@xopcai/xopc 0.0.85 → 0.0.87

package/dist/src/agent/tools/factory.js

@@ -20,7 +20,6 @@ import { createTodoTool } from "./todo-tool.js";
 import { createSessionStatusTool } from "./session-status-tool.js";
 import { createDreamingTool } from "./dreaming-tool.js";
 import { createClarifyTool } from "./clarify-tool.js";
-import { createImageTool } from "./image-tool.js";
 import { BrowserManager } from "../../browser/manager.js";
 import { resolveBrowserBackendFromConfig } from "../../browser/backend-from-config.js";
 import { checkBrowserReadiness } from "../../browser/readiness.js";
@@ -33,6 +32,7 @@ import { buildSandboxToolMap, createExecuteCodeTool } from "./execute-code-tool.
 import { createCronjobTool } from "./cronjob-tool.js";
 import { createSkillViewTool, createSkillsListTool } from "./skills-tools.js";
 import { createSkillManageTool } from "./skill-manage-tool.js";
+import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool } from "./image-generate-tool.js";
 import "./index.js";
 import { shouldRegisterCuratedMemoryTool } from "../memory/memory-config.js";

package/dist/src/agent/tools/index.d.ts

@@ -18,7 +18,6 @@ export { createTodoTool, TodoStore, type TodoItem, type TodoStatus } from './tod
 export { createSessionStatusTool } from './session-status-tool.js';
 export { createDreamingTool, type DreamingToolDeps } from './dreaming-tool.js';
 export { createClarifyTool, type ClarifyRequestPayload, type GatewayClarifyRequestFn, } from './clarify-tool.js';
-export { createBrowserTools, type CreateBrowserToolsDeps } from './browser-legacy-tools.js';
 export { BrowserManager, assertBrowserUrlAllowed } from '../../browser/index.js';
 export { createDelegateTool, DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS, } from './delegate-tool.js';
 export { createWorkflowTool, type WorkflowToolDeps, type WorkflowToolInput } from './workflow-tool.js';

package/dist/src/agent/tools/index.js

@@ -20,11 +20,8 @@ import { TodoStore, createTodoTool } from "./todo-tool.js";
 import { createSessionStatusTool } from "./session-status-tool.js";
 import { createDreamingTool } from "./dreaming-tool.js";
 import { createClarifyTool } from "./clarify-tool.js";
-import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
-import { createImageTool } from "./image-tool.js";
-import { assertBrowserUrlAllowed } from "../../browser/url-policy.js";
-import { createBrowserTools } from "./browser-legacy-tools.js";
 import { BrowserManager } from "../../browser/manager.js";
+import { assertBrowserUrlAllowed } from "../../browser/url-policy.js";
 import "../../browser/index.js";
 import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS, createDelegateTool } from "./delegate-tool.js";
 import { createWorkflowTool } from "./workflow-tool.js";
@@ -32,5 +29,7 @@ import { SANDBOX_ALLOWED_TOOLS, buildSandboxToolMap, createExecuteCodeTool } fro
 import { createCronjobTool, scanCronPrompt } from "./cronjob-tool.js";
 import { createSkillViewTool, createSkillsListTool } from "./skills-tools.js";
 import { createSkillManageTool } from "./skill-manage-tool.js";
+import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
+import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool, resolveImageGenerationModelConfigForTool } from "./image-generate-tool.js";
-export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, assertBrowserUrlAllowed, buildSandboxToolMap, createBrowserTools, createClarifyTool, createCreateShareTool, createCronjobTool, createCuratedMemoryTool, createDelegateTool, createDreamingTool, createEditFileTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createShellTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createTodoTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, editFileTool, findTool, formatSize, fuzzyFindText, generateDiffString, grepTool, invalidateSessionSearchIndexCache, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, restoreLineEndings, scanCronPrompt, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };
+export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, assertBrowserUrlAllowed, buildSandboxToolMap, createClarifyTool, createCreateShareTool, createCronjobTool, createCuratedMemoryTool, createDelegateTool, createDreamingTool, createEditFileTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createShellTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createTodoTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, editFileTool, findTool, formatSize, fuzzyFindText, generateDiffString, grepTool, invalidateSessionSearchIndexCache, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, restoreLineEndings, scanCronPrompt, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };

package/dist/src/agent/tools/shell.js

@@ -1,4 +1,3 @@
-import { checkShellSafety } from "../prompt/safety.js";
 import { evaluateExecPolicy } from "../sandbox/exec-policy.js";
 import { spawn } from "child_process";
 import { Type } from "@sinclair/typebox";
@@ -56,18 +55,6 @@ function createShellTool(cwd, options) {
 		label: "💻 Shell",
 		async execute(toolCallId, params, _signal) {
 			const p = params;
-			const safety = checkShellSafety(p.command);
-			if (!safety.allowed) return {
-				content: [{
-					type: "text",
-					text: `🚫 ${safety.message}`
-				}],
-				details: {
-					exitCode: null,
-					timedOut: false,
-					truncated: false
-				}
-			};
 			const passthroughNames = options?.getSkillPassthroughEnvVarNames?.() ?? [];
 			const policy = evaluateExecPolicy({
 				command: p.command,

package/dist/src/agent/tools/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","names":[],"sources":["../../../../src/agent/tools/shell.ts"],"sourcesContent":["// Shell tool - executes commands with output truncation\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport { spawn } from 'child_process';\nimport { evaluateExecPolicy } from '../sandbox/exec-policy.js';\nimport { checkShellSafety } from '../prompt/safety.js';\nimport { createWriteStream } from 'fs';\n\nconst MAX_SHELL_TIMEOUT = 300;\nconst DEFAULT_MAX_BYTES = 50 * 1024;\nconst DEFAULT_MAX_LINES = 2000;\n\nconst ShellSchema = Type.Object({\n  command: Type.String({ description: 'Shell command to execute' }),\n});\n\nexport interface ShellDetails {\n  exitCode: number | null;\n  timedOut: boolean;\n  truncated: boolean;\n  truncatedBy?: 'lines' | 'bytes';\n  outputBytes?: number;\n}\n\nfunction formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes}B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;\n}\n\nfunction truncateTail(content: string, maxLines = DEFAULT_MAX_LINES, maxBytes = DEFAULT_MAX_BYTES) {\n  const totalBytes = Buffer.byteLength(content, 'utf-8');\n  const lines = content.split('\\n');\n  const totalLines = lines.length;\n\n  if (totalLines <= maxLines && totalBytes <= maxBytes) {\n    return { content, truncated: false, truncatedBy: null, totalLines, totalBytes, outputLines: totalLines, outputBytes: totalBytes };\n  }\n\n  const outputLinesArr: string[] = [];\n  let outputBytesCount = 0;\n  let truncatedBy: 'lines' | 'bytes' = 'lines';\n\n  for (let i = lines.length - 1; i >= 0 && outputLinesArr.length < maxLines; i--) {\n    const line = lines[i];\n    const lineBytes = Buffer.byteLength(line, 'utf-8') + (outputLinesArr.length > 0 ? 1 : 0);\n\n    if (outputBytesCount + lineBytes > maxBytes) {\n      truncatedBy = 'bytes';\n      break;\n    }\n\n    outputLinesArr.unshift(line);\n    outputBytesCount += lineBytes;\n  }\n\n  return { content: outputLinesArr.join('\\n'), truncated: true, truncatedBy, totalLines, totalBytes, outputLines: outputLinesArr.length, outputBytes: outputBytesCount };\n}\n\nexport interface CreateShellToolOptions {\n  /** Env var names allowed through {@link prepareSafeToolEnv} even if they match secret heuristics (skill passthrough). */\n  getSkillPassthroughEnvVarNames?: () => string[];\n}\n\nexport function createShellTool(\n  cwd: string,\n  options?: CreateShellToolOptions,\n): AgentTool {\n  return {\n    name: 'shell',\n    description: 'Execute shell command.',\n    parameters: ShellSchema,\n    label: '💻 Shell',\n\n    async execute(\n      toolCallId: string,\n      params: any,\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<ShellDetails>> {\n      const p = params as { command: string };\n\n      // Legacy safety check (kept for backward compat; exec-policy is the primary gate)\n      const safety = checkShellSafety(p.command);\n      if (!safety.allowed) {\n        return {\n          content: [{ type: 'text', text: `🚫 ${safety.message}` }],\n          details: { exitCode: null, timedOut: false, truncated: false },\n        };\n      }\n\n      // Sandbox exec-policy check (path + command injection + env sanitization)\n      const passthroughNames = options?.getSkillPassthroughEnvVarNames?.() ?? [];\n      const policy = evaluateExecPolicy({\n        command: p.command,\n        cwd,\n        allowedEnvVars: passthroughNames,\n      });\n      if (!policy.allowed) {\n        return {\n          content: [{ type: 'text', text: `🚫 Sandbox: ${policy.reason}` }],\n          details: { exitCode: null, timedOut: false, truncated: false },\n        };\n      }\n\n      return new Promise((resolve) => {\n        const _startTime = Date.now();\n        let output = '';\n        let errorOutput = '';\n        let timedOut = false;\n        let _tempFile: string | null = null;\n        let tempStream: ReturnType<typeof createWriteStream> | null = null;\n        const useTempFile = false; // Disabled - stream directly\n\n        const effectiveTimeoutSec = Math.min(\n          MAX_SHELL_TIMEOUT,\n          Math.ceil(policy.timeoutMs / 1000),\n        );\n        const timeout = setTimeout(() => {\n          timedOut = true;\n          proc.kill('SIGKILL');\n        }, effectiveTimeoutSec * 1000);\n\n        const proc = spawn(p.command, [], {\n          shell: true,\n          cwd: policy.effectiveCwd,\n          env: {\n            ...policy.sanitizedEnv,\n            COLUMNS: '200',\n          },\n        });\n\n        proc.stdout?.on('data', (data) => {\n          const text = data.toString();\n          if (!useTempFile) output += text;\n        });\n\n        proc.stderr?.on('data', (data) => {\n          const text = data.toString();\n          errorOutput += text;\n        });\n\n        proc.on('close', (code) => {\n          clearTimeout(timeout);\n          tempStream?.end();\n\n          const fullOutput = errorOutput + output;\n          const truncation = truncateTail(fullOutput);\n\n          let resultText = truncation.content;\n          if (timedOut) {\n            resultText = `⏱️ Command timed out after ${MAX_SHELL_TIMEOUT}s\\n` + resultText;\n          }\n          if (truncation.truncated) {\n            resultText += `\\n\\n[Output truncated: ${formatSize(truncation.outputBytes)} of ${formatSize(truncation.totalBytes)}]`;\n          }\n\n          resolve({\n            content: [{ type: 'text', text: resultText }],\n            details: {\n              exitCode: code,\n              timedOut,\n              truncated: truncation.truncated,\n              truncatedBy: truncation.truncatedBy,\n              outputBytes: truncation.outputBytes,\n            },\n          });\n        });\n\n        proc.on('error', (err) => {\n          clearTimeout(timeout);\n          resolve({\n            content: [{ type: 'text', text: `Error: ${err.message}` }],\n            details: { exitCode: null, timedOut: false, truncated: false },\n          });\n        });\n      });\n    },\n  } as any;\n}\n"],"mappings":";;;;;AAQA,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB,KAAK;AAC/B,MAAM,oBAAoB;AAE1B,MAAM,cAAc,KAAK,OAAO,EAC9B,SAAS,KAAK,OAAO,EAAE,aAAa,4BAA4B,CAAC,EAClE,CAAC;AAUF,SAAS,WAAW,OAAuB;AACzC,KAAI,QAAQ,KAAM,QAAO,GAAG,MAAM;AAClC,KAAI,QAAQ,OAAO,KAAM,QAAO,IAAI,QAAQ,MAAM,QAAQ,EAAE,CAAC;AAC7D,QAAO,IAAI,SAAS,OAAO,OAAO,QAAQ,EAAE,CAAC;;AAG/C,SAAS,aAAa,SAAiB,WAAW,mBAAmB,WAAW,mBAAmB;CACjG,MAAM,aAAa,OAAO,WAAW,SAAS,QAAQ;CACtD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,aAAa,MAAM;AAEzB,KAAI,cAAc,YAAY,cAAc,SAC1C,QAAO;EAAE;EAAS,WAAW;EAAO,aAAa;EAAM;EAAY;EAAY,aAAa;EAAY,aAAa;EAAY;CAGnI,MAAM,iBAA2B,EAAE;CACnC,IAAI,mBAAmB;CACvB,IAAI,cAAiC;AAErC,MAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,KAAK,eAAe,SAAS,UAAU,KAAK;EAC9E,MAAM,OAAO,MAAM;EACnB,MAAM,YAAY,OAAO,WAAW,MAAM,QAAQ,IAAI,eAAe,SAAS,IAAI,IAAI;AAEtF,MAAI,mBAAmB,YAAY,UAAU;AAC3C,iBAAc;AACd;;AAGF,iBAAe,QAAQ,KAAK;AAC5B,sBAAoB;;AAGtB,QAAO;EAAE,SAAS,eAAe,KAAK,KAAK;EAAE,WAAW;EAAM;EAAa;EAAY;EAAY,aAAa,eAAe;EAAQ,aAAa;EAAkB;;AAQxK,SAAgB,gBACd,KACA,SACW;AACX,QAAO;EACL,MAAM;EACN,aAAa;EACb,YAAY;EACZ,OAAO;EAEP,MAAM,QACJ,YACA,QACA,SACwC;GACxC,MAAM,IAAI;GAGV,MAAM,SAAS,iBAAiB,EAAE,QAAQ;AAC1C,OAAI,CAAC,OAAO,QACV,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,MAAM,OAAO;KAAW,CAAC;IACzD,SAAS;KAAE,UAAU;KAAM,UAAU;KAAO,WAAW;KAAO;IAC/D;GAIH,MAAM,mBAAmB,SAAS,kCAAkC,IAAI,EAAE;GAC1E,MAAM,SAAS,mBAAmB;IAChC,SAAS,EAAE;IACX;IACA,gBAAgB;IACjB,CAAC;AACF,OAAI,CAAC,OAAO,QACV,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,eAAe,OAAO;KAAU,CAAC;IACjE,SAAS;KAAE,UAAU;KAAM,UAAU;KAAO,WAAW;KAAO;IAC/D;AAGH,UAAO,IAAI,SAAS,YAAY;IAE9B,IAAI,SAAS;IACb,IAAI,cAAc;IAClB,IAAI,WAAW;IAEf,IAAI,aAA0D;IAG9D,MAAM,sBAAsB,KAAK,IAC/B,mBACA,KAAK,KAAK,OAAO,YAAY,IAAK,CACnC;IACD,MAAM,UAAU,iBAAiB;AAC/B,gBAAW;AACX,UAAK,KAAK,UAAU;OACnB,sBAAsB,IAAK;IAE9B,MAAM,OAAO,MAAM,EAAE,SAAS,EAAE,EAAE;KAChC,OAAO;KACP,KAAK,OAAO;KACZ,KAAK;MACH,GAAG,OAAO;MACV,SAAS;MACV;KACF,CAAC;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AACV,eAAU;MAC5B;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AAC5B,oBAAe;MACf;AAEF,SAAK,GAAG,UAAU,SAAS;AACzB,kBAAa,QAAQ;AACrB,iBAAY,KAAK;KAGjB,MAAM,aAAa,aADA,cAAc,OACU;KAE3C,IAAI,aAAa,WAAW;AAC5B,SAAI,SACF,cAAa,8BAA8B,kBAAkB,OAAO;AAEtE,SAAI,WAAW,UACb,eAAc,0BAA0B,WAAW,WAAW,YAAY,CAAC,MAAM,WAAW,WAAW,WAAW,CAAC;AAGrH,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAY,CAAC;MAC7C,SAAS;OACP,UAAU;OACV;OACA,WAAW,WAAW;OACtB,aAAa,WAAW;OACxB,aAAa,WAAW;OACzB;MACF,CAAC;MACF;AAEF,SAAK,GAAG,UAAU,QAAQ;AACxB,kBAAa,QAAQ;AACrB,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM,UAAU,IAAI;OAAW,CAAC;MAC1D,SAAS;OAAE,UAAU;OAAM,UAAU;OAAO,WAAW;OAAO;MAC/D,CAAC;MACF;KACF;;EAEL"}
+{"version":3,"file":"shell.js","names":[],"sources":["../../../../src/agent/tools/shell.ts"],"sourcesContent":["// Shell tool - executes commands with output truncation\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport { spawn } from 'child_process';\nimport { evaluateExecPolicy } from '../sandbox/exec-policy.js';\nimport { createWriteStream } from 'fs';\n\nconst MAX_SHELL_TIMEOUT = 300;\nconst DEFAULT_MAX_BYTES = 50 * 1024;\nconst DEFAULT_MAX_LINES = 2000;\n\nconst ShellSchema = Type.Object({\n  command: Type.String({ description: 'Shell command to execute' }),\n});\n\nexport interface ShellDetails {\n  exitCode: number | null;\n  timedOut: boolean;\n  truncated: boolean;\n  truncatedBy?: 'lines' | 'bytes';\n  outputBytes?: number;\n}\n\nfunction formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes}B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;\n}\n\nfunction truncateTail(content: string, maxLines = DEFAULT_MAX_LINES, maxBytes = DEFAULT_MAX_BYTES) {\n  const totalBytes = Buffer.byteLength(content, 'utf-8');\n  const lines = content.split('\\n');\n  const totalLines = lines.length;\n\n  if (totalLines <= maxLines && totalBytes <= maxBytes) {\n    return { content, truncated: false, truncatedBy: null, totalLines, totalBytes, outputLines: totalLines, outputBytes: totalBytes };\n  }\n\n  const outputLinesArr: string[] = [];\n  let outputBytesCount = 0;\n  let truncatedBy: 'lines' | 'bytes' = 'lines';\n\n  for (let i = lines.length - 1; i >= 0 && outputLinesArr.length < maxLines; i--) {\n    const line = lines[i];\n    const lineBytes = Buffer.byteLength(line, 'utf-8') + (outputLinesArr.length > 0 ? 1 : 0);\n\n    if (outputBytesCount + lineBytes > maxBytes) {\n      truncatedBy = 'bytes';\n      break;\n    }\n\n    outputLinesArr.unshift(line);\n    outputBytesCount += lineBytes;\n  }\n\n  return { content: outputLinesArr.join('\\n'), truncated: true, truncatedBy, totalLines, totalBytes, outputLines: outputLinesArr.length, outputBytes: outputBytesCount };\n}\n\nexport interface CreateShellToolOptions {\n  /** Env var names allowed through {@link prepareSafeToolEnv} even if they match secret heuristics (skill passthrough). */\n  getSkillPassthroughEnvVarNames?: () => string[];\n}\n\nexport function createShellTool(\n  cwd: string,\n  options?: CreateShellToolOptions,\n): AgentTool {\n  return {\n    name: 'shell',\n    description: 'Execute shell command.',\n    parameters: ShellSchema,\n    label: '💻 Shell',\n\n    async execute(\n      toolCallId: string,\n      params: any,\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<ShellDetails>> {\n      const p = params as { command: string };\n\n      // Sandbox exec-policy check (path + command injection + env sanitization)\n      const passthroughNames = options?.getSkillPassthroughEnvVarNames?.() ?? [];\n      const policy = evaluateExecPolicy({\n        command: p.command,\n        cwd,\n        allowedEnvVars: passthroughNames,\n      });\n      if (!policy.allowed) {\n        return {\n          content: [{ type: 'text', text: `🚫 Sandbox: ${policy.reason}` }],\n          details: { exitCode: null, timedOut: false, truncated: false },\n        };\n      }\n\n      return new Promise((resolve) => {\n        const _startTime = Date.now();\n        let output = '';\n        let errorOutput = '';\n        let timedOut = false;\n        let _tempFile: string | null = null;\n        let tempStream: ReturnType<typeof createWriteStream> | null = null;\n        const useTempFile = false; // Disabled - stream directly\n\n        const effectiveTimeoutSec = Math.min(\n          MAX_SHELL_TIMEOUT,\n          Math.ceil(policy.timeoutMs / 1000),\n        );\n        const timeout = setTimeout(() => {\n          timedOut = true;\n          proc.kill('SIGKILL');\n        }, effectiveTimeoutSec * 1000);\n\n        const proc = spawn(p.command, [], {\n          shell: true,\n          cwd: policy.effectiveCwd,\n          env: {\n            ...policy.sanitizedEnv,\n            COLUMNS: '200',\n          },\n        });\n\n        proc.stdout?.on('data', (data) => {\n          const text = data.toString();\n          if (!useTempFile) output += text;\n        });\n\n        proc.stderr?.on('data', (data) => {\n          const text = data.toString();\n          errorOutput += text;\n        });\n\n        proc.on('close', (code) => {\n          clearTimeout(timeout);\n          tempStream?.end();\n\n          const fullOutput = errorOutput + output;\n          const truncation = truncateTail(fullOutput);\n\n          let resultText = truncation.content;\n          if (timedOut) {\n            resultText = `⏱️ Command timed out after ${MAX_SHELL_TIMEOUT}s\\n` + resultText;\n          }\n          if (truncation.truncated) {\n            resultText += `\\n\\n[Output truncated: ${formatSize(truncation.outputBytes)} of ${formatSize(truncation.totalBytes)}]`;\n          }\n\n          resolve({\n            content: [{ type: 'text', text: resultText }],\n            details: {\n              exitCode: code,\n              timedOut,\n              truncated: truncation.truncated,\n              truncatedBy: truncation.truncatedBy,\n              outputBytes: truncation.outputBytes,\n            },\n          });\n        });\n\n        proc.on('error', (err) => {\n          clearTimeout(timeout);\n          resolve({\n            content: [{ type: 'text', text: `Error: ${err.message}` }],\n            details: { exitCode: null, timedOut: false, truncated: false },\n          });\n        });\n      });\n    },\n  } as any;\n}\n"],"mappings":";;;;AAOA,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB,KAAK;AAC/B,MAAM,oBAAoB;AAE1B,MAAM,cAAc,KAAK,OAAO,EAC9B,SAAS,KAAK,OAAO,EAAE,aAAa,4BAA4B,CAAC,EAClE,CAAC;AAUF,SAAS,WAAW,OAAuB;AACzC,KAAI,QAAQ,KAAM,QAAO,GAAG,MAAM;AAClC,KAAI,QAAQ,OAAO,KAAM,QAAO,IAAI,QAAQ,MAAM,QAAQ,EAAE,CAAC;AAC7D,QAAO,IAAI,SAAS,OAAO,OAAO,QAAQ,EAAE,CAAC;;AAG/C,SAAS,aAAa,SAAiB,WAAW,mBAAmB,WAAW,mBAAmB;CACjG,MAAM,aAAa,OAAO,WAAW,SAAS,QAAQ;CACtD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,aAAa,MAAM;AAEzB,KAAI,cAAc,YAAY,cAAc,SAC1C,QAAO;EAAE;EAAS,WAAW;EAAO,aAAa;EAAM;EAAY;EAAY,aAAa;EAAY,aAAa;EAAY;CAGnI,MAAM,iBAA2B,EAAE;CACnC,IAAI,mBAAmB;CACvB,IAAI,cAAiC;AAErC,MAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,KAAK,eAAe,SAAS,UAAU,KAAK;EAC9E,MAAM,OAAO,MAAM;EACnB,MAAM,YAAY,OAAO,WAAW,MAAM,QAAQ,IAAI,eAAe,SAAS,IAAI,IAAI;AAEtF,MAAI,mBAAmB,YAAY,UAAU;AAC3C,iBAAc;AACd;;AAGF,iBAAe,QAAQ,KAAK;AAC5B,sBAAoB;;AAGtB,QAAO;EAAE,SAAS,eAAe,KAAK,KAAK;EAAE,WAAW;EAAM;EAAa;EAAY;EAAY,aAAa,eAAe;EAAQ,aAAa;EAAkB;;AAQxK,SAAgB,gBACd,KACA,SACW;AACX,QAAO;EACL,MAAM;EACN,aAAa;EACb,YAAY;EACZ,OAAO;EAEP,MAAM,QACJ,YACA,QACA,SACwC;GACxC,MAAM,IAAI;GAGV,MAAM,mBAAmB,SAAS,kCAAkC,IAAI,EAAE;GAC1E,MAAM,SAAS,mBAAmB;IAChC,SAAS,EAAE;IACX;IACA,gBAAgB;IACjB,CAAC;AACF,OAAI,CAAC,OAAO,QACV,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,eAAe,OAAO;KAAU,CAAC;IACjE,SAAS;KAAE,UAAU;KAAM,UAAU;KAAO,WAAW;KAAO;IAC/D;AAGH,UAAO,IAAI,SAAS,YAAY;IAE9B,IAAI,SAAS;IACb,IAAI,cAAc;IAClB,IAAI,WAAW;IAEf,IAAI,aAA0D;IAG9D,MAAM,sBAAsB,KAAK,IAC/B,mBACA,KAAK,KAAK,OAAO,YAAY,IAAK,CACnC;IACD,MAAM,UAAU,iBAAiB;AAC/B,gBAAW;AACX,UAAK,KAAK,UAAU;OACnB,sBAAsB,IAAK;IAE9B,MAAM,OAAO,MAAM,EAAE,SAAS,EAAE,EAAE;KAChC,OAAO;KACP,KAAK,OAAO;KACZ,KAAK;MACH,GAAG,OAAO;MACV,SAAS;MACV;KACF,CAAC;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AACV,eAAU;MAC5B;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AAC5B,oBAAe;MACf;AAEF,SAAK,GAAG,UAAU,SAAS;AACzB,kBAAa,QAAQ;AACrB,iBAAY,KAAK;KAGjB,MAAM,aAAa,aADA,cAAc,OACU;KAE3C,IAAI,aAAa,WAAW;AAC5B,SAAI,SACF,cAAa,8BAA8B,kBAAkB,OAAO;AAEtE,SAAI,WAAW,UACb,eAAc,0BAA0B,WAAW,WAAW,YAAY,CAAC,MAAM,WAAW,WAAW,WAAW,CAAC;AAGrH,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAY,CAAC;MAC7C,SAAS;OACP,UAAU;OACV;OACA,WAAW,WAAW;OACtB,aAAa,WAAW;OACxB,aAAa,WAAW;OACzB;MACF,CAAC;MACF;AAEF,SAAK,GAAG,UAAU,QAAQ;AACxB,kBAAa,QAAQ;AACrB,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM,UAAU,IAAI;OAAW,CAAC;MAC1D,SAAS;OAAE,UAAU;OAAM,UAAU;OAAO,WAAW;OAAO;MAC/D,CAAC;MACF;KACF;;EAEL"}

package/dist/src/agent/tools/workflow-tool.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_providers, resolveModel } from "../../providers/index.js";
 import { parseWorkflowScript } from "../workflow/parser.js";
 import { getLastWorkflowMemory } from "../workflow/last-run-memory.js";
 import { previewValue, recomputeCounts, renderWorkflowText } from "../workflow/snapshot.js";
@@ -23,6 +24,7 @@ import { Type } from "@sinclair/typebox";
 * organised today.
 */
 init_logger();
+init_providers();
 const log = createLogger("workflow-tool");
 const DEFAULT_TIMEOUT_SEC = 1800;
 const MAX_TIMEOUT_SEC = 14400;
@@ -49,11 +51,11 @@ function createWorkflowTool(deps) {
 			"  1. `name`: run a saved workflow from the catalog (built-in or ~/.xopc/workflows/). Prefer this when the user references a known name.",
 			"  2. `script`: provide a raw JS workflow inline. Use when no saved workflow fits. Header is required: export const meta = { name, description }.",
 			"Named-workflow triggers — call this tool with `{ name: \"<name>\" }` IMMEDIATELY when the user message is any of:",
-			"  • a bare workflow name like \"/audit_repo\", \"/research\", or \"audit_repo\"",
-			"  • \"run the audit_repo workflow\", \"kick off research\", \"do a multi_perspective_review on X\" (extract args.target when natural)",
+			"  • a bare workflow name like \"/audit_repo\", \"/pr_review\", \"/research\", or \"audit_repo\"",
+			"  • \"run the audit_repo workflow\", \"review this PR\", \"debug this error\", \"kick off research\", \"do a multi_perspective_review on X\" (extract args when natural: target, question, error, diff)",
 			"  • after /workflows lists saved workflows and the user picks one",
 			"Use phase(title) at runtime to mark progress groups. Each agent() returns a string, or a schema-validated object when opts.schema is set.",
-			"Prefer for decomposable work: repo audits, multi-perspective review, fan-out research, large refactors. Do not use for a single quick read/edit.",
+			"Prefer for decomposable work: repo audits, PR review, incident triage, multi-perspective review, fan-out research, large refactors. Do not use for a single quick read/edit.",
 			"parallel() takes thunks, not promises: parallel(items.map(item => () => agent(...))).",
 			"pipeline(items, ...stages) interleaves items across stages — fastest path by default; only use parallel() when you genuinely need a cross-item barrier.",
 			"Failed agent()/parallel()/pipeline() entries resolve to null; check before synthesizing.",
@@ -125,13 +127,17 @@ function createWorkflowTool(deps) {
 				toolExecutorConfig: deps.toolExecutorConfig,
 				buildChildTools: deps.buildChildTools
 			});
+			const resolveModelId = (modelId) => resolveModel(modelId);
 			const controller = new AbortController();
 			const onParentAbort = () => controller.abort();
 			signal?.addEventListener("abort", onParentAbort, { once: true });
 			const timeoutHandle = timeoutSec > 0 ? setTimeout(() => controller.abort(), timeoutSec * 1e3) : void 0;
 			pushUpdate();
 			try {
-				const result = await runWorkflow(script, { runner }, {
+				const result = await runWorkflow(script, {
+					runner,
+					resolveModelId
+				}, {
 					cwd: deps.workspace,
 					args: params.args,
 					signal: controller.signal,

package/dist/src/agent/tools/workflow-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-tool.js","names":[],"sources":["../../../../src/agent/tools/workflow-tool.ts"],"sourcesContent":["/**\n * `workflow` — the AgentTool the parent model calls to spawn a fan-out run.\n *\n * Shape mirrors `delegate-tool`: factory builds a closure over deps; `execute`\n * parses the script, instantiates the {@link DelegateSubagentRunner}, drives the\n * {@link runWorkflow} runtime, and pushes a live text snapshot through\n * `onUpdate` for streaming UIs (TUI, gateway console).\n *\n * Why this lives in `src/agent/tools/` (not under `src/agent/workflow/`):\n * the runtime is reusable infrastructure; the AgentTool wrapping is a\n * presentation concern that depends on the AgentToolsFactory wiring. Keeping\n * the wrapper here matches how `delegate-tool` and `execute-code-tool` are\n * organised today.\n */\n\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport type { Api, Model } from '@earendil-works/pi-ai';\n\nimport type { Config } from '../../config/schema.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport { createLogger } from '../../utils/logger.js';\n\nimport type { BuildChildToolsOptions } from '../child-agent-factory.js';\nimport {\n  DelegateSubagentRunner,\n  getLastWorkflowMemory,\n  parseWorkflowScript,\n  previewValue,\n  recomputeCounts,\n  renderWorkflowText,\n  runWorkflow,\n  type WorkflowAgentSnapshot,\n  type WorkflowCatalog,\n  type WorkflowMeta,\n  type WorkflowSnapshot,\n} from '../workflow/index.js';\nimport type { ToolExecutorConfig } from './executor.js';\n\nconst log = createLogger('workflow-tool');\n\nconst DEFAULT_TIMEOUT_SEC = 30 * 60;\nconst MAX_TIMEOUT_SEC = 4 * 60 * 60;\nconst DEFAULT_MAX_CONCURRENCY = 16;\nconst DEFAULT_MAX_SUBAGENTS = 1000;\n\nconst WorkflowToolSchema = Type.Object({\n  name: Type.Optional(\n    Type.String({\n      description:\n        'Name of a saved workflow to run. Either `name` or `script` is required. ' +\n        'Use `name` whenever the user references a known workflow (built-in or in ~/.xopc/workflows/).',\n    }),\n  ),\n  script: Type.Optional(\n    Type.String({\n      description: [\n        'Raw JavaScript workflow script (no Markdown fences, no TypeScript syntax). Ignored when `name` is set.',\n        \"First statement: export const meta = { name: 'snake_case', description: 'short, human-readable' }.\",\n        'Use phase(title), agent(prompt, opts), parallel(arrayOfFunctions), pipeline(items, ...stages), log(message), args, and budget.',\n        'The script must call agent() at least once.',\n        'parallel() requires functions: await parallel(items.map(item => () => agent(...))).',\n      ].join(' '),\n    }),\n  ),\n  args: Type.Optional(\n    Type.Any({\n      description: 'Optional JSON value exposed to the workflow script as the global `args`.',\n    }),\n  ),\n});\n\nexport type WorkflowToolInput = {\n  name?: string;\n  script?: string;\n  args?: unknown;\n};\n\nexport interface WorkflowToolDeps {\n  workspace: string;\n  bus: MessageBus;\n  /** Returns the parent agent's primary model — subagents default to this. */\n  getSubagentModel: () => Model<Api>;\n  getConfig: () => Config | undefined;\n  /** Same injection point delegate-tool uses; supplied by AgentToolsFactory. */\n  buildChildTools: (opts: BuildChildToolsOptions) => AgentTool<any, any>[];\n  toolExecutorConfig?: Partial<ToolExecutorConfig>;\n  /** Catalog for `name` lookups (built-in + ~/.xopc/workflows/). */\n  catalog: WorkflowCatalog;\n  /** Per-call sessionKey lookup — used to record \"last successful workflow\" for /workflow save. */\n  getCurrentSessionKey?: () => string | undefined;\n}\n\nexport function createWorkflowTool(deps: WorkflowToolDeps): AgentTool {\n  return {\n    name: 'workflow',\n    label: '◆ Workflow',\n    description: [\n      'Run a deterministic JavaScript workflow that orchestrates multiple isolated subagents through agent(), parallel(), and pipeline().',\n      'Two ways to invoke:',\n      '  1. `name`: run a saved workflow from the catalog (built-in or ~/.xopc/workflows/). Prefer this when the user references a known name.',\n      '  2. `script`: provide a raw JS workflow inline. Use when no saved workflow fits. Header is required: export const meta = { name, description }.',\n      'Named-workflow triggers — call this tool with `{ name: \"<name>\" }` IMMEDIATELY when the user message is any of:',\n      '  • a bare workflow name like \"/audit_repo\", \"/research\", or \"audit_repo\"',\n      '  • \"run the audit_repo workflow\", \"kick off research\", \"do a multi_perspective_review on X\" (extract args.target when natural)',\n      '  • after /workflows lists saved workflows and the user picks one',\n      'Use phase(title) at runtime to mark progress groups. Each agent() returns a string, or a schema-validated object when opts.schema is set.',\n      'Prefer for decomposable work: repo audits, multi-perspective review, fan-out research, large refactors. Do not use for a single quick read/edit.',\n      'parallel() takes thunks, not promises: parallel(items.map(item => () => agent(...))).',\n      'pipeline(items, ...stages) interleaves items across stages — fastest path by default; only use parallel() when you genuinely need a cross-item barrier.',\n      'Failed agent()/parallel()/pipeline() entries resolve to null; check before synthesizing.',\n      'Do not use Date.now(), Math.random(), new Date(), require, import, fs, or network APIs — they are unavailable for determinism.',\n      'Always end with a synthesis agent() that consolidates findings, especially when you fan out for review or research.',\n    ].join('\\n\\n'),\n    parameters: WorkflowToolSchema,\n\n    async execute(\n      _toolCallId: string,\n      params: WorkflowToolInput,\n      signal?: AbortSignal,\n      onUpdate?: (update: AgentToolResult<WorkflowSnapshot | undefined>) => void,\n    ): Promise<AgentToolResult<WorkflowSnapshot | { error: string }>> {\n      let script: string;\n      let resolvedSource: 'name' | 'script' = 'script';\n      try {\n        const resolved = resolveScript(params, deps.catalog);\n        script = resolved.script;\n        resolvedSource = resolved.source;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [{ type: 'text', text: `workflow: ${message}` }],\n          details: { error: message },\n        };\n      }\n\n      const cfg = deps.getConfig();\n      const wfCfg = cfg?.agents?.defaults?.workflow;\n      const concurrency = wfCfg?.maxConcurrency ?? DEFAULT_MAX_CONCURRENCY;\n      const maxSubagents = wfCfg?.maxSubagents ?? DEFAULT_MAX_SUBAGENTS;\n      const timeoutSec = clampTimeout(wfCfg?.defaultTimeoutSec);\n\n      // Parse early so a bad script returns an error result instead of throwing\n      // through the agent loop. The runtime parses again, but that's cheap.\n      let meta: WorkflowMeta;\n      try {\n        meta = parseWorkflowScript(script).meta;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [\n            {\n              type: 'text',\n              text:\n                resolvedSource === 'name'\n                  ? `workflow \"${params.name}\" failed to parse: ${message}`\n                  : `workflow parse error: ${message}`,\n            },\n          ],\n          details: { error: message },\n        };\n      }\n\n      const snapshot: WorkflowSnapshot = {\n        name: meta.name,\n        description: meta.description,\n        phases: [],\n        logs: [],\n        agents: [],\n        agentCount: 0,\n        runningCount: 0,\n        doneCount: 0,\n        errorCount: 0,\n        skippedCount: 0,\n      };\n\n      const pushUpdate = (completed = false) => {\n        recomputeCounts(snapshot);\n        onUpdate?.({\n          content: [\n            {\n              type: 'text',\n              text: renderWorkflowText(snapshot, completed, { showResultPreviews: false }),\n            },\n          ],\n          details: snapshot,\n        });\n      };\n\n      const runner = new DelegateSubagentRunner({\n        workspace: deps.workspace,\n        bus: deps.bus,\n        getDefaultModel: deps.getSubagentModel,\n        getConfig: deps.getConfig,\n        toolExecutorConfig: deps.toolExecutorConfig,\n        buildChildTools: deps.buildChildTools,\n      });\n\n      // Combined abort: parent signal + per-run timeout.\n      const controller = new AbortController();\n      const onParentAbort = () => controller.abort();\n      signal?.addEventListener('abort', onParentAbort, { once: true });\n      const timeoutHandle =\n        timeoutSec > 0\n          ? setTimeout(() => controller.abort(), timeoutSec * 1000)\n          : undefined;\n\n      pushUpdate();\n\n      try {\n        const result = await runWorkflow(script, { runner }, {\n          cwd: deps.workspace,\n          args: params.args,\n          signal: controller.signal,\n          concurrency,\n          maxSubagents,\n          onLog: (message) => {\n            snapshot.logs.push(message);\n            pushUpdate();\n          },\n          onPhase: (title) => {\n            snapshot.currentPhase = title;\n            if (!snapshot.phases.includes(title)) snapshot.phases.push(title);\n            pushUpdate();\n          },\n          onAgentStart: (event) => {\n            snapshot.agents.push({\n              id: event.id,\n              label: event.label,\n              phase: event.phase,\n              prompt: event.prompt,\n              status: 'running',\n            });\n            pushUpdate();\n          },\n          onAgentEnd: (event) => {\n            const agent = findAgentById(snapshot.agents, event.id);\n            if (agent) {\n              agent.status = event.status;\n              agent.resultPreview = previewValue(event.result);\n            }\n            pushUpdate();\n          },\n        });\n\n        if (result.agentCount === 0) {\n          const reason =\n            'workflow scripts must call agent() at least once; this workflow declared phases but never ran a subagent.';\n          snapshot.logs.push(reason);\n          pushUpdate(true);\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n\n        snapshot.result = result.result;\n        snapshot.durationMs = result.durationMs;\n        pushUpdate(true);\n\n        // Record for /workflow save — last successful run per session.\n        // Failures are intentionally skipped so users do not save broken scripts.\n        try {\n          getLastWorkflowMemory().record(deps.getCurrentSessionKey?.(), {\n            script,\n            metaName: result.meta.name,\n            source: resolvedSource,\n            recordedAt: Date.now(),\n          });\n        } catch {\n          // Memory recording is best-effort; never break a successful run on it.\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `workflow ${result.meta.name} completed: ${result.agentCount} subagent(s), ${snapshot.errorCount} error(s).\\n\\nResult:\\n${safeStringify(result.result)}`,\n            },\n          ],\n          details: snapshot,\n        };\n      } catch (e) {\n        if (controller.signal.aborted) {\n          for (const a of snapshot.agents) {\n            if (a.status === 'running') {\n              a.status = 'skipped';\n              a.error = 'aborted';\n            }\n          }\n          pushUpdate(true);\n          const reason = signal?.aborted ? 'workflow aborted' : `workflow timed out after ${timeoutSec}s`;\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n        const message = e instanceof Error ? e.message : String(e);\n        log.warn({ err: e, errorMessage: message, workflow: meta.name }, `workflow failed: ${message}`);\n        snapshot.logs.push(`workflow failed: ${message}`);\n        pushUpdate(true);\n        return {\n          content: [{ type: 'text', text: `workflow failed: ${message}` }],\n          details: snapshot,\n        };\n      } finally {\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        signal?.removeEventListener('abort', onParentAbort);\n      }\n    },\n  } as unknown as AgentTool;\n}\n\n// ---------------------------------------------------------------------------\n\nfunction normalizeScript(script: string): string {\n  let text = script.trim();\n  const fence = text.match(/^```(?:js|javascript)?\\s*\\n([\\s\\S]*?)\\n```$/i);\n  if (fence) text = fence[1].trim();\n  return text;\n}\n\nfunction resolveScript(\n  params: WorkflowToolInput,\n  catalog: WorkflowCatalog,\n): { script: string; source: 'name' | 'script' } {\n  const name = params.name?.trim();\n  if (name) {\n    const loaded = catalog.load(name);\n    return { script: loaded.script, source: 'name' };\n  }\n  if (!params.script || !params.script.trim()) {\n    throw new Error('either `name` or `script` is required.');\n  }\n  return { script: normalizeScript(params.script), source: 'script' };\n}\n\nfunction clampTimeout(requested: number | undefined): number {\n  const v = typeof requested === 'number' && Number.isFinite(requested) ? requested : DEFAULT_TIMEOUT_SEC;\n  if (v <= 0) return 0;\n  return Math.min(MAX_TIMEOUT_SEC, Math.max(1, Math.floor(v)));\n}\n\nfunction findAgentById(agents: WorkflowAgentSnapshot[], id: number): WorkflowAgentSnapshot | undefined {\n  // Linear scan — agent lists are small in practice (capped at maxSubagents).\n  for (let i = agents.length - 1; i >= 0; i--) {\n    if (agents[i].id === id) return agents[i];\n  }\n  return undefined;\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value, null, 2);\n  } catch {\n    return String(value);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;aAqBqD;AAkBrD,MAAM,MAAM,aAAa,gBAAgB;AAEzC,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAE9B,MAAM,qBAAqB,KAAK,OAAO;CACrC,MAAM,KAAK,SACT,KAAK,OAAO,EACV,aACE,yKAEH,CAAC,CACH;CACD,QAAQ,KAAK,SACX,KAAK,OAAO,EACV,aAAa;EACX;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,IAAI,EACZ,CAAC,CACH;CACD,MAAM,KAAK,SACT,KAAK,IAAI,EACP,aAAa,4EACd,CAAC,CACH;CACF,CAAC;AAuBF,SAAgB,mBAAmB,MAAmC;AACpE,QAAO;EACL,MAAM;EACN,OAAO;EACP,aAAa;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,KAAK,OAAO;EACd,YAAY;EAEZ,MAAM,QACJ,aACA,QACA,QACA,UACgE;GAChE,IAAI;GACJ,IAAI,iBAAoC;AACxC,OAAI;IACF,MAAM,WAAW,cAAc,QAAQ,KAAK,QAAQ;AACpD,aAAS,SAAS;AAClB,qBAAiB,SAAS;YACnB,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,aAAa;MAAW,CAAC;KACzD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAIH,MAAM,QADM,KAAK,WACA,EAAE,QAAQ,UAAU;GACrC,MAAM,cAAc,OAAO,kBAAkB;GAC7C,MAAM,eAAe,OAAO,gBAAgB;GAC5C,MAAM,aAAa,aAAa,OAAO,kBAAkB;GAIzD,IAAI;AACJ,OAAI;AACF,WAAO,oBAAoB,OAAO,CAAC;YAC5B,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MACE,mBAAmB,SACf,aAAa,OAAO,KAAK,qBAAqB,YAC9C,yBAAyB;MAChC,CACF;KACD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAGH,MAAM,WAA6B;IACjC,MAAM,KAAK;IACX,aAAa,KAAK;IAClB,QAAQ,EAAE;IACV,MAAM,EAAE;IACR,QAAQ,EAAE;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,YAAY;IACZ,cAAc;IACf;GAED,MAAM,cAAc,YAAY,UAAU;AACxC,oBAAgB,SAAS;AACzB,eAAW;KACT,SAAS,CACP;MACE,MAAM;MACN,MAAM,mBAAmB,UAAU,WAAW,EAAE,oBAAoB,OAAO,CAAC;MAC7E,CACF;KACD,SAAS;KACV,CAAC;;GAGJ,MAAM,SAAS,IAAI,uBAAuB;IACxC,WAAW,KAAK;IAChB,KAAK,KAAK;IACV,iBAAiB,KAAK;IACtB,WAAW,KAAK;IAChB,oBAAoB,KAAK;IACzB,iBAAiB,KAAK;IACvB,CAAC;GAGF,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,sBAAsB,WAAW,OAAO;AAC9C,WAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,MAAM,CAAC;GAChE,MAAM,gBACJ,aAAa,IACT,iBAAiB,WAAW,OAAO,EAAE,aAAa,IAAK,GACvD,KAAA;AAEN,eAAY;AAEZ,OAAI;IACF,MAAM,SAAS,MAAM,YAAY,QAAQ,EAAE,QAAQ,EAAE;KACnD,KAAK,KAAK;KACV,MAAM,OAAO;KACb,QAAQ,WAAW;KACnB;KACA;KACA,QAAQ,YAAY;AAClB,eAAS,KAAK,KAAK,QAAQ;AAC3B,kBAAY;;KAEd,UAAU,UAAU;AAClB,eAAS,eAAe;AACxB,UAAI,CAAC,SAAS,OAAO,SAAS,MAAM,CAAE,UAAS,OAAO,KAAK,MAAM;AACjE,kBAAY;;KAEd,eAAe,UAAU;AACvB,eAAS,OAAO,KAAK;OACnB,IAAI,MAAM;OACV,OAAO,MAAM;OACb,OAAO,MAAM;OACb,QAAQ,MAAM;OACd,QAAQ;OACT,CAAC;AACF,kBAAY;;KAEd,aAAa,UAAU;MACrB,MAAM,QAAQ,cAAc,SAAS,QAAQ,MAAM,GAAG;AACtD,UAAI,OAAO;AACT,aAAM,SAAS,MAAM;AACrB,aAAM,gBAAgB,aAAa,MAAM,OAAO;;AAElD,kBAAY;;KAEf,CAAC;AAEF,QAAI,OAAO,eAAe,GAAG;KAC3B,MAAM,SACJ;AACF,cAAS,KAAK,KAAK,OAAO;AAC1B,gBAAW,KAAK;AAChB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAQ,CAAC;MACzC,SAAS;MACV;;AAGH,aAAS,SAAS,OAAO;AACzB,aAAS,aAAa,OAAO;AAC7B,eAAW,KAAK;AAIhB,QAAI;AACF,4BAAuB,CAAC,OAAO,KAAK,wBAAwB,EAAE;MAC5D;MACA,UAAU,OAAO,KAAK;MACtB,QAAQ;MACR,YAAY,KAAK,KAAK;MACvB,CAAC;YACI;AAIR,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MAAM,YAAY,OAAO,KAAK,KAAK,cAAc,OAAO,WAAW,gBAAgB,SAAS,WAAW,yBAAyB,cAAc,OAAO,OAAO;MAC7J,CACF;KACD,SAAS;KACV;YACM,GAAG;AACV,QAAI,WAAW,OAAO,SAAS;AAC7B,UAAK,MAAM,KAAK,SAAS,OACvB,KAAI,EAAE,WAAW,WAAW;AAC1B,QAAE,SAAS;AACX,QAAE,QAAQ;;AAGd,gBAAW,KAAK;AAEhB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAFb,QAAQ,UAAU,qBAAqB,4BAA4B,WAAW;OAEnD,CAAC;MACzC,SAAS;MACV;;IAEH,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,QAAI,KAAK;KAAE,KAAK;KAAG,cAAc;KAAS,UAAU,KAAK;KAAM,EAAE,oBAAoB,UAAU;AAC/F,aAAS,KAAK,KAAK,oBAAoB,UAAU;AACjD,eAAW,KAAK;AAChB,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,oBAAoB;MAAW,CAAC;KAChE,SAAS;KACV;aACO;AACR,QAAI,cAAe,cAAa,cAAc;AAC9C,YAAQ,oBAAoB,SAAS,cAAc;;;EAGxD;;AAKH,SAAS,gBAAgB,QAAwB;CAC/C,IAAI,OAAO,OAAO,MAAM;CACxB,MAAM,QAAQ,KAAK,MAAM,+CAA+C;AACxE,KAAI,MAAO,QAAO,MAAM,GAAG,MAAM;AACjC,QAAO;;AAGT,SAAS,cACP,QACA,SAC+C;CAC/C,MAAM,OAAO,OAAO,MAAM,MAAM;AAChC,KAAI,KAEF,QAAO;EAAE,QADM,QAAQ,KAAK,KACL,CAAC;EAAQ,QAAQ;EAAQ;AAElD,KAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAAO,MAAM,CACzC,OAAM,IAAI,MAAM,yCAAyC;AAE3D,QAAO;EAAE,QAAQ,gBAAgB,OAAO,OAAO;EAAE,QAAQ;EAAU;;AAGrE,SAAS,aAAa,WAAuC;CAC3D,MAAM,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,UAAU,GAAG,YAAY;AACpF,KAAI,KAAK,EAAG,QAAO;AACnB,QAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;;AAG9D,SAAS,cAAc,QAAiC,IAA+C;AAErG,MAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,IACtC,KAAI,OAAO,GAAG,OAAO,GAAI,QAAO,OAAO;;AAK3C,SAAS,cAAc,OAAwB;AAC7C,KAAI;AACF,SAAO,KAAK,UAAU,OAAO,MAAM,EAAE;SAC/B;AACN,SAAO,OAAO,MAAM"}
+{"version":3,"file":"workflow-tool.js","names":["resolveModelById"],"sources":["../../../../src/agent/tools/workflow-tool.ts"],"sourcesContent":["/**\n * `workflow` — the AgentTool the parent model calls to spawn a fan-out run.\n *\n * Shape mirrors `delegate-tool`: factory builds a closure over deps; `execute`\n * parses the script, instantiates the {@link DelegateSubagentRunner}, drives the\n * {@link runWorkflow} runtime, and pushes a live text snapshot through\n * `onUpdate` for streaming UIs (TUI, gateway console).\n *\n * Why this lives in `src/agent/tools/` (not under `src/agent/workflow/`):\n * the runtime is reusable infrastructure; the AgentTool wrapping is a\n * presentation concern that depends on the AgentToolsFactory wiring. Keeping\n * the wrapper here matches how `delegate-tool` and `execute-code-tool` are\n * organised today.\n */\n\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport type { Api, Model } from '@earendil-works/pi-ai';\n\nimport type { Config } from '../../config/schema.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport { createLogger } from '../../utils/logger.js';\n\nimport type { BuildChildToolsOptions } from '../child-agent-factory.js';\nimport {\n  DelegateSubagentRunner,\n  getLastWorkflowMemory,\n  parseWorkflowScript,\n  previewValue,\n  recomputeCounts,\n  renderWorkflowText,\n  runWorkflow,\n  type WorkflowAgentSnapshot,\n  type WorkflowCatalog,\n  type WorkflowMeta,\n  type WorkflowSnapshot,\n} from '../workflow/index.js';\nimport { resolveModel as resolveModelById } from '../../providers/index.js';\nimport type { ToolExecutorConfig } from './executor.js';\n\nconst log = createLogger('workflow-tool');\n\nconst DEFAULT_TIMEOUT_SEC = 30 * 60;\nconst MAX_TIMEOUT_SEC = 4 * 60 * 60;\nconst DEFAULT_MAX_CONCURRENCY = 16;\nconst DEFAULT_MAX_SUBAGENTS = 1000;\n\nconst WorkflowToolSchema = Type.Object({\n  name: Type.Optional(\n    Type.String({\n      description:\n        'Name of a saved workflow to run. Either `name` or `script` is required. ' +\n        'Use `name` whenever the user references a known workflow (built-in or in ~/.xopc/workflows/).',\n    }),\n  ),\n  script: Type.Optional(\n    Type.String({\n      description: [\n        'Raw JavaScript workflow script (no Markdown fences, no TypeScript syntax). Ignored when `name` is set.',\n        \"First statement: export const meta = { name: 'snake_case', description: 'short, human-readable' }.\",\n        'Use phase(title), agent(prompt, opts), parallel(arrayOfFunctions), pipeline(items, ...stages), log(message), args, and budget.',\n        'The script must call agent() at least once.',\n        'parallel() requires functions: await parallel(items.map(item => () => agent(...))).',\n      ].join(' '),\n    }),\n  ),\n  args: Type.Optional(\n    Type.Any({\n      description: 'Optional JSON value exposed to the workflow script as the global `args`.',\n    }),\n  ),\n});\n\nexport type WorkflowToolInput = {\n  name?: string;\n  script?: string;\n  args?: unknown;\n};\n\nexport interface WorkflowToolDeps {\n  workspace: string;\n  bus: MessageBus;\n  /** Returns the parent agent's primary model — subagents default to this. */\n  getSubagentModel: () => Model<Api>;\n  getConfig: () => Config | undefined;\n  /** Same injection point delegate-tool uses; supplied by AgentToolsFactory. */\n  buildChildTools: (opts: BuildChildToolsOptions) => AgentTool<any, any>[];\n  toolExecutorConfig?: Partial<ToolExecutorConfig>;\n  /** Catalog for `name` lookups (built-in + ~/.xopc/workflows/). */\n  catalog: WorkflowCatalog;\n  /** Per-call sessionKey lookup — used to record \"last successful workflow\" for /workflow save. */\n  getCurrentSessionKey?: () => string | undefined;\n}\n\nexport function createWorkflowTool(deps: WorkflowToolDeps): AgentTool {\n  return {\n    name: 'workflow',\n    label: '◆ Workflow',\n    description: [\n      'Run a deterministic JavaScript workflow that orchestrates multiple isolated subagents through agent(), parallel(), and pipeline().',\n      'Two ways to invoke:',\n      '  1. `name`: run a saved workflow from the catalog (built-in or ~/.xopc/workflows/). Prefer this when the user references a known name.',\n      '  2. `script`: provide a raw JS workflow inline. Use when no saved workflow fits. Header is required: export const meta = { name, description }.',\n      'Named-workflow triggers — call this tool with `{ name: \"<name>\" }` IMMEDIATELY when the user message is any of:',\n      '  • a bare workflow name like \"/audit_repo\", \"/pr_review\", \"/research\", or \"audit_repo\"',\n      '  • \"run the audit_repo workflow\", \"review this PR\", \"debug this error\", \"kick off research\", \"do a multi_perspective_review on X\" (extract args when natural: target, question, error, diff)',\n      '  • after /workflows lists saved workflows and the user picks one',\n      'Use phase(title) at runtime to mark progress groups. Each agent() returns a string, or a schema-validated object when opts.schema is set.',\n      'Prefer for decomposable work: repo audits, PR review, incident triage, multi-perspective review, fan-out research, large refactors. Do not use for a single quick read/edit.',\n      'parallel() takes thunks, not promises: parallel(items.map(item => () => agent(...))).',\n      'pipeline(items, ...stages) interleaves items across stages — fastest path by default; only use parallel() when you genuinely need a cross-item barrier.',\n      'Failed agent()/parallel()/pipeline() entries resolve to null; check before synthesizing.',\n      'Do not use Date.now(), Math.random(), new Date(), require, import, fs, or network APIs — they are unavailable for determinism.',\n      'Always end with a synthesis agent() that consolidates findings, especially when you fan out for review or research.',\n    ].join('\\n\\n'),\n    parameters: WorkflowToolSchema,\n\n    async execute(\n      _toolCallId: string,\n      params: WorkflowToolInput,\n      signal?: AbortSignal,\n      onUpdate?: (update: AgentToolResult<WorkflowSnapshot | undefined>) => void,\n    ): Promise<AgentToolResult<WorkflowSnapshot | { error: string }>> {\n      let script: string;\n      let resolvedSource: 'name' | 'script' = 'script';\n      try {\n        const resolved = resolveScript(params, deps.catalog);\n        script = resolved.script;\n        resolvedSource = resolved.source;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [{ type: 'text', text: `workflow: ${message}` }],\n          details: { error: message },\n        };\n      }\n\n      const cfg = deps.getConfig();\n      const wfCfg = cfg?.agents?.defaults?.workflow;\n      const concurrency = wfCfg?.maxConcurrency ?? DEFAULT_MAX_CONCURRENCY;\n      const maxSubagents = wfCfg?.maxSubagents ?? DEFAULT_MAX_SUBAGENTS;\n      const timeoutSec = clampTimeout(wfCfg?.defaultTimeoutSec);\n\n      // Parse early so a bad script returns an error result instead of throwing\n      // through the agent loop. The runtime parses again, but that's cheap.\n      let meta: WorkflowMeta;\n      try {\n        meta = parseWorkflowScript(script).meta;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [\n            {\n              type: 'text',\n              text:\n                resolvedSource === 'name'\n                  ? `workflow \"${params.name}\" failed to parse: ${message}`\n                  : `workflow parse error: ${message}`,\n            },\n          ],\n          details: { error: message },\n        };\n      }\n\n      const snapshot: WorkflowSnapshot = {\n        name: meta.name,\n        description: meta.description,\n        phases: [],\n        logs: [],\n        agents: [],\n        agentCount: 0,\n        runningCount: 0,\n        doneCount: 0,\n        errorCount: 0,\n        skippedCount: 0,\n      };\n\n      const pushUpdate = (completed = false) => {\n        recomputeCounts(snapshot);\n        onUpdate?.({\n          content: [\n            {\n              type: 'text',\n              text: renderWorkflowText(snapshot, completed, { showResultPreviews: false }),\n            },\n          ],\n          details: snapshot,\n        });\n      };\n\n      const runner = new DelegateSubagentRunner({\n        workspace: deps.workspace,\n        bus: deps.bus,\n        getDefaultModel: deps.getSubagentModel,\n        getConfig: deps.getConfig,\n        toolExecutorConfig: deps.toolExecutorConfig,\n        buildChildTools: deps.buildChildTools,\n      });\n\n      const resolveModelId = (modelId: string): Model<Api> => resolveModelById(modelId);\n\n      // Combined abort: parent signal + per-run timeout.\n      const controller = new AbortController();\n      const onParentAbort = () => controller.abort();\n      signal?.addEventListener('abort', onParentAbort, { once: true });\n      const timeoutHandle =\n        timeoutSec > 0\n          ? setTimeout(() => controller.abort(), timeoutSec * 1000)\n          : undefined;\n\n      pushUpdate();\n\n      try {\n        const result = await runWorkflow(script, { runner, resolveModelId }, {\n          cwd: deps.workspace,\n          args: params.args,\n          signal: controller.signal,\n          concurrency,\n          maxSubagents,\n          onLog: (message) => {\n            snapshot.logs.push(message);\n            pushUpdate();\n          },\n          onPhase: (title) => {\n            snapshot.currentPhase = title;\n            if (!snapshot.phases.includes(title)) snapshot.phases.push(title);\n            pushUpdate();\n          },\n          onAgentStart: (event) => {\n            snapshot.agents.push({\n              id: event.id,\n              label: event.label,\n              phase: event.phase,\n              prompt: event.prompt,\n              status: 'running',\n            });\n            pushUpdate();\n          },\n          onAgentEnd: (event) => {\n            const agent = findAgentById(snapshot.agents, event.id);\n            if (agent) {\n              agent.status = event.status;\n              agent.resultPreview = previewValue(event.result);\n            }\n            pushUpdate();\n          },\n        });\n\n        if (result.agentCount === 0) {\n          const reason =\n            'workflow scripts must call agent() at least once; this workflow declared phases but never ran a subagent.';\n          snapshot.logs.push(reason);\n          pushUpdate(true);\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n\n        snapshot.result = result.result;\n        snapshot.durationMs = result.durationMs;\n        pushUpdate(true);\n\n        // Record for /workflow save — last successful run per session.\n        // Failures are intentionally skipped so users do not save broken scripts.\n        try {\n          getLastWorkflowMemory().record(deps.getCurrentSessionKey?.(), {\n            script,\n            metaName: result.meta.name,\n            source: resolvedSource,\n            recordedAt: Date.now(),\n          });\n        } catch {\n          // Memory recording is best-effort; never break a successful run on it.\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `workflow ${result.meta.name} completed: ${result.agentCount} subagent(s), ${snapshot.errorCount} error(s).\\n\\nResult:\\n${safeStringify(result.result)}`,\n            },\n          ],\n          details: snapshot,\n        };\n      } catch (e) {\n        if (controller.signal.aborted) {\n          for (const a of snapshot.agents) {\n            if (a.status === 'running') {\n              a.status = 'skipped';\n              a.error = 'aborted';\n            }\n          }\n          pushUpdate(true);\n          const reason = signal?.aborted ? 'workflow aborted' : `workflow timed out after ${timeoutSec}s`;\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n        const message = e instanceof Error ? e.message : String(e);\n        log.warn({ err: e, errorMessage: message, workflow: meta.name }, `workflow failed: ${message}`);\n        snapshot.logs.push(`workflow failed: ${message}`);\n        pushUpdate(true);\n        return {\n          content: [{ type: 'text', text: `workflow failed: ${message}` }],\n          details: snapshot,\n        };\n      } finally {\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        signal?.removeEventListener('abort', onParentAbort);\n      }\n    },\n  } as unknown as AgentTool;\n}\n\n// ---------------------------------------------------------------------------\n\nfunction normalizeScript(script: string): string {\n  let text = script.trim();\n  const fence = text.match(/^```(?:js|javascript)?\\s*\\n([\\s\\S]*?)\\n```$/i);\n  if (fence) text = fence[1].trim();\n  return text;\n}\n\nfunction resolveScript(\n  params: WorkflowToolInput,\n  catalog: WorkflowCatalog,\n): { script: string; source: 'name' | 'script' } {\n  const name = params.name?.trim();\n  if (name) {\n    const loaded = catalog.load(name);\n    return { script: loaded.script, source: 'name' };\n  }\n  if (!params.script || !params.script.trim()) {\n    throw new Error('either `name` or `script` is required.');\n  }\n  return { script: normalizeScript(params.script), source: 'script' };\n}\n\nfunction clampTimeout(requested: number | undefined): number {\n  const v = typeof requested === 'number' && Number.isFinite(requested) ? requested : DEFAULT_TIMEOUT_SEC;\n  if (v <= 0) return 0;\n  return Math.min(MAX_TIMEOUT_SEC, Math.max(1, Math.floor(v)));\n}\n\nfunction findAgentById(agents: WorkflowAgentSnapshot[], id: number): WorkflowAgentSnapshot | undefined {\n  // Linear scan — agent lists are small in practice (capped at maxSubagents).\n  for (let i = agents.length - 1; i >= 0; i--) {\n    if (agents[i].id === id) return agents[i];\n  }\n  return undefined;\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value, null, 2);\n  } catch {\n    return String(value);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;aAqBqD;gBAgBuB;AAG5E,MAAM,MAAM,aAAa,gBAAgB;AAEzC,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAE9B,MAAM,qBAAqB,KAAK,OAAO;CACrC,MAAM,KAAK,SACT,KAAK,OAAO,EACV,aACE,yKAEH,CAAC,CACH;CACD,QAAQ,KAAK,SACX,KAAK,OAAO,EACV,aAAa;EACX;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,IAAI,EACZ,CAAC,CACH;CACD,MAAM,KAAK,SACT,KAAK,IAAI,EACP,aAAa,4EACd,CAAC,CACH;CACF,CAAC;AAuBF,SAAgB,mBAAmB,MAAmC;AACpE,QAAO;EACL,MAAM;EACN,OAAO;EACP,aAAa;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,KAAK,OAAO;EACd,YAAY;EAEZ,MAAM,QACJ,aACA,QACA,QACA,UACgE;GAChE,IAAI;GACJ,IAAI,iBAAoC;AACxC,OAAI;IACF,MAAM,WAAW,cAAc,QAAQ,KAAK,QAAQ;AACpD,aAAS,SAAS;AAClB,qBAAiB,SAAS;YACnB,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,aAAa;MAAW,CAAC;KACzD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAIH,MAAM,QADM,KAAK,WACA,EAAE,QAAQ,UAAU;GACrC,MAAM,cAAc,OAAO,kBAAkB;GAC7C,MAAM,eAAe,OAAO,gBAAgB;GAC5C,MAAM,aAAa,aAAa,OAAO,kBAAkB;GAIzD,IAAI;AACJ,OAAI;AACF,WAAO,oBAAoB,OAAO,CAAC;YAC5B,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MACE,mBAAmB,SACf,aAAa,OAAO,KAAK,qBAAqB,YAC9C,yBAAyB;MAChC,CACF;KACD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAGH,MAAM,WAA6B;IACjC,MAAM,KAAK;IACX,aAAa,KAAK;IAClB,QAAQ,EAAE;IACV,MAAM,EAAE;IACR,QAAQ,EAAE;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,YAAY;IACZ,cAAc;IACf;GAED,MAAM,cAAc,YAAY,UAAU;AACxC,oBAAgB,SAAS;AACzB,eAAW;KACT,SAAS,CACP;MACE,MAAM;MACN,MAAM,mBAAmB,UAAU,WAAW,EAAE,oBAAoB,OAAO,CAAC;MAC7E,CACF;KACD,SAAS;KACV,CAAC;;GAGJ,MAAM,SAAS,IAAI,uBAAuB;IACxC,WAAW,KAAK;IAChB,KAAK,KAAK;IACV,iBAAiB,KAAK;IACtB,WAAW,KAAK;IAChB,oBAAoB,KAAK;IACzB,iBAAiB,KAAK;IACvB,CAAC;GAEF,MAAM,kBAAkB,YAAgCA,aAAiB,QAAQ;GAGjF,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,sBAAsB,WAAW,OAAO;AAC9C,WAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,MAAM,CAAC;GAChE,MAAM,gBACJ,aAAa,IACT,iBAAiB,WAAW,OAAO,EAAE,aAAa,IAAK,GACvD,KAAA;AAEN,eAAY;AAEZ,OAAI;IACF,MAAM,SAAS,MAAM,YAAY,QAAQ;KAAE;KAAQ;KAAgB,EAAE;KACnE,KAAK,KAAK;KACV,MAAM,OAAO;KACb,QAAQ,WAAW;KACnB;KACA;KACA,QAAQ,YAAY;AAClB,eAAS,KAAK,KAAK,QAAQ;AAC3B,kBAAY;;KAEd,UAAU,UAAU;AAClB,eAAS,eAAe;AACxB,UAAI,CAAC,SAAS,OAAO,SAAS,MAAM,CAAE,UAAS,OAAO,KAAK,MAAM;AACjE,kBAAY;;KAEd,eAAe,UAAU;AACvB,eAAS,OAAO,KAAK;OACnB,IAAI,MAAM;OACV,OAAO,MAAM;OACb,OAAO,MAAM;OACb,QAAQ,MAAM;OACd,QAAQ;OACT,CAAC;AACF,kBAAY;;KAEd,aAAa,UAAU;MACrB,MAAM,QAAQ,cAAc,SAAS,QAAQ,MAAM,GAAG;AACtD,UAAI,OAAO;AACT,aAAM,SAAS,MAAM;AACrB,aAAM,gBAAgB,aAAa,MAAM,OAAO;;AAElD,kBAAY;;KAEf,CAAC;AAEF,QAAI,OAAO,eAAe,GAAG;KAC3B,MAAM,SACJ;AACF,cAAS,KAAK,KAAK,OAAO;AAC1B,gBAAW,KAAK;AAChB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAQ,CAAC;MACzC,SAAS;MACV;;AAGH,aAAS,SAAS,OAAO;AACzB,aAAS,aAAa,OAAO;AAC7B,eAAW,KAAK;AAIhB,QAAI;AACF,4BAAuB,CAAC,OAAO,KAAK,wBAAwB,EAAE;MAC5D;MACA,UAAU,OAAO,KAAK;MACtB,QAAQ;MACR,YAAY,KAAK,KAAK;MACvB,CAAC;YACI;AAIR,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MAAM,YAAY,OAAO,KAAK,KAAK,cAAc,OAAO,WAAW,gBAAgB,SAAS,WAAW,yBAAyB,cAAc,OAAO,OAAO;MAC7J,CACF;KACD,SAAS;KACV;YACM,GAAG;AACV,QAAI,WAAW,OAAO,SAAS;AAC7B,UAAK,MAAM,KAAK,SAAS,OACvB,KAAI,EAAE,WAAW,WAAW;AAC1B,QAAE,SAAS;AACX,QAAE,QAAQ;;AAGd,gBAAW,KAAK;AAEhB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAFb,QAAQ,UAAU,qBAAqB,4BAA4B,WAAW;OAEnD,CAAC;MACzC,SAAS;MACV;;IAEH,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,QAAI,KAAK;KAAE,KAAK;KAAG,cAAc;KAAS,UAAU,KAAK;KAAM,EAAE,oBAAoB,UAAU;AAC/F,aAAS,KAAK,KAAK,oBAAoB,UAAU;AACjD,eAAW,KAAK;AAChB,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,oBAAoB;MAAW,CAAC;KAChE,SAAS;KACV;aACO;AACR,QAAI,cAAe,cAAa,cAAc;AAC9C,YAAQ,oBAAoB,SAAS,cAAc;;;EAGxD;;AAKH,SAAS,gBAAgB,QAAwB;CAC/C,IAAI,OAAO,OAAO,MAAM;CACxB,MAAM,QAAQ,KAAK,MAAM,+CAA+C;AACxE,KAAI,MAAO,QAAO,MAAM,GAAG,MAAM;AACjC,QAAO;;AAGT,SAAS,cACP,QACA,SAC+C;CAC/C,MAAM,OAAO,OAAO,MAAM,MAAM;AAChC,KAAI,KAEF,QAAO;EAAE,QADM,QAAQ,KAAK,KACL,CAAC;EAAQ,QAAQ;EAAQ;AAElD,KAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAAO,MAAM,CACzC,OAAM,IAAI,MAAM,yCAAyC;AAE3D,QAAO;EAAE,QAAQ,gBAAgB,OAAO,OAAO;EAAE,QAAQ;EAAU;;AAGrE,SAAS,aAAa,WAAuC;CAC3D,MAAM,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,UAAU,GAAG,YAAY;AACpF,KAAI,KAAK,EAAG,QAAO;AACnB,QAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;;AAG9D,SAAS,cAAc,QAAiC,IAA+C;AAErG,MAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,IACtC,KAAI,OAAO,GAAG,OAAO,GAAI,QAAO,OAAO;;AAK3C,SAAS,cAAc,OAAwB;AAC7C,KAAI;AACF,SAAO,KAAK,UAAU,OAAO,MAAM,EAAE;SAC/B;AACN,SAAO,OAAO,MAAM"}

package/dist/src/agent/workflow/builtins/audit-repo.d.ts

@@ -5,5 +5,9 @@
  * in parallel, one per dimension (bugs / perf / security / tests / style);
  * phase 3 synthesises into a structured report. The script is kept readable so
  * users can copy it into `~/.xopc/workflows/` as a starting point.
+ *
+ * Args:
+ *   - scope: subdirectory to focus on (default '.')
+ *   - dimensions: subset of dimension keys, e.g. ['security', 'bugs']
  */
-export declare const AUDIT_REPO_SCRIPT = "export const meta = {\n  name: 'audit_repo',\n  description: 'Fan-out repository audit across multiple dimensions, then synthesize a structured report.',\n  whenToUse: 'User asks for a thorough / multi-dimension code review of the whole repo or a major subsystem.',\n  phases: [\n    { title: 'Inventory' },\n    { title: 'Review' },\n    { title: 'Synthesize' },\n  ],\n}\n\nconst DIMENSIONS = [\n  { key: 'bugs', focus: 'Correctness bugs, null-safety, error handling, race conditions, off-by-one, dead code.' },\n  { key: 'perf', focus: 'Performance issues, hot paths, N+1 patterns, accidental quadratic loops, sync I/O, missing caching.' },\n  { key: 'security', focus: 'Auth/authz, input validation, secret handling, injection sinks, unsafe deserialization, SSRF.' },\n  { key: 'tests', focus: 'Test coverage gaps, brittle tests, integration vs unit gaps, missing regression cases.' },\n  { key: 'style', focus: 'Inconsistent conventions, naming, unused exports, duplication, layering violations.' },\n]\n\nphase('Inventory')\nconst inventory = await agent(\n  'Produce a compact map of this repository: top-level layout, main modules, the 5\u201310 most important files, and any obvious entry points. Be terse and structured.',\n  { label: 'repo inventory' },\n)\n\nphase('Review')\nconst findings = await parallel(\n  DIMENSIONS.map((d) => () =>\n    agent(\n      'Review the repository through the ' + d.key + ' lens.\\n' +\n        'Focus: ' + d.focus + '\\n\\n' +\n        'Inventory for orientation:\\n' + inventory + '\\n\\n' +\n        'Return findings: file paths, line numbers when known, severity (low/med/high), a one-sentence why, a one-sentence fix.',\n      {\n        label: d.key + ' review',\n        schema: {\n          type: 'object',\n          properties: {\n            findings: {\n              type: 'array',\n              items: {\n                type: 'object',\n                properties: {\n                  file: { type: 'string' },\n                  line: { type: ['number', 'string'] },\n                  severity: { type: 'string', enum: ['low', 'med', 'high'] },\n                  title: { type: 'string' },\n                  fix: { type: 'string' },\n                },\n                required: ['file', 'severity', 'title', 'fix'],\n              },\n            },\n          },\n          required: ['findings'],\n        },\n      },\n    ),\n  ),\n)\n\nphase('Synthesize')\nconst live = findings.filter(Boolean)\nif (!live.length) {\n  return { ok: true, summary: 'No findings.', byDimension: {} }\n}\nconst byDimension = {}\nfor (let i = 0; i < DIMENSIONS.length; i++) {\n  byDimension[DIMENSIONS[i].key] = live[i]?.findings ?? []\n}\n\nconst summary = await agent(\n  'Synthesize a compact report from these per-dimension findings. Deduplicate near-identical items. ' +\n    'Order by severity (high \u2192 low). Cap at 20 entries. Return JSON.\\n\\n' +\n    JSON.stringify(byDimension, null, 2),\n  {\n    label: 'report synthesis',\n    schema: {\n      type: 'object',\n      properties: {\n        topFindings: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              dimension: { type: 'string' },\n              file: { type: 'string' },\n              severity: { type: 'string' },\n              title: { type: 'string' },\n              fix: { type: 'string' },\n            },\n            required: ['dimension', 'file', 'severity', 'title'],\n          },\n        },\n        summary: { type: 'string' },\n      },\n      required: ['topFindings', 'summary'],\n    },\n  },\n)\n\nreturn { ok: true, ...(summary ?? { topFindings: [], summary: 'synthesis failed' }), byDimension }\n";
+export declare const AUDIT_REPO_SCRIPT = "export const meta = {\n  name: 'audit_repo',\n  description: 'Fan-out repository audit across multiple dimensions, then synthesize a structured report.',\n  whenToUse: 'User asks for a thorough / multi-dimension code review of the whole repo or a major subsystem.',\n  tags: ['code-review', 'audit'],\n  estimatedAgents: { min: 7, max: 7 },\n  phases: [\n    { title: 'Inventory' },\n    { title: 'Review' },\n    { title: 'Synthesize' },\n  ],\n}\n\nconst READ_ONLY_TOOLS = ['read_file', 'grep', 'find', 'list_dir']\n\nconst scope = args && typeof args === 'object' && args.scope\n  ? String(args.scope)\n  : '.'\n\nconst ALL_DIMENSIONS = [\n  { key: 'bugs', focus: 'Correctness bugs, null-safety, error handling, race conditions, off-by-one, dead code.' },\n  { key: 'perf', focus: 'Performance issues, hot paths, N+1 patterns, accidental quadratic loops, sync I/O, missing caching.' },\n  { key: 'security', focus: 'Auth/authz, input validation, secret handling, injection sinks, unsafe deserialization, SSRF.' },\n  { key: 'tests', focus: 'Test coverage gaps, brittle tests, integration vs unit gaps, missing regression cases.' },\n  { key: 'style', focus: 'Inconsistent conventions, naming, unused exports, duplication, layering violations.' },\n]\n\nlet dimensions = ALL_DIMENSIONS\nif (args && typeof args === 'object' && Array.isArray(args.dimensions) && args.dimensions.length) {\n  const keys = new Set(args.dimensions.map((d) => String(d)))\n  dimensions = ALL_DIMENSIONS.filter((d) => keys.has(d.key))\n  if (!dimensions.length) dimensions = ALL_DIMENSIONS\n}\n\nphase('Inventory')\nconst inventory = await agent(\n  'Produce a compact map of this repository scope: ' + scope + '. ' +\n    'Cover layout, main modules, the 5\u201310 most important files, and obvious entry points. Be terse and structured.',\n  { label: 'repo inventory', toolset: READ_ONLY_TOOLS },\n)\n\nphase('Review')\nconst findings = await parallel(\n  dimensions.map((d) => () =>\n    agent(\n      'Review scope \"' + scope + '\" through the ' + d.key + ' lens.\\n' +\n        'Focus: ' + d.focus + '\\n\\n' +\n        'Inventory for orientation:\\n' + inventory + '\\n\\n' +\n        'Return findings: file paths, line numbers when known, severity (low/med/high), a one-sentence why, a one-sentence fix.',\n      {\n        label: d.key + ' review',\n        toolset: READ_ONLY_TOOLS,\n        schema: {\n          type: 'object',\n          properties: {\n            findings: {\n              type: 'array',\n              items: {\n                type: 'object',\n                properties: {\n                  file: { type: 'string' },\n                  line: { type: ['number', 'string'] },\n                  severity: { type: 'string', enum: ['low', 'med', 'high'] },\n                  title: { type: 'string' },\n                  fix: { type: 'string' },\n                },\n                required: ['file', 'severity', 'title', 'fix'],\n              },\n            },\n          },\n          required: ['findings'],\n        },\n      },\n    ),\n  ),\n)\n\nphase('Synthesize')\nconst live = findings.filter(Boolean)\nif (!live.length) {\n  return { ok: true, scope, summary: 'No findings.', byDimension: {}, priorityActions: [] }\n}\nconst byDimension = {}\nfor (let i = 0; i < dimensions.length; i++) {\n  byDimension[dimensions[i].key] = live[i]?.findings ?? []\n}\n\nconst summary = await agent(\n  'Synthesize a compact report from these per-dimension findings. Deduplicate near-identical items. ' +\n    'Order by severity (high \u2192 low). Cap topFindings at 20. ' +\n    'Also return priorityActions: the top 5 fixes ranked by impact, each with effort (S|M|L).\\n\\n' +\n    JSON.stringify(byDimension, null, 2),\n  {\n    label: 'report synthesis',\n    schema: {\n      type: 'object',\n      properties: {\n        topFindings: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              dimension: { type: 'string' },\n              file: { type: 'string' },\n              severity: { type: 'string' },\n              title: { type: 'string' },\n              fix: { type: 'string' },\n            },\n            required: ['dimension', 'file', 'severity', 'title'],\n          },\n        },\n        priorityActions: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              file: { type: 'string' },\n              severity: { type: 'string' },\n              title: { type: 'string' },\n              effort: { type: 'string', enum: ['S', 'M', 'L'] },\n            },\n            required: ['file', 'severity', 'title', 'effort'],\n          },\n        },\n        summary: { type: 'string' },\n      },\n      required: ['topFindings', 'priorityActions', 'summary'],\n    },\n  },\n)\n\nreturn {\n  ok: true,\n  scope,\n  dimensions: dimensions.map((d) => d.key),\n  ...(summary ?? { topFindings: [], priorityActions: [], summary: 'synthesis failed' }),\n  byDimension,\n}\n";

package/dist/src/agent/workflow/builtins/audit-repo.js

@@ -6,11 +6,17 @@
 * in parallel, one per dimension (bugs / perf / security / tests / style);
 * phase 3 synthesises into a structured report. The script is kept readable so
 * users can copy it into `~/.xopc/workflows/` as a starting point.
+*
+* Args:
+*   - scope: subdirectory to focus on (default '.')
+*   - dimensions: subset of dimension keys, e.g. ['security', 'bugs']
 */
 const AUDIT_REPO_SCRIPT = `export const meta = {
   name: 'audit_repo',
   description: 'Fan-out repository audit across multiple dimensions, then synthesize a structured report.',
   whenToUse: 'User asks for a thorough / multi-dimension code review of the whole repo or a major subsystem.',
+  tags: ['code-review', 'audit'],
+  estimatedAgents: { min: 7, max: 7 },
   phases: [
     { title: 'Inventory' },
     { title: 'Review' },
@@ -18,7 +24,13 @@ const AUDIT_REPO_SCRIPT = `export const meta = {
   ],
 }
 
-const DIMENSIONS = [
+const READ_ONLY_TOOLS = ['read_file', 'grep', 'find', 'list_dir']
+
+const scope = args && typeof args === 'object' && args.scope
+  ? String(args.scope)
+  : '.'
+
+const ALL_DIMENSIONS = [
   { key: 'bugs', focus: 'Correctness bugs, null-safety, error handling, race conditions, off-by-one, dead code.' },
   { key: 'perf', focus: 'Performance issues, hot paths, N+1 patterns, accidental quadratic loops, sync I/O, missing caching.' },
   { key: 'security', focus: 'Auth/authz, input validation, secret handling, injection sinks, unsafe deserialization, SSRF.' },
@@ -26,22 +38,31 @@ const DIMENSIONS = [
   { key: 'style', focus: 'Inconsistent conventions, naming, unused exports, duplication, layering violations.' },
 ]
 
+let dimensions = ALL_DIMENSIONS
+if (args && typeof args === 'object' && Array.isArray(args.dimensions) && args.dimensions.length) {
+  const keys = new Set(args.dimensions.map((d) => String(d)))
+  dimensions = ALL_DIMENSIONS.filter((d) => keys.has(d.key))
+  if (!dimensions.length) dimensions = ALL_DIMENSIONS
+}
+
 phase('Inventory')
 const inventory = await agent(
-  'Produce a compact map of this repository: top-level layout, main modules, the 5–10 most important files, and any obvious entry points. Be terse and structured.',
-  { label: 'repo inventory' },
+  'Produce a compact map of this repository scope: ' + scope + '. ' +
+    'Cover layout, main modules, the 5–10 most important files, and obvious entry points. Be terse and structured.',
+  { label: 'repo inventory', toolset: READ_ONLY_TOOLS },
 )
 
 phase('Review')
 const findings = await parallel(
-  DIMENSIONS.map((d) => () =>
+  dimensions.map((d) => () =>
     agent(
-      'Review the repository through the ' + d.key + ' lens.\\n' +
+      'Review scope "' + scope + '" through the ' + d.key + ' lens.\\n' +
         'Focus: ' + d.focus + '\\n\\n' +
         'Inventory for orientation:\\n' + inventory + '\\n\\n' +
         'Return findings: file paths, line numbers when known, severity (low/med/high), a one-sentence why, a one-sentence fix.',
       {
         label: d.key + ' review',
+        toolset: READ_ONLY_TOOLS,
         schema: {
           type: 'object',
           properties: {
@@ -70,16 +91,17 @@ const findings = await parallel(
 phase('Synthesize')
 const live = findings.filter(Boolean)
 if (!live.length) {
-  return { ok: true, summary: 'No findings.', byDimension: {} }
+  return { ok: true, scope, summary: 'No findings.', byDimension: {}, priorityActions: [] }
 }
 const byDimension = {}
-for (let i = 0; i < DIMENSIONS.length; i++) {
-  byDimension[DIMENSIONS[i].key] = live[i]?.findings ?? []
+for (let i = 0; i < dimensions.length; i++) {
+  byDimension[dimensions[i].key] = live[i]?.findings ?? []
 }
 
 const summary = await agent(
   'Synthesize a compact report from these per-dimension findings. Deduplicate near-identical items. ' +
-    'Order by severity (high → low). Cap at 20 entries. Return JSON.\\n\\n' +
+    'Order by severity (high → low). Cap topFindings at 20. ' +
+    'Also return priorityActions: the top 5 fixes ranked by impact, each with effort (S|M|L).\\n\\n' +
     JSON.stringify(byDimension, null, 2),
   {
     label: 'report synthesis',
@@ -100,14 +122,33 @@ const summary = await agent(
             required: ['dimension', 'file', 'severity', 'title'],
           },
         },
+        priorityActions: {
+          type: 'array',
+          items: {
+            type: 'object',
+            properties: {
+              file: { type: 'string' },
+              severity: { type: 'string' },
+              title: { type: 'string' },
+              effort: { type: 'string', enum: ['S', 'M', 'L'] },
+            },
+            required: ['file', 'severity', 'title', 'effort'],
+          },
+        },
         summary: { type: 'string' },
       },
-      required: ['topFindings', 'summary'],
+      required: ['topFindings', 'priorityActions', 'summary'],
     },
   },
 )
 
-return { ok: true, ...(summary ?? { topFindings: [], summary: 'synthesis failed' }), byDimension }
+return {
+  ok: true,
+  scope,
+  dimensions: dimensions.map((d) => d.key),
+  ...(summary ?? { topFindings: [], priorityActions: [], summary: 'synthesis failed' }),
+  byDimension,
+}
 `;
 //#endregion
 export { AUDIT_REPO_SCRIPT };

package/dist/src/agent/workflow/builtins/audit-repo.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-repo.js","names":[],"sources":["../../../../../src/agent/workflow/builtins/audit-repo.ts"],"sourcesContent":["/**\n * Built-in workflow: `audit_repo`\n *\n * Fan-out repo audit. Phase 1 inventories the repo; phase 2 spawns N reviewers\n * in parallel, one per dimension (bugs / perf / security / tests / style);\n * phase 3 synthesises into a structured report. The script is kept readable so\n * users can copy it into `~/.xopc/workflows/` as a starting point.\n */\n\nexport const AUDIT_REPO_SCRIPT = `export const meta = {\n  name: 'audit_repo',\n  description: 'Fan-out repository audit across multiple dimensions, then synthesize a structured report.',\n  whenToUse: 'User asks for a thorough / multi-dimension code review of the whole repo or a major subsystem.',\n  phases: [\n    { title: 'Inventory' },\n    { title: 'Review' },\n    { title: 'Synthesize' },\n  ],\n}\n\nconst DIMENSIONS = [\n  { key: 'bugs', focus: 'Correctness bugs, null-safety, error handling, race conditions, off-by-one, dead code.' },\n  { key: 'perf', focus: 'Performance issues, hot paths, N+1 patterns, accidental quadratic loops, sync I/O, missing caching.' },\n  { key: 'security', focus: 'Auth/authz, input validation, secret handling, injection sinks, unsafe deserialization, SSRF.' },\n  { key: 'tests', focus: 'Test coverage gaps, brittle tests, integration vs unit gaps, missing regression cases.' },\n  { key: 'style', focus: 'Inconsistent conventions, naming, unused exports, duplication, layering violations.' },\n]\n\nphase('Inventory')\nconst inventory = await agent(\n  'Produce a compact map of this repository: top-level layout, main modules, the 5–10 most important files, and any obvious entry points. Be terse and structured.',\n  { label: 'repo inventory' },\n)\n\nphase('Review')\nconst findings = await parallel(\n  DIMENSIONS.map((d) => () =>\n    agent(\n      'Review the repository through the ' + d.key + ' lens.\\\\n' +\n        'Focus: ' + d.focus + '\\\\n\\\\n' +\n        'Inventory for orientation:\\\\n' + inventory + '\\\\n\\\\n' +\n        'Return findings: file paths, line numbers when known, severity (low/med/high), a one-sentence why, a one-sentence fix.',\n      {\n        label: d.key + ' review',\n        schema: {\n          type: 'object',\n          properties: {\n            findings: {\n              type: 'array',\n              items: {\n                type: 'object',\n                properties: {\n                  file: { type: 'string' },\n                  line: { type: ['number', 'string'] },\n                  severity: { type: 'string', enum: ['low', 'med', 'high'] },\n                  title: { type: 'string' },\n                  fix: { type: 'string' },\n                },\n                required: ['file', 'severity', 'title', 'fix'],\n              },\n            },\n          },\n          required: ['findings'],\n        },\n      },\n    ),\n  ),\n)\n\nphase('Synthesize')\nconst live = findings.filter(Boolean)\nif (!live.length) {\n  return { ok: true, summary: 'No findings.', byDimension: {} }\n}\nconst byDimension = {}\nfor (let i = 0; i < DIMENSIONS.length; i++) {\n  byDimension[DIMENSIONS[i].key] = live[i]?.findings ?? []\n}\n\nconst summary = await agent(\n  'Synthesize a compact report from these per-dimension findings. Deduplicate near-identical items. ' +\n    'Order by severity (high → low). Cap at 20 entries. Return JSON.\\\\n\\\\n' +\n    JSON.stringify(byDimension, null, 2),\n  {\n    label: 'report synthesis',\n    schema: {\n      type: 'object',\n      properties: {\n        topFindings: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              dimension: { type: 'string' },\n              file: { type: 'string' },\n              severity: { type: 'string' },\n              title: { type: 'string' },\n              fix: { type: 'string' },\n            },\n            required: ['dimension', 'file', 'severity', 'title'],\n          },\n        },\n        summary: { type: 'string' },\n      },\n      required: ['topFindings', 'summary'],\n    },\n  },\n)\n\nreturn { ok: true, ...(summary ?? { topFindings: [], summary: 'synthesis failed' }), byDimension }\n`\n"],"mappings":";;;;;;;;;AASA,MAAa,oBAAoB"}
+{"version":3,"file":"audit-repo.js","names":[],"sources":["../../../../../src/agent/workflow/builtins/audit-repo.ts"],"sourcesContent":["/**\n * Built-in workflow: `audit_repo`\n *\n * Fan-out repo audit. Phase 1 inventories the repo; phase 2 spawns N reviewers\n * in parallel, one per dimension (bugs / perf / security / tests / style);\n * phase 3 synthesises into a structured report. The script is kept readable so\n * users can copy it into `~/.xopc/workflows/` as a starting point.\n *\n * Args:\n *   - scope: subdirectory to focus on (default '.')\n *   - dimensions: subset of dimension keys, e.g. ['security', 'bugs']\n */\n\nexport const AUDIT_REPO_SCRIPT = `export const meta = {\n  name: 'audit_repo',\n  description: 'Fan-out repository audit across multiple dimensions, then synthesize a structured report.',\n  whenToUse: 'User asks for a thorough / multi-dimension code review of the whole repo or a major subsystem.',\n  tags: ['code-review', 'audit'],\n  estimatedAgents: { min: 7, max: 7 },\n  phases: [\n    { title: 'Inventory' },\n    { title: 'Review' },\n    { title: 'Synthesize' },\n  ],\n}\n\nconst READ_ONLY_TOOLS = ['read_file', 'grep', 'find', 'list_dir']\n\nconst scope = args && typeof args === 'object' && args.scope\n  ? String(args.scope)\n  : '.'\n\nconst ALL_DIMENSIONS = [\n  { key: 'bugs', focus: 'Correctness bugs, null-safety, error handling, race conditions, off-by-one, dead code.' },\n  { key: 'perf', focus: 'Performance issues, hot paths, N+1 patterns, accidental quadratic loops, sync I/O, missing caching.' },\n  { key: 'security', focus: 'Auth/authz, input validation, secret handling, injection sinks, unsafe deserialization, SSRF.' },\n  { key: 'tests', focus: 'Test coverage gaps, brittle tests, integration vs unit gaps, missing regression cases.' },\n  { key: 'style', focus: 'Inconsistent conventions, naming, unused exports, duplication, layering violations.' },\n]\n\nlet dimensions = ALL_DIMENSIONS\nif (args && typeof args === 'object' && Array.isArray(args.dimensions) && args.dimensions.length) {\n  const keys = new Set(args.dimensions.map((d) => String(d)))\n  dimensions = ALL_DIMENSIONS.filter((d) => keys.has(d.key))\n  if (!dimensions.length) dimensions = ALL_DIMENSIONS\n}\n\nphase('Inventory')\nconst inventory = await agent(\n  'Produce a compact map of this repository scope: ' + scope + '. ' +\n    'Cover layout, main modules, the 5–10 most important files, and obvious entry points. Be terse and structured.',\n  { label: 'repo inventory', toolset: READ_ONLY_TOOLS },\n)\n\nphase('Review')\nconst findings = await parallel(\n  dimensions.map((d) => () =>\n    agent(\n      'Review scope \"' + scope + '\" through the ' + d.key + ' lens.\\\\n' +\n        'Focus: ' + d.focus + '\\\\n\\\\n' +\n        'Inventory for orientation:\\\\n' + inventory + '\\\\n\\\\n' +\n        'Return findings: file paths, line numbers when known, severity (low/med/high), a one-sentence why, a one-sentence fix.',\n      {\n        label: d.key + ' review',\n        toolset: READ_ONLY_TOOLS,\n        schema: {\n          type: 'object',\n          properties: {\n            findings: {\n              type: 'array',\n              items: {\n                type: 'object',\n                properties: {\n                  file: { type: 'string' },\n                  line: { type: ['number', 'string'] },\n                  severity: { type: 'string', enum: ['low', 'med', 'high'] },\n                  title: { type: 'string' },\n                  fix: { type: 'string' },\n                },\n                required: ['file', 'severity', 'title', 'fix'],\n              },\n            },\n          },\n          required: ['findings'],\n        },\n      },\n    ),\n  ),\n)\n\nphase('Synthesize')\nconst live = findings.filter(Boolean)\nif (!live.length) {\n  return { ok: true, scope, summary: 'No findings.', byDimension: {}, priorityActions: [] }\n}\nconst byDimension = {}\nfor (let i = 0; i < dimensions.length; i++) {\n  byDimension[dimensions[i].key] = live[i]?.findings ?? []\n}\n\nconst summary = await agent(\n  'Synthesize a compact report from these per-dimension findings. Deduplicate near-identical items. ' +\n    'Order by severity (high → low). Cap topFindings at 20. ' +\n    'Also return priorityActions: the top 5 fixes ranked by impact, each with effort (S|M|L).\\\\n\\\\n' +\n    JSON.stringify(byDimension, null, 2),\n  {\n    label: 'report synthesis',\n    schema: {\n      type: 'object',\n      properties: {\n        topFindings: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              dimension: { type: 'string' },\n              file: { type: 'string' },\n              severity: { type: 'string' },\n              title: { type: 'string' },\n              fix: { type: 'string' },\n            },\n            required: ['dimension', 'file', 'severity', 'title'],\n          },\n        },\n        priorityActions: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              file: { type: 'string' },\n              severity: { type: 'string' },\n              title: { type: 'string' },\n              effort: { type: 'string', enum: ['S', 'M', 'L'] },\n            },\n            required: ['file', 'severity', 'title', 'effort'],\n          },\n        },\n        summary: { type: 'string' },\n      },\n      required: ['topFindings', 'priorityActions', 'summary'],\n    },\n  },\n)\n\nreturn {\n  ok: true,\n  scope,\n  dimensions: dimensions.map((d) => d.key),\n  ...(summary ?? { topFindings: [], priorityActions: [], summary: 'synthesis failed' }),\n  byDimension,\n}\n`\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAa,oBAAoB"}

package/dist/src/agent/workflow/builtins/debug-incident.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Built-in workflow: `debug_incident`
+ *
+ * Triage an error, stack trace, or log snippet. Parses the signal, fans out
+ * parallel hypotheses (config, race, dependency, data, environment), then
+ * ranks likely root causes with verification steps.
+ *
+ * Args:
+ *   - error: error message or stack trace
+ *   - logs: optional log excerpt
+ *   - context: optional extra context (what changed, when it started)
+ */
+export declare const DEBUG_INCIDENT_SCRIPT = "export const meta = {\n  name: 'debug_incident',\n  description: 'Triage an error or log snippet with parallel hypotheses and ranked root-cause analysis.',\n  whenToUse: 'User reports a bug, crash, error message, or unexpected behavior and wants systematic triage.',\n  tags: ['debug', 'incident', 'troubleshooting'],\n  estimatedAgents: { min: 7, max: 7 },\n  phases: [\n    { title: 'Triage' },\n    { title: 'Hypotheses' },\n    { title: 'Rank' },\n  ],\n}\n\nconst READ_TOOLS = ['read_file', 'grep', 'find', 'list_dir', 'shell']\n\nconst error = args && typeof args === 'object' && args.error\n  ? String(args.error)\n  : 'Infer the primary error from the most recent user message or conversation context.'\n\nconst logs = args && typeof args === 'object' && args.logs\n  ? String(args.logs)\n  : ''\n\nconst context = args && typeof args === 'object' && args.context\n  ? String(args.context)\n  : ''\n\nphase('Triage')\nconst triage = await agent(\n  'Parse this incident signal. Extract: error type, likely subsystem, affected files/modules if identifiable, and 2\u20133 key facts from logs.\\n\\n' +\n    'ERROR:\\n' + error + '\\n\\n' +\n    (logs ? 'LOGS:\\n' + logs + '\\n\\n' : '') +\n    (context ? 'CONTEXT:\\n' + context + '\\n\\n' : '') +\n    'Use read/grep tools to locate relevant code if the workspace may contain the failing path.',\n  {\n    label: 'incident triage',\n    toolset: READ_TOOLS,\n    schema: {\n      type: 'object',\n      properties: {\n        errorType: { type: 'string' },\n        subsystem: { type: 'string' },\n        affectedPaths: { type: 'array', items: { type: 'string' } },\n        keyFacts: { type: 'array', items: { type: 'string' } },\n      },\n      required: ['errorType', 'keyFacts'],\n    },\n  },\n)\n\nconst HYPOTHESES = [\n  { key: 'config', angle: 'Misconfiguration, missing env vars, wrong defaults, feature flags, stale config cache.' },\n  { key: 'race', angle: 'Concurrency, timing, ordering, partial failure under load, missing locks or awaits.' },\n  { key: 'dependency', angle: 'Version mismatch, breaking upstream change, network/API failure, timeout, auth expiry.' },\n  { key: 'data', angle: 'Bad input, schema drift, null/empty edge case, corrupt state, migration gap.' },\n  { key: 'environment', angle: 'OS, permissions, disk, memory, container/network isolation, platform-specific behavior.' },\n]\n\nphase('Hypotheses')\nconst hypothesisReports = await parallel(\n  HYPOTHESES.map((h) => () =>\n    agent(\n      'Evaluate whether this hypothesis explains the incident. Search the codebase for supporting or refuting evidence.\\n\\n' +\n        'HYPOTHESIS: ' + h.key + ' \u2014 ' + h.angle + '\\n\\n' +\n        'TRIAGE:\\n' + JSON.stringify(triage, null, 2) + '\\n\\n' +\n        'ERROR:\\n' + error + '\\n\\n' +\n        (logs ? 'LOGS:\\n' + logs + '\\n\\n' : '') +\n        'Return: likelihood (low/med/high), evidence (file paths + brief notes), and one verification step.',\n      {\n        label: h.key + ' hypothesis',\n        toolset: READ_TOOLS,\n        schema: {\n          type: 'object',\n          properties: {\n            likelihood: { type: 'string', enum: ['low', 'med', 'high'] },\n            evidence: {\n              type: 'array',\n              items: {\n                type: 'object',\n                properties: {\n                  path: { type: 'string' },\n                  note: { type: 'string' },\n                },\n                required: ['path', 'note'],\n              },\n            },\n            verificationStep: { type: 'string' },\n          },\n          required: ['likelihood', 'evidence', 'verificationStep'],\n        },\n      },\n    ),\n  ),\n)\n\nphase('Rank')\nconst live = hypothesisReports.filter(Boolean)\nconst byHypothesis = {}\nfor (let i = 0; i < HYPOTHESES.length; i++) {\n  byHypothesis[HYPOTHESES[i].key] = live[i] ?? null\n}\n\nconst ranking = await agent(\n  'Rank root causes by likelihood. Pick the top 3 with confidence and concrete next steps to confirm or fix.\\n\\n' +\n    JSON.stringify({ triage, byHypothesis }, null, 2),\n  {\n    label: 'root cause ranking',\n    schema: {\n      type: 'object',\n      properties: {\n        topCauses: {\n          type: 'array',\n          items: {\n            type: 'object',\n            properties: {\n              hypothesis: { type: 'string' },\n              likelihood: { type: 'string', enum: ['low', 'med', 'high'] },\n              summary: { type: 'string' },\n              nextStep: { type: 'string' },\n            },\n            required: ['hypothesis', 'likelihood', 'summary', 'nextStep'],\n          },\n        },\n        immediateActions: { type: 'array', items: { type: 'string' } },\n        summary: { type: 'string' },\n      },\n      required: ['topCauses', 'summary'],\n    },\n  },\n)\n\nreturn {\n  ok: true,\n  triage,\n  ...(ranking ?? { topCauses: [], summary: 'ranking failed', immediateActions: [] }),\n  byHypothesis,\n}\n";