;
+    }
+    // -----------------------------------------------------------------------
+    // Status and reporting
+    // -----------------------------------------------------------------------
+    /** Current guard status snapshot. */
+    getStatus() {
+        return {
+            embargoActive: this.embargoActive,
+            pendingSubagents: [...this.pendingSubagents],
+            violations: [...this.violations],
+            prohibitedOperations: Object.entries(MAIN_AGENT_PROHIBITED)
+                .filter(([, prohibited]) => prohibited)
+                .map(([key]) => key),
+            allowedPaths: [...ALWAYS_ALLOWED_PATHS],
+            forbiddenPaths: [...ALWAYS_FORBIDDEN_PATHS],
+        };
+    }
+    /**
+     * Generate the system prompt fragment that enforces guard rules.
+     * Injected into the main agent's system prompt.
+     */
+    generateSystemPromptFragment() {
+        if (!this.embargoActive) {
+            return `
+## Main Agent Guard: INACTIVE
+
+The guard is currently disabled. You may operate normally,
+but prefer delegation to subagents for substantive work where possible.
+`;
+        }
+        const prohibited = Object.entries(MAIN_AGENT_PROHIBITED)
+            .filter(([, v]) => v)
+            .map(([k]) => `- ❌ ${k}`)
+            .join('\n');
+        const allowed = [...ALWAYS_ALLOWED_PATHS].map((p) => `- ${p}`).join('\n');
+        const pendingCount = this.pendingSubagents.size;
+        const tokenPct = Math.round(this.tokenBudgetUtilization() * 100);
+        return `
+## CRITICAL: Main Agent Guard — EMBARGO ACTIVE
+
+You are a **thin dispatcher**, NOT an executor. Your only job:
+1. Classify the user's request
+2. Dispatch subagents to do the actual work
+3. Relay subagent results back to the user
+
+### Prohibited (NEVER do these):
+${prohibited}
+
+### Allowed to read ONLY:
+${allowed}
+
+### Status:
+- Token budget: ${tokenPct}% used (${this.tokensUsed}/${this.config.maxMainAgentTokens})
+- Pending subagents: ${pendingCount}
+- Violations recorded: ${this.violations.length}
+
+### Routing rules:
+- Trivial typo/whitespace → handle directly (1-2 char fix)
+- Small scoped change → dispatch quick-task agent
+- New feature / complex change → dispatch to-plan → then execute-plan
+- Bug/debugging → dispatch systematic-debugging agent
+- Code review → dispatch review-diff agent
+- Research/exploration → dispatch explorer agent
+- TDD work → dispatch tdd agent
+- Everything else → dispatch general subagent
+
+### NEVER execute any task yourself. ALWAYS use the Agent tool.
+`;
+    }
+}
+//# sourceMappingURL=guard.js.map

package/dist/src/router/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/router/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AA8DlD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,mBAAmB;IACnB,eAAe;IACf,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,aAAa;CACd,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAA0B;IAClD,cAAc;IACd,0BAA0B;IAC1B,UAAU;IACV,WAAW;IACX,WAAW;IACX,cAAc;IACd,YAAY;CACb,CAAA;AAED,MAAM,sBAAsB,GAA0B;IACpD,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,eAAe;IACf,eAAe;CAChB,CAAA;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC;SACpC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;IAErC,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,mEAAmE;AACnE,SAAS,cAAc,CAAC,QAAgB,EAAE,QAA2B;IACnE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,CAAwB;IAC9B,UAAU,CAAkB;IAC5B,gBAAgB,CAAa;IACtC,aAAa,CAAS;IACtB,UAAU,CAAQ;IAE1B,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,UAAU,GAAG,EAAE,CAAA;QACpB,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAA;QACjC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAA;QAC1B,IAAI,CAAC,UAAU,GAAG,CAAC,CAAA;IACrB,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAE1E,2DAA2D;IAC3D,MAAM,CAAC,gBAAgB,CAAC,MAAoB;QAC1C,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;QACxC,KAAK,CAAC,eAAe,EAAE,CAAA;QACvB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,qEAAqE;IACrE,MAAM,CAAC,cAAc,CAAC,MAAoB;QACxC,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAED,+CAA+C;IAC/C,MAAM,CAAC,MAAM,CAAC,MAAoB;QAChC,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E;;;;;OAKG;IACH,cAAc,CAAC,SAAyB;QACtC,kDAAkD;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,8CAA8C;gBACtD,IAAI,EAAE,aAAa;aACpB,CAAA;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,4CAA4C;gBACpD,IAAI,EAAE,gBAAgB;aACvB,CAAA;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,cAAc,GAA4B;YAC9C,aAAa,EAAE,qBAAqB,CAAC,eAAe;YACpD,iBAAiB,EAAE,qBAAqB,CAAC,cAAc;YACvD,aAAa,EAAE,qBAAqB,CAAC,UAAU;YAC/C,YAAY,EAAE,qBAAqB,CAAC,UAAU;YAC9C,WAAW,EAAE,qBAAqB,CAAC,gBAAgB;YACnD,WAAW,EAAE,qBAAqB,CAAC,QAAQ;YAC3C,YAAY,EAAE,qBAAqB,CAAC,UAAU;YAC9C,UAAU,EAAE,qBAAqB,CAAC,UAAU;YAC5C,YAAY,EAAE,qBAAqB,CAAC,eAAe;YACnD,mBAAmB,EAAE,qBAAqB,CAAC,gBAAgB;SAC5D,CAAA;QAED,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc,SAAS,oCAAoC;gBACnE,IAAI,EAAE,sBAAsB;aAC7B,CAAA;QACH,CAAC;QAED,oDAAoD;QACpD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,cAAc,SAAS,2CAA2C;YAC1E,IAAI,EAAE,wBAAwB;SAC/B,CAAA;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;QAC9E,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAEhD,6CAA6C;QAC7C,IAAI,cAAc,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAAE,CAAC;YACvD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS,QAAQ,8BAA8B;gBACvD,IAAI,EAAE,gBAAgB;aACvB,CAAA;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,cAAc,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;QACvF,CAAC;QAED,gBAAgB;QAChB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,QAAQ,oDAAoD;YAC7E,IAAI,EAAE,mBAAmB;SAC1B,CAAA;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAqB;QACzB,sBAAsB;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAA2B,CAAC,CAAA;QACxE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,2CAA2C;QAC3C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAClD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO,SAAS,CAAA;YAClB,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,0BAA0B,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;gBACrF,IAAI,EAAE,uBAAuB;aAC9B,CAAA;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACvD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAqB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,oBAAoB,MAAM,CAAC,MAAM,IAAI;gBACnC,cAAc,OAAO,CAAC,SAAS,IAAI;gBACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,SAAS,MAAM,CAAC,IAAI,EAAE,CACzB,CAAA;YACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAA;YACF,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAqB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAE1E,mEAAmE;IACnE,eAAe;QACb,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;IAC3B,CAAC;IAED,yEAAyE;IACzE,iBAAiB;QACf,IAAI,CAAC,aAAa,GAAG,KAAK,CAAA;IAC5B,CAAC;IAED,4CAA4C;IAC5C,eAAe;QACb,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;IAED,0EAA0E;IAC1E,oBAAoB;IACpB,0EAA0E;IAE1E,sCAAsC;IACtC,gBAAgB,CAAC,EAAU;QACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED,oCAAoC;IACpC,gBAAgB,CAAC,EAAU;QACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,sDAAsD;IACtD,mBAAmB;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;IACvC,CAAC;IAED,0EAA0E;IAC1E,iBAAiB;IACjB,0EAA0E;IAE1E,2CAA2C;IAC3C,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,UAAU,IAAI,KAAK,CAAA;IAC1B,CAAC;IAED,+BAA+B;IAC/B,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED,iDAAiD;IACjD,sBAAsB;QACpB,OAAO,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAA;IACzD,CAAC;IAED,0EAA0E;IAC1E,uBAAuB;IACvB,0EAA0E;IAE1E,qCAAqC;IACrC,SAAS;QACP,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;YAC5C,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAChC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;iBACxD,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;YACtB,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;YACvC,cAAc,EAAE,CAAC,GAAG,sBAAsB,CAAC;SAC5C,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,4BAA4B;QAC1B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO;;;;;CAKZ,CAAA;QACG,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;aACpB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,MAAM,OAAO,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEzE,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAA;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,GAAG,CAAC,CAAA;QAEhE,OAAO;;;;;;;;;EAST,UAAU;;;EAGV,OAAO;;;kBAGS,QAAQ,WAAW,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;uBAC/D,YAAY;yBACV,IAAI,CAAC,UAAU,CAAC,MAAM;;;;;;;;;;;;;CAa9C,CAAA;IACC,CAAC;CACF"}

package/dist/src/router/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Router module index
+ *
+ * The router ensures ALL user requests go through subagents.
+ * Main Agent is a "thin dispatcher" — it NEVER executes tasks itself.
+ */
+export type { IntentClassification, IntentType, RouterConfig, RoutingDecision, SubagentContract, PermissionSet, RouterInput, RouterOutput, MAIN_AGENT_PROHIBITED, ROUTE_KEYWORDS, } from './types.js';
+export { createRouter } from './router.js';
+export type { Router } from './router.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/router/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/router/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA"}

package/dist/src/router/index.js

@@ -0,0 +1,8 @@
+/**
+ * Router module index
+ *
+ * The router ensures ALL user requests go through subagents.
+ * Main Agent is a "thin dispatcher" — it NEVER executes tasks itself.
+ */
+export { createRouter } from './router.js';
+//# sourceMappingURL=index.js.map

package/dist/src/router/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/router/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/dist/src/router/router.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Router - wires up classification and guard into a single dispatch pipeline.
+ *
+ * The createRouter factory produces an object that:
+ * 1. Classifies user requests
+ * 2. Validates against main-agent guard rules
+ * 3. Produces a routing decision (what subagent to dispatch)
+ *
+ * Usage:
+ * ```typescript
+ * import { createRouter } from './router/router.js'
+ * import type { RouterConfig } from './router/types.js'
+ *
+ * const config: RouterConfig = {
+ *   defaultModel: 'haiku',
+ *   planningThreshold: 0.6,
+ *   maxMainAgentTokens: 10000,
+ *   autoRoute: true,
+ * }
+ *
+ * const router = createRouter(config)
+ * const output = router.route({
+ *   request: "Fix the typo in src/utils.ts",
+ *   planFileExists: false,
+ *   isExecutingPlan: false,
+ *   hasUncommittedChanges: true,
+ *   mentionedFiles: ['src/utils.ts'],
+ * })
+ * // output.classification.type === 'quick-task'
+ * ```
+ */
+import type { RouterConfig, RouterInput, RouterOutput } from './types.js';
+import { RequestClassifier } from './classifier.js';
+import { MainAgentGuard } from './guard.js';
+/**
+ * High-level router interface.
+ */
+export interface Router {
+    /** Classify a request and produce a routing decision */
+    route: (input: RouterInput) => RouterOutput;
+    /** Get the underlying classifier */
+    classifier: RequestClassifier;
+    /** Get the underlying guard */
+    guard: MainAgentGuard;
+    /** Generate the system prompt fragment for the main agent */
+    generateSystemPrompt: () => string;
+    /** Check if an operation is allowed under current guard state */
+    isOperationAllowed: (operation: string) => boolean;
+}
+/**
+ * Create a router with the given configuration.
+ *
+ * Wires together:
+ * - RequestClassifier: analyzes user input, determines intent
+ * - MainAgentGuard: enforces thin-dispatcher constraints
+ */
+export declare function createRouter(config: RouterConfig): Router;
+//# sourceMappingURL=router.d.ts.map

package/dist/src/router/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/router/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,wDAAwD;IACxD,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,YAAY,CAAA;IAE3C,oCAAoC;IACpC,UAAU,EAAE,iBAAiB,CAAA;IAE7B,+BAA+B;IAC/B,KAAK,EAAE,cAAc,CAAA;IAErB,6DAA6D;IAC7D,oBAAoB,EAAE,MAAM,MAAM,CAAA;IAElC,iEAAiE;IACjE,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAA;CACnD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA2CzD"}

package/dist/src/router/router.js

@@ -0,0 +1,78 @@
+/**
+ * Router - wires up classification and guard into a single dispatch pipeline.
+ *
+ * The createRouter factory produces an object that:
+ * 1. Classifies user requests
+ * 2. Validates against main-agent guard rules
+ * 3. Produces a routing decision (what subagent to dispatch)
+ *
+ * Usage:
+ * ```typescript
+ * import { createRouter } from './router/router.js'
+ * import type { RouterConfig } from './router/types.js'
+ *
+ * const config: RouterConfig = {
+ *   defaultModel: 'haiku',
+ *   planningThreshold: 0.6,
+ *   maxMainAgentTokens: 10000,
+ *   autoRoute: true,
+ * }
+ *
+ * const router = createRouter(config)
+ * const output = router.route({
+ *   request: "Fix the typo in src/utils.ts",
+ *   planFileExists: false,
+ *   isExecutingPlan: false,
+ *   hasUncommittedChanges: true,
+ *   mentionedFiles: ['src/utils.ts'],
+ * })
+ * // output.classification.type === 'quick-task'
+ * ```
+ */
+import { RequestClassifier } from './classifier.js';
+import { MainAgentGuard } from './guard.js';
+/**
+ * Create a router with the given configuration.
+ *
+ * Wires together:
+ * - RequestClassifier: analyzes user input, determines intent
+ * - MainAgentGuard: enforces thin-dispatcher constraints
+ */
+export function createRouter(config) {
+    const classifier = new RequestClassifier(config);
+    const guard = new MainAgentGuard(config);
+    function route(input) {
+        const context = {
+            planFileExists: input.planFileExists,
+            isExecutingPlan: input.isExecutingPlan,
+            hasUncommittedChanges: input.hasUncommittedChanges,
+            currentBranch: input.currentBranch,
+            mentionedFiles: input.mentionedFiles,
+        };
+        const result = classifier.classify(input.request, context);
+        // Activate embargo after routing (unless trivial edit)
+        if (result.classification.type !== 'quick-task') {
+            guard.activateEmbargo();
+        }
+        return {
+            classification: result.classification,
+            routing: result.routing,
+            confidence: result.confidence,
+            matchedRule: result.matchedRule,
+        };
+    }
+    function generateSystemPrompt() {
+        return guard.generateSystemPromptFragment();
+    }
+    function isOperationAllowed(operation) {
+        return guard.checkOperation(operation).allowed;
+    }
+    return {
+        route,
+        classifier,
+        guard,
+        generateSystemPrompt,
+        isOperationAllowed,
+    };
+}
+//# sourceMappingURL=router.js.map

package/dist/src/router/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/router/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAsB3C;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;IAExC,SAAS,KAAK,CAAC,KAAkB;QAC/B,MAAM,OAAO,GAA0B;YACrC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAA;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAE1D,uDAAuD;QACvD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChD,KAAK,CAAC,eAAe,EAAE,CAAA;QACzB,CAAC;QAED,OAAO;YACL,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAA;IACH,CAAC;IAED,SAAS,oBAAoB;QAC3B,OAAO,KAAK,CAAC,4BAA4B,EAAE,CAAA;IAC7C,CAAC;IAED,SAAS,kBAAkB,CAAC,SAAiB;QAC3C,OAAO,KAAK,CAAC,cAAc,CAAC,SAAuD,CAAC,CAAC,OAAO,CAAA;IAC9F,CAAC;IAED,OAAO;QACL,KAAK;QACL,UAAU;QACV,KAAK;QACL,oBAAoB;QACpB,kBAAkB;KACnB,CAAA;AACH,CAAC"}

package/dist/src/router/types.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Router system types - Controls all user input routing
+ */
+import type { SubagentConfig, SubagentResult } from '../agents/types.js';
+/** Classification of user intent */
+export type IntentType = 'plan' | 'quick-task' | 'execute' | 'review' | 'debug' | 'tdd' | 'general';
+export interface IntentClassification {
+    type: IntentType;
+    confidence: number;
+    reasoning: string;
+    suggestedAgent: string;
+}
+export interface RouterConfig {
+    /** Default model for subagents */
+    defaultModel: string;
+    /** Threshold for routing to quick-task vs to-plan */
+    planningThreshold: number;
+    /** Max tokens before forcing subagent dispatch */
+    maxMainAgentTokens: number;
+    /** Whether to auto-route based on keywords */
+    autoRoute: boolean;
+}
+export interface RoutingDecision {
+    /** The subagent to dispatch */
+    subagent: SubagentConfig;
+    /** Contract/prompt for the subagent */
+    contract: SubagentContract;
+    /** Whether to wait for result or stream */
+    async: boolean;
+}
+export interface SubagentContract {
+    /** What this subagent is allowed to do */
+    permissions: PermissionSet;
+    /** Exact prompt to send */
+    prompt: string;
+    /** Required output format */
+    outputSchema?: Record<string, unknown>;
+    /** Files this subagent owns */
+    owns: string[];
+    /** Files this subagent may read */
+    reads: string[];
+}
+export interface PermissionSet {
+    readFiles: boolean;
+    searchCode: boolean;
+    runCommands: boolean;
+    writeFiles: boolean;
+    gitOperations: boolean;
+}
+export interface RouterResult {
+    decision: RoutingDecision;
+    /** Estimated token usage */
+    estimatedTokens: number;
+    /** Fallback if subagent fails */
+    fallbackStrategy: 'retry' | 'escalate' | 'abort';
+}
+export interface ExecutionResult {
+    success: boolean;
+    result?: SubagentResult;
+    error?: string;
+    /** Tokens used by entire routing chain */
+    totalTokens: number;
+    /** Time taken */
+    duration: number;
+}
+/** Input to the router: raw request + classification context. */
+export interface RouterInput {
+    /** Raw user request text */
+    request: string;
+    /** Whether a plan file already exists */
+    planFileExists: boolean;
+    /** Whether mid-execution of a plan */
+    isExecutingPlan: boolean;
+    /** Whether there are uncommitted changes */
+    hasUncommittedChanges: boolean;
+    /** Current git branch */
+    currentBranch?: string;
+    /** Files mentioned by the user */
+    mentionedFiles: string[];
+}
+/** Output from the router: classification + full routing decision. */
+export interface RouterOutput {
+    classification: IntentClassification;
+    routing: RoutingDecision;
+    confidence: number;
+    matchedRule: string;
+}
+/** Main Agent is NEVER allowed to do these */
+export declare const MAIN_AGENT_PROHIBITED: {
+    readSourceFiles: boolean;
+    searchCodebase: boolean;
+    writeFiles: boolean;
+    runBuildCommands: boolean;
+    runTests: boolean;
+    editLargeFiles: boolean;
+    longRunningTasks: boolean;
+};
+/** Keywords that trigger specific routes */
+export declare const ROUTE_KEYWORDS: Record<IntentType, string[]>;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/router/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/router/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExE,oCAAoC;AACpC,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,OAAO,GACP,KAAK,GACL,SAAS,CAAA;AAEb,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,qDAAqD;IACrD,iBAAiB,EAAE,MAAM,CAAA;IACzB,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,8CAA8C;IAC9C,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,EAAE,cAAc,CAAA;IACxB,uCAAuC;IACvC,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,2CAA2C;IAC3C,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,WAAW,EAAE,aAAa,CAAA;IAC1B,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,+BAA+B;IAC/B,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,mCAAmC;IACnC,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;IACnB,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,eAAe,CAAA;IACzB,4BAA4B;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,iCAAiC;IACjC,gBAAgB,EAAE,OAAO,GAAG,UAAU,GAAG,OAAO,CAAA;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,cAAc,EAAE,OAAO,CAAA;IACvB,sCAAsC;IACtC,eAAe,EAAE,OAAO,CAAA;IACxB,4CAA4C;IAC5C,qBAAqB,EAAE,OAAO,CAAA;IAC9B,yBAAyB;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kCAAkC;IAClC,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,oBAAoB,CAAA;IACpC,OAAO,EAAE,eAAe,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,8CAA8C;AAC9C,eAAO,MAAM,qBAAqB;;;;;;;;CAQjC,CAAA;AAED,4CAA4C;AAC5C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAQvD,CAAA"}