@oni.bot/core 0.6.2 → 0.8.0

package/dist/harness/harness.js

@@ -0,0 +1,140 @@
+// ============================================================
+// @oni.bot/core/harness — ONIHarness Integration Class
+// Wires all harness modules together and bridges to ONI-Core
+// ============================================================
+import { agentLoop, wrapWithAgentLoop } from "./agent-loop.js";
+import { TodoModule } from "./todo-module.js";
+import { HooksEngine } from "./hooks-engine.js";
+import { ContextCompactor } from "./context-compactor.js";
+import { SafetyGate } from "./safety-gate.js";
+import { SkillLoader } from "./skill-loader.js";
+// ─── ONIHarness ───────────────────────────────────────────────────────────
+export class ONIHarness {
+    config;
+    todoModule;
+    hooksEngine;
+    compactor;
+    safetyGate;
+    skillLoader;
+    constructor(config) {
+        this.config = config;
+        // Create TodoModule
+        this.todoModule = new TodoModule();
+        // Create HooksEngine — compose user hooks with security guardrails
+        const userEngine = new HooksEngine();
+        if (config.hooks) {
+            userEngine.configure(config.hooks);
+        }
+        this.hooksEngine = HooksEngine.compose(HooksEngine.withSecurityGuardrails(), userEngine);
+        // Create ContextCompactor with fastModel (or model if no fastModel)
+        const summaryModel = config.fastModel ?? config.model;
+        this.compactor = new ContextCompactor({
+            summaryModel,
+            threshold: config.compaction?.threshold,
+            maxTokens: config.compaction?.maxTokens,
+            charsPerToken: config.compaction?.charsPerToken,
+            compactInstructions: config.compaction?.compactInstructions,
+        });
+        // Create SafetyGate with fastModel (or model)
+        const safetyModel = config.fastModel ?? config.model;
+        this.safetyGate = new SafetyGate({
+            safetyModel,
+            protectedTools: config.safety?.protectedTools,
+            safetySystemPrompt: config.safety?.safetySystemPrompt,
+            timeout: config.safety?.timeout,
+        });
+        // Create SkillLoader — from directories or empty
+        if (config.skillPaths && config.skillPaths.length > 0) {
+            this.skillLoader = SkillLoader.fromDirectories(config.skillPaths);
+        }
+        else {
+            this.skillLoader = new SkillLoader();
+        }
+    }
+    // ── Static Factory ──────────────────────────────────────────────────
+    static create(config) {
+        return new ONIHarness(config);
+    }
+    // ── Private: Build Loop Config ──────────────────────────────────────
+    buildLoopConfig(agentConfig) {
+        // Build systemPrompt from soul fragments + skill descriptions
+        const systemPrompt = [
+            this.config.soul,
+            agentConfig.soul,
+            this.skillLoader.getDescriptionsForContext(),
+        ]
+            .filter(Boolean)
+            .join("\n\n");
+        // Build tools array
+        const tools = [
+            ...this.todoModule.getTools(),
+            this.skillLoader.getSkillTool(),
+            ...(this.config.sharedTools ?? []),
+            ...(agentConfig.tools ?? []),
+        ];
+        return {
+            model: this.config.model,
+            tools,
+            agentName: agentConfig.name,
+            systemPrompt,
+            maxTurns: agentConfig.maxTurns ?? this.config.maxTurns,
+            todoModule: this.todoModule,
+            hooksEngine: this.hooksEngine,
+            compactor: this.compactor,
+            safetyGate: this.safetyGate,
+            skillLoader: this.skillLoader,
+        };
+    }
+    // ── Public: run ─────────────────────────────────────────────────────
+    async *run(prompt, agentConfig) {
+        const config = typeof agentConfig === "string"
+            ? { name: agentConfig }
+            : agentConfig;
+        const loopConfig = this.buildLoopConfig(config);
+        yield* agentLoop(prompt, loopConfig);
+    }
+    // ── Public: runToResult ─────────────────────────────────────────────
+    async runToResult(prompt, agentConfig) {
+        let finalResult = "";
+        for await (const msg of this.run(prompt, agentConfig)) {
+            if (msg.type === "result") {
+                finalResult = msg.content ?? "";
+            }
+        }
+        return finalResult;
+    }
+    // ── Public: asNode ──────────────────────────────────────────────────
+    asNode(agentConfig) {
+        const loopConfig = this.buildLoopConfig(agentConfig);
+        return wrapWithAgentLoop(loopConfig);
+    }
+    // ── Public: asSwarmAgent ────────────────────────────────────────────
+    asSwarmAgent(name, soul, tools, opts) {
+        const agentConfig = { name, soul, tools };
+        const loopConfig = this.buildLoopConfig(agentConfig);
+        return {
+            name,
+            description: opts?.description ?? soul,
+            capabilities: opts?.capabilities ?? [],
+            handler: wrapWithAgentLoop(loopConfig),
+        };
+    }
+    // ── Public: Module Access ───────────────────────────────────────────
+    getTodoModule() {
+        return this.todoModule;
+    }
+    getHooksEngine() {
+        return this.hooksEngine;
+    }
+    getSkillLoader() {
+        return this.skillLoader;
+    }
+    // ── Public: Runtime Registration ────────────────────────────────────
+    registerSkill(skill) {
+        this.skillLoader.register(skill);
+    }
+    addHooks(config) {
+        this.hooksEngine.configure(config);
+    }
+}
+//# sourceMappingURL=harness.js.map

package/dist/harness/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/harness/harness.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,uDAAuD;AACvD,6DAA6D;AAC7D,+DAA+D;AAE/D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmBhD,6EAA6E;AAE7E,MAAM,OAAO,UAAU;IACJ,MAAM,CAAgB;IACtB,UAAU,CAAa;IACvB,WAAW,CAAc;IACzB,SAAS,CAAmB;IAC5B,UAAU,CAAa;IACvB,WAAW,CAAc;IAE1C,YAAoB,MAAqB;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,oBAAoB;QACpB,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;QAEnC,mEAAmE;QACnE,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,OAAO,CACpC,WAAW,CAAC,sBAAsB,EAAE,EACpC,UAAU,CACX,CAAC;QAEF,oEAAoE;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC;YACpC,YAAY;YACZ,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS;YACvC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS;YACvC,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa;YAC/C,mBAAmB,EAAE,MAAM,CAAC,UAAU,EAAE,mBAAmB;SAC5D,CAAC,CAAC;QAEH,8CAA8C;QAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC;YAC/B,WAAW;YACX,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc;YAC7C,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB;YACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;SAChC,CAAC,CAAC;QAEH,iDAAiD;QACjD,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE,MAAM,CAAC,MAAM,CAAC,MAAqB;QACjC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,uEAAuE;IAE/D,eAAe,CAAC,WAA4B;QAClD,8DAA8D;QAC9D,MAAM,YAAY,GAAG;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI;YAChB,WAAW,CAAC,IAAI;YAChB,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE;SAC7C;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,oBAAoB;QACpB,MAAM,KAAK,GAAqB;YAC9B,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC7B,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SAC7B,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,KAAK;YACL,SAAS,EAAE,WAAW,CAAC,IAAI;YAC3B,YAAY;YACZ,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YACtD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,CAAC,GAAG,CACR,MAAc,EACd,WAAqC;QAErC,MAAM,MAAM,GACV,OAAO,WAAW,KAAK,QAAQ;YAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;YACvB,CAAC,CAAC,WAAW,CAAC;QAElB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,WAAW,CACf,MAAc,EACd,WAAqC;QAErC,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,WAAW,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,uEAAuE;IAEvE,MAAM,CAMJ,WAA4B;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACrD,OAAO,iBAAiB,CAAI,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,uEAAuE;IAEvE,YAAY,CACV,IAAY,EACZ,IAAY,EACZ,KAAwB,EACxB,IAAwD;QAExD,MAAM,WAAW,GAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAErD,OAAO;YACL,IAAI;YACJ,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;YACtC,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE;YACtC,OAAO,EAAE,iBAAiB,CAAC,UAAU,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,uEAAuE;IAEvE,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,uEAAuE;IAEvE,aAAa,CAAC,KAAsB;QAClC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,QAAQ,CAAC,MAAmB;QAC1B,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/harness/hooks-engine.d.ts

@@ -0,0 +1,71 @@
+export type HookEvent = "SessionStart" | "SessionEnd" | "UserPromptSubmit" | "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PostToolUseFailure" | "SubagentStart" | "SubagentStop" | "Stop" | "Notification" | "PreCompact";
+export interface BasePayload {
+    sessionId: string;
+    [key: string]: unknown;
+}
+export interface SessionStartPayload extends BasePayload {
+    agentName: string;
+    tools: string[];
+}
+export interface SessionEndPayload extends BasePayload {
+    reason: string;
+    turns: number;
+}
+export interface UserPromptPayload extends BasePayload {
+    prompt: string;
+}
+export interface PreToolUsePayload extends BasePayload {
+    toolName: string;
+    input: Record<string, unknown>;
+}
+export interface PostToolUsePayload extends BasePayload {
+    toolName: string;
+    input: Record<string, unknown>;
+    output: unknown;
+    durationMs?: number;
+}
+export interface PostToolUseFailurePayload extends BasePayload {
+    toolName: string;
+    input: Record<string, unknown>;
+    error: Error | string;
+}
+export interface StopPayload extends BasePayload {
+    response: string;
+}
+export interface PreCompactPayload extends BasePayload {
+    messageCount: number;
+    estimatedTokens: number;
+}
+export interface SubagentPayload extends BasePayload {
+    agentName: string;
+    parentSessionId?: string;
+}
+export interface HookResult {
+    decision: "allow" | "deny" | "block" | "escalate";
+    reason?: string;
+    additionalContext?: string;
+    modifiedInput?: Record<string, unknown>;
+}
+export interface HookDefinition {
+    /** Regex/pattern for tool name filtering. Supports pipe OR, wildcard, arg patterns. */
+    matcher?: string;
+    handler: (payload: BasePayload) => Promise<HookResult> | HookResult;
+    timeout?: number;
+    description?: string;
+}
+export type HooksConfig = Partial<Record<HookEvent, HookDefinition[]>>;
+export declare class HooksEngine {
+    private hooks;
+    private anyListeners;
+    on(event: HookEvent, definition: HookDefinition): void;
+    configure(config: HooksConfig): void;
+    off(event: HookEvent): void;
+    clear(): void;
+    onAny(listener: (event: HookEvent, payload: BasePayload) => void): void;
+    fire(event: HookEvent, payload: BasePayload): Promise<HookResult | null>;
+    private matches;
+    static withSecurityGuardrails(): HooksEngine;
+    static withQualityGate(validate: (response: string) => string | null): HooksEngine;
+    static compose(...engines: HooksEngine[]): HooksEngine;
+}
+//# sourceMappingURL=hooks-engine.d.ts.map

package/dist/harness/hooks-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-engine.d.ts","sourceRoot":"","sources":["../../src/harness/hooks-engine.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,SAAS,GACjB,cAAc,GACd,YAAY,GACZ,kBAAkB,GAClB,YAAY,GACZ,mBAAmB,GACnB,aAAa,GACb,oBAAoB,GACpB,eAAe,GACf,cAAc,GACd,MAAM,GACN,cAAc,GACd,YAAY,CAAC;AAIjB,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAA0B,SAAQ,WAAW;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAID,MAAM,WAAW,cAAc;IAC7B,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;AAgBvE,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,YAAY,CAA+D;IAInF,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,GAAG,IAAI;IAStD,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAWpC,GAAG,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAI3B,KAAK,IAAI,IAAI;IAOb,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAMjE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmE9E,OAAO,CAAC,OAAO;IAoCf,MAAM,CAAC,sBAAsB,IAAI,WAAW;IAoE5C,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,WAAW;IAqBlF,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,EAAE,WAAW,EAAE,GAAG,WAAW;CAcvD"}

package/dist/harness/hooks-engine.js

@@ -0,0 +1,232 @@
+// ============================================================
+// @oni.bot/core/harness — HooksEngine
+// 12 lifecycle events for the agent loop
+// ============================================================
+// ─── withTimeout helper ─────────────────────────────────────────────────────
+function withTimeout(promise, ms) {
+    return Promise.race([
+        promise,
+        new Promise((resolve) => setTimeout(() => resolve(null), ms)),
+    ]);
+}
+// ─── HooksEngine ────────────────────────────────────────────────────────────
+export class HooksEngine {
+    hooks = new Map();
+    anyListeners = [];
+    // ── Registration ────────────────────────────────────────────────────
+    on(event, definition) {
+        const list = this.hooks.get(event);
+        if (list) {
+            list.push(definition);
+        }
+        else {
+            this.hooks.set(event, [definition]);
+        }
+    }
+    configure(config) {
+        for (const event of Object.keys(config)) {
+            const defs = config[event];
+            if (defs) {
+                for (const def of defs) {
+                    this.on(event, def);
+                }
+            }
+        }
+    }
+    off(event) {
+        this.hooks.delete(event);
+    }
+    clear() {
+        this.hooks.clear();
+        this.anyListeners = [];
+    }
+    // ── Observability ───────────────────────────────────────────────────
+    onAny(listener) {
+        this.anyListeners.push(listener);
+    }
+    // ── Fire ────────────────────────────────────────────────────────────
+    async fire(event, payload) {
+        // Notify any-listeners (best-effort)
+        for (const listener of this.anyListeners) {
+            try {
+                listener(event, payload);
+            }
+            catch {
+                // silently ignore
+            }
+        }
+        const defs = this.hooks.get(event);
+        if (!defs || defs.length === 0)
+            return null;
+        const aggregatedContext = [];
+        for (const def of defs) {
+            // Check matcher against toolName in payload
+            if (def.matcher && !this.matches(def.matcher, payload)) {
+                continue;
+            }
+            let result;
+            try {
+                const promise = Promise.resolve(def.handler(payload));
+                if (def.timeout != null && def.timeout > 0) {
+                    result = await withTimeout(promise, def.timeout);
+                }
+                else {
+                    result = await promise;
+                }
+            }
+            catch {
+                // Errors are caught silently; treat as pass
+                result = null;
+            }
+            if (result == null)
+                continue;
+            // Short-circuit on deny or block
+            if (result.decision === "deny" || result.decision === "block") {
+                // Attach any previously aggregated context
+                if (aggregatedContext.length > 0) {
+                    result.additionalContext = [
+                        ...aggregatedContext,
+                        ...(result.additionalContext ? [result.additionalContext] : []),
+                    ].join("\n");
+                }
+                return result;
+            }
+            // Collect additionalContext from allow/escalate results
+            if (result.additionalContext) {
+                aggregatedContext.push(result.additionalContext);
+            }
+        }
+        // All hooks passed
+        if (aggregatedContext.length > 0) {
+            return {
+                decision: "allow",
+                additionalContext: aggregatedContext.join("\n"),
+            };
+        }
+        return null;
+    }
+    // ── Matcher ─────────────────────────────────────────────────────────
+    matches(matcher, payload) {
+        const toolName = payload.toolName;
+        if (!toolName)
+            return true;
+        // Wildcard — matches everything
+        if (matcher === "*")
+            return true;
+        // CC-style arg pattern: "Bash(git:*)"
+        const argMatch = matcher.match(/^([^(]+)\((.+)\)$/);
+        if (argMatch) {
+            const toolPattern = argMatch[1];
+            const argPattern = argMatch[2];
+            if (toolName !== toolPattern)
+                return false;
+            // Extract the arg prefix from pattern like "git:*" → prefix "git"
+            const input = payload.input;
+            if (!input)
+                return false;
+            // Check the first string value in input against the arg pattern
+            const argPrefix = argPattern.replace(/:\*$/, "");
+            for (const val of Object.values(input)) {
+                if (typeof val === "string" && val.startsWith(argPrefix)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+        // Pipe-separated OR patterns: "Write|Edit"
+        const patterns = matcher.split("|");
+        return patterns.some((p) => p === toolName);
+    }
+    // ── Static Factories ──────────────────────────────────────────────
+    static withSecurityGuardrails() {
+        const engine = new HooksEngine();
+        const dangerousBashPatterns = [
+            /rm\s+(-[a-zA-Z]*)?r[a-zA-Z]*f/, // rm -rf
+            /mkfs/,
+            /dd\s+if=/,
+            /chmod\s+777/,
+            /curl[^|]*\|\s*sh/,
+            /curl[^|]*\|\s*bash/,
+            /wget[^|]*\|\s*sh/,
+            /wget[^|]*\|\s*bash/,
+        ];
+        const sensitiveFilePatterns = [
+            /\.env$/,
+            /\.env\./,
+            /\.pem$/,
+            /id_rsa/,
+            /credentials/,
+        ];
+        engine.on("PreToolUse", {
+            description: "Block dangerous bash commands",
+            matcher: "*",
+            handler: async (payload) => {
+                const p = payload;
+                const input = p.input ?? {};
+                // Check bash commands
+                if (p.toolName === "Bash") {
+                    const command = typeof input.command === "string" ? input.command : "";
+                    for (const pattern of dangerousBashPatterns) {
+                        if (pattern.test(command)) {
+                            return {
+                                decision: "deny",
+                                reason: `Dangerous command blocked: matches ${pattern.source}`,
+                            };
+                        }
+                    }
+                }
+                // Check file access for sensitive files
+                const filePath = typeof input.file_path === "string"
+                    ? input.file_path
+                    : typeof input.path === "string"
+                        ? input.path
+                        : "";
+                if (filePath) {
+                    for (const pattern of sensitiveFilePatterns) {
+                        if (pattern.test(filePath)) {
+                            return {
+                                decision: "deny",
+                                reason: `Sensitive file access blocked: ${filePath}`,
+                            };
+                        }
+                    }
+                }
+                return { decision: "allow" };
+            },
+        });
+        return engine;
+    }
+    static withQualityGate(validate) {
+        const engine = new HooksEngine();
+        engine.on("Stop", {
+            description: "Quality gate — validates response before allowing stop",
+            handler: async (payload) => {
+                const p = payload;
+                const feedback = validate(p.response);
+                if (feedback) {
+                    return {
+                        decision: "block",
+                        reason: feedback,
+                    };
+                }
+                return { decision: "allow" };
+            },
+        });
+        return engine;
+    }
+    static compose(...engines) {
+        const merged = new HooksEngine();
+        for (const engine of engines) {
+            for (const [event, defs] of engine.hooks.entries()) {
+                for (const def of defs) {
+                    merged.on(event, def);
+                }
+            }
+            for (const listener of engine.anyListeners) {
+                merged.onAny(listener);
+            }
+        }
+        return merged;
+    }
+}
+//# sourceMappingURL=hooks-engine.js.map

package/dist/harness/hooks-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-engine.js","sourceRoot":"","sources":["../../src/harness/hooks-engine.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sCAAsC;AACtC,yCAAyC;AACzC,+DAA+D;AA8F/D,+EAA+E;AAE/E,SAAS,WAAW,CAClB,OAAmB,EACnB,EAAU;IAEV,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO;QACP,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,OAAO,WAAW;IACd,KAAK,GAAqC,IAAI,GAAG,EAAE,CAAC;IACpD,YAAY,GAA4D,EAAE,CAAC;IAEnF,uEAAuE;IAEvE,EAAE,CAAC,KAAgB,EAAE,UAA0B;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,SAAS,CAAC,MAAmB;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAgB,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAgB;QAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,QAA0D;QAC9D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,OAAoB;QAC/C,qCAAqC;QACrC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,4CAA4C;YAC5C,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YAED,IAAI,MAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtD,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC3C,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,MAAM,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;gBAC5C,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YAED,IAAI,MAAM,IAAI,IAAI;gBAAE,SAAS;YAE7B,iCAAiC;YACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9D,2CAA2C;gBAC3C,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,CAAC,iBAAiB,GAAG;wBACzB,GAAG,iBAAiB;wBACpB,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,wDAAwD;YACxD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,iBAAiB,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;aAChD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IAE/D,OAAO,CAAC,OAAe,EAAE,OAAoB;QACnD,MAAM,QAAQ,GAAI,OAA6B,CAAC,QAAQ,CAAC;QACzD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,gCAAgC;QAChC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAEjC,sCAAsC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YAEhC,IAAI,QAAQ,KAAK,WAAW;gBAAE,OAAO,KAAK,CAAC;YAE3C,kEAAkE;YAClE,MAAM,KAAK,GAAI,OAA6B,CAAC,KAAK,CAAC;YACnD,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAEzB,gEAAgE;YAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,qEAAqE;IAErE,MAAM,CAAC,sBAAsB;QAC3B,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAEjC,MAAM,qBAAqB,GAAG;YAC5B,+BAA+B,EAAG,SAAS;YAC3C,MAAM;YACN,UAAU;YACV,aAAa;YACb,kBAAkB;YAClB,oBAAoB;YACpB,kBAAkB;YAClB,oBAAoB;SACrB,CAAC;QAEF,MAAM,qBAAqB,GAAG;YAC5B,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,aAAa;SACd,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE;YACtB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,KAAK,EAAE,OAAoB,EAAE,EAAE;gBACtC,MAAM,CAAC,GAAG,OAA4B,CAAC;gBACvC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAE5B,sBAAsB;gBACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC1B,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;wBAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC1B,OAAO;gCACL,QAAQ,EAAE,MAAe;gCACzB,MAAM,EAAE,sCAAsC,OAAO,CAAC,MAAM,EAAE;6BAC/D,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,wCAAwC;gBACxC,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;oBACjC,CAAC,CAAC,KAAK,CAAC,SAAS;oBACjB,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC9B,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,EAAE,CAAC;gBAEX,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;wBAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC3B,OAAO;gCACL,QAAQ,EAAE,MAAe;gCACzB,MAAM,EAAE,kCAAkC,QAAQ,EAAE;6BACrD,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE,CAAC;YACxC,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,QAA6C;QAClE,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAEjC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE;YAChB,WAAW,EAAE,wDAAwD;YACrE,OAAO,EAAE,KAAK,EAAE,OAAoB,EAAE,EAAE;gBACtC,MAAM,CAAC,GAAG,OAAsB,CAAC;gBACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO;wBACL,QAAQ,EAAE,OAAgB;wBAC1B,MAAM,EAAE,QAAQ;qBACjB,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE,CAAC;YACxC,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,GAAG,OAAsB;QACtC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/harness/index.d.ts

@@ -0,0 +1,16 @@
+export { agentLoop, wrapWithAgentLoop } from "./agent-loop.js";
+export { TodoModule } from "./todo-module.js";
+export type { Todo, TodoState, TodoStatus, TodoPriority } from "./todo-module.js";
+export { HooksEngine } from "./hooks-engine.js";
+export type { HookEvent, HookDefinition, HookResult, HooksConfig, BasePayload, SessionStartPayload, SessionEndPayload, PreToolUsePayload, PostToolUsePayload, PostToolUseFailurePayload, StopPayload, PreCompactPayload, SubagentPayload, UserPromptPayload, } from "./hooks-engine.js";
+export { ContextCompactor } from "./context-compactor.js";
+export type { CompactorConfig } from "./context-compactor.js";
+export { SafetyGate } from "./safety-gate.js";
+export type { SafetyGateConfig, SafetyCheckResult } from "./safety-gate.js";
+export { SkillLoader } from "./skill-loader.js";
+export type { SkillDefinition } from "./skill-loader.js";
+export { ONIHarness } from "./harness.js";
+export type { SwarmAgentCompat } from "./harness.js";
+export type { HarnessToolContext, LoopMessage, LoopMessageType, LoopToolResult, AgentLoopConfig, HarnessConfig, AgentNodeConfig, } from "./types.js";
+export { generateId } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/harness/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGlF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAClD,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EACnD,iBAAiB,EAAE,kBAAkB,EAAE,yBAAyB,EAChE,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAC/C,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,YAAY,EACV,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAChE,eAAe,EAAE,aAAa,EAAE,eAAe,GAChD,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/harness/index.js

@@ -0,0 +1,19 @@
+// ============================================================
+// @oni.bot/core/harness — Public API
+// ============================================================
+// Core loop
+export { agentLoop, wrapWithAgentLoop } from "./agent-loop.js";
+// Working memory
+export { TodoModule } from "./todo-module.js";
+// Lifecycle hooks
+export { HooksEngine } from "./hooks-engine.js";
+// Context compaction
+export { ContextCompactor } from "./context-compactor.js";
+// Safety gate
+export { SafetyGate } from "./safety-gate.js";
+// Skill loader
+export { SkillLoader } from "./skill-loader.js";
+// Integration layer
+export { ONIHarness } from "./harness.js";
+export { generateId } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/harness/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qCAAqC;AACrC,+DAA+D;AAE/D,YAAY;AACZ,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,iBAAiB;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,kBAAkB;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAShD,qBAAqB;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,eAAe;AACf,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,oBAAoB;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/harness/safety-gate.d.ts

@@ -0,0 +1,29 @@
+import type { ONIModel } from "../models/types.js";
+export interface SafetyGateConfig {
+    safetyModel: ONIModel;
+    protectedTools?: string[];
+    safetySystemPrompt?: string;
+    timeout?: number;
+}
+export interface SafetyCheckResult {
+    approved: boolean;
+    reason?: string;
+    riskScore?: number;
+    suggestion?: string;
+}
+export declare class SafetyGate {
+    private readonly model;
+    private readonly protectedTools;
+    private readonly systemPrompt;
+    private readonly timeout;
+    constructor(config: SafetyGateConfig);
+    /** Returns true if the tool requires a safety check before execution. */
+    requiresCheck(toolName: string): boolean;
+    /** Sends tool call info to the safety model and returns the check result. */
+    check(call: {
+        id: string;
+        name: string;
+        args: Record<string, unknown>;
+    }): Promise<SafetyCheckResult>;
+}
+//# sourceMappingURL=safety-gate.d.ts.map

package/dist/harness/safety-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-gate.d.ts","sourceRoot":"","sources":["../../src/harness/safety-gate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAInD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,QAAQ,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkCD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,gBAAgB;IAOpC,yEAAyE;IACzE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIxC,6EAA6E;IACvE,KAAK,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA2B3G"}

package/dist/harness/safety-gate.js

@@ -0,0 +1,72 @@
+// ============================================================
+// @oni.bot/core/harness — SafetyGate
+// Fast-model pre-execution checks for destructive operations
+// ============================================================
+// ─── Constants ──────────────────────────────────────────────────────────────
+const DEFAULT_PROTECTED_TOOLS = ["Bash", "Write", "MultiEdit"];
+const DEFAULT_TIMEOUT = 5000;
+const DEFAULT_SAFETY_PROMPT = `You are a safety evaluator for an AI agent's tool calls. Analyze the tool call and respond with a JSON object:
+{"approved": boolean, "reason": string, "riskScore": number (0-1), "suggestion"?: string}
+
+Be strict about:
+- Irreversible deletions (rm -rf, DROP TABLE, etc.)
+- Broad file writes that could overwrite important files
+- Pipe-to-shell patterns (curl | sh, wget | bash)
+- Credential access (.env, secrets, tokens, API keys)
+
+Be permissive about:
+- Read operations (cat, ls, grep, find)
+- Targeted writes to specific files
+- Build and test commands (npm test, make, vitest)
+- Version control operations (git status, git diff)
+
+Respond ONLY with the JSON object, no other text.`;
+// ─── Fallback result ────────────────────────────────────────────────────────
+const FALLBACK_RESULT = {
+    approved: true,
+    reason: "Safety check skipped (timeout/error)",
+    riskScore: 0.1,
+};
+// ─── SafetyGate ─────────────────────────────────────────────────────────────
+export class SafetyGate {
+    model;
+    protectedTools;
+    systemPrompt;
+    timeout;
+    constructor(config) {
+        this.model = config.safetyModel;
+        this.protectedTools = new Set(config.protectedTools ?? DEFAULT_PROTECTED_TOOLS);
+        this.systemPrompt = config.safetySystemPrompt ?? DEFAULT_SAFETY_PROMPT;
+        this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+    }
+    /** Returns true if the tool requires a safety check before execution. */
+    requiresCheck(toolName) {
+        return this.protectedTools.has(toolName);
+    }
+    /** Sends tool call info to the safety model and returns the check result. */
+    async check(call) {
+        try {
+            const userMessage = `Tool: ${call.name}\nArguments: ${JSON.stringify(call.args, null, 2)}`;
+            const responsePromise = this.model.chat({
+                messages: [{ role: "user", content: userMessage }],
+                systemPrompt: this.systemPrompt,
+                maxTokens: 256,
+            });
+            const timeoutPromise = new Promise((_, reject) => {
+                setTimeout(() => reject(new Error("Safety check timeout")), this.timeout);
+            });
+            const response = await Promise.race([responsePromise, timeoutPromise]);
+            const parsed = JSON.parse(response.content);
+            return {
+                approved: Boolean(parsed.approved),
+                reason: parsed.reason,
+                riskScore: parsed.riskScore,
+                suggestion: parsed.suggestion,
+            };
+        }
+        catch {
+            return { ...FALLBACK_RESULT };
+        }
+    }
+}
+//# sourceMappingURL=safety-gate.js.map

package/dist/harness/safety-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-gate.js","sourceRoot":"","sources":["../../src/harness/safety-gate.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qCAAqC;AACrC,6DAA6D;AAC7D,+DAA+D;AAoB/D,+EAA+E;AAE/E,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAC/D,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;kDAeoB,CAAC;AAEnD,+EAA+E;AAE/E,MAAM,eAAe,GAAsB;IACzC,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,sCAAsC;IAC9C,SAAS,EAAE,GAAG;CACf,CAAC;AAEF,+EAA+E;AAE/E,MAAM,OAAO,UAAU;IACJ,KAAK,CAAW;IAChB,cAAc,CAAc;IAC5B,YAAY,CAAS;IACrB,OAAO,CAAS;IAEjC,YAAY,MAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC,CAAC;QAChF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,kBAAkB,IAAI,qBAAqB,CAAC;QACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,aAAa,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,KAAK,CAAC,IAAiE;QAC3E,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAE3F,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACtC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAClD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAiB,CAAC,CAAC;YAEtD,OAAO;gBACL,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;CACF"}