@mandujs/core 0.53.0 → 0.53.2

package/src/kitchen/kitchen-handler.ts

@@ -11,17 +11,26 @@ import { getGlobalCache, getCacheStoreStats } from "../runtime/cache";
 import { ActivitySSEBroadcaster } from "./stream/activity-sse";
 import { GuardAPI } from "./api/guard-api";
 import { handleRoutesRequest } from "./api/routes-api";
-import { FileAPI } from "./api/file-api";
-import { GuardDecisionManager } from "./api/guard-decisions";
-import { ContractPlaygroundAPI } from "./api/contract-api";
-import { renderKitchenHTML } from "./kitchen-ui";
-import { eventBus } from "../observability/event-bus";
-import fs from "fs/promises";
-import path from "path";
-
-export const KITCHEN_PREFIX = "/__kitchen";
-
-export interface KitchenOptions {
+import { FileAPI } from "./api/file-api";
+import { GuardDecisionManager } from "./api/guard-decisions";
+import { ContractPlaygroundAPI } from "./api/contract-api";
+import { handleAgentContextRequest } from "./api/agent-devtools-api";
+import { renderKitchenHTML } from "./kitchen-ui";
+import { eventBus } from "../observability/event-bus";
+import fs from "fs/promises";
+import path from "path";
+
+export const KITCHEN_PREFIX = "/__kitchen";
+
+function reverseCopy<T>(items: readonly T[]): T[] {
+  const reversed: T[] = [];
+  for (let index = items.length - 1; index >= 0; index -= 1) {
+    reversed.push(items[index] as T);
+  }
+  return reversed;
+}
+
+export interface KitchenOptions {
   rootDir: string;
   manifest: RoutesManifest;
   guardConfig: GuardConfig | null;
@@ -74,9 +83,9 @@ export function recordRequest(entry: RequestEntry): void {
   if (recentRequests.length > MAX_REQUESTS) recentRequests.shift();
 }
 
-export function getRecentRequests(): RequestEntry[] {
-  return [...recentRequests].reverse();
-}
+export function getRecentRequests(): RequestEntry[] {
+  return reverseCopy(recentRequests);
+}
 
 /** Parse a window string like "5m", "30s", "1h" into milliseconds. */
 function parseWindow(input: string): number {
@@ -220,10 +229,11 @@ export class KitchenHandler {
     this.contractAPI.updateManifest(manifest);
   }
 
-  /** Update guard config when mandu.config.ts changes */
-  updateGuardConfig(config: GuardConfig | null): void {
-    this.guardAPI.updateConfig(config);
-  }
+  /** Update guard config when mandu.config.ts changes */
+  updateGuardConfig(config: GuardConfig | null): void {
+    this.options.guardConfig = config;
+    this.guardAPI.updateConfig(config);
+  }
 
   /** Get the SSE broadcaster for external event injection */
   get broadcaster(): ActivitySSEBroadcaster {
@@ -322,11 +332,11 @@ export class KitchenHandler {
     // Requests API — recent HTTP events from eventBus (fallback: ring buffer)
     if (sub === "/api/requests" && req.method === "GET") {
       const url = new URL(req.url);
-      const limit = Math.min(parseInt(url.searchParams.get("limit") || "100", 10) || 100, 500);
-      const busEvents = eventBus.getRecent(limit, { type: "http" });
-      if (busEvents.length > 0) {
-        return Response.json({ requests: busEvents.slice().reverse() });
-      }
+      const limit = Math.min(parseInt(url.searchParams.get("limit") || "100", 10) || 100, 500);
+      const busEvents = eventBus.getRecent(limit, { type: "http" });
+      if (busEvents.length > 0) {
+        return Response.json({ requests: reverseCopy(busEvents) });
+      }
       return Response.json({ requests: getRecentRequests().slice(0, limit) });
     }
 
@@ -343,21 +353,36 @@ export class KitchenHandler {
     // Activity API — recent MCP events from eventBus (fallback: activity.jsonl)
     if (sub === "/api/activity" && req.method === "GET") {
       const url = new URL(req.url);
-      const limit = Math.min(parseInt(url.searchParams.get("limit") || "100", 10) || 100, 500);
-      const busEvents = eventBus.getRecent(limit, { type: "mcp" });
-      if (busEvents.length > 0) {
-        return Response.json({ events: busEvents.slice().reverse() });
-      }
+      const limit = Math.min(parseInt(url.searchParams.get("limit") || "100", 10) || 100, 500);
+      const busEvents = eventBus.getRecent(limit, { type: "mcp" });
+      if (busEvents.length > 0) {
+        return Response.json({ events: reverseCopy(busEvents) });
+      }
       const events = await this.readRecentActivity();
       return Response.json({ events });
     }
 
     // Agent Stats API — per-agent (sessionId) aggregation of MCP events
-    if (sub === "/api/agent-stats" && req.method === "GET") {
-      return Response.json(computeAgentStats());
-    }
-
-    // Cache API — cache store stats
+    if (sub === "/api/agent-stats" && req.method === "GET") {
+      return Response.json(computeAgentStats());
+    }
+
+    // Agent DevTools API — read-only context pack for supervised coding sessions
+    if (sub === "/api/agent-context" && req.method === "GET") {
+      return handleAgentContextRequest({
+        rootDir: this.options.rootDir,
+        manifest: this.manifest,
+        guardEnabled: !!this.options.guardConfig,
+        errors: getKitchenErrors(),
+        requests: getRecentRequests().slice(0, 100),
+        httpEvents: eventBus.getRecent(100, { type: "http" }),
+        mcpEvents: eventBus.getRecent(100, { type: "mcp" }),
+        guardEvents: eventBus.getRecent(100, { type: "guard" }),
+        agentStats: computeAgentStats(),
+      });
+    }
+
+    // Cache API — cache store stats
     if ((sub === "/api/cache" || sub === "/api/cache-stats") && req.method === "GET") {
       const store = getGlobalCache();
       return Response.json({
@@ -488,11 +513,11 @@ export class KitchenHandler {
   private async readRecentActivity(): Promise<unknown[]> {
     const logPath = path.join(this.options.rootDir, ".mandu", "activity.jsonl");
     try {
-      const content = await fs.readFile(logPath, "utf-8");
-      const lines = content.trim().split("\n").filter(Boolean);
-      return lines.slice(-50).reverse().map((line) => {
-        try { return JSON.parse(line); } catch { return null; }
-      }).filter(Boolean);
+      const content = await fs.readFile(logPath, "utf-8");
+      const lines = content.trim().split("\n").filter(Boolean);
+      return reverseCopy(lines.slice(-50)).map((line) => {
+        try { return JSON.parse(line); } catch { return null; }
+      }).filter(Boolean);
     } catch { return []; }
   }
 }

package/src/kitchen/kitchen-ui.ts

@@ -57,12 +57,13 @@ export function renderKitchenHTML(): string {
       </div>
     </section>
 
-    <nav class="tabs">
-      <button class="tab" data-panel="activity">Activity</button>
-      <button class="tab active" data-panel="routes">Routes</button>
-      <button class="tab" data-panel="guard">Guard</button>
-      <button class="tab" data-panel="preview">Preview</button>
-      <button class="tab" data-panel="contracts">Contracts</button>
+    <nav class="tabs">
+      <button class="tab" data-panel="activity">Activity</button>
+      <button class="tab" data-panel="agent">Agent</button>
+      <button class="tab active" data-panel="routes">Routes</button>
+      <button class="tab" data-panel="guard">Guard</button>
+      <button class="tab" data-panel="preview">Preview</button>
+      <button class="tab" data-panel="contracts">Contracts</button>
       <button class="tab" data-panel="requests">Requests</button>
       <button class="tab" data-panel="mcp-activity">MCP</button>
       <button class="tab" data-panel="cache">Cache</button>
@@ -70,24 +71,37 @@ export function renderKitchenHTML(): string {
     </nav>
 
     <main class="panels">
-      <section id="panel-activity" class="panel">
-        <div class="panel-header">
-          <div>
-            <h2>Activity Stream</h2>
-            <p class="panel-subtitle">Recent Kitchen events and MCP activity.</p>
+      <section id="panel-activity" class="panel">
+        <div class="panel-header">
+          <div>
+            <h2>Activity Stream</h2>
+            <p class="panel-subtitle">Recent Kitchen events and MCP activity.</p>
           </div>
           <button id="clear-activity" class="btn-sm">Clear</button>
         </div>
         <div id="activity-list" class="activity-list">
           <div class="empty-state">Waiting for MCP activity...</div>
-        </div>
-      </section>
-
-      <section id="panel-routes" class="panel active">
-        <div class="panel-header">
-          <div>
-            <h2>Routes</h2>
-            <p class="panel-subtitle">Current filesystem routes, slots, contracts, and hydration hints.</p>
+        </div>
+      </section>
+
+      <section id="panel-agent" class="panel">
+        <div class="panel-header">
+          <div>
+            <h2>Agent Supervisor</h2>
+            <p class="panel-subtitle">Situation brief, tool routing, prompt pack, and next safe action for supervised agents.</p>
+          </div>
+          <button id="refresh-agent" class="btn-sm">Refresh</button>
+        </div>
+        <div id="agent-content" class="agent-content">
+          <div class="empty-state">Open Agent to build a context pack.</div>
+        </div>
+      </section>
+
+      <section id="panel-routes" class="panel active">
+        <div class="panel-header">
+          <div>
+            <h2>Routes</h2>
+            <p class="panel-subtitle">Current filesystem routes, slots, contracts, and hydration hints.</p>
           </div>
           <div id="routes-summary" class="summary"></div>
         </div>
@@ -1188,11 +1202,141 @@ const CSS = /* css */ `
     box-shadow: 0 12px 28px rgba(30, 42, 58, 0.22);
   }
 
-  .requests-list, .mcp-list, .cache-content, .metrics-content {
-    display: flex;
-    flex-direction: column;
-    gap: 6px;
-  }
+  .requests-list, .mcp-list, .cache-content, .metrics-content, .agent-content {
+    display: flex;
+    flex-direction: column;
+    gap: 6px;
+  }
+
+  .agent-grid {
+    display: grid;
+    grid-template-columns: minmax(0, 1.1fr) minmax(320px, 0.9fr);
+    gap: 14px;
+  }
+
+  .agent-stack {
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+  }
+
+  .agent-card {
+    padding: 14px;
+    border: 1px solid var(--line);
+    border-radius: 8px;
+    background: rgba(255, 255, 255, 0.72);
+  }
+
+  .agent-card-title {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 10px;
+    margin-bottom: 8px;
+    color: var(--ink);
+    font-size: 14px;
+    font-weight: 700;
+  }
+
+  .agent-card-body {
+    color: var(--muted);
+    font-size: 13px;
+    line-height: 1.55;
+  }
+
+  .agent-pill-row {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 6px;
+    margin-top: 10px;
+  }
+
+  .agent-pill {
+    padding: 4px 8px;
+    border-radius: 6px;
+    background: rgba(30, 42, 58, 0.08);
+    color: var(--ink);
+    font-family: "IBM Plex Mono", "Cascadia Code", monospace;
+    font-size: 11px;
+  }
+
+  .agent-severity {
+    padding: 3px 7px;
+    border-radius: 6px;
+    font-size: 11px;
+    font-weight: 700;
+    text-transform: uppercase;
+  }
+
+  .agent-severity.info { background: rgba(46, 102, 184, 0.12); color: var(--info); }
+  .agent-severity.warn { background: rgba(173, 122, 18, 0.14); color: var(--warning); }
+  .agent-severity.error { background: rgba(188, 61, 61, 0.12); color: var(--danger); }
+
+  .agent-stat-grid {
+    display: grid;
+    grid-template-columns: repeat(4, minmax(0, 1fr));
+    gap: 8px;
+    margin-top: 12px;
+  }
+
+  .agent-stat {
+    padding: 10px;
+    border-radius: 8px;
+    border: 1px solid rgba(220, 207, 186, 0.7);
+    background: rgba(255, 253, 250, 0.84);
+  }
+
+  .agent-stat-label {
+    color: var(--muted);
+    font-size: 11px;
+  }
+
+  .agent-stat-value {
+    color: var(--ink);
+    font-size: 19px;
+    font-weight: 700;
+    margin-top: 3px;
+  }
+
+  .agent-rec {
+    display: grid;
+    grid-template-columns: 150px 1fr;
+    gap: 10px;
+    padding: 10px 0;
+    border-top: 1px solid rgba(220, 207, 186, 0.65);
+  }
+
+  .agent-rec:first-child {
+    border-top: 0;
+    padding-top: 0;
+  }
+
+  .agent-rec-title {
+    color: var(--ink);
+    font-weight: 700;
+    font-size: 13px;
+  }
+
+  .agent-rec-detail {
+    color: var(--muted);
+    font-size: 12px;
+    line-height: 1.5;
+  }
+
+  .agent-prompt {
+    width: 100%;
+    min-height: 220px;
+    margin-top: 10px;
+    padding: 12px;
+    resize: vertical;
+    border-radius: 8px;
+    border: 1px solid var(--line);
+    background: #fffdfa;
+    color: var(--ink);
+    font-family: "IBM Plex Mono", "Cascadia Code", monospace;
+    font-size: 12px;
+    line-height: 1.45;
+  }
 
   .req-row {
     display: grid;
@@ -1313,13 +1457,17 @@ const CSS = /* css */ `
       grid-template-columns: repeat(2, minmax(0, 1fr));
     }
 
-    .contracts-layout {
-      grid-template-columns: 1fr;
-    }
-
-    .guard-summary {
-      grid-template-columns: repeat(2, minmax(0, 1fr));
-    }
+    .contracts-layout {
+      grid-template-columns: 1fr;
+    }
+
+    .agent-grid {
+      grid-template-columns: 1fr;
+    }
+
+    .guard-summary {
+      grid-template-columns: repeat(2, minmax(0, 1fr));
+    }
   }
 
   @media (max-width: 720px) {
@@ -1345,12 +1493,20 @@ const CSS = /* css */ `
       width: calc(50% - 4px);
       justify-content: center;
     }
-
-    .panel-header {
-      flex-direction: column;
-    }
-  }
-`;
+
+    .panel-header {
+      flex-direction: column;
+    }
+
+    .agent-stat-grid {
+      grid-template-columns: repeat(2, minmax(0, 1fr));
+    }
+
+    .agent-rec {
+      grid-template-columns: 1fr;
+    }
+  }
+`;
 
 // ─── JavaScript ──────────────────────────────────
 
@@ -1367,12 +1523,12 @@ const JS = /* js */ `
     console.log('[Kitchen]', msg);
   }
 
-  function escapeHtml(str) {
-    if (!str) return '';
-    var d = document.createElement('div');
-    d.appendChild(document.createTextNode(String(str)));
-    return d.innerHTML;
-  }
+  function escapeHtml(str) {
+    if (str === null || str === undefined) return '';
+    var d = document.createElement('div');
+    d.appendChild(document.createTextNode(String(str)));
+    return d.innerHTML;
+  }
 
   function setMetric(id, value) {
     var el = document.getElementById(id);
@@ -1893,9 +2049,10 @@ const JS = /* js */ `
 
   loadContracts();
 
-  // ─── Requests Tab ─────────────────────────────
-  var requestsListEl = document.getElementById('requests-list');
-  var requestsDetailEl = document.getElementById('requests-detail');
+  // ─── Requests Tab ─────────────────────────────
+  var requestsListEl = document.getElementById('requests-list');
+  var requestsDetailEl = document.getElementById('requests-detail');
+  var agentContentEl = document.getElementById('agent-content');
 
   function fetchJson(url, cb) {
     var xhr = new XMLHttpRequest();
@@ -1910,16 +2067,142 @@ const JS = /* js */ `
     xhr.send();
   }
 
-  function statusClass(s) {
-    if (!s) return '';
-    if (s >= 500) return 's5';
-    if (s >= 400) return 's4';
-    if (s >= 300) return 's3';
-    return 's2';
-  }
-
-  function loadRequests() {
-    requestsListEl.innerHTML = '<div class="empty-state">Loading requests...</div>';
+  function statusClass(s) {
+    if (!s) return '';
+    if (s >= 500) return 's5';
+    if (s >= 400) return 's4';
+    if (s >= 300) return 's3';
+    return 's2';
+  }
+
+  // ─── Agent Supervisor Tab ─────────────────────
+  function renderAgentPills(items) {
+    if (!items || !items.length) return '';
+    var html = '<div class="agent-pill-row">';
+    for (var i = 0; i < items.length; i++) {
+      html += '<span class="agent-pill">' + escapeHtml(items[i]) + '</span>';
+    }
+    return html + '</div>';
+  }
+
+  function renderAgentDetails(items) {
+    if (!items || !items.length) return '';
+    var html = '<ul>';
+    for (var i = 0; i < items.length; i++) {
+      html += '<li>' + escapeHtml(items[i]) + '</li>';
+    }
+    return html + '</ul>';
+  }
+
+  function renderAgentContext(data) {
+    var situation = data.situation || {};
+    var summary = data.summary || {};
+    var routes = summary.routes || {};
+    var status = data.agentStatus || {};
+    var brain = status.brain || {};
+    var action = data.nextSafeAction || {};
+    var prompt = data.prompt || {};
+    var recs = data.toolRecommendations || [];
+    var cards = data.knowledgeCards || [];
+    var promptText = prompt.copyText || '';
+
+    var html = '<div class="agent-grid">' +
+      '<div class="agent-stack">' +
+        '<div class="agent-card">' +
+          '<div class="agent-card-title">' +
+            '<span>' + escapeHtml(situation.title || 'No situation') + '</span>' +
+            '<span class="agent-severity ' + escapeHtml(situation.severity || 'info') + '">' + escapeHtml(situation.category || 'agent') + '</span>' +
+          '</div>' +
+          '<div class="agent-card-body">' + renderAgentDetails(situation.details || []) + '</div>' +
+          '<div class="agent-stat-grid">' +
+            '<div class="agent-stat"><div class="agent-stat-label">Routes</div><div class="agent-stat-value">' + escapeHtml(routes.total || 0) + '</div></div>' +
+            '<div class="agent-stat"><div class="agent-stat-label">Islands</div><div class="agent-stat-value">' + escapeHtml(routes.islands || 0) + '</div></div>' +
+            '<div class="agent-stat"><div class="agent-stat-label">Contracts</div><div class="agent-stat-value">' + escapeHtml(routes.contracts || 0) + '</div></div>' +
+            '<div class="agent-stat"><div class="agent-stat-label">MCP Calls</div><div class="agent-stat-value">' + escapeHtml(status.observedToolCalls || 0) + '</div></div>' +
+          '</div>' +
+        '</div>' +
+        '<div class="agent-card">' +
+          '<div class="agent-card-title"><span>Next Safe Action</span><span class="agent-severity info">' + escapeHtml(action.mode || 'observe') + '</span></div>' +
+          '<div class="agent-card-body"><strong>' + escapeHtml(action.title || '-') + '</strong><br>' + escapeHtml(action.reason || '') + '</div>' +
+          renderAgentPills([action.tool || '', action.command || ''].filter(Boolean)) +
+          renderAgentPills(action.validation || []) +
+        '</div>' +
+        '<div class="agent-card">' +
+          '<div class="agent-card-title"><span>Prompt Pack</span><button id="copy-agent-prompt" class="btn-sm">Copy</button></div>' +
+          '<textarea id="agent-prompt-text" class="agent-prompt" readonly>' + escapeHtml(promptText) + '</textarea>' +
+        '</div>' +
+      '</div>' +
+      '<div class="agent-stack">' +
+        '<div class="agent-card">' +
+          '<div class="agent-card-title"><span>Brain</span><span class="agent-severity info">' + escapeHtml(brain.oauth || 'unknown') + '</span></div>' +
+          '<div class="agent-card-body">' + escapeHtml(brain.note || '') + '</div>' +
+          renderAgentPills([brain.statusTool || 'mandu.brain.status']) +
+        '</div>' +
+        '<div class="agent-card">' +
+          '<div class="agent-card-title"><span>Tool Router</span></div>';
+
+    for (var i = 0; i < recs.length; i++) {
+      var r = recs[i];
+      html += '<div class="agent-rec">' +
+        '<div class="agent-rec-title">' + escapeHtml(r.skill) + '</div>' +
+        '<div class="agent-rec-detail">' +
+          '<strong>' + escapeHtml(r.task) + '</strong><br>' +
+          escapeHtml(r.useWhen) +
+          renderAgentPills(r.mcpTools || []) +
+          '<div style="margin-top:6px;">Fallback: <code>' + escapeHtml(r.cliFallback) + '</code></div>' +
+        '</div>' +
+      '</div>';
+    }
+
+    html += '</div><div class="agent-card">' +
+      '<div class="agent-card-title"><span>Knowledge</span></div>';
+
+    for (var c = 0; c < cards.length; c++) {
+      var card = cards[c];
+      html += '<div class="agent-rec">' +
+        '<div class="agent-rec-title">' + escapeHtml(card.title) + '</div>' +
+        '<div class="agent-rec-detail">' + escapeHtml(card.body) + renderAgentPills(card.references || []) + '</div>' +
+      '</div>';
+    }
+
+    html += '</div></div></div>';
+    agentContentEl.innerHTML = html;
+
+    var copyBtn = document.getElementById('copy-agent-prompt');
+    if (copyBtn) {
+      copyBtn.addEventListener('click', function() {
+        var textEl = document.getElementById('agent-prompt-text');
+        var text = textEl ? textEl.value : promptText;
+        if (navigator.clipboard && navigator.clipboard.writeText) {
+          navigator.clipboard.writeText(text).then(function() {
+            copyBtn.textContent = 'Copied';
+            setTimeout(function() { copyBtn.textContent = 'Copy'; }, 900);
+          }).catch(function() {
+            textEl && textEl.select();
+          });
+        } else if (textEl) {
+          textEl.select();
+        }
+      });
+    }
+  }
+
+  function loadAgentContext() {
+    if (!agentContentEl) return;
+    agentContentEl.innerHTML = '<div class="empty-state">Building agent context...</div>';
+    fetchJson('/__kitchen/api/agent-context', function(err, data) {
+      if (err) {
+        agentContentEl.innerHTML = '<div class="empty-state">Failed: ' + escapeHtml(err.message) + '</div>';
+        return;
+      }
+      renderAgentContext(data);
+    });
+  }
+
+  document.getElementById('refresh-agent').addEventListener('click', loadAgentContext);
+
+  function loadRequests() {
+    requestsListEl.innerHTML = '<div class="empty-state">Loading requests...</div>';
     fetchJson('/__kitchen/api/requests?limit=100', function(err, data) {
       if (err) {
         requestsListEl.innerHTML = '<div class="empty-state">Failed: ' + escapeHtml(err.message) + '</div>';
@@ -2116,12 +2399,13 @@ const JS = /* js */ `
   document.getElementById('refresh-metrics').addEventListener('click', loadMetrics);
 
   // Lazy-load new tab data when clicked (avoids loading everything up front)
-  var tabLoaders = {
-    'requests': loadRequests,
-    'mcp-activity': loadMcpActivity,
-    'cache': loadCacheStats,
-    'metrics': loadMetrics
-  };
+  var tabLoaders = {
+    'agent': loadAgentContext,
+    'requests': loadRequests,
+    'mcp-activity': loadMcpActivity,
+    'cache': loadCacheStats,
+    'metrics': loadMetrics
+  };
   var loadedTabs = {};
   for (var t = 0; t < tabs.length; t++) {
     tabs[t].addEventListener('click', function() {

package/src/lockfile/validate.ts

@@ -12,7 +12,6 @@ import {
   type LockfileError,
   type LockfileWarning,
   type LockfileMode,
-  type LockfilePolicyOptions,
   DEFAULT_POLICIES,
   LOCKFILE_SCHEMA_VERSION,
   BYPASS_ENV_VAR,

package/src/openapi/generator.ts

@@ -1,3 +1,4 @@
+import type * as __ManduNodeCryptoTypes0 from "node:crypto";
 /**
  * Mandu OpenAPI Generator
  * Contract에서 OpenAPI 3.0 스펙 자동 생성
@@ -893,7 +894,7 @@ function sha256Hex(input: string): string {
   // path (it would turn `hoistSharedSchemas` into an unnecessarily async
   // cascade on the hot path).
   // eslint-disable-next-line @typescript-eslint/no-require-imports
-  const nodeCrypto = require("node:crypto") as typeof import("node:crypto");
+  const nodeCrypto = require("node:crypto") as typeof __ManduNodeCryptoTypes0;
   return nodeCrypto.createHash("sha256").update(input).digest("hex");
 }