@lumenflow/cli 3.6.6 → 3.6.7

package/packs/sidekick/manifest.yaml

@@ -0,0 +1,406 @@
+id: sidekick
+version: 0.1.0
+config_key: sidekick
+task_types:
+  - sidekick
+tools:
+  - name: task:create
+    entry: tool-impl/task-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        title:
+          type: string
+          minLength: 1
+        description:
+          type: string
+        priority:
+          type: string
+          enum: [P0, P1, P2, P3]
+        due_at:
+          type: string
+        tags:
+          type: array
+          items: { type: string }
+        dry_run:
+          type: boolean
+      required: [title]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: task:list
+    entry: tool-impl/task-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties:
+        status:
+          type: string
+          enum: [pending, done]
+        priority:
+          type: string
+          enum: [P0, P1, P2, P3]
+        tags:
+          type: array
+          items: { type: string }
+        search:
+          type: string
+        due_before:
+          type: string
+        limit:
+          type: integer
+          minimum: 1
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: task:complete
+    entry: tool-impl/task-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        id:
+          type: string
+          minLength: 1
+        note:
+          type: string
+        dry_run:
+          type: boolean
+      required: [id]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: task:schedule
+    entry: tool-impl/task-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        id:
+          type: string
+          minLength: 1
+        due_at:
+          type: string
+        cron:
+          type: string
+        dry_run:
+          type: boolean
+      required: [id]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: memory:store
+    entry: tool-impl/memory-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        type:
+          type: string
+          enum: [fact, preference, note, snippet]
+        content:
+          type: string
+          minLength: 1
+        tags:
+          type: array
+          items: { type: string }
+        dry_run:
+          type: boolean
+      required: [type, content]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: memory:recall
+    entry: tool-impl/memory-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties:
+        query:
+          type: string
+        type:
+          type: string
+          enum: [fact, preference, note, snippet]
+        tags:
+          type: array
+          items: { type: string }
+        limit:
+          type: integer
+          minimum: 1
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: memory:forget
+    entry: tool-impl/memory-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        id:
+          type: string
+          minLength: 1
+        dry_run:
+          type: boolean
+      required: [id]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: channel:configure
+    entry: tool-impl/channel-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        name:
+          type: string
+          minLength: 1
+        type:
+          type: string
+          enum: [terminal]
+        dry_run:
+          type: boolean
+      required: [name]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: channel:send
+    entry: tool-impl/channel-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        channel:
+          type: string
+        content:
+          type: string
+          minLength: 1
+        sender:
+          type: string
+        dry_run:
+          type: boolean
+      required: [content]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: channel:receive
+    entry: tool-impl/channel-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties:
+        channel:
+          type: string
+        limit:
+          type: integer
+          minimum: 1
+        since:
+          type: string
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: routine:create
+    entry: tool-impl/routine-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties:
+        name:
+          type: string
+          minLength: 1
+        steps:
+          type: array
+          minItems: 1
+          items:
+            type: object
+            properties:
+              tool:
+                type: string
+                minLength: 1
+              input:
+                type: object
+                additionalProperties: true
+            required: [tool]
+            additionalProperties: false
+        cron:
+          type: string
+        enabled:
+          type: boolean
+        dry_run:
+          type: boolean
+      required: [name, steps]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: routine:list
+    entry: tool-impl/routine-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties:
+        enabled_only:
+          type: boolean
+        limit:
+          type: integer
+          minimum: 1
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: routine:run
+    entry: tool-impl/routine-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties:
+        id:
+          type: string
+          minLength: 1
+      required: [id]
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: sidekick:init
+    entry: tool-impl/system-tools.ts
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+      - type: path
+        pattern: .sidekick/**
+        access: write
+    input_schema:
+      type: object
+      properties: {}
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: sidekick:status
+    entry: tool-impl/system-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties: {}
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+  - name: sidekick:export
+    entry: tool-impl/system-tools.ts
+    permission: read
+    required_scopes:
+      - type: path
+        pattern: .sidekick/**
+        access: read
+    input_schema:
+      type: object
+      properties:
+        include_audit:
+          type: boolean
+      additionalProperties: false
+    output_schema:
+      type: object
+      additionalProperties: true
+policies:
+  - id: sidekick.policy.default
+    trigger: on_tool_request
+    decision: allow
+    reason: Default sidekick policy permits declared tools within scoped access.
+evidence_types:
+  - sidekick.audited.tool-call
+state_aliases: {}
+lane_templates: []

package/packs/sidekick/pack-registration.ts

@@ -0,0 +1,110 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: AGPL-3.0-only
+
+import { createHash } from 'node:crypto';
+import { readdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { SHA256_ALGORITHM, SIDEKICK_MANIFEST_FILE_NAME, UTF8_ENCODING } from './constants.js';
+import { SIDEKICK_MANIFEST } from './manifest.js';
+import type { SidekickPackManifest } from './manifest-schema.js';
+
+const NULL_BYTE_BUFFER = Buffer.from([0]);
+const DEFAULT_EXCLUSIONS = ['node_modules/', '.git/', 'dist/', '.DS_Store'];
+
+function getDefaultPackRoot(): string {
+  return path.dirname(fileURLToPath(import.meta.url));
+}
+
+function normalizeRelativePath(root: string, absolutePath: string): string {
+  return path.relative(root, absolutePath).split(path.sep).join('/');
+}
+
+function shouldExclude(relativePath: string, exclusions: readonly string[]): boolean {
+  return exclusions.some((excluded) => {
+    if (excluded.endsWith('/')) {
+      return relativePath.startsWith(excluded);
+    }
+    return relativePath === excluded || relativePath.endsWith(`/${excluded}`);
+  });
+}
+
+async function collectFilesRecursive(root: string, directory: string): Promise<string[]> {
+  const entries = await readdir(directory, { withFileTypes: true });
+  const sortedEntries = [...entries].sort((left, right) => left.name.localeCompare(right.name));
+  const files: string[] = [];
+
+  for (const entry of sortedEntries) {
+    const absolutePath = path.join(directory, entry.name);
+    const relativePath = normalizeRelativePath(root, absolutePath);
+    if (entry.isDirectory()) {
+      files.push(...(await collectFilesRecursive(root, absolutePath)));
+      continue;
+    }
+    files.push(relativePath);
+  }
+
+  return files;
+}
+
+async function listPackFiles(packRoot: string, exclusions: readonly string[]): Promise<string[]> {
+  const absoluteRoot = path.resolve(packRoot);
+  const allFiles = await collectFilesRecursive(absoluteRoot, absoluteRoot);
+  return allFiles.filter((relativePath) => !shouldExclude(relativePath, exclusions)).sort();
+}
+
+export async function computeSidekickPackIntegrity(
+  packRoot = getDefaultPackRoot(),
+  exclusions: readonly string[] = DEFAULT_EXCLUSIONS,
+): Promise<`sha256:${string}`> {
+  const absoluteRoot = path.resolve(packRoot);
+  const files = await listPackFiles(absoluteRoot, exclusions);
+  const digestChunks: Buffer[] = [];
+
+  for (const relativePath of files) {
+    const fileContents = await readFile(path.join(absoluteRoot, relativePath));
+    const fileHash = createHash(SHA256_ALGORITHM).update(fileContents).digest('hex');
+    digestChunks.push(Buffer.from(relativePath, UTF8_ENCODING));
+    digestChunks.push(NULL_BYTE_BUFFER);
+    digestChunks.push(Buffer.from(fileHash, UTF8_ENCODING));
+    digestChunks.push(NULL_BYTE_BUFFER);
+  }
+
+  const combinedDigest = createHash(SHA256_ALGORITHM)
+    .update(digestChunks.length === 0 ? Buffer.alloc(0) : Buffer.concat(digestChunks))
+    .digest('hex');
+
+  return `sha256:${combinedDigest}`;
+}
+
+export async function loadSidekickManifest(
+  packRoot = getDefaultPackRoot(),
+): Promise<SidekickPackManifest> {
+  const manifestPath = path.join(path.resolve(packRoot), SIDEKICK_MANIFEST_FILE_NAME);
+  await readFile(manifestPath, UTF8_ENCODING);
+  return structuredClone(SIDEKICK_MANIFEST);
+}
+
+export interface RegisteredSidekickPack {
+  manifest: SidekickPackManifest;
+  packRoot: string;
+  manifestPath: string;
+  integrity: `sha256:${string}`;
+}
+
+export async function registerSidekickPack(options?: {
+  packRoot?: string;
+  exclusions?: readonly string[];
+}): Promise<RegisteredSidekickPack> {
+  const packRoot = path.resolve(options?.packRoot ?? getDefaultPackRoot());
+  const exclusions = options?.exclusions ?? DEFAULT_EXCLUSIONS;
+  const manifest = await loadSidekickManifest(packRoot);
+  const integrity = await computeSidekickPackIntegrity(packRoot, exclusions);
+
+  return {
+    manifest,
+    packRoot,
+    manifestPath: path.join(packRoot, SIDEKICK_MANIFEST_FILE_NAME),
+    integrity,
+  };
+}

package/packs/sidekick/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@lumenflow/packs-sidekick",
+  "version": "3.6.6",
+  "description": "Sidekick personal assistant pack for LumenFlow — 16 tools for task management, typed memory, channels, routines, and audit",
+  "keywords": [
+    "lumenflow",
+    "pack",
+    "sidekick",
+    "personal-assistant",
+    "task-management",
+    "memory"
+  ],
+  "homepage": "https://github.com/hellmai/lumenflow-dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hellmai/lumenflow-dev.git",
+    "directory": "packages/@lumenflow/packs/sidekick"
+  },
+  "license": "AGPL-3.0-only",
+  "author": {
+    "name": "HellmAI",
+    "url": "https://hellm.ai"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./dist/index.js",
+    "./storage": "./dist/tool-impl/storage.js",
+    "./tools": "./dist/tools/index.js",
+    "./tool-impl": "./dist/tool-impl/index.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "manifest.yaml",
+    "LICENSE.md",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist *.tgz",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}