@provos/ironcurtain 0.11.0 → 0.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (472) hide show
  1. package/README.md +23 -19
  2. package/dist/cli-help.d.ts +12 -0
  3. package/dist/cli-help.js +21 -0
  4. package/dist/cli-help.js.map +1 -1
  5. package/dist/cli.js +14 -6
  6. package/dist/cli.js.map +1 -1
  7. package/dist/config/agent-model-guard.d.ts +14 -0
  8. package/dist/config/agent-model-guard.js +24 -0
  9. package/dist/config/agent-model-guard.js.map +1 -0
  10. package/dist/config/config-command.d.ts +33 -1
  11. package/dist/config/config-command.js +723 -11
  12. package/dist/config/config-command.js.map +1 -1
  13. package/dist/config/first-start.js +2 -8
  14. package/dist/config/first-start.js.map +1 -1
  15. package/dist/config/model-provider.d.ts +9 -0
  16. package/dist/config/model-provider.js +13 -0
  17. package/dist/config/model-provider.js.map +1 -1
  18. package/dist/config/openrouter-catalog.d.ts +46 -0
  19. package/dist/config/openrouter-catalog.js +111 -0
  20. package/dist/config/openrouter-catalog.js.map +1 -0
  21. package/dist/config/openrouter-models-fallback.d.ts +15 -0
  22. package/dist/config/openrouter-models-fallback.js +49 -0
  23. package/dist/config/openrouter-models-fallback.js.map +1 -0
  24. package/dist/config/paths.d.ts +48 -6
  25. package/dist/config/paths.js +63 -8
  26. package/dist/config/paths.js.map +1 -1
  27. package/dist/config/types.d.ts +8 -0
  28. package/dist/config/user-config.d.ts +179 -6
  29. package/dist/config/user-config.js +282 -5
  30. package/dist/config/user-config.js.map +1 -1
  31. package/dist/daemon/daemon-command.js +14 -5
  32. package/dist/daemon/daemon-command.js.map +1 -1
  33. package/dist/daemon/ironcurtain-daemon.d.ts +18 -0
  34. package/dist/daemon/ironcurtain-daemon.js +28 -1
  35. package/dist/daemon/ironcurtain-daemon.js.map +1 -1
  36. package/dist/daemon-client/daemon-client.d.ts +123 -0
  37. package/dist/daemon-client/daemon-client.js +324 -0
  38. package/dist/daemon-client/daemon-client.js.map +1 -0
  39. package/dist/docker/adapters/claude-code.js +109 -1
  40. package/dist/docker/adapters/claude-code.js.map +1 -1
  41. package/dist/docker/adapters/codex.d.ts +18 -0
  42. package/dist/docker/adapters/codex.js +376 -0
  43. package/dist/docker/adapters/codex.js.map +1 -0
  44. package/dist/docker/adapters/goose.js +38 -2
  45. package/dist/docker/adapters/goose.js.map +1 -1
  46. package/dist/docker/agent-adapter.d.ts +34 -6
  47. package/dist/docker/agent-adapter.js +2 -0
  48. package/dist/docker/agent-adapter.js.map +1 -1
  49. package/dist/docker/agent-registry.js +5 -0
  50. package/dist/docker/agent-registry.js.map +1 -1
  51. package/dist/docker/apple-container-manager.d.ts +49 -0
  52. package/dist/docker/apple-container-manager.js +486 -0
  53. package/dist/docker/apple-container-manager.js.map +1 -0
  54. package/dist/docker/ca.js +9 -2
  55. package/dist/docker/ca.js.map +1 -1
  56. package/dist/docker/code-mode-proxy.d.ts +11 -0
  57. package/dist/docker/code-mode-proxy.js +3 -1
  58. package/dist/docker/code-mode-proxy.js.map +1 -1
  59. package/dist/docker/container-lifecycle.d.ts +2 -2
  60. package/dist/docker/container-lifecycle.js +9 -0
  61. package/dist/docker/container-lifecycle.js.map +1 -1
  62. package/dist/docker/container-runtime.d.ts +29 -0
  63. package/dist/docker/container-runtime.js +76 -0
  64. package/dist/docker/container-runtime.js.map +1 -0
  65. package/dist/docker/docker-agent-session.d.ts +31 -0
  66. package/dist/docker/docker-agent-session.js +97 -7
  67. package/dist/docker/docker-agent-session.js.map +1 -1
  68. package/dist/docker/docker-infrastructure.d.ts +232 -15
  69. package/dist/docker/docker-infrastructure.js +762 -118
  70. package/dist/docker/docker-infrastructure.js.map +1 -1
  71. package/dist/docker/docker-manager.d.ts +25 -5
  72. package/dist/docker/docker-manager.js +388 -21
  73. package/dist/docker/docker-manager.js.map +1 -1
  74. package/dist/docker/docker-probe.d.ts +45 -0
  75. package/dist/docker/docker-probe.js +86 -0
  76. package/dist/docker/docker-probe.js.map +1 -0
  77. package/dist/docker/docker-progress-sink.d.ts +1 -1
  78. package/dist/docker/docker-resource-lifecycle.d.ts +71 -0
  79. package/dist/docker/docker-resource-lifecycle.js +454 -0
  80. package/dist/docker/docker-resource-lifecycle.js.map +1 -0
  81. package/dist/docker/gc-command.d.ts +2 -0
  82. package/dist/docker/gc-command.js +37 -0
  83. package/dist/docker/gc-command.js.map +1 -0
  84. package/dist/docker/mitm-proxy.d.ts +58 -5
  85. package/dist/docker/mitm-proxy.js +338 -26
  86. package/dist/docker/mitm-proxy.js.map +1 -1
  87. package/dist/docker/network-topology.d.ts +88 -0
  88. package/dist/docker/network-topology.js +167 -0
  89. package/dist/docker/network-topology.js.map +1 -0
  90. package/dist/docker/oauth-credentials.d.ts +13 -0
  91. package/dist/docker/oauth-credentials.js +125 -0
  92. package/dist/docker/oauth-credentials.js.map +1 -1
  93. package/dist/docker/openrouter.d.ts +107 -0
  94. package/dist/docker/openrouter.js +236 -0
  95. package/dist/docker/openrouter.js.map +1 -0
  96. package/dist/docker/orientation.js +1 -1
  97. package/dist/docker/orientation.js.map +1 -1
  98. package/dist/docker/package-types.d.ts +1 -1
  99. package/dist/docker/platform.d.ts +3 -1
  100. package/dist/docker/platform.js +3 -1
  101. package/dist/docker/platform.js.map +1 -1
  102. package/dist/docker/provider-config.d.ts +35 -1
  103. package/dist/docker/provider-config.js +93 -3
  104. package/dist/docker/provider-config.js.map +1 -1
  105. package/dist/docker/provision-lock.d.ts +46 -0
  106. package/dist/docker/provision-lock.js +152 -0
  107. package/dist/docker/provision-lock.js.map +1 -0
  108. package/dist/docker/pty-session.d.ts +22 -0
  109. package/dist/docker/pty-session.js +238 -84
  110. package/dist/docker/pty-session.js.map +1 -1
  111. package/dist/docker/pty-types.d.ts +15 -0
  112. package/dist/docker/pty-types.js +8 -0
  113. package/dist/docker/pty-types.js.map +1 -1
  114. package/dist/docker/registry-proxy.d.ts +46 -0
  115. package/dist/docker/registry-proxy.js +255 -1
  116. package/dist/docker/registry-proxy.js.map +1 -1
  117. package/dist/docker/resource-limits.d.ts +14 -5
  118. package/dist/docker/resource-limits.js +11 -8
  119. package/dist/docker/resource-limits.js.map +1 -1
  120. package/dist/docker/sse-extractor.js +55 -5
  121. package/dist/docker/sse-extractor.js.map +1 -1
  122. package/dist/docker/stream-delay.d.ts +86 -0
  123. package/dist/docker/stream-delay.js +218 -0
  124. package/dist/docker/stream-delay.js.map +1 -0
  125. package/dist/docker/token-stream-types.d.ts +15 -0
  126. package/dist/docker/trajectory-capture.d.ts +79 -0
  127. package/dist/docker/trajectory-capture.js +521 -0
  128. package/dist/docker/trajectory-capture.js.map +1 -0
  129. package/dist/docker/trajectory-reassembler.d.ts +286 -0
  130. package/dist/docker/trajectory-reassembler.js +1010 -0
  131. package/dist/docker/trajectory-reassembler.js.map +1 -0
  132. package/dist/docker/trajectory-tap.d.ts +100 -0
  133. package/dist/docker/trajectory-tap.js +410 -0
  134. package/dist/docker/trajectory-tap.js.map +1 -0
  135. package/dist/docker/trajectory-types.d.ts +187 -0
  136. package/dist/docker/trajectory-types.js +43 -0
  137. package/dist/docker/trajectory-types.js.map +1 -0
  138. package/dist/docker/types.d.ts +116 -12
  139. package/dist/doctor/checks.d.ts +39 -6
  140. package/dist/doctor/checks.js +129 -25
  141. package/dist/doctor/checks.js.map +1 -1
  142. package/dist/doctor/doctor-command.js +39 -9
  143. package/dist/doctor/doctor-command.js.map +1 -1
  144. package/dist/doctor/mcp-liveness.d.ts +1 -1
  145. package/dist/doctor/mcp-liveness.js +12 -4
  146. package/dist/doctor/mcp-liveness.js.map +1 -1
  147. package/dist/escalation/escalation-watcher.js +6 -0
  148. package/dist/escalation/escalation-watcher.js.map +1 -1
  149. package/dist/{mux → escalation}/trusted-input.d.ts +7 -4
  150. package/dist/{mux → escalation}/trusted-input.js +8 -5
  151. package/dist/escalation/trusted-input.js.map +1 -0
  152. package/dist/hash.js.map +1 -1
  153. package/dist/index.js +65 -16
  154. package/dist/index.js.map +1 -1
  155. package/dist/mux/mux-app.d.ts +9 -0
  156. package/dist/mux/mux-app.js +18 -16
  157. package/dist/mux/mux-app.js.map +1 -1
  158. package/dist/mux/mux-command.js +26 -8
  159. package/dist/mux/mux-command.js.map +1 -1
  160. package/dist/mux/mux-input-handler.d.ts +26 -2
  161. package/dist/mux/mux-input-handler.js +93 -11
  162. package/dist/mux/mux-input-handler.js.map +1 -1
  163. package/dist/mux/mux-renderer.d.ts +2 -1
  164. package/dist/mux/mux-renderer.js +67 -0
  165. package/dist/mux/mux-renderer.js.map +1 -1
  166. package/dist/mux/provider-profile-snapshot.d.ts +44 -0
  167. package/dist/mux/provider-profile-snapshot.js +56 -0
  168. package/dist/mux/provider-profile-snapshot.js.map +1 -0
  169. package/dist/mux/types.d.ts +3 -2
  170. package/dist/mux/types.js +6 -2
  171. package/dist/mux/types.js.map +1 -1
  172. package/dist/observe/observe-command.js +112 -125
  173. package/dist/observe/observe-command.js.map +1 -1
  174. package/dist/persona/broad-policy-validator.d.ts +95 -0
  175. package/dist/persona/broad-policy-validator.js +171 -0
  176. package/dist/persona/broad-policy-validator.js.map +1 -0
  177. package/dist/persona/compile-persona-policy.d.ts +54 -2
  178. package/dist/persona/compile-persona-policy.js +29 -4
  179. package/dist/persona/compile-persona-policy.js.map +1 -1
  180. package/dist/persona/event-bus-progress-reporter.d.ts +57 -0
  181. package/dist/persona/event-bus-progress-reporter.js +66 -0
  182. package/dist/persona/event-bus-progress-reporter.js.map +1 -0
  183. package/dist/persona/persona-command.js +46 -76
  184. package/dist/persona/persona-command.js.map +1 -1
  185. package/dist/persona/persona-compile-orchestrator.d.ts +101 -0
  186. package/dist/persona/persona-compile-orchestrator.js +504 -0
  187. package/dist/persona/persona-compile-orchestrator.js.map +1 -0
  188. package/dist/persona/persona-service.d.ts +137 -0
  189. package/dist/persona/persona-service.js +263 -0
  190. package/dist/persona/persona-service.js.map +1 -0
  191. package/dist/persona/policy-mutation-audit.d.ts +109 -0
  192. package/dist/persona/policy-mutation-audit.js +179 -0
  193. package/dist/persona/policy-mutation-audit.js.map +1 -0
  194. package/dist/persona/rule-delta.d.ts +30 -0
  195. package/dist/persona/rule-delta.js +82 -0
  196. package/dist/persona/rule-delta.js.map +1 -0
  197. package/dist/persona/types.d.ts +12 -0
  198. package/dist/pipeline/annotate.js +10 -2
  199. package/dist/pipeline/annotate.js.map +1 -1
  200. package/dist/pipeline/compile.js +14 -2
  201. package/dist/pipeline/compile.js.map +1 -1
  202. package/dist/pipeline/constitution-compiler.js.map +1 -1
  203. package/dist/pipeline/generate-with-repair.js.map +1 -1
  204. package/dist/pipeline/pipeline-runner.d.ts +63 -4
  205. package/dist/pipeline/pipeline-runner.js +159 -50
  206. package/dist/pipeline/pipeline-runner.js.map +1 -1
  207. package/dist/pipeline/pipeline-shared.d.ts +32 -3
  208. package/dist/pipeline/pipeline-shared.js +76 -8
  209. package/dist/pipeline/pipeline-shared.js.map +1 -1
  210. package/dist/pipeline/refresh-lists.js +3 -5
  211. package/dist/pipeline/refresh-lists.js.map +1 -1
  212. package/dist/pipeline/scenario-schema-validator.js.map +1 -1
  213. package/dist/{mux → pty}/pty-bridge.d.ts +41 -3
  214. package/dist/{mux → pty}/pty-bridge.js +71 -18
  215. package/dist/pty/pty-bridge.js.map +1 -0
  216. package/dist/pty/resolve-ironcurtain-bin.d.ts +17 -0
  217. package/dist/pty/resolve-ironcurtain-bin.js +22 -0
  218. package/dist/pty/resolve-ironcurtain-bin.js.map +1 -0
  219. package/dist/sandbox/index.d.ts +19 -4
  220. package/dist/sandbox/index.js +31 -18
  221. package/dist/sandbox/index.js.map +1 -1
  222. package/dist/servers/fetch-server.js +2 -0
  223. package/dist/servers/fetch-server.js.map +1 -1
  224. package/dist/session/index.d.ts +1 -1
  225. package/dist/session/index.js +20 -2
  226. package/dist/session/index.js.map +1 -1
  227. package/dist/session/preflight.d.ts +20 -35
  228. package/dist/session/preflight.js +92 -109
  229. package/dist/session/preflight.js.map +1 -1
  230. package/dist/session/resource-budget-tracker.js +8 -0
  231. package/dist/session/resource-budget-tracker.js.map +1 -1
  232. package/dist/session/session-manager.d.ts +7 -0
  233. package/dist/session/session-manager.js.map +1 -1
  234. package/dist/session/types.d.ts +23 -0
  235. package/dist/signal/bot-command.js +6 -1
  236. package/dist/signal/bot-command.js.map +1 -1
  237. package/dist/signal/setup-signal.js +1 -1
  238. package/dist/signal/setup-signal.js.map +1 -1
  239. package/dist/signal/signal-bot-daemon.d.ts +1 -0
  240. package/dist/signal/signal-bot-daemon.js +9 -2
  241. package/dist/signal/signal-bot-daemon.js.map +1 -1
  242. package/dist/signal/signal-container.d.ts +3 -3
  243. package/dist/signal/signal-container.js +2 -2
  244. package/dist/signal/signal-container.js.map +1 -1
  245. package/dist/trusted-process/call-circuit-breaker.d.ts +6 -0
  246. package/dist/trusted-process/call-circuit-breaker.js +22 -3
  247. package/dist/trusted-process/call-circuit-breaker.js.map +1 -1
  248. package/dist/trusted-process/container-command.d.ts +35 -0
  249. package/dist/trusted-process/container-command.js +49 -0
  250. package/dist/trusted-process/container-command.js.map +1 -0
  251. package/dist/trusted-process/mcp-error-utils.js +4 -1
  252. package/dist/trusted-process/mcp-error-utils.js.map +1 -1
  253. package/dist/trusted-process/mcp-proxy-server.js +37 -3
  254. package/dist/trusted-process/mcp-proxy-server.js.map +1 -1
  255. package/dist/trusted-process/policy-engine.js +13 -2
  256. package/dist/trusted-process/policy-engine.js.map +1 -1
  257. package/dist/trusted-process/tcp-server-transport.d.ts +19 -1
  258. package/dist/trusted-process/tcp-server-transport.js +56 -10
  259. package/dist/trusted-process/tcp-server-transport.js.map +1 -1
  260. package/dist/trusted-process/tool-call-coordinator.d.ts +22 -8
  261. package/dist/trusted-process/tool-call-coordinator.js +149 -65
  262. package/dist/trusted-process/tool-call-coordinator.js.map +1 -1
  263. package/dist/trusted-process/tool-call-pipeline.d.ts +8 -0
  264. package/dist/trusted-process/tool-call-pipeline.js +68 -34
  265. package/dist/trusted-process/tool-call-pipeline.js.map +1 -1
  266. package/dist/util/atomic-write.d.ts +31 -0
  267. package/dist/util/atomic-write.js +43 -0
  268. package/dist/util/atomic-write.js.map +1 -0
  269. package/dist/utils/preflight-checks.js +1 -3
  270. package/dist/utils/preflight-checks.js.map +1 -1
  271. package/dist/utils/stdio-guard.d.ts +1 -0
  272. package/dist/utils/stdio-guard.js +27 -0
  273. package/dist/utils/stdio-guard.js.map +1 -0
  274. package/dist/web-ui/__tests__/config-dispatch.test.d.ts +13 -0
  275. package/dist/web-ui/__tests__/config-dispatch.test.js +383 -0
  276. package/dist/web-ui/__tests__/config-dispatch.test.js.map +1 -0
  277. package/dist/web-ui/__tests__/json-rpc-dispatch.test.js +6 -0
  278. package/dist/web-ui/__tests__/json-rpc-dispatch.test.js.map +1 -1
  279. package/dist/web-ui/conn-registry.d.ts +14 -0
  280. package/dist/web-ui/conn-registry.js +25 -0
  281. package/dist/web-ui/conn-registry.js.map +1 -0
  282. package/dist/web-ui/dispatch/config-dispatch.d.ts +15 -0
  283. package/dist/web-ui/dispatch/config-dispatch.js +277 -0
  284. package/dist/web-ui/dispatch/config-dispatch.js.map +1 -0
  285. package/dist/web-ui/dispatch/escalation-dispatch.js +11 -2
  286. package/dist/web-ui/dispatch/escalation-dispatch.js.map +1 -1
  287. package/dist/web-ui/dispatch/persona-dispatch.d.ts +46 -2
  288. package/dist/web-ui/dispatch/persona-dispatch.js +209 -56
  289. package/dist/web-ui/dispatch/persona-dispatch.js.map +1 -1
  290. package/dist/web-ui/dispatch/pty-dispatch.d.ts +15 -0
  291. package/dist/web-ui/dispatch/pty-dispatch.js +66 -0
  292. package/dist/web-ui/dispatch/pty-dispatch.js.map +1 -0
  293. package/dist/web-ui/dispatch/session-dispatch.js +89 -6
  294. package/dist/web-ui/dispatch/session-dispatch.js.map +1 -1
  295. package/dist/web-ui/dispatch/types.d.ts +35 -0
  296. package/dist/web-ui/dispatch/types.js +42 -1
  297. package/dist/web-ui/dispatch/types.js.map +1 -1
  298. package/dist/web-ui/dispatch/workflow-dispatch.js +116 -5
  299. package/dist/web-ui/dispatch/workflow-dispatch.js.map +1 -1
  300. package/dist/web-ui/json-rpc-dispatch.js +4 -1
  301. package/dist/web-ui/json-rpc-dispatch.js.map +1 -1
  302. package/dist/web-ui/pty-session-manager.d.ts +234 -0
  303. package/dist/web-ui/pty-session-manager.js +599 -0
  304. package/dist/web-ui/pty-session-manager.js.map +1 -0
  305. package/dist/web-ui/web-event-bus.d.ts +34 -1
  306. package/dist/web-ui/web-event-bus.js.map +1 -1
  307. package/dist/web-ui/web-session-transport.js.map +1 -1
  308. package/dist/web-ui/web-ui-server.d.ts +22 -0
  309. package/dist/web-ui/web-ui-server.js +41 -0
  310. package/dist/web-ui/web-ui-server.js.map +1 -1
  311. package/dist/web-ui/web-ui-types.d.ts +212 -5
  312. package/dist/web-ui/web-ui-types.js.map +1 -1
  313. package/dist/web-ui-static/assets/index-CCVI4nEK.css +1 -0
  314. package/dist/web-ui-static/assets/index-Dm012gvY.js +114 -0
  315. package/dist/web-ui-static/index.html +2 -2
  316. package/dist/workflow/cli-shared.d.ts +62 -0
  317. package/dist/workflow/cli-shared.js +117 -0
  318. package/dist/workflow/cli-shared.js.map +1 -0
  319. package/dist/workflow/cli-support.js +0 -2
  320. package/dist/workflow/cli-support.js.map +1 -1
  321. package/dist/workflow/container-snapshots.d.ts +29 -0
  322. package/dist/workflow/container-snapshots.js +137 -0
  323. package/dist/workflow/container-snapshots.js.map +1 -0
  324. package/dist/workflow/daemon-gate-commands.d.ts +21 -0
  325. package/dist/workflow/daemon-gate-commands.js +595 -0
  326. package/dist/workflow/daemon-gate-commands.js.map +1 -0
  327. package/dist/workflow/discovery.d.ts +29 -0
  328. package/dist/workflow/discovery.js +67 -7
  329. package/dist/workflow/discovery.js.map +1 -1
  330. package/dist/workflow/lane-template.d.ts +89 -0
  331. package/dist/workflow/lane-template.js +141 -0
  332. package/dist/workflow/lane-template.js.map +1 -0
  333. package/dist/workflow/lint.d.ts +7 -1
  334. package/dist/workflow/lint.js +186 -3
  335. package/dist/workflow/lint.js.map +1 -1
  336. package/dist/workflow/machine-builder.d.ts +90 -2
  337. package/dist/workflow/machine-builder.js +222 -29
  338. package/dist/workflow/machine-builder.js.map +1 -1
  339. package/dist/workflow/message-log.d.ts +15 -1
  340. package/dist/workflow/message-log.js.map +1 -1
  341. package/dist/workflow/orchestrator.d.ts +505 -1
  342. package/dist/workflow/orchestrator.js +1725 -69
  343. package/dist/workflow/orchestrator.js.map +1 -1
  344. package/dist/workflow/prompt-builder.js +2 -1
  345. package/dist/workflow/prompt-builder.js.map +1 -1
  346. package/dist/workflow/run-state-command.js +1 -1
  347. package/dist/workflow/run-state-command.js.map +1 -1
  348. package/dist/workflow/shutdown-signals.d.ts +7 -0
  349. package/dist/workflow/shutdown-signals.js +40 -0
  350. package/dist/workflow/shutdown-signals.js.map +1 -0
  351. package/dist/workflow/status-parser.js +19 -4
  352. package/dist/workflow/status-parser.js.map +1 -1
  353. package/dist/workflow/types.d.ts +123 -23
  354. package/dist/workflow/types.js +2 -0
  355. package/dist/workflow/types.js.map +1 -1
  356. package/dist/workflow/validate.d.ts +23 -1
  357. package/dist/workflow/validate.js +311 -22
  358. package/dist/workflow/validate.js.map +1 -1
  359. package/dist/workflow/workflow-command.d.ts +0 -17
  360. package/dist/workflow/workflow-command.js +118 -94
  361. package/dist/workflow/workflow-command.js.map +1 -1
  362. package/dist/workflow/workflow-discovery.d.ts +2 -0
  363. package/dist/workflow/workflow-discovery.js +22 -1
  364. package/dist/workflow/workflow-discovery.js.map +1 -1
  365. package/dist/workflow/workflow-manager.d.ts +34 -0
  366. package/dist/workflow/workflow-manager.js +52 -1
  367. package/dist/workflow/workflow-manager.js.map +1 -1
  368. package/dist/workflow/workflows/design-and-code/README.md +50 -0
  369. package/dist/workflow/workflows/deterministic-eval-smoke/scripts/format_report.js +29 -0
  370. package/dist/workflow/workflows/deterministic-eval-smoke/scripts/package.json +5 -0
  371. package/dist/workflow/workflows/deterministic-eval-smoke/scripts/requirements.txt +1 -0
  372. package/dist/workflow/workflows/deterministic-eval-smoke/scripts/run_eval.py +41 -0
  373. package/dist/workflow/workflows/deterministic-eval-smoke/workflow.yaml +57 -0
  374. package/dist/workflow/workflows/deterministic-verdict-smoke/scripts/classify.py +18 -0
  375. package/dist/workflow/workflows/deterministic-verdict-smoke/workflow.yaml +51 -0
  376. package/dist/workflow/workflows/evolve/README.md +66 -0
  377. package/dist/workflow/workflows/evolve/scripts/LICENSE +201 -0
  378. package/dist/workflow/workflows/evolve/scripts/README.md +314 -0
  379. package/dist/workflow/workflows/evolve/scripts/evolve-brief +16 -0
  380. package/dist/workflow/workflows/evolve/scripts/evolve-cognition +16 -0
  381. package/dist/workflow/workflows/evolve/scripts/evolve-db +16 -0
  382. package/dist/workflow/workflows/evolve/scripts/evolve-eval +16 -0
  383. package/dist/workflow/workflows/evolve/scripts/evolve-files +16 -0
  384. package/dist/workflow/workflows/evolve/scripts/evolve-summary +16 -0
  385. package/dist/workflow/workflows/evolve/scripts/evolve_core/__init__.py +14 -0
  386. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/__init__.py +17 -0
  387. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/base.py +21 -0
  388. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/factory.py +90 -0
  389. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/greedy.py +17 -0
  390. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/island.py +316 -0
  391. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/random.py +18 -0
  392. package/dist/workflow/workflows/evolve/scripts/evolve_core/algorithms/ucb1.py +55 -0
  393. package/dist/workflow/workflows/evolve/scripts/evolve_core/best_snapshot.py +62 -0
  394. package/dist/workflow/workflows/evolve/scripts/evolve_core/cli.py +752 -0
  395. package/dist/workflow/workflows/evolve/scripts/evolve_core/cognition.py +127 -0
  396. package/dist/workflow/workflows/evolve/scripts/evolve_core/database.py +218 -0
  397. package/dist/workflow/workflows/evolve/scripts/evolve_core/diff.py +57 -0
  398. package/dist/workflow/workflows/evolve/scripts/evolve_core/embedding.py +84 -0
  399. package/dist/workflow/workflows/evolve/scripts/evolve_core/file_lock.py +45 -0
  400. package/dist/workflow/workflows/evolve/scripts/evolve_core/run_state.py +343 -0
  401. package/dist/workflow/workflows/evolve/scripts/evolve_core/sampling_config.py +173 -0
  402. package/dist/workflow/workflows/evolve/scripts/evolve_core/structures.py +93 -0
  403. package/dist/workflow/workflows/evolve/scripts/evolve_core/vector_index.py +191 -0
  404. package/dist/workflow/workflows/evolve/scripts/evolve_result.py +1503 -0
  405. package/dist/workflow/workflows/evolve/scripts/requirements.txt +2 -0
  406. package/dist/workflow/workflows/evolve/workflow.yaml +646 -0
  407. package/dist/workflow/workflows/test-email-summary/workflow.yaml +1 -0
  408. package/dist/workflow/workflows/vuln-discovery/README.md +54 -0
  409. package/dist/workflow/workflows/vuln-discovery/skills/harness-design-fuzzing/SKILL.md +6 -1
  410. package/dist/workflow/workflows/vuln-discovery/skills/memory-safety-c-cpp/SKILL.md +1 -0
  411. package/dist/workflow/workflows/vuln-discovery/skills/vulnerability-triage/SKILL.md +4 -0
  412. package/dist/workflow/workflows/vuln-discovery/workflow.yaml +13 -8
  413. package/docker/Dockerfile.base +22 -0
  414. package/docker/Dockerfile.base.arm64 +18 -0
  415. package/docker/Dockerfile.claude-code +3 -1
  416. package/docker/Dockerfile.codex +17 -0
  417. package/docker/Dockerfile.goose +3 -1
  418. package/docker/entrypoint-claude-code.sh +28 -45
  419. package/docker/entrypoint-codex.sh +42 -0
  420. package/docker/entrypoint-goose.sh +5 -24
  421. package/docker/entrypoint-uid-remap.sh +93 -0
  422. package/package.json +39 -30
  423. package/src/workflow/workflows/design-and-code/README.md +50 -0
  424. package/src/workflow/workflows/deterministic-eval-smoke/scripts/format_report.js +29 -0
  425. package/src/workflow/workflows/deterministic-eval-smoke/scripts/package.json +5 -0
  426. package/src/workflow/workflows/deterministic-eval-smoke/scripts/requirements.txt +1 -0
  427. package/src/workflow/workflows/deterministic-eval-smoke/scripts/run_eval.py +41 -0
  428. package/src/workflow/workflows/deterministic-eval-smoke/workflow.yaml +57 -0
  429. package/src/workflow/workflows/deterministic-verdict-smoke/scripts/classify.py +18 -0
  430. package/src/workflow/workflows/deterministic-verdict-smoke/workflow.yaml +51 -0
  431. package/src/workflow/workflows/evolve/README.md +66 -0
  432. package/src/workflow/workflows/evolve/scripts/LICENSE +201 -0
  433. package/src/workflow/workflows/evolve/scripts/README.md +314 -0
  434. package/src/workflow/workflows/evolve/scripts/evolve-brief +16 -0
  435. package/src/workflow/workflows/evolve/scripts/evolve-cognition +16 -0
  436. package/src/workflow/workflows/evolve/scripts/evolve-db +16 -0
  437. package/src/workflow/workflows/evolve/scripts/evolve-eval +16 -0
  438. package/src/workflow/workflows/evolve/scripts/evolve-files +16 -0
  439. package/src/workflow/workflows/evolve/scripts/evolve-summary +16 -0
  440. package/src/workflow/workflows/evolve/scripts/evolve_core/__init__.py +14 -0
  441. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/__init__.py +17 -0
  442. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/base.py +21 -0
  443. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/factory.py +90 -0
  444. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/greedy.py +17 -0
  445. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/island.py +316 -0
  446. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/random.py +18 -0
  447. package/src/workflow/workflows/evolve/scripts/evolve_core/algorithms/ucb1.py +55 -0
  448. package/src/workflow/workflows/evolve/scripts/evolve_core/best_snapshot.py +62 -0
  449. package/src/workflow/workflows/evolve/scripts/evolve_core/cli.py +752 -0
  450. package/src/workflow/workflows/evolve/scripts/evolve_core/cognition.py +127 -0
  451. package/src/workflow/workflows/evolve/scripts/evolve_core/database.py +218 -0
  452. package/src/workflow/workflows/evolve/scripts/evolve_core/diff.py +57 -0
  453. package/src/workflow/workflows/evolve/scripts/evolve_core/embedding.py +84 -0
  454. package/src/workflow/workflows/evolve/scripts/evolve_core/file_lock.py +45 -0
  455. package/src/workflow/workflows/evolve/scripts/evolve_core/run_state.py +343 -0
  456. package/src/workflow/workflows/evolve/scripts/evolve_core/sampling_config.py +173 -0
  457. package/src/workflow/workflows/evolve/scripts/evolve_core/structures.py +93 -0
  458. package/src/workflow/workflows/evolve/scripts/evolve_core/vector_index.py +191 -0
  459. package/src/workflow/workflows/evolve/scripts/evolve_result.py +1503 -0
  460. package/src/workflow/workflows/evolve/scripts/requirements.txt +2 -0
  461. package/src/workflow/workflows/evolve/workflow.yaml +646 -0
  462. package/src/workflow/workflows/test-email-summary/workflow.yaml +1 -0
  463. package/src/workflow/workflows/vuln-discovery/README.md +54 -0
  464. package/src/workflow/workflows/vuln-discovery/skills/harness-design-fuzzing/SKILL.md +6 -1
  465. package/src/workflow/workflows/vuln-discovery/skills/memory-safety-c-cpp/SKILL.md +1 -0
  466. package/src/workflow/workflows/vuln-discovery/skills/vulnerability-triage/SKILL.md +4 -0
  467. package/src/workflow/workflows/vuln-discovery/workflow.yaml +13 -8
  468. package/dist/mux/pty-bridge.js.map +0 -1
  469. package/dist/mux/trusted-input.js.map +0 -1
  470. package/dist/web-ui-static/assets/index-BFO5z1js.js +0 -76
  471. package/dist/web-ui-static/assets/index-CCUwrkIL.css +0 -1
  472. package/packages/web-ui/README.md +0 -113
@@ -0,0 +1,752 @@
1
+ """CLI entrypoints for the Evolve skill."""
2
+
3
+ from __future__ import annotations
4
+
5
+ import argparse
6
+ import json
7
+ import re
8
+ import shutil
9
+ import subprocess
10
+ import sys
11
+ from difflib import unified_diff
12
+ from pathlib import Path
13
+ from typing import Any, Dict, List, Optional
14
+
15
+ from .best_snapshot import BestSnapshotManager
16
+ from .cognition import Cognition
17
+ from .database import Database
18
+ from .run_state import (
19
+ append_round_log,
20
+ build_run_dir,
21
+ compute_missing_fields_for_workspace,
22
+ deep_merge,
23
+ ensure_path_allowed,
24
+ ensure_run_layout,
25
+ flatten_list,
26
+ initialize_cognition_seed_file,
27
+ load_run_spec,
28
+ load_structured_file,
29
+ normalize_spec_path,
30
+ require_evolve_ready,
31
+ save_run_spec,
32
+ workspace_root_for_run,
33
+ write_preflight_summary,
34
+ )
35
+ from .sampling_config import (
36
+ SAMPLING_CONFIG_IMMUTABLE_ERROR,
37
+ build_database_sampling_config,
38
+ configured_sampling_algorithm,
39
+ configured_sample_n,
40
+ run_has_recorded_nodes,
41
+ sampling_config_fingerprint,
42
+ validate_custom_sampler_for_workspace,
43
+ )
44
+ from .structures import CognitionItem, Node
45
+
46
+
47
+ def emit_json(payload: Dict[str, Any]) -> int:
48
+ print(json.dumps(payload, ensure_ascii=False, indent=2))
49
+ return 0
50
+
51
+
52
+ def parse_bool(value: Optional[str]) -> Optional[bool]:
53
+ if value is None:
54
+ return None
55
+ lowered = value.strip().lower()
56
+ if lowered in {"1", "true", "yes", "y"}:
57
+ return True
58
+ if lowered in {"0", "false", "no", "n"}:
59
+ return False
60
+ raise argparse.ArgumentTypeError(f"Invalid boolean value: {value}")
61
+
62
+
63
+ def build_database(run_dir: Path, spec: Dict[str, Any]) -> Database:
64
+ algorithm, sampling_kwargs = build_database_sampling_config(
65
+ spec,
66
+ workspace_root_for_run(run_dir),
67
+ )
68
+ return Database(
69
+ storage_dir=Path(run_dir) / "database_data",
70
+ sampling_algorithm=algorithm,
71
+ sampling_kwargs=sampling_kwargs,
72
+ )
73
+
74
+
75
+ def build_cognition(run_dir: Path) -> Cognition:
76
+ return Cognition(storage_dir=Path(run_dir) / "cognition_data", score_threshold=0.0)
77
+
78
+
79
+ def extract_seed_items(markdown_path: Path) -> List[CognitionItem]:
80
+ text = Path(markdown_path).read_text(encoding="utf-8")
81
+ items: List[CognitionItem] = []
82
+ for raw_block in re.findall(r"```json\s*(.*?)```", text, re.DOTALL):
83
+ payload = json.loads(raw_block)
84
+ if isinstance(payload, dict):
85
+ payload = [payload]
86
+ for raw_item in payload:
87
+ items.append(
88
+ CognitionItem(
89
+ content=raw_item.get("content", ""),
90
+ source=raw_item.get("source", ""),
91
+ metadata=raw_item.get("metadata", {}),
92
+ id=raw_item.get("id"),
93
+ )
94
+ )
95
+ return items
96
+
97
+
98
+ def command_context(
99
+ workspace_root: Path,
100
+ run_dir: Path,
101
+ step_dir: Path,
102
+ code_path: Path,
103
+ results_path: Path,
104
+ script_path: Optional[str],
105
+ timeout_secs: int,
106
+ ) -> Dict[str, str]:
107
+ raw = {
108
+ "workspace_root": str(workspace_root),
109
+ "run_dir": str(run_dir),
110
+ "step_dir": str(step_dir),
111
+ "code_path": str(code_path),
112
+ "results_path": str(results_path),
113
+ "script_path": script_path or "",
114
+ "timeout_secs": str(timeout_secs),
115
+ }
116
+ quoted = {
117
+ f"quoted_{key}": f'"{value}"' if value else '""'
118
+ for key, value in raw.items()
119
+ }
120
+ return {**raw, **quoted}
121
+
122
+
123
+ def cmd_brief_normalize(args: argparse.Namespace) -> int:
124
+ workspace_root = Path(args.workspace_root or Path.cwd()).resolve()
125
+ run_dir = build_run_dir(workspace_root, args.run_name)
126
+ ensure_run_layout(run_dir)
127
+ spec = load_run_spec(run_dir)
128
+ original_sampling = sampling_config_fingerprint(spec)
129
+
130
+ if args.spec_file:
131
+ spec = deep_merge(spec, load_structured_file(Path(args.spec_file)))
132
+
133
+ if args.objective is not None:
134
+ spec["objective"] = args.objective
135
+ if args.core_score is not None:
136
+ spec["evaluation"]["core_score"] = args.core_score
137
+ if args.secondary_metric is not None:
138
+ spec["evaluation"]["secondary_metrics"] = flatten_list(args.secondary_metric)
139
+ if args.evaluation_command is not None:
140
+ spec["evaluation"]["command"] = args.evaluation_command
141
+ if args.evaluation_script_path is not None:
142
+ spec["evaluation"]["script_path"] = normalize_spec_path(
143
+ workspace_root, args.evaluation_script_path
144
+ )
145
+ if args.evaluation_timeout_secs is not None:
146
+ spec["evaluation"]["timeout_secs"] = args.evaluation_timeout_secs
147
+ if args.success_criterion is not None:
148
+ spec["evaluation"]["success_criteria"] = flatten_list(args.success_criterion)
149
+ if args.max_rounds is not None:
150
+ spec["budget"]["max_rounds"] = args.max_rounds
151
+ if args.patience is not None:
152
+ spec["budget"]["patience"] = args.patience
153
+ if args.stop_condition is not None:
154
+ spec["stop_conditions"] = flatten_list(args.stop_condition)
155
+ if args.writable_path is not None:
156
+ spec["mutation_scope"]["writable_paths"] = [
157
+ normalize_spec_path(workspace_root, value)
158
+ for value in flatten_list(args.writable_path)
159
+ ]
160
+ if args.primary_target is not None:
161
+ spec["mutation_scope"]["primary_targets"] = [
162
+ normalize_spec_path(workspace_root, value)
163
+ for value in flatten_list(args.primary_target)
164
+ ]
165
+ if args.sampling_algorithm is not None:
166
+ spec["sampling"]["algorithm"] = args.sampling_algorithm
167
+ if args.sample_n is not None:
168
+ spec["sampling"]["sample_n"] = args.sample_n
169
+ if args.sampling_feature is not None:
170
+ spec["sampling"]["feature_dimensions"] = flatten_list(args.sampling_feature)
171
+ if args.sampling_feature_bins is not None:
172
+ spec["sampling"]["feature_bins"] = args.sampling_feature_bins
173
+ if args.sampling_custom_sampler_path is not None:
174
+ spec["sampling"]["custom_sampler_path"] = normalize_spec_path(
175
+ workspace_root, args.sampling_custom_sampler_path
176
+ )
177
+ if args.sampling_custom_sampler_class is not None:
178
+ spec["sampling"]["custom_sampler_class"] = args.sampling_custom_sampler_class
179
+ if args.cognition_source_mode is not None:
180
+ spec["cognition"]["source_mode"] = args.cognition_source_mode
181
+ if args.seed_file is not None:
182
+ spec["cognition"]["seed_files"] = [
183
+ normalize_spec_path(workspace_root, value) for value in flatten_list(args.seed_file)
184
+ ]
185
+ if args.seed_note is not None:
186
+ spec["cognition"]["seed_notes"] = flatten_list(args.seed_note)
187
+ if args.confirmed is not None:
188
+ spec["approval"]["confirmed"] = args.confirmed
189
+
190
+ missing = compute_missing_fields_for_workspace(spec, workspace_root)
191
+ custom_sampler_error = validate_custom_sampler_for_workspace(spec, workspace_root)
192
+ if spec.get("approval", {}).get("confirmed") and missing:
193
+ detail = ""
194
+ if custom_sampler_error:
195
+ detail = f" Custom sampler validation failed: {custom_sampler_error}"
196
+ raise SystemExit(
197
+ "Cannot confirm preflight while required fields are missing: "
198
+ + ", ".join(missing)
199
+ + detail
200
+ )
201
+
202
+ if run_has_recorded_nodes(run_dir):
203
+ updated_sampling = sampling_config_fingerprint(spec)
204
+ if updated_sampling != original_sampling:
205
+ raise SystemExit(SAMPLING_CONFIG_IMMUTABLE_ERROR)
206
+
207
+ spec_file = save_run_spec(run_dir, spec)
208
+ summary_file = write_preflight_summary(run_dir, spec)
209
+ seed_file = initialize_cognition_seed_file(run_dir, spec)
210
+ return emit_json(
211
+ {
212
+ "confirmed": spec["approval"]["confirmed"],
213
+ "missing_fields": missing,
214
+ "custom_sampler_error": custom_sampler_error,
215
+ "preflight_summary": str(summary_file),
216
+ "run_dir": str(run_dir),
217
+ "run_spec": str(spec_file),
218
+ "seed_file": str(seed_file),
219
+ }
220
+ )
221
+
222
+
223
+ def cmd_eval_inspect(args: argparse.Namespace) -> int:
224
+ preview = ""
225
+ exists = False
226
+ if args.script_path:
227
+ script_path = Path(args.script_path).resolve()
228
+ exists = script_path.exists()
229
+ if exists:
230
+ preview = "".join(script_path.read_text(encoding="utf-8").splitlines(True)[:20])
231
+ else:
232
+ script_path = None
233
+ return emit_json(
234
+ {
235
+ "command": args.command or "",
236
+ "exists": exists,
237
+ "preview": preview,
238
+ "script_path": str(script_path) if script_path else "",
239
+ }
240
+ )
241
+
242
+
243
+ def cmd_eval_run(args: argparse.Namespace) -> int:
244
+ run_dir = Path(args.run_dir).resolve()
245
+ spec = require_evolve_ready(run_dir)
246
+ workspace_root = workspace_root_for_run(run_dir)
247
+ ensure_run_layout(run_dir)
248
+
249
+ source_code = Path(args.code_path)
250
+ if not source_code.is_absolute():
251
+ source_code = (workspace_root / source_code).resolve()
252
+ ensure_path_allowed(run_dir, source_code)
253
+
254
+ step_name = args.step_name or "manual_step"
255
+ step_dir = Path(run_dir) / "steps" / step_name
256
+ step_dir.mkdir(parents=True, exist_ok=True)
257
+ step_code_path = step_dir / "code"
258
+ if source_code != step_code_path:
259
+ shutil.copyfile(source_code, step_code_path)
260
+
261
+ results_path = step_dir / "results.json"
262
+ command = args.command or spec.get("evaluation", {}).get("command", "")
263
+ script_path = args.script_path or spec.get("evaluation", {}).get("script_path", "")
264
+ evaluation_timeout = args.timeout
265
+ if evaluation_timeout is None:
266
+ evaluation_timeout = int(spec.get("evaluation", {}).get("timeout_secs", 0) or 0)
267
+ if not command and script_path:
268
+ command = "python {quoted_script_path} {quoted_code_path} {quoted_results_path}"
269
+ if not command:
270
+ raise SystemExit("No evaluation command or script path is configured.")
271
+ if evaluation_timeout <= 0:
272
+ raise SystemExit("Evaluation timeout must be a positive number of seconds.")
273
+
274
+ formatted = command.format(
275
+ **command_context(
276
+ workspace_root=workspace_root,
277
+ run_dir=run_dir,
278
+ step_dir=step_dir,
279
+ code_path=step_code_path,
280
+ results_path=results_path,
281
+ script_path=script_path,
282
+ timeout_secs=evaluation_timeout,
283
+ )
284
+ )
285
+ (step_dir / "eval.command.txt").write_text(formatted, encoding="utf-8")
286
+
287
+ stdout = ""
288
+ stderr = ""
289
+ return_code = 0
290
+ try:
291
+ completed = subprocess.run(
292
+ formatted,
293
+ shell=True,
294
+ cwd=workspace_root,
295
+ capture_output=True,
296
+ text=True,
297
+ timeout=evaluation_timeout,
298
+ )
299
+ stdout = completed.stdout
300
+ stderr = completed.stderr
301
+ return_code = completed.returncode
302
+ except subprocess.TimeoutExpired as exc:
303
+ stdout = exc.stdout or ""
304
+ stderr = exc.stderr or ""
305
+ return_code = 124
306
+
307
+ (step_dir / "eval.stdout").write_text(stdout, encoding="utf-8")
308
+ (step_dir / "eval.stderr").write_text(stderr, encoding="utf-8")
309
+
310
+ if results_path.exists():
311
+ results = json.loads(results_path.read_text(encoding="utf-8"))
312
+ else:
313
+ results = {}
314
+
315
+ if return_code != 0:
316
+ results.setdefault("success", False)
317
+ results.setdefault("eval_score", 0.0)
318
+ results.setdefault("score", results.get("eval_score", 0.0))
319
+ results.setdefault("error", stderr or f"Evaluator exited with code {return_code}")
320
+ results_path.write_text(json.dumps(results, ensure_ascii=False, indent=2), encoding="utf-8")
321
+
322
+ append_round_log(
323
+ run_dir,
324
+ "eval_run",
325
+ {
326
+ "command": formatted,
327
+ "return_code": return_code,
328
+ "step_name": step_name,
329
+ "timeout_secs": evaluation_timeout,
330
+ },
331
+ )
332
+ return emit_json(
333
+ {
334
+ "results_path": str(results_path),
335
+ "return_code": return_code,
336
+ "step_dir": str(step_dir),
337
+ "success": return_code == 0,
338
+ }
339
+ )
340
+
341
+
342
+ def cmd_cognition_init(args: argparse.Namespace) -> int:
343
+ run_dir = Path(args.run_dir).resolve()
344
+ ensure_run_layout(run_dir)
345
+ cognition = build_cognition(run_dir)
346
+ if args.reset:
347
+ cognition.reset()
348
+
349
+ seed_path = Path(args.seed_file) if args.seed_file else run_dir / "cognition_seed.md"
350
+ items = extract_seed_items(seed_path) if seed_path.exists() else []
351
+ if items:
352
+ cognition.add_batch(items)
353
+
354
+ append_round_log(
355
+ run_dir,
356
+ "cognition_init",
357
+ {"items_added": len(items), "seed_file": str(seed_path)},
358
+ )
359
+ return emit_json({"items_added": len(items), "total_items": len(cognition)})
360
+
361
+
362
+ def cmd_cognition_add(args: argparse.Namespace) -> int:
363
+ run_dir = Path(args.run_dir).resolve()
364
+ ensure_run_layout(run_dir)
365
+ cognition = build_cognition(run_dir)
366
+ items: List[CognitionItem] = []
367
+ for text in flatten_list(args.item):
368
+ items.append(
369
+ CognitionItem(
370
+ content=text,
371
+ source=args.source or "",
372
+ metadata={"kind": args.kind} if args.kind else {},
373
+ )
374
+ )
375
+ if args.json_file:
376
+ payload = load_structured_file(Path(args.json_file))
377
+ if isinstance(payload, dict):
378
+ payload = [payload]
379
+ for raw_item in payload:
380
+ items.append(
381
+ CognitionItem(
382
+ content=raw_item.get("content", ""),
383
+ source=raw_item.get("source", ""),
384
+ metadata=raw_item.get("metadata", {}),
385
+ )
386
+ )
387
+ cognition.add_batch(items)
388
+ append_round_log(run_dir, "cognition_add", {"items_added": len(items)})
389
+ return emit_json({"items_added": len(items), "total_items": len(cognition)})
390
+
391
+
392
+ def cmd_cognition_search(args: argparse.Namespace) -> int:
393
+ run_dir = Path(args.run_dir).resolve()
394
+ cognition = build_cognition(run_dir)
395
+ matches = cognition.retrieve(args.query, top_k=args.top_k)
396
+ return emit_json(
397
+ {
398
+ "matches": [
399
+ {"content": item.content, "metadata": item.metadata, "score": score, "source": item.source}
400
+ for item, score in matches
401
+ ]
402
+ }
403
+ )
404
+
405
+
406
+ def cmd_db_sample(args: argparse.Namespace) -> int:
407
+ run_dir = Path(args.run_dir).resolve()
408
+ spec = require_evolve_ready(run_dir)
409
+ db = build_database(run_dir, spec)
410
+ configured_algorithm = configured_sampling_algorithm(spec)
411
+ n = args.n or configured_sample_n(spec)
412
+ sampled = db.sample(n=n)
413
+ append_round_log(run_dir, "db_sample", {"n": n, "algorithm": configured_algorithm})
414
+ return emit_json({"nodes": [node.to_dict() for node in sampled]})
415
+
416
+
417
+ def cmd_db_record(args: argparse.Namespace) -> int:
418
+ run_dir = Path(args.run_dir).resolve()
419
+ spec = require_evolve_ready(run_dir)
420
+ db = build_database(run_dir, spec)
421
+ snapshot = BestSnapshotManager(Path(run_dir) / "steps")
422
+ workspace_root = workspace_root_for_run(run_dir)
423
+
424
+ source_code = Path(args.code_path)
425
+ if not source_code.is_absolute():
426
+ source_code = (workspace_root / source_code).resolve()
427
+ ensure_path_allowed(run_dir, source_code)
428
+
429
+ step_name = args.step_name
430
+ step_dir = Path(run_dir) / "steps" / step_name
431
+ step_dir.mkdir(parents=True, exist_ok=True)
432
+ step_code_path = step_dir / "code"
433
+ if source_code != step_code_path:
434
+ shutil.copyfile(source_code, step_code_path)
435
+ code = step_code_path.read_text(encoding="utf-8")
436
+
437
+ results: Dict[str, Any] = {}
438
+ if args.results_file:
439
+ results_path = Path(args.results_file)
440
+ if not results_path.is_absolute():
441
+ results_path = (workspace_root / results_path).resolve()
442
+ if results_path.exists():
443
+ ensure_path_allowed(run_dir, results_path)
444
+ results = json.loads(results_path.read_text(encoding="utf-8"))
445
+ if results_path != step_dir / "results.json":
446
+ shutil.copyfile(results_path, step_dir / "results.json")
447
+
448
+ analysis = args.analysis or ""
449
+ if args.analysis_file:
450
+ analysis_path = Path(args.analysis_file)
451
+ if not analysis_path.is_absolute():
452
+ analysis_path = (workspace_root / analysis_path).resolve()
453
+ ensure_path_allowed(run_dir, analysis_path)
454
+ analysis = analysis_path.read_text(encoding="utf-8")
455
+ if analysis:
456
+ (step_dir / "analysis.md").write_text(analysis, encoding="utf-8")
457
+
458
+ score = args.score
459
+ if score is None:
460
+ score = float(results.get("score", results.get("eval_score", 0.0)))
461
+
462
+ node = Node(
463
+ name=args.name,
464
+ parent=args.parent or [],
465
+ motivation=args.motivation or "",
466
+ code=code,
467
+ results=results,
468
+ analysis=analysis,
469
+ score=score,
470
+ meta_info={"step_name": step_name},
471
+ )
472
+ node_id, previous_nodes = db.add_with_previous_nodes(node)
473
+ snapshot.init_from_nodes(previous_nodes)
474
+ node_file = step_dir / "node.json"
475
+ node_file.write_text(json.dumps(node.to_dict(), ensure_ascii=False, indent=2), encoding="utf-8")
476
+ best_updated = snapshot.update_if_better(node, step_name=step_name, source_step_dir=step_dir)
477
+ if best_updated:
478
+ run_best_dir = Path(run_dir) / "best" / step_name
479
+ run_best_dir.mkdir(parents=True, exist_ok=True)
480
+ shutil.copyfile(step_code_path, run_best_dir / "code")
481
+ results_copy = step_dir / "results.json"
482
+ if results_copy.exists():
483
+ shutil.copyfile(results_copy, run_best_dir / "results.json")
484
+ append_round_log(
485
+ run_dir,
486
+ "db_record",
487
+ {"node_id": node_id, "name": node.name, "score": node.score, "step_name": step_name},
488
+ )
489
+ return emit_json({"best_updated": best_updated, "node_id": node_id, "step_dir": str(step_dir)})
490
+
491
+
492
+ def cmd_db_best(args: argparse.Namespace) -> int:
493
+ run_dir = Path(args.run_dir).resolve()
494
+ spec = require_evolve_ready(run_dir)
495
+ db = build_database(run_dir, spec)
496
+ nodes = db.get_all()
497
+ if not nodes:
498
+ return emit_json({"best": None})
499
+ best = max(nodes, key=lambda node: node.score)
500
+ return emit_json({"best": best.to_dict()})
501
+
502
+
503
+ def cmd_db_stats(args: argparse.Namespace) -> int:
504
+ run_dir = Path(args.run_dir).resolve()
505
+ spec = require_evolve_ready(run_dir)
506
+ db = build_database(run_dir, spec)
507
+ nodes, sampler_stats = db.snapshot()
508
+ best_score = max((node.score for node in nodes), default=0.0)
509
+ return emit_json(
510
+ {
511
+ "best_score": best_score,
512
+ "sampler_stats": sampler_stats,
513
+ "total_nodes": len(nodes),
514
+ }
515
+ )
516
+
517
+
518
+ def cmd_files_read(args: argparse.Namespace) -> int:
519
+ run_dir = Path(args.run_dir).resolve()
520
+ workspace_root = workspace_root_for_run(run_dir)
521
+ target = Path(args.path)
522
+ if not target.is_absolute():
523
+ target = (workspace_root / target).resolve()
524
+ ensure_path_allowed(run_dir, target)
525
+ return emit_json({"content": target.read_text(encoding="utf-8"), "path": str(target)})
526
+
527
+
528
+ def cmd_files_write(args: argparse.Namespace) -> int:
529
+ run_dir = Path(args.run_dir).resolve()
530
+ require_evolve_ready(run_dir)
531
+ workspace_root = workspace_root_for_run(run_dir)
532
+ target = Path(args.path)
533
+ if not target.is_absolute():
534
+ target = (workspace_root / target).resolve()
535
+ ensure_path_allowed(run_dir, target)
536
+
537
+ if args.from_file:
538
+ content_source = Path(args.from_file)
539
+ if not content_source.is_absolute():
540
+ content_source = (workspace_root / content_source).resolve()
541
+ ensure_path_allowed(run_dir, content_source)
542
+ content = content_source.read_text(encoding="utf-8")
543
+ else:
544
+ content = args.content or ""
545
+
546
+ target.parent.mkdir(parents=True, exist_ok=True)
547
+ target.write_text(content, encoding="utf-8")
548
+ append_round_log(run_dir, "file_write", {"path": str(target)})
549
+ return emit_json({"bytes_written": len(content.encode("utf-8")), "path": str(target)})
550
+
551
+
552
+ def cmd_files_diff(args: argparse.Namespace) -> int:
553
+ run_dir = Path(args.run_dir).resolve()
554
+ workspace_root = workspace_root_for_run(run_dir)
555
+ left = Path(args.path)
556
+ right = Path(args.other_path)
557
+ if not left.is_absolute():
558
+ left = (workspace_root / left).resolve()
559
+ if not right.is_absolute():
560
+ right = (workspace_root / right).resolve()
561
+ ensure_path_allowed(run_dir, left)
562
+ ensure_path_allowed(run_dir, right)
563
+
564
+ diff = "".join(
565
+ unified_diff(
566
+ left.read_text(encoding="utf-8").splitlines(True),
567
+ right.read_text(encoding="utf-8").splitlines(True),
568
+ fromfile=str(left),
569
+ tofile=str(right),
570
+ )
571
+ )
572
+ return emit_json({"diff": diff})
573
+
574
+
575
+ def cmd_summary_final(args: argparse.Namespace) -> int:
576
+ run_dir = Path(args.run_dir).resolve()
577
+ spec = require_evolve_ready(run_dir)
578
+ db = build_database(run_dir, spec)
579
+ nodes = db.get_all()
580
+ best = max(nodes, key=lambda node: node.score) if nodes else None
581
+ summary_lines = [
582
+ "# Final Summary",
583
+ "",
584
+ f"- Objective: {spec.get('objective', '')}",
585
+ f"- Total nodes: {len(nodes)}",
586
+ f"- Best score: {best.score if best else 0.0}",
587
+ f"- Best node: {best.name if best else 'none'}",
588
+ ]
589
+ if best:
590
+ summary_lines.append(f"- Best motivation: {best.motivation}")
591
+ summary_path = Path(run_dir) / "final_summary.md"
592
+ summary_path.write_text("\n".join(summary_lines) + "\n", encoding="utf-8")
593
+ append_round_log(run_dir, "summary_final", {"path": str(summary_path)})
594
+ return emit_json({"summary_path": str(summary_path)})
595
+
596
+
597
+ def build_brief_parser() -> argparse.ArgumentParser:
598
+ parser = argparse.ArgumentParser(prog="evolve-brief")
599
+ subparsers = parser.add_subparsers(dest="command", required=True)
600
+ normalize = subparsers.add_parser("normalize")
601
+ normalize.add_argument("--workspace-root")
602
+ normalize.add_argument("--run-name", required=True)
603
+ normalize.add_argument("--spec-file")
604
+ normalize.add_argument("--objective")
605
+ normalize.add_argument("--core-score")
606
+ normalize.add_argument("--secondary-metric", action="append")
607
+ normalize.add_argument("--evaluation-command")
608
+ normalize.add_argument("--evaluation-script-path")
609
+ normalize.add_argument("--evaluation-timeout-secs", type=int)
610
+ normalize.add_argument("--success-criterion", action="append")
611
+ normalize.add_argument("--max-rounds", type=int)
612
+ normalize.add_argument("--patience", type=int)
613
+ normalize.add_argument("--stop-condition", action="append")
614
+ normalize.add_argument("--writable-path", action="append")
615
+ normalize.add_argument("--primary-target", action="append")
616
+ normalize.add_argument("--sampling-algorithm")
617
+ normalize.add_argument("--sample-n", type=int)
618
+ normalize.add_argument("--sampling-feature", action="append")
619
+ normalize.add_argument("--sampling-feature-bins", type=int)
620
+ normalize.add_argument("--sampling-custom-sampler-path")
621
+ normalize.add_argument("--sampling-custom-sampler-class")
622
+ normalize.add_argument("--cognition-source-mode")
623
+ normalize.add_argument("--seed-file", action="append")
624
+ normalize.add_argument("--seed-note", action="append")
625
+ normalize.add_argument("--confirmed", type=parse_bool)
626
+ normalize.set_defaults(func=cmd_brief_normalize)
627
+ return parser
628
+
629
+
630
+ def build_eval_parser() -> argparse.ArgumentParser:
631
+ parser = argparse.ArgumentParser(prog="evolve-eval")
632
+ subparsers = parser.add_subparsers(dest="command", required=True)
633
+ inspect_cmd = subparsers.add_parser("inspect")
634
+ inspect_cmd.add_argument("--script-path")
635
+ inspect_cmd.add_argument("--command")
636
+ inspect_cmd.set_defaults(func=cmd_eval_inspect)
637
+
638
+ run_cmd = subparsers.add_parser("run")
639
+ run_cmd.add_argument("--run-dir", required=True)
640
+ run_cmd.add_argument("--code-path", required=True)
641
+ run_cmd.add_argument("--step-name")
642
+ run_cmd.add_argument("--command")
643
+ run_cmd.add_argument("--script-path")
644
+ run_cmd.add_argument("--timeout", type=int)
645
+ run_cmd.set_defaults(func=cmd_eval_run)
646
+ return parser
647
+
648
+
649
+ def build_cognition_parser() -> argparse.ArgumentParser:
650
+ parser = argparse.ArgumentParser(prog="evolve-cognition")
651
+ subparsers = parser.add_subparsers(dest="command", required=True)
652
+
653
+ init_cmd = subparsers.add_parser("init")
654
+ init_cmd.add_argument("--run-dir", required=True)
655
+ init_cmd.add_argument("--seed-file")
656
+ init_cmd.add_argument("--reset", action="store_true")
657
+ init_cmd.set_defaults(func=cmd_cognition_init)
658
+
659
+ add_cmd = subparsers.add_parser("add")
660
+ add_cmd.add_argument("--run-dir", required=True)
661
+ add_cmd.add_argument("--item", action="append")
662
+ add_cmd.add_argument("--json-file")
663
+ add_cmd.add_argument("--kind")
664
+ add_cmd.add_argument("--source")
665
+ add_cmd.set_defaults(func=cmd_cognition_add)
666
+
667
+ search_cmd = subparsers.add_parser("search")
668
+ search_cmd.add_argument("--run-dir", required=True)
669
+ search_cmd.add_argument("--query", required=True)
670
+ search_cmd.add_argument("--top-k", type=int, default=5)
671
+ search_cmd.set_defaults(func=cmd_cognition_search)
672
+ return parser
673
+
674
+
675
+ def build_db_parser() -> argparse.ArgumentParser:
676
+ parser = argparse.ArgumentParser(prog="evolve-db")
677
+ subparsers = parser.add_subparsers(dest="command", required=True)
678
+
679
+ sample_cmd = subparsers.add_parser("sample")
680
+ sample_cmd.add_argument("--run-dir", required=True)
681
+ sample_cmd.add_argument("--n", type=int)
682
+ sample_cmd.set_defaults(func=cmd_db_sample)
683
+
684
+ record_cmd = subparsers.add_parser("record")
685
+ record_cmd.add_argument("--run-dir", required=True)
686
+ record_cmd.add_argument("--step-name", required=True)
687
+ record_cmd.add_argument("--name", required=True)
688
+ record_cmd.add_argument("--code-path", required=True)
689
+ record_cmd.add_argument("--motivation")
690
+ record_cmd.add_argument("--analysis")
691
+ record_cmd.add_argument("--analysis-file")
692
+ record_cmd.add_argument("--results-file")
693
+ record_cmd.add_argument("--score", type=float)
694
+ record_cmd.add_argument("--parent", type=int, action="append")
695
+ record_cmd.set_defaults(func=cmd_db_record)
696
+
697
+ best_cmd = subparsers.add_parser("best")
698
+ best_cmd.add_argument("--run-dir", required=True)
699
+ best_cmd.set_defaults(func=cmd_db_best)
700
+
701
+ stats_cmd = subparsers.add_parser("stats")
702
+ stats_cmd.add_argument("--run-dir", required=True)
703
+ stats_cmd.set_defaults(func=cmd_db_stats)
704
+ return parser
705
+
706
+
707
+ def build_files_parser() -> argparse.ArgumentParser:
708
+ parser = argparse.ArgumentParser(prog="evolve-files")
709
+ subparsers = parser.add_subparsers(dest="command", required=True)
710
+
711
+ read_cmd = subparsers.add_parser("read")
712
+ read_cmd.add_argument("--run-dir", required=True)
713
+ read_cmd.add_argument("--path", required=True)
714
+ read_cmd.set_defaults(func=cmd_files_read)
715
+
716
+ write_cmd = subparsers.add_parser("write")
717
+ write_cmd.add_argument("--run-dir", required=True)
718
+ write_cmd.add_argument("--path", required=True)
719
+ write_cmd.add_argument("--content")
720
+ write_cmd.add_argument("--from-file")
721
+ write_cmd.set_defaults(func=cmd_files_write)
722
+
723
+ diff_cmd = subparsers.add_parser("diff")
724
+ diff_cmd.add_argument("--run-dir", required=True)
725
+ diff_cmd.add_argument("--path", required=True)
726
+ diff_cmd.add_argument("--other-path", required=True)
727
+ diff_cmd.set_defaults(func=cmd_files_diff)
728
+ return parser
729
+
730
+
731
+ def build_summary_parser() -> argparse.ArgumentParser:
732
+ parser = argparse.ArgumentParser(prog="evolve-summary")
733
+ subparsers = parser.add_subparsers(dest="command", required=True)
734
+ final_cmd = subparsers.add_parser("final")
735
+ final_cmd.add_argument("--run-dir", required=True)
736
+ final_cmd.set_defaults(func=cmd_summary_final)
737
+ return parser
738
+
739
+
740
+ def main_for(entrypoint: str, argv: Optional[List[str]] = None) -> int:
741
+ argv = argv if argv is not None else sys.argv[1:]
742
+ parsers = {
743
+ "brief": build_brief_parser,
744
+ "cognition": build_cognition_parser,
745
+ "db": build_db_parser,
746
+ "eval": build_eval_parser,
747
+ "files": build_files_parser,
748
+ "summary": build_summary_parser,
749
+ }
750
+ parser = parsers[entrypoint]()
751
+ args = parser.parse_args(argv)
752
+ return args.func(args)