@phuetz/code-buddy 1.2.0 → 1.3.0

package/README.md

@@ -17,7 +17,7 @@
 <p align="center">
   <a href="https://github.com/phuetz/code-buddy/stargazers"><img src="https://img.shields.io/github/stars/phuetz/code-buddy?style=flat-square&logo=github&color=feca57&label=Star" alt="GitHub stars"/></a>
   <img src="https://img.shields.io/badge/Tests-27K%2B-00d26a?style=flat-square&logo=jest" alt="Tests"/>
-  <img src="https://img.shields.io/badge/v1.2.0-GA-blueviolet?style=flat-square" alt="Version 1.2.0 GA"/>
+  <img src="https://img.shields.io/badge/v1.3.0-GA-blueviolet?style=flat-square" alt="Version 1.3.0 GA"/>
 </p>
 
 <br/>
@@ -62,6 +62,12 @@ An open-source, multi-provider AI coding agent with a terminal UI, an HTTP/WebSo
 
 ## In action
 
+**It writes the code *and* the test, then runs it — `$0`.** Hand Code Buddy a task in the terminal; here Grok (a flat-fee subscription, no API key) writes FizzBuzz + a test and runs it green — then a human re-runs the test to confirm. Unedited:
+
+<p align="center">
+  <img src="docs/assets/coding-demo.gif" alt="Code Buddy writes fizzbuzz.mjs and a test on Grok, runs it, and the test passes — $0, no API key" width="760"/>
+</p>
+
 **Free local AI, with the reasoning on screen.** A local Ollama model (`qwen3.6:35b-a3b`) thinks through a task, then *uses tools* to do it — no cloud, ~`$0.0001`. Unedited captures from the Cowork desktop app:
 
 <table>
@@ -83,6 +89,12 @@ An open-source, multi-provider AI coding agent with a terminal UI, an HTTP/WebSo
   <img src="docs/screenshots/chatgpt-oauth-login.png" alt="ChatGPT OAuth login flow" width="820"/>
 </p>
 
+**xAI / SuperGrok login** — `buddy login xai`, sign in once, then Grok answers for `$0` (flat-fee subscription, no API key):
+
+<p align="center">
+  <img src="docs/assets/login-demo.gif" alt="After buddy login xai, Grok writes a haiku with no API key, $0 marginal" width="760"/>
+</p>
+
 **Self-audit.** Asked to find a bug in its own integration code, `gpt-5.5` reads `provider-chatgpt-responses.ts`, spots a stale-variable issue (mutated `body.model` not propagated), and proposes the exact fix:
 
 <p align="center">
@@ -108,6 +120,23 @@ More desktop demos (Fleet, Autonomy, Companion, …) and captures: [`cowork/read
 
 ---
 
+## Research — a sensory "nervous system" *(experimental)*
+
+Toward the long-term companion/robot vision, [`buddy-sense/`](buddy-sense/) is a **Rust, event-driven perception layer**. Parallel **sense modules** (audio VAD — energy or Silero neural; an autonomic **heartbeat**; screen via `xcap`; UI focus via AT-SPI) feed a **thalamus** that gates + coalesces the stream and broadcasts it over a loopback WebSocket into Code Buddy's event bus — where the heartbeat **paces background memory consolidation** ("dreaming", inspired by OpenClaw). Local, `$0`, permissive deps only (clean-room — no proprietary code copied).
+
+<p align="center"><img src="buddy-sense/docs/architecture.svg" alt="buddy-sense nervous-system architecture: senses → thalamus → bridge → Code Buddy event bus" width="840"/></p>
+
+**Honestly experimental** — distinct from the GA core above: the default daemon emits the heartbeat (+ audio from a WAV file); the live camera/mic aren't wired into the daemon yet. `speech → STT → 'hearing' percept` **is** wired (faster-whisper), with a hook left for driving a full agent turn. What's real today: the pure detector cores + thalamus + bridge are unit-tested (`cargo test`, 20 tests, no hardware), and the loopback bridge → event bus → reaction path (incl. the speech transcription) is covered on the Code Buddy side.
+
+```bash
+cd buddy-sense && cargo test     # 20 tests, no hardware
+./buddy-sense/demo.sh            # headless end-to-end: heartbeat + audio VAD → Code Buddy
+```
+
+Design, the five sense modules, the opt-in features, and the diagrams: [`buddy-sense/README.md`](buddy-sense/README.md).
+
+---
+
 ## Quick Start
 
 ```bash
@@ -154,6 +183,18 @@ buddy llm ensemble "is this approach sound?" # ask ChatGPT + Grok + Ollama toget
 CODEBUDDY_LLM_FAILOVER=1 buddy -p "…"         # if the primary errors, auto-continue on the next active LLM
 ```
 
+<p align="center">
+  <img src="docs/assets/llm-demo.gif" alt="buddy llm lists your active LLMs, then auto-fails over from Grok to ChatGPT when the primary errors" width="760"/>
+  <br/>
+  <sub>Your logins at a glance — and automatic failover from one to the next when one has a problem, at <code>$0</code>. Real run, unedited.</sub>
+</p>
+
+<p align="center">
+  <img src="docs/assets/ensemble-demo.gif" alt="buddy llm ensemble asks ChatGPT, Ollama and Grok the same question, then synthesizes one answer" width="760"/>
+  <br/>
+  <sub><code>buddy llm ensemble</code> — every brain you're logged into answers, then it's synthesized into one. Real run, unedited.</sub>
+</p>
+
 See [Getting Started](docs/getting-started.md) for install options, headless mode, sessions, and typical workflows.
 
 ---
@@ -168,10 +209,22 @@ Cowork is the desktop cockpit for Code Buddy: chat, tools, traces, workflows, se
   <sub>Real <code>gpt-5.5</code> in the Cowork desktop app — the answer streams in, cost <code>$0.0000</code>. <a href="docs/qa/code-buddy-studio/showcase-2026-06-16/cowork-chat-stream.mp4">MP4 →</a></sub>
 </p>
 
+<p align="center">
+  <a href="docs/assets/cowork-chat-demo.mp4"><img src="docs/assets/cowork-chat-demo.gif" alt="A local reasoning model thinks through a haiku on screen in the Cowork desktop app, $0" width="760"/></a>
+  <br/>
+  <sub>…and fully local: a reasoning model (<code>qwen3.6:35b-a3b</code>) <b>thinks on screen</b>, then answers — no cloud, <code>$0</code>. <a href="docs/assets/cowork-chat-demo.mp4">MP4 →</a></sub>
+</p>
+
+<p align="center">
+  <a href="docs/assets/cowork-panels-demo.mp4"><img src="docs/assets/cowork-panels-demo.gif" alt="The Cowork left rail opens the Autonomy dashboard, Memory and other panels as dock tabs" width="760"/></a>
+  <br/>
+  <sub>The left rail opens every panel as a dock tab — here the <b>Autonomy dashboard</b> (24/7 daemon, free-first model ladder, live subagents) and <b>Project Memory</b>. <a href="docs/assets/cowork-panels-demo.mp4">MP4 →</a></sub>
+</p>
+
 <table>
   <tr>
-    <td width="50%" align="center"><img src="docs/qa/code-buddy-studio/showcase-2026-06-16/00-welcome.png" alt="Cowork desktop cockpit" width="430"/><br/><sub>Desktop cockpit — menus, sessions, composer</sub></td>
-    <td width="50%" align="center"><img src="docs/qa/code-buddy-studio/showcase-2026-06-16/05-onboarding-provider.png" alt="Onboarding — pick a provider" width="430"/><br/><sub>Onboarding — 15 providers, ChatGPT <code>$0</code> or local Ollama</sub></td>
+    <td width="50%" align="center"><img src="docs/assets/cowork-welcome.png" alt="Cowork desktop home with the expanded left menu and quick-action cards" width="430"/><br/><sub>Home — expanded menu, quick-action cards, gradient hero</sub></td>
+    <td width="50%" align="center"><img src="docs/assets/cowork-panel.png" alt="A launcher opens its panel as a tab — here the Autonomy dashboard" width="430"/><br/><sub>A launcher opens its panel as a tab — here the Autonomy dashboard (daemon, model ladder, subagents)</sub></td>
   </tr>
   <tr>
     <td width="50%" align="center"><img src="docs/qa/code-buddy-studio/showcase-2026-06-16/03-fleet-autonomy.png" alt="Fleet and autonomy dashboard" width="430"/><br/><sub>Fleet dispatch · tool-permission posture · Hermes toolsets</sub></td>

package/dist/agent/autonomous/agentic-coding-contract.d.ts

@@ -58,15 +58,15 @@ export declare const agenticCodingApprovalDecisionSchema: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     reason: string;
     decision: "rejected" | "approved";
-    kind: "agentic-coding-approval-decision";
     schemaVersion: 1;
+    kind: "agentic-coding-approval-decision";
     reviewer: string;
     decidedAt?: string | undefined;
 }, {
     reason: string;
     decision: "rejected" | "approved";
-    kind: "agentic-coding-approval-decision";
     schemaVersion: 1;
+    kind: "agentic-coding-approval-decision";
     reviewer: string;
     decidedAt?: string | undefined;
 }>;
@@ -108,6 +108,7 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
     risks: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strict", z.ZodTypeAny, {
     summary: string;
+    schemaVersion: 1;
     kind: "agentic-coding-workflow-builder-proposal";
     nodes: {
         type: "action" | "trigger" | "logic";
@@ -116,7 +117,6 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
         description: string;
         agenticType: "edit" | "analysis" | "handoff" | "approval" | "verification" | "gate";
     }[];
-    schemaVersion: 1;
     edges: {
         source: string;
         target: string;
@@ -126,6 +126,7 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
     coworkVisualizationNotes: string[];
 }, {
     summary: string;
+    schemaVersion: 1;
     kind: "agentic-coding-workflow-builder-proposal";
     nodes: {
         type: "action" | "trigger" | "logic";
@@ -134,7 +135,6 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
         description: string;
         agenticType: "edit" | "analysis" | "handoff" | "approval" | "verification" | "gate";
     }[];
-    schemaVersion: 1;
     edges: {
         source: string;
         target: string;
@@ -144,6 +144,7 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
     coworkVisualizationNotes?: string[] | undefined;
 }>, {
     summary: string;
+    schemaVersion: 1;
     kind: "agentic-coding-workflow-builder-proposal";
     nodes: {
         type: "action" | "trigger" | "logic";
@@ -152,7 +153,6 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
         description: string;
         agenticType: "edit" | "analysis" | "handoff" | "approval" | "verification" | "gate";
     }[];
-    schemaVersion: 1;
     edges: {
         source: string;
         target: string;
@@ -162,6 +162,7 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
     coworkVisualizationNotes: string[];
 }, {
     summary: string;
+    schemaVersion: 1;
     kind: "agentic-coding-workflow-builder-proposal";
     nodes: {
         type: "action" | "trigger" | "logic";
@@ -170,7 +171,6 @@ export declare const agenticCodingWorkflowBuilderProposalSchema: z.ZodEffects<z.
         description: string;
         agenticType: "edit" | "analysis" | "handoff" | "approval" | "verification" | "gate";
     }[];
-    schemaVersion: 1;
     edges: {
         source: string;
         target: string;

package/dist/agent/base-agent.d.ts

@@ -191,6 +191,10 @@ export declare abstract class BaseAgent extends EventEmitter implements Agent {
     getMCPTools(): Promise<Map<string, unknown[]>>;
     getMCPClient(): MCPClient;
     protected initializeMCP(): void;
+    /** Resolves once MCP server initialization has settled (or no-op if MCP was
+     * never started). Headless/one-shot callers await this so the gitnexus-style
+     * MCP tools are registered before the first turn instead of racing init. */
+    getMCPReady(): Promise<void>;
     getContextStats(): import("./facades/agent-context-facade.js").ContextStats;
     formatContextStats(): string;
     /**

package/dist/agent/base-agent.js

@@ -316,6 +316,12 @@ export class BaseAgent extends EventEmitter {
     initializeMCP() {
         this.infrastructureFacade.initializeMCP();
     }
+    /** Resolves once MCP server initialization has settled (or no-op if MCP was
+     * never started). Headless/one-shot callers await this so the gitnexus-style
+     * MCP tools are registered before the first turn instead of racing init. */
+    getMCPReady() {
+        return this.infrastructureFacade.getMCPReady();
+    }
     // ============================================================================
     // Context Management (delegates to contextFacade)
     // ============================================================================

package/dist/agent/facades/infrastructure-facade.d.ts

@@ -77,11 +77,18 @@ export declare class InfrastructureFacade {
      * Get the MCP client instance (for advanced operations)
      */
     getMCPClient(): MCPClient;
+    /** Resolves once initializeMCP() has finished connecting servers (or failed
+     * softly). Callers that need MCP tools available — notably headless one-shot
+     * runs — can await getMCPReady() instead of racing the fire-and-forget init. */
+    private mcpReady;
     /**
-     * Initialize MCP servers asynchronously
-     * This is a fire-and-forget operation
+     * Initialize MCP servers asynchronously. Kicks off in the background (the
+     * constructor path stays non-blocking), but the readiness promise is captured
+     * so a one-shot/headless caller can await getMCPReady() before its first turn.
      */
     initializeMCP(): void;
+    /** Promise that resolves when MCP server initialization has settled. */
+    getMCPReady(): Promise<void>;
     /**
      * Get the ICM bridge instance for memory operations
      */

package/dist/agent/facades/infrastructure-facade.js

@@ -67,12 +67,17 @@ export class InfrastructureFacade {
     getMCPClient() {
         return this.mcpClient;
     }
+    /** Resolves once initializeMCP() has finished connecting servers (or failed
+     * softly). Callers that need MCP tools available — notably headless one-shot
+     * runs — can await getMCPReady() instead of racing the fire-and-forget init. */
+    mcpReady = Promise.resolve();
     /**
-     * Initialize MCP servers asynchronously
-     * This is a fire-and-forget operation
+     * Initialize MCP servers asynchronously. Kicks off in the background (the
+     * constructor path stays non-blocking), but the readiness promise is captured
+     * so a one-shot/headless caller can await getMCPReady() before its first turn.
      */
     initializeMCP() {
-        (async () => {
+        this.mcpReady = (async () => {
             try {
                 const config = loadMCPConfig();
                 if (config.servers.length > 0) {
@@ -87,9 +92,13 @@ export class InfrastructureFacade {
             catch (error) {
                 logger.warn('MCP initialization failed', { error: getErrorMessage(error) });
             }
-        })().catch((error) => {
-            logger.warn('Uncaught error in MCP initialization', { error: getErrorMessage(error) });
-        });
+        })();
+        // Never let this become an unhandled rejection for callers that don't await.
+        void this.mcpReady.catch(() => { });
+    }
+    /** Promise that resolves when MCP server initialization has settled. */
+    getMCPReady() {
+        return this.mcpReady;
     }
     /**
      * Get the ICM bridge instance for memory operations

package/dist/agent/self-improvement/authored-artifact-gate.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Authored-artifact gate — the static (no-execution) safety scan applied to any
+ * code the agent authors for itself (tools or skill scripts) BEFORE it is run or
+ * registered. Blocking and ordered; the behavioural held-out scoring (which DOES
+ * run the code, sandboxed) lives in sandbox-scorer.ts and runs only after this.
+ *
+ * @module agent/self-improvement/authored-artifact-gate
+ */
+export interface ArtifactGateResult {
+    ok: boolean;
+    reasons: string[];
+}
+/**
+ * Statically inspect authored code. Returns ok=false with one or more reasons on
+ * any finding. `subsystem` selects the dangerous-pattern set ('code' for tools,
+ * 'skill' for skill scripts).
+ */
+export declare function inspectAuthoredCode(code: string, subsystem?: 'code' | 'skill'): ArtifactGateResult;

package/dist/agent/self-improvement/authored-artifact-gate.js

@@ -0,0 +1,42 @@
+/**
+ * Authored-artifact gate — the static (no-execution) safety scan applied to any
+ * code the agent authors for itself (tools or skill scripts) BEFORE it is run or
+ * registered. Blocking and ordered; the behavioural held-out scoring (which DOES
+ * run the code, sandboxed) lives in sandbox-scorer.ts and runs only after this.
+ *
+ * @module agent/self-improvement/authored-artifact-gate
+ */
+import { matchAllDangerousPatterns } from '../../security/dangerous-patterns.js';
+/** Omission placeholders that signal truncated / non-self-contained code. */
+const OMISSION_RE = /\/\/\s*\.\.\.\s*(rest|remaining|other|more|implementation|code)\b|#\s*\.\.\.\s*(rest|remaining)\b/i;
+/** Obvious secret shapes — never let an authored artifact embed these. */
+const SECRET_RE = /(sk-[a-z0-9]{16,}|api[_-]?key\s*[:=]\s*['"]?\S{12,}|-----BEGIN [A-Z ]*PRIVATE KEY-----|ghp_[a-zA-Z0-9]{20,}|AKIA[0-9A-Z]{16})/i;
+/** Writing under src/ is the hard self-modification invariant — refuse it. */
+const SRC_WRITE_RE = /(writeFile|writeFileSync|appendFile\w*|fs\.\w*write|open\s*\([^)]*['"]w|>>?\s*['"]?\.{0,2}\/?src\/)/i;
+const MAX_CODE_BYTES = 64 * 1024;
+/**
+ * Statically inspect authored code. Returns ok=false with one or more reasons on
+ * any finding. `subsystem` selects the dangerous-pattern set ('code' for tools,
+ * 'skill' for skill scripts).
+ */
+export function inspectAuthoredCode(code, subsystem = 'code') {
+    const reasons = [];
+    const text = String(code ?? '');
+    if (!text.trim())
+        reasons.push('code is empty');
+    if (text.length > MAX_CODE_BYTES)
+        reasons.push(`code too large (${text.length} > ${MAX_CODE_BYTES} bytes)`);
+    const dangerous = matchAllDangerousPatterns(text, subsystem);
+    if (dangerous.length > 0) {
+        reasons.push(`matched ${dangerous.length} dangerous pattern(s): ${dangerous.map((d) => d.description).slice(0, 4).join('; ')}`);
+    }
+    if (SECRET_RE.test(text))
+        reasons.push('looks like it embeds a secret');
+    if (OMISSION_RE.test(text))
+        reasons.push('contains an omission placeholder (not self-contained)');
+    if (/src\//.test(text) && SRC_WRITE_RE.test(text)) {
+        reasons.push('writes under src/ (forbidden self-modification invariant)');
+    }
+    return { ok: reasons.length === 0, reasons };
+}
+//# sourceMappingURL=authored-artifact-gate.js.map

package/dist/agent/self-improvement/authored-tool-runtime.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Authored-tool runtime — shared by `register_tool` (the live capability) and the
+ * self-improvement engine's sandbox scorer (the gate). One definition of "how an
+ * authored tool runs" so the thing we GATE is exactly the thing we REGISTER.
+ *
+ * An authored tool runs its `code` SANDBOXED: a throwaway cwd, RPC off (no
+ * callback into the tool system), and its call arguments arrive as JSON in the
+ * CODEBUDDY_TOOL_INPUT env var; the script prints its result to stdout.
+ *
+ * @module agent/self-improvement/authored-tool-runtime
+ */
+import type { ITool } from '../../tools/registry/types.js';
+import { type ExecuteCodeLanguage } from '../../tools/execute-code-runner.js';
+export declare const AUTHORED_PREFIX = "authored__";
+export declare const AUTHORED_LANGUAGES: ExecuteCodeLanguage[];
+export interface AuthoredToolSpec {
+    /** Namespaced tool name (see toAuthoredName). */
+    name: string;
+    description: string;
+    parameters: Record<string, unknown>;
+    language: ExecuteCodeLanguage;
+    code: string;
+}
+/** Namespace + sanitize a raw tool name to `authored__<slug>` (never shadows a built-in). */
+export declare function toAuthoredName(raw: string): string;
+/** Build an ITool that runs the authored `code` sandboxed when invoked. */
+export declare function buildAuthoredTool(spec: AuthoredToolSpec): ITool;

package/dist/agent/self-improvement/authored-tool-runtime.js

@@ -0,0 +1,57 @@
+/**
+ * Authored-tool runtime — shared by `register_tool` (the live capability) and the
+ * self-improvement engine's sandbox scorer (the gate). One definition of "how an
+ * authored tool runs" so the thing we GATE is exactly the thing we REGISTER.
+ *
+ * An authored tool runs its `code` SANDBOXED: a throwaway cwd, RPC off (no
+ * callback into the tool system), and its call arguments arrive as JSON in the
+ * CODEBUDDY_TOOL_INPUT env var; the script prints its result to stdout.
+ *
+ * @module agent/self-improvement/authored-tool-runtime
+ */
+import * as os from 'os';
+import * as path from 'path';
+import { randomUUID } from 'crypto';
+import { executeCode } from '../../tools/execute-code-runner.js';
+export const AUTHORED_PREFIX = 'authored__';
+export const AUTHORED_LANGUAGES = ['javascript', 'typescript', 'python'];
+/** Namespace + sanitize a raw tool name to `authored__<slug>` (never shadows a built-in). */
+export function toAuthoredName(raw) {
+    const base = String(raw)
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9_]+/g, '_')
+        .replace(/^_+|_+$/g, '');
+    return base.startsWith(AUTHORED_PREFIX) ? base : `${AUTHORED_PREFIX}${base || 'tool'}`;
+}
+/** Build an ITool that runs the authored `code` sandboxed when invoked. */
+export function buildAuthoredTool(spec) {
+    const { name, description, parameters, language, code } = spec;
+    return {
+        name,
+        description,
+        async execute(input) {
+            const rootDir = path.join(os.tmpdir(), `cb-authored-${randomUUID()}`);
+            try {
+                const res = await executeCode({ code, language, env: { CODEBUDDY_TOOL_INPUT: JSON.stringify(input ?? {}) } }, { rootDir, rpcEnabled: false });
+                if (!res.ok) {
+                    return {
+                        success: false,
+                        error: `authored tool "${name}" failed (exit ${res.exitCode}): ${res.stderr.slice(0, 2000) || res.error || 'no output'}`,
+                    };
+                }
+                return { success: true, output: res.stdout.slice(0, 100_000) || '(no stdout)' };
+            }
+            catch (err) {
+                return {
+                    success: false,
+                    error: `authored tool "${name}" error: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        },
+        getSchema() {
+            return { name, description, parameters: parameters };
+        },
+    };
+}
+//# sourceMappingURL=authored-tool-runtime.js.map

package/dist/agent/self-improvement/authored-tool-store.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Authored-tool store — durable persistence for tools the agent has authored and
+ * kept (auto-apply). Without this, authored tools live only for the session; with
+ * it, they are reloaded into both registries at startup so a self-improvement
+ * survives a restart. A flat JSON file alongside the evolutionary archive.
+ *
+ * @module agent/self-improvement/authored-tool-store
+ */
+import type { AuthoredToolSpec } from './authored-tool-runtime.js';
+export declare const AUTHORED_TOOL_STORE_SCHEMA_VERSION = 1;
+export interface AuthoredToolStoreOptions {
+    workDir?: string;
+}
+export declare class AuthoredToolStore {
+    private readonly filePath;
+    constructor(options?: AuthoredToolStoreOptions);
+    get path(): string;
+    private read;
+    private write;
+    list(): AuthoredToolSpec[];
+    /** Upsert a spec by name (a re-authored tool replaces the prior version). */
+    add(spec: AuthoredToolSpec): void;
+    remove(name: string): boolean;
+}

package/dist/agent/self-improvement/authored-tool-store.js

@@ -0,0 +1,57 @@
+/**
+ * Authored-tool store — durable persistence for tools the agent has authored and
+ * kept (auto-apply). Without this, authored tools live only for the session; with
+ * it, they are reloaded into both registries at startup so a self-improvement
+ * survives a restart. A flat JSON file alongside the evolutionary archive.
+ *
+ * @module agent/self-improvement/authored-tool-store
+ */
+import fs from 'fs';
+import path from 'path';
+export const AUTHORED_TOOL_STORE_SCHEMA_VERSION = 1;
+export class AuthoredToolStore {
+    filePath;
+    constructor(options = {}) {
+        const root = options.workDir ?? process.cwd();
+        this.filePath = path.join(root, '.codebuddy', 'self-improvement', 'authored-tools.json');
+    }
+    get path() {
+        return this.filePath;
+    }
+    read() {
+        try {
+            const parsed = JSON.parse(fs.readFileSync(this.filePath, 'utf-8'));
+            if (Array.isArray(parsed.tools)) {
+                return { schemaVersion: AUTHORED_TOOL_STORE_SCHEMA_VERSION, tools: parsed.tools };
+            }
+        }
+        catch {
+            /* no store yet */
+        }
+        return { schemaVersion: AUTHORED_TOOL_STORE_SCHEMA_VERSION, tools: [] };
+    }
+    write(file) {
+        fs.mkdirSync(path.dirname(this.filePath), { recursive: true });
+        fs.writeFileSync(this.filePath, JSON.stringify(file, null, 2), 'utf-8');
+    }
+    list() {
+        return this.read().tools;
+    }
+    /** Upsert a spec by name (a re-authored tool replaces the prior version). */
+    add(spec) {
+        const file = this.read();
+        file.tools = file.tools.filter((t) => t.name !== spec.name);
+        file.tools.push(spec);
+        this.write(file);
+    }
+    remove(name) {
+        const file = this.read();
+        const before = file.tools.length;
+        file.tools = file.tools.filter((t) => t.name !== name);
+        if (file.tools.length === before)
+            return false;
+        this.write(file);
+        return true;
+    }
+}
+//# sourceMappingURL=authored-tool-store.js.map

package/dist/agent/self-improvement/llm-tool-proposer.d.ts

@@ -0,0 +1,41 @@
+/**
+ * LLM tool proposer — authors a candidate tool with the agent's own model from a
+ * REDACTED scenario view (capability + visible cases only; never the held-out
+ * cases). The behavioural held-out gate validates every draft, so even a gamed or
+ * broken draft is caught — the LLM is a generator, not a trusted oracle.
+ *
+ * Lazy + graceful: if no provider is configured the proposer declines (null) and
+ * the engine simply finds no proposal.
+ *
+ * @module agent/self-improvement/llm-tool-proposer
+ */
+import { type AuthoredToolSpec } from './authored-tool-runtime.js';
+import type { ProposerScenarioView, ToolProposer } from './tool-proposer.js';
+import type { ToolProposal } from './tool-types.js';
+interface MinimalClient {
+    chat(messages: Array<{
+        role: string;
+        content: string;
+    }>, tools?: unknown[]): Promise<{
+        choices?: Array<{
+            message?: {
+                content?: string | null;
+            };
+        }>;
+    }>;
+}
+export declare function buildToolDraftPrompt(view: ProposerScenarioView): string;
+/** Parse + validate a model draft into an AuthoredToolSpec, or null. */
+export declare function parseToolDraft(text: string): AuthoredToolSpec | null;
+export interface LlmToolProposerOptions {
+    /** Override the chat client (tests). Defaults to provider-detected CodeBuddyClient. */
+    client?: MinimalClient | null;
+}
+export declare class LlmToolProposer implements ToolProposer {
+    private readonly options;
+    private clientPromise;
+    constructor(options?: LlmToolProposerOptions);
+    private getClient;
+    propose(view: ProposerScenarioView): Promise<ToolProposal | null>;
+}
+export {};