@yuaone/core 0.9.43 → 1.0.0

package/dist/repo-capability-profile.js

@@ -0,0 +1,113 @@
+/**
+ * @module repo-capability-profile
+ * @description One-time scan of repository capabilities.
+ * Detects: package manager, build tool, test framework, monorepo, language, generated paths.
+ * Cached in .yuan/cache/repo-capability-profile.json.
+ * NO LLM, filesystem-based detection.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+export function scanRepoCapability(projectPath) {
+    const has = (f) => existsSync(join(projectPath, f));
+    const read = (f) => { try {
+        return readFileSync(join(projectPath, f), "utf-8");
+    }
+    catch {
+        return "";
+    } };
+    // Package manager
+    const packageManager = has("pnpm-lock.yaml") ? "pnpm"
+        : has("yarn.lock") ? "yarn"
+            : has("bun.lockb") ? "bun"
+                : has("package-lock.json") ? "npm"
+                    : "unknown";
+    // Monorepo detection
+    const hasPnpmWorkspace = has("pnpm-workspace.yaml");
+    const hasLernaJson = has("lerna.json");
+    let packages = [];
+    let repoType = "single";
+    if (hasPnpmWorkspace || hasLernaJson) {
+        repoType = "monorepo";
+        try {
+            const dirs = readdirSync(join(projectPath, "packages")).filter(d => {
+                try {
+                    return statSync(join(projectPath, "packages", d)).isDirectory();
+                }
+                catch {
+                    return false;
+                }
+            });
+            packages = dirs;
+        }
+        catch { /* no packages dir */ }
+    }
+    // Build tool
+    const buildTool = has("webpack.config.js") || has("webpack.config.ts") ? "webpack"
+        : has("vite.config.ts") || has("vite.config.js") ? "vite"
+            : has("esbuild.config.js") ? "esbuild"
+                : has("rollup.config.js") ? "rollup"
+                    : has("tsconfig.json") ? "tsc"
+                        : "unknown";
+    // Test framework
+    const testFramework = has("vitest.config.ts") || has("vitest.config.js") ? "vitest"
+        : has("jest.config.ts") || has("jest.config.js") || has("jest.config.json") ? "jest"
+            : has(".mocharc.yml") || has(".mocharc.json") ? "mocha"
+                : has("pytest.ini") || has("setup.py") ? "pytest"
+                    : "unknown";
+    // Language
+    const pkgJson = read("package.json");
+    const hasTS = has("tsconfig.json");
+    const primaryLanguage = hasTS ? "typescript" : pkgJson ? "javascript" : has("Cargo.toml") ? "rust" : has("go.mod") ? "go" : has("requirements.txt") ? "python" : "unknown";
+    // Strict mode
+    let hasStrictMode = false;
+    if (hasTS) {
+        const tsconfig = read("tsconfig.json");
+        hasStrictMode = /"strict"\s*:\s*true/.test(tsconfig);
+    }
+    // Generated paths (don't modify these)
+    const generatedPaths = ["dist/", "build/", ".next/", "node_modules/", "__pycache__/", "target/", ".output/"]
+        .filter(p => has(p));
+    // Protected files
+    const protectedFiles = ["package.json", "tsconfig.json", "pnpm-lock.yaml", "package-lock.json", ".env", ".gitignore"]
+        .filter(p => has(p));
+    // Speed estimation (heuristic)
+    const buildSpeed = buildTool === "esbuild" || buildTool === "vite" ? "fast" : buildTool === "webpack" ? "slow" : "normal";
+    const testSpeed = testFramework === "vitest" ? "fast" : testFramework === "jest" ? "normal" : "normal";
+    // Detect library vs CLI vs fullstack
+    if (repoType === "single") {
+        try {
+            const pkg = pkgJson ? JSON.parse(pkgJson) : {};
+            if (pkg.bin)
+                repoType = "cli";
+            else if (pkg.main || pkg.module || pkg.types)
+                repoType = "library";
+            else if (has("src/app") || has("src/pages") || has("app/"))
+                repoType = "fullstack";
+        }
+        catch { /* invalid package.json */ }
+    }
+    return {
+        repoType, packages, packageManager, buildTool, testFramework,
+        primaryLanguage, hasStrictMode, generatedPaths, protectedFiles,
+        buildSpeed, testSpeed, scannedAt: Date.now(),
+    };
+}
+export function loadOrScanProfile(projectPath) {
+    const cachePath = join(projectPath, ".yuan", "cache", "repo-capability-profile.json");
+    try {
+        const cached = JSON.parse(readFileSync(cachePath, "utf-8"));
+        // Invalidate if older than 1 hour
+        if (Date.now() - cached.scannedAt < 3600_000)
+            return cached;
+    }
+    catch { /* no cache or invalid */ }
+    const profile = scanRepoCapability(projectPath);
+    // Save cache
+    try {
+        mkdirSync(join(projectPath, ".yuan", "cache"), { recursive: true });
+        writeFileSync(cachePath, JSON.stringify(profile, null, 2));
+    }
+    catch { /* non-fatal */ }
+    return profile;
+}
+//# sourceMappingURL=repo-capability-profile.js.map

package/dist/repo-capability-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-capability-profile.js","sourceRoot":"","sources":["../src/repo-capability-profile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAiBjC,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAEzH,kBAAkB;IAClB,MAAM,cAAc,GAA4C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM;QAC5F,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM;YAC3B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK;gBAC1B,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAAK;oBAClC,CAAC,CAAC,SAAS,CAAC;IAEd,qBAAqB;IACrB,MAAM,gBAAgB,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAsC,QAAQ,CAAC;IAE3D,IAAI,gBAAgB,IAAI,YAAY,EAAE,CAAC;QACrC,QAAQ,GAAG,UAAU,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACjE,IAAI,CAAC;oBAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;YAClG,CAAC,CAAC,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACnC,CAAC;IAED,aAAa;IACb,MAAM,SAAS,GAAuC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QACpH,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM;YACzD,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;gBACtC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ;oBACpC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK;wBAC9B,CAAC,CAAC,SAAS,CAAC;IAEd,iBAAiB;IACjB,MAAM,aAAa,GAA2C,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ;QACzH,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM;YACpF,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO;gBACvD,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ;oBACjD,CAAC,CAAC,SAAS,CAAC;IAEd,WAAW;IACX,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3K,cAAc;IACd,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;QACvC,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,uCAAuC;IACvC,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC;SACzG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvB,kBAAkB;IAClB,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,CAAC;SAClH,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvB,+BAA+B;IAC/B,MAAM,UAAU,GAAwC,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/J,MAAM,SAAS,GAAuC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE3I,qCAAqC;IACrC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,CAAC,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;iBACzB,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK;gBAAE,QAAQ,GAAG,SAAS,CAAC;iBAC9D,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC;gBAAE,QAAQ,GAAG,WAAW,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa;QAC5D,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc;QAC9D,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA0B,CAAC;QACrF,kCAAkC;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,QAAQ;YAAE,OAAO,MAAM,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAEhD,aAAa;IACb,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/security-gate.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @module security-gate
+ * @description Deterministic security gate for tool inputs.
+ * Prevents shell injection, dangerous commands, and credential leaks.
+ * NO LLM, pure pattern matching.
+ *
+ * Unlike security.ts (which provides general blocked-executable lists and
+ * path validators), this module provides pre-execution checks for tool
+ * call arguments — catching injection patterns, reverse shells, and
+ * credential leaks that slip past simple executable blocking.
+ */
+export type SecurityVerdict = "ALLOW" | "WARN" | "BLOCK";
+export interface SecurityCheckResult {
+    verdict: SecurityVerdict;
+    reason?: string;
+    pattern?: string;
+}
+/**
+ * Check a shell command string against dangerous patterns.
+ * Returns BLOCK if a dangerous pattern is matched, ALLOW otherwise.
+ */
+export declare function checkShellSecurity(command: string): SecurityCheckResult;
+/**
+ * Check a file path (and optional content) against dangerous patterns.
+ * Returns WARN for dangerous paths or credential-containing content,
+ * ALLOW otherwise. File operations are WARN (not BLOCK) to allow
+ * the agent to proceed with caution when necessary.
+ */
+export declare function checkFileSecurity(filePath: string, content?: string): SecurityCheckResult;
+/**
+ * Main entry: check any tool call for security violations.
+ *
+ * - shell_exec / bash → check command against shell block patterns
+ * - file_write / file_edit → check path + content against file/credential patterns
+ * - git_ops → synthesize git command and check against shell block patterns
+ * - All other tools → ALLOW
+ */
+export declare function securityCheck(toolName: string, args: Record<string, unknown>): SecurityCheckResult;
+//# sourceMappingURL=security-gate.d.ts.map

package/dist/security-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-gate.d.ts","sourceRoot":"","sources":["../src/security-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA0DD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAOvE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAgBzF;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAgBlG"}

package/dist/security-gate.js

@@ -0,0 +1,121 @@
+/**
+ * @module security-gate
+ * @description Deterministic security gate for tool inputs.
+ * Prevents shell injection, dangerous commands, and credential leaks.
+ * NO LLM, pure pattern matching.
+ *
+ * Unlike security.ts (which provides general blocked-executable lists and
+ * path validators), this module provides pre-execution checks for tool
+ * call arguments — catching injection patterns, reverse shells, and
+ * credential leaks that slip past simple executable blocking.
+ */
+// ─── Dangerous shell patterns ──────────────────────────────────────────────
+const SHELL_BLOCK_PATTERNS = [
+    // Destructive commands
+    { pattern: /\brm\s+(-rf|-fr|--force)\b/i, reason: "Destructive recursive delete" },
+    { pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f/i, reason: "Destructive recursive delete" },
+    { pattern: /\bmkfs\b/i, reason: "Filesystem format" },
+    { pattern: /\bdd\s+if=/i, reason: "Direct disk write" },
+    // Network exfiltration
+    { pattern: /\bcurl\b.*\|\s*\b(sh|bash|zsh)\b/i, reason: "Remote code execution via pipe" },
+    { pattern: /\bwget\b.*\|\s*\b(sh|bash|zsh)\b/i, reason: "Remote code execution via pipe" },
+    { pattern: /\bcurl\b.*-o\s*\//, reason: "Download to system path" },
+    // Reverse shells
+    { pattern: /\bnc\b.*-[elp]/i, reason: "Netcat listener (possible reverse shell)" },
+    { pattern: /\/dev\/tcp\//i, reason: "Bash TCP redirect (reverse shell)" },
+    { pattern: /\bsocat\b/i, reason: "Socket relay (possible reverse shell)" },
+    // Privilege escalation
+    { pattern: /\bsudo\b/i, reason: "Privilege escalation" },
+    { pattern: /\bchmod\s+[0-7]*7[0-7]*\b/i, reason: "World-writable permission" },
+    { pattern: /\bchown\b.*root/i, reason: "Ownership change to root" },
+    // Git destructive
+    { pattern: /\bgit\s+push\s+.*--force\b/i, reason: "Force push" },
+    { pattern: /\bgit\s+reset\s+--hard\b/i, reason: "Hard reset" },
+    { pattern: /\bgit\s+clean\s+-[a-zA-Z]*f/i, reason: "Force clean" },
+    // Environment manipulation
+    { pattern: /\bexport\s+.*(?:PATH|LD_LIBRARY|LD_PRELOAD)\s*=/i, reason: "Environment path manipulation" },
+    // SQL injection in shell
+    { pattern: /;\s*(DROP|DELETE|TRUNCATE|ALTER)\s/i, reason: "SQL injection pattern" },
+];
+// ─── Dangerous file paths ──────────────────────────────────────────────────
+const FILE_BLOCK_PATTERNS = [
+    { pattern: /^\/etc\//i, reason: "System config modification" },
+    { pattern: /^\/usr\//i, reason: "System binary modification" },
+    { pattern: /^\/var\/log\//i, reason: "System log modification" },
+    { pattern: /^\/root\//i, reason: "Root home modification" },
+    { pattern: /^\/(bin|sbin)\//i, reason: "System binary modification" },
+    { pattern: /\.ssh\//i, reason: "SSH key modification" },
+    { pattern: /\.env$/i, reason: "Environment file (may contain secrets)" },
+    { pattern: /\.npmrc$/i, reason: "NPM config (may contain tokens)" },
+];
+// ─── Credential patterns in content ────────────────────────────────────────
+const CREDENTIAL_PATTERNS = [
+    { pattern: /(?:api[_-]?key|apikey|secret[_-]?key|auth[_-]?token|access[_-]?token)\s*[:=]\s*['"]?[a-zA-Z0-9_\-]{20,}/i, reason: "API key/token detected" },
+    { pattern: /(?:password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{8,}/i, reason: "Password detected" },
+    { pattern: /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----/i, reason: "Private key detected" },
+    { pattern: /ghp_[a-zA-Z0-9]{36}/i, reason: "GitHub personal access token" },
+    { pattern: /sk-[a-zA-Z0-9]{48,}/i, reason: "OpenAI/Anthropic API key" },
+    { pattern: /AIza[a-zA-Z0-9_\-]{35}/i, reason: "Google API key" },
+];
+// ─── Check functions ───────────────────────────────────────────────────────
+/**
+ * Check a shell command string against dangerous patterns.
+ * Returns BLOCK if a dangerous pattern is matched, ALLOW otherwise.
+ */
+export function checkShellSecurity(command) {
+    for (const { pattern, reason } of SHELL_BLOCK_PATTERNS) {
+        if (pattern.test(command)) {
+            return { verdict: "BLOCK", reason, pattern: pattern.source };
+        }
+    }
+    return { verdict: "ALLOW" };
+}
+/**
+ * Check a file path (and optional content) against dangerous patterns.
+ * Returns WARN for dangerous paths or credential-containing content,
+ * ALLOW otherwise. File operations are WARN (not BLOCK) to allow
+ * the agent to proceed with caution when necessary.
+ */
+export function checkFileSecurity(filePath, content) {
+    // Check path
+    for (const { pattern, reason } of FILE_BLOCK_PATTERNS) {
+        if (pattern.test(filePath)) {
+            return { verdict: "WARN", reason, pattern: pattern.source };
+        }
+    }
+    // Check content for credentials
+    if (content) {
+        for (const { pattern, reason } of CREDENTIAL_PATTERNS) {
+            if (pattern.test(content)) {
+                return { verdict: "WARN", reason, pattern: pattern.source };
+            }
+        }
+    }
+    return { verdict: "ALLOW" };
+}
+/**
+ * Main entry: check any tool call for security violations.
+ *
+ * - shell_exec / bash → check command against shell block patterns
+ * - file_write / file_edit → check path + content against file/credential patterns
+ * - git_ops → synthesize git command and check against shell block patterns
+ * - All other tools → ALLOW
+ */
+export function securityCheck(toolName, args) {
+    if (toolName === "shell_exec" || toolName === "bash") {
+        const cmd = String(args.command ?? args.script ?? "");
+        return checkShellSecurity(cmd);
+    }
+    if (toolName === "file_write" || toolName === "file_edit") {
+        const path = String(args.path ?? args.file_path ?? "");
+        const content = String(args.content ?? args.new_string ?? "");
+        return checkFileSecurity(path, content);
+    }
+    if (toolName === "git_ops") {
+        const op = String(args.operation ?? "");
+        const opArgs = String(args.args ?? "");
+        return checkShellSecurity(`git ${op} ${opArgs}`);
+    }
+    return { verdict: "ALLOW" };
+}
+//# sourceMappingURL=security-gate.js.map

package/dist/security-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-gate.js","sourceRoot":"","sources":["../src/security-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,8EAA8E;AAE9E,MAAM,oBAAoB,GAA+C;IACvE,uBAAuB;IACvB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,8BAA8B,EAAE;IAClF,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,8BAA8B,EAAE;IACpF,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACrD,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACvD,uBAAuB;IACvB,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,gCAAgC,EAAE;IAC1F,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,gCAAgC,EAAE;IAC1F,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IACnE,iBAAiB;IACjB,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,0CAA0C,EAAE;IAClF,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,mCAAmC,EAAE;IACzE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,uCAAuC,EAAE;IAC1E,uBAAuB;IACvB,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACxD,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,2BAA2B,EAAE;IAC9E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACnE,kBAAkB;IAClB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,YAAY,EAAE;IAChE,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,YAAY,EAAE;IAC9D,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,aAAa,EAAE;IAClE,2BAA2B;IAC3B,EAAE,OAAO,EAAE,kDAAkD,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACxG,yBAAyB;IACzB,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,uBAAuB,EAAE;CACpF,CAAC;AAEF,8EAA8E;AAE9E,MAAM,mBAAmB,GAA+C;IACtE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAC9D,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAC9D,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,yBAAyB,EAAE;IAChE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,wBAAwB,EAAE;IAC3D,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,4BAA4B,EAAE;IACrE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE;IACvD,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,wCAAwC,EAAE;IACxE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,iCAAiC,EAAE;CACpE,CAAC;AAEF,8EAA8E;AAE9E,MAAM,mBAAmB,GAA+C;IACtE,EAAE,OAAO,EAAE,0GAA0G,EAAE,MAAM,EAAE,wBAAwB,EAAE;IACzJ,EAAE,OAAO,EAAE,oDAAoD,EAAE,MAAM,EAAE,mBAAmB,EAAE;IAC9F,EAAE,OAAO,EAAE,gDAAgD,EAAE,MAAM,EAAE,sBAAsB,EAAE;IAC7F,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,8BAA8B,EAAE;IAC3E,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACvE,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,gBAAgB,EAAE;CACjE,CAAC;AAEF,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAgB;IAClE,aAAa;IACb,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,gCAAgC;IAChC,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAA6B;IAC3E,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/self-evaluation.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @module self-evaluation
+ * @description Lightweight self-evaluation before reporting success.
+ * Checks: files actually changed, build not broken, no pending errors.
+ * NO LLM, deterministic checks only.
+ */
+export interface SelfEvalResult {
+    passed: boolean;
+    score: number;
+    issues: string[];
+    recommendation: "report_success" | "run_verification" | "report_partial";
+}
+export declare function selfEvaluate(params: {
+    changedFiles: string[];
+    toolErrors: number;
+    toolSuccesses: number;
+    verificationRan: boolean;
+    verificationPassed: boolean;
+    iterationCount: number;
+    maxIterations: number;
+}): SelfEvalResult;
+//# sourceMappingURL=self-evaluation.d.ts.map

package/dist/self-evaluation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-evaluation.d.ts","sourceRoot":"","sources":["../src/self-evaluation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;CAC1E;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACnC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,cAAc,CA4CjB"}

package/dist/self-evaluation.js

@@ -0,0 +1,43 @@
+/**
+ * @module self-evaluation
+ * @description Lightweight self-evaluation before reporting success.
+ * Checks: files actually changed, build not broken, no pending errors.
+ * NO LLM, deterministic checks only.
+ */
+export function selfEvaluate(params) {
+    const { changedFiles, toolErrors, toolSuccesses, verificationRan, verificationPassed, iterationCount, maxIterations } = params;
+    const issues = [];
+    let score = 1.0;
+    // No changes made
+    if (changedFiles.length === 0) {
+        issues.push("No files were changed");
+        score -= 0.3;
+    }
+    // High error rate
+    const totalTools = toolErrors + toolSuccesses;
+    if (totalTools > 0 && toolErrors / totalTools > 0.3) {
+        issues.push(`High tool error rate: ${toolErrors}/${totalTools}`);
+        score -= 0.2;
+    }
+    // Verification not run
+    if (changedFiles.length > 0 && !verificationRan) {
+        issues.push("Files changed but no verification was run");
+        score -= 0.2;
+    }
+    // Verification failed
+    if (verificationRan && !verificationPassed) {
+        issues.push("Verification failed");
+        score -= 0.4;
+    }
+    // Used too many iterations (possible struggle)
+    if (iterationCount > maxIterations * 0.8) {
+        issues.push("Used most of iteration budget — may have struggled");
+        score -= 0.1;
+    }
+    score = Math.max(0, Math.min(1, score));
+    const recommendation = score >= 0.7 ? "report_success"
+        : !verificationRan && changedFiles.length > 0 ? "run_verification"
+            : "report_partial";
+    return { passed: score >= 0.5, score, issues, recommendation };
+}
+//# sourceMappingURL=self-evaluation.js.map

package/dist/self-evaluation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-evaluation.js","sourceRoot":"","sources":["../src/self-evaluation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,UAAU,YAAY,CAAC,MAQ5B;IACC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAC/H,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,kBAAkB;IAClB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrC,KAAK,IAAI,GAAG,CAAC;IACf,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;IAC9C,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,UAAU,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,yBAAyB,UAAU,IAAI,UAAU,EAAE,CAAC,CAAC;QACjE,KAAK,IAAI,GAAG,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACzD,KAAK,IAAI,GAAG,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,eAAe,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnC,KAAK,IAAI,GAAG,CAAC;IACf,CAAC;IAED,+CAA+C;IAC/C,IAAI,cAAc,GAAG,aAAa,GAAG,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAClE,KAAK,IAAI,GAAG,CAAC;IACf,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAExC,MAAM,cAAc,GAClB,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,gBAAgB;QAC/B,CAAC,CAAC,CAAC,eAAe,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB;YAClE,CAAC,CAAC,gBAAgB,CAAC;IAErB,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACjE,CAAC"}

package/dist/semantic-diff-reviewer.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @module semantic-diff-reviewer
+ * @description Classifies the semantic meaning of code changes.
+ * Determines: was this a style change? behavior change? signature change?
+ * Role: RECOMMENDER only. Outputs recommendedVerifyDepth, NOT final decision.
+ * Language-aware: TS/JS primary, other languages use conservative fallback.
+ */
+export type SemanticChangeKind = "SIGNATURE_CHANGE" | "CONTROL_FLOW_CHANGE" | "IMPORT_CHANGE" | "CONFIG_CHANGE" | "TEST_ONLY" | "BEHAVIOR_CHANGE" | "STYLE_ONLY";
+export interface SemanticDiffReview {
+    path: string;
+    changes: SemanticChangeKind[];
+    recommendedRiskBoost: number;
+    recommendedVerifyDepth: "skip" | "quick" | "thorough";
+}
+/** Analyze a file's changes semantically */
+export declare function reviewFileDiff(params: {
+    path: string;
+    oldContent: string;
+    newContent: string;
+    language?: string;
+}): SemanticDiffReview;
+/** Review multiple files and produce aggregate recommendation */
+export declare function reviewDiffBatch(reviews: SemanticDiffReview[]): {
+    overallRiskBoost: number;
+    overallVerifyRecommendation: "skip" | "quick" | "thorough";
+    summary: string;
+};
+//# sourceMappingURL=semantic-diff-reviewer.d.ts.map

package/dist/semantic-diff-reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic-diff-reviewer.d.ts","sourceRoot":"","sources":["../src/semantic-diff-reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,qBAAqB,GACrB,eAAe,GACf,eAAe,GACf,WAAW,GACX,iBAAiB,GACjB,YAAY,CAAC;AAEjB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;CACvD;AAuDD,4CAA4C;AAC5C,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,kBAAkB,CAyFrB;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB,CAqCA"}

package/dist/semantic-diff-reviewer.js

@@ -0,0 +1,168 @@
+/**
+ * @module semantic-diff-reviewer
+ * @description Classifies the semantic meaning of code changes.
+ * Determines: was this a style change? behavior change? signature change?
+ * Role: RECOMMENDER only. Outputs recommendedVerifyDepth, NOT final decision.
+ * Language-aware: TS/JS primary, other languages use conservative fallback.
+ */
+// ─── Internal Detection Patterns ───
+/** Detect signature-level changes (function/class/interface/type declarations) */
+const SIGNATURE_PATTERNS = [
+    /^\s*(export\s+)?(function|class|interface|type|enum)\s+\w+/,
+    /^\s*(export\s+)?(const|let|var)\s+\w+\s*[=:]\s*(async\s+)?\(/,
+    /^\s*(public|private|protected|static|readonly|async)\s+\w+\s*\(/,
+    /^\s*constructor\s*\(/,
+];
+/** Detect control flow structures */
+const CONTROL_FLOW_PATTERNS = [
+    /^\s*(if|else\s+if|else|for|while|do|switch|case|try|catch|finally)\b/,
+    /^\s*return\b/,
+    /^\s*throw\b/,
+    /\?\s*\w+.*:/, // ternary
+];
+/** Detect import/export lines */
+const IMPORT_PATTERNS = [
+    /^\s*(import|export)\s+/,
+    /^\s*require\s*\(/,
+    /^\s*module\.exports\s*/,
+];
+/** Lines that are purely style (comments, whitespace) */
+function isStyleOnlyLine(line) {
+    const trimmed = line.trim();
+    if (trimmed === "")
+        return true;
+    if (trimmed.startsWith("//") || trimmed.startsWith("/*") || trimmed.startsWith("*"))
+        return true;
+    return false;
+}
+/** Compute a simple line-level diff: lines unique to old vs new */
+function diffLines(oldLines, newLines) {
+    const oldSet = new Set(oldLines.map(l => l.trim()));
+    const newSet = new Set(newLines.map(l => l.trim()));
+    const removed = oldLines.filter(l => !newSet.has(l.trim()));
+    const added = newLines.filter(l => !oldSet.has(l.trim()));
+    return { removed, added };
+}
+/** Check if a language is TS/JS family */
+function isTsJs(language) {
+    if (!language)
+        return true; // default: assume TS/JS
+    const lang = language.toLowerCase();
+    return /typescript|javascript|tsx?|jsx?/.test(lang);
+}
+// ─── Public API ───
+/** Analyze a file's changes semantically */
+export function reviewFileDiff(params) {
+    const { path, oldContent, newContent, language } = params;
+    const changes = [];
+    // Test-only detection
+    if (/\.(test|spec)\.[jt]sx?$/.test(path) || /\/__tests__\//.test(path)) {
+        return { path, changes: ["TEST_ONLY"], recommendedRiskBoost: 0, recommendedVerifyDepth: "skip" };
+    }
+    // Config detection
+    if (/(tsconfig|package\.json|\.eslintrc|jest\.config|vitest\.config|rollup\.config|webpack\.config|vite\.config|\.prettierrc|\.babelrc)/.test(path)) {
+        return { path, changes: ["CONFIG_CHANGE"], recommendedRiskBoost: 0.15, recommendedVerifyDepth: "thorough" };
+    }
+    // If not TS/JS, use conservative fallback
+    if (!isTsJs(language)) {
+        // Cannot reliably classify — assume behavior change
+        return { path, changes: ["BEHAVIOR_CHANGE"], recommendedRiskBoost: 0.2, recommendedVerifyDepth: "thorough" };
+    }
+    // Diff the old vs new content
+    const oldLines = oldContent.split("\n");
+    const newLines = newContent.split("\n");
+    const { removed, added } = diffLines(oldLines, newLines);
+    const changedLines = [...removed, ...added];
+    // No changes at all
+    if (changedLines.length === 0) {
+        return { path, changes: ["STYLE_ONLY"], recommendedRiskBoost: 0, recommendedVerifyDepth: "skip" };
+    }
+    // Check if ALL changed lines are style-only
+    const allStyle = changedLines.every(l => isStyleOnlyLine(l));
+    if (allStyle) {
+        changes.push("STYLE_ONLY");
+        return { path, changes, recommendedRiskBoost: 0, recommendedVerifyDepth: "skip" };
+    }
+    // Detect specific change kinds from changed lines
+    let hasSignature = false;
+    let hasControlFlow = false;
+    let hasImport = false;
+    for (const line of changedLines) {
+        if (!hasSignature && SIGNATURE_PATTERNS.some(p => p.test(line))) {
+            hasSignature = true;
+        }
+        if (!hasControlFlow && CONTROL_FLOW_PATTERNS.some(p => p.test(line))) {
+            hasControlFlow = true;
+        }
+        if (!hasImport && IMPORT_PATTERNS.some(p => p.test(line))) {
+            hasImport = true;
+        }
+    }
+    if (hasSignature)
+        changes.push("SIGNATURE_CHANGE");
+    if (hasControlFlow)
+        changes.push("CONTROL_FLOW_CHANGE");
+    if (hasImport)
+        changes.push("IMPORT_CHANGE");
+    // If none of the specific patterns matched but we have non-style changes, it's behavior
+    if (changes.length === 0) {
+        changes.push("BEHAVIOR_CHANGE");
+    }
+    // Calculate risk boost and verify recommendation
+    let riskBoost = 0;
+    let verifyDepth = "quick";
+    if (changes.includes("SIGNATURE_CHANGE")) {
+        riskBoost = Math.max(riskBoost, 0.25);
+        verifyDepth = "thorough";
+    }
+    if (changes.includes("CONTROL_FLOW_CHANGE")) {
+        riskBoost = Math.max(riskBoost, 0.2);
+        verifyDepth = "thorough";
+    }
+    if (changes.includes("BEHAVIOR_CHANGE")) {
+        riskBoost = Math.max(riskBoost, 0.15);
+        verifyDepth = "thorough";
+    }
+    if (changes.includes("IMPORT_CHANGE")) {
+        riskBoost = Math.max(riskBoost, 0.1);
+        if (verifyDepth !== "thorough")
+            verifyDepth = "quick";
+    }
+    // Clamp risk boost to 0~0.3
+    riskBoost = Math.min(riskBoost, 0.3);
+    return { path, changes, recommendedRiskBoost: riskBoost, recommendedVerifyDepth: verifyDepth };
+}
+/** Review multiple files and produce aggregate recommendation */
+export function reviewDiffBatch(reviews) {
+    if (reviews.length === 0) {
+        return { overallRiskBoost: 0, overallVerifyRecommendation: "skip", summary: "No files to review" };
+    }
+    // Aggregate: worst-case verify depth, max risk boost
+    let overallRiskBoost = 0;
+    let overallVerify = "skip";
+    const depthOrder = { skip: 0, quick: 1, thorough: 2 };
+    const depthReverse = ["skip", "quick", "thorough"];
+    const kindCounts = {};
+    for (const review of reviews) {
+        overallRiskBoost = Math.max(overallRiskBoost, review.recommendedRiskBoost);
+        if (depthOrder[review.recommendedVerifyDepth] > depthOrder[overallVerify]) {
+            overallVerify = review.recommendedVerifyDepth;
+        }
+        for (const kind of review.changes) {
+            kindCounts[kind] = (kindCounts[kind] ?? 0) + 1;
+        }
+    }
+    // Ensure the result is typed correctly
+    const overallVerifyRecommendation = depthReverse[depthOrder[overallVerify]];
+    // Build summary
+    const parts = [`${reviews.length} files reviewed`];
+    for (const [kind, count] of Object.entries(kindCounts)) {
+        parts.push(`${kind}: ${count}`);
+    }
+    return {
+        overallRiskBoost: Math.min(overallRiskBoost, 0.3),
+        overallVerifyRecommendation,
+        summary: parts.join(", "),
+    };
+}
+//# sourceMappingURL=semantic-diff-reviewer.js.map

package/dist/semantic-diff-reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic-diff-reviewer.js","sourceRoot":"","sources":["../src/semantic-diff-reviewer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAoBH,sCAAsC;AAEtC,kFAAkF;AAClF,MAAM,kBAAkB,GAAG;IACzB,4DAA4D;IAC5D,8DAA8D;IAC9D,iEAAiE;IACjE,sBAAsB;CACvB,CAAC;AAEF,qCAAqC;AACrC,MAAM,qBAAqB,GAAG;IAC5B,sEAAsE;IACtE,cAAc;IACd,aAAa;IACb,aAAa,EAAG,UAAU;CAC3B,CAAC;AAEF,iCAAiC;AACjC,MAAM,eAAe,GAAG;IACtB,wBAAwB;IACxB,kBAAkB;IAClB,wBAAwB;CACzB,CAAC;AAEF,yDAAyD;AACzD,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,SAAS,SAAS,CAAC,QAAkB,EAAE,QAAkB;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAE1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,0CAA0C;AAC1C,SAAS,MAAM,CAAC,QAAiB;IAC/B,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,qBAAqB;AAErB,4CAA4C;AAC5C,MAAM,UAAU,cAAc,CAAC,MAK9B;IACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC1D,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,sBAAsB;IACtB,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACnG,CAAC;IAED,mBAAmB;IACnB,IAAI,oIAAoI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpJ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC;IAC9G,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,oDAAoD;QACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC;IAC/G,CAAC;IAED,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IAE5C,oBAAoB;IACpB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACpG,CAAC;IAED,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACpF,CAAC;IAED,kDAAkD;IAClD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChE,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACrE,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1D,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE7C,wFAAwF;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAkC,OAAO,CAAC;IAEzD,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,WAAW,GAAG,UAAU,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC5C,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACrC,WAAW,GAAG,UAAU,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,WAAW,GAAG,UAAU,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,WAAW,KAAK,UAAU;YAAE,WAAW,GAAG,OAAO,CAAC;IACxD,CAAC;IAED,4BAA4B;IAC5B,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAErC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;AACjG,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,OAA6B;IAK3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,gBAAgB,EAAE,CAAC,EAAE,2BAA2B,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IACrG,CAAC;IAED,qDAAqD;IACrD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,aAAa,GAAkC,MAAM,CAAC;IAC1D,MAAM,UAAU,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC9E,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;IAE5D,MAAM,UAAU,GAAgD,EAAE,CAAC;IAEnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,MAAM,CAAC,sBAAsB,CAAE,GAAG,UAAU,CAAC,aAAa,CAAE,EAAE,CAAC;YAC5E,aAAa,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,MAAM,2BAA2B,GAAG,YAAY,CAAC,UAAU,CAAC,aAAa,CAAE,CAAE,CAAC;IAE9E,gBAAgB;IAChB,MAAM,KAAK,GAAa,CAAC,GAAG,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC;QACjD,2BAA2B;QAC3B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC"}

package/dist/stall-detector.d.ts

@@ -11,7 +11,7 @@
  * Design: purely stateful observer — does NOT affect the main loop.
  * Call check() each iteration. It returns a StallReason or null.
  */
-export type StallReason = "iteration_overrun" | "repeated_errors" | "no_progress" | "patch_entropy";
+export type StallReason = "iteration_overrun" | "repeated_errors" | "no_progress" | "patch_entropy" | "read_loop" | "search_spiral" | "approval_block" | "environment_block" | "budget_corner" | "tool_gate_thrash";
 export interface StallCheckResult {
     stalled: boolean;
     reason: StallReason | null;
@@ -31,6 +31,16 @@ export interface StallDetectorConfig {
     patchEntropyWindow?: number;
     /** default 3 (same file+lines modified 3+ times) */
     patchEntropyThreshold?: number;
+    /** default 3 (same file read 3+ times) */
+    readLoopThreshold?: number;
+    /** default 5 iterations for read_loop window */
+    readLoopWindow?: number;
+    /** default 2 (same search pattern repeated 2+ times) */
+    searchSpiralThreshold?: number;
+    /** default 2 (blocked tool called 2+ times) */
+    toolGateThrashThreshold?: number;
+    /** default 0.9 (budget usage ratio to trigger budget_corner) */
+    budgetCornerRatio?: number;
 }
 export declare class StallDetector {
     private estimatedIterations;
@@ -40,6 +50,11 @@ export declare class StallDetector {
     private noProgressWindow;
     private patchEntropyWindow;
     private patchEntropyThreshold;
+    private readLoopThreshold;
+    private readLoopWindow;
+    private searchSpiralThreshold;
+    private toolGateThrashThreshold;
+    private budgetCornerRatio;
     private history;
     constructor(estimatedIterations: number, config?: StallDetectorConfig);
     /**
@@ -48,8 +63,17 @@ export declare class StallDetector {
      * @param changedFiles files changed this iteration
      * @param errorSignature current repeated error signature (or undefined)
      * @param editedLines optional: Map<filePath, Set<lineNumber>> for patch entropy detection
+     * @param extra optional: additional tracking data for new stall types
      */
-    check(iteration: number, changedFiles: string[], errorSignature: string | undefined, editedLines?: Map<string, Set<number>>): StallCheckResult;
+    check(iteration: number, changedFiles: string[], errorSignature: string | undefined, editedLines?: Map<string, Set<number>>, extra?: {
+        readFiles?: string[];
+        searchPatterns?: string[];
+        searchResultHashes?: string[];
+        blockedTools?: string[];
+        pendingApproval?: boolean;
+        environmentBlocked?: boolean;
+        budgetUsageRatio?: number;
+    }): StallCheckResult;
     /** Reset state (call when task changes or goal changes) */
     reset(): void;
 }