@oxagen/cli 0.4.0 → 0.6.0

package/dist/agent/evaluator.js

@@ -0,0 +1,146 @@
+/**
+ * Prompt evaluator — the cheap front-of-pipeline model call.
+ *
+ * Before the expensive coding model ever sees a prompt, a small, fast model
+ * (Haiku by default) reads it and reports back:
+ *   - completeness: is this actionable on its own, or is it missing what/where/done?
+ *   - complexity:   how much work / risk / blast-radius does it imply?
+ *   - a recommended tier for the executor,
+ *   - the symbols / files / topics worth pulling from the code graph,
+ *   - a refined prompt with filler removed and intent sharpened (meaning intact),
+ *   - and its chain of thought.
+ *
+ * This is what lets the CLI spend Haiku money to decide how to spend Opus money,
+ * and to enrich a vague prompt before acting on it. It NEVER blocks a turn: if
+ * the model call fails, a transparent heuristic fallback (the deterministic cost
+ * router) keeps the pipeline moving.
+ */
+import { generateObject } from "ai";
+import { z } from "zod";
+import { classifyTier, modelForTier, accumulateUsage } from "./model-router.js";
+import { emptyUsage } from "./fleet/types.js";
+/** A tier's evaluator-model slug, overridable to track gateway drift. */
+function evaluatorModel(override) {
+    return (override ??
+        process.env["OXAGEN_LLM_EVALUATOR"] ??
+        modelForTier("fast"));
+}
+const evalSchema = z.object({
+    completeness: z
+        .number()
+        .min(0)
+        .max(100)
+        .describe("0–100. How complete/actionable is the prompt ON ITS OWN? 100 = names what " +
+        "to change, where, and how to know it's done. Low = vague or missing key facts."),
+    complexity: z
+        .number()
+        .min(0)
+        .max(100)
+        .describe("0–100. How much work/risk/blast-radius does this imply? Trivial one-liner ≈ 10; " +
+        "multi-file feature ≈ 60; auth/billing/migration/architecture ≈ 90."),
+    recommendedTier: z
+        .enum(["fast", "balanced", "precise"])
+        .describe("Cheapest tier that can do the job: 'fast' mechanical/single-file, 'balanced' " +
+        "normal feature work, 'precise' auth/billing/security/migration/architecture."),
+    missing: z
+        .array(z.string())
+        .describe("Specific information the prompt lacks to be fully actionable. Empty if none."),
+    contextQueries: z
+        .array(z.string())
+        .describe("Symbol names, file paths, or short topics worth retrieving from the repo's code " +
+        "graph to ground the work (e.g. 'loginUser', 'src/auth/session.ts'). Empty if none."),
+    refinedPrompt: z
+        .string()
+        .describe("The prompt rewritten for the coding agent: remove pleasantries, hedging, and " +
+        "redundancy; sharpen the ask. PRESERVE EVERY real requirement and constraint — " +
+        "never invent, never drop intent. If the prompt is already tight, return it unchanged."),
+    removed: z
+        .array(z.string())
+        .describe("Phrases removed from the original because they add no value. Empty if none."),
+    reasoning: z
+        .string()
+        .describe("2–4 sentence explanation of the scores and what context will help."),
+});
+const EVALUATOR_SYSTEM = [
+    "You are the evaluation stage of an agentic coding system. A coding agent is about",
+    "to act on the user's prompt against a real repository. Your job is to triage it.",
+    "",
+    "Score it honestly:",
+    "- completeness: can the agent act on this WITHOUT guessing? Penalize missing files,",
+    "  undefined terms, and 'fix it' with no symptom. Reward concrete targets and acceptance.",
+    "- complexity: estimate the work, risk, and blast radius — not the prompt's length.",
+    "",
+    "Then help the agent succeed:",
+    "- recommendedTier: pick the CHEAPEST tier that can do the job well. Reserve 'precise'",
+    "  for auth, billing, security, migrations, schema, or architecture.",
+    "- contextQueries: name the exact symbols/files/topics the agent should pull from the",
+    "  code graph so it skips blind exploration. Prefer real identifiers and paths.",
+    "- refinedPrompt: rewrite for the agent. Strip filler and contradiction; keep 100% of the",
+    "  actual intent and every constraint. Do NOT add requirements the user did not state.",
+].join("\n");
+/**
+ * Build the deterministic heuristic evaluation used when the model is unavailable
+ * or the call fails. Uses the cost router so the tier is still sensible, and never
+ * mutates the prompt (a safe fallback must not risk dropping intent).
+ */
+function heuristicEvaluation(prompt, model) {
+    const route = classifyTier({ text: prompt });
+    const complexity = route.tier === "precise" ? 85 : route.tier === "balanced" ? 55 : 20;
+    // Longer, more specific prompts are treated as more complete; very short asks less so.
+    const len = prompt.trim().length;
+    const completeness = len < 40 ? 45 : len < 160 ? 65 : 80;
+    return {
+        completeness,
+        complexity,
+        recommendedTier: route.tier,
+        missing: [],
+        contextQueries: [],
+        refinedPrompt: prompt,
+        removed: [],
+        reasoning: `Heuristic evaluation (model unavailable): ${route.rationale}.`,
+        fallback: true,
+        model,
+        usage: emptyUsage(),
+    };
+}
+/**
+ * Evaluate a prompt with the cheap model. Returns the model's structured read, or
+ * a heuristic fallback that never throws — the pipeline must always make progress.
+ */
+export async function evaluatePrompt(opts) {
+    const model = evaluatorModel(opts.model);
+    try {
+        const { object, usage } = await generateObject({
+            model,
+            schema: evalSchema,
+            system: EVALUATOR_SYSTEM,
+            prompt: `Prompt to evaluate:\n${opts.prompt}`,
+            abortSignal: opts.signal,
+        });
+        // A refined prompt that came back empty would silently drop the user's intent —
+        // fall back to the original text in that case.
+        const refinedPrompt = object.refinedPrompt.trim() || opts.prompt;
+        return {
+            completeness: clamp(object.completeness),
+            complexity: clamp(object.complexity),
+            recommendedTier: object.recommendedTier,
+            missing: object.missing,
+            contextQueries: object.contextQueries,
+            refinedPrompt,
+            removed: object.removed,
+            reasoning: object.reasoning,
+            fallback: false,
+            model,
+            usage: accumulateUsage(emptyUsage(), model, usage),
+        };
+    }
+    catch {
+        return heuristicEvaluation(opts.prompt, model);
+    }
+}
+function clamp(n) {
+    if (Number.isNaN(n))
+        return 0;
+    return Math.max(0, Math.min(100, Math.round(n)));
+}
+//# sourceMappingURL=evaluator.js.map

package/dist/agent/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../src/agent/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,yEAAyE;AACzE,SAAS,cAAc,CAAC,QAAiB;IACvC,OAAO,CACL,QAAQ;QACR,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACnC,YAAY,CAAC,MAAM,CAAC,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CACP,4EAA4E;QAC1E,gFAAgF,CACnF;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,CACP,kFAAkF;QAChF,oEAAoE,CACvE;IACH,eAAe,EAAE,CAAC;SACf,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;SACrC,QAAQ,CACP,+EAA+E;QAC7E,8EAA8E,CACjF;IACH,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACP,kFAAkF;QAChF,oFAAoF,CACvF;IACH,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CACP,+EAA+E;QAC7E,gFAAgF;QAChF,uFAAuF,CAC1F;IACH,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,CAAC,oEAAoE,CAAC;CAClF,CAAC,CAAC;AASH,MAAM,gBAAgB,GAAG;IACvB,mFAAmF;IACnF,kFAAkF;IAClF,EAAE;IACF,oBAAoB;IACpB,qFAAqF;IACrF,0FAA0F;IAC1F,oFAAoF;IACpF,EAAE;IACF,8BAA8B;IAC9B,uFAAuF;IACvF,qEAAqE;IACrE,sFAAsF;IACtF,gFAAgF;IAChF,0FAA0F;IAC1F,uFAAuF;CACxF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAc,EAAE,KAAa;IACxD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GACd,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,uFAAuF;IACvF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;IACjC,MAAM,YAAY,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,OAAO;QACL,YAAY;QACZ,UAAU;QACV,eAAe,EAAE,KAAK,CAAC,IAAI;QAC3B,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,6CAA6C,KAAK,CAAC,SAAS,GAAG;QAC1E,QAAQ,EAAE,IAAI;QACd,KAAK;QACL,KAAK,EAAE,UAAU,EAAE;KACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA2B;IAE3B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;YAC7C,KAAK;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,wBAAwB,IAAI,CAAC,MAAM,EAAE;YAC7C,WAAW,EAAE,IAAI,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,gFAAgF;QAChF,+CAA+C;QAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC;QACjE,OAAO;YACL,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YACxC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;YACpC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK;YACf,KAAK;YACL,KAAK,EAAE,eAAe,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC;SACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/agent/fleet/git-isolation.d.ts

@@ -0,0 +1,142 @@
+/** Result of one git invocation. Never throws — the exit code is returned. */
+export interface GitResult {
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+/** Runs git with the given args in `cwd`. Injectable for tests. */
+export type GitRunner = (args: string[], cwd?: string) => Promise<GitResult>;
+/** The real runner: `git <args>` via child_process, rooted at the repo. */
+export declare function defaultGitRunner(repoRoot: string): GitRunner;
+/** Outcome of integrating one task branch into the integration branch. */
+export interface IntegrationResult {
+    /** True when the task branch merged cleanly (or had nothing new to merge). */
+    ok: boolean;
+    /** Integration branch tip after a clean merge. */
+    commit?: string;
+    /** Conflicting files (relative paths) when `ok` is false. */
+    conflicts?: string[];
+    /** The task branch that was being integrated. */
+    taskBranch: string;
+    /** The pinned task tip — always recoverable, even on conflict. */
+    taskTip?: string;
+    /** True when `rerere` auto-applied a previously-recorded resolution. */
+    autoResolved?: boolean;
+}
+/** A pinned atomic commit produced by an agent. */
+export interface Checkpoint {
+    taskId: string;
+    hash: string;
+    /** Durable ref keeping the commit reachable forever. */
+    ref: string;
+    message: string;
+}
+/**
+ * The isolation surface the fleet depends on. {@link WorktreeManager} is the
+ * real implementation; tests inject a fake satisfying this interface so the
+ * orchestrator's own unit tests never touch git or the filesystem.
+ */
+export interface Isolation {
+    init(): Promise<void>;
+    spawn(taskId: string): Promise<string>;
+    checkpoint(taskId: string, message: string): Promise<Checkpoint | null>;
+    recordedCommits(taskId: string): readonly Checkpoint[];
+    integrate(taskId: string, message?: string): Promise<IntegrationResult>;
+    integrationRef(): {
+        path: string;
+        branch: string;
+    } | null;
+    dispose(taskId: string, opts?: {
+        keep?: boolean;
+    }): Promise<void>;
+    cleanupAll(): Promise<void>;
+}
+export interface WorktreeManagerOptions {
+    /** Any path inside the repo; the real toplevel is resolved in {@link init}. */
+    repoRoot: string;
+    /** Ref namespace for this fleet run's branches/pins (e.g. the plan id). */
+    namespace?: string;
+    /** Where worktrees are created (default `<repo>/.oxagen/worktrees`). */
+    root?: string;
+    /** Inject a fake git for tests; defaults to {@link defaultGitRunner}. */
+    git?: GitRunner;
+}
+/**
+ * Owns the worktrees, branches, and durability pins for one fleet run.
+ *
+ * One instance per {@link Fleet}. Methods are safe to call from many concurrent
+ * agents: `spawn`/`checkpoint`/`dispose` operate on disjoint worktrees, and
+ * `integrate` is serialized internally so two merges never race on the
+ * integration branch.
+ */
+export declare class WorktreeManager implements Isolation {
+    private readonly opts;
+    private readonly git;
+    private readonly ns;
+    private repoRoot;
+    private root;
+    /** The frozen commit every task branch is cut from. */
+    private baseRef;
+    /** Lazily-created integration worktree path + branch. */
+    private integration;
+    private initialized;
+    /** Per-task pin sequence + recorded checkpoints (the durability log). */
+    private readonly seq;
+    private readonly commits;
+    /** Worktrees handed out, by task id. */
+    private readonly worktrees;
+    /** Serializes `integrate` so concurrent finishers can't race the merge. */
+    private integrateLock;
+    constructor(opts: WorktreeManagerOptions);
+    /**
+     * Resolve the repo toplevel, freeze the base ref, enable `rerere`, and keep
+     * the worktree root out of git's sight. Idempotent.
+     */
+    init(): Promise<void>;
+    /** The frozen base every task fans out from. */
+    get base(): string;
+    /**
+     * Create an isolated worktree for `taskId` and return its path. The agent runs
+     * with this as its `cwd`; nothing it does can touch another agent's tree.
+     */
+    spawn(taskId: string): Promise<string>;
+    /**
+     * Atomically commit whatever the agent changed in its worktree and pin the
+     * commit under `refs/oxagen/agents/<task>/<n>`. Returns the checkpoint, or
+     * `null` when the agent changed nothing.
+     */
+    checkpoint(taskId: string, message: string): Promise<Checkpoint | null>;
+    /** Every pinned checkpoint recorded for a task — the durability log. */
+    recordedCommits(taskId: string): readonly Checkpoint[];
+    /**
+     * Merge a task's branch into the integration branch. Serialized so two merges
+     * never race. A conflicting merge is aborted (integration tree left clean) and
+     * the conflicting files are returned — never a corrupt half-merge.
+     */
+    integrate(taskId: string, message?: string): Promise<IntegrationResult>;
+    private doIntegrate;
+    /** The integration branch + its worktree path, once at least one integrate ran. */
+    integrationRef(): {
+        path: string;
+        branch: string;
+    } | null;
+    /**
+     * Remove a task's worktree. Keeps the branch and the `refs/oxagen/agents` pins
+     * (so nothing is lost). Pass `keep` to leave the worktree on disk — e.g. after
+     * a conflict, so a resolver agent or human can work in it.
+     */
+    dispose(taskId: string, opts?: {
+        keep?: boolean;
+    }): Promise<void>;
+    /**
+     * Tear down every worktree and prune. Keeps the integration branch (the
+     * result) and all `refs/oxagen/agents` pins (the durability log).
+     */
+    cleanupAll(): Promise<void>;
+    private ensureIntegration;
+    private removeWorktree;
+    private withIntegrateLock;
+    /** Keep `.oxagen/` out of git's untracked list without touching tracked .gitignore. */
+    private excludeWorktreeRoot;
+}
+//# sourceMappingURL=git-isolation.d.ts.map

package/dist/agent/fleet/git-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-isolation.d.ts","sourceRoot":"","sources":["../../../src/agent/fleet/git-isolation.ts"],"names":[],"mappings":"AA8CA,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mEAAmE;AACnE,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;AAE7E,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAiB5D;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,EAAE,EAAE,OAAO,CAAC;IACZ,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACxE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAAC;IACvD,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxE,cAAc,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAOD;;;;;;;GAOG;AACH,qBAAa,eAAgB,YAAW,SAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,IAAI,CAAS;IAErB,uDAAuD;IACvD,OAAO,CAAC,OAAO,CAAM;IACrB,yDAAyD;IACzD,OAAO,CAAC,WAAW,CAAiD;IACpE,OAAO,CAAC,WAAW,CAAS;IAE5B,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuD;IAEjF,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAuC;gBAEhD,IAAI,EAAE,sBAAsB;IAQxC;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB5C;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA6B7E,wEAAwE;IACxE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE;IAItD;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAIzD,WAAW;IA+BzB,mFAAmF;IACnF,cAAc,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIzD;;;;OAIG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3E;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAWnB,iBAAiB;YAcjB,cAAc;YAKd,iBAAiB;IAS/B,uFAAuF;IACvF,OAAO,CAAC,mBAAmB;CAY5B"}

package/dist/agent/fleet/git-isolation.js

@@ -0,0 +1,290 @@
+/**
+ * Git isolation protocol for the fleet — the safety layer that makes it
+ * *physically impossible* for two parallel subagents to clobber each other's
+ * files, and that makes it *impossible to lose* any work an agent committed.
+ *
+ * The original fleet ran every subagent against one shared working tree and
+ * tried to avoid collisions with a guess: tasks whose *predicted* `files[]`
+ * overlapped were serialized. That guess fails the moment an agent edits a file
+ * it didn't predict — two writes interleave and you get a half-written file,
+ * before any commit exists to recover from. The fix is not "commit more
+ * cleverly", it's isolation: give each agent its own checkout.
+ *
+ * The model (a correct, minimal version of "branch-per-change, replay-on-merge"):
+ *
+ *   1. SPAWN   — each task gets its own `git worktree` on its own branch, cut
+ *                from a single frozen base ref. Separate index, separate HEAD,
+ *                separate files: file-level clobbering is now structurally
+ *                impossible, not merely discouraged.
+ *   2. CHECKPOINT — the agent's changes are committed atomically, and every
+ *                commit hash is pinned under `refs/oxagen/agents/<task>/<n>`.
+ *                A pinned commit is content-addressed and immune to branch
+ *                deletion and `git gc`: work can be orphaned but never lost.
+ *   3. INTEGRATE — task branches are merged back into one integration branch
+ *                *one at a time* (a mutex), with `rerere` enabled. A merge that
+ *                conflicts is **aborted**, leaving the integration tree clean,
+ *                and the conflict is *surfaced* (the files are returned) instead
+ *                of silently corrupting anything. Conflicts are relocated to an
+ *                explicit, owned step — they are not made to disappear, because
+ *                for *code* that is impossible in general (two semantically
+ *                contradictory edits can't both be right).
+ *   4. DISPOSE  — worktrees and branches are torn down, but the
+ *                `refs/oxagen/agents/*` pins are kept. `git for-each-ref
+ *                refs/oxagen/agents` is then a durable log of every atomic
+ *                change the fleet ever made, recoverable by hash.
+ *
+ * Git is shelled via {@link GitRunner} (injectable) so the orchestrator's unit
+ * tests stay filesystem-free; the real runner uses `node:child_process`,
+ * matching the rest of the CLI (no git library dependency).
+ */
+import { execFile } from "node:child_process";
+import { mkdirSync, existsSync, readFileSync, appendFileSync } from "node:fs";
+import { join } from "node:path";
+import { promisify } from "node:util";
+const pexec = promisify(execFile);
+/** The real runner: `git <args>` via child_process, rooted at the repo. */
+export function defaultGitRunner(repoRoot) {
+    return async (args, cwd) => {
+        try {
+            const { stdout, stderr } = await pexec("git", args, {
+                cwd: cwd ?? repoRoot,
+                maxBuffer: 64 * 1024 * 1024,
+            });
+            return { stdout, stderr, code: 0 };
+        }
+        catch (e) {
+            const err = e;
+            return {
+                stdout: err.stdout ?? "",
+                stderr: err.stderr ?? err.message ?? "",
+                code: typeof err.code === "number" ? err.code : 1,
+            };
+        }
+    };
+}
+/** Allowed characters in a branch/path segment derived from a task id. */
+function safeSegment(id) {
+    return id.replace(/[^A-Za-z0-9._-]/g, "-").replace(/^-+|-+$/g, "") || "task";
+}
+/**
+ * Owns the worktrees, branches, and durability pins for one fleet run.
+ *
+ * One instance per {@link Fleet}. Methods are safe to call from many concurrent
+ * agents: `spawn`/`checkpoint`/`dispose` operate on disjoint worktrees, and
+ * `integrate` is serialized internally so two merges never race on the
+ * integration branch.
+ */
+export class WorktreeManager {
+    opts;
+    git;
+    ns;
+    repoRoot;
+    root;
+    /** The frozen commit every task branch is cut from. */
+    baseRef = "";
+    /** Lazily-created integration worktree path + branch. */
+    integration = null;
+    initialized = false;
+    /** Per-task pin sequence + recorded checkpoints (the durability log). */
+    seq = new Map();
+    commits = new Map();
+    /** Worktrees handed out, by task id. */
+    worktrees = new Map();
+    /** Serializes `integrate` so concurrent finishers can't race the merge. */
+    integrateLock = Promise.resolve();
+    constructor(opts) {
+        this.opts = opts;
+        this.git = opts.git ?? defaultGitRunner(opts.repoRoot);
+        this.ns = safeSegment(opts.namespace ?? "fleet");
+        this.repoRoot = opts.repoRoot;
+        this.root = opts.root ?? join(opts.repoRoot, ".oxagen", "worktrees");
+    }
+    /**
+     * Resolve the repo toplevel, freeze the base ref, enable `rerere`, and keep
+     * the worktree root out of git's sight. Idempotent.
+     */
+    async init() {
+        if (this.initialized)
+            return;
+        const top = await this.git(["rev-parse", "--show-toplevel"]);
+        if (top.code !== 0) {
+            throw new Error(`git isolation: not a git repository (${top.stderr.trim()})`);
+        }
+        this.repoRoot = top.stdout.trim();
+        if (!this.opts.root)
+            this.root = join(this.repoRoot, ".oxagen", "worktrees");
+        const head = await this.git(["rev-parse", "HEAD"]);
+        if (head.code !== 0)
+            throw new Error(`git isolation: cannot resolve HEAD (${head.stderr.trim()})`);
+        this.baseRef = head.stdout.trim();
+        // rerere makes repeated conflict resolutions idempotent — a resolver agent
+        // (or human) resolves a given conflict once and git replays it thereafter.
+        await this.git(["config", "rerere.enabled", "true"]);
+        this.excludeWorktreeRoot();
+        mkdirSync(this.root, { recursive: true });
+        this.initialized = true;
+    }
+    /** The frozen base every task fans out from. */
+    get base() {
+        return this.baseRef;
+    }
+    /**
+     * Create an isolated worktree for `taskId` and return its path. The agent runs
+     * with this as its `cwd`; nothing it does can touch another agent's tree.
+     */
+    async spawn(taskId) {
+        await this.init();
+        const seg = safeSegment(taskId);
+        const branch = `fleet/${this.ns}/t/${seg}`;
+        const path = join(this.root, this.ns, `t-${seg}`);
+        // A re-run may leave a stale worktree/branch behind; clear it first.
+        await this.removeWorktree(path);
+        await this.git(["branch", "-D", branch]); // ignore "not found"
+        const add = await this.git(["worktree", "add", "-b", branch, path, this.baseRef]);
+        if (add.code !== 0) {
+            throw new Error(`git isolation: worktree add failed for ${taskId}: ${add.stderr.trim()}`);
+        }
+        this.worktrees.set(taskId, { path, branch });
+        return path;
+    }
+    /**
+     * Atomically commit whatever the agent changed in its worktree and pin the
+     * commit under `refs/oxagen/agents/<task>/<n>`. Returns the checkpoint, or
+     * `null` when the agent changed nothing.
+     */
+    async checkpoint(taskId, message) {
+        const wt = this.worktrees.get(taskId);
+        if (!wt)
+            throw new Error(`git isolation: no worktree for ${taskId} (call spawn first)`);
+        await this.git(["add", "-A"], wt.path);
+        const status = await this.git(["status", "--porcelain"], wt.path);
+        if (status.code === 0 && status.stdout.trim() === "")
+            return null; // nothing changed
+        // --no-verify: these are fine-grained per-step commits; the gate runs at
+        // integration / CI, not on every micro-commit.
+        const commit = await this.git(["commit", "--no-verify", "-m", message], wt.path);
+        if (commit.code !== 0) {
+            throw new Error(`git isolation: commit failed for ${taskId}: ${commit.stderr.trim()}`);
+        }
+        const rev = await this.git(["rev-parse", "HEAD"], wt.path);
+        const hash = rev.stdout.trim();
+        const n = (this.seq.get(taskId) ?? 0) + 1;
+        this.seq.set(taskId, n);
+        const ref = `refs/oxagen/agents/${safeSegment(taskId)}/${n}`;
+        await this.git(["update-ref", ref, hash]); // pin: survives branch deletion + gc
+        const cp = { taskId, hash, ref, message };
+        const list = this.commits.get(taskId) ?? [];
+        list.push(cp);
+        this.commits.set(taskId, list);
+        return cp;
+    }
+    /** Every pinned checkpoint recorded for a task — the durability log. */
+    recordedCommits(taskId) {
+        return this.commits.get(taskId) ?? [];
+    }
+    /**
+     * Merge a task's branch into the integration branch. Serialized so two merges
+     * never race. A conflicting merge is aborted (integration tree left clean) and
+     * the conflicting files are returned — never a corrupt half-merge.
+     */
+    integrate(taskId, message) {
+        return this.withIntegrateLock(() => this.doIntegrate(taskId, message));
+    }
+    async doIntegrate(taskId, message) {
+        const wt = this.worktrees.get(taskId);
+        if (!wt)
+            throw new Error(`git isolation: no worktree for ${taskId}`);
+        const int = await this.ensureIntegration();
+        const msg = message ?? `fleet(${taskId}): integrate`;
+        const merge = await this.git(["merge", "--no-ff", "-m", msg, wt.branch], int.path);
+        if (merge.code === 0) {
+            const tip = await this.git(["rev-parse", "HEAD"], int.path);
+            return { ok: true, commit: tip.stdout.trim(), taskBranch: wt.branch };
+        }
+        // Conflict. rerere may already have replayed a recorded resolution — if no
+        // files remain unmerged, commit it and report success.
+        const unmerged = await this.git(["diff", "--name-only", "--diff-filter=U"], int.path);
+        const conflicts = unmerged.stdout.split("\n").map((l) => l.trim()).filter(Boolean);
+        if (conflicts.length === 0) {
+            const done = await this.git(["commit", "--no-verify", "--no-edit"], int.path);
+            if (done.code === 0) {
+                const tip = await this.git(["rev-parse", "HEAD"], int.path);
+                return { ok: true, commit: tip.stdout.trim(), taskBranch: wt.branch, autoResolved: true };
+            }
+        }
+        // Real conflict: abort so the integration tree stays clean, and surface it.
+        await this.git(["merge", "--abort"], int.path);
+        const tip = await this.git(["rev-parse", wt.branch]);
+        return { ok: false, conflicts, taskBranch: wt.branch, taskTip: tip.stdout.trim() };
+    }
+    /** The integration branch + its worktree path, once at least one integrate ran. */
+    integrationRef() {
+        return this.integration;
+    }
+    /**
+     * Remove a task's worktree. Keeps the branch and the `refs/oxagen/agents` pins
+     * (so nothing is lost). Pass `keep` to leave the worktree on disk — e.g. after
+     * a conflict, so a resolver agent or human can work in it.
+     */
+    async dispose(taskId, opts = {}) {
+        const wt = this.worktrees.get(taskId);
+        if (!wt || opts.keep)
+            return;
+        await this.removeWorktree(wt.path);
+        this.worktrees.delete(taskId);
+    }
+    /**
+     * Tear down every worktree and prune. Keeps the integration branch (the
+     * result) and all `refs/oxagen/agents` pins (the durability log).
+     */
+    async cleanupAll() {
+        for (const [id, wt] of this.worktrees) {
+            await this.removeWorktree(wt.path);
+            this.worktrees.delete(id);
+        }
+        if (this.integration)
+            await this.removeWorktree(this.integration.path);
+        await this.git(["worktree", "prune"]);
+    }
+    // ── internals ────────────────────────────────────────────────────────────
+    async ensureIntegration() {
+        if (this.integration)
+            return this.integration;
+        const branch = `fleet/${this.ns}/integration`;
+        const path = join(this.root, this.ns, "integration");
+        await this.removeWorktree(path);
+        await this.git(["branch", "-D", branch]);
+        const add = await this.git(["worktree", "add", "-b", branch, path, this.baseRef]);
+        if (add.code !== 0) {
+            throw new Error(`git isolation: integration worktree failed: ${add.stderr.trim()}`);
+        }
+        this.integration = { path, branch };
+        return this.integration;
+    }
+    async removeWorktree(path) {
+        if (!existsSync(path))
+            return;
+        await this.git(["worktree", "remove", "--force", path]);
+    }
+    async withIntegrateLock(fn) {
+        const run = this.integrateLock.then(fn, fn);
+        this.integrateLock = run.then(() => undefined, () => undefined);
+        return run;
+    }
+    /** Keep `.oxagen/` out of git's untracked list without touching tracked .gitignore. */
+    excludeWorktreeRoot() {
+        try {
+            const exclude = join(this.repoRoot, ".git", "info", "exclude");
+            if (!existsSync(exclude))
+                return;
+            const body = readFileSync(exclude, "utf8");
+            if (!body.split("\n").some((l) => l.trim() === ".oxagen/")) {
+                appendFileSync(exclude, `${body.endsWith("\n") ? "" : "\n"}.oxagen/\n`);
+            }
+        }
+        catch {
+            /* best-effort; isolation still works if we can't write the exclude */
+        }
+    }
+}
+//# sourceMappingURL=git-isolation.js.map

package/dist/agent/fleet/git-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-isolation.js","sourceRoot":"","sources":["../../../src/agent/fleet/git-isolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAYlC,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;gBAClD,GAAG,EAAE,GAAG,IAAI,QAAQ;gBACpB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAmF,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE;gBACvC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAsDD,0EAA0E;AAC1E,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACT,IAAI,CAAyB;IAC7B,GAAG,CAAY;IACf,EAAE,CAAS;IACpB,QAAQ,CAAS;IACjB,IAAI,CAAS;IAErB,uDAAuD;IAC/C,OAAO,GAAG,EAAE,CAAC;IACrB,yDAAyD;IACjD,WAAW,GAA4C,IAAI,CAAC;IAC5D,WAAW,GAAG,KAAK,CAAC;IAE5B,yEAAyE;IACxD,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChC,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3D,wCAAwC;IACvB,SAAS,GAAG,IAAI,GAAG,EAA4C,CAAC;IAEjF,2EAA2E;IACnE,aAAa,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE5D,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAE7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAElC,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;QAErD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;QAElD,qEAAqE;QACrE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,qBAAqB;QAE/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,OAAe;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,qBAAqB,CAAC,CAAC;QAExF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;QAErF,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAE/B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,sBAAsB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,qCAAqC;QAEhF,MAAM,EAAE,GAAe,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,wEAAwE;IACxE,eAAe,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAc,EAAE,OAAgB;QACxC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,OAAgB;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,IAAI,SAAS,MAAM,cAAc,CAAC;QAErD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;QACxE,CAAC;QAED,2EAA2E;QAC3E,uDAAuD;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC;IAED,mFAAmF;IACnF,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAA2B,EAAE;QACzD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QAC7B,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,EAAE,cAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAY;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAI,EAAoB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI,CAC3B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAiB,CAAC;IAC3B,CAAC;IAED,uFAAuF;IAC/E,mBAAmB;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO;YACjC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC;gBAC3D,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;CACF"}

package/dist/agent/fleet/memory.d.ts

@@ -0,0 +1,21 @@
+import type { MemoryRecord } from "./types.js";
+export interface FleetMemory {
+    /** Append a weighted lesson. Never throws — recording must not break a run. */
+    record(rec: Omit<MemoryRecord, "id" | "createdAt">): void;
+    /** Return the most relevant lessons for a query, best first. */
+    recall(query: string, opts?: {
+        limit?: number;
+        files?: string[];
+    }): MemoryRecord[];
+    /** All records, newest first (for the agents screen memory panel). */
+    all(): MemoryRecord[];
+}
+/**
+ * Open (or create) the project's fleet memory. Reads are cached in-process and
+ * invalidated on every write, so a long-lived REPL/agents screen sees its own
+ * appends without re-reading the file each recall.
+ */
+export declare function openFleetMemory(cwd: string): FleetMemory;
+/** Render recalled lessons as a compact context block for prompt injection. */
+export declare function formatLessons(records: MemoryRecord[]): string;
+//# sourceMappingURL=memory.d.ts.map

package/dist/agent/fleet/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/agent/fleet/memory.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAwB/C,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC;IAC1D,gEAAgE;IAChE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY,EAAE,CAAC;IACnF,sEAAsE;IACtE,GAAG,IAAI,YAAY,EAAE,CAAC;CACvB;AAQD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAkExD;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAS7D"}