@technomoron/agent-run 0.99.24 → 0.99.25

package/dist/defaults.js

@@ -0,0 +1,408 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultManifest = defaultManifest;
+exports.stringifyRootDefaults = stringifyRootDefaults;
+exports.defaultLocalTemplate = defaultLocalTemplate;
+exports.defaultGlobalTemplates = defaultGlobalTemplates;
+exports.defaultToolInstructionsTemplate = defaultToolInstructionsTemplate;
+exports.defaultCodexConfigContent = defaultCodexConfigContent;
+exports.defaultClaudeSettingsContent = defaultClaudeSettingsContent;
+exports.legacyDefaultClaudeSettingsContent = legacyDefaultClaudeSettingsContent;
+function defaultManifest(profile) {
+    return {
+        profile,
+        kind: 'code',
+        agent: {
+            base: 'global/agents/code.md.njk',
+            includes: ['{{ profile }}/local.md.njk']
+        },
+        skills: {
+            install: ['commit-workflow', 'github-release', 'release-package-check', 'code-review-organizer']
+        },
+        tools: {
+            codex: true,
+            claude: true
+        },
+        checks: ['agent-run check .', 'pnpm run cleanbuild'],
+        guardrails: {
+            blockGitWrite: true,
+            blockPublish: true,
+            blockGithubRelease: true,
+            forbidRepoAiFiles: true
+        },
+        paths: {
+            changesFile: '{{ projectRoot }}/CHANGES',
+            reviewDir: '{{ profileDir }}/reviews',
+            reviewFile: '{{ profileDir }}/reviews/REVIEW-{{ date }}.md',
+            memoriesDir: '{{ agentDir }}/memories'
+        }
+    };
+}
+function defaultRootManifest() {
+    const { profile: _profile, ...manifest } = defaultManifest('default/profile');
+    return manifest;
+}
+function stringifyRootDefaults() {
+    return `${JSON.stringify(defaultRootManifest(), null, 2)}\n`;
+}
+function defaultLocalTemplate() {
+    return [
+        '# {{ profile }} local agent instructions',
+        '',
+        'Project root:',
+        '',
+        '```text',
+        '{{ projectRoot }}',
+        '```',
+        '',
+        'Agent directory:',
+        '',
+        '```text',
+        '{{ agentDir }}',
+        '```',
+        '',
+        'Profile source directory:',
+        '',
+        '```text',
+        '{{ profileDir }}',
+        '```',
+        '',
+        'Add project-specific rules here.',
+        ''
+    ].join('\n');
+}
+function defaultGlobalTemplates() {
+    return new Map([
+        ['global/agents/code.md.njk', defaultCodeAgentTemplate()],
+        ['global/agents/writing.md.njk', defaultWritingAgentTemplate()],
+        ['global/snippets/git-rules.md.njk', defaultGitRulesSnippet()],
+        ['global/snippets/no-ai-files.md.njk', defaultNoAiFilesSnippet()],
+        ['global/snippets/verification.md.njk', defaultVerificationSnippet()],
+        ['global/tool-templates/codex-config.toml.njk', defaultCodexConfigTemplate()],
+        ['global/tool-templates/claude-settings.json.njk', defaultClaudeSettingsTemplate()],
+        ['global/skills/commit-workflow/SKILL.md.njk', defaultCommitWorkflowSkill()],
+        ['global/skills/github-release/SKILL.md.njk', defaultGithubReleaseSkill()],
+        ['global/skills/release-package-check/SKILL.md.njk', defaultReleasePackageCheckSkill()],
+        ['global/skills/code-review-organizer/SKILL.md.njk', defaultCodeReviewOrganizerSkill()]
+    ]);
+}
+function defaultCodeAgentTemplate() {
+    return [
+        '# Code Agent',
+        '',
+        'Work in the project root shown by agent-run. Keep changes scoped to the user request.',
+        '',
+        '{% include "global/snippets/git-rules.md.njk" %}',
+        '',
+        '{% include "global/snippets/no-ai-files.md.njk" %}',
+        '',
+        '{% include "global/snippets/verification.md.njk" %}',
+        ''
+    ].join('\n');
+}
+function defaultWritingAgentTemplate() {
+    return [
+        '# Writing Agent',
+        '',
+        'Write clearly and preserve the existing voice, structure, and facts in the project.',
+        '',
+        '{% include "global/snippets/no-ai-files.md.njk" %}',
+        ''
+    ].join('\n');
+}
+function defaultGitRulesSnippet() {
+    return [
+        '## Git Rules',
+        '',
+        'Do not commit unless the user explicitly asks. Before committing, show changed files and the exact commit message.',
+        'Use human commit messages unless the user asks for conventional commits. Do not push unless explicitly asked.',
+        ''
+    ].join('\n');
+}
+function defaultNoAiFilesSnippet() {
+    return [
+        '## Agent File Storage',
+        '',
+        'Do not create AGENTS.md, CLAUDE.md, .agents, .claude, .codex, or other agent runtime files inside the project repository.',
+        'Generated agent-only files belong under {{ paths.liveDir }}.',
+        'Source config files belong under {{ profileDir }}.',
+        ''
+    ].join('\n');
+}
+function defaultVerificationSnippet() {
+    return [
+        '## Verification',
+        '',
+        'Run relevant checks before reporting completion. Configured checks:',
+        '',
+        '{% for check in checks %}',
+        '- `{{ check }}`',
+        '{% endfor %}',
+        ''
+    ].join('\n');
+}
+function defaultCommitWorkflowSkill() {
+    return [
+        '---',
+        'name: commit-workflow',
+        'description: Use for preparing or creating commits with explicit user approval.',
+        '---',
+        '',
+        '# Commit Workflow',
+        '',
+        'Never commit unless explicitly asked. Before committing, show changed files and the exact commit message.',
+        'Use human commit messages unless conventional commits are explicitly requested. Do not push.',
+        'Run configured checks before committing:',
+        '',
+        '{% for check in checks %}',
+        '- `{{ check }}`',
+        '{% endfor %}',
+        ''
+    ].join('\n');
+}
+function defaultGithubReleaseSkill() {
+    return [
+        '---',
+        'name: github-release',
+        'description: Use for releases, version bumps, tags, publishing, GitHub Releases, and CHANGES updates.',
+        '---',
+        '',
+        '# GitHub Release',
+        '',
+        'Use {{ paths.changesFile }} for change notes.',
+        'Require confirmation before writing CHANGES, bumping versions, committing, tagging, pushing, publishing, or creating a GitHub Release.',
+        'Follow `$commit-workflow` for release commits.',
+        ''
+    ].join('\n');
+}
+function defaultReleasePackageCheckSkill() {
+    return [
+        '---',
+        'name: release-package-check',
+        'description: Use before package releases and publish-ready changes to verify package metadata, release notes, lockfiles, workflows, git state, and agent-file hygiene.',
+        '---',
+        '',
+        '# Release Package Check',
+        '',
+        'Use this skill instead of an external `repo-check` command.',
+        'For package release or publish-ready work, verify the relevant package directory before finalizing:',
+        '',
+        '- The directory contains `package.json` and is inside a git repository.',
+        '- The repository path follows `<org>/<repo>`, and `package.json.name` is `@<org>/<package-dir-name>`.',
+        '- `package.json.version`, `package.json.license`, and `package.json.copyright` are present and non-empty.',
+        '- A package-local `LICENSE` file exists and contains the exact copyright string from `package.json.copyright`.',
+        '- A package-local `CHANGES` file exists.',
+        '- The first `Version ...` line in `CHANGES` matches `Version <package.json.version> (<YYYY-MM-DD>)`.',
+        '- The year in the top `CHANGES` version line appears in `package.json.copyright`.',
+        '- The git `origin` remote matches `<org>/<repo>`.',
+        '- The current branch has an upstream configured and is in sync with it after fetching.',
+        '- The repository does not contain agent files or directories such as `AGENTS.md`, `CLAUDE.md`, `codex.md`, `.claude`, or `.codex`.',
+        '- The repository root has a lockfile: `pnpm-lock.yaml`, `package-lock.json`, `yarn.lock`, `bun.lockb`, or `bun.lock`.',
+        '- Every GitHub Actions `uses:` reference is pinned to a full commit SHA.',
+        '- The pinned `actions/setup-node` release is v6-compatible and workflows use `node-version: 24`.',
+        '- GitHub workflows do not reference `node20` or `node22`.',
+        '- The git working tree is clean for files under the checked package directory.',
+        '- If files beyond `CHANGES` changed in the checked package directory, that package `CHANGES` file is also changed.',
+        '',
+        'Run the configured checks after this checklist:',
+        '',
+        '{% for check in checks %}',
+        '- `{{ check }}`',
+        '{% endfor %}',
+        ''
+    ].join('\n');
+}
+function defaultCodeReviewOrganizerSkill() {
+    return [
+        '---',
+        'name: code-review-organizer',
+        'description: Use for organizing code review findings, review files, and review follow-up state.',
+        '---',
+        '',
+        '# Code Review Organizer',
+        '',
+        'On review startup, move any files from {{ paths.liveDir }}/reviews into {{ paths.reviewDir }} so review history persists outside the ephemeral live directory.',
+        'Before doing any code review, read the generated AGENTS.md file and the current consolidated review file: {{ paths.reviewConsolidatedFile }}.',
+        'Save each active review to {{ paths.reviewDir }}/yyyy-mm-dd-[sequence].md, where the sequence increments for multiple reviews on the same date.',
+        'Whenever a saved review is created or changed, update {{ paths.reviewConsolidatedFile }} with the consolidated current review findings.',
+        'In {{ paths.reviewConsolidatedFile }}, include each active finding with its review date and source review filename.',
+        'When a finding is fixed, remove it from {{ paths.reviewConsolidatedFile }} and move it to {{ paths.reviewDir }}/DONE.md with the time it was fixed.',
+        'When a finding is intentionally not fixed, remove it from {{ paths.reviewConsolidatedFile }} and move it to {{ paths.reviewDir }}/DONE.md with the time it was marked intentional and a note that it was intentionally left as-is.',
+        'When a dated review file has no remaining active findings, delete it.',
+        'Also include active findings in the final user-facing reply.',
+        'Do not save review files inside the project repo.',
+        'Before the final reply for review work, verify that no REVIEW*.md files exist in {{ projectRoot }}, active dated review files exist only when they still contain active findings, and the consolidated REVIEW.md file was updated.',
+        ''
+    ].join('\n');
+}
+function defaultToolInstructionsTemplate(isClaude) {
+    return [
+        `# Generated ${isClaude ? 'Claude' : 'agent'} instructions for {{ profile }}`,
+        '',
+        'Do not edit this file directly. Profile source and optional overrides live under:',
+        '',
+        '```text',
+        '{{ profileDir }}',
+        '```',
+        '',
+        '{% for section in renderedAgentSections %}',
+        '{{ section }}',
+        '',
+        '{% endfor %}',
+        '## Absolute Paths',
+        '',
+        'Project root:',
+        '',
+        '```text',
+        '{{ projectRoot }}',
+        '```',
+        '',
+        'Agent directory:',
+        '',
+        '```text',
+        '{{ agentDir }}',
+        '```',
+        '',
+        'Profile source directory:',
+        '',
+        '```text',
+        '{{ profileDir }}',
+        '```',
+        '',
+        'Review directory:',
+        '',
+        '```text',
+        '{{ paths.reviewDir }}',
+        '```',
+        '',
+        "Today's review file:",
+        '',
+        '```text',
+        '{{ paths.reviewFile }}',
+        '```',
+        '',
+        'Consolidated review file:',
+        '',
+        '```text',
+        '{{ paths.reviewConsolidatedFile }}',
+        '```',
+        '',
+        'Memories directory:',
+        '',
+        '```text',
+        '{{ paths.memoriesDir }}',
+        '```',
+        '',
+        'Global memory directory:',
+        '',
+        '```text',
+        '{{ paths.globalMemoryDir }}',
+        '```',
+        '',
+        'Changes file:',
+        '',
+        '```text',
+        '{{ paths.changesFile }}',
+        '```',
+        '',
+        '## Available Skills',
+        '',
+        '{% for skill in skills %}',
+        '- `${{ skill.name }}`{% if skill.description %}: {{ skill.description }}{% endif %}',
+        '{% endfor %}',
+        '',
+        '## Tool Note',
+        '',
+        isClaude
+            ? 'Claude receives {{ agentDir }}/CLAUDE.md through `--append-system-prompt-file` and loads generated skills as a local plugin.'
+            : 'Codex loads AGENTS.md, config.toml, and skills natively from {{ paths.codexHomeDir }}.',
+        '',
+        '## Mandatory Path Rule',
+        '',
+        'Do not create AGENTS.md, CLAUDE.md, .agents, .claude, .codex, or AI-related files inside the project repository.',
+        'Generated agent-only files must be stored under the agent directory shown above.',
+        'Source config files must be stored under the profile source directory shown above.',
+        ''
+    ].join('\n');
+}
+function defaultCodexConfigTemplate() {
+    return [
+        '# Generated by agent-run. Do not edit directly.',
+        '',
+        'project_doc_max_bytes = 65536',
+        'approval_policy = "on-request"',
+        'sandbox_mode = "workspace-write"',
+        '',
+        '[sandbox_workspace_write]',
+        'writable_roots = [',
+        '  {{ projectRoot | dump }},',
+        '  {{ paths.reviewDir | dump }},',
+        '  {{ paths.memoriesDir | dump }}',
+        ']',
+        'network_access = false',
+        ''
+    ].join('\n');
+}
+function defaultClaudeSettingsTemplate() {
+    const envBlock = [
+        '  "env": {',
+        '    "AGENT_DIR": {{ agentDir | dump }},',
+        '    "AGENT_PROFILE_DIR": {{ profileDir | dump }},',
+        '    "AGENT_RUN_PROJECT_ROOT": {{ projectRoot | dump }},',
+        '    "AGENT_GLOBAL_MEMORY_DIR": {{ paths.globalMemoryDir | dump }}',
+        '  }'
+    ].join('\n');
+    return [
+        '{% if permissionsAllow.length %}{',
+        envBlock + ',',
+        '  "permissions": {',
+        '    "allow": {{ permissionsAllow | dump }}',
+        '  }',
+        '}',
+        '{% else %}{',
+        envBlock,
+        '}',
+        '{% endif %}'
+    ].join('\n');
+}
+function defaultCodexConfigContent(context) {
+    return [
+        '# Generated by agent-run. Do not edit directly.',
+        '',
+        'project_doc_max_bytes = 65536',
+        'approval_policy = "on-request"',
+        'sandbox_mode = "workspace-write"',
+        '',
+        '[sandbox_workspace_write]',
+        'writable_roots = [',
+        `  ${JSON.stringify(context.projectRoot)},`,
+        `  ${JSON.stringify(context.paths.reviewDir)},`,
+        `  ${JSON.stringify(context.paths.memoriesDir)}`,
+        ']',
+        'network_access = false',
+        ''
+    ].join('\n');
+}
+function defaultClaudeSettingsContent(context) {
+    const settings = {
+        env: {
+            AGENT_DIR: context.agentDir,
+            AGENT_PROFILE_DIR: context.profileDir,
+            AGENT_RUN_PROJECT_ROOT: context.projectRoot,
+            AGENT_GLOBAL_MEMORY_DIR: context.paths.globalMemoryDir
+        }
+    };
+    if (context.permissionsAllow.length > 0) {
+        settings.permissions = { allow: context.permissionsAllow };
+    }
+    return `${JSON.stringify(settings, null, 2)}\n`;
+}
+function legacyDefaultClaudeSettingsContent(context, agentDir) {
+    return `${JSON.stringify({
+        env: {
+            AGENT_DIR: agentDir,
+            AGENT_RUN_PROJECT_ROOT: context.projectRoot,
+            AGENT_GLOBAL_MEMORY_DIR: context.paths.globalMemoryDir
+        }
+    }, null, 2)}\n`;
+}

package/dist/guards.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderGuardShims = renderGuardShims;
+const path = require("path");
+const constants_1 = require("./constants");
+function renderGuardShims(context) {
+    const names = [];
+    if (context.guardrails.blockGitWrite) {
+        names.push('git');
+    }
+    if (context.guardrails.blockPublish) {
+        names.push('npm', 'pnpm');
+    }
+    if (context.guardrails.blockGithubRelease) {
+        names.push('gh');
+    }
+    if (constants_1.IS_WINDOWS) {
+        return names.map((name) => ({
+            path: path.join(context.paths.binDir, `${name}.cmd`),
+            content: windowsShim(name)
+        }));
+    }
+    return names.map((name) => ({
+        path: path.join(context.paths.binDir, name),
+        content: name === 'git'
+            ? posixGitShim()
+            : name === 'gh'
+                ? posixGhShim()
+                : posixPublishShim(name),
+        executable: true
+    }));
+}
+function posixGitShim() {
+    return [
+        '#!/usr/bin/env bash',
+        'set -euo pipefail',
+        'for arg in "$@"; do',
+        '  case "$arg" in',
+        '    commit|tag|push)',
+        '      if [ "${AGENT_RUN_ALLOW_GIT_WRITE:-}" != "1" ]; then',
+        '        echo "agent-run: blocked git $arg. Review and run it manually, or set AGENT_RUN_ALLOW_GIT_WRITE=1 for this invocation." >&2',
+        '        exit 42',
+        '      fi',
+        '      ;;',
+        '  esac',
+        'done',
+        ...posixRunRealCommand('git'),
+        ''
+    ].join('\n');
+}
+function posixPublishShim(tool) {
+    return [
+        '#!/usr/bin/env bash',
+        'set -euo pipefail',
+        'for arg in "$@"; do',
+        '  if [ "$arg" = "publish" ] && [ "${AGENT_RUN_ALLOW_PUBLISH:-}" != "1" ]; then',
+        `    echo "agent-run: blocked ${tool} publish. Review and run it manually, or set AGENT_RUN_ALLOW_PUBLISH=1 for this invocation." >&2`,
+        '    exit 42',
+        '  fi',
+        'done',
+        ...posixRunRealCommand(tool),
+        ''
+    ].join('\n');
+}
+function posixGhShim() {
+    return [
+        '#!/usr/bin/env bash',
+        'set -euo pipefail',
+        'saw_release=0',
+        'for arg in "$@"; do',
+        '  if [ "$arg" = "release" ]; then',
+        '    saw_release=1',
+        '  elif [ "$saw_release" = "1" ] && [ "$arg" = "create" ] && [ "${AGENT_RUN_ALLOW_GITHUB_RELEASE:-}" != "1" ]; then',
+        '    echo "agent-run: blocked gh release create. Review and run it manually, or set AGENT_RUN_ALLOW_GITHUB_RELEASE=1 for this invocation." >&2',
+        '    exit 42',
+        '  fi',
+        'done',
+        ...posixRunRealCommand('gh'),
+        ''
+    ].join('\n');
+}
+function posixRunRealCommand(tool) {
+    return [
+        'shim_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"',
+        'real_path="${AGENT_RUN_REAL_PATH:-}"',
+        'if [ -z "$real_path" ]; then',
+        '  case "${PATH:-}" in',
+        '    "$shim_dir") real_path="" ;;',
+        '    "$shim_dir":*) real_path="${PATH#*:}" ;;',
+        '    *) real_path="${PATH:-}" ;;',
+        '  esac',
+        'fi',
+        `real_command="$(PATH="$real_path" command -v ${tool} || true)"`,
+        'if [ -z "$real_command" ]; then',
+        `  echo "agent-run: cannot find the real ${tool} command outside the guard directory." >&2`,
+        '  exit 127',
+        'fi',
+        `if [ "$real_command" = "$shim_dir/${tool}" ]; then`,
+        `  echo "agent-run: refused recursive ${tool} guard resolution." >&2`,
+        '  exit 127',
+        'fi',
+        'PATH="$real_path" exec "$real_command" "$@"'
+    ];
+}
+function windowsShim(name) {
+    const executable = name === 'npm' || name === 'pnpm' ? `${name}.cmd` : `${name}.exe`;
+    const guard = name === 'git' ? windowsGitGuard() : name === 'gh' ? windowsGhGuard() : windowsPublishGuard(name);
+    return [
+        '@echo off',
+        ...guard,
+        ':run',
+        'if defined AGENT_RUN_REAL_PATH (',
+        '  set "PATH=%AGENT_RUN_REAL_PATH%"',
+        ') else (',
+        '  for /f "tokens=1,* delims=;" %%A in ("%PATH%") do set "PATH=%%B"',
+        ')',
+        `${executable} %*`,
+        ''
+    ].join('\n');
+}
+function windowsGitGuard() {
+    return [
+        ':scan',
+        'if "%~1"=="" goto run',
+        'if /I "%~1"=="commit" goto block_git',
+        'if /I "%~1"=="tag" goto block_git',
+        'if /I "%~1"=="push" goto block_git',
+        'shift',
+        'goto scan',
+        ':block_git',
+        'if "%AGENT_RUN_ALLOW_GIT_WRITE%"=="1" goto run',
+        'echo agent-run: blocked git write. Review and run it manually, or set AGENT_RUN_ALLOW_GIT_WRITE=1 for this invocation. 1>&2',
+        'exit /b 42'
+    ];
+}
+function windowsGhGuard() {
+    return [
+        'set "SAW_RELEASE=0"',
+        ':scan',
+        'if "%~1"=="" goto run',
+        'if /I "%~1"=="release" set "SAW_RELEASE=1"',
+        'if "%SAW_RELEASE%"=="1" if /I "%~1"=="create" goto block_release',
+        'shift',
+        'goto scan',
+        ':block_release',
+        'if "%AGENT_RUN_ALLOW_GITHUB_RELEASE%"=="1" goto run',
+        'echo agent-run: blocked gh release create. Review and run it manually, or set AGENT_RUN_ALLOW_GITHUB_RELEASE=1 for this invocation. 1>&2',
+        'exit /b 42'
+    ];
+}
+function windowsPublishGuard(name) {
+    return [
+        ':scan',
+        'if "%~1"=="" goto run',
+        'if /I "%~1"=="publish" goto block_publish',
+        'shift',
+        'goto scan',
+        ':block_publish',
+        'if "%AGENT_RUN_ALLOW_PUBLISH%"=="1" goto run',
+        `echo agent-run: blocked ${name} publish. Review and run it manually, or set AGENT_RUN_ALLOW_PUBLISH=1 for this invocation. 1>&2`,
+        'exit /b 42'
+    ];
+}