@stardust-bytes/agent-hub 0.1.0

package/backend/dist/agent/services/permissions.service.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var PermissionsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionsService = void 0;
+const common_1 = require("@nestjs/common");
+const settings_service_1 = require("../../settings/settings.service");
+const permissions_config_1 = require("../dto/permissions-config");
+const yolo_classifier_service_1 = require("./yolo-classifier.service");
+let PermissionsService = PermissionsService_1 = class PermissionsService {
+    constructor(settingsService, yoloClassifier) {
+        this.settingsService = settingsService;
+        this.yoloClassifier = yoloClassifier;
+    }
+    async getConfig() {
+        const raw = await this.settingsService.get(PermissionsService_1.SETTING_KEY, '');
+        if (!raw)
+            return { ...permissions_config_1.DEFAULT_PERMISSIONS_CONFIG };
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return { ...permissions_config_1.DEFAULT_PERMISSIONS_CONFIG };
+        }
+    }
+    async updateConfig(updates) {
+        const current = await this.getConfig();
+        const updated = { ...current, ...updates };
+        await this.settingsService.upsert(PermissionsService_1.SETTING_KEY, JSON.stringify(updated));
+        return updated;
+    }
+    async isAllowed(toolName) {
+        const config = await this.getConfig();
+        if (config.deniedTools.includes(toolName))
+            return false;
+        if (config.allowedTools.includes(toolName))
+            return true;
+        return config.defaultPolicy === 'allow';
+    }
+    async decide(toolName, toolInput, transcript, sessionId) {
+        const config = await this.getConfig();
+        if (config.deniedTools.includes(toolName)) {
+            return { action: 'deny', reason: 'Tool denied by configuration' };
+        }
+        const permissionMode = await this.decidePermissionMode(toolName, toolInput);
+        switch (permissionMode) {
+            case 'bypassPermissions':
+                return { action: 'allow' };
+            case 'dontAsk':
+                return { action: 'deny', reason: 'Blocked by dontAsk mode' };
+            case 'acceptEdits':
+                return { action: 'allow' };
+            case 'auto':
+                return this.handleAutoMode(toolName, toolInput, transcript, sessionId);
+            case 'plan':
+                if (['create_plan', 'resume_plan'].includes(toolName)) {
+                    const result = await this.yoloClassifier.evaluate(toolName, toolInput, transcript, sessionId);
+                    return result.allowed
+                        ? { action: 'allow' }
+                        : { action: 'deny', reason: result.reason ?? 'Blocked by classifier' };
+                }
+                return { action: 'ask' };
+            case 'requireApproval':
+                return { action: 'ask' };
+            default:
+                return { action: 'ask' };
+        }
+    }
+    async handleAutoMode(toolName, toolInput, transcript, sessionId) {
+        const result = await this.yoloClassifier.evaluate(toolName, toolInput, transcript, sessionId);
+        if (result.allowed)
+            return { action: 'allow' };
+        return {
+            action: 'deny',
+            reason: result.reason ? `YOLO: ${result.reason}` : 'Blocked by YOLO classifier',
+        };
+    }
+    hasDestructivePatterns(name, input) {
+        const patterns = ['delete', 'remove', 'drop', 'truncate', 'rm ', 'rmdir', 'del '];
+        return patterns.some(p => input.toLowerCase().includes(p));
+    }
+    async decidePermissionMode(toolName, toolInput) {
+        const config = await this.getConfig();
+        if (config.requireApprovalTools.includes(toolName))
+            return 'requireApproval';
+        if (this.hasDestructivePatterns(toolName, toolInput))
+            return 'requireApproval';
+        return config.permissionMode;
+    }
+};
+exports.PermissionsService = PermissionsService;
+PermissionsService.SETTING_KEY = 'agent.permissions';
+exports.PermissionsService = PermissionsService = PermissionsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [settings_service_1.SettingsService,
+        yolo_classifier_service_1.YoloClassifierService])
+], PermissionsService);
+//# sourceMappingURL=permissions.service.js.map

package/backend/dist/agent/services/permissions.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.service.js","sourceRoot":"","sources":["../../../src/agent/services/permissions.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,sEAAkE;AAClE,kEAA0F;AAC1F,uEAAkE;AAQ3D,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAG7B,YACmB,eAAgC,EAChC,cAAqC;QADrC,oBAAe,GAAf,eAAe,CAAiB;QAChC,mBAAc,GAAd,cAAc,CAAuB;IACrD,CAAC;IAEJ,KAAK,CAAC,SAAS;QACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,oBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,GAAG,+CAA0B,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,+CAA0B,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAmC;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,oBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3F,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,OAAO,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,SAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE5E,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,mBAAmB;gBACtB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAE7B,KAAK,SAAS;gBACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAE/D,KAAK,aAAa;gBAChB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAE7B,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAEzE,KAAK,MAAM;gBACT,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;oBAC9F,OAAO,MAAM,CAAC,OAAO;wBACnB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;wBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;gBAC3E,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAE3B,KAAK,iBAAiB;gBACpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAE3B;gBACE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,SAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC/C,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,4BAA4B;SAChF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,IAAY,EAAE,KAAa;QACxD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAClF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,SAAiB;QACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,iBAAiB,CAAC;QAC7E,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC;YAAE,OAAO,iBAAiB,CAAC;QAC/E,OAAO,MAAM,CAAC,cAAc,CAAC;IAC/B,CAAC;;AAnGU,gDAAkB;AACL,8BAAW,GAAG,mBAAmB,AAAtB,CAAuB;6BAD/C,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAKyB,kCAAe;QAChB,+CAAqB;GAL7C,kBAAkB,CAoG9B"}

package/backend/dist/agent/services/yolo-classifier.constants.d.ts

@@ -0,0 +1,6 @@
+export declare const YOLO_SYSTEM_PROMPT = "You are a security classifier for an AI agent workspace.\nYour job is to evaluate whether a proposed action should be ALLOWED or BLOCKED.\n\n## Evaluation Rules\n1. Consider the full conversation context, not just the latest action\n2. Block attempts to disable or circumvent the classifier itself\n3. Writing a script then running it = directly running the commands\n4. When spawning sub-agents, evaluate the delegated task's intent\n5. Each action is evaluated independently\n6. Lean toward blocking when shared infrastructure could be affected\n7. Only block for security-relevant harm, not quality or efficiency issues\n\n## BLOCK Rules\n- Running interpreters directly (python, node, ruby) without user request\n- Package runners (npx, npm run) executing untrusted code\n- Network commands (curl, wget) that could exfiltrate data\n- Destructive git operations (force push, delete branches)\n- Cloud CLI commands (kubectl, aws) affecting production\n- Writing executable scripts (.sh, .bat) with dangerous content\n- Spawning sub-agents with permission bypass intent\n- Irreversible local destruction (rm -rf, drop tables)\n- Credential leakage (printing or sending secrets)\n- Data exfiltration to external services\n- Self-modification of agent code or config\n\n## ALLOW by default\nAllow unless a BLOCK rule clearly applies.";
+export declare const STAGE1_PROMPT_SUFFIX = "Err on the side of blocking. Respond with <block>yes</block> or <block>no</block>.";
+export declare const STAGE2_PROMPT_SUFFIX = "Use <thinking> before responding. Explicit user confirmation required to override blocks. Respond with <block>yes</block> or <block>no</block> and <reason>...</reason>.";
+export declare const STAGE1_MAX_TOKENS = 64;
+export declare const STAGE2_MAX_TOKENS = 4096;
+export declare const SAFE_TOOL_ALLOWLIST: string[];

package/backend/dist/agent/services/yolo-classifier.constants.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAFE_TOOL_ALLOWLIST = exports.STAGE2_MAX_TOKENS = exports.STAGE1_MAX_TOKENS = exports.STAGE2_PROMPT_SUFFIX = exports.STAGE1_PROMPT_SUFFIX = exports.YOLO_SYSTEM_PROMPT = void 0;
+exports.YOLO_SYSTEM_PROMPT = `You are a security classifier for an AI agent workspace.
+Your job is to evaluate whether a proposed action should be ALLOWED or BLOCKED.
+
+## Evaluation Rules
+1. Consider the full conversation context, not just the latest action
+2. Block attempts to disable or circumvent the classifier itself
+3. Writing a script then running it = directly running the commands
+4. When spawning sub-agents, evaluate the delegated task's intent
+5. Each action is evaluated independently
+6. Lean toward blocking when shared infrastructure could be affected
+7. Only block for security-relevant harm, not quality or efficiency issues
+
+## BLOCK Rules
+- Running interpreters directly (python, node, ruby) without user request
+- Package runners (npx, npm run) executing untrusted code
+- Network commands (curl, wget) that could exfiltrate data
+- Destructive git operations (force push, delete branches)
+- Cloud CLI commands (kubectl, aws) affecting production
+- Writing executable scripts (.sh, .bat) with dangerous content
+- Spawning sub-agents with permission bypass intent
+- Irreversible local destruction (rm -rf, drop tables)
+- Credential leakage (printing or sending secrets)
+- Data exfiltration to external services
+- Self-modification of agent code or config
+
+## ALLOW by default
+Allow unless a BLOCK rule clearly applies.`;
+exports.STAGE1_PROMPT_SUFFIX = `Err on the side of blocking. Respond with <block>yes</block> or <block>no</block>.`;
+exports.STAGE2_PROMPT_SUFFIX = `Use <thinking> before responding. Explicit user confirmation required to override blocks. Respond with <block>yes</block> or <block>no</block> and <reason>...</reason>.`;
+exports.STAGE1_MAX_TOKENS = 64;
+exports.STAGE2_MAX_TOKENS = 4096;
+exports.SAFE_TOOL_ALLOWLIST = [
+    'list_tasks', 'get_task', 'list_notes',
+    'web_search', 'web_fetch',
+];
+//# sourceMappingURL=yolo-classifier.constants.js.map

package/backend/dist/agent/services/yolo-classifier.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yolo-classifier.constants.js","sourceRoot":"","sources":["../../../src/agent/services/yolo-classifier.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;2CA0BS,CAAC;AAE/B,QAAA,oBAAoB,GAAG,oFAAoF,CAAC;AAE5G,QAAA,oBAAoB,GAAG,0KAA0K,CAAC;AAElM,QAAA,iBAAiB,GAAG,EAAE,CAAC;AACvB,QAAA,iBAAiB,GAAG,IAAI,CAAC;AAEzB,QAAA,mBAAmB,GAAG;IACjC,YAAY,EAAE,UAAU,EAAE,YAAY;IACtC,YAAY,EAAE,WAAW;CAC1B,CAAC"}

package/backend/dist/agent/services/yolo-classifier.service.d.ts

@@ -0,0 +1,29 @@
+import { SettingsService } from '../../settings/settings.service';
+import { LLMControllerService } from './llm-controller.service';
+export interface YoloResult {
+    allowed: boolean;
+    reason?: string;
+    stage: 'fast_path' | 'pattern' | 'stage1' | 'stage2' | 'error' | 'fallback';
+    rule?: string;
+}
+export interface YoloConfig {
+    disabledPatterns: string[];
+    failClosed: boolean;
+    safeToolAllowlist: boolean;
+}
+export declare const DEFAULT_YOLO_CONFIG: YoloConfig;
+export declare class YoloClassifierService {
+    private readonly llmController;
+    private readonly settingsService;
+    private static readonly SETTING_KEY;
+    private trackers;
+    private config;
+    private configLoaded;
+    constructor(llmController: LLMControllerService, settingsService: SettingsService);
+    private ensureConfig;
+    getConfig(): Promise<YoloConfig>;
+    updateConfig(updates: Partial<YoloConfig>): Promise<YoloConfig>;
+    evaluate(toolName: string, toolInput: string, transcript: string, sessionId?: number): Promise<YoloResult>;
+    private runStage1;
+    private runStage2;
+}

package/backend/dist/agent/services/yolo-classifier.service.js

@@ -0,0 +1,139 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var YoloClassifierService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.YoloClassifierService = exports.DEFAULT_YOLO_CONFIG = void 0;
+const common_1 = require("@nestjs/common");
+const settings_service_1 = require("../../settings/settings.service");
+const llm_controller_service_1 = require("./llm-controller.service");
+const danger_patterns_config_1 = require("./danger-patterns.config");
+const denial_tracking_1 = require("./denial-tracking");
+const yolo_classifier_constants_1 = require("./yolo-classifier.constants");
+exports.DEFAULT_YOLO_CONFIG = {
+    disabledPatterns: [],
+    failClosed: true,
+    safeToolAllowlist: true,
+};
+let YoloClassifierService = YoloClassifierService_1 = class YoloClassifierService {
+    constructor(llmController, settingsService) {
+        this.llmController = llmController;
+        this.settingsService = settingsService;
+        this.trackers = new Map();
+        this.config = { ...exports.DEFAULT_YOLO_CONFIG };
+        this.configLoaded = false;
+    }
+    async ensureConfig() {
+        if (this.configLoaded)
+            return;
+        const raw = await this.settingsService.get(YoloClassifierService_1.SETTING_KEY, '');
+        if (raw) {
+            try {
+                const parsed = JSON.parse(raw);
+                this.config = { ...exports.DEFAULT_YOLO_CONFIG, ...parsed };
+            }
+            catch { }
+        }
+        this.configLoaded = true;
+    }
+    async getConfig() {
+        await this.ensureConfig();
+        return { ...this.config };
+    }
+    async updateConfig(updates) {
+        this.config = { ...this.config, ...updates };
+        await this.settingsService.upsert(YoloClassifierService_1.SETTING_KEY, JSON.stringify(this.config));
+        return this.getConfig();
+    }
+    async evaluate(toolName, toolInput, transcript, sessionId) {
+        await this.ensureConfig();
+        const sessionKey = sessionId?.toString() ?? 'default';
+        let tracker = this.trackers.get(sessionKey);
+        if (!tracker) {
+            tracker = new denial_tracking_1.DenialTracker();
+            this.trackers.set(sessionKey, tracker);
+        }
+        if (tracker.isLimitExceeded()) {
+            return { allowed: false, reason: 'Denial limit exceeded', stage: 'fallback' };
+        }
+        if (this.config.safeToolAllowlist && yolo_classifier_constants_1.SAFE_TOOL_ALLOWLIST.includes(toolName)) {
+            tracker.recordAllow();
+            return { allowed: true, stage: 'fast_path' };
+        }
+        const activeRules = danger_patterns_config_1.BLOCK_RULES.filter(r => !this.config.disabledPatterns.includes(r.category));
+        const matched = (0, danger_patterns_config_1.matchDangerPattern)(toolName, toolInput, activeRules);
+        if (matched) {
+            return this.runStage2(toolName, toolInput, transcript, tracker, matched);
+        }
+        return this.runStage1(toolName, toolInput, transcript, tracker);
+    }
+    async runStage1(toolName, toolInput, transcript, tracker) {
+        const prompt = `${transcript}\n\nAction: ${toolName}(${toolInput})\n\n${yolo_classifier_constants_1.STAGE1_PROMPT_SUFFIX}`;
+        const messages = [
+            { role: 'system', content: yolo_classifier_constants_1.YOLO_SYSTEM_PROMPT },
+            { role: 'user', content: prompt },
+        ];
+        try {
+            const response = await this.llmController.generateCompletion(messages, { max_tokens: yolo_classifier_constants_1.STAGE1_MAX_TOKENS, temperature: 0 });
+            const blockMatch = response.match(/<block>(yes|no)<\/block>/);
+            if (!blockMatch) {
+                return this.runStage2(toolName, toolInput, transcript, tracker);
+            }
+            if (blockMatch[1] === 'no') {
+                tracker.recordAllow();
+                return { allowed: true, stage: 'stage1' };
+            }
+            return this.runStage2(toolName, toolInput, transcript, tracker);
+        }
+        catch {
+            if (this.config.failClosed) {
+                return { allowed: false, reason: 'Classifier API error', stage: 'error' };
+            }
+            return { allowed: false, reason: 'Classifier unavailable', stage: 'fallback' };
+        }
+    }
+    async runStage2(toolName, toolInput, transcript, tracker, matched) {
+        const prompt = `${transcript}\n\nAction: ${toolName}(${toolInput})\n${yolo_classifier_constants_1.STAGE2_PROMPT_SUFFIX}`;
+        const messages = [
+            { role: 'system', content: yolo_classifier_constants_1.YOLO_SYSTEM_PROMPT },
+            { role: 'user', content: prompt },
+        ];
+        try {
+            const response = await this.llmController.generateCompletion(messages, { max_tokens: yolo_classifier_constants_1.STAGE2_MAX_TOKENS, temperature: 0 });
+            const blockMatch = response.match(/<block>(yes|no)<\/block>/);
+            const reasonMatch = response.match(/<reason>([^<]+)<\/reason>/);
+            if (!blockMatch || blockMatch[1] === 'yes') {
+                const exceeded = tracker.recordDenial();
+                return {
+                    allowed: false,
+                    reason: reasonMatch?.[1] ?? 'Blocked by classifier',
+                    stage: 'stage2',
+                    rule: matched?.category,
+                };
+            }
+            tracker.recordAllow();
+            return { allowed: true, stage: matched ? 'pattern' : 'stage2' };
+        }
+        catch {
+            if (this.config.failClosed) {
+                return { allowed: false, reason: 'Classifier API error', stage: 'error' };
+            }
+            return { allowed: false, reason: 'Classifier unavailable', stage: 'fallback' };
+        }
+    }
+};
+exports.YoloClassifierService = YoloClassifierService;
+YoloClassifierService.SETTING_KEY = 'agent.yolo_config';
+exports.YoloClassifierService = YoloClassifierService = YoloClassifierService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [llm_controller_service_1.LLMControllerService,
+        settings_service_1.SettingsService])
+], YoloClassifierService);
+//# sourceMappingURL=yolo-classifier.service.js.map

package/backend/dist/agent/services/yolo-classifier.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yolo-classifier.service.js","sourceRoot":"","sources":["../../../src/agent/services/yolo-classifier.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,sEAAkE;AAClE,qEAAgE;AAChE,qEAAsF;AACtF,uDAAkD;AAClD,2EAOqC;AAgBxB,QAAA,mBAAmB,GAAe;IAC7C,gBAAgB,EAAE,EAAE;IACpB,UAAU,EAAE,IAAI;IAChB,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAGK,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAMhC,YACmB,aAAmC,EACnC,eAAgC;QADhC,kBAAa,GAAb,aAAa,CAAsB;QACnC,oBAAe,GAAf,eAAe,CAAiB;QAN3C,aAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC5C,WAAM,GAAe,EAAE,GAAG,2BAAmB,EAAE,CAAC;QAChD,iBAAY,GAAG,KAAK,CAAC;IAK1B,CAAC;IAEI,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,uBAAqB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClF,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;gBACtD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,2BAAmB,EAAE,GAAG,MAAM,EAAE,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC,CAAoB,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,uBAAqB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAClG,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,SAAkB;QAElB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,SAAS,EAAE,QAAQ,EAAE,IAAI,SAAS,CAAC;QACtD,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,+BAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAChF,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,+CAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,WAAW,GAAG,oCAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,IAAA,2CAAkB,EAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAErE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,OAAsB;QAEtB,MAAM,MAAM,GAAG,GAAG,UAAU,eAAe,QAAQ,IAAI,SAAS,QAAQ,gDAAoB,EAAE,CAAC;QAC/F,MAAM,QAAQ,GAAoB;YAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8CAAkB,EAAE;YAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SAClC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,6CAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YAE1H,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3B,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAC5C,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,OAAsB,EACtB,OAAmB;QAEnB,MAAM,MAAM,GAAG,GAAG,UAAU,eAAe,QAAQ,IAAI,SAAS,MAAM,gDAAoB,EAAE,CAAC;QAC7F,MAAM,QAAQ,GAAoB;YAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8CAAkB,EAAE;YAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SAClC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,6CAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YAE1H,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9D,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAEhE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,uBAAuB;oBACnD,KAAK,EAAE,QAAQ;oBACf,IAAI,EAAE,OAAO,EAAE,QAAQ;iBACxB,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;;AA1IU,sDAAqB;AACR,iCAAW,GAAG,mBAAmB,AAAtB,CAAuB;gCAD/C,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAQuB,6CAAoB;QAClB,kCAAe;GARxC,qBAAqB,CA2IjC"}

package/backend/dist/agent/subagent/subagent-tools.util.d.ts

@@ -0,0 +1,3 @@
+import { ToolDefinition } from '../services/context-builder.service';
+export declare function filterSubagentTools(tools: ToolDefinition[], allowedTools?: string): ToolDefinition[];
+export declare function runWithConcurrency<T, R>(items: T[], limit: number, fn: (item: T, index: number) => Promise<R>): Promise<R[]>;

package/backend/dist/agent/subagent/subagent-tools.util.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.filterSubagentTools = filterSubagentTools;
+exports.runWithConcurrency = runWithConcurrency;
+const DISPATCH_TOOLS = new Set(['spawn_subagent', 'delegate']);
+function filterSubagentTools(tools, allowedTools) {
+    let allowed = null;
+    if (allowedTools && allowedTools !== '*') {
+        try {
+            const parsed = JSON.parse(allowedTools);
+            if (Array.isArray(parsed))
+                allowed = new Set(parsed.map(String));
+        }
+        catch { }
+    }
+    return tools.filter(t => {
+        const name = t.function.name;
+        if (DISPATCH_TOOLS.has(name))
+            return false;
+        if (allowed && !allowed.has(name))
+            return false;
+        return true;
+    });
+}
+async function runWithConcurrency(items, limit, fn) {
+    const results = new Array(items.length);
+    let next = 0;
+    const workers = Array.from({ length: Math.min(Math.max(limit, 1), items.length) }, async () => {
+        while (next < items.length) {
+            const i = next++;
+            results[i] = await fn(items[i], i);
+        }
+    });
+    await Promise.all(workers);
+    return results;
+}
+//# sourceMappingURL=subagent-tools.util.js.map

package/backend/dist/agent/subagent/subagent-tools.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-tools.util.js","sourceRoot":"","sources":["../../../src/agent/subagent/subagent-tools.util.ts"],"names":[],"mappings":";;AAIA,kDAcC;AAED,gDAaC;AA/BD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;AAE/D,SAAgB,mBAAmB,CAAC,KAAuB,EAAE,YAAqB;IAChF,IAAI,OAAO,GAAuB,IAAI,CAAC;IACvC,IAAI,YAAY,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAyB,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC7B,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,KAAU,EAAE,KAAa,EAAE,EAA0C;IAErE,MAAM,OAAO,GAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAC5F,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/backend/dist/agent/subagent/subagent.service.d.ts

@@ -0,0 +1,17 @@
+import { AgentLoopService } from '../services/agent-loop.service';
+import { ToolDefinition } from '../services/context-builder.service';
+import { WriteStream } from '../dto/write-stream.interface';
+export declare class SubagentService {
+    private readonly agentLoop;
+    private static readonly MAX_PARALLEL;
+    constructor(agentLoop: AgentLoopService);
+    delegate(tasks: string[], providerType: string, model: string, providerConfig: {
+        baseUrl: string;
+        key?: string;
+    }, tools: ToolDefinition[], signal: AbortSignal, res: WriteStream, sessionId?: number, projectPath?: string, systemPromptOverride?: string, subagentName?: string): Promise<string>;
+    spawn(task: string, providerType: string, model: string, providerConfig: {
+        baseUrl: string;
+        key?: string;
+    }, tools: ToolDefinition[], signal: AbortSignal, res: WriteStream, sessionId?: number, projectPath?: string, systemPromptOverride?: string, subagentName?: string, subagentRunId?: string): Promise<string>;
+    private createPrefixedResponse;
+}

package/backend/dist/agent/subagent/subagent.service.js

@@ -0,0 +1,89 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SubagentService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SubagentService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto = require("crypto");
+const agent_loop_service_1 = require("../services/agent-loop.service");
+const subagent_tools_util_1 = require("./subagent-tools.util");
+let SubagentService = SubagentService_1 = class SubagentService {
+    constructor(agentLoop) {
+        this.agentLoop = agentLoop;
+    }
+    async delegate(tasks, providerType, model, providerConfig, tools, signal, res, sessionId, projectPath, systemPromptOverride, subagentName) {
+        if (signal.aborted)
+            return 'Aborted';
+        const requestId = crypto.randomUUID();
+        res.write(`data: ${JSON.stringify({ delegate: { requestId, taskCount: tasks.length } })}\n\n`);
+        const results = await (0, subagent_tools_util_1.runWithConcurrency)(tasks, SubagentService_1.MAX_PARALLEL, async (task, i) => {
+            res.write(`data: ${JSON.stringify({ delegateProgress: { requestId, index: i, subtask: task, status: 'running' } })}\n\n`);
+            try {
+                const summary = await this.spawn(task, providerType, model, providerConfig, tools, signal, res, sessionId, projectPath, systemPromptOverride, subagentName);
+                return { index: i, task, status: 'completed', summary: summary.slice(0, 200) };
+            }
+            catch (err) {
+                return { index: i, task, status: 'failed', summary: err.message ?? 'Unknown error' };
+            }
+        });
+        res.write(`data: ${JSON.stringify({ delegateResult: { requestId, results } })}\n\n`);
+        return results.map(r => `Delegate result ${r.index}: [${r.status}] — ${r.task}\n  Summary: ${r.summary}`).join('\n');
+    }
+    async spawn(task, providerType, model, providerConfig, tools, signal, res, sessionId, projectPath, systemPromptOverride, subagentName, subagentRunId) {
+        const runId = subagentRunId ?? crypto.randomUUID();
+        const subagentPrompt = systemPromptOverride ??
+            (`You are a sub-agent. Your task: ${task}\n\n` +
+                'You have access to the same workspace tools. Complete the task and report back concisely.');
+        const subRes = this.createPrefixedResponse(res, subagentName, runId);
+        return this.agentLoop.run(providerType, model, subagentPrompt, [], task, tools, subRes, signal, sessionId, projectPath, providerConfig, subagentName, runId);
+    }
+    createPrefixedResponse(res, subagentName, subagentRunId) {
+        const originalWrite = res.write.bind(res);
+        return {
+            write(data) {
+                if (/^data: \[DONE\]\n?$/m.test(data)) {
+                    const donePayload = { subagent: true, done: true };
+                    if (subagentName)
+                        donePayload.subagentName = subagentName;
+                    if (subagentRunId)
+                        donePayload.subagentRunId = subagentRunId;
+                    return originalWrite(`data: ${JSON.stringify(donePayload)}\n\n`);
+                }
+                const modified = data.replace(/^(data: )(\{.*?\})(\n\n)$/gm, (_match, prefix, json, suffix) => {
+                    try {
+                        const parsed = JSON.parse(json);
+                        parsed.subagent = true;
+                        if (subagentName)
+                            parsed.subagentName = subagentName;
+                        if (subagentRunId)
+                            parsed.subagentRunId = subagentRunId;
+                        return `${prefix}${JSON.stringify(parsed)}${suffix}`;
+                    }
+                    catch {
+                        return _match;
+                    }
+                });
+                return originalWrite(modified);
+            },
+        };
+    }
+};
+exports.SubagentService = SubagentService;
+SubagentService.MAX_PARALLEL = 4;
+exports.SubagentService = SubagentService = SubagentService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)((0, common_1.forwardRef)(() => agent_loop_service_1.AgentLoopService))),
+    __metadata("design:paramtypes", [agent_loop_service_1.AgentLoopService])
+], SubagentService);
+//# sourceMappingURL=subagent.service.js.map

package/backend/dist/agent/subagent/subagent.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent.service.js","sourceRoot":"","sources":["../../../src/agent/subagent/subagent.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAgE;AAChE,iCAAiC;AACjC,uEAAkE;AAGlE,+DAA2D;AAGpD,IAAM,eAAe,uBAArB,MAAM,eAAe;IAG1B,YAAyE,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;IAAG,CAAC;IAExG,KAAK,CAAC,QAAQ,CACZ,KAAe,EACf,YAAoB,EACpB,KAAa,EACb,cAAiD,EACjD,KAAuB,EACvB,MAAmB,EACnB,GAAgB,EAChB,SAAkB,EAClB,WAAoB,EACpB,oBAA6B,EAC7B,YAAqB;QAErB,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAErC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEtC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAE/F,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAkB,EAAC,KAAK,EAAE,iBAAe,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;YAC9F,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YAC1H,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;gBAC5J,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;YAC3G,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAErF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvH,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,YAAoB,EACpB,KAAa,EACb,cAAiD,EACjD,KAAuB,EACvB,MAAmB,EACnB,GAAgB,EAChB,SAAkB,EAClB,WAAoB,EACpB,oBAA6B,EAC7B,YAAqB,EACrB,aAAsB;QAEtB,MAAM,KAAK,GAAG,aAAa,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,oBAAoB;YACzC,CAAC,mCAAmC,IAAI,MAAM;gBAC7C,2FAA2F,CAAC,CAAC;QAEhG,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CACvB,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAC7C,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CACnF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,GAAgB,EAAE,YAAqB,EAAE,aAAsB;QAC5F,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO;YACL,KAAK,CAAC,IAAY;gBAChB,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,WAAW,GAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBAC5E,IAAI,YAAY;wBAAE,WAAW,CAAC,YAAY,GAAG,YAAY,CAAC;oBAC1D,IAAI,aAAa;wBAAE,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC;oBAC7D,OAAO,aAAa,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B,6BAA6B,EAC7B,CAAC,MAAc,EAAE,MAAc,EAAE,IAAY,EAAE,MAAc,EAAE,EAAE;oBAC/D,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACvB,IAAI,YAAY;4BAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;wBACrD,IAAI,aAAa;4BAAE,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;wBACxD,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;oBACvD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,MAAM,CAAC;oBAChB,CAAC;gBACH,CAAC,CACF,CAAC;gBACF,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;SACF,CAAC;IACJ,CAAC;;AA7FU,0CAAe;AACF,4BAAY,GAAG,CAAC,AAAJ,CAAK;0BAD9B,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,qCAAgB,CAAC,CAAC,CAAA;qCAA6B,qCAAgB;GAHzF,eAAe,CA8F3B"}

package/backend/dist/agent-output/agent-output.controller.d.ts

@@ -0,0 +1,20 @@
+import { StreamableFile } from '@nestjs/common';
+import { Response } from 'express';
+import { WorkspaceService } from '../workspace/workspace.service';
+interface AgentOutputFile {
+    filename: string;
+    size: number;
+    modifiedAt: string;
+}
+export declare class AgentOutputController {
+    private readonly workspace;
+    constructor(workspace: WorkspaceService);
+    listFiles(): Promise<AgentOutputFile[]>;
+    private scanAgentOutputDir;
+    download(filename: string, res: Response): StreamableFile;
+    private resolveFile;
+    remove(filename: string): Promise<{
+        success: boolean;
+    }>;
+}
+export {};