@hongmaple0820/med-scale-research-os 0.43.0

package/dist/guardrails/ReviewEnforcer.js

@@ -0,0 +1,117 @@
+// SCALE Engine - Harness Engineering: 强制评审阶段
+// 文章启发："将做事的 Agent 和评判的 Agent 分开，是一个强有力的杠杆"
+import { GateEvaluator } from '../guardrails/GateEvaluator.js';
+import { logger } from '../core/logger.js';
+/**
+ * ReviewEnforcer - 编码完成后强制调用评审 Agent
+ *
+ * 文章证据：评审 Agent 发现了编码 Agent 遗漏的渠道判断逻辑（潜在线上故障）
+ *
+ * 工作流程：
+ * 1. Task 状态从 IN_PROGRESS → REVIEW_REQUIRED (新增状态)
+ * 2. 自动触发 code-reviewer agent 评审
+ * 3. 评审通过 → REVIEW_PASSED → DONE
+ * 4. 评审不通过 → REVIEW_FAILED → 回退到 IN_PROGRESS
+ */
+export class ReviewEnforcer {
+    constructor(store, eventBus, fsm) {
+        this.store = store;
+        this.eventBus = eventBus;
+        this.fsm = fsm;
+    }
+    /**
+     * Harness: 检查是否需要强制评审
+     */
+    async shouldEnforceReview(taskId) {
+        const task = await this.store.get(taskId);
+        if (!task)
+            return false;
+        // 已完成的任务不需要评审
+        if (task.status === 'DONE' || task.status === 'CANCELLED')
+            return false;
+        // IN_PROGRESS 状态的任务，检查是否修改了代码
+        if (task.status === 'IN_PROGRESS') {
+            const payload = task.payload;
+            // 有代码变更但未评审
+            if (payload.filesInvolved?.length > 0 && !payload.reviewPassed) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Harness: 强制评审入口
+     * 编码完成后自动触发，不依赖人工
+     */
+    async enforceReview(taskId) {
+        const task = await this.store.get(taskId);
+        if (!task)
+            throw new Error('Task not found: ' + taskId);
+        logger.info({ taskId }, 'Enforcing mandatory review');
+        // 1. 发射评审事件（触发 code-reviewer agent）
+        this.eventBus.emit('review.required', {
+            taskId,
+            artifactId: taskId,
+            filesInvolved: task.payload.filesInvolved ?? [],
+            requiredChecks: [
+                '代码质量检查',
+                '安全漏洞扫描',
+                '业务逻辑验证',
+                '测试覆盖检查',
+            ],
+        });
+        // 2. 等待评审结果（简化版：直接检查 payload）
+        // 实际实现中应该等待 agent 完成评审并更新 payload
+        const payload = task.payload;
+        // 3. 检查 Harness Gates（程序化质量门禁）
+        const gateResult = GateEvaluator.checkHarnessGates(payload, ['ci-strict', 'coverage-80', 'lint-clean']);
+        // 4. 根据评审结果决定下一步
+        if (gateResult.passed && payload.reviewPassed) {
+            this.eventBus.emit('review.passed', { taskId, gateResults: gateResult.gateResults });
+            return { passed: true, taskId, gateResults: gateResult.gateResults };
+        }
+        else {
+            const reasons = gateResult.gateResults.filter(r => !r.passed).map(r => r.reason ?? r.gate.name);
+            this.eventBus.emit('review.failed', { taskId, reasons });
+            return { passed: false, taskId, reasons, gateResults: gateResult.gateResults };
+        }
+    }
+    /**
+     * Harness: 自动回退机制
+     * 评审不通过时，自动回退到 IN_PROGRESS 状态
+     */
+    async rollbackOnReviewFailure(taskId, reasons) {
+        const task = await this.store.get(taskId);
+        if (!task)
+            return;
+        logger.warn({ taskId, reasons }, 'Review failed, rolling back');
+        // 发射回退事件
+        this.eventBus.emit('task.review_failed', {
+            taskId,
+            previousStatus: task.status,
+            rollbackTo: 'IN_PROGRESS',
+            reasons,
+        });
+        // 更新 payload 记录失败原因
+        const payload = task.payload;
+        payload.reviewPassed = false;
+        // 触发 FSM transition（实际实现需要调用 fsm.transition）
+        // await this.fsm.transition(taskId, 'review_failed')
+    }
+    /**
+     * Harness: 评审循环上限
+     * 文章启发：评审最多 2 轮，超出升级人工决策
+     */
+    async checkReviewIteration(taskId) {
+        const events = await this.eventBus.query({
+            sessionId: '', // 需要 session context
+            types: ['review.required', 'review.passed', 'review.failed'],
+            filter: (e) => e.payload.taskId === taskId,
+        });
+        const reviewEvents = events.filter(e => e.type === 'review.required' || e.type === 'review.failed');
+        const iteration = reviewEvents.length;
+        // Harness: 最多 2 轮评审
+        return { exceeded: iteration >= 2, iteration };
+    }
+}
+//# sourceMappingURL=ReviewEnforcer.js.map

package/dist/guardrails/ReviewEnforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReviewEnforcer.js","sourceRoot":"","sources":["../../src/guardrails/ReviewEnforcer.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,4CAA4C;AAM5C,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACzB,YAAoB,KAAqB,EAAU,QAAmB,EAAU,GAAS;QAArE,UAAK,GAAL,KAAK,CAAgB;QAAU,aAAQ,GAAR,QAAQ,CAAW;QAAU,QAAG,GAAH,GAAG,CAAM;IAAG,CAAC;IAE7F;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QAEvB,cAAc;QACd,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,KAAK,CAAA;QAEvE,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAsB,CAAA;YAC3C,YAAY;YACZ,IAAI,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,CAAA;QAEvD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAA;QAErD,oCAAoC;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpC,MAAM;YACN,UAAU,EAAE,MAAM;YAClB,aAAa,EAAG,IAAI,CAAC,OAAuB,CAAC,aAAa,IAAI,EAAE;YAChE,cAAc,EAAE;gBACd,QAAQ;gBACR,QAAQ;gBACR,QAAQ;gBACR,QAAQ;aACT;SACF,CAAC,CAAA;QAEF,8BAA8B;QAC9B,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAsB,CAAA;QAE3C,+BAA+B;QAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAA;QAEvG,iBAAiB;QACjB,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;YACpF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAA;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACxD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAA;QAChF,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAAC,MAAc,EAAE,OAAiB;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,OAAM;QAEjB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAE/D,SAAS;QACT,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACvC,MAAM;YACN,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,UAAU,EAAE,aAAa;YACzB,OAAO;SACR,CAAC,CAAA;QAEF,oBAAoB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAsB,CAAA;QAC3C,OAAO,CAAC,YAAY,GAAG,KAAK,CAAA;QAE5B,6CAA6C;QAC7C,qDAAqD;IACvD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvC,SAAS,EAAE,EAAE,EAAE,qBAAqB;YACpC,KAAK,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,eAAe,CAAC;YAC5D,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,OAAe,CAAC,MAAM,KAAK,MAAM;SACpD,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;QACnG,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAA;QAErC,oBAAoB;QACpB,OAAO,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,CAAA;IAChD,CAAC;CACF"}

package/dist/guardrails/advancedDetectors.d.ts

@@ -0,0 +1,38 @@
+import type { IDetector, DetectorContext } from './Gateway.js';
+import type { ToolUseInput, DetectorResult } from '../artifact/types.js';
+export declare class DangerousCommandDetector implements IDetector {
+    name: string;
+    private patterns;
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class SecretLeakDetector implements IDetector {
+    name: string;
+    private patterns;
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export interface RoleDefinition {
+    id: string;
+    name: string;
+    allowedTools: string[];
+    deniedTools?: string[];
+}
+export declare const BUILT_IN_ROLES: Record<string, RoleDefinition>;
+export declare class RoleGateDetector implements IDetector {
+    name: string;
+    private currentRole;
+    setRole(role: RoleDefinition): void;
+    getRole(): RoleDefinition;
+    check(input: ToolUseInput, _ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class ScopeCreepDetector implements IDetector {
+    name: string;
+    /** Max distinct files allowed per session before warning */
+    private maxFiles;
+    /** Window in ms to track file edits */
+    private windowMs;
+    constructor(opts?: {
+        maxFiles?: number;
+        windowMs?: number;
+    });
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}

package/dist/guardrails/advancedDetectors.js

@@ -0,0 +1,188 @@
+// SCALE Engine — 危险命令检测 + Role 权限网关 + ScopeCreep 检测
+// W5 补充检测器 + 9th detector
+// 设计参考：docs/01-ARCHITECTURE.md §二 L2
+// ============================================================================
+// 6. 危险命令检测器
+// ============================================================================
+export class DangerousCommandDetector {
+    constructor() {
+        this.name = 'dangerous-command';
+        this.patterns = [
+            { pattern: /rm\s+-rf\s+[\/~]/, description: 'rm -rf on root/home' },
+            { pattern: /rm\s+-rf\s+\*/, description: 'rm -rf wildcard' },
+            { pattern: /DROP\s+(TABLE|DATABASE|SCHEMA)/i, description: 'SQL DROP' },
+            { pattern: /TRUNCATE\s+TABLE/i, description: 'SQL TRUNCATE' },
+            { pattern: /DELETE\s+FROM\s+\w+\s*;/i, description: 'SQL DELETE without WHERE' },
+            { pattern: /ALTER\s+TABLE\s+\w+\s+DROP/i, description: 'SQL ALTER DROP column' },
+            { pattern: /curl\s+.*\|\s*(bash|sh)/i, description: 'curl pipe to shell' },
+            { pattern: /chmod\s+777/, description: 'chmod 777' },
+            { pattern: />\s*\/dev\/sda/, description: 'write to device' },
+            { pattern: /mkfs\./, description: 'format filesystem' },
+            { pattern: /:(){ :\|:& };:/, description: 'fork bomb' },
+            { pattern: /dd\s+if=.*of=\/dev\//, description: 'dd to device' },
+        ];
+    }
+    async check(input, ctx) {
+        if (input.tool !== 'Bash')
+            return { triggered: false };
+        const command = input.args.command ?? '';
+        for (const { pattern, description } of this.patterns) {
+            if (pattern.test(command)) {
+                ctx.eventBus.emit('tool.blocked', {
+                    tool: input.tool,
+                    detector: this.name,
+                    reason: description,
+                    command,
+                }, { sessionId: input.sessionId });
+                return {
+                    triggered: true,
+                    severity: 'deny',
+                    reason: `🛑 危险命令被拦截：${description}\n命令: ${command}\n此操作需要人工确认后才能执行。`,
+                    suggestion: '请使用安全的替代命令，或获取人工授权。',
+                };
+            }
+        }
+        return { triggered: false };
+    }
+}
+// ============================================================================
+// 7. 密钥泄露检测器
+// ============================================================================
+export class SecretLeakDetector {
+    constructor() {
+        this.name = 'secret-leak';
+        this.patterns = [
+            { pattern: /['"]?[A-Za-z0-9+\/]{40}['"]?/, description: 'possible API key (40 chars)' },
+            { pattern: /AKIA[0-9A-Z]{16}/, description: 'AWS Access Key ID' },
+            { pattern: /-----BEGIN (RSA |EC |DSA )?PRIVATE KEY-----/, description: 'Private key' },
+            { pattern: /sk-[a-zA-Z0-9]{48}/, description: 'OpenAI API key' },
+            { pattern: /ghp_[a-zA-Z0-9]{36}/, description: 'GitHub PAT' },
+            { pattern: /password\s*[:=]\s*['"][^'"]{8,}['"]/, description: 'hardcoded password' },
+        ];
+    }
+    async check(input, ctx) {
+        if (!['Edit', 'Write', 'MultiEdit'].includes(input.tool))
+            return { triggered: false };
+        const content = JSON.stringify(input.args);
+        for (const { pattern, description } of this.patterns) {
+            if (pattern.test(content)) {
+                ctx.eventBus.emit('tool.blocked', {
+                    tool: input.tool,
+                    detector: this.name,
+                    reason: description,
+                }, { sessionId: input.sessionId });
+                return {
+                    triggered: true,
+                    severity: 'block',
+                    reason: `🔑 检测到可能的密钥泄露：${description}\n请使用环境变量代替硬编码密钥。`,
+                    suggestion: '使用 process.env.XXX 或 .env 文件',
+                };
+            }
+        }
+        return { triggered: false };
+    }
+}
+export const BUILT_IN_ROLES = {
+    explorer: {
+        id: 'explorer',
+        name: 'Explorer',
+        allowedTools: ['Read', 'Grep', 'Glob', 'WebSearch', 'Bash'],
+        deniedTools: ['Edit', 'Write', 'MultiEdit'],
+    },
+    planner: {
+        id: 'planner',
+        name: 'Planner',
+        allowedTools: ['Read', 'Grep', 'Glob', 'Write'],
+        deniedTools: ['Bash'],
+    },
+    implementer: {
+        id: 'implementer',
+        name: 'Implementer',
+        allowedTools: ['Read', 'Grep', 'Glob', 'Edit', 'Write', 'MultiEdit', 'Bash'],
+    },
+    reviewer: {
+        id: 'reviewer',
+        name: 'Reviewer',
+        allowedTools: ['Read', 'Grep', 'Glob', 'Bash'],
+        deniedTools: ['Edit', 'Write', 'MultiEdit'],
+    },
+};
+export class RoleGateDetector {
+    constructor() {
+        this.name = 'role-gate';
+        this.currentRole = BUILT_IN_ROLES.implementer;
+    }
+    setRole(role) {
+        this.currentRole = role;
+    }
+    getRole() {
+        return this.currentRole;
+    }
+    async check(input, _ctx) {
+        const role = this.currentRole;
+        // Denied tools take priority
+        if (role.deniedTools?.includes(input.tool)) {
+            return {
+                triggered: true,
+                severity: 'deny',
+                reason: `⛔ Role "${role.name}" 不允许使用 ${input.tool}。请先切换到合适的 Role (如 Implementer)。`,
+                suggestion: `切换 Role: scale role activate implementer`,
+            };
+        }
+        // If allowedTools is specified, tool must be in the list
+        if (!role.allowedTools.includes(input.tool)) {
+            return {
+                triggered: true,
+                severity: 'deny',
+                reason: `⛔ Role "${role.name}" 不允许使用 ${input.tool}。允许的工具: [${role.allowedTools.join(', ')}]`,
+                suggestion: `切换到允许 ${input.tool} 的 Role`,
+            };
+        }
+        return { triggered: false };
+    }
+}
+// ============================================================================
+// 9. ScopeCreep 检测器
+// ============================================================================
+export class ScopeCreepDetector {
+    constructor(opts = {}) {
+        this.name = 'scope-creep';
+        this.maxFiles = opts.maxFiles ?? 15;
+        this.windowMs = opts.windowMs ?? 10 * 60 * 1000; // 10 minutes
+    }
+    async check(input, ctx) {
+        if (!['Edit', 'Write', 'MultiEdit'].includes(input.tool))
+            return { triggered: false };
+        const file = input.args.file_path;
+        if (!file)
+            return { triggered: false };
+        const key = `scope-creep:${input.sessionId}`;
+        const record = ctx.cache.get(key)
+            ?? { files: new Set(), timestamps: [] };
+        const now = Date.now();
+        // Prune old timestamps outside window
+        record.timestamps = record.timestamps.filter((t) => now - t < this.windowMs);
+        // Track new file
+        const isNew = !record.files.has(file);
+        record.files.add(file);
+        record.timestamps.push(now);
+        ctx.cache.set(key, record);
+        // Only warn when a NEW file is added and we exceed the threshold
+        if (isNew && record.files.size > this.maxFiles) {
+            ctx.eventBus.emit('tool.blocked', {
+                tool: input.tool,
+                detector: this.name,
+                reason: `scope_creep:${record.files.size}_files`,
+                file,
+            }, { sessionId: input.sessionId });
+            return {
+                triggered: true,
+                severity: 'warn',
+                reason: `⚠️ 检测到「范围蔓延」：本会话已编辑 ${record.files.size} 个不同文件（阈值 ${this.maxFiles}）。请确认这些修改都在当前任务范围内，而非越界修改。`,
+                suggestion: '请检查是否偏离了原始任务范围。考虑收窄修改范围或拆分为多个任务。',
+            };
+        }
+        return { triggered: false };
+    }
+}
+//# sourceMappingURL=advancedDetectors.js.map

package/dist/guardrails/advancedDetectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advancedDetectors.js","sourceRoot":"","sources":["../../src/guardrails/advancedDetectors.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,0BAA0B;AAC1B,qCAAqC;AAKrC,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,OAAO,wBAAwB;IAArC;QACE,SAAI,GAAG,mBAAmB,CAAA;QAElB,aAAQ,GAAoD;YAClE,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACnE,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC5D,EAAE,OAAO,EAAE,iCAAiC,EAAE,WAAW,EAAE,UAAU,EAAE;YACvE,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE;YAC7D,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,0BAA0B,EAAE;YAChF,EAAE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,uBAAuB,EAAE;YAChF,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE;YAC1E,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE;YACpD,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC7D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;YACvD,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE;YACvD,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,cAAc,EAAE;SACjE,CAAA;IA2BH,CAAC;IAzBC,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAEtD,MAAM,OAAO,GAAI,KAAK,CAAC,IAA6B,CAAC,OAAO,IAAI,EAAE,CAAA;QAElE,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,WAAW;oBACnB,OAAO;iBACR,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;gBAElC,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,cAAc,WAAW,SAAS,OAAO,mBAAmB;oBACpE,UAAU,EAAE,qBAAqB;iBAClC,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IAA/B;QACE,SAAI,GAAG,aAAa,CAAA;QAEZ,aAAQ,GAAoD;YAClE,EAAE,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACvF,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE;YACjE,EAAE,OAAO,EAAE,6CAA6C,EAAE,WAAW,EAAE,aAAa,EAAE;YACtF,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE;YAChE,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,YAAY,EAAE;YAC7D,EAAE,OAAO,EAAE,qCAAqC,EAAE,WAAW,EAAE,oBAAoB,EAAE;SACtF,CAAA;IA0BH,CAAC;IAxBC,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAErF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAE1C,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,WAAW;iBACpB,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;gBAElC,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,iBAAiB,WAAW,mBAAmB;oBACvD,UAAU,EAAE,8BAA8B;iBAC3C,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAaD,MAAM,CAAC,MAAM,cAAc,GAAmC;IAC5D,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;QAC3D,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;KAC5C;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QAC/C,WAAW,EAAE,CAAC,MAAM,CAAC;KACtB;IACD,WAAW,EAAE;QACX,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KAC7E;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9C,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;KAC5C;CACF,CAAA;AAED,MAAM,OAAO,gBAAgB;IAA7B;QACE,SAAI,GAAG,WAAW,CAAA;QACV,gBAAW,GAAmB,cAAc,CAAC,WAAW,CAAA;IAmClE,CAAC;IAjCC,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;IACzB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,IAAqB;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAA;QAE7B,6BAA6B;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW,IAAI,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,iCAAiC;gBAClF,UAAU,EAAE,0CAA0C;aACvD,CAAA;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW,IAAI,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC5F,UAAU,EAAE,SAAS,KAAK,CAAC,IAAI,SAAS;aACzC,CAAA;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IAQ7B,YAAY,OAAiD,EAAE;QAP/D,SAAI,GAAG,aAAa,CAAA;QAQlB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,aAAa;IAC/D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmB,EAAE,GAAoB;QACnD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAErF,MAAM,IAAI,GAAI,KAAK,CAAC,IAA+B,CAAC,SAAS,CAAA;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAEtC,MAAM,GAAG,GAAG,eAAe,KAAK,CAAC,SAAS,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAA8D;eAC1F,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;QAEjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,sCAAsC;QACtC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE5E,iBAAiB;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE3B,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAE1B,iEAAiE;QACjE,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ;gBAChD,IAAI;aACL,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;YAElC,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,IAAI,CAAC,QAAQ,4BAA4B;gBACtG,UAAU,EAAE,kCAAkC;aAC/C,CAAA;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC7B,CAAC;CACF"}

package/dist/guardrails/detectors.d.ts

@@ -0,0 +1,34 @@
+import type { IDetector, DetectorContext } from './Gateway.js';
+import type { ToolUseInput, ToolResultInput, StopInput, DetectorResult } from '../artifact/types.js';
+export declare class BruteRetryDetector implements IDetector {
+    name: string;
+    private windowMs;
+    private threshold;
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class IdleToolDetector implements IDetector {
+    name: string;
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class BusyLoopDetector implements IDetector {
+    name: string;
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class PrematureDoneDetector implements IDetector {
+    name: string;
+    check(input: StopInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class BlameShiftDetector implements IDetector {
+    name: string;
+    private patterns;
+    check(input: ToolResultInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class PassiveWaitDetector implements IDetector {
+    name: string;
+    check(input: StopInput, ctx: DetectorContext): Promise<DetectorResult>;
+}
+export declare class SameFileEditDetector implements IDetector {
+    name: string;
+    private threshold;
+    check(input: ToolUseInput, ctx: DetectorContext): Promise<DetectorResult>;
+}