@jack200714/mafw 4.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (631) hide show
  1. package/.opencode/mafw/.backup-v61/parametric/base-skill-manifest.yaml +2 -0
  2. package/.opencode/mafw/STATUS.md +6 -0
  3. package/.opencode/mafw/ledger.md +20 -0
  4. package/.opencode/mafw/memory/.harmonic_index.json +28 -0
  5. package/.opencode/mafw/memory/.review_queue.json +1 -0
  6. package/.opencode/mafw/memory/tier3/parametric.json +13 -0
  7. package/.opencode/mafw/memory/tier3/test-goal.json +19 -0
  8. package/.opencode/mafw/memory-index.json +6 -0
  9. package/.opencode/mafw/parametric/base-skill-manifest.yaml +2 -0
  10. package/.opencode/mafw/waves.json +4 -0
  11. package/.opencode/opencode.json +3 -0
  12. package/.opencode/plugins/mafw-plugin.ts +8 -0
  13. package/.opencode/skills/banner-design/SKILL.md +196 -0
  14. package/.opencode/skills/banner-design/references/banner-sizes-and-styles.md +118 -0
  15. package/.opencode/skills/brand/SKILL.md +97 -0
  16. package/.opencode/skills/brand/references/approval-checklist.md +169 -0
  17. package/.opencode/skills/brand/references/asset-organization.md +157 -0
  18. package/.opencode/skills/brand/references/brand-guideline-template.md +140 -0
  19. package/.opencode/skills/brand/references/color-palette-management.md +186 -0
  20. package/.opencode/skills/brand/references/consistency-checklist.md +94 -0
  21. package/.opencode/skills/brand/references/logo-usage-rules.md +185 -0
  22. package/.opencode/skills/brand/references/messaging-framework.md +85 -0
  23. package/.opencode/skills/brand/references/typography-specifications.md +214 -0
  24. package/.opencode/skills/brand/references/update.md +118 -0
  25. package/.opencode/skills/brand/references/visual-identity.md +96 -0
  26. package/.opencode/skills/brand/references/voice-framework.md +88 -0
  27. package/.opencode/skills/brand/scripts/extract-colors.cjs +341 -0
  28. package/.opencode/skills/brand/scripts/inject-brand-context.cjs +349 -0
  29. package/.opencode/skills/brand/scripts/sync-brand-to-tokens.cjs +248 -0
  30. package/.opencode/skills/brand/scripts/tests/test_sync_brand_to_tokens.py +52 -0
  31. package/.opencode/skills/brand/scripts/validate-asset.cjs +387 -0
  32. package/.opencode/skills/brand/templates/brand-guidelines-starter.md +275 -0
  33. package/.opencode/skills/design/SKILL.md +313 -0
  34. package/.opencode/skills/design/data/cip/deliverables.csv +51 -0
  35. package/.opencode/skills/design/data/cip/industries.csv +21 -0
  36. package/.opencode/skills/design/data/cip/mockup-contexts.csv +21 -0
  37. package/.opencode/skills/design/data/cip/styles.csv +21 -0
  38. package/.opencode/skills/design/data/icon/styles.csv +16 -0
  39. package/.opencode/skills/design/data/logo/colors.csv +56 -0
  40. package/.opencode/skills/design/data/logo/industries.csv +56 -0
  41. package/.opencode/skills/design/data/logo/styles.csv +56 -0
  42. package/.opencode/skills/design/references/banner-sizes-and-styles.md +118 -0
  43. package/.opencode/skills/design/references/cip-deliverable-guide.md +95 -0
  44. package/.opencode/skills/design/references/cip-design.md +121 -0
  45. package/.opencode/skills/design/references/cip-prompt-engineering.md +84 -0
  46. package/.opencode/skills/design/references/cip-style-guide.md +68 -0
  47. package/.opencode/skills/design/references/design-routing.md +207 -0
  48. package/.opencode/skills/design/references/icon-design.md +122 -0
  49. package/.opencode/skills/design/references/logo-color-psychology.md +101 -0
  50. package/.opencode/skills/design/references/logo-design.md +92 -0
  51. package/.opencode/skills/design/references/logo-prompt-engineering.md +158 -0
  52. package/.opencode/skills/design/references/logo-style-guide.md +109 -0
  53. package/.opencode/skills/design/references/slides-copywriting-formulas.md +84 -0
  54. package/.opencode/skills/design/references/slides-create.md +4 -0
  55. package/.opencode/skills/design/references/slides-html-template.md +295 -0
  56. package/.opencode/skills/design/references/slides-layout-patterns.md +137 -0
  57. package/.opencode/skills/design/references/slides-strategies.md +94 -0
  58. package/.opencode/skills/design/references/slides.md +42 -0
  59. package/.opencode/skills/design/references/social-photos-design.md +329 -0
  60. package/.opencode/skills/design/scripts/cip/core.py +215 -0
  61. package/.opencode/skills/design/scripts/cip/generate.py +484 -0
  62. package/.opencode/skills/design/scripts/cip/render-html.py +424 -0
  63. package/.opencode/skills/design/scripts/cip/search.py +127 -0
  64. package/.opencode/skills/design/scripts/icon/generate.py +487 -0
  65. package/.opencode/skills/design/scripts/logo/core.py +175 -0
  66. package/.opencode/skills/design/scripts/logo/generate.py +362 -0
  67. package/.opencode/skills/design/scripts/logo/search.py +114 -0
  68. package/.opencode/skills/design-system/SKILL.md +244 -0
  69. package/.opencode/skills/design-system/data/slide-backgrounds.csv +11 -0
  70. package/.opencode/skills/design-system/data/slide-charts.csv +26 -0
  71. package/.opencode/skills/design-system/data/slide-color-logic.csv +14 -0
  72. package/.opencode/skills/design-system/data/slide-copy.csv +26 -0
  73. package/.opencode/skills/design-system/data/slide-layout-logic.csv +16 -0
  74. package/.opencode/skills/design-system/data/slide-layouts.csv +26 -0
  75. package/.opencode/skills/design-system/data/slide-strategies.csv +16 -0
  76. package/.opencode/skills/design-system/data/slide-typography.csv +15 -0
  77. package/.opencode/skills/design-system/references/component-specs.md +236 -0
  78. package/.opencode/skills/design-system/references/component-tokens.md +214 -0
  79. package/.opencode/skills/design-system/references/primitive-tokens.md +203 -0
  80. package/.opencode/skills/design-system/references/semantic-tokens.md +215 -0
  81. package/.opencode/skills/design-system/references/states-and-variants.md +241 -0
  82. package/.opencode/skills/design-system/references/tailwind-integration.md +251 -0
  83. package/.opencode/skills/design-system/references/token-architecture.md +224 -0
  84. package/.opencode/skills/design-system/scripts/embed-tokens.cjs +99 -0
  85. package/.opencode/skills/design-system/scripts/fetch-background.py +317 -0
  86. package/.opencode/skills/design-system/scripts/generate-slide.py +770 -0
  87. package/.opencode/skills/design-system/scripts/generate-tokens.cjs +205 -0
  88. package/.opencode/skills/design-system/scripts/html-token-validator.py +327 -0
  89. package/.opencode/skills/design-system/scripts/search-slides.py +218 -0
  90. package/.opencode/skills/design-system/scripts/slide-token-validator.py +35 -0
  91. package/.opencode/skills/design-system/scripts/slide_search_core.py +453 -0
  92. package/.opencode/skills/design-system/scripts/tests/test_validate_tokens.py +48 -0
  93. package/.opencode/skills/design-system/scripts/validate-tokens.cjs +246 -0
  94. package/.opencode/skills/design-system/templates/design-tokens-starter.json +143 -0
  95. package/.opencode/skills/frontend-design/LICENSE.txt +21 -0
  96. package/.opencode/skills/frontend-design/SKILL.md +115 -0
  97. package/.opencode/skills/mafw-automation-interview/SKILL.md +43 -0
  98. package/.opencode/skills/mafw-cli-scanner/SKILL.md +37 -0
  99. package/.opencode/skills/mafw-compression-verifier/SKILL.md +52 -0
  100. package/.opencode/skills/mafw-desktop-inspector/SKILL.md +170 -0
  101. package/.opencode/skills/mafw-execute/SKILL.md +62 -0
  102. package/.opencode/skills/mafw-gateway-restart/SKILL.md +87 -0
  103. package/.opencode/skills/mafw-github-scanner/SKILL.md +38 -0
  104. package/.opencode/skills/mafw-goal/SKILL.md +76 -0
  105. package/.opencode/skills/mafw-interview/SKILL.md +68 -0
  106. package/.opencode/skills/mafw-memory-extractor/SKILL.md +65 -0
  107. package/.opencode/skills/mafw-plan/SKILL.md +58 -0
  108. package/.opencode/skills/mafw-review/SKILL.md +85 -0
  109. package/.opencode/skills/runtime-plugin-authoring/SKILL.md +791 -0
  110. package/.opencode/skills/slides/SKILL.md +40 -0
  111. package/.opencode/skills/slides/references/copywriting-formulas.md +84 -0
  112. package/.opencode/skills/slides/references/create.md +4 -0
  113. package/.opencode/skills/slides/references/html-template.md +295 -0
  114. package/.opencode/skills/slides/references/layout-patterns.md +137 -0
  115. package/.opencode/skills/slides/references/slide-strategies.md +94 -0
  116. package/.opencode/skills/ui-styling/LICENSE.txt +202 -0
  117. package/.opencode/skills/ui-styling/SKILL.md +324 -0
  118. package/.opencode/skills/ui-styling/references/canvas-design-system.md +320 -0
  119. package/.opencode/skills/ui-styling/references/shadcn-accessibility.md +471 -0
  120. package/.opencode/skills/ui-styling/references/shadcn-components.md +424 -0
  121. package/.opencode/skills/ui-styling/references/shadcn-theming.md +373 -0
  122. package/.opencode/skills/ui-styling/references/tailwind-customization.md +483 -0
  123. package/.opencode/skills/ui-styling/references/tailwind-responsive.md +382 -0
  124. package/.opencode/skills/ui-styling/references/tailwind-utilities.md +455 -0
  125. package/.opencode/skills/ui-styling/scripts/requirements.txt +17 -0
  126. package/.opencode/skills/ui-styling/scripts/shadcn_add.py +308 -0
  127. package/.opencode/skills/ui-styling/scripts/tailwind_config_gen.py +473 -0
  128. package/.opencode/skills/ui-styling/scripts/tests/coverage-ui.json +1 -0
  129. package/.opencode/skills/ui-styling/scripts/tests/requirements.txt +3 -0
  130. package/.opencode/skills/ui-styling/scripts/tests/test_shadcn_add.py +266 -0
  131. package/.opencode/skills/ui-styling/scripts/tests/test_tailwind_config_gen.py +394 -0
  132. package/.opencode/skills/ui-ux-pro-max/SKILL.md +388 -0
  133. package/.opencode/skills/ui-ux-pro-max/data/app-interface.csv +31 -0
  134. package/.opencode/skills/ui-ux-pro-max/data/charts.csv +26 -0
  135. package/.opencode/skills/ui-ux-pro-max/data/colors.csv +193 -0
  136. package/.opencode/skills/ui-ux-pro-max/data/google-fonts.csv +1924 -0
  137. package/.opencode/skills/ui-ux-pro-max/data/icons.csv +106 -0
  138. package/.opencode/skills/ui-ux-pro-max/data/landing.csv +35 -0
  139. package/.opencode/skills/ui-ux-pro-max/data/motion.csv +17 -0
  140. package/.opencode/skills/ui-ux-pro-max/data/products.csv +193 -0
  141. package/.opencode/skills/ui-ux-pro-max/data/react-performance.csv +45 -0
  142. package/.opencode/skills/ui-ux-pro-max/data/stacks/angular.csv +51 -0
  143. package/.opencode/skills/ui-ux-pro-max/data/stacks/astro.csv +54 -0
  144. package/.opencode/skills/ui-ux-pro-max/data/stacks/avalonia.csv +57 -0
  145. package/.opencode/skills/ui-ux-pro-max/data/stacks/flutter.csv +53 -0
  146. package/.opencode/skills/ui-ux-pro-max/data/stacks/html-tailwind.csv +56 -0
  147. package/.opencode/skills/ui-ux-pro-max/data/stacks/javafx.csv +76 -0
  148. package/.opencode/skills/ui-ux-pro-max/data/stacks/jetpack-compose.csv +53 -0
  149. package/.opencode/skills/ui-ux-pro-max/data/stacks/laravel.csv +51 -0
  150. package/.opencode/skills/ui-ux-pro-max/data/stacks/nextjs.csv +53 -0
  151. package/.opencode/skills/ui-ux-pro-max/data/stacks/nuxt-ui.csv +71 -0
  152. package/.opencode/skills/ui-ux-pro-max/data/stacks/nuxtjs.csv +59 -0
  153. package/.opencode/skills/ui-ux-pro-max/data/stacks/react-native.csv +52 -0
  154. package/.opencode/skills/ui-ux-pro-max/data/stacks/react.csv +54 -0
  155. package/.opencode/skills/ui-ux-pro-max/data/stacks/shadcn.csv +61 -0
  156. package/.opencode/skills/ui-ux-pro-max/data/stacks/svelte.csv +54 -0
  157. package/.opencode/skills/ui-ux-pro-max/data/stacks/swiftui.csv +51 -0
  158. package/.opencode/skills/ui-ux-pro-max/data/stacks/threejs.csv +54 -0
  159. package/.opencode/skills/ui-ux-pro-max/data/stacks/uno.csv +60 -0
  160. package/.opencode/skills/ui-ux-pro-max/data/stacks/uwp.csv +56 -0
  161. package/.opencode/skills/ui-ux-pro-max/data/stacks/vue.csv +50 -0
  162. package/.opencode/skills/ui-ux-pro-max/data/stacks/winui.csv +60 -0
  163. package/.opencode/skills/ui-ux-pro-max/data/stacks/wpf.csv +57 -0
  164. package/.opencode/skills/ui-ux-pro-max/data/styles.csv +85 -0
  165. package/.opencode/skills/ui-ux-pro-max/data/typography.csv +75 -0
  166. package/.opencode/skills/ui-ux-pro-max/data/ui-reasoning.csv +162 -0
  167. package/.opencode/skills/ui-ux-pro-max/data/ux-guidelines.csv +100 -0
  168. package/.opencode/skills/ui-ux-pro-max/scripts/core.py +464 -0
  169. package/.opencode/skills/ui-ux-pro-max/scripts/design_system.py +1479 -0
  170. package/.opencode/skills/ui-ux-pro-max/scripts/search.py +162 -0
  171. package/.opencode/skills/ui-ux-pro-max/scripts/tests/test_core.py +134 -0
  172. package/.opencode/skills/ui-ux-pro-max/scripts/tests/test_design_system_mode.py +159 -0
  173. package/.opencode/skills/ui-ux-pro-max/scripts/validate_data.py +114 -0
  174. package/LICENSE +21 -0
  175. package/README.md +199 -0
  176. package/bin/mafw.js +436 -0
  177. package/dist/hooks/bash-python-guide.d.ts +4 -0
  178. package/dist/hooks/bash-python-guide.d.ts.map +1 -0
  179. package/dist/hooks/bash-python-guide.js +67 -0
  180. package/dist/hooks/bash-python-guide.js.map +1 -0
  181. package/dist/hooks/handoff.d.ts +9 -0
  182. package/dist/hooks/handoff.d.ts.map +1 -0
  183. package/dist/hooks/handoff.js +8 -0
  184. package/dist/hooks/handoff.js.map +1 -0
  185. package/dist/hooks/hook-manager.d.ts +32 -0
  186. package/dist/hooks/hook-manager.d.ts.map +1 -0
  187. package/dist/hooks/hook-manager.js +91 -0
  188. package/dist/hooks/hook-manager.js.map +1 -0
  189. package/dist/hooks/llm-after.d.ts +8 -0
  190. package/dist/hooks/llm-after.d.ts.map +1 -0
  191. package/dist/hooks/llm-after.js +8 -0
  192. package/dist/hooks/llm-after.js.map +1 -0
  193. package/dist/hooks/media-ingest.d.ts +43 -0
  194. package/dist/hooks/media-ingest.d.ts.map +1 -0
  195. package/dist/hooks/media-ingest.js +269 -0
  196. package/dist/hooks/media-ingest.js.map +1 -0
  197. package/dist/hooks/memory-guide.d.ts +3 -0
  198. package/dist/hooks/memory-guide.d.ts.map +1 -0
  199. package/dist/hooks/memory-guide.js +47 -0
  200. package/dist/hooks/memory-guide.js.map +1 -0
  201. package/dist/hooks/observation-capture.d.ts +17 -0
  202. package/dist/hooks/observation-capture.d.ts.map +1 -0
  203. package/dist/hooks/observation-capture.js +20 -0
  204. package/dist/hooks/observation-capture.js.map +1 -0
  205. package/dist/hooks/session-compacting.d.ts +6 -0
  206. package/dist/hooks/session-compacting.d.ts.map +1 -0
  207. package/dist/hooks/session-compacting.js +6 -0
  208. package/dist/hooks/session-compacting.js.map +1 -0
  209. package/dist/hooks/session-ending.d.ts +20 -0
  210. package/dist/hooks/session-ending.d.ts.map +1 -0
  211. package/dist/hooks/session-ending.js +113 -0
  212. package/dist/hooks/session-ending.js.map +1 -0
  213. package/dist/hooks/session-recall.d.ts +2 -0
  214. package/dist/hooks/session-recall.d.ts.map +1 -0
  215. package/dist/hooks/session-recall.js +103 -0
  216. package/dist/hooks/session-recall.js.map +1 -0
  217. package/dist/hooks/session-start.d.ts +9 -0
  218. package/dist/hooks/session-start.d.ts.map +1 -0
  219. package/dist/hooks/session-start.js +42 -0
  220. package/dist/hooks/session-start.js.map +1 -0
  221. package/dist/hooks/tool-before.d.ts +10 -0
  222. package/dist/hooks/tool-before.d.ts.map +1 -0
  223. package/dist/hooks/tool-before.js +6 -0
  224. package/dist/hooks/tool-before.js.map +1 -0
  225. package/dist/hooks/tool-executed.d.ts +19 -0
  226. package/dist/hooks/tool-executed.d.ts.map +1 -0
  227. package/dist/hooks/tool-executed.js +12 -0
  228. package/dist/hooks/tool-executed.js.map +1 -0
  229. package/dist/hooks/user-profile.d.ts +2 -0
  230. package/dist/hooks/user-profile.d.ts.map +1 -0
  231. package/dist/hooks/user-profile.js +30 -0
  232. package/dist/hooks/user-profile.js.map +1 -0
  233. package/dist/hooks/user-prompt.d.ts +9 -0
  234. package/dist/hooks/user-prompt.d.ts.map +1 -0
  235. package/dist/hooks/user-prompt.js +8 -0
  236. package/dist/hooks/user-prompt.js.map +1 -0
  237. package/dist/hooks/voice-guide.d.ts +8 -0
  238. package/dist/hooks/voice-guide.d.ts.map +1 -0
  239. package/dist/hooks/voice-guide.js +101 -0
  240. package/dist/hooks/voice-guide.js.map +1 -0
  241. package/dist/plugin.d.ts +55 -0
  242. package/dist/plugin.d.ts.map +1 -0
  243. package/dist/plugin.js +342 -0
  244. package/dist/plugin.js.map +1 -0
  245. package/dist/tools/add-memory.d.ts +17 -0
  246. package/dist/tools/add-memory.d.ts.map +1 -0
  247. package/dist/tools/add-memory.js +60 -0
  248. package/dist/tools/add-memory.js.map +1 -0
  249. package/dist/tools/media-ask.d.ts +14 -0
  250. package/dist/tools/media-ask.d.ts.map +1 -0
  251. package/dist/tools/media-ask.js +224 -0
  252. package/dist/tools/media-ask.js.map +1 -0
  253. package/dist/tools/media-speak.d.ts +16 -0
  254. package/dist/tools/media-speak.d.ts.map +1 -0
  255. package/dist/tools/media-speak.js +78 -0
  256. package/dist/tools/media-speak.js.map +1 -0
  257. package/dist/tools/media-upload.d.ts +14 -0
  258. package/dist/tools/media-upload.d.ts.map +1 -0
  259. package/dist/tools/media-upload.js +155 -0
  260. package/dist/tools/media-upload.js.map +1 -0
  261. package/dist/tools/python-exec.d.ts +13 -0
  262. package/dist/tools/python-exec.d.ts.map +1 -0
  263. package/dist/tools/python-exec.js +99 -0
  264. package/dist/tools/python-exec.js.map +1 -0
  265. package/dist/tools/python-restart.d.ts +11 -0
  266. package/dist/tools/python-restart.d.ts.map +1 -0
  267. package/dist/tools/python-restart.js +33 -0
  268. package/dist/tools/python-restart.js.map +1 -0
  269. package/dist/utils/circuit-breaker.d.ts +23 -0
  270. package/dist/utils/circuit-breaker.d.ts.map +1 -0
  271. package/dist/utils/circuit-breaker.js +75 -0
  272. package/dist/utils/circuit-breaker.js.map +1 -0
  273. package/dist/utils/config-loader.d.ts +20 -0
  274. package/dist/utils/config-loader.d.ts.map +1 -0
  275. package/dist/utils/config-loader.js +194 -0
  276. package/dist/utils/config-loader.js.map +1 -0
  277. package/dist/utils/fallback.d.ts +7 -0
  278. package/dist/utils/fallback.d.ts.map +1 -0
  279. package/dist/utils/fallback.js +20 -0
  280. package/dist/utils/fallback.js.map +1 -0
  281. package/dist/utils/git.d.ts +24 -0
  282. package/dist/utils/git.d.ts.map +1 -0
  283. package/dist/utils/git.js +71 -0
  284. package/dist/utils/git.js.map +1 -0
  285. package/dist/utils/github.d.ts +37 -0
  286. package/dist/utils/github.d.ts.map +1 -0
  287. package/dist/utils/github.js +53 -0
  288. package/dist/utils/github.js.map +1 -0
  289. package/dist/utils/global-path.d.ts +2 -0
  290. package/dist/utils/global-path.d.ts.map +1 -0
  291. package/dist/utils/global-path.js +32 -0
  292. package/dist/utils/global-path.js.map +1 -0
  293. package/dist/utils/logger.d.ts +6 -0
  294. package/dist/utils/logger.d.ts.map +1 -0
  295. package/dist/utils/logger.js +69 -0
  296. package/dist/utils/logger.js.map +1 -0
  297. package/dist/utils/obs-capture.d.ts +7 -0
  298. package/dist/utils/obs-capture.d.ts.map +1 -0
  299. package/dist/utils/obs-capture.js +49 -0
  300. package/dist/utils/obs-capture.js.map +1 -0
  301. package/dist/utils/retry.d.ts +11 -0
  302. package/dist/utils/retry.d.ts.map +1 -0
  303. package/dist/utils/retry.js +45 -0
  304. package/dist/utils/retry.js.map +1 -0
  305. package/dist/utils/self-wiring.d.ts +13 -0
  306. package/dist/utils/self-wiring.d.ts.map +1 -0
  307. package/dist/utils/self-wiring.js +86 -0
  308. package/dist/utils/self-wiring.js.map +1 -0
  309. package/dist/utils/state.d.ts +106 -0
  310. package/dist/utils/state.d.ts.map +1 -0
  311. package/dist/utils/state.js +166 -0
  312. package/dist/utils/state.js.map +1 -0
  313. package/dist/utils/status.d.ts +47 -0
  314. package/dist/utils/status.d.ts.map +1 -0
  315. package/dist/utils/status.js +147 -0
  316. package/dist/utils/status.js.map +1 -0
  317. package/dist/utils/ttl-map.d.ts +17 -0
  318. package/dist/utils/ttl-map.d.ts.map +1 -0
  319. package/dist/utils/ttl-map.js +67 -0
  320. package/dist/utils/ttl-map.js.map +1 -0
  321. package/gateway/dist/automation-engine.js +729 -0
  322. package/gateway/dist/chat/chat-sessions.js +95 -0
  323. package/gateway/dist/chat/graph-runner.js +76 -0
  324. package/gateway/dist/chat/index.js +7 -0
  325. package/gateway/dist/chat/intent-classifier.js +23 -0
  326. package/gateway/dist/config.js +416 -0
  327. package/gateway/dist/core/auth.js +96 -0
  328. package/gateway/dist/core/budget-guard.js +52 -0
  329. package/gateway/dist/core/compression/bm25-index.js +176 -0
  330. package/gateway/dist/core/compression/compression-pipeline.js +157 -0
  331. package/gateway/dist/core/compression/compression-strategy-selector.js +32 -0
  332. package/gateway/dist/core/compression/compression-verifier.js +79 -0
  333. package/gateway/dist/core/compression/diff-compressor.js +69 -0
  334. package/gateway/dist/core/compression/hybrid-compressor.js +104 -0
  335. package/gateway/dist/core/compression/lesson-compactor.js +114 -0
  336. package/gateway/dist/core/compression/memory-index.js +190 -0
  337. package/gateway/dist/core/compression/observation-classifier.js +41 -0
  338. package/gateway/dist/core/compression/observation-deduplicator.js +43 -0
  339. package/gateway/dist/core/compression/rrf-fusion.js +63 -0
  340. package/gateway/dist/core/compression/session-pruner.js +137 -0
  341. package/gateway/dist/core/compression/token-budget-allocator.js +141 -0
  342. package/gateway/dist/core/compression/vector-index.js +117 -0
  343. package/gateway/dist/core/compression/zero-token-compressor.js +80 -0
  344. package/gateway/dist/core/cost/cognitive-router.js +41 -0
  345. package/gateway/dist/core/cost/cost-estimator.js +63 -0
  346. package/gateway/dist/core/cost/types.js +19 -0
  347. package/gateway/dist/core/engine/degradation.js +159 -0
  348. package/gateway/dist/core/engine/goal-worktree-manager.js +131 -0
  349. package/gateway/dist/core/engine/lesson-manager.js +222 -0
  350. package/gateway/dist/core/engine/optimistic-sync.js +100 -0
  351. package/gateway/dist/core/engine/phase-orchestrator.js +153 -0
  352. package/gateway/dist/core/engine/report-generator.js +131 -0
  353. package/gateway/dist/core/engine/state-lock.js +91 -0
  354. package/gateway/dist/core/engine/task-branch-manager.js +102 -0
  355. package/gateway/dist/core/engine/wave-dependency.js +67 -0
  356. package/gateway/dist/core/engine/wave-executor.js +112 -0
  357. package/gateway/dist/core/goal-budget.js +63 -0
  358. package/gateway/dist/core/graph/entity-extractor.js +53 -0
  359. package/gateway/dist/core/graph/graph-searcher.js +120 -0
  360. package/gateway/dist/core/graph/knowledge-graph-manager.js +138 -0
  361. package/gateway/dist/core/graph/relation-inferencer.js +67 -0
  362. package/gateway/dist/core/graph/types.js +2 -0
  363. package/gateway/dist/core/hooks/handoff.js +7 -0
  364. package/gateway/dist/core/hooks/hook-manager.js +91 -0
  365. package/gateway/dist/core/hooks/llm-after.js +7 -0
  366. package/gateway/dist/core/hooks/observation-capture.js +19 -0
  367. package/gateway/dist/core/hooks/session-compacting.js +5 -0
  368. package/gateway/dist/core/hooks/session-ending.js +123 -0
  369. package/gateway/dist/core/hooks/session-start.js +51 -0
  370. package/gateway/dist/core/hooks/tool-before.js +5 -0
  371. package/gateway/dist/core/hooks/tool-executed.js +11 -0
  372. package/gateway/dist/core/hooks/user-prompt.js +7 -0
  373. package/gateway/dist/core/index.js +119 -0
  374. package/gateway/dist/core/langchain/agent-adapter.js +39 -0
  375. package/gateway/dist/core/langchain/index.js +12 -0
  376. package/gateway/dist/core/langchain/memory.js +35 -0
  377. package/gateway/dist/core/langchain/node-runner.js +115 -0
  378. package/gateway/dist/core/langchain/retriever.js +28 -0
  379. package/gateway/dist/core/langgraph/checkpointer.js +200 -0
  380. package/gateway/dist/core/langgraph/graph.js +57 -0
  381. package/gateway/dist/core/langgraph/index.js +25 -0
  382. package/gateway/dist/core/langgraph/loop-state.js +71 -0
  383. package/gateway/dist/core/langgraph/nodes/archive.node.js +27 -0
  384. package/gateway/dist/core/langgraph/nodes/execute.node.js +5 -0
  385. package/gateway/dist/core/langgraph/nodes/plan.node.js +101 -0
  386. package/gateway/dist/core/langgraph/nodes/review.node.js +89 -0
  387. package/gateway/dist/core/langgraph/nodes/sync.node.js +70 -0
  388. package/gateway/dist/core/langgraph/review-parser.js +35 -0
  389. package/gateway/dist/core/langgraph/signature-detector.js +23 -0
  390. package/gateway/dist/core/manager/goal-snapshot.js +73 -0
  391. package/gateway/dist/core/manager/milestone-push.js +81 -0
  392. package/gateway/dist/core/manager/question-ledger.js +121 -0
  393. package/gateway/dist/core/manager/system-rule-templates.js +76 -0
  394. package/gateway/dist/core/mcp/tools.js +562 -0
  395. package/gateway/dist/core/mcp/validator.js +165 -0
  396. package/gateway/dist/core/mcp-server.js +86 -0
  397. package/gateway/dist/core/memory/abstraction-distiller.js +44 -0
  398. package/gateway/dist/core/memory/cognitive-graph.js +103 -0
  399. package/gateway/dist/core/memory/energy-system.js +69 -0
  400. package/gateway/dist/core/memory/extractor.js +164 -0
  401. package/gateway/dist/core/memory/harmonic-index.js +530 -0
  402. package/gateway/dist/core/memory/harmonic-types.js +6 -0
  403. package/gateway/dist/core/memory/injector.js +111 -0
  404. package/gateway/dist/core/memory/l5-store.js +141 -0
  405. package/gateway/dist/core/memory/matcher.js +66 -0
  406. package/gateway/dist/core/memory/merger.js +95 -0
  407. package/gateway/dist/core/memory/migrate-v6.1.js +133 -0
  408. package/gateway/dist/core/memory/minhash-merger.js +195 -0
  409. package/gateway/dist/core/memory/observation-service.js +87 -0
  410. package/gateway/dist/core/memory/privacy-filter.js +163 -0
  411. package/gateway/dist/core/memory/reranker.js +208 -0
  412. package/gateway/dist/core/memory/review-scheduler.js +100 -0
  413. package/gateway/dist/core/memory/salience-perceptor.js +24 -0
  414. package/gateway/dist/core/memory/store.js +284 -0
  415. package/gateway/dist/core/memory/t1-store.js +183 -0
  416. package/gateway/dist/core/memory/t1-to-t2-compressor.js +119 -0
  417. package/gateway/dist/core/memory/validator.js +66 -0
  418. package/gateway/dist/core/plugin.js +902 -0
  419. package/gateway/dist/core/skills/mafw-execute/entry.js +226 -0
  420. package/gateway/dist/core/skills/mafw-goal/entry.js +203 -0
  421. package/gateway/dist/core/skills/mafw-plan/entry.js +184 -0
  422. package/gateway/dist/core/skills/mafw-review/entry.js +200 -0
  423. package/gateway/dist/core/storage/file-storage.js +120 -0
  424. package/gateway/dist/core/storage/sqlite-storage.js +205 -0
  425. package/gateway/dist/core/storage/types.js +2 -0
  426. package/gateway/dist/core/tools/archive-worktree.js +208 -0
  427. package/gateway/dist/core/tools/remote-cli.js +106 -0
  428. package/gateway/dist/core/tools/run-ask-user.js +79 -0
  429. package/gateway/dist/core/tools/run-execute-wave.js +32 -0
  430. package/gateway/dist/core/tools/run-plan.js +42 -0
  431. package/gateway/dist/core/tools/run-record-feedback.js +55 -0
  432. package/gateway/dist/core/tools/run-review.js +46 -0
  433. package/gateway/dist/core/tools/write-lesson.js +97 -0
  434. package/gateway/dist/core/utils/circuit-breaker.js +74 -0
  435. package/gateway/dist/core/utils/config-loader.js +203 -0
  436. package/gateway/dist/core/utils/fallback.js +19 -0
  437. package/gateway/dist/core/utils/git.js +70 -0
  438. package/gateway/dist/core/utils/github.js +52 -0
  439. package/gateway/dist/core/utils/global-path.js +41 -0
  440. package/gateway/dist/core/utils/logger.js +71 -0
  441. package/gateway/dist/core/utils/retry.js +44 -0
  442. package/gateway/dist/core/utils/state.js +175 -0
  443. package/gateway/dist/core/utils/status.js +156 -0
  444. package/gateway/dist/cost/service.js +17 -0
  445. package/gateway/dist/dashboard/api.js +1156 -0
  446. package/gateway/dist/dashboard/public/assets/index-DOXm39dm.css +1 -0
  447. package/gateway/dist/dashboard/public/index.html +13 -0
  448. package/gateway/dist/dashboard/server.js +140 -0
  449. package/gateway/dist/dashboard/types.js +2 -0
  450. package/gateway/dist/desktop-client.js +124 -0
  451. package/gateway/dist/eval-endpoint.js +219 -0
  452. package/gateway/dist/event-bus.js +7 -0
  453. package/gateway/dist/feedback/anchor-promotion.js +99 -0
  454. package/gateway/dist/feedback/deferred-memory.js +13 -0
  455. package/gateway/dist/feedback/miss-attribution.js +20 -0
  456. package/gateway/dist/graph/anchor-graph-store.js +113 -0
  457. package/gateway/dist/graph/anchor-graph.js +48 -0
  458. package/gateway/dist/health.js +53 -0
  459. package/gateway/dist/heartbeat.js +109 -0
  460. package/gateway/dist/index.js +6377 -0
  461. package/gateway/dist/interceptors/memory-injector.js +79 -0
  462. package/gateway/dist/ledger.js +121 -0
  463. package/gateway/dist/loop-monitor.js +74 -0
  464. package/gateway/dist/mcp/handlers/add-memory.js +113 -0
  465. package/gateway/dist/mcp/handlers/ask-user.js +63 -0
  466. package/gateway/dist/mcp/handlers/commit-heuristic.js +19 -0
  467. package/gateway/dist/mcp/handlers/create-goal.js +83 -0
  468. package/gateway/dist/mcp/handlers/desktop-click.js +18 -0
  469. package/gateway/dist/mcp/handlers/desktop-get-state.js +15 -0
  470. package/gateway/dist/mcp/handlers/desktop-navigate.js +18 -0
  471. package/gateway/dist/mcp/handlers/desktop-screenshot.js +16 -0
  472. package/gateway/dist/mcp/handlers/desktop-scroll.js +19 -0
  473. package/gateway/dist/mcp/handlers/desktop-type.js +19 -0
  474. package/gateway/dist/mcp/handlers/draft-automation-rule.js +45 -0
  475. package/gateway/dist/mcp/handlers/get-automation-history.js +15 -0
  476. package/gateway/dist/mcp/handlers/get-automation-rule.js +26 -0
  477. package/gateway/dist/mcp/handlers/get-axioms.js +14 -0
  478. package/gateway/dist/mcp/handlers/get-deltas.js +77 -0
  479. package/gateway/dist/mcp/handlers/get-memory.js +67 -0
  480. package/gateway/dist/mcp/handlers/get-model-route.js +16 -0
  481. package/gateway/dist/mcp/handlers/get-triage-item.js +17 -0
  482. package/gateway/dist/mcp/handlers/list-automation-rules.js +24 -0
  483. package/gateway/dist/mcp/handlers/list-triage-items.js +14 -0
  484. package/gateway/dist/mcp/handlers/load-state.js +54 -0
  485. package/gateway/dist/mcp/handlers/manager-answer-question.js +67 -0
  486. package/gateway/dist/mcp/handlers/manager-cancel-goal.js +58 -0
  487. package/gateway/dist/mcp/handlers/manager-get-evidence.js +57 -0
  488. package/gateway/dist/mcp/handlers/manager-get-goal-status.js +58 -0
  489. package/gateway/dist/mcp/handlers/manager-list-goals.js +60 -0
  490. package/gateway/dist/mcp/handlers/manager-list-pending-questions.js +67 -0
  491. package/gateway/dist/mcp/handlers/manager-set-goal.js +78 -0
  492. package/gateway/dist/mcp/handlers/merge-memory.js +184 -0
  493. package/gateway/dist/mcp/handlers/pin-memory.js +53 -0
  494. package/gateway/dist/mcp/handlers/propose-triage-decision.js +38 -0
  495. package/gateway/dist/mcp/handlers/record-feedback.js +59 -0
  496. package/gateway/dist/mcp/handlers/resolve-merge.js +92 -0
  497. package/gateway/dist/mcp/handlers/restart-agent.js +22 -0
  498. package/gateway/dist/mcp/handlers/run-automation.js +28 -0
  499. package/gateway/dist/mcp/handlers/search-hybrid.js +181 -0
  500. package/gateway/dist/mcp/handlers/supersede-memory.js +47 -0
  501. package/gateway/dist/mcp/handlers/update-state.js +59 -0
  502. package/gateway/dist/mcp/handlers/validate-rule.js +39 -0
  503. package/gateway/dist/mcp/sse-transport.js +97 -0
  504. package/gateway/dist/mcp/streamable-endpoint.js +98 -0
  505. package/gateway/dist/mcp/tool-registry.js +630 -0
  506. package/gateway/dist/media/media-agent.js +755 -0
  507. package/gateway/dist/media/media-plugin-loader.js +254 -0
  508. package/gateway/dist/media/media-runtime-executor.js +227 -0
  509. package/gateway/dist/media/media-service.js +199 -0
  510. package/gateway/dist/media/pi-adapter.js +159 -0
  511. package/gateway/dist/media/plugin-context.js +14 -0
  512. package/gateway/dist/media/tts-service.js +173 -0
  513. package/gateway/dist/memory/abstraction-matcher.js +28 -0
  514. package/gateway/dist/memory/consolidation-service.js +209 -0
  515. package/gateway/dist/memory/derived-terms.js +50 -0
  516. package/gateway/dist/memory/embedding-provider.js +330 -0
  517. package/gateway/dist/memory/embedding-runtime.js +174 -0
  518. package/gateway/dist/memory/event-log.js +84 -0
  519. package/gateway/dist/memory/gateway-db.js +465 -0
  520. package/gateway/dist/memory/harmonic-file-store.js +338 -0
  521. package/gateway/dist/memory/llamacpp-provider.js +370 -0
  522. package/gateway/dist/memory/okf-index-renderer.js +61 -0
  523. package/gateway/dist/memory/okf-migrator.js +71 -0
  524. package/gateway/dist/memory/okf-parser.js +57 -0
  525. package/gateway/dist/memory/okf-writer.js +107 -0
  526. package/gateway/dist/memory/service.js +81 -0
  527. package/gateway/dist/memory/t1-db.js +139 -0
  528. package/gateway/dist/memory/unmerge-cleanup.js +82 -0
  529. package/gateway/dist/memory/vector-store.js +246 -0
  530. package/gateway/dist/memory/write-queue.js +31 -0
  531. package/gateway/dist/metrics/collector.js +28 -0
  532. package/gateway/dist/mobile/device-store.js +123 -0
  533. package/gateway/dist/mobile/mdns-advertiser.js +55 -0
  534. package/gateway/dist/mobile/media-proxy.js +292 -0
  535. package/gateway/dist/mobile/pairing.js +139 -0
  536. package/gateway/dist/mobile/push-gateway.js +126 -0
  537. package/gateway/dist/mobile/tts-artifact.js +43 -0
  538. package/gateway/dist/opencode-adapter.js +241 -0
  539. package/gateway/dist/orchestration/outcome-recorder.js +218 -0
  540. package/gateway/dist/orchestration/policy.js +57 -0
  541. package/gateway/dist/orchestration/registry.js +47 -0
  542. package/gateway/dist/plugins/hub.js +188 -0
  543. package/gateway/dist/poll.js +110 -0
  544. package/gateway/dist/python/kernel-service.js +762 -0
  545. package/gateway/dist/recall/constraints-migrate.js +108 -0
  546. package/gateway/dist/recall/data-dir-migrate.js +120 -0
  547. package/gateway/dist/recall/gateway-db-migrate.js +134 -0
  548. package/gateway/dist/recall/index-scan.js +437 -0
  549. package/gateway/dist/recall/inject-format.js +222 -0
  550. package/gateway/dist/recall/legacy-t1-archive.js +86 -0
  551. package/gateway/dist/recall/memory-worker.js +128 -0
  552. package/gateway/dist/recall/pipeline-rules.js +76 -0
  553. package/gateway/dist/recall/recall-context.js +297 -0
  554. package/gateway/dist/recall/reflect-cursor.js +50 -0
  555. package/gateway/dist/recall/reflection.js +318 -0
  556. package/gateway/dist/recall/session-worker-pool.js +100 -0
  557. package/gateway/dist/recall/stale-verify.js +72 -0
  558. package/gateway/dist/recall/step-inject.js +173 -0
  559. package/gateway/dist/recall/time-anchor.js +143 -0
  560. package/gateway/dist/recall/ttl-map.js +72 -0
  561. package/gateway/dist/recall/turn-completion.js +44 -0
  562. package/gateway/dist/recall/turn-pipeline.js +150 -0
  563. package/gateway/dist/recovery.js +158 -0
  564. package/gateway/dist/resources/sdk-session.js +202 -0
  565. package/gateway/dist/retrieval/guided-retriever.js +131 -0
  566. package/gateway/dist/retrieval/idf-stats.js +31 -0
  567. package/gateway/dist/routes/embedding-config.js +100 -0
  568. package/gateway/dist/routes/goal-sessions.js +45 -0
  569. package/gateway/dist/routes/manager-rotate.js +55 -0
  570. package/gateway/dist/routes/media-switch.js +78 -0
  571. package/gateway/dist/routes/model-config.js +132 -0
  572. package/gateway/dist/routes/note-board.js +51 -0
  573. package/gateway/dist/routes/permission.js +43 -0
  574. package/gateway/dist/routes/pinned-recall.js +36 -0
  575. package/gateway/dist/routes/plugins.js +77 -0
  576. package/gateway/dist/routes/restart-agent.js +28 -0
  577. package/gateway/dist/routes/runtime-switch.js +80 -0
  578. package/gateway/dist/routes/session-branch.js +63 -0
  579. package/gateway/dist/routes/session-mutations.js +58 -0
  580. package/gateway/dist/routes/session-summarize.js +49 -0
  581. package/gateway/dist/routes/usage-plugins.js +251 -0
  582. package/gateway/dist/runtime/agent-definition.js +2 -0
  583. package/gateway/dist/runtime/auth.js +80 -0
  584. package/gateway/dist/runtime/completion-http.js +97 -0
  585. package/gateway/dist/runtime/contract.js +37 -0
  586. package/gateway/dist/runtime/loader.js +240 -0
  587. package/gateway/dist/runtime/normalize.js +59 -0
  588. package/gateway/dist/runtime/opencode-runtime.js +336 -0
  589. package/gateway/dist/runtime/pi/pi-agent-config.js +294 -0
  590. package/gateway/dist/runtime/pi/pi-approval-bridge.js +44 -0
  591. package/gateway/dist/runtime/pi/pi-approval-extension.js +62 -0
  592. package/gateway/dist/runtime/pi/pi-events.js +122 -0
  593. package/gateway/dist/runtime/pi/pi-messages.js +20 -0
  594. package/gateway/dist/runtime/pi/pi-provider.js +19 -0
  595. package/gateway/dist/runtime/pi/pi-session-storage.js +44 -0
  596. package/gateway/dist/runtime/pi/pi-session.js +328 -0
  597. package/gateway/dist/runtime/plugins/pi-runtime.js +285 -0
  598. package/gateway/dist/runtime/serve-for-runtime.js +22 -0
  599. package/gateway/dist/runtime/serve-sidecar.js +164 -0
  600. package/gateway/dist/runtime/serve-supervisor.js +80 -0
  601. package/gateway/dist/self-update.js +309 -0
  602. package/gateway/dist/skills/manager-agent-config.js +37 -0
  603. package/gateway/dist/skills/manager-identity.js +11 -0
  604. package/gateway/dist/skills/memory-curator-agent.js +55 -0
  605. package/gateway/dist/trajectory/api.js +154 -0
  606. package/gateway/dist/trajectory/backfill-provider.js +41 -0
  607. package/gateway/dist/trajectory/collector.js +337 -0
  608. package/gateway/dist/trajectory/trajectory-store.js +336 -0
  609. package/gateway/dist/trajectory/types.js +17 -0
  610. package/gateway/dist/tray/index.js +131 -0
  611. package/gateway/dist/tray/tray.ps1 +96 -0
  612. package/gateway/dist/types.js +2 -0
  613. package/gateway/dist/usage/builtin-plugins/commandcode.js +71 -0
  614. package/gateway/dist/usage/builtin-plugins/deepseek.js +56 -0
  615. package/gateway/dist/usage/builtin-plugins/gateway.js +127 -0
  616. package/gateway/dist/usage/builtin-plugins/kimi-for-coding.js +93 -0
  617. package/gateway/dist/usage/builtin-plugins/kimi.js +48 -0
  618. package/gateway/dist/usage/builtin-plugins/opencode-go.js +54 -0
  619. package/gateway/dist/usage/builtin-plugins/openrouter.js +48 -0
  620. package/gateway/dist/usage/builtin-plugins/siliconflow-cn.js +49 -0
  621. package/gateway/dist/usage/builtin-plugins/zhipuai-coding-plan.js +44 -0
  622. package/gateway/dist/usage/model-prices.js +39 -0
  623. package/gateway/dist/usage/model-stats.js +21 -0
  624. package/gateway/dist/usage/plugin-context.js +79 -0
  625. package/gateway/dist/usage/plugin-loader.js +280 -0
  626. package/gateway/dist/usage/templates.js +227 -0
  627. package/gateway/dist/usage/types.js +2 -0
  628. package/gateway/dist/usage/usage-poller.js +216 -0
  629. package/gateway/package.json +37 -0
  630. package/package.json +78 -0
  631. package/packages/tui/dist/cli.js +4664 -0
@@ -0,0 +1,96 @@
1
+ "use strict";
2
+ /**
3
+ * Gateway auth helpers — single source of truth for all auth checks.
4
+ *
5
+ * Channels:
6
+ * 1. HTTP API: Bearer header / X-API-Token header / ?token= query
7
+ * 2. WebSocket upgrade: same three channels, but rejection is on the raw socket
8
+ * 3. Loopback: 127.0.0.0/8, ::1, ::ffff:127.0.0.1 always bypass token checks
9
+ *
10
+ * Security notes:
11
+ * - Empty apiToken + remote = deny all (not permissive)
12
+ * - Tokens are compared with constant-time === (sufficient for short-lived tokens)
13
+ * - No plaintext tokens are stored; config holds the canonical value
14
+ * - URL token leakage is mitigated by redactLog() in all log paths
15
+ */
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ exports.isLoopbackAddr = isLoopbackAddr;
18
+ exports.authorizeRequest = authorizeRequest;
19
+ exports.authorizeWsUpgrade = authorizeWsUpgrade;
20
+ exports.redactLog = redactLog;
21
+ // ---------------------------------------------------------------------------
22
+ // Loopback detection
23
+ // ---------------------------------------------------------------------------
24
+ function isLoopbackAddr(addr) {
25
+ const a = addr || '';
26
+ return a === '127.0.0.1' || a.startsWith('127.') || a === '::1' || a === '::ffff:127.0.0.1';
27
+ }
28
+ /**
29
+ * Returns true when the request is authorized (loopback or valid token).
30
+ * Used by the HTTP request handler before route dispatch.
31
+ */
32
+ function authorizeRequest(req, apiToken) {
33
+ const addr = req.remoteAddress || '';
34
+ if (isLoopbackAddr(addr))
35
+ return true;
36
+ if (!apiToken)
37
+ return false;
38
+ const bearer = extractBearer(req);
39
+ const xToken = extractXApiToken(req);
40
+ const qToken = extractQueryToken(req);
41
+ return bearer === apiToken || xToken === apiToken || qToken === apiToken;
42
+ }
43
+ const WS_401_BYTES = Buffer.from('HTTP/1.1 401 Unauthorized\r\n\r\n');
44
+ /**
45
+ * Authorize a WebSocket upgrade request. Returns `{ ok: true }` on success,
46
+ * or `{ ok: false, rejectResponse }` with the bytes to write to the raw socket.
47
+ *
48
+ * Accepts the same three channels as HTTP (Bearer / X-API-Token / ?token=).
49
+ */
50
+ function authorizeWsUpgrade(req, apiToken) {
51
+ const addr = req.remoteAddress || '';
52
+ if (isLoopbackAddr(addr))
53
+ return { ok: true };
54
+ if (!apiToken)
55
+ return { ok: false, rejectResponse: WS_401_BYTES };
56
+ const bearer = extractBearer(req);
57
+ const xToken = extractXApiToken(req);
58
+ const qToken = extractQueryToken(req);
59
+ if (bearer === apiToken || xToken === apiToken || qToken === apiToken) {
60
+ return { ok: true };
61
+ }
62
+ return { ok: false, rejectResponse: WS_401_BYTES };
63
+ }
64
+ // ---------------------------------------------------------------------------
65
+ // Token extraction helpers (private)
66
+ // ---------------------------------------------------------------------------
67
+ function extractBearer(req) {
68
+ const h = String(req.headers.authorization || '');
69
+ return h.startsWith('Bearer ') ? h.slice(7) : '';
70
+ }
71
+ function extractXApiToken(req) {
72
+ return String(req.headers['x-api-token'] || '');
73
+ }
74
+ function extractQueryToken(req) {
75
+ try {
76
+ const urlStr = req.url || '/';
77
+ const host = req.host || req.headers.host || 'localhost';
78
+ const u = new URL(urlStr, `http://${host}`);
79
+ return u.searchParams.get('token') || '';
80
+ }
81
+ catch {
82
+ return '';
83
+ }
84
+ }
85
+ // ---------------------------------------------------------------------------
86
+ // Log redaction
87
+ // ---------------------------------------------------------------------------
88
+ /**
89
+ * Replace Bearer tokens and token= query values with *** to prevent
90
+ * plaintext credential leakage in logs.
91
+ */
92
+ function redactLog(s) {
93
+ return s
94
+ .replace(/Bearer\s+[^\s"]+/gi, 'Bearer ***')
95
+ .replace(/([?&]token=)[^&\s"]+/gi, '$1***');
96
+ }
@@ -0,0 +1,52 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.BudgetGuard = void 0;
4
+ class BudgetGuard {
5
+ opts;
6
+ turns = 0;
7
+ fired = false;
8
+ detached = false;
9
+ constructor(opts) {
10
+ this.opts = opts;
11
+ }
12
+ get triggered() { return this.fired; }
13
+ onStep() {
14
+ if (this.fired || this.detached)
15
+ return;
16
+ this.turns++;
17
+ const { maxTurns, maxCostUsd } = this.opts;
18
+ let reason = null;
19
+ if (typeof maxTurns === 'number' && maxTurns > 0 && this.turns >= maxTurns) {
20
+ reason = `maxTurns=${maxTurns}`;
21
+ }
22
+ else if (typeof maxCostUsd === 'number' && maxCostUsd > 0) {
23
+ try {
24
+ if (this.opts.getCostUsd(this.opts.sessionID) >= maxCostUsd)
25
+ reason = `maxCostUsd=${maxCostUsd}`;
26
+ }
27
+ catch { /* 成本查询失败不阻断 */ }
28
+ }
29
+ if (!reason)
30
+ return;
31
+ this.fired = true;
32
+ const sid = this.opts.sessionID;
33
+ const log = this.opts.log ?? (() => { });
34
+ log(`[BudgetGuard] ${sid} budget exceeded (${reason}) — aborting`);
35
+ void (async () => {
36
+ try {
37
+ await this.opts.abort(sid);
38
+ }
39
+ catch (err) {
40
+ log(`[BudgetGuard] abort failed (non-fatal): ${err?.message ?? err}`);
41
+ }
42
+ try {
43
+ await this.opts.notify(sid, `[MAFW] 预算上限已触发(${reason}),会话已中止。调整预算后可重新发起。`);
44
+ }
45
+ catch (err) {
46
+ log(`[BudgetGuard] notify failed (non-fatal): ${err?.message ?? err}`);
47
+ }
48
+ })();
49
+ }
50
+ detach() { this.detached = true; }
51
+ }
52
+ exports.BudgetGuard = BudgetGuard;
@@ -0,0 +1,176 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ exports.BM25Index = void 0;
37
+ const fs = __importStar(require("fs"));
38
+ class BM25Index {
39
+ invertedIndex = new Map();
40
+ docLengths = new Map();
41
+ avgDocLength = 0;
42
+ k1 = 1.2;
43
+ b = 0.75;
44
+ docContents = new Map();
45
+ constructor(config) {
46
+ if (config?.k1 !== undefined)
47
+ this.k1 = config.k1;
48
+ if (config?.b !== undefined)
49
+ this.b = config.b;
50
+ }
51
+ addDocument(id, text) {
52
+ const tokens = this.tokenize(text);
53
+ this.docLengths.set(id, tokens.length);
54
+ this.docContents.set(id, text);
55
+ const uniqueTokens = new Set(tokens);
56
+ for (const token of uniqueTokens) {
57
+ if (!this.invertedIndex.has(token)) {
58
+ this.invertedIndex.set(token, new Set());
59
+ }
60
+ this.invertedIndex.get(token).add(id);
61
+ }
62
+ const totalLength = Array.from(this.docLengths.values()).reduce((a, b) => a + b, 0);
63
+ this.avgDocLength = totalLength / this.docLengths.size;
64
+ }
65
+ search(query, topK = 10) {
66
+ const tokens = this.tokenize(query);
67
+ if (tokens.length === 0)
68
+ return [];
69
+ const N = this.docLengths.size;
70
+ if (N === 0)
71
+ return [];
72
+ const scores = new Map();
73
+ for (const token of tokens) {
74
+ const matchingDocs = this.invertedIndex.get(token);
75
+ if (!matchingDocs)
76
+ continue;
77
+ const df = matchingDocs.size;
78
+ const idf = Math.log((N - df + 0.5) / (df + 0.5) + 1);
79
+ for (const docId of matchingDocs) {
80
+ const docLength = this.docLengths.get(docId) || 0;
81
+ const tf = this.getTermFreq(docId, token);
82
+ const numerator = tf * (this.k1 + 1);
83
+ const denominator = tf + this.k1 * (1 - this.b + this.b * (docLength / this.avgDocLength));
84
+ const score = idf * (numerator / denominator);
85
+ scores.set(docId, (scores.get(docId) || 0) + score);
86
+ }
87
+ }
88
+ return Array.from(scores.entries())
89
+ .sort((a, b) => b[1] - a[1])
90
+ .slice(0, topK)
91
+ .map(([id, score]) => ({
92
+ id,
93
+ score,
94
+ text: this.docContents.get(id) || ''
95
+ }));
96
+ }
97
+ removeDocument(id) {
98
+ for (const [, docSet] of this.invertedIndex) {
99
+ docSet.delete(id);
100
+ }
101
+ for (const [term, docSet] of this.invertedIndex) {
102
+ if (docSet.size === 0)
103
+ this.invertedIndex.delete(term);
104
+ }
105
+ this.docLengths.delete(id);
106
+ this.docContents.delete(id);
107
+ if (this.docLengths.size > 0) {
108
+ const totalLength = Array.from(this.docLengths.values()).reduce((a, b) => a + b, 0);
109
+ this.avgDocLength = totalLength / this.docLengths.size;
110
+ }
111
+ else {
112
+ this.avgDocLength = 0;
113
+ }
114
+ }
115
+ clear() {
116
+ this.invertedIndex.clear();
117
+ this.docLengths.clear();
118
+ this.docContents.clear();
119
+ this.avgDocLength = 0;
120
+ }
121
+ save(path) {
122
+ const data = {
123
+ invertedIndex: Object.fromEntries(Array.from(this.invertedIndex.entries()).map(([k, v]) => [k, Array.from(v)])),
124
+ docLengths: Object.fromEntries(this.docLengths),
125
+ avgDocLength: this.avgDocLength,
126
+ docContents: Object.fromEntries(this.docContents),
127
+ k1: this.k1,
128
+ b: this.b
129
+ };
130
+ fs.writeFileSync(path, JSON.stringify(data, null, 2), 'utf-8');
131
+ }
132
+ load(path) {
133
+ const raw = fs.readFileSync(path, 'utf-8');
134
+ const data = JSON.parse(raw);
135
+ this.invertedIndex = new Map(Object.entries(data.invertedIndex).map(([k, v]) => [k, new Set(v)]));
136
+ this.docLengths = new Map(Object.entries(data.docLengths));
137
+ this.avgDocLength = data.avgDocLength;
138
+ this.docContents = new Map(Object.entries(data.docContents));
139
+ this.k1 = data.k1;
140
+ this.b = data.b;
141
+ }
142
+ get size() {
143
+ return this.docLengths.size;
144
+ }
145
+ tokenize(text) {
146
+ const tokens = text
147
+ .toLowerCase()
148
+ .replace(/[^\u4e00-\u9fff\w]/g, ' ')
149
+ .split(/\s+/)
150
+ .filter(t => t.length >= 2);
151
+ return tokens.map(t => {
152
+ if (t.length < 5)
153
+ return t;
154
+ const suffixes = ['ing', 'ed', 'es', 'ly', 'tion', 's'];
155
+ for (const suffix of suffixes) {
156
+ if (t.endsWith(suffix) && t.length > suffix.length) {
157
+ let stemmed = t.slice(0, -suffix.length);
158
+ if (stemmed.length >= 2 && stemmed[stemmed.length - 1] === stemmed[stemmed.length - 2]) {
159
+ stemmed = stemmed.slice(0, -1);
160
+ }
161
+ if (stemmed.length >= 2)
162
+ return stemmed;
163
+ }
164
+ }
165
+ return t;
166
+ });
167
+ }
168
+ getTermFreq(docId, term) {
169
+ const content = this.docContents.get(docId);
170
+ if (!content)
171
+ return 1;
172
+ const tokens = this.tokenize(content);
173
+ return tokens.filter(t => t === term).length;
174
+ }
175
+ }
176
+ exports.BM25Index = BM25Index;
@@ -0,0 +1,157 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.CompressionPipeline = void 0;
4
+ const observation_deduplicator_1 = require("./observation-deduplicator");
5
+ const observation_classifier_1 = require("./observation-classifier");
6
+ const zero_token_compressor_1 = require("./zero-token-compressor");
7
+ const hybrid_compressor_1 = require("./hybrid-compressor");
8
+ const diff_compressor_1 = require("./diff-compressor");
9
+ const compression_strategy_selector_1 = require("./compression-strategy-selector");
10
+ class CompressionPipeline {
11
+ deduplicator;
12
+ classifier;
13
+ zeroToken;
14
+ llm;
15
+ diff;
16
+ selector;
17
+ privacyFilter;
18
+ t1Store;
19
+ constructor(config) {
20
+ this.deduplicator = new observation_deduplicator_1.ObservationDeduplicator();
21
+ this.classifier = new observation_classifier_1.ObservationClassifier();
22
+ this.zeroToken = new zero_token_compressor_1.ZeroTokenCompressor();
23
+ this.llm = new hybrid_compressor_1.HybridCompressor(undefined, config?.harmonicIndex, config?.baseDir);
24
+ this.diff = new diff_compressor_1.DiffCompressor();
25
+ this.selector = new compression_strategy_selector_1.CompressionStrategySelector();
26
+ if (config?.privacyFilter) {
27
+ this.privacyFilter = config.privacyFilter;
28
+ }
29
+ this.t1Store = config?.t1Store;
30
+ }
31
+ async process(observations) {
32
+ const stats = {
33
+ input: observations.length,
34
+ duplicates: 0,
35
+ filtered: 0,
36
+ compressed: 0,
37
+ merged: 0,
38
+ output: 0,
39
+ };
40
+ let current = [...observations];
41
+ const deduplicated = this.deduplicator.deduplicate(current);
42
+ stats.duplicates = current.length - deduplicated.length;
43
+ current = deduplicated;
44
+ if (this.t1Store && current.length > 0) {
45
+ const goalId = current[0]?.goalId;
46
+ this.t1Store.appendBatch(current, goalId);
47
+ stats.t1Written = current.length;
48
+ stats.t1Total = this.t1Store.getCount(goalId);
49
+ }
50
+ if (this.privacyFilter) {
51
+ current = current.map((obs) => this.privacyFilter.filterObservation(obs));
52
+ }
53
+ stats.filtered = 0;
54
+ const groups = this.classifier.classifyBatch(current);
55
+ const allCompressed = [];
56
+ for (const [, group] of groups) {
57
+ const strategy = this.selector.select(group);
58
+ let compressed;
59
+ switch (strategy) {
60
+ case 'diff': {
61
+ const diffResult = this.diff.compress(group);
62
+ compressed = [diffResult];
63
+ break;
64
+ }
65
+ case 'zero-token':
66
+ compressed = this.zeroToken.compress(group);
67
+ break;
68
+ case 'template':
69
+ compressed = this.compressTemplate(group);
70
+ break;
71
+ case 'llm':
72
+ default: {
73
+ const llmResult = await this.llm.compress(group);
74
+ compressed = [{
75
+ id: llmResult.id,
76
+ type: 'llm_compressed',
77
+ facts: [llmResult.memory_value || ''],
78
+ concepts: llmResult.cue_anchors || [],
79
+ energy: llmResult.energy || 0.5,
80
+ sourceLoops: group.map((o) => o.loopNum || 0)
81
+ }];
82
+ break;
83
+ }
84
+ }
85
+ allCompressed.push(...compressed);
86
+ }
87
+ stats.compressed = allCompressed.length;
88
+ const merged = this.mergeSimilar(allCompressed);
89
+ stats.merged = allCompressed.length - merged.length;
90
+ stats.output = merged.length;
91
+ return { compressed: merged, stats };
92
+ }
93
+ mergeSimilar(memories) {
94
+ const merged = [];
95
+ const used = new Set();
96
+ for (let i = 0; i < memories.length; i++) {
97
+ if (used.has(i))
98
+ continue;
99
+ let base = { ...memories[i] };
100
+ used.add(i);
101
+ for (let j = i + 1; j < memories.length; j++) {
102
+ if (used.has(j))
103
+ continue;
104
+ const similarity = this.jaccardSimilarity(base.concept, memories[j].concept);
105
+ if (similarity > 0.85) {
106
+ base.facts = this.mergeFacts(base.facts, memories[j].facts);
107
+ base.energy = (base.energy + memories[j].energy) / 2;
108
+ base.sourceLoops = this.mergeSourceLoops(base.sourceLoops, memories[j].sourceLoops);
109
+ used.add(j);
110
+ }
111
+ }
112
+ merged.push(base);
113
+ }
114
+ return merged;
115
+ }
116
+ jaccardSimilarity(a, b) {
117
+ if (!a || !b)
118
+ return 0;
119
+ const setA = new Set(a.toLowerCase().split(/[-\s_]+/));
120
+ const setB = new Set(b.toLowerCase().split(/[-\s_]+/));
121
+ const intersection = new Set([...setA].filter((x) => setB.has(x)));
122
+ const union = new Set([...setA, ...setB]);
123
+ return union.size === 0 ? 0 : intersection.size / union.size;
124
+ }
125
+ compressTemplate(group) {
126
+ return group.map((obs) => ({
127
+ id: `template_${obs.timestamp || Date.now()}`,
128
+ type: 'observation',
129
+ fact: typeof obs.content === 'string' ? obs.content.substring(0, 80) : '',
130
+ concept: 'observation',
131
+ energy: 0.4,
132
+ timestamp: obs.timestamp || Date.now(),
133
+ loopNum: obs.loopNum || 0,
134
+ }));
135
+ }
136
+ mergeFacts(a, b) {
137
+ if (Array.isArray(a) && Array.isArray(b)) {
138
+ return [...new Set([...a, ...b])];
139
+ }
140
+ if (typeof a === 'string' && typeof b === 'string') {
141
+ return a !== b ? `${a}; ${b}` : a;
142
+ }
143
+ return a || b;
144
+ }
145
+ mergeSourceLoops(a, b) {
146
+ if (Array.isArray(a) && Array.isArray(b)) {
147
+ return [...new Set([...a, ...b])];
148
+ }
149
+ const set = new Set();
150
+ if (a !== undefined)
151
+ set.add(a);
152
+ if (b !== undefined)
153
+ set.add(b);
154
+ return [...set];
155
+ }
156
+ }
157
+ exports.CompressionPipeline = CompressionPipeline;
@@ -0,0 +1,32 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.CompressionStrategySelector = void 0;
4
+ const zero_token_compressor_1 = require("./zero-token-compressor");
5
+ class CompressionStrategySelector {
6
+ select(observations) {
7
+ const allFileEdits = observations.every((o) => o.type === 'file_edit' || (o.content && o.content.includes('File modified')));
8
+ if (allFileEdits && observations.length > 0) {
9
+ return 'diff';
10
+ }
11
+ const matchRate = this.calculatePatternMatchRate(observations);
12
+ if (matchRate > 0.8) {
13
+ return 'zero-token';
14
+ }
15
+ if (observations.length < 3 && observations.length > 0) {
16
+ const allSimple = observations.every((o) => typeof o.content === 'string' && o.content.length < 200);
17
+ if (allSimple) {
18
+ return 'template';
19
+ }
20
+ }
21
+ return 'llm';
22
+ }
23
+ calculatePatternMatchRate(observations) {
24
+ if (observations.length === 0)
25
+ return 0;
26
+ const compressor = new zero_token_compressor_1.ZeroTokenCompressor();
27
+ const compressed = compressor.compress(observations);
28
+ const matched = compressed.filter((c) => c.concept !== 'misc').length;
29
+ return matched / observations.length;
30
+ }
31
+ }
32
+ exports.CompressionStrategySelector = CompressionStrategySelector;
@@ -0,0 +1,79 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.CompressionVerifier = void 0;
4
+ /**
5
+ * Compression Verifier — 压缩完整性验证器
6
+ *
7
+ * 职责:在 L2 Compaction 后,运行 5 项验证清单,确保压缩不丢失关键信息。
8
+ *
9
+ * 5 项验证:
10
+ * 1. loop 不丢失
11
+ * 2. result 不丢失
12
+ * 3. domain 不丢失
13
+ * 4. lesson 核心动作不丢失
14
+ * 5. violation.rule 不丢失(若存在)
15
+ */
16
+ class CompressionVerifier {
17
+ checks = [
18
+ {
19
+ ruleId: 'V1',
20
+ description: 'loop 字段不能丢失',
21
+ check: (orig, comp) => comp.loop === orig.loop
22
+ },
23
+ {
24
+ ruleId: 'V2',
25
+ description: 'result 字段不能丢失',
26
+ check: (orig, comp) => comp.result === orig.result
27
+ },
28
+ {
29
+ ruleId: 'V3',
30
+ description: 'domain 字段不能丢失',
31
+ check: (orig, comp) => comp.domain === orig.domain
32
+ },
33
+ {
34
+ ruleId: 'V4',
35
+ description: 'lesson 核心动作不能丢失',
36
+ check: (orig, comp) => {
37
+ const actionVerbs = ['必须', '禁止', '应该', '不得', '需要', 'must', 'must not', 'should', 'need to', 'ensure'];
38
+ const hasAction = actionVerbs.some(v => orig.lesson.toLowerCase().includes(v.toLowerCase()));
39
+ if (!hasAction)
40
+ return true; // 原 lesson 无动作词,无需检查
41
+ return actionVerbs.some(v => comp.lesson.toLowerCase().includes(v.toLowerCase()));
42
+ }
43
+ },
44
+ {
45
+ ruleId: 'V5',
46
+ description: 'violation.rule 不能丢失(若存在)',
47
+ check: (orig, comp) => {
48
+ if (!orig.violation)
49
+ return true;
50
+ return !!comp.violation && comp.violation.rule === orig.violation.rule;
51
+ }
52
+ }
53
+ ];
54
+ /**
55
+ * 验证单个 CompactedLesson
56
+ */
57
+ verify(original, compacted) {
58
+ const failures = [];
59
+ for (const c of this.checks) {
60
+ if (!c.check(original, compacted)) {
61
+ failures.push(`[${c.ruleId}] ${c.description}`);
62
+ }
63
+ }
64
+ return { pass: failures.length === 0, failures };
65
+ }
66
+ /**
67
+ * 批量验证 lessons 文件
68
+ */
69
+ verifyFile(lessons) {
70
+ const failures = [];
71
+ for (const lesson of lessons) {
72
+ if (!lesson._compacted) {
73
+ failures.push(`[UNCOMPACTED] Lesson loop=${lesson.loop} 未标记 _compacted`);
74
+ }
75
+ }
76
+ return { pass: failures.length === 0, failures };
77
+ }
78
+ }
79
+ exports.CompressionVerifier = CompressionVerifier;
@@ -0,0 +1,69 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.DiffCompressor = void 0;
4
+ class DiffCompressor {
5
+ compress(fileChanges) {
6
+ if (!fileChanges || fileChanges.length === 0) {
7
+ return {
8
+ type: 'diff',
9
+ facts: [],
10
+ concepts: [],
11
+ energy: 0,
12
+ sourceLoops: [],
13
+ };
14
+ }
15
+ const files = new Set();
16
+ let added = 0;
17
+ let modified = 0;
18
+ let deleted = 0;
19
+ const keyPatterns = [/auth/i, /jwt/i, /security/i, /config/i, /api/i];
20
+ const keyChanges = [];
21
+ const sourceLoops = new Set();
22
+ const concepts = new Set();
23
+ for (const change of fileChanges) {
24
+ if (change.filePath) {
25
+ files.add(change.filePath);
26
+ }
27
+ if (change.type === 'add' || change.status === 'added') {
28
+ added++;
29
+ }
30
+ else if (change.type === 'delete' || change.status === 'deleted') {
31
+ deleted++;
32
+ }
33
+ else {
34
+ modified++;
35
+ }
36
+ if (change.loopNum !== undefined) {
37
+ sourceLoops.add(change.loopNum);
38
+ }
39
+ const checkText = `${change.filePath || ''} ${change.content || ''}`;
40
+ for (const pattern of keyPatterns) {
41
+ if (pattern.test(checkText)) {
42
+ keyChanges.push(change.filePath || 'unknown');
43
+ break;
44
+ }
45
+ }
46
+ if (change.filePath) {
47
+ const parts = change.filePath.replace(/\\/g, '/').split('/');
48
+ for (const part of parts) {
49
+ if (part.length > 2 && !concepts.has(part)) {
50
+ concepts.add(part);
51
+ }
52
+ }
53
+ }
54
+ }
55
+ const facts = [];
56
+ facts.push(`Files changed: ${files.size} (${added} added, ${modified} modified, ${deleted} deleted)`);
57
+ if (keyChanges.length > 0) {
58
+ facts.push(`Key changes: ${[...new Set(keyChanges)].join(', ')}`);
59
+ }
60
+ return {
61
+ type: 'diff',
62
+ facts,
63
+ concepts: [...concepts].slice(0, 10),
64
+ energy: Math.min(1, fileChanges.length / 10),
65
+ sourceLoops: [...sourceLoops],
66
+ };
67
+ }
68
+ }
69
+ exports.DiffCompressor = DiffCompressor;