@oni.bot/core 0.6.3 → 1.0.0

package/dist/harness/hooks-engine.js

@@ -0,0 +1,232 @@
+// ============================================================
+// @oni.bot/core/harness — HooksEngine
+// 12 lifecycle events for the agent loop
+// ============================================================
+// ─── withTimeout helper ─────────────────────────────────────────────────────
+function withTimeout(promise, ms) {
+    return Promise.race([
+        promise,
+        new Promise((resolve) => setTimeout(() => resolve(null), ms)),
+    ]);
+}
+// ─── HooksEngine ────────────────────────────────────────────────────────────
+export class HooksEngine {
+    hooks = new Map();
+    anyListeners = [];
+    // ── Registration ────────────────────────────────────────────────────
+    on(event, definition) {
+        const list = this.hooks.get(event);
+        if (list) {
+            list.push(definition);
+        }
+        else {
+            this.hooks.set(event, [definition]);
+        }
+    }
+    configure(config) {
+        for (const event of Object.keys(config)) {
+            const defs = config[event];
+            if (defs) {
+                for (const def of defs) {
+                    this.on(event, def);
+                }
+            }
+        }
+    }
+    off(event) {
+        this.hooks.delete(event);
+    }
+    clear() {
+        this.hooks.clear();
+        this.anyListeners = [];
+    }
+    // ── Observability ───────────────────────────────────────────────────
+    onAny(listener) {
+        this.anyListeners.push(listener);
+    }
+    // ── Fire ────────────────────────────────────────────────────────────
+    async fire(event, payload) {
+        // Notify any-listeners (best-effort)
+        for (const listener of this.anyListeners) {
+            try {
+                listener(event, payload);
+            }
+            catch {
+                // silently ignore
+            }
+        }
+        const defs = this.hooks.get(event);
+        if (!defs || defs.length === 0)
+            return null;
+        const aggregatedContext = [];
+        for (const def of defs) {
+            // Check matcher against toolName in payload
+            if (def.matcher && !this.matches(def.matcher, payload)) {
+                continue;
+            }
+            let result;
+            try {
+                const promise = Promise.resolve(def.handler(payload));
+                if (def.timeout != null && def.timeout > 0) {
+                    result = await withTimeout(promise, def.timeout);
+                }
+                else {
+                    result = await promise;
+                }
+            }
+            catch {
+                // Errors are caught silently; treat as pass
+                result = null;
+            }
+            if (result == null)
+                continue;
+            // Short-circuit on deny or block
+            if (result.decision === "deny" || result.decision === "block") {
+                // Attach any previously aggregated context
+                if (aggregatedContext.length > 0) {
+                    result.additionalContext = [
+                        ...aggregatedContext,
+                        ...(result.additionalContext ? [result.additionalContext] : []),
+                    ].join("\n");
+                }
+                return result;
+            }
+            // Collect additionalContext from allow/escalate results
+            if (result.additionalContext) {
+                aggregatedContext.push(result.additionalContext);
+            }
+        }
+        // All hooks passed
+        if (aggregatedContext.length > 0) {
+            return {
+                decision: "allow",
+                additionalContext: aggregatedContext.join("\n"),
+            };
+        }
+        return null;
+    }
+    // ── Matcher ─────────────────────────────────────────────────────────
+    matches(matcher, payload) {
+        const toolName = payload.toolName;
+        if (!toolName)
+            return true;
+        // Wildcard — matches everything
+        if (matcher === "*")
+            return true;
+        // CC-style arg pattern: "Bash(git:*)"
+        const argMatch = matcher.match(/^([^(]+)\((.+)\)$/);
+        if (argMatch) {
+            const toolPattern = argMatch[1];
+            const argPattern = argMatch[2];
+            if (toolName !== toolPattern)
+                return false;
+            // Extract the arg prefix from pattern like "git:*" → prefix "git"
+            const input = payload.input;
+            if (!input)
+                return false;
+            // Check the first string value in input against the arg pattern
+            const argPrefix = argPattern.replace(/:\*$/, "");
+            for (const val of Object.values(input)) {
+                if (typeof val === "string" && val.startsWith(argPrefix)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+        // Pipe-separated OR patterns: "Write|Edit"
+        const patterns = matcher.split("|");
+        return patterns.some((p) => p === toolName);
+    }
+    // ── Static Factories ──────────────────────────────────────────────
+    static withSecurityGuardrails() {
+        const engine = new HooksEngine();
+        const dangerousBashPatterns = [
+            /rm\s+(-[a-zA-Z]*)?r[a-zA-Z]*f/, // rm -rf
+            /mkfs/,
+            /dd\s+if=/,
+            /chmod\s+777/,
+            /curl[^|]*\|\s*sh/,
+            /curl[^|]*\|\s*bash/,
+            /wget[^|]*\|\s*sh/,
+            /wget[^|]*\|\s*bash/,
+        ];
+        const sensitiveFilePatterns = [
+            /\.env$/,
+            /\.env\./,
+            /\.pem$/,
+            /id_rsa/,
+            /credentials/,
+        ];
+        engine.on("PreToolUse", {
+            description: "Block dangerous bash commands",
+            matcher: "*",
+            handler: async (payload) => {
+                const p = payload;
+                const input = p.input ?? {};
+                // Check bash commands
+                if (p.toolName === "Bash") {
+                    const command = typeof input.command === "string" ? input.command : "";
+                    for (const pattern of dangerousBashPatterns) {
+                        if (pattern.test(command)) {
+                            return {
+                                decision: "deny",
+                                reason: `Dangerous command blocked: matches ${pattern.source}`,
+                            };
+                        }
+                    }
+                }
+                // Check file access for sensitive files
+                const filePath = typeof input.file_path === "string"
+                    ? input.file_path
+                    : typeof input.path === "string"
+                        ? input.path
+                        : "";
+                if (filePath) {
+                    for (const pattern of sensitiveFilePatterns) {
+                        if (pattern.test(filePath)) {
+                            return {
+                                decision: "deny",
+                                reason: `Sensitive file access blocked: ${filePath}`,
+                            };
+                        }
+                    }
+                }
+                return { decision: "allow" };
+            },
+        });
+        return engine;
+    }
+    static withQualityGate(validate) {
+        const engine = new HooksEngine();
+        engine.on("Stop", {
+            description: "Quality gate — validates response before allowing stop",
+            handler: async (payload) => {
+                const p = payload;
+                const feedback = validate(p.response);
+                if (feedback) {
+                    return {
+                        decision: "block",
+                        reason: feedback,
+                    };
+                }
+                return { decision: "allow" };
+            },
+        });
+        return engine;
+    }
+    static compose(...engines) {
+        const merged = new HooksEngine();
+        for (const engine of engines) {
+            for (const [event, defs] of engine.hooks.entries()) {
+                for (const def of defs) {
+                    merged.on(event, def);
+                }
+            }
+            for (const listener of engine.anyListeners) {
+                merged.onAny(listener);
+            }
+        }
+        return merged;
+    }
+}
+//# sourceMappingURL=hooks-engine.js.map

package/dist/harness/hooks-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-engine.js","sourceRoot":"","sources":["../../src/harness/hooks-engine.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sCAAsC;AACtC,yCAAyC;AACzC,+DAA+D;AAsG/D,+EAA+E;AAE/E,SAAS,WAAW,CAClB,OAAmB,EACnB,EAAU;IAEV,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO;QACP,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,OAAO,WAAW;IACd,KAAK,GAAqC,IAAI,GAAG,EAAE,CAAC;IACpD,YAAY,GAA4D,EAAE,CAAC;IAEnF,uEAAuE;IAEvE,EAAE,CAAC,KAAgB,EAAE,UAA0B;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,SAAS,CAAC,MAAmB;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAgB,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAgB;QAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,QAA0D;QAC9D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,OAAoB;QAC/C,qCAAqC;QACrC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,4CAA4C;YAC5C,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YAED,IAAI,MAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtD,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC3C,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,MAAM,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;gBAC5C,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YAED,IAAI,MAAM,IAAI,IAAI;gBAAE,SAAS;YAE7B,iCAAiC;YACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9D,2CAA2C;gBAC3C,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,CAAC,iBAAiB,GAAG;wBACzB,GAAG,iBAAiB;wBACpB,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,wDAAwD;YACxD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,iBAAiB,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;aAChD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IAE/D,OAAO,CAAC,OAAe,EAAE,OAAoB;QACnD,MAAM,QAAQ,GAAI,OAA6B,CAAC,QAAQ,CAAC;QACzD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,gCAAgC;QAChC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAEjC,sCAAsC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YAEhC,IAAI,QAAQ,KAAK,WAAW;gBAAE,OAAO,KAAK,CAAC;YAE3C,kEAAkE;YAClE,MAAM,KAAK,GAAI,OAA6B,CAAC,KAAK,CAAC;YACnD,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAEzB,gEAAgE;YAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,qEAAqE;IAErE,MAAM,CAAC,sBAAsB;QAC3B,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAEjC,MAAM,qBAAqB,GAAG;YAC5B,+BAA+B,EAAG,SAAS;YAC3C,MAAM;YACN,UAAU;YACV,aAAa;YACb,kBAAkB;YAClB,oBAAoB;YACpB,kBAAkB;YAClB,oBAAoB;SACrB,CAAC;QAEF,MAAM,qBAAqB,GAAG;YAC5B,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,QAAQ;YACR,aAAa;SACd,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE;YACtB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,KAAK,EAAE,OAAoB,EAAE,EAAE;gBACtC,MAAM,CAAC,GAAG,OAA4B,CAAC;gBACvC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAE5B,sBAAsB;gBACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC1B,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;wBAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC1B,OAAO;gCACL,QAAQ,EAAE,MAAe;gCACzB,MAAM,EAAE,sCAAsC,OAAO,CAAC,MAAM,EAAE;6BAC/D,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,wCAAwC;gBACxC,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;oBACjC,CAAC,CAAC,KAAK,CAAC,SAAS;oBACjB,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC9B,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,EAAE,CAAC;gBAEX,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;wBAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC3B,OAAO;gCACL,QAAQ,EAAE,MAAe;gCACzB,MAAM,EAAE,kCAAkC,QAAQ,EAAE;6BACrD,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE,CAAC;YACxC,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,QAA6C;QAClE,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAEjC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE;YAChB,WAAW,EAAE,wDAAwD;YACrE,OAAO,EAAE,KAAK,EAAE,OAAoB,EAAE,EAAE;gBACtC,MAAM,CAAC,GAAG,OAAsB,CAAC;gBACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO;wBACL,QAAQ,EAAE,OAAgB;wBAC1B,MAAM,EAAE,QAAQ;qBACjB,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE,CAAC;YACxC,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,GAAG,OAAsB;QACtC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/harness/index.d.ts

@@ -0,0 +1,17 @@
+export { agentLoop, wrapWithAgentLoop } from "./agent-loop.js";
+export { TodoModule } from "./todo-module.js";
+export type { Todo, TodoState, TodoStatus, TodoPriority } from "./todo-module.js";
+export { HooksEngine } from "./hooks-engine.js";
+export type { HookEvent, HookDefinition, HookResult, HooksConfig, BasePayload, SessionStartPayload, SessionEndPayload, PreToolUsePayload, PostToolUsePayload, PostToolUseFailurePayload, StopPayload, PreCompactPayload, PostCompactPayload, SubagentPayload, UserPromptPayload, } from "./hooks-engine.js";
+export { ContextCompactor } from "./context-compactor.js";
+export type { CompactorConfig } from "./context-compactor.js";
+export { SafetyGate } from "./safety-gate.js";
+export type { SafetyGateConfig, SafetyCheckResult } from "./safety-gate.js";
+export { SkillLoader } from "./skill-loader.js";
+export type { SkillDefinition } from "./skill-loader.js";
+export { ONIHarness } from "./harness.js";
+export type { SwarmAgentCompat } from "./harness.js";
+export type { HarnessToolContext, LoopMessage, LoopMessageType, LoopToolResult, ToolMetadataUpdate, AgentLoopConfig, HarnessConfig, AgentNodeConfig, } from "./types.js";
+export { generateId } from "./types.js";
+export { validateToolArgs } from "./validate-args.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/harness/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGlF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAClD,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EACnD,iBAAiB,EAAE,kBAAkB,EAAE,yBAAyB,EAChE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EACnE,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,YAAY,EACV,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAChE,kBAAkB,EAClB,eAAe,EAAE,aAAa,EAAE,eAAe,GAChD,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/harness/index.js

@@ -0,0 +1,21 @@
+// ============================================================
+// @oni.bot/core/harness — Public API
+// ============================================================
+// Core loop
+export { agentLoop, wrapWithAgentLoop } from "./agent-loop.js";
+// Working memory
+export { TodoModule } from "./todo-module.js";
+// Lifecycle hooks
+export { HooksEngine } from "./hooks-engine.js";
+// Context compaction
+export { ContextCompactor } from "./context-compactor.js";
+// Safety gate
+export { SafetyGate } from "./safety-gate.js";
+// Skill loader
+export { SkillLoader } from "./skill-loader.js";
+// Integration layer
+export { ONIHarness } from "./harness.js";
+export { generateId } from "./types.js";
+// Tool argument validation
+export { validateToolArgs } from "./validate-args.js";
+//# sourceMappingURL=index.js.map

package/dist/harness/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qCAAqC;AACrC,+DAA+D;AAE/D,YAAY;AACZ,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,iBAAiB;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,kBAAkB;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAShD,qBAAqB;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,eAAe;AACf,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,oBAAoB;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAS1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,2BAA2B;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/harness/safety-gate.d.ts

@@ -0,0 +1,29 @@
+import type { ONIModel } from "../models/types.js";
+export interface SafetyGateConfig {
+    safetyModel: ONIModel;
+    protectedTools?: string[];
+    safetySystemPrompt?: string;
+    timeout?: number;
+}
+export interface SafetyCheckResult {
+    approved: boolean;
+    reason?: string;
+    riskScore?: number;
+    suggestion?: string;
+}
+export declare class SafetyGate {
+    private readonly model;
+    private readonly protectedTools;
+    private readonly systemPrompt;
+    private readonly timeout;
+    constructor(config: SafetyGateConfig);
+    /** Returns true if the tool requires a safety check before execution. */
+    requiresCheck(toolName: string): boolean;
+    /** Sends tool call info to the safety model and returns the check result. */
+    check(call: {
+        id: string;
+        name: string;
+        args: Record<string, unknown>;
+    }): Promise<SafetyCheckResult>;
+}
+//# sourceMappingURL=safety-gate.d.ts.map

package/dist/harness/safety-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-gate.d.ts","sourceRoot":"","sources":["../../src/harness/safety-gate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAInD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,QAAQ,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkCD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,gBAAgB;IAOpC,yEAAyE;IACzE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIxC,6EAA6E;IACvE,KAAK,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA2B3G"}

package/dist/harness/safety-gate.js

@@ -0,0 +1,72 @@
+// ============================================================
+// @oni.bot/core/harness — SafetyGate
+// Fast-model pre-execution checks for destructive operations
+// ============================================================
+// ─── Constants ──────────────────────────────────────────────────────────────
+const DEFAULT_PROTECTED_TOOLS = ["Bash", "Write", "MultiEdit"];
+const DEFAULT_TIMEOUT = 5000;
+const DEFAULT_SAFETY_PROMPT = `You are a safety evaluator for an AI agent's tool calls. Analyze the tool call and respond with a JSON object:
+{"approved": boolean, "reason": string, "riskScore": number (0-1), "suggestion"?: string}
+
+Be strict about:
+- Irreversible deletions (rm -rf, DROP TABLE, etc.)
+- Broad file writes that could overwrite important files
+- Pipe-to-shell patterns (curl | sh, wget | bash)
+- Credential access (.env, secrets, tokens, API keys)
+
+Be permissive about:
+- Read operations (cat, ls, grep, find)
+- Targeted writes to specific files
+- Build and test commands (npm test, make, vitest)
+- Version control operations (git status, git diff)
+
+Respond ONLY with the JSON object, no other text.`;
+// ─── Fallback result ────────────────────────────────────────────────────────
+const FALLBACK_RESULT = {
+    approved: true,
+    reason: "Safety check skipped (timeout/error)",
+    riskScore: 0.1,
+};
+// ─── SafetyGate ─────────────────────────────────────────────────────────────
+export class SafetyGate {
+    model;
+    protectedTools;
+    systemPrompt;
+    timeout;
+    constructor(config) {
+        this.model = config.safetyModel;
+        this.protectedTools = new Set(config.protectedTools ?? DEFAULT_PROTECTED_TOOLS);
+        this.systemPrompt = config.safetySystemPrompt ?? DEFAULT_SAFETY_PROMPT;
+        this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+    }
+    /** Returns true if the tool requires a safety check before execution. */
+    requiresCheck(toolName) {
+        return this.protectedTools.has(toolName);
+    }
+    /** Sends tool call info to the safety model and returns the check result. */
+    async check(call) {
+        try {
+            const userMessage = `Tool: ${call.name}\nArguments: ${JSON.stringify(call.args, null, 2)}`;
+            const responsePromise = this.model.chat({
+                messages: [{ role: "user", content: userMessage }],
+                systemPrompt: this.systemPrompt,
+                maxTokens: 256,
+            });
+            const timeoutPromise = new Promise((_, reject) => {
+                setTimeout(() => reject(new Error("Safety check timeout")), this.timeout);
+            });
+            const response = await Promise.race([responsePromise, timeoutPromise]);
+            const parsed = JSON.parse(response.content);
+            return {
+                approved: Boolean(parsed.approved),
+                reason: parsed.reason,
+                riskScore: parsed.riskScore,
+                suggestion: parsed.suggestion,
+            };
+        }
+        catch {
+            return { ...FALLBACK_RESULT };
+        }
+    }
+}
+//# sourceMappingURL=safety-gate.js.map

package/dist/harness/safety-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-gate.js","sourceRoot":"","sources":["../../src/harness/safety-gate.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qCAAqC;AACrC,6DAA6D;AAC7D,+DAA+D;AAoB/D,+EAA+E;AAE/E,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAC/D,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;kDAeoB,CAAC;AAEnD,+EAA+E;AAE/E,MAAM,eAAe,GAAsB;IACzC,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,sCAAsC;IAC9C,SAAS,EAAE,GAAG;CACf,CAAC;AAEF,+EAA+E;AAE/E,MAAM,OAAO,UAAU;IACJ,KAAK,CAAW;IAChB,cAAc,CAAc;IAC5B,YAAY,CAAS;IACrB,OAAO,CAAS;IAEjC,YAAY,MAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC,CAAC;QAChF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,kBAAkB,IAAI,qBAAqB,CAAC;QACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,aAAa,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,KAAK,CAAC,IAAiE;QAC3E,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAE3F,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACtC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAClD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAiB,CAAC,CAAC;YAEtD,OAAO;gBACL,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;CACF"}

package/dist/harness/skill-loader.d.ts

@@ -0,0 +1,76 @@
+import type { ToolDefinition } from "../tools/types.js";
+export interface SkillDefinition {
+    name: string;
+    description: string;
+    tools?: string[];
+    model?: string;
+    content: string;
+    sourcePath: string;
+    /** Comma-separated tool patterns pre-approved during skill execution. */
+    allowedTools?: string[];
+    /** Hint for arguments (e.g. "[file-path]"). */
+    argumentHint?: string;
+    /** If true, agent cannot auto-invoke — user only via /name. */
+    disableModelInvocation?: boolean;
+}
+export declare class SkillLoader {
+    private skills;
+    private pendingInjection;
+    /** Monotonically increasing version — bumps on any skill registration or load. */
+    version: number;
+    /**
+     * Scan a single directory (recursively) for SKILL.md files.
+     * Uses dynamic require("fs") — safe to call in non-Node envs (returns empty loader).
+     */
+    static fromDirectory(dir: string): SkillLoader;
+    /**
+     * Scan multiple directories for SKILL.md files.
+     */
+    static fromDirectories(dirs: string[]): SkillLoader;
+    private loadDirectory;
+    private scanDirectory;
+    private loadSkillFile;
+    /**
+     * Register a skill definition programmatically (works in all runtimes).
+     */
+    register(skill: SkillDefinition): void;
+    /**
+     * Load a single skill from a file path.
+     * Works in Node.js runtimes. Returns true on success.
+     */
+    loadSkillFromFile(filePath: string): boolean;
+    /**
+     * Get all registered skills.
+     */
+    getAll(): SkillDefinition[];
+    /**
+     * Get a single skill by name.
+     */
+    get(name: string): SkillDefinition | undefined;
+    /**
+     * Returns `<available-skills>` XML string with lean descriptions.
+     * Returns "" if no skills are registered.
+     */
+    getDescriptionsForContext(): string;
+    /**
+     * Queue a skill's content for injection into the next turn.
+     * Returns true if skill found, false otherwise.
+     */
+    invoke(name: string, args?: string): boolean;
+    /**
+     * Get the pending injection content (if any).
+     */
+    getPendingInjection(): string | null;
+    /**
+     * Clear the pending injection queue.
+     */
+    clearPendingInjection(): void;
+    /**
+     * Returns an ONI-Core ToolDefinition for the "Skill" tool.
+     * This tool allows the agent to invoke skills by name.
+     */
+    getSkillTool(): ToolDefinition<{
+        name: string;
+    }, string>;
+}
+//# sourceMappingURL=skill-loader.d.ts.map

package/dist/harness/skill-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-loader.d.ts","sourceRoot":"","sources":["../../src/harness/skill-loader.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAIxD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAuCD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA2C;IACzD,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,kFAAkF;IAClF,OAAO,SAAK;IAIZ;;;OAGG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IAM9C;;OAEG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW;IAUnD,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,aAAa;IA2BrB,OAAO,CAAC,aAAa;IAyCrB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAKtC;;;OAGG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAa5C;;OAEG;IACH,MAAM,IAAI,eAAe,EAAE;IAI3B;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAM9C;;;OAGG;IACH,yBAAyB,IAAI,MAAM;IAanC;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO;IAS5C;;OAEG;IACH,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACH,qBAAqB,IAAI,IAAI;IAM7B;;;OAGG;IACH,YAAY,IAAI,cAAc,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,CAAC;CA6BzD"}