@hongmaple0820/med-scale-research-os 0.43.0

package/dist/shield/ProtectedPaths.js

@@ -0,0 +1,179 @@
+// SCALE Shield — Protected Paths & Command Blocklist
+// 对齐 agent-hooks-in-depth: protect-paths.py + command-policy.py
+// 阻断 .scale/ 修改 + 40+ 危险命令模式
+import { existsSync } from 'node:fs';
+import { join, resolve, normalize } from 'node:path';
+const PROTECTED_PATHS = [
+    { glob: '.scale/**', reason: '.scale/ governance infrastructure — run scale shield compile to apply', allowReads: true },
+    { glob: '.hook-state/**', reason: 'hook state files — managed by Shield engine', allowReads: true },
+    { glob: '.scale/policy.yaml', reason: 'governance policy — must be reviewed before modification', allowReads: true },
+    { glob: 'SCALE_POLICY.md', reason: 'orchestration policy — managed by governance lead', allowReads: true },
+    { glob: '.claude/settings.json', reason: 'Claude Code settings — managed by scale shield compile', allowReads: true },
+    { glob: '.codex/hooks.json', reason: 'Codex hooks config — managed by scale shield compile', allowReads: true },
+    { glob: '.cursor/hooks.json', reason: 'Cursor hooks config — managed by scale shield compile', allowReads: true },
+    { glob: '.env', reason: 'environment secrets — never write to .env files', allowReads: false },
+    { glob: '.env.*', reason: 'environment secrets — never write to .env files', allowReads: false },
+    { glob: '**/.git/config', reason: 'git config — potential credential tampering', allowReads: false },
+    { glob: '**/credentials*', reason: 'credential files', allowReads: false },
+    { glob: '**/*.pem', reason: 'private key files', allowReads: false },
+    { glob: '**/*-key.json', reason: 'service account key files', allowReads: false },
+];
+const COMMAND_BLOCKLIST = [
+    // === Destructive operations ===
+    { pattern: /\brm\s+-rf\b/, reason: 'Recursive force delete (rm -rf) — data loss risk', severity: 'block', category: 'destructive' },
+    { pattern: /\brm\s+-r\b/, reason: 'Recursive delete (rm -r)', severity: 'block', category: 'destructive' },
+    { pattern: /\brmdir\b/, reason: 'Remove directory', severity: 'warn', category: 'destructive' },
+    { pattern: /git\s+clean\s+-[fd]+/, reason: 'Git clean with force — removes untracked files', severity: 'block', category: 'destructive' },
+    { pattern: /git\s+reset\s+--hard/, reason: 'Git hard reset — destroys uncommitted work', severity: 'block', category: 'destructive' },
+    { pattern: /git\s+push\s+--force/, reason: 'Git force push — overwrites remote history', severity: 'block', category: 'destructive' },
+    { pattern: /git\s+push\s+-f\b/, reason: 'Git force push (short flag)', severity: 'block', category: 'destructive' },
+    { pattern: /git\s+checkout\s+--\s/, reason: 'Git checkout — discards working changes', severity: 'warn', category: 'destructive' },
+    { pattern: /git\s+stash\s+drop/, reason: 'Git stash drop — permanent stash deletion', severity: 'warn', category: 'destructive' },
+    { pattern: /git\s+branch\s+-D\b/, reason: 'Git branch force delete', severity: 'block', category: 'destructive' },
+    { pattern: /chmod\s+777\b/, reason: 'World-writable permissions (chmod 777)', severity: 'block', category: 'security' },
+    { pattern: /chmod\s+-R\s+777/, reason: 'Recursive world-writable (chmod -R 777)', severity: 'block', category: 'security' },
+    { pattern: /chown\s+root/, reason: 'Change ownership to root', severity: 'warn', category: 'security' },
+    { pattern: /\bdocker\s+rm\s+-f\b/, reason: 'Docker force remove container', severity: 'warn', category: 'destructive' },
+    { pattern: /\bdocker\s+system\s+prune\b/, reason: 'Docker system prune — removes all unused data', severity: 'block', category: 'destructive' },
+    { pattern: /\bkubectl\s+delete\b/, reason: 'Kubernetes resource deletion', severity: 'block', category: 'destructive' },
+    { pattern: /\bDROP\s+TABLE\b/i, reason: 'SQL DROP TABLE — data loss', severity: 'block', category: 'data-loss' },
+    { pattern: /\bDROP\s+DATABASE\b/i, reason: 'SQL DROP DATABASE — catastrophic data loss', severity: 'block', category: 'data-loss' },
+    { pattern: /\bTRUNCATE\s+TABLE\b/i, reason: 'SQL TRUNCATE TABLE — data loss', severity: 'block', category: 'data-loss' },
+    { pattern: /\bDELETE\s+FROM\b(?!.*\bWHERE\b)/i, reason: 'SQL DELETE without WHERE — full table deletion', severity: 'block', category: 'data-loss' },
+    // === Security: secret exposure ===
+    { pattern: /\bcat\s+.*\.env\b/, reason: 'Reading .env file — potential secret exposure in output', severity: 'block', category: 'security' },
+    { pattern: /\becho\s+.*\$?API[_-]?KEY\b/i, reason: 'Printing API key — secret exposure', severity: 'block', category: 'security' },
+    { pattern: /\becho\s+.*\$?TOKEN\b/i, reason: 'Printing token — secret exposure', severity: 'block', category: 'security' },
+    { pattern: /\becho\s+.*\$?SECRET\b/i, reason: 'Printing secret — credential leak', severity: 'block', category: 'security' },
+    { pattern: /\becho\s+.*\$?PASSWORD\b/i, reason: 'Printing password — credential leak', severity: 'block', category: 'security' },
+    { pattern: /\bcurl.*\|\s*bash\b/, reason: 'curl-pipe-bash — remote code execution risk', severity: 'block', category: 'security' },
+    { pattern: /\bwget.*\|\s*bash\b/, reason: 'wget-pipe-bash — remote code execution risk', severity: 'block', category: 'security' },
+    { pattern: /\beval\s+/i, reason: 'eval — code injection risk', severity: 'block', category: 'security' },
+    // === Governance bypass ===
+    { pattern: /--no-verify\b/, reason: 'Skipping git hooks (--no-verify)', severity: 'block', category: 'governance-bypass' },
+    { pattern: /--no-gpg-sign\b/, reason: 'Skipping GPG signing', severity: 'warn', category: 'governance-bypass' },
+    { pattern: /\.claude\b.*\brm\b/, reason: 'Modifying .claude directory — potential hook bypass', severity: 'block', category: 'governance-bypass' },
+    { pattern: /\.codex\b.*\brm\b/, reason: 'Modifying .codex directory — potential hook bypass', severity: 'block', category: 'governance-bypass' },
+    { pattern: /SKIP_HOOKS/i, reason: 'Environment variable to skip hooks — governance bypass', severity: 'block', category: 'governance-bypass' },
+    { pattern: /DISABLE_OMC/i, reason: 'OMC disable flag — governance bypass', severity: 'warn', category: 'governance-bypass' },
+    { pattern: /dang[eo]rously/i, reason: 'Dangerous mode flag — safety bypass', severity: 'block', category: 'governance-bypass' },
+    { pattern: /bypass/i, reason: 'Bypass flag detected', severity: 'warn', category: 'governance-bypass' },
+    { pattern: /allowDangerously/i, reason: 'allowDangerously flag — sandbox escape', severity: 'block', category: 'governance-bypass' },
+];
+/**
+ * Check if a file write target is a protected path.
+ * Returns { blocked: true } if the path matches any protected glob.
+ */
+export function checkProtectedPath(targetPath, cwd = process.cwd(), toolName) {
+    // Reads are always allowed
+    if (toolName && ['Read', 'Grep', 'Glob'].includes(toolName)) {
+        return { blocked: false, targetPath };
+    }
+    const normalized = normalize(targetPath);
+    const resolved = resolve(cwd, normalized);
+    for (const rule of PROTECTED_PATHS) {
+        if (matchGlob(normalized, rule.glob) || matchGlob(resolved, rule.glob)) {
+            return { blocked: true, matchedRule: rule, targetPath: normalized };
+        }
+    }
+    return { blocked: false, targetPath: normalized };
+}
+/**
+ * Check if a command contains any blocked patterns.
+ * Returns list of matched rules.
+ */
+export function checkCommand(command) {
+    const matches = [];
+    for (const rule of COMMAND_BLOCKLIST) {
+        if (rule.pattern.test(command)) {
+            matches.push(rule);
+        }
+    }
+    return matches;
+}
+/**
+ * Full pre-flight check for a tool input.
+ * Returns allow/block decision.
+ */
+export function checkToolInput(input) {
+    const cwd = input.cwd ?? process.cwd();
+    const toolName = input.tool_name;
+    const toolInput = input.tool_input ?? {};
+    // 1. Check protected paths for Write/Edit tools
+    if (toolName === 'Write' || toolName === 'Edit') {
+        const filePath = toolInput.file_path ?? toolInput.path ?? '';
+        if (filePath) {
+            const pathResult = checkProtectedPath(filePath, cwd, toolName);
+            if (pathResult.blocked) {
+                return {
+                    decision: 'block',
+                    reason: `[Protected Path] ${pathResult.matchedRule?.reason} — target: ${pathResult.targetPath}`,
+                    suggestion: `Run 'scale shield compile' to update policy, or request governance lead approval`,
+                    evidence: {
+                        policy_rule: 'protected-path',
+                        matched_pattern: pathResult.matchedRule?.glob,
+                        timestamp: new Date().toISOString(),
+                    },
+                };
+            }
+        }
+    }
+    // 2. Check command blocklist for Bash tools
+    if (toolName === 'Bash') {
+        const command = String(toolInput.command ?? '');
+        const matches = checkCommand(command);
+        if (matches.length > 0) {
+            const blocking = matches.filter(m => m.severity === 'block');
+            if (blocking.length > 0) {
+                const reasons = blocking.map(m => `[${m.category}] ${m.reason}`).join('; ');
+                return {
+                    decision: 'block',
+                    reason: reasons,
+                    suggestion: 'If this command is intentional, request governance lead approval',
+                    evidence: {
+                        policy_rule: 'command-blocklist',
+                        matched_pattern: blocking[0].pattern.source,
+                        timestamp: new Date().toISOString(),
+                    },
+                };
+            }
+        }
+    }
+    return { decision: 'allow', reason: 'OK', evidence: { policy_rule: 'default-allow', timestamp: new Date().toISOString() } };
+}
+/**
+ * Verify .scale/ directory integrity.
+ */
+export function verifyScaleIntegrity(cwd) {
+    const required = [
+        '.scale/workspace.json',
+        '.scale/policy.yaml',
+    ];
+    const missing = required.filter(f => !existsSync(join(cwd, f)));
+    return { intact: missing.length === 0, missing };
+}
+// ---------------------------------------------------------------------------
+// Simple glob matching (handles **, *, explicit paths)
+// ---------------------------------------------------------------------------
+function matchGlob(target, glob) {
+    // Normalize separators
+    const t = target.replace(/\\/g, '/');
+    const g = glob.replace(/\\/g, '/');
+    // Exact match
+    if (t === g || t.endsWith('/' + g) || t === g.replace(/^\*\*\//, ''))
+        return true;
+    // Convert glob to regex
+    const regexStr = g
+        .replace(/\./g, '\\.')
+        .replace(/\*\*/g, '<<<GLOBSTAR>>>')
+        .replace(/\*/g, '[^/]*')
+        .replace(/<<<GLOBSTAR>>>/g, '.*');
+    try {
+        const re = new RegExp(`^${regexStr}$|/${regexStr}$|^${regexStr}/`);
+        return re.test(t);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=ProtectedPaths.js.map

package/dist/shield/ProtectedPaths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedPaths.js","sourceRoot":"","sources":["../../src/shield/ProtectedPaths.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,gEAAgE;AAChE,6BAA6B;AAE7B,OAAO,EAAE,UAAU,EAAgB,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAapD,MAAM,eAAe,GAAwB;IAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,uEAAuE,EAAE,UAAU,EAAE,IAAI,EAAE;IACxH,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE,IAAI,EAAE;IACnG,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,0DAA0D,EAAE,UAAU,EAAE,IAAI,EAAE;IACpH,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mDAAmD,EAAE,UAAU,EAAE,IAAI,EAAE;IAC1G,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,wDAAwD,EAAE,UAAU,EAAE,IAAI,EAAE;IACrH,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,sDAAsD,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/G,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,uDAAuD,EAAE,UAAU,EAAE,IAAI,EAAE;IACjH,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iDAAiD,EAAE,UAAU,EAAE,KAAK,EAAE;IAC9F,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,iDAAiD,EAAE,UAAU,EAAE,KAAK,EAAE;IAChG,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE,KAAK,EAAE;IACpG,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE;IAC1E,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,KAAK,EAAE;IACpE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,2BAA2B,EAAE,UAAU,EAAE,KAAK,EAAE;CAClF,CAAA;AAaD,MAAM,iBAAiB,GAAuB;IAC5C,iCAAiC;IACjC,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,kDAAkD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACnI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC1G,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC/F,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,gDAAgD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACzI,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACrI,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACrI,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACnH,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,yCAAyC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE;IAClI,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,2CAA2C,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE;IACjI,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACjH,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,wCAAwC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvH,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,yCAAyC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC3H,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvG,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,+BAA+B,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE;IACvH,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,+CAA+C,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC/I,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,8BAA8B,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IACvH,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IAChH,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IACnI,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,gCAAgC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IACxH,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,gDAAgD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IAEpJ,oCAAoC;IACpC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,yDAAyD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5I,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,oCAAoC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClI,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,kCAAkC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1H,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,mCAAmC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5H,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,qCAAqC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAChI,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,6CAA6C,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClI,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,6CAA6C,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;IAExG,4BAA4B;IAC5B,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,kCAAkC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC1H,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC/G,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,qDAAqD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAClJ,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,oDAAoD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAChJ,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,wDAAwD,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC9I,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC5H,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,qCAAqC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAC/H,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IACvG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,wCAAwC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE;CACrI,CAAA;AAYD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,QAAiB;IAEjB,2BAA2B;IAC3B,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IACvC,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAEzC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;QACrE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAuB,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAA;IAChC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAA;IAExC,gDAAgD;IAChD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAI,SAAS,CAAC,SAAoB,IAAK,SAAS,CAAC,IAAe,IAAI,EAAE,CAAA;QACpF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;YAC9D,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO;oBACL,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,oBAAoB,UAAU,CAAC,WAAW,EAAE,MAAM,cAAc,UAAU,CAAC,UAAU,EAAE;oBAC/F,UAAU,EAAE,kFAAkF;oBAC9F,QAAQ,EAAE;wBACR,WAAW,EAAE,gBAAgB;wBAC7B,eAAe,EAAE,UAAU,CAAC,WAAW,EAAE,IAAI;wBAC7C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC;iBACF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAA;YAC5D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC3E,OAAO;oBACL,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,kEAAkE;oBAC9E,QAAQ,EAAE;wBACR,WAAW,EAAE,mBAAmB;wBAChC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;wBAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC;iBACF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAA;AAC7H,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,QAAQ,GAAG;QACf,uBAAuB;QACvB,oBAAoB;KACrB,CAAA;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;AAClD,CAAC;AAED,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY;IAC7C,uBAAuB;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAElC,cAAc;IACd,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjF,wBAAwB;IACxB,MAAM,QAAQ,GAAG,CAAC;SACf,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;SAClC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IAEnC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,QAAQ,MAAM,QAAQ,MAAM,QAAQ,GAAG,CAAC,CAAA;QAClE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/shield/ShieldProtocol.d.ts

@@ -0,0 +1,50 @@
+export declare const EXIT_ALLOW = 0;
+export declare const EXIT_BLOCK = 2;
+export type HookEventType = 'PreToolUse' | 'PostToolUse' | 'Stop' | 'SessionStart';
+export interface ShieldInput {
+    session_id: string;
+    cwd: string;
+    tool_name: string;
+    tool_input: Record<string, unknown>;
+    metadata?: {
+        harness?: 'claude' | 'codex' | 'cursor' | 'gemini';
+        gate_last_pass?: string;
+        policy_hash?: string;
+    };
+}
+export interface ShieldDecision {
+    decision: 'allow' | 'block';
+    reason: string;
+    suggestion?: string;
+    evidence?: {
+        policy_rule: string;
+        matched_pattern?: string;
+        gate_status?: string;
+        timestamp: string;
+    };
+}
+export interface HookStateEntry {
+    hook: HookEventType;
+    timestamp: string;
+    sessionId: string;
+    toolName?: string;
+    blocked: boolean;
+    reason?: string;
+}
+export declare function getHookStateDir(cwd: string): string;
+export declare function ensureHookStateDir(cwd: string): string;
+export declare function writeHookState(cwd: string, entry: HookStateEntry): void;
+export declare function readHookState(cwd: string, hook: HookEventType): HookStateEntry | null;
+export declare function readLastToolState(cwd: string): HookStateEntry | null;
+export declare function wasLastToolBlocked(cwd: string): boolean;
+export interface PolicyComplianceResult {
+    compliant: boolean;
+    gatePassed: boolean;
+    scaleIntegrity: boolean;
+    violations: string[];
+    lastGatePass?: string;
+}
+export declare function checkPolicyCompliance(cwd: string, gateCheckFn?: () => boolean): PolicyComplianceResult;
+export declare function allow(reason?: string): void;
+export declare function block(reason: string, suggestion?: string): void;
+export declare function parseShieldInput(): ShieldInput;

package/dist/shield/ShieldProtocol.js

@@ -0,0 +1,103 @@
+// SCALE Shield — Deterministic Hook Interception Protocol
+// 对齐 agent-hooks-in-depth: exit 0=allow, exit 2=block
+// stdin/stdout JSON 协议，跨 hook 状态共享 via .hook-state/
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+// --- Exit Code Protocol ---
+// exit 0 = 允许操作继续
+// exit 2 = 阻断操作（stderr 输出原因）
+export const EXIT_ALLOW = 0;
+export const EXIT_BLOCK = 2;
+const HOOK_STATE_DIR = '.hook-state';
+export function getHookStateDir(cwd) {
+    return join(cwd, HOOK_STATE_DIR);
+}
+export function ensureHookStateDir(cwd) {
+    const dir = getHookStateDir(cwd);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    return dir;
+}
+export function writeHookState(cwd, entry) {
+    const dir = ensureHookStateDir(cwd);
+    const file = join(dir, `${entry.hook}.json`);
+    writeFileSync(file, JSON.stringify(entry, null, 2));
+}
+export function readHookState(cwd, hook) {
+    const file = join(getHookStateDir(cwd), `${hook}.json`);
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function readLastToolState(cwd) {
+    return readHookState(cwd, 'PreToolUse');
+}
+export function wasLastToolBlocked(cwd) {
+    const state = readHookState(cwd, 'PostToolUse');
+    return state?.blocked ?? false;
+}
+export function checkPolicyCompliance(cwd, gateCheckFn) {
+    const violations = [];
+    // Check .scale/ directory integrity
+    const scaleDir = join(cwd, '.scale');
+    const scaleExists = existsSync(scaleDir);
+    if (!scaleExists) {
+        violations.push('.scale/ directory missing — governance infrastructure absent');
+    }
+    // Check last gate quality pass
+    const lastGate = readHookState(cwd, 'Stop');
+    const gatePassed = lastGate?.reason?.includes('gate-quality:PASS') ?? false;
+    if (!gatePassed && gateCheckFn) {
+        const passed = gateCheckFn();
+        if (!passed)
+            violations.push('Gate quality check not passed — run scale gate-quality');
+    }
+    return {
+        compliant: violations.length === 0,
+        gatePassed,
+        scaleIntegrity: scaleExists,
+        violations,
+        lastGatePass: lastGate?.timestamp,
+    };
+}
+// --- Block / Allow helpers ---
+export function allow(reason) {
+    const msg = {
+        decision: 'allow',
+        reason: reason ?? 'OK',
+        evidence: { policy_rule: 'default-allow', timestamp: new Date().toISOString() },
+    };
+    process.stdout.write(JSON.stringify(msg));
+    process.exit(EXIT_ALLOW);
+}
+export function block(reason, suggestion) {
+    const msg = {
+        decision: 'block',
+        reason,
+        suggestion,
+        evidence: { policy_rule: 'shield-block', timestamp: new Date().toISOString() },
+    };
+    process.stderr.write(reason);
+    if (suggestion)
+        process.stderr.write(`\n[Suggestion] ${suggestion}`);
+    process.stdout.write(JSON.stringify(msg));
+    process.exit(EXIT_BLOCK);
+}
+// --- stdin parser ---
+export function parseShieldInput() {
+    try {
+        const raw = process.argv[2] ?? process.stdin;
+        if (!raw)
+            return { session_id: 'unknown', cwd: process.cwd(), tool_name: 'unknown', tool_input: {} };
+        return JSON.parse(typeof raw === 'string' ? raw : String(raw));
+    }
+    catch {
+        return { session_id: 'unknown', cwd: process.cwd(), tool_name: 'unknown', tool_input: {} };
+    }
+}
+//# sourceMappingURL=ShieldProtocol.js.map

package/dist/shield/ShieldProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShieldProtocol.js","sourceRoot":"","sources":["../../src/shield/ShieldProtocol.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,sDAAsD;AACtD,oDAAoD;AAEpD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,6BAA6B;AAC7B,kBAAkB;AAClB,6BAA6B;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAC3B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAyC3B,MAAM,cAAc,GAAG,aAAa,CAAA;AAEpC,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,KAAqB;IAC/D,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC,CAAA;IAC5C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,IAAmB;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC/C,OAAO,KAAK,EAAE,OAAO,IAAI,KAAK,CAAA;AAChC,CAAC;AAWD,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,WAA2B;IAE3B,MAAM,UAAU,GAAa,EAAE,CAAA;IAE/B,oCAAoC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACpC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;IACjF,CAAC;IAED,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAA;IAC3E,IAAI,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,EAAE,CAAA;QAC5B,IAAI,CAAC,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;IACxF,CAAC;IAED,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAClC,UAAU;QACV,cAAc,EAAE,WAAW;QAC3B,UAAU;QACV,YAAY,EAAE,QAAQ,EAAE,SAAS;KAClC,CAAA;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,KAAK,CAAC,MAAe;IACnC,MAAM,GAAG,GAAmB;QAC1B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,MAAM,IAAI,IAAI;QACtB,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;KAChF,CAAA;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAc,EAAE,UAAmB;IACvD,MAAM,GAAG,GAAmB;QAC1B,QAAQ,EAAE,OAAO;QACjB,MAAM;QACN,UAAU;QACV,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;KAC/E,CAAA;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,IAAI,UAAU;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAA;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AAC1B,CAAC;AAED,uBAAuB;AACvB,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAK,OAAO,CAAC,KAAkC,CAAA;QAC1E,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;QACpG,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAgB,CAAA;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IAC5F,CAAC;AACH,CAAC"}

package/dist/skills/ExternalSkills.d.ts

@@ -0,0 +1,3 @@
+import type { SkillRegistry } from './SkillRegistry.js';
+import type { IEventBus } from '../core/eventBus.js';
+export declare function registerExternalSkills(registry: SkillRegistry, eventBus: IEventBus): void;

package/dist/skills/ExternalSkills.js

@@ -0,0 +1,27 @@
+import { workflowAgentSkillDefinitions } from './SkillCatalog.js';
+export function registerExternalSkills(registry, eventBus) {
+    const skills = [
+        { id: 'web-access', name: 'Web Access', description: 'CDP browser automation for web search, logged-in pages, and dynamic browser tasks', domain: 'execution', triggers: [{ type: 'taskType', value: ['web-scraping', 'web-research'], weight: 1.0 }, { type: 'keyword', value: ['browser', 'login', 'dynamic page', 'web-access'], weight: 0.9 }], execution: { type: 'skill-file', config: { skillPath: '~/.agents/skills/web-access/SKILL.md' } }, priority: 90, installed: true, source: 'https://github.com/eze-is/web-access' },
+        { id: 'agent-browser', name: 'Agent Browser', description: 'Browser automation CLI for AI agents', domain: 'execution', triggers: [{ type: 'taskType', value: ['browser-automation', 'e2e-testing'], weight: 1.0 }, { type: 'keyword', value: ['agent-browser', 'browser automation', 'screenshot'], weight: 0.9 }], execution: { type: 'cli-command', config: { command: 'npx @agent-browser/cli' } }, priority: 86, installed: false, source: 'https://github.com/vercel-labs/agent-browser' },
+        { id: 'mcp-chrome-devtools', name: 'Chrome DevTools MCP', description: 'Chrome DevTools MCP for browser inspection, console, and network evidence', domain: 'verification', triggers: [{ type: 'taskType', value: ['browser-automation', 'ui-debugging', 'e2e-testing'], weight: 1.0 }, { type: 'keyword', value: ['chrome devtools', 'cdp', 'console', 'network'], weight: 0.9 }], execution: { type: 'mcp-tool', config: { toolName: 'chrome-devtools' } }, priority: 88, installed: false, source: 'https://github.com/ChromeDevTools/chrome-devtools-mcp' },
+        { id: 'playwright', name: 'Playwright', description: 'CLI browser automation', domain: 'execution', triggers: [{ type: 'taskType', value: ['e2e-testing'], weight: 0.9 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/playwright/SKILL.md' } }, priority: 75, installed: true },
+        { id: 'playwright-interactive', name: 'Playwright Interactive', description: 'Persistent session UI debug', domain: 'verification', triggers: [{ type: 'taskType', value: ['ui-debugging'], weight: 0.95 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/playwright-interactive/SKILL.md' } }, priority: 80, installed: true },
+        { id: 'cua', name: 'CUA', description: 'Computer use agent for desktop automation and GUI testing', domain: 'execution', triggers: [{ type: 'taskType', value: ['desktop-automation'], weight: 1.0 }, { type: 'keyword', value: ['desktop', 'gui', 'wps', 'wechat', 'computer use'], weight: 0.9 }], execution: { type: 'cli-command', config: { command: 'npx @anthropic/mcp-cua' } }, priority: 90, installed: false, source: 'https://github.com/trycua/cua' },
+        { id: 'awesome-design-md', name: 'Awesome Design.md', description: 'DESIGN.md brand and product design system references', domain: 'planning', triggers: [{ type: 'taskType', value: ['ui-design'], weight: 1.0 }, { type: 'keyword', value: ['design system', 'brand', 'visual identity'], weight: 0.9 }], execution: { type: 'skill-file', config: { skillPath: '~/.agents/skills/awesome-design-md/SKILL.md' } }, priority: 88, installed: true, source: 'https://github.com/VoltAgent/awesome-design-md' },
+        { id: 'ui-ux-pro-max', name: 'UI/UX Pro Max', description: 'UX guidelines and design intelligence database', domain: 'planning', triggers: [{ type: 'taskType', value: ['ui-design'], weight: 0.95 }, { type: 'keyword', value: ['ui', 'ux', 'accessibility', 'responsive'], weight: 0.9 }], execution: { type: 'skill-file', config: { skillPath: '~/.agents/skills/ui-ux-pro-max/SKILL.md' } }, priority: 89, installed: true, source: 'https://github.com/nextlevelbuilder/ui-ux-pro-max-skill' },
+        { id: 'codex-cli', name: 'Codex CLI', description: 'External Codex CLI reviewer or worker', domain: 'verification', triggers: [{ type: 'taskType', value: ['external-agent-review'], weight: 1.0 }, { type: 'keyword', value: ['codex', 'codex cli'], weight: 0.9 }], execution: { type: 'cli-command', config: { command: 'codex --version' } }, priority: 76, installed: false, source: 'https://github.com/openai/codex' },
+        { id: 'gemini-cli', name: 'Gemini CLI', description: 'External Gemini CLI reviewer or worker', domain: 'verification', triggers: [{ type: 'taskType', value: ['external-agent-review'], weight: 1.0 }, { type: 'keyword', value: ['gemini', 'gemini cli'], weight: 0.9 }], execution: { type: 'cli-command', config: { command: 'gemini --version' } }, priority: 74, installed: false, source: 'https://github.com/google-gemini/gemini-cli' },
+        { id: 'opencode-cli', name: 'OpenCode CLI', description: 'External OpenCode CLI reviewer or worker', domain: 'verification', triggers: [{ type: 'taskType', value: ['external-agent-review'], weight: 1.0 }, { type: 'keyword', value: ['opencode', 'open code'], weight: 0.9 }], execution: { type: 'cli-command', config: { command: 'opencode --version' } }, priority: 74, installed: false, source: 'https://github.com/sst/opencode' },
+        { id: 'graphify', name: 'Graphify', description: 'Knowledge graph generator', domain: 'context', triggers: [{ type: 'taskType', value: ['knowledge-graph'], weight: 1.0 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/graphify/SKILL.md' } }, priority: 90, installed: true },
+        // 未安装技能（SkillInstaller 可交互式安装）
+        { id: 'fireworks-tech-graph', name: 'Fireworks Tech Graph', description: 'Tech flow diagrams', domain: 'planning', triggers: [{ type: 'taskType', value: ['diagram'], weight: 1.0 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/fireworks-tech-graph/SKILL.md' } }, priority: 82, installed: false, source: 'https://github.com/yizhiyanhua-ai/fireworks-tech-graph' },
+        { id: 'excalidraw-diagram-generator', name: 'Excalidraw Generator', description: 'Hand-drawn style diagrams', domain: 'planning', triggers: [{ type: 'taskType', value: ['sketch-diagram'], weight: 0.9 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/excalidraw-diagram-generator/SKILL.md' } }, priority: 78, installed: false, source: 'https://github.com/github/awesome-copilot/tree/main/skills/excalidraw-diagram-generator' },
+        { id: 'architecture-diagram-generator', name: 'Architecture Diagram', description: 'System architecture diagrams', domain: 'planning', triggers: [{ type: 'taskType', value: ['architecture-diagram'], weight: 1.0 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/architecture-diagram-generator/SKILL.md' } }, priority: 85, installed: false, source: 'https://github.com/Cocoon-AI/architecture-diagram-generator' },
+        { id: 'hyperframes', name: 'Hyperframes', description: 'HeyGen video generation', domain: 'execution', triggers: [{ type: 'taskType', value: ['video-generation'], weight: 1.0 }], execution: { type: 'cli-command', config: { command: 'npx @heygen/hyperframes' } }, priority: 75, installed: false, source: 'https://github.com/heygen-com/hyperframes' },
+        { id: 'guizang-ppt-skill', name: 'Guizang PPT', description: 'PPT auto generation', domain: 'execution', triggers: [{ type: 'taskType', value: ['ppt-generation'], weight: 1.0 }], execution: { type: 'skill-file', config: { skillPath: '~/.claude/skills/guizang-ppt-skill/SKILL.md' } }, priority: 70, installed: false, source: 'https://github.com/op7418/guizang-ppt-skill' },
+        ...workflowAgentSkillDefinitions(),
+    ];
+    registry.registerBatch(skills);
+    eventBus.emit('external-skills.registered', { count: skills.length });
+}
+//# sourceMappingURL=ExternalSkills.js.map

package/dist/skills/ExternalSkills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternalSkills.js","sourceRoot":"","sources":["../../src/skills/ExternalSkills.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAA;AAEjE,MAAM,UAAU,sBAAsB,CAAC,QAAuB,EAAE,QAAmB;IACjF,MAAM,MAAM,GAAsB;QAChC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,mFAAmF,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,sCAAsC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE;QACrgB,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,sCAAsC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,eAAe,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE;QAChe,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,2EAA2E,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE;QAC/hB,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,sCAAsC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC5S,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,6BAA6B,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,kDAAkD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC1V,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,2DAA2D,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE;QACjc,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,sDAAsD,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,6CAA6C,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,gDAAgD,EAAE;QAC9e,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,gDAAgD,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,yCAAyC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,yDAAyD,EAAE;QACpe,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,uCAAuC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAC7Z,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,wCAAwC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE;QAC/a,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,0CAA0C,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAC5a,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,oCAAoC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3S,+BAA+B;QAC/B,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,gDAAgD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE;QACpY,EAAE,EAAE,EAAE,8BAA8B,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,wDAAwD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,yFAAyF,EAAE;QACnc,EAAE,EAAE,EAAE,gCAAgC,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,0DAA0D,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE;QACpb,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE;QAC5V,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,6CAA6C,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE;QACnX,GAAG,6BAA6B,EAAE;KACnC,CAAA;IACD,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IAC9B,QAAQ,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AACvE,CAAC"}

package/dist/skills/GrillingSessionSkill.d.ts

@@ -0,0 +1,65 @@
+import type { IEventBus } from "../core/eventBus.js";
+import type { Timestamp } from "../artifact/types.js";
+import { type GrillingTopic } from "./GrillingTemplates.js";
+export interface GrillingOption {
+    id: string;
+    label: string;
+    explanation: string;
+    risk?: string;
+}
+export interface GrillingQuestion {
+    id: string;
+    question: string;
+    options: GrillingOption[];
+    branchMap: Record<string, string>;
+    contextHint?: string;
+}
+export interface GrillingSession {
+    id: string;
+    topic: GrillingTopic;
+    currentNodeId: string;
+    history: Array<{
+        questionId: string;
+        selectedOption: string;
+        timestamp: Timestamp;
+    }>;
+    concluded: boolean;
+    conclusion?: GrillingConclusion;
+}
+export interface GrillingConclusion {
+    summary: string;
+    decisions: string[];
+    risks: string[];
+    nextSteps: string[];
+    artifactsToUpdate: string[];
+}
+export interface GrillingResponse {
+    type: "question" | "conclusion";
+    question?: GrillingQuestion;
+    conclusion?: GrillingConclusion;
+}
+export interface IGrillingSessionManager {
+    startSession(topic: GrillingTopic): GrillingSession;
+    handleAnswer(sessionId: string, selectedOption: string): GrillingResponse;
+    getSession(sessionId: string): GrillingSession | undefined;
+    endSession(sessionId: string): GrillingConclusion | undefined;
+}
+export declare class GrillingSessionManager implements IGrillingSessionManager {
+    private sessions;
+    private templates;
+    private eventBus;
+    constructor(eventBus?: IEventBus);
+    startSession(topic: GrillingTopic): GrillingSession;
+    handleAnswer(sessionId: string, selectedOption: string): GrillingResponse;
+    getSession(sessionId: string): GrillingSession | undefined;
+    endSession(sessionId: string): GrillingConclusion | undefined;
+    private getCurrentQuestion;
+    private concludeSession;
+    private extractDecisions;
+    private extractRisks;
+    private findQuestion;
+    private generateSummary;
+    private generateNextSteps;
+    private suggestArtifactUpdates;
+}
+export declare function createGrillingSessionManager(eventBus?: IEventBus): IGrillingSessionManager;

package/dist/skills/GrillingSessionSkill.js

@@ -0,0 +1,113 @@
+// SCALE Engine - Grilling Session Skill (mattpocock/skills style)
+// 递归决策树探索，一次一个问题
+import { getGrillingTemplate } from "./GrillingTemplates.js";
+import { logger } from "../core/logger.js";
+export class GrillingSessionManager {
+    constructor(eventBus) {
+        this.sessions = new Map();
+        this.eventBus = eventBus ?? null;
+        this.templates = getGrillingTemplate;
+    }
+    startSession(topic) {
+        const template = this.templates[topic] ?? getGrillingTemplate(topic);
+        const id = "GRILL-" + Date.now() + "-" + Math.random().toString(36).slice(2, 6);
+        const session = { id, topic, currentNodeId: template[0]?.id ?? "Q1", history: [], concluded: false };
+        this.sessions.set(id, session);
+        logger.info({ sessionId: id, topic }, "Grilling session started");
+        this.eventBus?.emit("grilling.session_started", { sessionId: id, topic });
+        return session;
+    }
+    handleAnswer(sessionId, selectedOption) {
+        const session = this.sessions.get(sessionId);
+        if (!session || session.concluded)
+            return { type: "conclusion", conclusion: session?.conclusion };
+        session.history.push({ questionId: session.currentNodeId, selectedOption, timestamp: Date.now() });
+        const currentQuestion = this.getCurrentQuestion(session);
+        if (!currentQuestion)
+            return this.concludeSession(session);
+        const nextNodeId = currentQuestion.branchMap[selectedOption];
+        if (nextNodeId === "CONCLUSION" || !nextNodeId)
+            return this.concludeSession(session);
+        session.currentNodeId = nextNodeId;
+        const nextQuestion = this.getCurrentQuestion(session);
+        return { type: "question", question: nextQuestion };
+    }
+    getSession(sessionId) { return this.sessions.get(sessionId); }
+    endSession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return undefined;
+        if (!session.concluded)
+            this.concludeSession(session);
+        this.sessions.delete(sessionId);
+        this.eventBus?.emit("grilling.session_ended", { sessionId });
+        return session.conclusion;
+    }
+    getCurrentQuestion(session) {
+        const template = this.templates[session.topic];
+        return template?.find(q => q.id === session.currentNodeId);
+    }
+    concludeSession(session) {
+        session.concluded = true;
+        const decisions = this.extractDecisions(session.history);
+        const risks = this.extractRisks(session.history);
+        session.conclusion = {
+            summary: this.generateSummary(decisions),
+            decisions,
+            risks,
+            nextSteps: this.generateNextSteps(decisions),
+            artifactsToUpdate: this.suggestArtifactUpdates(decisions),
+        };
+        logger.info({ sessionId: session.id, decisions: decisions.length }, "Grilling concluded");
+        this.eventBus?.emit("grilling.concluded", { sessionId: session.id, conclusion: session.conclusion });
+        return { type: "conclusion", conclusion: session.conclusion };
+    }
+    extractDecisions(history) {
+        return history.map(h => h.selectedOption);
+    }
+    extractRisks(history) {
+        const risks = [];
+        for (const h of history) {
+            const question = this.findQuestion(h.questionId);
+            const option = question?.options.find(o => o.id === h.selectedOption);
+            if (option?.risk)
+                risks.push(option.risk);
+        }
+        return risks;
+    }
+    findQuestion(id) {
+        for (const template of Object.values(this.templates)) {
+            const q = template.find(t => t.id === id);
+            if (q)
+                return q;
+        }
+        return undefined;
+    }
+    generateSummary(decisions) {
+        return "Decisions made: " + decisions.join(" -> ");
+    }
+    generateNextSteps(decisions) {
+        const steps = [];
+        if (decisions.includes("internal"))
+            steps.push("Review internal user workflow");
+        if (decisions.includes("external"))
+            steps.push("Design public UX");
+        if (decisions.includes("deep"))
+            steps.push("Define interface contract");
+        if (decisions.includes("shallow"))
+            steps.push("Plan module composition");
+        return steps;
+    }
+    suggestArtifactUpdates(decisions) {
+        const artifacts = [];
+        if (decisions.length > 3)
+            artifacts.push("CONTEXT.md");
+        if (decisions.includes("enterprise") || decisions.includes("k8s"))
+            artifacts.push("ADR");
+        return artifacts;
+    }
+}
+export function createGrillingSessionManager(eventBus) {
+    return new GrillingSessionManager(eventBus);
+}
+//# sourceMappingURL=GrillingSessionSkill.js.map

package/dist/skills/GrillingSessionSkill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GrillingSessionSkill.js","sourceRoot":"","sources":["../../src/skills/GrillingSessionSkill.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,iBAAiB;AAIjB,OAAO,EAAE,mBAAmB,EAAsB,MAAM,wBAAwB,CAAA;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AA+C1C,MAAM,OAAO,sBAAsB;IAKjC,YAAY,QAAoB;QAJxB,aAAQ,GAAG,IAAI,GAAG,EAA2B,CAAA;QAKnD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAA;QAChC,IAAI,CAAC,SAAS,GAAG,mBAA2E,CAAA;IAC9F,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAA;QACpE,MAAM,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/E,MAAM,OAAO,GAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QACrH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAA;QACjE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACzE,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,YAAY,CAAC,SAAiB,EAAE,cAAsB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;QAEjG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAClG,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAE1D,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC5D,IAAI,UAAU,KAAK,YAAY,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAEpF,OAAO,CAAC,aAAa,GAAG,UAAU,CAAA;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACrD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,SAAiB,IAAiC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;IAElG,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC9B,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QACrD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC/B,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAC,UAAU,CAAA;IAC3B,CAAC;IAEO,kBAAkB,CAAC,OAAwB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC9C,OAAO,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,CAAC;IAEO,eAAe,CAAC,OAAwB;QAC9C,OAAO,CAAC,SAAS,GAAG,IAAI,CAAA;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChD,OAAO,CAAC,UAAU,GAAG;YACnB,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;YACxC,SAAS;YACT,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;YAC5C,iBAAiB,EAAE,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC;SAC1D,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAA;QACzF,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;QACpG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAA;IAC/D,CAAC;IAEO,gBAAgB,CAAC,OAAmC;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;IAC3C,CAAC;IAEO,YAAY,CAAC,OAAmC;QACtD,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAChD,MAAM,MAAM,GAAG,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,cAAc,CAAC,CAAA;YACrE,IAAI,MAAM,EAAE,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,YAAY,CAAC,EAAU;QAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YACzC,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAA;QACjB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAEO,eAAe,CAAC,SAAmB;QACzC,OAAO,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpD,CAAC;IAEO,iBAAiB,CAAC,SAAmB;QAC3C,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;QAC/E,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAClE,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACvE,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,sBAAsB,CAAC,SAAmB;QAChD,MAAM,SAAS,GAAa,EAAE,CAAA;QAC9B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtD,IAAI,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxF,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAoB;IAC/D,OAAO,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAA;AAC7C,CAAC"}

package/dist/skills/GrillingTemplates.d.ts

@@ -0,0 +1,7 @@
+import type { GrillingQuestion } from "./GrillingSessionSkill.js";
+export declare const REQUIREMENT_CLARITY_TREE: GrillingQuestion[];
+export declare const DESIGN_DEPTH_TREE: GrillingQuestion[];
+export declare const TECH_SELECTION_TREE: GrillingQuestion[];
+export type GrillingTopic = "requirement-clarity" | "design-depth" | "tech-selection";
+export declare const GRILLING_TEMPLATES: Record<GrillingTopic, GrillingQuestion[]>;
+export declare function getGrillingTemplate(topic: GrillingTopic): GrillingQuestion[];