@phren/agent 0.1.2 → 0.1.4

package/dist/multi/tui-multi.js

@@ -1,104 +1,9 @@
-/**
- * Multiplexed TUI for multi-agent orchestration.
- *
- * Full alternate-screen terminal with:
- * - Top bar: agent tabs with status color coding
- * - Main area: scrollback buffer for the selected agent
- * - Bottom bar: input line + keyboard hints
- *
- * Keyboard:
- *   1-9              Select agent pane by index
- *   Ctrl+Left/Right  Cycle between agent panes
- *   Enter            Send input / execute command
- *   /spawn <n> <t>   Spawn a new agent
- *   /list            List all agents
- *   /kill <name>     Terminate an agent
- *   /broadcast <msg> Send message to all agents
- *   Ctrl+D           Exit (kills all agents)
- */
+/** Multiplexed TUI for multi-agent orchestration. */
 import * as readline from "node:readline";
-import { getAgentStyle, formatAgentName } from "./agent-colors.js";
-import { decodeDiffPayload, renderInlineDiff, DIFF_MARKER } from "./diff-renderer.js";
-// ── ANSI helpers (mirrors tui.ts pattern) ────────────────────────────────────
-const ESC = "\x1b[";
-const s = {
-    reset: `${ESC}0m`,
-    bold: (t) => `${ESC}1m${t}${ESC}0m`,
-    dim: (t) => `${ESC}2m${t}${ESC}0m`,
-    cyan: (t) => `${ESC}36m${t}${ESC}0m`,
-    green: (t) => `${ESC}32m${t}${ESC}0m`,
-    yellow: (t) => `${ESC}33m${t}${ESC}0m`,
-    red: (t) => `${ESC}31m${t}${ESC}0m`,
-    gray: (t) => `${ESC}90m${t}${ESC}0m`,
-    white: (t) => `${ESC}37m${t}${ESC}0m`,
-    bgGreen: (t) => `${ESC}42m${t}${ESC}0m`,
-    bgRed: (t) => `${ESC}41m${t}${ESC}0m`,
-    bgGray: (t) => `${ESC}100m${t}${ESC}0m`,
-    bgCyan: (t) => `${ESC}46m${t}${ESC}0m`,
-    bgYellow: (t) => `${ESC}43m${t}${ESC}0m`,
-    invert: (t) => `${ESC}7m${t}${ESC}0m`,
-};
-function stripAnsi(t) {
-    return t.replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/g, "");
-}
-function cols() {
-    return process.stdout.columns || 80;
-}
-function rows() {
-    return process.stdout.rows || 24;
-}
-// ── Pane buffer ──────────────────────────────────────────────────────────────
-const MAX_SCROLLBACK = 1000;
-let nextPaneIndex = 0;
-function createPane(agentId, name) {
-    return { agentId, name, index: nextPaneIndex++, lines: [], partial: "" };
-}
-function appendToPane(pane, text) {
-    // Merge with partial line buffer
-    const combined = pane.partial + text;
-    const parts = combined.split("\n");
-    // Everything except the last segment is a complete line
-    for (let i = 0; i < parts.length - 1; i++) {
-        pane.lines.push(parts[i]);
-    }
-    pane.partial = parts[parts.length - 1];
-    // Enforce scrollback cap
-    if (pane.lines.length > MAX_SCROLLBACK) {
-        pane.lines.splice(0, pane.lines.length - MAX_SCROLLBACK);
-    }
-}
-function flushPartial(pane) {
-    if (pane.partial) {
-        pane.lines.push(pane.partial);
-        pane.partial = "";
-    }
-}
-// ── Status color ─────────────────────────────────────────────────────────────
-function statusColor(status) {
-    switch (status) {
-        case "starting": return s.yellow;
-        case "running": return s.green;
-        case "done": return s.gray;
-        case "error": return s.red;
-        case "cancelled": return s.gray;
-    }
-}
-// ── Tool call formatting ─────────────────────────────────────────────────────
-function formatToolStart(toolName, input) {
-    const preview = JSON.stringify(input).slice(0, 60);
-    return s.dim(`  > ${toolName}(${preview})...`);
-}
-function formatToolEnd(toolName, input, output, isError, durationMs) {
-    const dur = durationMs < 1000 ? `${durationMs}ms` : `${(durationMs / 1000).toFixed(1)}s`;
-    const icon = isError ? s.red("x") : s.green("ok");
-    const preview = JSON.stringify(input).slice(0, 50);
-    const header = s.dim(`  ${toolName}(${preview})`) + ` ${icon} ${s.dim(dur)}`;
-    const allLines = output.split("\n");
-    const w = cols();
-    const body = allLines.slice(0, 4).map((l) => s.dim(`  | ${l.slice(0, w - 6)}`)).join("\n");
-    const more = allLines.length > 4 ? `\n${s.dim(`  | ... (${allLines.length} lines)`)}` : "";
-    return `${header}\n${body}${more}`;
-}
+import { MAX_SCROLLBACK, createPane, appendToPane } from "./pane.js";
+import { ESC, s, render } from "./multi-render.js";
+import { handleSlashCommand } from "./multi-commands.js";
+import { wireSpawnerEvents } from "./multi-events.js";
 // ── Main TUI ─────────────────────────────────────────────────────────────────
 export async function startMultiTui(spawner, config) {
     const w = process.stdout;
@@ -130,7 +35,7 @@ export async function startMultiTui(spawner, config) {
         if (panes.has(agentId)) {
             selectedId = agentId;
             scrollOffset = 0;
-            render();
+            doRender();
         }
     }
     function selectByIndex(index) {
@@ -149,349 +54,29 @@ export async function startMultiTui(spawner, config) {
             next = 0;
         selectAgent(agentOrder[next]);
     }
-    // ── Rendering ──────────────────────────────────────────────────────────
-    function renderTopBar() {
-        const w_ = cols();
-        const agents = spawner.listAgents();
-        const tabs = [];
-        for (let i = 0; i < agents.length; i++) {
-            const a = agents[i];
-            const isSel = a.id === selectedId;
-            const pane = panes.get(a.id);
-            const paneIdx = pane?.index ?? i;
-            const stColor = statusColor(a.status);
-            const agentLabel = formatAgentName(pane?.name ?? a.task.slice(0, 12), paneIdx);
-            const statusTag = stColor(a.status);
-            const raw = ` ${i + 1}:${stripAnsi(agentLabel)} [${stripAnsi(statusTag)}] `;
-            const colored = ` ${i + 1}:${agentLabel} [${statusTag}] `;
-            const tab = isSel ? s.invert(raw) : colored;
-            tabs.push(tab);
-        }
-        if (agents.length === 0) {
-            tabs.push(s.dim(" no agents "));
-        }
-        const title = s.bold(" phren-multi ");
-        const tabStr = tabs.join(s.dim("|"));
-        const line = title + s.dim("|") + tabStr;
-        const pad = Math.max(0, w_ - stripAnsi(line).length);
-        return s.invert(stripAnsi(title)) + s.dim("|") + tabStr + " ".repeat(pad);
-    }
-    function renderMainArea() {
-        const availRows = rows() - 3; // top bar + bottom bar + input line
-        if (availRows < 1)
-            return [];
-        if (!selectedId || !panes.has(selectedId)) {
-            const emptyMsg = s.dim("  No agent selected. Use /spawn <name> <task> to create one.");
-            const lines = [emptyMsg];
-            while (lines.length < availRows)
-                lines.push("");
-            return lines;
-        }
-        const pane = panes.get(selectedId);
-        // Include partial line if any
-        const allLines = [...pane.lines];
-        if (pane.partial)
-            allLines.push(pane.partial);
-        // Apply scroll offset
-        const totalLines = allLines.length;
-        let start = Math.max(0, totalLines - availRows - scrollOffset);
-        let end = start + availRows;
-        if (end > totalLines) {
-            end = totalLines;
-            start = Math.max(0, end - availRows);
-        }
-        const visible = allLines.slice(start, end);
-        const w_ = cols();
-        const output = [];
-        const paneStyle = getAgentStyle(pane.index);
-        const linePrefix = paneStyle.color(paneStyle.icon) + " ";
-        const prefixLen = 2; // icon + space
-        for (const line of visible) {
-            output.push(linePrefix + line.slice(0, w_ - prefixLen));
-        }
-        // Pad remaining rows
-        while (output.length < availRows)
-            output.push("");
-        return output;
-    }
-    function renderBottomBar() {
-        const w_ = cols();
-        const agentCount = spawner.listAgents().length;
-        const runningCount = spawner.getAgentsByStatus("running").length;
-        const left = ` Agents: ${agentCount} (${runningCount} running)`;
-        const right = `1-9:select  Ctrl+</>:cycle  /spawn /list /kill /broadcast  Ctrl+D:exit `;
-        const pad = Math.max(0, w_ - left.length - right.length);
-        return s.invert(left + " ".repeat(pad) + right);
-    }
-    function renderInputLine() {
-        const prompt = s.cyan("multi> ");
-        return prompt + inputLine;
-    }
-    function render() {
-        // Hide cursor, move to top, clear screen
-        w.write(`${ESC}?25l${ESC}H${ESC}2J`);
-        // Top bar
-        w.write(renderTopBar());
-        w.write("\n");
-        // Main area
-        const mainLines = renderMainArea();
-        for (const line of mainLines) {
-            w.write(line + "\n");
-        }
-        // Bottom bar
-        w.write(renderBottomBar());
-        w.write("\n");
-        // Input line
-        w.write(renderInputLine());
-        // Show cursor
-        w.write(`${ESC}?25h`);
+    function doRender() {
+        render(w, spawner, panes, selectedId, scrollOffset, inputLine);
+    }
+    // ── Command context for slash commands ────────────────────────────────
+    function getCmdCtx() {
+        return {
+            spawner,
+            config,
+            panes,
+            agentOrder,
+            selectedId,
+            setSelectedId: (id) => { selectedId = id; },
+            getOrCreatePane,
+            render: doRender,
+        };
     }
     // ── Spawner event wiring ───────────────────────────────────────────────
-    spawner.on("text_delta", (agentId, text) => {
-        const pane = getOrCreatePane(agentId);
-        appendToPane(pane, text);
-        if (agentId === selectedId)
-            render();
-    });
-    spawner.on("text_block", (agentId, text) => {
-        const pane = getOrCreatePane(agentId);
-        appendToPane(pane, text + "\n");
-        if (agentId === selectedId)
-            render();
-    });
-    spawner.on("tool_start", (agentId, toolName, input) => {
-        const pane = getOrCreatePane(agentId);
-        flushPartial(pane);
-        appendToPane(pane, formatToolStart(toolName, input) + "\n");
-        if (agentId === selectedId)
-            render();
-    });
-    spawner.on("tool_end", (agentId, toolName, input, output, isError, durationMs) => {
-        const pane = getOrCreatePane(agentId);
-        flushPartial(pane);
-        const diffData = (toolName === "edit_file" || toolName === "write_file") ? decodeDiffPayload(output) : null;
-        const cleanOutput = diffData ? output.slice(0, output.indexOf(DIFF_MARKER)) : output;
-        appendToPane(pane, formatToolEnd(toolName, input, cleanOutput, isError, durationMs) + "\n");
-        if (diffData) {
-            appendToPane(pane, renderInlineDiff(diffData.oldContent, diffData.newContent, diffData.filePath) + "\n");
-        }
-        if (agentId === selectedId)
-            render();
-    });
-    spawner.on("status", (agentId, message) => {
-        const pane = getOrCreatePane(agentId);
-        appendToPane(pane, s.dim(message) + "\n");
-        if (agentId === selectedId)
-            render();
-    });
-    spawner.on("done", (agentId, result) => {
-        const pane = getOrCreatePane(agentId);
-        flushPartial(pane);
-        const style = getAgentStyle(pane.index);
-        appendToPane(pane, "\n" + style.color(`--- ${style.icon} Agent completed ---`) + "\n");
-        appendToPane(pane, s.dim(`  Turns: ${result.turns}  Tool calls: ${result.toolCalls}${result.totalCost ? `  Cost: ${result.totalCost}` : ""}`) + "\n");
-        render();
-    });
-    spawner.on("error", (agentId, error) => {
-        const pane = getOrCreatePane(agentId);
-        flushPartial(pane);
-        const style = getAgentStyle(pane.index);
-        appendToPane(pane, "\n" + style.color(`--- ${style.icon} Error: ${error} ---`) + "\n");
-        render();
-    });
-    spawner.on("exit", (agentId, code) => {
-        const pane = getOrCreatePane(agentId);
-        if (code !== null && code !== 0) {
-            appendToPane(pane, s.dim(`  Process exited with code ${code}`) + "\n");
-        }
-        render();
+    wireSpawnerEvents(spawner, {
+        panes,
+        getOrCreatePane,
+        getSelectedId: () => selectedId,
+        render: doRender,
     });
-    spawner.on("message", (from, to, content) => {
-        // Show in sender's pane
-        const senderPane = panes.get(from);
-        if (senderPane) {
-            flushPartial(senderPane);
-            const toName = panes.get(to)?.name ?? to;
-            appendToPane(senderPane, s.yellow(`[${senderPane.name} -> ${toName}] ${content}`) + "\n");
-        }
-        // Show in recipient's pane
-        const recipientPane = panes.get(to);
-        if (recipientPane) {
-            flushPartial(recipientPane);
-            const fromName = senderPane?.name ?? from;
-            appendToPane(recipientPane, s.yellow(`[${fromName} -> ${recipientPane.name}] ${content}`) + "\n");
-        }
-        if (from === selectedId || to === selectedId)
-            render();
-    });
-    // ── Slash command handling ─────────────────────────────────────────────
-    function handleSlashCommand(line) {
-        const parts = line.split(/\s+/);
-        const cmd = parts[0].toLowerCase();
-        if (cmd === "/spawn") {
-            const name = parts[1];
-            const task = parts.slice(2).join(" ");
-            if (!name || !task) {
-                appendToSystem("Usage: /spawn <name> <task>");
-                return true;
-            }
-            const opts = {
-                task,
-                cwd: process.cwd(),
-                provider: config.provider.name,
-                permissions: "auto-confirm",
-                verbose: config.verbose,
-            };
-            const agentId = spawner.spawn(opts);
-            const pane = getOrCreatePane(agentId);
-            pane.name = name;
-            appendToPane(pane, s.cyan(`Spawned agent "${name}" (${agentId}): ${task}`) + "\n");
-            selectAgent(agentId);
-            return true;
-        }
-        if (cmd === "/list") {
-            const agents = spawner.listAgents();
-            if (agents.length === 0) {
-                appendToSystem("No agents.");
-            }
-            else {
-                const lines = ["Agents:"];
-                for (let i = 0; i < agents.length; i++) {
-                    const a = agents[i];
-                    const pane = panes.get(a.id);
-                    const name = pane?.name ?? a.id;
-                    const color = statusColor(a.status);
-                    const elapsed = a.finishedAt
-                        ? `${((a.finishedAt - a.startedAt) / 1000).toFixed(1)}s`
-                        : `${((Date.now() - a.startedAt) / 1000).toFixed(0)}s`;
-                    lines.push(`  ${i + 1}. ${name} [${color(a.status)}] ${s.dim(elapsed)} — ${a.task.slice(0, 50)}`);
-                }
-                appendToSystem(lines.join("\n"));
-            }
-            return true;
-        }
-        if (cmd === "/kill") {
-            const target = parts[1];
-            if (!target) {
-                appendToSystem("Usage: /kill <name|index>");
-                return true;
-            }
-            const agentId = resolveAgentTarget(target);
-            if (!agentId) {
-                appendToSystem(`Agent "${target}" not found.`);
-                return true;
-            }
-            const ok = spawner.cancel(agentId);
-            const pane = getOrCreatePane(agentId);
-            if (ok) {
-                appendToPane(pane, s.yellow("\n--- Cancelled ---\n"));
-            }
-            else {
-                appendToSystem(`Agent "${target}" is not running.`);
-            }
-            render();
-            return true;
-        }
-        if (cmd === "/broadcast") {
-            const msg = parts.slice(1).join(" ");
-            if (!msg) {
-                appendToSystem("Usage: /broadcast <message>");
-                return true;
-            }
-            const agents = spawner.listAgents();
-            let sent = 0;
-            for (const a of agents) {
-                if (a.status === "running") {
-                    const pane = getOrCreatePane(a.id);
-                    appendToPane(pane, s.yellow(`[broadcast] ${msg}`) + "\n");
-                    sent++;
-                }
-            }
-            appendToSystem(`Broadcast sent to ${sent} running agent(s).`);
-            return true;
-        }
-        if (cmd === "/msg") {
-            const target = parts[1];
-            const msg = parts.slice(2).join(" ");
-            if (!target || !msg) {
-                appendToSystem("Usage: /msg <agent> <text>");
-                return true;
-            }
-            const agentId = resolveAgentTarget(target);
-            if (!agentId) {
-                appendToSystem(`Agent "${target}" not found.`);
-                return true;
-            }
-            const ok = spawner.sendToAgent(agentId, msg, "user");
-            if (ok) {
-                const recipientPane = getOrCreatePane(agentId);
-                flushPartial(recipientPane);
-                appendToPane(recipientPane, s.yellow(`[user -> ${recipientPane.name}] ${msg}`) + "\n");
-                if (selectedId && selectedId !== agentId && panes.has(selectedId)) {
-                    const curPane = panes.get(selectedId);
-                    flushPartial(curPane);
-                    appendToPane(curPane, s.yellow(`[user -> ${recipientPane.name}] ${msg}`) + "\n");
-                }
-            }
-            else {
-                appendToSystem(`Agent "${target}" is not running.`);
-            }
-            render();
-            return true;
-        }
-        if (cmd === "/help") {
-            appendToSystem([
-                "Commands:",
-                "  /spawn <name> <task>  — Spawn a new agent",
-                "  /list                 — List all agents",
-                "  /kill <name|index>    — Terminate an agent",
-                "  /msg <agent> <text>   — Send direct message to an agent",
-                "  /broadcast <msg>      — Send to all running agents",
-                "  /help                 — Show this help",
-                "",
-                "Keys:",
-                "  1-9                   — Select agent by number",
-                "  Ctrl+Left/Right       — Cycle agents",
-                "  PageUp/PageDown       — Scroll output",
-                "  Ctrl+D                — Exit (kills all)",
-            ].join("\n"));
-            return true;
-        }
-        return false;
-    }
-    function resolveAgentTarget(target) {
-        // Try numeric index (1-based)
-        const idx = parseInt(target, 10);
-        if (!isNaN(idx) && idx >= 1 && idx <= agentOrder.length) {
-            return agentOrder[idx - 1];
-        }
-        // Try name match
-        for (const [id, pane] of panes) {
-            if (pane.name === target)
-                return id;
-        }
-        // Try agent ID
-        if (spawner.getAgent(target))
-            return target;
-        return null;
-    }
-    function appendToSystem(text) {
-        if (!selectedId || !panes.has(selectedId)) {
-            // Create a virtual system pane
-            const pane = createPane("_system", "system");
-            panes.set("_system", pane);
-            if (!agentOrder.includes("_system"))
-                agentOrder.push("_system");
-            selectedId = "_system";
-            appendToPane(pane, text + "\n");
-        }
-        else {
-            const pane = panes.get(selectedId);
-            flushPartial(pane);
-            appendToPane(pane, text + "\n");
-        }
-        render();
-    }
     // ── Terminal setup ─────────────────────────────────────────────────────
     // Enter alternate screen
     w.write("\x1b[?1049h");
@@ -531,7 +116,7 @@ export async function startMultiTui(spawner, config) {
             if (key.ctrl && key.name === "c") {
                 if (inputLine.length > 0) {
                     inputLine = "";
-                    render();
+                    doRender();
                 }
                 else {
                     shutdown();
@@ -554,15 +139,15 @@ export async function startMultiTui(spawner, config) {
             }
             // Page Up/Down — scroll
             if (key.name === "pageup") {
-                const availRows = rows() - 3;
+                const availRows = (process.stdout.rows || 24) - 3;
                 scrollOffset = Math.min(scrollOffset + Math.floor(availRows / 2), MAX_SCROLLBACK);
-                render();
+                doRender();
                 return;
             }
             if (key.name === "pagedown") {
-                const availRows = rows() - 3;
+                const availRows = (process.stdout.rows || 24) - 3;
                 scrollOffset = Math.max(0, scrollOffset - Math.floor(availRows / 2));
-                render();
+                doRender();
                 return;
             }
             // Enter — submit input
@@ -570,12 +155,12 @@ export async function startMultiTui(spawner, config) {
                 const line = inputLine.trim();
                 inputLine = "";
                 if (!line) {
-                    render();
+                    doRender();
                     return;
                 }
                 if (line.startsWith("/")) {
-                    if (handleSlashCommand(line)) {
-                        render();
+                    if (handleSlashCommand(line, getCmdCtx())) {
+                        doRender();
                         return;
                     }
                 }
@@ -584,25 +169,25 @@ export async function startMultiTui(spawner, config) {
                     const pane = panes.get(selectedId);
                     appendToPane(pane, s.cyan(`> ${line}`) + "\n");
                 }
-                render();
+                doRender();
                 return;
             }
             // Backspace
             if (key.name === "backspace") {
                 if (inputLine.length > 0) {
                     inputLine = inputLine.slice(0, -1);
-                    render();
+                    doRender();
                 }
                 return;
             }
             // Regular character input
             if (key.sequence && !key.ctrl && !key.meta) {
                 inputLine += key.sequence;
-                render();
+                doRender();
             }
         });
         // Handle terminal resize
-        process.stdout.on("resize", () => render());
+        process.stdout.on("resize", () => doRender());
         // Register panes for any agents that already exist
         for (const agent of spawner.listAgents()) {
             getOrCreatePane(agent.id);
@@ -610,6 +195,6 @@ export async function startMultiTui(spawner, config) {
         if (agentOrder.length > 0) {
             selectedId = agentOrder[0];
         }
-        render();
+        doRender();
     });
 }

package/dist/permissions/allowlist.js

@@ -33,8 +33,8 @@ export function isAllowed(toolName, input) {
             return false;
         if (entry.pattern === "*")
             return true;
-        // For file paths: exact match or child path
-        if (pattern.startsWith(entry.pattern))
+        // For file paths: exact match or child path (boundary-aware to prevent prefix collisions)
+        if (pattern === entry.pattern || pattern.startsWith(entry.pattern.endsWith("/") ? entry.pattern : entry.pattern + "/"))
             return true;
         // For shell commands: match the binary name
         return entry.pattern === pattern;

package/dist/permissions/shell-safety.js

@@ -11,6 +11,14 @@ const DANGEROUS_PATTERNS = [
     { pattern: /\bnohup\b/i, reason: "Detached process may outlive session", severity: "block" },
     { pattern: /\bdisown\b/i, reason: "Detached process may outlive session", severity: "block" },
     { pattern: /\bsetsid\b/i, reason: "Detached process may outlive session", severity: "block" },
+    // Block: Windows-specific destructive commands
+    { pattern: /\bformat\s+[a-z]:/i, reason: "Disk format command", severity: "block" },
+    { pattern: /\bdel\s+\/[sq]/i, reason: "Recursive or quiet delete", severity: "block" },
+    { pattern: /\brd\s+\/s/i, reason: "Recursive directory removal", severity: "block" },
+    { pattern: /\brmdir\s+\/s/i, reason: "Recursive directory removal", severity: "block" },
+    { pattern: /\breg\s+delete\b/i, reason: "Registry deletion", severity: "block" },
+    { pattern: /\bpowershell\b.*\b-enc\b/i, reason: "Encoded PowerShell command (obfuscation)", severity: "block" },
+    { pattern: /\bcmd\b.*\/c.*\bdel\s+\/[sq]/i, reason: "Recursive or quiet delete via cmd", severity: "block" },
     // Warn: potentially dangerous
     { pattern: /\beval\b/i, reason: "Dynamic code execution via eval", severity: "warn" },
     { pattern: /\$\(.*\)/, reason: "Command substitution", severity: "warn" },