@oxagen/cli 0.5.0 → 0.6.1

package/dist/agent/memory.js

@@ -0,0 +1,118 @@
+/**
+ * Session memory — the CLI's bridge to Oxagen's knowledge-graph-backed context
+ * engine (`@oxagen/engram`).
+ *
+ * Each turn's activity is written as episodic records into a local content-
+ * addressed store, scoped to the project (the working directory's name). At the
+ * start of a turn we recall recent project activity and inject it as context, so
+ * the agent remembers what it did in previous sessions on the same codebase.
+ *
+ * The store is best-effort: if it cannot be opened (e.g. the optional native
+ * DuckDB dependency is unavailable in this environment), `openSessionMemory`
+ * returns `null` and the agent loop runs without persistent memory rather than
+ * failing. This keeps memory a strict enhancement, never a hard dependency.
+ */
+import { mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, dirname, join } from "node:path";
+import { createEngram, createStore } from "@oxagen/engram";
+function dbPath() {
+    return join(homedir(), ".config", "oxagen", "context.duckdb");
+}
+/** Stable project key from the working directory name. */
+function projectKey(cwd) {
+    return basename(cwd) || "default";
+}
+/**
+ * Open the project's session memory. Returns `null` if the context store is
+ * unavailable in this environment (the loop then runs memory-free).
+ */
+export async function openSessionMemory(cwd, sessionId) {
+    let store;
+    try {
+        const path = dbPath();
+        mkdirSync(dirname(path), { recursive: true });
+        store = createStore({ adapter: "duckdb", duckdbPath: path });
+    }
+    catch (err) {
+        if (process.env["OXAGEN_DEBUG"])
+            process.stderr.write(`[mem] open failed: ${err instanceof Error ? err.message : String(err)}\n`);
+        return null;
+    }
+    const engram = createEngram(store);
+    const workspace = projectKey(cwd);
+    const namespace = { org: "local", workspace, session: sessionId };
+    // Probe the connection once so a locked/unavailable DuckDB file (e.g. another
+    // oxagen process or the context daemon already holds the single-writer lock)
+    // disables memory cleanly instead of crashing on a floating rejection or
+    // silently failing every later write. Best-effort: no memory is fine.
+    try {
+        await store.recent({ org: "local", workspace }, 1);
+    }
+    catch (err) {
+        if (process.env["OXAGEN_DEBUG"])
+            process.stderr.write(`[mem] connection probe failed, disabling memory: ${err instanceof Error ? err.message : String(err)}\n`);
+        await store.close().catch(() => { });
+        return null;
+    }
+    // Callers fire writes without awaiting (`void memory.remember(...)`), so we
+    // track them here and flush on close — otherwise the process can exit before
+    // DuckDB persists the append and the memory is silently lost.
+    const pending = new Set();
+    return {
+        remember(event, payload, outcome) {
+            const p = (async () => {
+                try {
+                    await engram.remember({ event, payload, outcome }, {
+                        namespace,
+                        provenance: {
+                            author: "oxagen-cli",
+                            derivedFrom: [],
+                            timestamp: Date.now(),
+                        },
+                    });
+                }
+                catch {
+                    /* memory is best-effort */
+                }
+            })();
+            pending.add(p);
+            void p.finally(() => pending.delete(p));
+            return p;
+        },
+        async recallContext(limit = 8) {
+            try {
+                // Recall across the whole project (not just this session) so the agent
+                // carries knowledge between runs on the same codebase.
+                const records = await store.recent({ org: "local", workspace }, limit);
+                if (records.length === 0)
+                    return "";
+                return records
+                    .reverse()
+                    .map((r) => {
+                    const b = r.body;
+                    const payloadStr = typeof b.payload === "string"
+                        ? b.payload
+                        : JSON.stringify(b.payload);
+                    const tail = b.outcome ? ` (${b.outcome})` : "";
+                    return `- [${b.event}] ${payloadStr.slice(0, 160)}${tail}`;
+                })
+                    .join("\n");
+            }
+            catch {
+                return "";
+            }
+        },
+        async close() {
+            // Flush any in-flight writes before closing, so nothing is lost on exit.
+            await Promise.allSettled([...pending]);
+            try {
+                await store.close();
+            }
+            catch {
+                /* already closed */
+            }
+        },
+    };
+}
+//# sourceMappingURL=memory.js.map

package/dist/agent/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/agent/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAsB,MAAM,gBAAgB,CAAC;AAY/E,SAAS,MAAM;IACb,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAChE,CAAC;AAED,0DAA0D;AAC1D,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,SAAiB;IAEjB,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,KAAK,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC3E,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAElE,8EAA8E;IAC9E,6EAA6E;IAC7E,yEAAyE;IACzE,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACzG,CAAC;QACJ,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEzC,OAAO;QACL,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO;YAC9B,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,QAAQ,CACnB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAC3B;wBACE,SAAS;wBACT,UAAU,EAAE;4BACV,MAAM,EAAE,YAAY;4BACpB,WAAW,EAAE,EAAE;4BACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;yBACtB;qBACF,CACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACf,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC;YAC3B,IAAI,CAAC;gBACH,uEAAuE;gBACvE,uDAAuD;gBACvD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;gBACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACpC,OAAO,OAAO;qBACX,OAAO,EAAE;qBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,CAAC,GAAG,CAAC,CAAC,IAIX,CAAC;oBACF,MAAM,UAAU,GACd,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;wBAC3B,CAAC,CAAC,CAAC,CAAC,OAAO;wBACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAChC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;gBAC7D,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK;YACT,yEAAyE;YACzE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/model-router.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Cost-aware model routing for the local agent.
+ *
+ * The CLI's job is to be the most cost-effective coding agent: spend Haiku money
+ * on Haiku-sized work and only reach for Opus when the task actually needs it.
+ * This module turns a task description (plus a few cheap structural signals) into
+ * a {@link ModelTier} and a concrete gateway slug, deterministically and without
+ * an extra LLM round-trip — encoding the CLAUDE.md operating-model table in code.
+ *
+ * Dollar costs come from the baked-in rate card in {@link ./rate-card.ts} — the
+ * single place model prices live in the CLI. This module re-exports the pricing
+ * helpers so existing imports keep working, but does not own a second copy.
+ */
+import type { ModelTier } from "./fleet/types.js";
+import type { UsageTotals } from "./fleet/types.js";
+import { estimateCostUsd, rateFor, formatUsd } from "./rate-card.js";
+export { estimateCostUsd, rateFor, formatUsd };
+export declare const TIERS: ModelTier[];
+/** Human label for a tier, for the agents screen and `--explain` output. */
+export declare function tierLabel(tier: ModelTier): string;
+/** Add a per-call usage into a running total, pricing it on the call's model. */
+export declare function accumulateUsage(total: UsageTotals, model: string, usage: {
+    inputTokens?: number;
+    outputTokens?: number;
+}): UsageTotals;
+/** Cheap structural signals about a task, gathered without calling a model. */
+export interface TaskSignals {
+    /** The task description / prompt. */
+    text: string;
+    /** Number of files the task is expected to touch, if known. */
+    fileCount?: number;
+    /** Whether the task crosses package boundaries. */
+    crossPackage?: boolean;
+}
+export interface RouteDecision {
+    tier: ModelTier;
+    model: string;
+    /** One-line, human-readable reason — surfaced by `--explain` and the TUI. */
+    rationale: string;
+}
+/**
+ * Choose the cheapest tier that can do the job. Deterministic and cheap — no LLM
+ * call — so it runs on every dispatch without adding latency or token cost.
+ *
+ * Priority of evidence (most → least decisive):
+ *   1. Precise-only domains (auth/billing/security/migration/architecture).
+ *   2. Breadth: many files or cross-package work escalates to balanced/precise.
+ *   3. Design / debugging language escalates to balanced.
+ *   4. Explicitly trivial language pins to fast.
+ *   5. Default: balanced — the safe general-purpose tier.
+ */
+export declare function classifyTier(signals: TaskSignals): RouteDecision;
+/**
+ * Resolve the model for a task, honouring a manual override first.
+ *
+ * Manual precedence (matches the existing fixed-model path): an explicit slug
+ * (`--model`), `OXAGEN_MODEL`, or a pinned `config.model` always wins and routing
+ * is skipped. Otherwise auto-route from the task signals.
+ */
+export declare function routeModel(signals: TaskSignals, override?: string): RouteDecision;
+/** Best-effort tier label for an arbitrary slug (for display of pinned models). */
+export declare function tierForSlug(model: string): ModelTier;
+/** Concrete slug for a tier (exported for the planner and orchestrator). */
+export declare function modelForTier(tier: ModelTier): string;
+//# sourceMappingURL=model-router.d.ts.map

package/dist/agent/model-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-router.d.ts","sourceRoot":"","sources":["../../src/agent/model-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAIrE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAc/C,eAAO,MAAM,KAAK,EAAE,SAAS,EAAoC,CAAC;AAElE,4EAA4E;AAC5E,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEjD;AAMD,iFAAiF;AACjF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD,WAAW,CAMb;AAID,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;CACnB;AAiBD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,CAyChE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,MAAM,GAChB,aAAa,CAMf;AAUD,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAQpD;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEpD"}

package/dist/agent/model-router.js

@@ -0,0 +1,118 @@
+import { readConfig } from "../lib/config.js";
+import { estimateCostUsd, rateFor, formatUsd } from "./rate-card.js";
+// Re-exported so call sites that import pricing from the router keep working.
+// The authoritative definitions live in ./rate-card.ts.
+export { estimateCostUsd, rateFor, formatUsd };
+/** A tier's concrete gateway slug, overridable per-env to track gateway drift. */
+function tierSlug(tier) {
+    switch (tier) {
+        case "fast":
+            return process.env["OXAGEN_LLM_FAST"] ?? "anthropic/claude-haiku-4.5";
+        case "balanced":
+            return process.env["OXAGEN_LLM_BALANCED"] ?? "anthropic/claude-sonnet-4.6";
+        case "precise":
+            return process.env["OXAGEN_LLM_PRECISE"] ?? "anthropic/claude-opus-4.8";
+    }
+}
+export const TIERS = ["fast", "balanced", "precise"];
+/** Human label for a tier, for the agents screen and `--explain` output. */
+export function tierLabel(tier) {
+    return tier === "fast" ? "Haiku" : tier === "balanced" ? "Sonnet" : "Opus";
+}
+// ── Usage accumulation ───────────────────────────────────────────────────────
+// Pricing helpers (rateFor / estimateCostUsd / formatUsd) come from the rate
+// card; this only composes them into a running per-turn total.
+/** Add a per-call usage into a running total, pricing it on the call's model. */
+export function accumulateUsage(total, model, usage) {
+    return {
+        inputTokens: total.inputTokens + (usage.inputTokens ?? 0),
+        outputTokens: total.outputTokens + (usage.outputTokens ?? 0),
+        costUsd: total.costUsd + estimateCostUsd(model, usage),
+    };
+}
+// Domains that demand the precise tier regardless of size: a wrong call here is
+// expensive (security/data correctness), so we never under-spend on them.
+// NOTE: bare "token" is deliberately excluded — it collides with lexer/parser
+// "tokens". Auth work is caught by the unambiguous terms below.
+const PRECISE_DOMAINS = /\b(auth|authn|authz|login|session|password|secret|credential|oauth|saml|sso|billing|payment|invoice|stripe|charge|refund|security|crypto|encrypt|decrypt|rls|tenant|migration|schema change|architecture|architect|data model|storage boundary|production incident|outage|race condition)\b/i;
+// Words that signal genuine design / non-trivial reasoning → at least balanced.
+const DESIGN_SIGNALS = /\b(design|refactor|redesign|rearchitect|debug|investigate|root[- ]cause|why|optimi[sz]e|performance|concurren|async|deadlock|integrate|cross[- ]package|end[- ]to[- ]end|e2e|new (feature|capability|endpoint|tool|service)|implement)\b/i;
+// Words that signal trivial, mechanical work → fast tier is plenty.
+const TRIVIAL_SIGNALS = /\b(rename|format|typo|comment|lint|prettier|reword|copy[- ]?edit|bump|sort imports|add a? ?(log|console)|tweak|adjust spacing|fix indentation|update (the )?(version|readme|changelog)|one[- ]liner)\b/i;
+/**
+ * Choose the cheapest tier that can do the job. Deterministic and cheap — no LLM
+ * call — so it runs on every dispatch without adding latency or token cost.
+ *
+ * Priority of evidence (most → least decisive):
+ *   1. Precise-only domains (auth/billing/security/migration/architecture).
+ *   2. Breadth: many files or cross-package work escalates to balanced/precise.
+ *   3. Design / debugging language escalates to balanced.
+ *   4. Explicitly trivial language pins to fast.
+ *   5. Default: balanced — the safe general-purpose tier.
+ */
+export function classifyTier(signals) {
+    const text = signals.text ?? "";
+    const files = signals.fileCount ?? 0;
+    const slug = (tier, rationale) => ({
+        tier,
+        model: tierSlug(tier),
+        rationale,
+    });
+    if (PRECISE_DOMAINS.test(text)) {
+        return slug("precise", "touches a high-stakes domain (auth/billing/security/migration/architecture)");
+    }
+    // Breadth dominates: a wide change needs a model that can hold more context.
+    if (files >= 8 || (signals.crossPackage && files >= 4)) {
+        return slug("precise", `wide blast radius (~${files} files)`);
+    }
+    if (files > 3 || signals.crossPackage) {
+        return slug("balanced", signals.crossPackage ? "crosses package boundaries" : `multi-file (~${files} files)`);
+    }
+    if (TRIVIAL_SIGNALS.test(text) && !DESIGN_SIGNALS.test(text)) {
+        return slug("fast", "mechanical / single-file change");
+    }
+    if (DESIGN_SIGNALS.test(text)) {
+        return slug("balanced", "non-trivial logic or debugging");
+    }
+    // Very short, unqualified asks are usually small lookups/edits.
+    if (text.trim().length < 60 && files <= 1) {
+        return slug("fast", "small, well-scoped ask");
+    }
+    return slug("balanced", "general-purpose default");
+}
+/**
+ * Resolve the model for a task, honouring a manual override first.
+ *
+ * Manual precedence (matches the existing fixed-model path): an explicit slug
+ * (`--model`), `OXAGEN_MODEL`, or a pinned `config.model` always wins and routing
+ * is skipped. Otherwise auto-route from the task signals.
+ */
+export function routeModel(signals, override) {
+    const manual = override ?? process.env["OXAGEN_MODEL"] ?? readConfig().model;
+    if (manual) {
+        return { tier: tierForSlug(manual), model: manual, rationale: "pinned model" };
+    }
+    return classifyTier(signals);
+}
+// Slug fragments that classify an arbitrary gateway model into a tier, across
+// vendors (Anthropic, OpenAI, Google, DeepSeek, Mistral). SMALL is checked first
+// so a cheap variant of a frontier family (e.g. `gpt-5-mini`, `o3-mini`,
+// `gemini-3.5-flash`) is never mislabelled as precise.
+const SMALL_MARKER = /\b(mini|nano|flash|lite|small|nemo)\b|\b\d{1,3}b\b/;
+const PRECISE_MARKER = /\b(opus|codex|pro|large|o1|o3|deepseek-v4|deepseek-r1|magistral-medium)\b/;
+/** Best-effort tier label for an arbitrary slug (for display of pinned models). */
+export function tierForSlug(model) {
+    const family = (model.split("/").pop() ?? model).toLowerCase();
+    // Cheap/small variants win first — every vendor marks them the same way.
+    if (family.startsWith("claude-haiku") || SMALL_MARKER.test(family))
+        return "fast";
+    // Frontier / high-capability families across vendors → precise.
+    if (family.startsWith("claude-opus") || family.startsWith("gpt-5") || PRECISE_MARKER.test(family))
+        return "precise";
+    return "balanced";
+}
+/** Concrete slug for a tier (exported for the planner and orchestrator). */
+export function modelForTier(tier) {
+    return tierSlug(tier);
+}
+//# sourceMappingURL=model-router.js.map

package/dist/agent/model-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-router.js","sourceRoot":"","sources":["../../src/agent/model-router.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAErE,8EAA8E;AAC9E,wDAAwD;AACxD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAE/C,kFAAkF;AAClF,SAAS,QAAQ,CAAC,IAAe;IAC/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,4BAA4B,CAAC;QACxE,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,6BAA6B,CAAC;QAC7E,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,2BAA2B,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAElE,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,+DAA+D;AAE/D,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAC7B,KAAkB,EAClB,KAAa,EACb,KAAsD;IAEtD,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;QACzD,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;QAC5D,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC;KACvD,CAAC;AACJ,CAAC;AAqBD,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,gEAAgE;AAChE,MAAM,eAAe,GACnB,8RAA8R,CAAC;AAEjS,gFAAgF;AAChF,MAAM,cAAc,GAClB,2OAA2O,CAAC;AAE9O,oEAAoE;AACpE,MAAM,eAAe,GACnB,yMAAyM,CAAC;AAE5M;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,OAAoB;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,SAAiB,EAAiB,EAAE,CAAC,CAAC;QACnE,IAAI;QACJ,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;QACrB,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CACT,SAAS,EACT,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,SAAS,EAAE,uBAAuB,KAAK,SAAS,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACtC,OAAO,IAAI,CACT,UAAU,EACV,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CACrF,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IAED,gEAAgE;IAChE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,OAAoB,EACpB,QAAiB;IAEjB,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC;IAC7E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,yEAAyE;AACzE,uDAAuD;AACvD,MAAM,YAAY,GAAG,oDAAoD,CAAC;AAC1E,MAAM,cAAc,GAClB,2EAA2E,CAAC;AAE9E,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,yEAAyE;IACzE,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAClF,gEAAgE;IAChE,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/F,OAAO,SAAS,CAAC;IACnB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/agent/model.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Default coding model. Override per-call (`opts.model`), per-shell
+ * (`OXAGEN_MODEL`), or persistently (`oxagen config model <slug>`).
+ * If the gateway reports the slug as unknown, set a current one with
+ * `oxagen config model <slug>` — gateway slugs drift over time.
+ */
+export declare const DEFAULT_MODEL = "anthropic/claude-sonnet-4.5";
+export declare function resolveModelId(override?: string): string;
+//# sourceMappingURL=model.d.ts.map

package/dist/agent/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/agent/model.ts"],"names":[],"mappings":"AAWA;;;;;GAKG;AACH,eAAO,MAAM,aAAa,gCAAgC,CAAC;AAE3D,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAOxD"}

package/dist/agent/model.js

@@ -0,0 +1,24 @@
+/**
+ * Model resolution for the local agent loop.
+ *
+ * Models are passed to the AI SDK as plain Vercel AI Gateway slugs
+ * (`vendor/model`), which the gateway resolves using `AI_GATEWAY_API_KEY`.
+ *
+ * Resolution order: `--model` / opts → `OXAGEN_MODEL` env → `model` in config →
+ * the default below.
+ */
+import { readConfig } from "../lib/config.js";
+/**
+ * Default coding model. Override per-call (`opts.model`), per-shell
+ * (`OXAGEN_MODEL`), or persistently (`oxagen config model <slug>`).
+ * If the gateway reports the slug as unknown, set a current one with
+ * `oxagen config model <slug>` — gateway slugs drift over time.
+ */
+export const DEFAULT_MODEL = "anthropic/claude-sonnet-4.5";
+export function resolveModelId(override) {
+    return (override ??
+        process.env["OXAGEN_MODEL"] ??
+        readConfig().model ??
+        DEFAULT_MODEL);
+}
+//# sourceMappingURL=model.js.map

package/dist/agent/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/agent/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,6BAA6B,CAAC;AAE3D,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,OAAO,CACL,QAAQ;QACR,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC3B,UAAU,EAAE,CAAC,KAAK;QAClB,aAAa,CACd,CAAC;AACJ,CAAC"}

package/dist/agent/permissions.d.ts

@@ -0,0 +1,103 @@
+/** The tools that can change the host. Read/search tools are never gated. */
+export declare const MUTATING_TOOLS: readonly ["write_file", "edit_file", "bash"];
+export type MutatingTool = (typeof MUTATING_TOOLS)[number];
+export declare function isMutatingTool(name: string): name is MutatingTool;
+/**
+ * Session permission posture.
+ * - `readonly`   — mutating tools are withheld entirely (enforced in buildTools).
+ * - `ask`        — every mutating call is approved/denied (default).
+ * - `acceptEdits`— file writes/edits auto-allowed; shell commands still ask.
+ * - `bypass`     — everything allowed, no prompts (explicit, dangerous opt-out).
+ */
+export type PermissionMode = "readonly" | "ask" | "acceptEdits" | "bypass";
+export type RuleDecision = "allow" | "ask" | "deny";
+/**
+ * A user/project rule. `tool` matches a tool name (or "*"); `pattern` is a glob
+ * matched against the call's path (file tools) or the command string (bash).
+ * Rules are evaluated in order — the first match wins.
+ */
+export interface PermissionRule {
+    tool?: string;
+    pattern?: string;
+    decision: RuleDecision;
+}
+/** A normalized, tool-agnostic description of a single mutating call. */
+export interface PermissionRequest {
+    tool: MutatingTool;
+    /** Resolved absolute path for file tools (undefined for bash). */
+    path?: string;
+    /** The shell command for bash (undefined for file tools). */
+    command?: string;
+    cwd: string;
+}
+/** What the broker hands the human when it must ask. */
+export interface ApprovalRequest extends PermissionRequest {
+    /** One-line, human-readable summary of what will happen. */
+    summary: string;
+    /** Why approval is required (denylist hit, outside workspace, mode policy). */
+    reason: string;
+}
+export interface ApprovalResponse {
+    decision: "allow" | "deny";
+    /**
+     * When true, the broker records a session rule so identical future calls are
+     * auto-resolved the same way without re-prompting.
+     */
+    remember?: boolean;
+}
+export type Approver = (req: ApprovalRequest) => Promise<ApprovalResponse>;
+export type PermissionDecision = {
+    decision: "allow";
+    reason: string;
+} | {
+    decision: "deny";
+    reason: string;
+};
+export interface BrokerOptions {
+    mode: PermissionMode;
+    cwd: string;
+    /** Project/user rules, evaluated before mode defaults. */
+    rules?: PermissionRule[];
+    /** Interactive prompt. Absent ⇒ non-interactive (every `ask` becomes `deny`). */
+    approver?: Approver;
+}
+/** True when an absolute path is not inside (or equal to) the workspace root. */
+export declare function isOutsideWorkspace(cwd: string, absPath: string): boolean;
+/**
+ * The broker. Stateful only in that it accumulates session rules the human
+ * chooses to "remember"; everything else is a pure function of the request and
+ * the configured rules/mode.
+ */
+export declare class PermissionBroker {
+    private mode;
+    private readonly cwd;
+    private readonly approver?;
+    private readonly baseRules;
+    private readonly sessionRules;
+    constructor(opts: BrokerOptions);
+    get currentMode(): PermissionMode;
+    /** Switch posture mid-session (drives the REPL `/mode` command). */
+    setMode(mode: PermissionMode): void;
+    /** Rules in precedence order: remembered session rules first, then configured. */
+    private rules;
+    /** Record a rule so an identical future call resolves the same way silently. */
+    private remember;
+    /**
+     * Decide whether a mutating call may proceed. Never throws; an absent approver
+     * on an `ask` resolves to `deny` (fail closed). Returns the decision plus a
+     * human-readable reason (surfaced in the trace / tool result).
+     */
+    check(req: PermissionRequest): Promise<PermissionDecision>;
+    private ask;
+}
+/** Map a CLI flag set to a {@link PermissionMode}. `readonly` wins; then bypass. */
+export declare function resolveMode(opts: {
+    readOnly?: boolean;
+    acceptEdits?: boolean;
+    bypass?: boolean;
+}): PermissionMode;
+/** Parse a user-supplied mode string to a {@link PermissionMode} (or undefined). */
+export declare function parseModeArg(s: string): PermissionMode | undefined;
+/** Build a normalized {@link PermissionRequest} from a raw tool call. */
+export declare function toRequest(tool: string, input: unknown, cwd: string): PermissionRequest | null;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/agent/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/agent/permissions.ts"],"names":[],"mappings":"AA2BA,6EAA6E;AAC7E,eAAO,MAAM,cAAc,8CAA+C,CAAC;AAC3E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,YAAY,CAEjE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,KAAK,GAAG,aAAa,GAAG,QAAQ,CAAC;AAE3E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE3E,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAyED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAGxE;AASD;;;;GAIG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;gBAEzC,IAAI,EAAE,aAAa;IAO/B,IAAI,WAAW,IAAI,cAAc,CAEhC;IAED,oEAAoE;IACpE,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAInC,kFAAkF;IAClF,OAAO,CAAC,KAAK;IAIb,gFAAgF;IAChF,OAAO,CAAC,QAAQ;IAMhB;;;;OAIG;IACG,KAAK,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAsClD,GAAG;CAYlB;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,cAAc,CAKjB;AAaD,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAElE;AAED,yEAAyE;AACzE,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,GACV,iBAAiB,GAAG,IAAI,CAS1B"}