@shuyhere/takotako 0.0.1

package/dist/core/security.js

@@ -0,0 +1,120 @@
+/**
+ * Security middleware — unified access point for all security modules.
+ *
+ * Initializes and provides access to:
+ * - SecretScanner (output scanning)
+ * - RateLimiter (request throttling)
+ * - InputSanitizer (prompt injection detection)
+ * - ToolValidator (argument validation)
+ * - NetworkPolicy (URL/domain control)
+ *
+ * This module is the single integration point. Other modules import
+ * from here rather than from individual security modules.
+ */
+import { SecretScanner } from './secret-scanner.js';
+import { RateLimiter } from './rate-limiter.js';
+import { InputSanitizer } from './sanitizer.js';
+import { ToolValidator } from './tool-validator.js';
+import { NetworkPolicy } from './network-policy.js';
+// ─── Singleton instances ────────────────────────────────────────────
+let secretScanner = null;
+let rateLimiter = null;
+let inputSanitizer = null;
+let toolValidator = null;
+let networkPolicy = null;
+/**
+ * Initialize all security modules from config.
+ */
+export function initSecurity(config, workspaceRoot) {
+    secretScanner = new SecretScanner({
+        enabled: config.secretScanning.enabled,
+        action: config.secretScanning.action,
+    });
+    rateLimiter = new RateLimiter({
+        ...config.rateLimits,
+    });
+    inputSanitizer = new InputSanitizer({
+        enabled: config.sanitizer.enabled,
+        mode: config.sanitizer.mode,
+    });
+    toolValidator = new ToolValidator({ level: config.toolValidation.level }, workspaceRoot);
+    networkPolicy = new NetworkPolicy({
+        mode: config.network.mode,
+        allowlist: config.network.allowlist,
+        blocklist: config.network.blocklist,
+    });
+}
+/** Get the secret scanner instance. */
+export function getSecretScanner() {
+    return secretScanner;
+}
+/** Get the rate limiter instance. */
+export function getRateLimiter() {
+    return rateLimiter;
+}
+/** Get the input sanitizer instance. */
+export function getInputSanitizer() {
+    return inputSanitizer;
+}
+/** Get the tool validator instance. */
+export function getToolValidator() {
+    return toolValidator;
+}
+/** Get the network policy instance. */
+export function getNetworkPolicy() {
+    return networkPolicy;
+}
+/**
+ * Scan and redact secrets from outgoing text.
+ * Returns the (possibly redacted) text.
+ */
+export function scanSecrets(text) {
+    if (!secretScanner)
+        return text;
+    const result = secretScanner.scan(text);
+    if (result.hasSecrets && result.detections.length > 0) {
+        console.warn(`[security] Detected ${result.detections.length} secret(s) in output: ${result.detections.map((d) => d.type).join(', ')}`);
+    }
+    return result.text;
+}
+/**
+ * Check rate limit for a user/channel pair.
+ * Returns null if allowed, or an error message if limited.
+ */
+export function checkRateLimit(userId, channelId) {
+    if (!rateLimiter)
+        return null;
+    const result = rateLimiter.check(userId, channelId);
+    if (!result.allowed) {
+        return `Rate limited (${result.limitType}). Try again in ${result.retryAfterSeconds}s.`;
+    }
+    return null;
+}
+/**
+ * Sanitize user input for prompt injection.
+ * Returns the sanitized text, or null if blocked.
+ */
+export function sanitizeInput(text) {
+    if (!inputSanitizer)
+        return { text, blocked: false, warnings: [] };
+    const result = inputSanitizer.sanitize(text);
+    const warnings = result.detections.map((d) => `[${d.severity}] ${d.pattern}`);
+    if (result.flagged) {
+        console.warn(`[security] Input sanitizer flagged: ${warnings.join(', ')}`);
+    }
+    return { text: result.text, blocked: result.blocked, warnings };
+}
+/**
+ * Check if a URL is allowed by network policy.
+ * Returns null if allowed, or an error message if blocked.
+ */
+export function checkNetworkPolicy(url) {
+    if (!networkPolicy)
+        return null;
+    const result = networkPolicy.check(url);
+    if (!result.allowed) {
+        return result.reason ?? 'Blocked by network policy';
+    }
+    return null;
+}
+//# sourceMappingURL=security.js.map

package/dist/core/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/core/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAwB,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAC;AAG9E,uEAAuE;AAEvE,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,IAAI,WAAW,GAAuB,IAAI,CAAC;AAC3C,IAAI,cAAc,GAA0B,IAAI,CAAC;AACjD,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,IAAI,aAAa,GAAyB,IAAI,CAAC;AAE/C;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAsB,EAAE,aAAqB;IACxE,aAAa,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO;QACtC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM;KACrC,CAAC,CAAC;IAEH,WAAW,GAAG,IAAI,WAAW,CAAC;QAC5B,GAAG,MAAM,CAAC,UAAU;KACrB,CAAC,CAAC;IAEH,cAAc,GAAG,IAAI,cAAc,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO;QACjC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;KAC5B,CAAC,CAAC;IAEH,aAAa,GAAG,IAAI,aAAa,CAC/B,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,EACtC,aAAa,CACd,CAAC;IAEF,aAAa,GAAG,IAAI,aAAa,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;QACnC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;KACpC,CAAC,CAAC;AACL,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,MAAM,yBAAyB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1I,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,SAAiB;IAC9D,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,iBAAiB,MAAM,CAAC,SAAS,mBAAmB,MAAM,CAAC,iBAAiB,IAAI,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,uCAAuC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,IAAI,2BAA2B,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/self-awareness.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Self-awareness — generates a concise repo structure map.
+ *
+ * Scans the project directory tree and produces a `tree`-like output
+ * that the agent can reference to understand its own codebase.
+ * Skips noise directories (node_modules, .git, dist, etc.).
+ */
+/**
+ * Check if the given path is a git repository root.
+ */
+export declare function isGitRepo(dirPath: string): Promise<boolean>;
+/**
+ * Generate a concise repo structure map as a tree-formatted string.
+ *
+ * @param projectDir - The project root to scan
+ * @returns A formatted tree string, or empty string if not a git repo
+ */
+export declare function generateRepoMap(projectDir: string): Promise<string>;
+//# sourceMappingURL=self-awareness.d.ts.map

package/dist/core/self-awareness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-awareness.d.ts","sourceRoot":"","sources":["../../src/core/self-awareness.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAqCH;;GAEG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOjE;AAkED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBzE"}

package/dist/core/self-awareness.js

@@ -0,0 +1,124 @@
+/**
+ * Self-awareness — generates a concise repo structure map.
+ *
+ * Scans the project directory tree and produces a `tree`-like output
+ * that the agent can reference to understand its own codebase.
+ * Skips noise directories (node_modules, .git, dist, etc.).
+ */
+import { readdir, stat } from 'node:fs/promises';
+import { join, relative } from 'node:path';
+/** Directories to always skip when scanning. */
+const SKIP_DIRS = new Set([
+    'node_modules',
+    '.git',
+    'dist',
+    '.next',
+    '.turbo',
+    '.cache',
+    '.DS_Store',
+    'coverage',
+    '__pycache__',
+    '.venv',
+    'venv',
+]);
+/** Max depth to scan (prevents runaway recursion). */
+const MAX_DEPTH = 6;
+/** Max total entries to include in the map. */
+const MAX_ENTRIES = 200;
+/**
+ * Check if the given path is a git repository root.
+ */
+export async function isGitRepo(dirPath) {
+    try {
+        const s = await stat(join(dirPath, '.git'));
+        return s.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Scan a directory tree and return a flat list of entries.
+ */
+async function scanTree(rootDir, currentDir, depth, entries) {
+    if (depth > MAX_DEPTH || entries.length >= MAX_ENTRIES)
+        return;
+    let items;
+    try {
+        items = await readdir(currentDir);
+    }
+    catch {
+        return;
+    }
+    // Sort: directories first, then alphabetical
+    const dirEntries = [];
+    for (const name of items) {
+        if (SKIP_DIRS.has(name) || name.startsWith('.'))
+            continue;
+        try {
+            const fullPath = join(currentDir, name);
+            const s = await stat(fullPath);
+            dirEntries.push({ name, isDir: s.isDirectory(), size: s.size });
+        }
+        catch {
+            // Skip entries we can't stat
+        }
+    }
+    dirEntries.sort((a, b) => {
+        if (a.isDir !== b.isDir)
+            return a.isDir ? -1 : 1;
+        return a.name.localeCompare(b.name);
+    });
+    for (const entry of dirEntries) {
+        if (entries.length >= MAX_ENTRIES)
+            break;
+        const fullPath = join(currentDir, entry.name);
+        const relPath = relative(rootDir, fullPath);
+        entries.push({
+            path: relPath,
+            isDir: entry.isDir,
+            depth,
+            size: entry.size,
+        });
+        if (entry.isDir) {
+            await scanTree(rootDir, fullPath, depth + 1, entries);
+        }
+    }
+}
+/**
+ * Format file size for display.
+ */
+function formatSize(bytes) {
+    if (bytes < 1024)
+        return `${bytes}B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)}K`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)}M`;
+}
+/**
+ * Generate a concise repo structure map as a tree-formatted string.
+ *
+ * @param projectDir - The project root to scan
+ * @returns A formatted tree string, or empty string if not a git repo
+ */
+export async function generateRepoMap(projectDir) {
+    if (!(await isGitRepo(projectDir)))
+        return '';
+    const entries = [];
+    await scanTree(projectDir, projectDir, 0, entries);
+    if (entries.length === 0)
+        return '';
+    const lines = ['# Repo Structure', ''];
+    lines.push('```');
+    for (const entry of entries) {
+        const indent = '  '.repeat(entry.depth);
+        const suffix = entry.isDir ? '/' : ` (${formatSize(entry.size)})`;
+        lines.push(`${indent}${entry.path.split('/').pop()}${suffix}`);
+    }
+    if (entries.length >= MAX_ENTRIES) {
+        lines.push('  ... (truncated)');
+    }
+    lines.push('```');
+    return lines.join('\n');
+}
+//# sourceMappingURL=self-awareness.js.map

package/dist/core/self-awareness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-awareness.js","sourceRoot":"","sources":["../../src/core/self-awareness.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,gDAAgD;AAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,aAAa;IACb,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,+CAA+C;AAC/C,MAAM,WAAW,GAAG,GAAG,CAAC;AAaxB;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,QAAQ,CACrB,OAAe,EACf,UAAkB,EAClB,KAAa,EACb,OAAoB;IAEpB,IAAI,KAAK,GAAG,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;QAAE,OAAO;IAE/D,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,6CAA6C;IAC7C,MAAM,UAAU,GAA0D,EAAE,CAAC;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;YAAE,MAAM;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE5C,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAChE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9C,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAa,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAElB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/core/session-init.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Session init protocol — ensures agents start each session productively.
+ *
+ * After compaction or on a fresh session, injects a structured init sequence
+ * that tells the agent to:
+ * 1. Read progress file for recent work
+ * 2. Check git log for recent commits
+ * 3. Run basic health check
+ * 4. Pick ONE task to work on
+ *
+ * This prevents the agent from wasting tokens figuring out context.
+ */
+import type { ProgressTracker } from './progress.js';
+export interface SessionInitConfig {
+    /** Enable session init protocol (default: true) */
+    enabled: boolean;
+    /** Include git log summary (default: true) */
+    includeGitLog: boolean;
+    /** Number of recent progress entries to include (default: 3) */
+    progressEntries: number;
+    /** Custom init instructions (appended to default) */
+    customInstructions?: string;
+}
+/**
+ * Build the session init prompt to inject after compaction or on new session.
+ * This is injected as a system message so the agent follows the protocol.
+ */
+export declare function buildSessionInitPrompt(config?: Partial<SessionInitConfig>): string;
+/**
+ * Build the full init context including progress summary.
+ * Called when a session starts fresh or after compaction.
+ */
+export declare function buildSessionInitContext(progressTracker: ProgressTracker, config?: Partial<SessionInitConfig>): Promise<string>;
+//# sourceMappingURL=session-init.d.ts.map

package/dist/core/session-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-init.d.ts","sourceRoot":"","sources":["../../src/core/session-init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,aAAa,EAAE,OAAO,CAAC;IACvB,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAQD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAgClF;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,eAAe,EAAE,eAAe,EAChC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAClC,OAAO,CAAC,MAAM,CAAC,CAcjB"}

package/dist/core/session-init.js

@@ -0,0 +1,68 @@
+/**
+ * Session init protocol — ensures agents start each session productively.
+ *
+ * After compaction or on a fresh session, injects a structured init sequence
+ * that tells the agent to:
+ * 1. Read progress file for recent work
+ * 2. Check git log for recent commits
+ * 3. Run basic health check
+ * 4. Pick ONE task to work on
+ *
+ * This prevents the agent from wasting tokens figuring out context.
+ */
+const DEFAULT_CONFIG = {
+    enabled: true,
+    includeGitLog: true,
+    progressEntries: 3,
+};
+/**
+ * Build the session init prompt to inject after compaction or on new session.
+ * This is injected as a system message so the agent follows the protocol.
+ */
+export function buildSessionInitPrompt(config) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    const lines = [
+        '## Session Init Protocol',
+        '',
+        'You are resuming work on an ongoing project. Before doing anything else:',
+        '',
+        '1. **Read progress**: Check `tako-progress.json` for what previous sessions accomplished.',
+        '2. **Check git**: Run `git log --oneline -10` to see recent commits.',
+        '3. **Health check**: Verify the project is in a working state (build passes, no broken tests).',
+        '4. **Pick ONE task**: Choose the highest-priority incomplete task and work on it.',
+        '',
+        '### Work Rules',
+        '- Work on **one feature/task at a time**. Complete it, test it, commit it, then move on.',
+        '- **Commit frequently** with descriptive messages.',
+        '- Before declaring a task done, **verify it works** (run tests, check output).',
+        '- At the end of your work session, **update tako-progress.json** with what you did.',
+        '- Leave the codebase in a **clean, working state** — no half-implemented features.',
+        '',
+        '### Do NOT',
+        '- Try to implement everything at once.',
+        '- Declare the project "done" without verifying all tasks.',
+        '- Leave uncommitted changes.',
+        '- Skip testing.',
+    ];
+    if (cfg.customInstructions) {
+        lines.push('', '### Additional Instructions', cfg.customInstructions);
+    }
+    return lines.join('\n');
+}
+/**
+ * Build the full init context including progress summary.
+ * Called when a session starts fresh or after compaction.
+ */
+export async function buildSessionInitContext(progressTracker, config) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    const parts = [];
+    // Add init protocol
+    parts.push(buildSessionInitPrompt(cfg));
+    // Add progress summary if available
+    const summary = await progressTracker.getSummaryForContext(cfg.progressEntries);
+    if (summary) {
+        parts.push('', summary);
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=session-init.js.map

package/dist/core/session-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-init.js","sourceRoot":"","sources":["../../src/core/session-init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAeH,MAAM,cAAc,GAAsB;IACxC,OAAO,EAAE,IAAI;IACb,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAmC;IACxE,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,MAAM,KAAK,GAAa;QACtB,0BAA0B;QAC1B,EAAE;QACF,0EAA0E;QAC1E,EAAE;QACF,2FAA2F;QAC3F,sEAAsE;QACtE,gGAAgG;QAChG,mFAAmF;QACnF,EAAE;QACF,gBAAgB;QAChB,0FAA0F;QAC1F,oDAAoD;QACpD,gFAAgF;QAChF,qFAAqF;QACrF,oFAAoF;QACpF,EAAE;QACF,YAAY;QACZ,wCAAwC;QACxC,2DAA2D;QAC3D,8BAA8B;QAC9B,iBAAiB;KAClB,CAAC;IAEF,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,6BAA6B,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,eAAgC,EAChC,MAAmC;IAEnC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,oCAAoC;IACpC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAChF,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/core/streaming.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Response streaming — deliver model output in chunks as it's generated.
+ *
+ * Instead of waiting for the full response, stream text chunks to the
+ * channel in real-time. Handles:
+ * - Chunk buffering (don't send every token, batch ~50-100 chars)
+ * - Channel-specific chunk delivery (Discord edits, Telegram edits, CLI stdout)
+ * - Tool call handling (pause streaming during tool execution)
+ * - Markdown boundary detection (don't split mid-codeblock)
+ */
+import type { Channel } from '../channels/channel.js';
+/** Configuration for response streaming behavior. */
+export interface StreamConfig {
+    /** Enable streaming (default: true) */
+    enabled: boolean;
+    /** Min chars to buffer before sending a chunk (default: 50) */
+    minChunkSize: number;
+    /** Max ms to wait before flushing buffer (default: 500) */
+    flushIntervalMs: number;
+    /** Max message length before splitting into new message (default: 2000 for Discord) */
+    maxMessageLength: number;
+}
+/** Context for a streaming session — identifies where to deliver chunks. */
+export interface StreamContext {
+    /** Target chat/channel ID for sending messages. */
+    channelId: string;
+    /** Existing message ID to edit (for updating in-place). */
+    messageId?: string;
+    /** The channel adapter to send through. */
+    channel: Channel;
+}
+/**
+ * Buffers streaming text and delivers it to a channel in chunks.
+ *
+ * For channels that support `editMessage` (Discord, Telegram), the streamer
+ * sends an initial message then edits it as more text arrives. When the
+ * message exceeds `maxMessageLength`, it sends a new message and continues.
+ *
+ * For channels without edit support (CLI), text is written incrementally
+ * via `send()`.
+ */
+export declare class ResponseStreamer {
+    private config;
+    private context;
+    private buffer;
+    private sentMessageId?;
+    private totalSent;
+    private flushTimer?;
+    private finished;
+    constructor(config: Partial<StreamConfig>, context: StreamContext);
+    /** Add text to the stream buffer. May trigger a flush. */
+    push(text: string): Promise<void>;
+    /** Force flush remaining buffer (call at end of response). */
+    finish(): Promise<void>;
+    /** Cancel streaming (e.g., on error). */
+    cancel(): Promise<void>;
+    /** Get total characters streamed so far. */
+    get length(): number;
+    private clearTimer;
+    private shouldFlush;
+    /**
+     * Flush the buffer to the channel.
+     *
+     * Strategy depends on channel capabilities:
+     * - If channel has editMessage + sendAndGetId: edit-in-place, split on overflow
+     * - Otherwise: send incremental chunks via send()
+     */
+    private flush;
+    /** Flush using edit-in-place (Discord/Telegram style). */
+    private flushWithEdit;
+    /**
+     * Find a safe position to break the text at, avoiding splits inside:
+     * - Fenced code blocks (```)
+     * - Markdown formatting (**bold**, *italic*, __underline__, ~~strike~~)
+     * - Bullet points / list items
+     * - Mid-word
+     *
+     * Returns the index to break at (exclusive).
+     */
+    private findSafeBreakpoint;
+}
+//# sourceMappingURL=streaming.d.ts.map

package/dist/core/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../../src/core/streaming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAmB,MAAM,wBAAwB,CAAC;AAIvE,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,uFAAuF;IACvF,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAWD,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;CAClB;AAID;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,QAAQ,CAAS;gBAEb,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,aAAa;IAQjE,0DAA0D;IACpD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvC,8DAA8D;IACxD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAS7B,yCAAyC;IACnC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B,4CAA4C;IAC5C,IAAI,MAAM,IAAI,MAAM,CAEnB;IAID,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,WAAW;IAInB;;;;;;OAMG;YACW,KAAK;IAkCnB,0DAA0D;YAC5C,aAAa;IAkD3B;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;CAqF3B"}