@phuetz/code-buddy 0.1.25 → 0.1.26

package/dist/commands/dev/workflows.js

@@ -0,0 +1,214 @@
+/**
+ * Dev Workflows — 4 golden-path workflows for buddy dev.
+ *
+ * Each workflow:
+ *   1. Injects repoProfile.contextPack into the agent system prompt
+ *   2. Forces plan-first (shows plan, waits for confirmation in interactive mode)
+ *   3. Activates WritePolicy.strict → all modifications go through ApplyPatch
+ *   4. Records every tool call in RunStore
+ *   5. Runs tests/lint after modifications
+ *   6. Generates summary.md artefact
+ */
+import readline from 'readline';
+import { RunStore } from '../../observability/run-store.js';
+import { WritePolicy } from '../../security/write-policy.js';
+import { getRepoProfiler } from '../../agent/repo-profiler.js';
+// ──────────────────────────────────────────────────────────────────
+// Workflow system prompts
+// ──────────────────────────────────────────────────────────────────
+const WORKFLOW_PROMPTS = {
+    'add-feature': `You are implementing a new feature. Follow this strict sequence:
+1. PLAN: Output a numbered plan listing each file to create/modify and why.
+2. Wait for confirmation before proceeding.
+3. IMPLEMENT: Apply changes as unified diffs via apply_patch tool.
+4. TEST: Run the test suite and report results.
+5. SUMMARIZE: Output a brief summary of what was done and any next steps.
+Always use apply_patch for file modifications. Never write files directly.`,
+    'fix-tests': `You are fixing failing tests. Follow this strict sequence:
+1. DIAGNOSE: Run the test suite, identify failing tests and root causes.
+2. PLAN: List the fixes needed (files + what to change).
+3. Wait for confirmation before proceeding.
+4. FIX: Apply changes as unified diffs via apply_patch tool.
+5. VERIFY: Re-run tests to confirm they pass.
+6. SUMMARIZE: Report which tests now pass and any remaining issues.
+Always use apply_patch for file modifications. Never write files directly.`,
+    'refactor': `You are refactoring existing code. Follow this strict sequence:
+1. ANALYZE: Identify the code to refactor and what improvements to make.
+2. PLAN: List every file/function to change and the refactoring steps.
+3. Wait for confirmation before proceeding.
+4. REFACTOR: Apply changes as unified diffs via apply_patch tool.
+5. TEST: Run tests to confirm no regressions.
+6. SUMMARIZE: Describe what was improved and any follow-up work.
+Always use apply_patch for file modifications. Never write files directly.`,
+    'security-audit': `You are performing a security audit. Follow this strict sequence:
+1. SCAN: Review code for security vulnerabilities (injection, XSS, auth, secrets).
+2. REPORT: List all findings with severity (Critical/High/Medium/Low) and file locations.
+3. PLAN: Prioritize fixes starting with Critical issues.
+4. Wait for confirmation before proceeding.
+5. FIX: Apply patches for Critical/High issues via apply_patch tool.
+6. VERIFY: Re-scan patched files to confirm issues are resolved.
+7. SUMMARIZE: Full audit report with findings, fixes applied, and remaining risks.
+Always use apply_patch for file modifications. Never write files directly.`,
+};
+// ──────────────────────────────────────────────────────────────────
+// Plan-first confirmation
+// ──────────────────────────────────────────────────────────────────
+async function waitForConfirmation(prompt, nonInteractive) {
+    if (nonInteractive)
+        return true;
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        rl.question(`${prompt} [y/N] `, (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === 'y');
+        });
+    });
+}
+// ──────────────────────────────────────────────────────────────────
+// Test runner helper
+// ──────────────────────────────────────────────────────────────────
+async function runTests(profile) {
+    const testCmd = profile.commands.test;
+    if (!testCmd)
+        return 'No test command configured.';
+    const { execSync } = await import('child_process');
+    try {
+        const output = execSync(testCmd, {
+            encoding: 'utf-8',
+            stdio: 'pipe',
+            timeout: 120_000,
+        });
+        return `Tests passed.\n${output.slice(0, 2000)}`;
+    }
+    catch (err) {
+        const e = err;
+        const out = (e.stdout || '') + (e.stderr || '');
+        return `Tests failed.\n${out.slice(0, 2000)}`;
+    }
+}
+// ──────────────────────────────────────────────────────────────────
+// Main workflow runner
+// ──────────────────────────────────────────────────────────────────
+/**
+ * Run a golden-path workflow with plan-first, diff-first, and full observability.
+ */
+export async function runWorkflow(type, objective, agent, options = {}) {
+    const { nonInteractive = false, writePolicyMode = 'strict', tags = [] } = options;
+    // ── Setup ─────────────────────────────────────────────────────
+    const runStore = RunStore.getInstance();
+    const profiler = getRepoProfiler();
+    const profile = await profiler.getProfile();
+    // Start a run for observability
+    const runId = runStore.startRun(objective, {
+        tags: [type, ...tags],
+    });
+    // Enable WritePolicy (strict by default in workflows)
+    const writePolicy = WritePolicy.getInstance();
+    const previousMode = writePolicy.getMode();
+    writePolicy.setMode(writePolicyMode);
+    // Link agent tool calls to this run
+    agent.setRunId(runId);
+    const artifactPaths = [];
+    try {
+        // ── Step 1: Plan ────────────────────────────────────────────
+        runStore.emit(runId, { type: 'step_start', data: { step: 'plan', objective } });
+        const workflowPrompt = WORKFLOW_PROMPTS[type];
+        const planPrompt = `${workflowPrompt}
+
+Repo context: ${profile.contextPack}
+
+Objective: ${objective}
+
+Start with PLAN only. List exactly what you will do.`;
+        console.log(`\n[${type}] Planning: ${objective}`);
+        console.log('─'.repeat(60));
+        let planOutput = '';
+        for await (const chunk of agent.processUserMessageStream(planPrompt)) {
+            if (chunk.type === 'content' && chunk.content) {
+                process.stdout.write(chunk.content);
+                planOutput += chunk.content;
+            }
+        }
+        runStore.emit(runId, { type: 'step_end', data: { step: 'plan', outputLength: planOutput.length } });
+        // Save plan artifact
+        const planPath = runStore.saveArtifact(runId, 'plan.md', `# Plan\n\nObjective: ${objective}\n\n${planOutput}`);
+        artifactPaths.push(planPath);
+        // ── Step 2: Confirmation ─────────────────────────────────────
+        console.log('\n' + '─'.repeat(60));
+        const confirmed = await waitForConfirmation('\nProceed with implementation?', nonInteractive);
+        if (!confirmed) {
+            runStore.emit(runId, { type: 'decision', data: { description: 'User cancelled at plan review' } });
+            runStore.endRun(runId, 'cancelled');
+            writePolicy.setMode(previousMode);
+            agent.setRunId(undefined);
+            return { runId, status: 'cancelled', artifactPaths };
+        }
+        runStore.emit(runId, { type: 'decision', data: { description: 'Plan confirmed, proceeding with implementation' } });
+        // ── Step 3: Implement ────────────────────────────────────────
+        runStore.emit(runId, { type: 'step_start', data: { step: 'implement' } });
+        console.log('\n[Implementing…]');
+        const implementPrompt = `Now proceed with the implementation. Apply all changes using apply_patch with unified diffs.`;
+        let patchOutput = '';
+        for await (const chunk of agent.processUserMessageStream(implementPrompt)) {
+            if (chunk.type === 'content' && chunk.content) {
+                process.stdout.write(chunk.content);
+                patchOutput += chunk.content;
+            }
+        }
+        runStore.emit(runId, { type: 'step_end', data: { step: 'implement' } });
+        // Extract and save patch artifact if any diff markers found
+        if (patchOutput.includes('---') && patchOutput.includes('+++')) {
+            const diffMatch = patchOutput.match(/^(---.*?\+\+\+.*?^@@.*?)(?=\n---|\Z)/ms);
+            const diffContent = diffMatch ? diffMatch[0] : patchOutput;
+            const patchPath = runStore.saveArtifact(runId, 'patch.diff', diffContent);
+            artifactPaths.push(patchPath);
+        }
+        // ── Step 4: Test ─────────────────────────────────────────────
+        runStore.emit(runId, { type: 'step_start', data: { step: 'test' } });
+        console.log('\n[Running tests…]');
+        const testResults = await runTests(profile);
+        console.log(testResults.slice(0, 500));
+        const testLogPath = runStore.saveArtifact(runId, 'test-results.log', testResults);
+        artifactPaths.push(testLogPath);
+        runStore.emit(runId, { type: 'step_end', data: { step: 'test', passed: testResults.startsWith('Tests passed') } });
+        // ── Step 5: Summary ──────────────────────────────────────────
+        runStore.emit(runId, { type: 'step_start', data: { step: 'summary' } });
+        const summaryPrompt = `Generate a brief summary of what was accomplished:
+- What changed (files modified/created)
+- Test results
+- Any next steps or known issues
+Keep it under 300 words.`;
+        let summaryOutput = '';
+        for await (const chunk of agent.processUserMessageStream(summaryPrompt)) {
+            if (chunk.type === 'content' && chunk.content) {
+                process.stdout.write(chunk.content);
+                summaryOutput += chunk.content;
+            }
+        }
+        const summaryContent = `# Summary\n\nObjective: ${objective}\nWorkflow: ${type}\nRun: ${runId}\n\n## Test Results\n\n${testResults.slice(0, 500)}\n\n## Changes\n\n${summaryOutput}`;
+        const summaryPath = runStore.saveArtifact(runId, 'summary.md', summaryContent);
+        artifactPaths.push(summaryPath);
+        runStore.emit(runId, { type: 'step_end', data: { step: 'summary' } });
+        runStore.endRun(runId, 'completed');
+        writePolicy.setMode(previousMode);
+        agent.setRunId(undefined);
+        return {
+            runId,
+            status: 'completed',
+            artifactPaths,
+            summary: summaryOutput,
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        runStore.emit(runId, { type: 'error', data: { message } });
+        runStore.endRun(runId, 'failed');
+        writePolicy.setMode(previousMode);
+        agent.setRunId(undefined);
+        return { runId, status: 'failed', artifactPaths };
+    }
+}
+//# sourceMappingURL=workflows.js.map

package/dist/commands/dev/workflows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../../src/commands/dev/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAe,MAAM,8BAA8B,CAAC;AAyB5E,qEAAqE;AACrE,0BAA0B;AAC1B,qEAAqE;AAErE,MAAM,gBAAgB,GAAiC;IACrD,aAAa,EAAE;;;;;;2EAM0D;IAEzE,WAAW,EAAE;;;;;;;2EAO4D;IAEzE,UAAU,EAAE;;;;;;;2EAO6D;IAEzE,gBAAgB,EAAE;;;;;;;;2EAQuD;CAC1E,CAAC;AAEF,qEAAqE;AACrE,0BAA0B;AAC1B,qEAAqE;AAErE,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,cAAuB;IACxE,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YACzC,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,qBAAqB;AACrB,qEAAqE;AAErE,KAAK,UAAU,QAAQ,CAAC,OAAoB;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,6BAA6B,CAAC;IAEnD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE;YAC/B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO,kBAAkB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA2C,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,kBAAkB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,uBAAuB;AACvB,qEAAqE;AAErE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAkB,EAClB,SAAiB,EACjB,KAAqB,EACrB,UAA2B,EAAE;IAE7B,MAAM,EAAE,cAAc,GAAG,KAAK,EAAE,eAAe,GAAG,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAElF,iEAAiE;IACjE,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;IAE5C,gCAAgC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE;QACzC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;KACtB,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;IAC3C,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAErC,oCAAoC;IACpC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,+DAA+D;QAC/D,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAEhF,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,cAAc;;gBAExB,OAAO,CAAC,WAAW;;aAEtB,SAAS;;qDAE+B,CAAC;QAElD,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,eAAe,SAAS,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5B,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEpG,qBAAqB;QACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,wBAAwB,SAAS,OAAO,UAAU,EAAE,CAAC,CAAC;QAC/G,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7B,gEAAgE;QAChE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CACzC,gCAAgC,EAChC,cAAc,CACf,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;YACnG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAClC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;QACvD,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,gDAAgD,EAAE,EAAE,CAAC,CAAC;QAEpH,gEAAgE;QAChE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAEjC,MAAM,eAAe,GAAG,8FAA8F,CAAC;QAEvH,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,wBAAwB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAExE,4DAA4D;QAC5D,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC9E,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC1E,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAED,gEAAgE;QAChE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAElC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAEvC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAClF,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnH,gEAAgE;QAChE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAExE,MAAM,aAAa,GAAG;;;;yBAID,CAAC;QAEtB,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE,CAAC;YACxE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC;YACjC,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,2BAA2B,SAAS,eAAe,IAAI,UAAU,KAAK,0BAA0B,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,qBAAqB,aAAa,EAAE,CAAC;QACrL,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAC/E,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAEtE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACpC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAClC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE1B,OAAO;YACL,KAAK;YACL,MAAM,EAAE,WAAW;YACnB,aAAa;YACb,OAAO,EAAE,aAAa;SACvB,CAAC;IAEJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAClC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/commands/execpolicy.d.ts

@@ -0,0 +1,17 @@
+/**
+ * buddy execpolicy — CLI for the ExecPolicy command authorization system.
+ *
+ * Codex-inspired command execution policy management with token-array prefix
+ * rules and glob/regex pattern rules.
+ *
+ * Subcommands:
+ *   check <command>           Evaluate a command against all active rules
+ *   check-argv <cmd> [args…]  Evaluate a parsed argv token array (prefix rules first)
+ *   list                      List all active rules
+ *   list-prefix               List prefix rules
+ *   add-prefix <tokens…>      Add a prefix rule
+ *   show-dangerous <command>  Check if a command matches dangerous patterns
+ *   dashboard                 Show full policy dashboard
+ */
+import { Command } from 'commander';
+export declare function createExecPolicyCommand(): Command;

package/dist/commands/execpolicy.js

@@ -0,0 +1,155 @@
+/**
+ * buddy execpolicy — CLI for the ExecPolicy command authorization system.
+ *
+ * Codex-inspired command execution policy management with token-array prefix
+ * rules and glob/regex pattern rules.
+ *
+ * Subcommands:
+ *   check <command>           Evaluate a command against all active rules
+ *   check-argv <cmd> [args…]  Evaluate a parsed argv token array (prefix rules first)
+ *   list                      List all active rules
+ *   list-prefix               List prefix rules
+ *   add-prefix <tokens…>      Add a prefix rule
+ *   show-dangerous <command>  Check if a command matches dangerous patterns
+ *   dashboard                 Show full policy dashboard
+ */
+import { Command } from 'commander';
+import { initializeExecPolicy } from '../sandbox/execpolicy.js';
+export function createExecPolicyCommand() {
+    const cmd = new Command('execpolicy').description('Manage execution policy rules — allow/deny/ask/sandbox for shell commands (Codex-inspired)');
+    // ── check ──────────────────────────────────────────────────────────────────
+    cmd
+        .command('check <command>')
+        .description('Evaluate a shell command string against all active rules')
+        .option('-d, --cwd <dir>', 'Working directory context', process.cwd())
+        .action(async (command, opts) => {
+        const policy = await initializeExecPolicy();
+        const result = policy.evaluate(command, [], opts.cwd);
+        const icon = result.action === 'allow' ? '✓' :
+            result.action === 'deny' ? '✗' :
+                result.action === 'sandbox' ? '📦' : '?';
+        console.log(`${icon} Action: ${result.action.toUpperCase()}`);
+        console.log(`  Reason: ${result.reason}`);
+        if (result.matchedRule) {
+            console.log(`  Rule:   [${result.matchedRule.id}] ${result.matchedRule.name}`);
+        }
+        if (result.constraints && Object.keys(result.constraints).length > 0) {
+            console.log(`  Constraints:`, JSON.stringify(result.constraints, null, 2));
+        }
+    });
+    // ── check-argv ─────────────────────────────────────────────────────────────
+    cmd
+        .command('check-argv <cmd> [args...]')
+        .description('Evaluate a parsed argv token array (prefix rules take priority over regex/glob)')
+        .option('-d, --cwd <dir>', 'Working directory context', process.cwd())
+        .action(async (cmd2, args, opts) => {
+        const policy = await initializeExecPolicy();
+        const argv = [cmd2, ...args];
+        const result = policy.evaluateArgv(argv, opts.cwd);
+        const icon = result.action === 'allow' ? '✓' :
+            result.action === 'deny' ? '✗' :
+                result.action === 'sandbox' ? '📦' : '?';
+        console.log(`Argv: ${argv.join(' ')}`);
+        console.log(`${icon} Action: ${result.action.toUpperCase()}`);
+        console.log(`  Reason: ${result.reason}`);
+    });
+    // ── list ───────────────────────────────────────────────────────────────────
+    cmd
+        .command('list')
+        .description('List all active policy rules')
+        .option('--no-builtin', 'Hide built-in rules')
+        .action(async (opts) => {
+        const policy = await initializeExecPolicy();
+        const rules = policy.getRules(opts.builtin !== false);
+        if (rules.length === 0) {
+            console.log('No rules found.');
+            return;
+        }
+        console.log(`\n${'ID'.padEnd(36)} ${'ACTION'.padEnd(8)} ${'PRI'.padEnd(4)} NAME`);
+        console.log('─'.repeat(80));
+        for (const r of rules) {
+            const status = r.enabled ? '' : ' [disabled]';
+            console.log(`${r.id.padEnd(36)} ${r.action.padEnd(8)} ${String(r.priority).padEnd(4)} ${r.name}${status}`);
+        }
+    });
+    // ── list-prefix ────────────────────────────────────────────────────────────
+    cmd
+        .command('list-prefix')
+        .description('List token-array prefix rules')
+        .action(async () => {
+        const policy = await initializeExecPolicy();
+        const rules = policy.getPrefixRules();
+        if (rules.length === 0) {
+            console.log('No prefix rules defined.');
+            return;
+        }
+        console.log(`\n${'PREFIX TOKENS'.padEnd(40)} ${'ACTION'.padEnd(8)} ID`);
+        console.log('─'.repeat(80));
+        for (const r of rules) {
+            const tokens = r.prefix.join(' ').padEnd(40);
+            const desc = r.description ? `  # ${r.description}` : '';
+            console.log(`${tokens} ${r.action.padEnd(8)} ${r.id}${desc}`);
+        }
+    });
+    // ── add-prefix ─────────────────────────────────────────────────────────────
+    cmd
+        .command('add-prefix <tokens...>')
+        .description('Add a token-array prefix rule (e.g. "add-prefix git push --action deny")')
+        .option('-a, --action <action>', 'Action: allow|deny|ask|sandbox', 'ask')
+        .option('--desc <description>', 'Human-readable description')
+        .option('--disable', 'Create rule in disabled state')
+        .action(async (tokens, opts) => {
+        const validActions = ['allow', 'deny', 'ask', 'sandbox'];
+        if (!validActions.includes(opts.action)) {
+            console.error(`Invalid action "${opts.action}". Must be one of: ${validActions.join(', ')}`);
+            process.exit(1);
+        }
+        const policy = await initializeExecPolicy();
+        const rule = {
+            prefix: tokens,
+            action: opts.action,
+            description: opts.desc,
+            enabled: !opts.disable,
+        };
+        const created = policy.addPrefixRule(rule);
+        console.log(`✓ Added prefix rule [${created.id}]: ${tokens.join(' ')} → ${opts.action}`);
+        await policy.saveRules();
+    });
+    // ── show-dangerous ─────────────────────────────────────────────────────────
+    cmd
+        .command('show-dangerous <command>')
+        .description('Check if a command matches known dangerous patterns')
+        .action(async (command) => {
+        // Access dangerous pattern detection via evaluate
+        const policy = await initializeExecPolicy();
+        const result = policy.evaluate(command);
+        if (result.action === 'deny' && result.matchedRule === null) {
+            // Dangerous pattern match (no rule matched, directly denied)
+            console.log(`⚠️  DANGEROUS: ${result.reason}`);
+        }
+        else if (result.action === 'deny') {
+            console.log(`✗ DENIED by rule: ${result.matchedRule?.name ?? result.reason}`);
+        }
+        else {
+            console.log(`✓ No dangerous pattern detected. Action: ${result.action}`);
+        }
+    });
+    // ── dashboard ──────────────────────────────────────────────────────────────
+    cmd
+        .command('dashboard')
+        .description('Show full execution policy dashboard')
+        .action(async () => {
+        const policy = await initializeExecPolicy();
+        console.log(policy.formatDashboard());
+        const prefixRules = policy.getPrefixRules();
+        if (prefixRules.length > 0) {
+            console.log(`\n🔑 Prefix Rules (${prefixRules.length})`);
+            for (const r of prefixRules) {
+                const status = r.enabled ? '' : ' [disabled]';
+                console.log(`  ${r.prefix.join(' ')} → ${r.action}${status}`);
+            }
+        }
+    });
+    return cmd;
+}
+//# sourceMappingURL=execpolicy.js.map

package/dist/commands/execpolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execpolicy.js","sourceRoot":"","sources":["../../src/commands/execpolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAiB,oBAAoB,EAAc,MAAM,0BAA0B,CAAC;AAE3F,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAC/C,4FAA4F,CAC7F,CAAC;IAEF,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAqB,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,YAAY,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,4BAA4B,CAAC;SACrC,WAAW,CAAC,iFAAiF,CAAC;SAC9F,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,IAAqB,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,YAAY,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,cAAc,EAAE,qBAAqB,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,uBAAuB,EAAE,gCAAgC,EAAE,KAAK,CAAC;SACxE,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,WAAW,EAAE,+BAA+B,CAAC;SACpD,MAAM,CAAC,KAAK,EAAE,MAAgB,EAAE,IAA0D,EAAE,EAAE;QAC7F,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,MAAM,sBAAsB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAyC;YACjD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI,CAAC,MAA8C;YAC3D,WAAW,EAAE,IAAI,CAAC,IAAI;YACtB,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,EAAE;QAChC,kDAAkD;QAClD,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC5D,6DAA6D;YAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,GAAG;SACA,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,sBAAsB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;YACzD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/knowledge.d.ts

@@ -0,0 +1,13 @@
+/**
+ * buddy knowledge – Knowledge base CLI commands
+ *
+ * Subcommands:
+ *   buddy knowledge list              – list all loaded knowledge entries
+ *   buddy knowledge show <title>      – display a knowledge entry
+ *   buddy knowledge add               – interactive: add a new entry
+ *   buddy knowledge remove <title>    – remove a knowledge entry
+ *   buddy knowledge search <query>    – search knowledge base
+ *   buddy knowledge context           – show the full context block the agent would see
+ */
+import { Command } from 'commander';
+export declare function createKnowledgeCommand(): Command;

package/dist/commands/knowledge.js

@@ -0,0 +1,142 @@
+/**
+ * buddy knowledge – Knowledge base CLI commands
+ *
+ * Subcommands:
+ *   buddy knowledge list              – list all loaded knowledge entries
+ *   buddy knowledge show <title>      – display a knowledge entry
+ *   buddy knowledge add               – interactive: add a new entry
+ *   buddy knowledge remove <title>    – remove a knowledge entry
+ *   buddy knowledge search <query>    – search knowledge base
+ *   buddy knowledge context           – show the full context block the agent would see
+ */
+import { Command } from 'commander';
+import { getKnowledgeManager } from '../knowledge/knowledge-manager.js';
+export function createKnowledgeCommand() {
+    const cmd = new Command('knowledge')
+        .description('Manage agent knowledge bases (Knowledge.md files injected as agent context)');
+    cmd
+        .command('list')
+        .description('List all loaded knowledge entries')
+        .action(async () => {
+        const km = getKnowledgeManager();
+        await km.load();
+        const entries = km.list();
+        if (entries.length === 0) {
+            console.log('No knowledge entries found.');
+            console.log('');
+            console.log('Add knowledge files to:');
+            console.log('  ~/.codebuddy/knowledge/*.md    (global)');
+            console.log('  .codebuddy/knowledge/*.md      (project)');
+            console.log('  Knowledge.md                   (local quick-add)');
+            return;
+        }
+        console.log(`\nKnowledge entries (${entries.length}):`);
+        console.log('─'.repeat(60));
+        for (const e of entries) {
+            const tags = e.tags.length > 0 ? `  [${e.tags.join(', ')}]` : '';
+            const scope = e.scope.length > 0 ? `  scope: ${e.scope.join(', ')}` : '';
+            console.log(`  ${e.title}${tags}${scope}  (${e.source})`);
+        }
+    });
+    cmd
+        .command('show <title>')
+        .description('Display a knowledge entry by title')
+        .action(async (title) => {
+        const km = getKnowledgeManager();
+        await km.load();
+        const entry = km.list().find(e => e.title.toLowerCase() === title.toLowerCase());
+        if (!entry) {
+            console.error(`❌ No knowledge entry found: "${title}"`);
+            process.exit(1);
+        }
+        console.log(`\n# ${entry.title}`);
+        console.log(`Source: ${entry.source}  |  Path: ${entry.path}`);
+        if (entry.tags.length > 0)
+            console.log(`Tags: ${entry.tags.join(', ')}`);
+        if (entry.scope.length > 0)
+            console.log(`Scope: ${entry.scope.join(', ')}`);
+        console.log('\n' + entry.content);
+    });
+    cmd
+        .command('search <query>')
+        .description('Search knowledge base with keyword query')
+        .option('-n, --limit <n>', 'Max results', '5')
+        .action(async (query, opts) => {
+        const km = getKnowledgeManager();
+        await km.load();
+        const results = km.search(query, parseInt(opts.limit, 10));
+        if (results.length === 0) {
+            console.log(`No matches for "${query}".`);
+            return;
+        }
+        console.log(`\nSearch results for "${query}" (${results.length}):`);
+        console.log('─'.repeat(60));
+        for (const { entry, score, excerpt } of results) {
+            console.log(`\n[${score.toFixed(2)}] ${entry.title} (${entry.source})`);
+            console.log(excerpt.slice(0, 300));
+        }
+    });
+    cmd
+        .command('add')
+        .description('Add a new knowledge entry (interactive)')
+        .option('-t, --title <title>', 'Entry title')
+        .option('-f, --file <file>', 'Read content from a file')
+        .option('--tags <tags>', 'Comma-separated tags')
+        .option('--scope <scope>', 'Comma-separated scope modes')
+        .action(async (opts) => {
+        const { createInterface } = await import('readline');
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const ask = (q) => new Promise(resolve => rl.question(q, resolve));
+        const title = opts.title || await ask('Title: ');
+        const tags = opts.tags ? opts.tags.split(',').map((t) => t.trim()) : [];
+        const scope = opts.scope ? opts.scope.split(',').map((s) => s.trim()) : [];
+        let content;
+        if (opts.file) {
+            const { readFileSync } = await import('fs');
+            content = readFileSync(opts.file, 'utf-8');
+        }
+        else {
+            console.log('Content (end with a line containing only "---"):');
+            const lines = [];
+            for await (const line of rl) {
+                if (line === '---')
+                    break;
+                lines.push(line);
+            }
+            content = lines.join('\n');
+        }
+        rl.close();
+        const km = getKnowledgeManager();
+        const filePath = await km.add(title, content, tags, scope);
+        console.log(`✅ Knowledge entry saved: ${filePath}`);
+    });
+    cmd
+        .command('remove <title>')
+        .description('Remove a knowledge entry by title')
+        .action(async (title) => {
+        const km = getKnowledgeManager();
+        await km.load();
+        const ok = await km.remove(title);
+        if (!ok) {
+            console.error(`❌ Could not remove "${title}" – not found or not removable.`);
+            process.exit(1);
+        }
+        console.log(`✅ Removed knowledge entry: "${title}"`);
+    });
+    cmd
+        .command('context')
+        .description('Show the full knowledge context block the agent would receive')
+        .option('-s, --scope <scope>', 'Filter by agent mode scope')
+        .action(async (opts) => {
+        const km = getKnowledgeManager();
+        await km.load();
+        const block = km.buildContextBlock({ scope: opts.scope });
+        if (!block) {
+            console.log('(no knowledge entries loaded)');
+            return;
+        }
+        console.log(block);
+    });
+    return cmd;
+}
+//# sourceMappingURL=knowledge.js.map

package/dist/commands/knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge.js","sourceRoot":"","sources":["../../src/commands/knowledge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;SACjC,WAAW,CAAC,6EAA6E,CAAC,CAAC;IAE9F,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QAE1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,oCAAoC,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhB,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAC9C,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,gCAAgC,KAAK,GAAG,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,iBAAiB,EAAE,aAAa,EAAE,GAAG,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,IAAI,EAAE,EAAE;QACpC,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhB,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAE3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,qBAAqB,EAAE,aAAa,CAAC;SAC5C,MAAM,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;SACvD,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC;SAC/C,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAErD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAmB,EAAE,CACzC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnF,IAAI,OAAe,CAAC;QACpB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAChE,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5B,IAAI,IAAI,KAAK,KAAK;oBAAE,MAAM;gBAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,EAAE,CAAC,KAAK,EAAE,CAAC;QAEX,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,uBAAuB,KAAK,iCAAiC,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,+DAA+D,CAAC;SAC5E,MAAM,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAEhB,MAAM,KAAK,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/lessons.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `buddy lessons` CLI command
+ *
+ * Manages the persistent lessons.md self-improvement loop.
+ * Lessons are automatically injected before every LLM turn (before the
+ * todo suffix) so the agent internalises learned patterns across sessions.
+ *
+ * Subcommands: list, add, search, clear
+ */
+import { Command } from 'commander';
+export declare function createLessonsCommand(): Command;