@praveencs/agent 0.1.0

package/dist/src/config/secrets.js

@@ -0,0 +1,98 @@
+/**
+ * Secrets management: OS keychain integration with fallback
+ * Handles API key storage, retrieval, and redaction
+ */
+// List of well-known secret patterns for auto-redaction
+const SECRET_PATTERNS = [
+    /sk-[a-zA-Z0-9_-]{20,}/g, // OpenAI
+    /sk-ant-[a-zA-Z0-9_-]{20,}/g, // Anthropic
+    /ghp_[a-zA-Z0-9]{36}/g, // GitHub PAT
+    /gho_[a-zA-Z0-9]{36}/g, // GitHub OAuth
+    /glpat-[a-zA-Z0-9_-]{20,}/g, // GitLab PAT
+    /xoxb-[a-zA-Z0-9-]+/g, // Slack Bot
+    /xoxp-[a-zA-Z0-9-]+/g, // Slack User
+    /AKIA[0-9A-Z]{16}/g, // AWS Access Key
+    /[a-f0-9]{32,}/g, // Generic hex tokens (>32 chars)
+];
+/**
+ * Redact secrets from a string
+ */
+export function redactSecrets(text) {
+    let result = text;
+    for (const pattern of SECRET_PATTERNS) {
+        result = result.replace(pattern, (match) => {
+            if (match.length < 8)
+                return match;
+            return match.substring(0, 4) + '***' + match.substring(match.length - 4);
+        });
+    }
+    return result;
+}
+/**
+ * In-memory secrets store (fallback when OS keychain is unavailable)
+ */
+class SecretsStore {
+    secrets = new Map();
+    keytarAvailable = null;
+    /**
+     * Store a secret
+     */
+    async set(key, value) {
+        if (await this.useKeytar()) {
+            try {
+                const keytar = await import('keytar');
+                await keytar.default.setPassword('agent-runtime', key, value);
+                return;
+            }
+            catch {
+                // Fallback to in-memory
+            }
+        }
+        this.secrets.set(key, value);
+    }
+    /**
+     * Retrieve a secret
+     */
+    async get(key) {
+        if (await this.useKeytar()) {
+            try {
+                const keytar = await import('keytar');
+                return await keytar.default.getPassword('agent-runtime', key);
+            }
+            catch {
+                // Fallback to in-memory
+            }
+        }
+        return this.secrets.get(key) ?? null;
+    }
+    /**
+     * Delete a secret
+     */
+    async delete(key) {
+        if (await this.useKeytar()) {
+            try {
+                const keytar = await import('keytar');
+                await keytar.default.deletePassword('agent-runtime', key);
+                return;
+            }
+            catch {
+                // Fallback to in-memory
+            }
+        }
+        this.secrets.delete(key);
+    }
+    async useKeytar() {
+        if (this.keytarAvailable !== null)
+            return this.keytarAvailable;
+        try {
+            await import('keytar');
+            this.keytarAvailable = true;
+        }
+        catch {
+            this.keytarAvailable = false;
+        }
+        return this.keytarAvailable;
+    }
+}
+export const secretsStore = new SecretsStore();
+//# sourceMappingURL=secrets.js.map

package/dist/src/config/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/config/secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wDAAwD;AACxD,MAAM,eAAe,GAAG;IACpB,wBAAwB,EAAiB,SAAS;IAClD,4BAA4B,EAAa,YAAY;IACrD,sBAAsB,EAAmB,aAAa;IACtD,sBAAsB,EAAmB,eAAe;IACxD,2BAA2B,EAAc,aAAa;IACtD,qBAAqB,EAAoB,YAAY;IACrD,qBAAqB,EAAoB,aAAa;IACtD,mBAAmB,EAAsB,iBAAiB;IAC1D,gBAAgB,EAAyB,iCAAiC;CAC7E,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACtC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACnC,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,YAAY;IACN,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,eAAe,GAAmB,IAAI,CAAC;IAE/C;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAChC,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC9D,OAAO;YACX,CAAC;YAAC,MAAM,CAAC;gBACL,wBAAwB;YAC5B,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW;QACjB,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACL,wBAAwB;YAC5B,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACpB,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;gBAC1D,OAAO;YACX,CAAC;YAAC,MAAM,CAAC;gBACL,wBAAwB;YAC5B,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,SAAS;QACnB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QAC/D,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;CACJ;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC"}

package/dist/src/daemon/manager.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Daemon manager — start/stop/status for the agent daemon process
+ */
+export declare class DaemonManager {
+    private pidFile;
+    constructor(pidFile?: string);
+    /**
+     * Start the daemon
+     */
+    start(): Promise<{
+        pid: number;
+        message: string;
+    }>;
+    /**
+     * Stop the daemon
+     */
+    stop(): Promise<{
+        message: string;
+    }>;
+    /**
+     * Get daemon status
+     */
+    status(): Promise<{
+        running: boolean;
+        pid?: number;
+    }>;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/src/daemon/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/daemon/manager.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,qBAAa,aAAa;IACtB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE,MAAM;IAI5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA0BxD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAiB1C;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAoB9D"}

package/dist/src/daemon/manager.js

@@ -0,0 +1,77 @@
+import { readFile, writeFile, access } from 'node:fs/promises';
+import path from 'node:path';
+import { fork } from 'node:child_process';
+import { getAgentDir } from '../utils/paths.js';
+/**
+ * Daemon manager — start/stop/status for the agent daemon process
+ */
+export class DaemonManager {
+    pidFile;
+    constructor(pidFile) {
+        this.pidFile = pidFile ?? path.join(getAgentDir(), 'daemon.pid');
+    }
+    /**
+     * Start the daemon
+     */
+    async start() {
+        // Check if already running
+        const existing = await this.status();
+        if (existing.running) {
+            return { pid: existing.pid, message: `Daemon already running (PID: ${existing.pid})` };
+        }
+        // Fork the daemon process
+        const daemonScript = path.resolve(path.dirname(new URL(import.meta.url).pathname), 'scheduler.js');
+        const child = fork(daemonScript, [], {
+            detached: true,
+            stdio: 'ignore',
+        });
+        child.unref();
+        const pid = child.pid;
+        await writeFile(this.pidFile, String(pid), 'utf-8');
+        return { pid, message: `Daemon started (PID: ${pid})` };
+    }
+    /**
+     * Stop the daemon
+     */
+    async stop() {
+        const status = await this.status();
+        if (!status.running || !status.pid) {
+            return { message: 'Daemon is not running' };
+        }
+        try {
+            process.kill(status.pid, 'SIGTERM');
+            // Clean up PID file
+            const { unlink } = await import('node:fs/promises');
+            await unlink(this.pidFile).catch(() => { });
+            return { message: `Daemon stopped (PID: ${status.pid})` };
+        }
+        catch (err) {
+            return { message: `Failed to stop daemon: ${err.message}` };
+        }
+    }
+    /**
+     * Get daemon status
+     */
+    async status() {
+        try {
+            await access(this.pidFile);
+            const pidStr = await readFile(this.pidFile, 'utf-8');
+            const pid = parseInt(pidStr.trim(), 10);
+            // Check if process is alive
+            try {
+                process.kill(pid, 0);
+                return { running: true, pid };
+            }
+            catch {
+                // PID file exists but process is dead
+                const { unlink } = await import('node:fs/promises');
+                await unlink(this.pidFile).catch(() => { });
+                return { running: false };
+            }
+        }
+        catch {
+            return { running: false };
+        }
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/src/daemon/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/daemon/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,OAAO,aAAa;IACd,OAAO,CAAS;IAExB,YAAY,OAAgB;QACxB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACP,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAI,EAAE,OAAO,EAAE,gCAAgC,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;QAC5F,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAC/C,cAAc,CACjB,CAAC;QAEF,MAAM,KAAK,GAAiB,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE;YAC/C,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAClB,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;QACvB,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAEpD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,wBAAwB,GAAG,GAAG,EAAE,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACpC,oBAAoB;YACpB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,wBAAwB,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3E,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACR,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAExC,4BAA4B;YAC5B,IAAI,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACL,sCAAsC;gBACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACpD,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC9B,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACL,CAAC;CACJ"}

package/dist/src/daemon/scheduler.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Daemon scheduler — runs plans on cron schedules
+ * This is the daemon's main loop, started by DaemonManager
+ */
+export declare function startScheduler(): Promise<void>;
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/src/daemon/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../../src/daemon/scheduler.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAiEpD"}

package/dist/src/daemon/scheduler.js

@@ -0,0 +1,82 @@
+import { Cron } from 'croner';
+import { ConfigLoader } from '../config/loader.js';
+import { PlanParser } from '../plans/parser.js';
+import { PlanRunner } from '../plans/runner.js';
+import { ExecutionEngine } from '../engine/executor.js';
+import { ToolRegistry } from '../tools/registry.js';
+import { PolicyEngine } from '../policy/engine.js';
+import { SkillLoader } from '../skills/loader.js';
+import { SkillRunner } from '../skills/runner.js';
+import { LLMRouter } from '../llm/router.js';
+import { generateRunId } from '../utils/paths.js';
+/**
+ * Daemon scheduler — runs plans on cron schedules
+ * This is the daemon's main loop, started by DaemonManager
+ */
+export async function startScheduler() {
+    const configLoader = new ConfigLoader();
+    const config = await configLoader.load();
+    const registry = ToolRegistry.getInstance();
+    const policy = new PolicyEngine(config, process.cwd());
+    const skillLoader = new SkillLoader(config);
+    const llmRouter = new LLMRouter(config);
+    const skillRunner = new SkillRunner(registry, policy, llmRouter);
+    const engine = new ExecutionEngine(registry, policy, skillLoader, skillRunner);
+    const planParser = new PlanParser();
+    const planRunner = new PlanRunner(engine);
+    await skillLoader.loadAll();
+    // Discover plans with cron triggers
+    const plans = await planParser.listPlans();
+    const cronJobs = [];
+    for (const planInfo of plans) {
+        try {
+            const plan = await planParser.parseFile(planInfo.path);
+            if (plan.trigger.type === 'cron' && plan.trigger.cron) {
+                const job = new Cron(plan.trigger.cron, {
+                    timezone: config.daemon.timezone,
+                }, async () => {
+                    const ctx = {
+                        runId: generateRunId(),
+                        cwd: process.cwd(),
+                        config,
+                        autonomous: plan.policy.approvals === 'auto',
+                        approvedPermissions: new Set(),
+                    };
+                    console.log(`[scheduler] Running plan: ${plan.name}`);
+                    try {
+                        if (plan.mode === 'propose') {
+                            await planRunner.propose(plan, ctx);
+                            console.log(`[scheduler] Proposed run for plan: ${plan.name}`);
+                        }
+                        else {
+                            const run = await planRunner.run(plan, ctx);
+                            console.log(`[scheduler] Plan ${plan.name} completed: ${run.status}`);
+                        }
+                    }
+                    catch (err) {
+                        console.error(`[scheduler] Plan ${plan.name} failed: ${err.message}`);
+                    }
+                });
+                cronJobs.push(job);
+                console.log(`[scheduler] Registered cron for ${plan.name}: ${plan.trigger.cron}`);
+            }
+        }
+        catch (err) {
+            console.error(`[scheduler] Failed to load plan ${planInfo.name}: ${err.message}`);
+        }
+    }
+    console.log(`[scheduler] Started with ${cronJobs.length} cron jobs`);
+    // Keep the process alive
+    process.on('SIGTERM', () => {
+        console.log('[scheduler] Shutting down...');
+        for (const job of cronJobs) {
+            job.stop();
+        }
+        process.exit(0);
+    });
+}
+// Auto-start if run directly
+if (process.argv[1] === new URL(import.meta.url).pathname) {
+    startScheduler().catch(console.error);
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/src/daemon/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../../src/daemon/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAChC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;IAE5B,oCAAoC;IACpC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAW,EAAE,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACpD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;oBACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;iBACnC,EAAE,KAAK,IAAI,EAAE;oBACV,MAAM,GAAG,GAAqB;wBAC1B,KAAK,EAAE,aAAa,EAAE;wBACtB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;wBAClB,MAAM;wBACN,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM;wBAC5C,mBAAmB,EAAE,IAAI,GAAG,EAAE;qBACjC,CAAC;oBAEF,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtD,IAAI,CAAC;wBACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;4BAC1B,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;4BACpC,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;wBACnE,CAAC;6BAAM,CAAC;4BACJ,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;4BAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,IAAI,eAAe,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC1E,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACX,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrF,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,mCAAmC,QAAQ,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,QAAQ,CAAC,MAAM,YAAY,CAAC,CAAC;IAErE,yBAAyB;IACzB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,EAAE,CAAC;QACf,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,6BAA6B;AAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxD,cAAc,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC"}

package/dist/src/daemon/watcher.d.ts

@@ -0,0 +1,16 @@
+import { type TriggerEvent } from '../plans/triggers.js';
+/**
+ * File system & git event watcher
+ */
+export declare class EventWatcher {
+    private watchers;
+    /**
+     * Start watching for file system events
+     */
+    start(onTrigger: (planName: string, event: TriggerEvent) => void): Promise<void>;
+    /**
+     * Stop all watchers
+     */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=watcher.d.ts.map

package/dist/src/daemon/watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watcher.d.ts","sourceRoot":"","sources":["../../../src/daemon/watcher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAE1E;;GAEG;AACH,qBAAa,YAAY;IACrB,OAAO,CAAC,QAAQ,CAAkC;IAElD;;OAEG;IACG,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IA0CtF;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAM9B"}

package/dist/src/daemon/watcher.js

@@ -0,0 +1,59 @@
+import { watch } from 'chokidar';
+import { ConfigLoader } from '../config/loader.js';
+import { PlanParser } from '../plans/parser.js';
+import { evaluateTrigger } from '../plans/triggers.js';
+/**
+ * File system & git event watcher
+ */
+export class EventWatcher {
+    watchers = [];
+    /**
+     * Start watching for file system events
+     */
+    async start(onTrigger) {
+        const configLoader = new ConfigLoader();
+        const config = await configLoader.load();
+        const planParser = new PlanParser();
+        const plans = await planParser.listPlans();
+        for (const planInfo of plans) {
+            try {
+                const plan = await planParser.parseFile(planInfo.path);
+                if (plan.trigger.type === 'fs_change' && plan.trigger.paths) {
+                    const watcher = watch(plan.trigger.paths, {
+                        cwd: process.cwd(),
+                        ignoreInitial: true,
+                        awaitWriteFinish: {
+                            stabilityThreshold: config.daemon.watcherDebounceMs,
+                        },
+                    });
+                    watcher.on('change', (path) => {
+                        const event = { type: 'fs_change', path };
+                        if (evaluateTrigger(plan.trigger, event)) {
+                            onTrigger(plan.name, event);
+                        }
+                    });
+                    watcher.on('add', (path) => {
+                        const event = { type: 'fs_change', path };
+                        if (evaluateTrigger(plan.trigger, event)) {
+                            onTrigger(plan.name, event);
+                        }
+                    });
+                    this.watchers.push(watcher);
+                }
+            }
+            catch {
+                // Skip invalid plans
+            }
+        }
+    }
+    /**
+     * Stop all watchers
+     */
+    async stop() {
+        for (const watcher of this.watchers) {
+            await watcher.close();
+        }
+        this.watchers = [];
+    }
+}
+//# sourceMappingURL=watcher.js.map

package/dist/src/daemon/watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watcher.js","sourceRoot":"","sources":["../../../src/daemon/watcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAqB,MAAM,sBAAsB,CAAC;AAE1E;;GAEG;AACH,MAAM,OAAO,YAAY;IACb,QAAQ,GAA+B,EAAE,CAAC;IAElD;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,SAA0D;QAClE,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;QAE3C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAEvD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;wBACtC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;wBAClB,aAAa,EAAE,IAAI;wBACnB,gBAAgB,EAAE;4BACd,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;yBACtD;qBACJ,CAAC,CAAC;oBAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;wBAC1B,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;wBACxD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;4BACvC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAChC,CAAC;oBACL,CAAC,CAAC,CAAC;oBAEH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;wBACvB,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;wBACxD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;4BACvC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAChC,CAAC;oBACL,CAAC,CAAC,CAAC;oBAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,qBAAqB;YACzB,CAAC;QACL,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACN,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACvB,CAAC;CACJ"}

package/dist/src/engine/executor.d.ts

@@ -0,0 +1,51 @@
+import type { PlanStep, VerifyConfig } from '../plans/types.js';
+import type { ExecutionContext } from '../tools/types.js';
+import type { StepResult } from './types.js';
+import { ToolRegistry } from '../tools/registry.js';
+import { PolicyEngine } from '../policy/engine.js';
+import { SkillLoader } from '../skills/loader.js';
+import { SkillRunner } from '../skills/runner.js';
+import { RollbackTracker } from './rollback.js';
+/**
+ * Execution engine — state machine loop for step execution
+ *
+ * Each step follows:
+ * 1. Plan step selection (resolved by caller)
+ * 2. Preconditions check
+ * 3. Action execution (skill or tool)
+ * 4. Verification
+ * 5. Retry or fallback
+ * 6. Mark complete and proceed
+ */
+export declare class ExecutionEngine {
+    private registry;
+    private policy;
+    private skillLoader;
+    private skillRunner;
+    private rollback;
+    constructor(registry: ToolRegistry, policy: PolicyEngine, skillLoader: SkillLoader, skillRunner: SkillRunner);
+    /**
+     * Execute a single plan step
+     */
+    executeStep(step: PlanStep, ctx: ExecutionContext): Promise<StepResult>;
+    /**
+     * Execute a step via a skill
+     */
+    private executeSkillStep;
+    /**
+     * Execute a step via a direct tool call
+     */
+    private executeToolStep;
+    /**
+     * Run verification for a step
+     */
+    verify(verifyConfig: VerifyConfig, ctx: ExecutionContext): Promise<{
+        passed: boolean;
+        details: string;
+    }>;
+    /**
+     * Get the rollback tracker
+     */
+    getRollbackTracker(): RollbackTracker;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/src/engine/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/engine/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQhD;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IACxB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAkB;gBAG9B,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,WAAW;IAS5B;;OAEG;IACG,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAmC7E;;OAEG;YACW,gBAAgB;IAiB9B;;OAEG;YACW,eAAe;IAyE7B;;OAEG;IACG,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAgD9G;;OAEG;IACH,kBAAkB,IAAI,eAAe;CAGxC"}

package/dist/src/engine/executor.js

@@ -0,0 +1,189 @@
+import { RollbackTracker } from './rollback.js';
+import { auditEmitter, AuditEventType } from '../policy/audit.js';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { access } from 'node:fs/promises';
+const execFileAsync = promisify(execFile);
+/**
+ * Execution engine — state machine loop for step execution
+ *
+ * Each step follows:
+ * 1. Plan step selection (resolved by caller)
+ * 2. Preconditions check
+ * 3. Action execution (skill or tool)
+ * 4. Verification
+ * 5. Retry or fallback
+ * 6. Mark complete and proceed
+ */
+export class ExecutionEngine {
+    registry;
+    policy;
+    skillLoader;
+    skillRunner;
+    rollback;
+    constructor(registry, policy, skillLoader, skillRunner) {
+        this.registry = registry;
+        this.policy = policy;
+        this.skillLoader = skillLoader;
+        this.skillRunner = skillRunner;
+        this.rollback = new RollbackTracker();
+    }
+    /**
+     * Execute a single plan step
+     */
+    async executeStep(step, ctx) {
+        const start = Date.now();
+        try {
+            // Phase 1: Preconditions check
+            if (step.dependsOn && step.dependsOn.length > 0) {
+                // Dependencies are checked by PlanRunner before calling this
+            }
+            let result;
+            if (step.skill) {
+                // Execute via skill
+                result = await this.executeSkillStep(step, ctx);
+            }
+            else if (step.tool) {
+                // Execute via direct tool call
+                result = await this.executeToolStep(step, ctx);
+            }
+            else {
+                result = {
+                    success: false,
+                    error: `Step "${step.id}" has neither skill nor tool defined`,
+                    durationMs: Date.now() - start,
+                };
+            }
+            return { ...result, durationMs: Date.now() - start };
+        }
+        catch (err) {
+            return {
+                success: false,
+                error: err.message,
+                durationMs: Date.now() - start,
+            };
+        }
+    }
+    /**
+     * Execute a step via a skill
+     */
+    async executeSkillStep(step, ctx) {
+        const skill = this.skillLoader.get(step.skill);
+        if (!skill) {
+            return { success: false, error: `Skill "${step.skill}" not found`, durationMs: 0 };
+        }
+        const result = await this.skillRunner.run(skill, step.args ?? {}, ctx);
+        return {
+            success: result.success,
+            output: result.output,
+            error: result.error,
+            toolCalls: result.toolCalls,
+            durationMs: result.durationMs,
+        };
+    }
+    /**
+     * Execute a step via a direct tool call
+     */
+    async executeToolStep(step, ctx) {
+        const tool = this.registry.get(step.tool);
+        if (!tool) {
+            return { success: false, error: `Tool "${step.tool}" not found`, durationMs: 0 };
+        }
+        // Check permissions
+        const permResult = await this.policy.checkPermission({
+            tool: step.tool,
+            operation: step.tool,
+            description: `Plan step "${step.name}" calling ${step.tool}`,
+            permissions: tool.permissions,
+            args: step.args,
+            riskLevel: 'medium',
+        }, ctx);
+        if (!permResult.allowed && permResult.requiresApproval) {
+            const approved = await this.policy.requestApproval({
+                tool: step.tool,
+                operation: step.tool,
+                description: `Plan step "${step.name}" calling ${step.tool}`,
+                permissions: tool.permissions,
+                args: step.args,
+                riskLevel: 'medium',
+            }, ctx);
+            if (!approved) {
+                return { success: false, error: 'Permission denied by user', durationMs: 0 };
+            }
+        }
+        else if (!permResult.allowed) {
+            return { success: false, error: permResult.reason, durationMs: 0 };
+        }
+        // Track file state for rollback (if filesystem write)
+        if (step.tool.startsWith('fs.') && step.args?.['path']) {
+            await this.rollback.captureBeforeState(step.id, step.args['path'], ctx.cwd);
+        }
+        const result = await this.registry.execute(step.tool, step.args, ctx);
+        auditEmitter.emit(AuditEventType.TOOL_CALL, {
+            stepId: step.id,
+            tool: step.tool,
+            input: step.args,
+            success: result.success,
+        });
+        // Capture after state for rollback
+        if (step.tool.startsWith('fs.') && step.args?.['path'] && result.success) {
+            await this.rollback.captureAfterState(step.id, step.args['path'], ctx.cwd);
+        }
+        return {
+            success: result.success,
+            output: result.data,
+            error: result.error,
+            durationMs: result.durationMs,
+        };
+    }
+    /**
+     * Run verification for a step
+     */
+    async verify(verifyConfig, ctx) {
+        const results = [];
+        let passed = true;
+        // Check command exit code
+        if (verifyConfig.command) {
+            try {
+                const { stdout } = await execFileAsync(verifyConfig.command.split(' ')[0], verifyConfig.command.split(' ').slice(1), { cwd: ctx.cwd, timeout: 30000, shell: true });
+                const output = stdout.toString();
+                if (verifyConfig.exitCode !== undefined) {
+                    // Exit code check is implicit (execFile throws on non-zero)
+                    results.push(`Command exited with code 0 (expected: ${verifyConfig.exitCode})`);
+                }
+                if (verifyConfig.contains && !output.includes(verifyConfig.contains)) {
+                    passed = false;
+                    results.push(`Output does not contain "${verifyConfig.contains}"`);
+                }
+                else if (verifyConfig.contains) {
+                    results.push(`Output contains "${verifyConfig.contains}"`);
+                }
+                results.push('Command executed successfully');
+            }
+            catch (err) {
+                passed = false;
+                results.push(`Command failed: ${err.message}`);
+            }
+        }
+        // Check file existence
+        if (verifyConfig.fileExists) {
+            try {
+                const filePath = require('node:path').resolve(ctx.cwd, verifyConfig.fileExists);
+                await access(filePath);
+                results.push(`File exists: ${verifyConfig.fileExists}`);
+            }
+            catch {
+                passed = false;
+                results.push(`File not found: ${verifyConfig.fileExists}`);
+            }
+        }
+        return { passed, details: results.join('\n') };
+    }
+    /**
+     * Get the rollback tracker
+     */
+    getRollbackTracker() {
+        return this.rollback;
+    }
+}
+//# sourceMappingURL=executor.js.map