agentix-cli 0.29.0 → 0.31.0

package/dist/{chunk-JKYMXLYL.js → chunk-DLOYTMYZ.js}

@@ -1,7 +1,7 @@
-import{g as C,j as S}from"./chunk-GMNKJXTR.js";S();import{Command as R}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{existsSync as y,readFileSync as k,readdirSync as j,statSync as N}from"fs";import{resolve as m}from"path";import{createRequire as W}from"module";async function E(n={}){let i=[];await P(i);let e=T(i);return e&&L(i,e),e&&_(i,e),e&&D(i,e),e&&q(i,e),e&&B(i,e),n.running!==!1&&e&&await z(i,e),{checks:i,summary:A(i)}}var K=new R().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async n=>{let{checks:i,summary:e}=await E({running:n.running!==!1});n.json?process.stdout.write(JSON.stringify({checks:i,summary:e},null,2)+`
+import{g as C,j as S}from"./chunk-Z3RKXKE2.js";S();import{Command as R}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{existsSync as y,readFileSync as k,readdirSync as j,statSync as N}from"fs";import{resolve as m}from"path";import{createRequire as W}from"module";async function E(n={}){let i=[];await P(i);let e=T(i);return e&&L(i,e),e&&_(i,e),e&&D(i,e),e&&q(i,e),e&&B(i,e),n.running!==!1&&e&&await z(i,e),{checks:i,summary:A(i)}}var K=new R().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async n=>{let{checks:i,summary:e}=await E({running:n.running!==!1});n.json?process.stdout.write(JSON.stringify({checks:i,summary:e},null,2)+`
 `):H(i),process.exit(e.errors>0?1:0)});async function P(n){let i=Number(process.versions.node.split(".")[0]);n.push({severity:i==22?"ok":"fail",group:"Environment",title:`Node.js ${process.versions.node}`,detail:i==22?void 0:"AgentX requires Node 22.x.",fix:i==22?void 0:"Install Node 22 (nvm install 22 && nvm use 22)"});let e=a=>{try{return h(process.platform==="win32"?"where":"which",[a],{encoding:"utf-8"}).trim().split(`
 `)[0]}catch{return null}},o=e("npm");n.push({severity:o?"ok":"fail",group:"Environment",title:o?"npm on PATH":"npm not found",detail:o||void 0});let s=e("claude");if(s){let a;try{a=h("claude",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}n.push({severity:"ok",group:"Environment",title:`claude CLI ${a||"installed"}`,detail:s})}else n.push({severity:"warn",group:"Environment",title:"claude CLI not on PATH",detail:"Only required for agents on the claude-code tier.",fix:"See https://docs.anthropic.com/en/docs/claude-code"});let r=e("codex");if(r){let a;try{a=h("codex",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}n.push({severity:"ok",group:"Environment",title:`codex CLI ${a||"installed"}`,detail:r})}else n.push({severity:"warn",group:"Environment",title:"codex CLI not on PATH",detail:"Only required for agents on the codex-cli tier.",fix:"Install with `npm i -g @openai/codex`."});let l=e("opencode");if(l){let a;try{a=h("opencode",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}n.push({severity:"ok",group:"Environment",title:`opencode CLI ${a||"installed"}`,detail:l})}else n.push({severity:"warn",group:"Environment",title:"opencode CLI not on PATH",detail:"Only required for agents on the opencode tier.",fix:"Install from https://opencode.ai/docs/."});try{W(import.meta.url)("better-sqlite3"),n.push({severity:"ok",group:"Environment",title:`better-sqlite3 loads for Node ${process.version}`,detail:`NODE_MODULE_VERSION ${process.versions.modules}`})}catch(a){n.push({severity:"fail",group:"Environment",title:"better-sqlite3 native binding does not load",detail:a?.message??String(a),fix:`Run "pnpm rebuild better-sqlite3" with the same Node used by the daemon (${process.version}, modules ${process.versions.modules}).`})}}function T(n){let i=m(process.cwd(),"agentx.json");if(!y(i))return n.push({severity:"fail",group:"Config",title:"agentx.json not found",detail:`Looked in ${i}`,fix:"Run `agentx setup` to create one via the web wizard."}),null;let e;try{e=JSON.parse(k(i,"utf-8"))}catch(l){return n.push({severity:"fail",group:"Config",title:"agentx.json is not valid JSON",detail:l.message}),null}try{C(i),n.push({severity:"ok",group:"Config",title:`agentx.json valid (${Object.keys(e.agents||{}).length} agents, ${Object.keys(e.crons||{}).length} schedules)`})}catch(l){n.push({severity:"fail",group:"Config",title:"agentx.json failed schema validation",detail:l.message,fix:"Open /admin \u2192 Advanced tab to edit and re-save."})}let o=Object.entries(e.agents||{}).filter(([,l])=>l.tier==="claude-code");o.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["claude"],{stdio:"ignore"}),!0}catch{return!1}})()||n.push({severity:"fail",group:"Config",title:`${o.length} agent(s) use claude-code tier but claude CLI is missing`,detail:o.map(([a])=>a).join(", "),fix:"Install Claude Code (https://docs.anthropic.com/en/docs/claude-code) or switch these agents to tier=sdk."}));let s=Object.entries(e.agents||{}).filter(([,l])=>l.tier==="codex-cli");s.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["codex"],{stdio:"ignore"}),!0}catch{return!1}})()||n.push({severity:"fail",group:"Config",title:`${s.length} agent(s) use codex-cli tier but codex CLI is missing`,detail:s.map(([a])=>a).join(", "),fix:"Install Codex CLI with `npm i -g @openai/codex` or switch these agents to tier=claude-code."}));let r=Object.entries(e.agents||{}).filter(([,l])=>l.tier==="opencode");return r.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["opencode"],{stdio:"ignore"}),!0}catch{return!1}})()||n.push({severity:"fail",group:"Config",title:`${r.length} agent(s) use opencode tier but OpenCode CLI is missing`,detail:r.map(([a])=>a).join(", "),fix:"Install OpenCode from https://opencode.ai/docs/ or switch these agents to another tier."})),e}function L(n,i){let e=new Set;if($(i,e),e.size===0){n.push({severity:"ok",group:"Secrets",title:"No ${VAR} references in agentx.json"});return}let o=m(process.cwd(),".env"),s={};if(y(o))for(let a of k(o,"utf-8").split(/\r?\n/)){let g=a.match(/^\s*([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/i);g&&(s[g[1]]=g[2])}let r=[],l=[];for(let a of e){let g=process.env[a]??s[a];g===void 0?r.push(a):(!g.trim()||/^["']?\s*["']?$/.test(g))&&l.push(a)}r.length===0&&l.length===0?n.push({severity:"ok",group:"Secrets",title:`${e.size} env reference(s) resolved`}):(r.length>0&&n.push({severity:"fail",group:"Secrets",title:`${r.length} env var(s) referenced in agentx.json but missing`,detail:r.join(", "),fix:`Add to .env \u2014 e.g. ${r[0]}=<value>`}),l.length>0&&n.push({severity:"warn",group:"Secrets",title:`${l.length} env var(s) set but empty`,detail:l.join(", ")}))}function $(n,i){if(typeof n=="string")for(let e of n.matchAll(/\$\{([A-Z_][A-Z0-9_]*)\}/g))i.add(e[1]);else if(Array.isArray(n))for(let e of n)$(e,i);else if(n&&typeof n=="object")for(let e of Object.values(n))$(e,i)}function _(n,i){let e=[];for(let[o,s]of Object.entries(i.agents||{})){if(!s.workspace)continue;let r=s.workspace.startsWith("/")?s.workspace:m(process.cwd(),s.workspace);try{N(r).isDirectory()||e.push(`${o}: ${r} (exists but not a directory)`)}catch{e.push(`${o}: ${r}`)}}e.length===0?n.push({severity:"ok",group:"Workspaces",title:"All agent workspace folders exist"}):n.push({severity:"warn",group:"Workspaces",title:`${e.length} agent workspace(s) missing`,detail:e.join(`
     `),fix:"The daemon will create missing folders on first task, but you won't see CLAUDE.md / skills until you populate them."})}function D(n,i){let e=/\$\{[A-Za-z_][A-Za-z0-9_]*\}/g,o=[];for(let[s,r]of Object.entries(i.agents||{})){if(!r.workspace)continue;let l=r.workspace.startsWith("/")?r.workspace:m(process.cwd(),r.workspace);for(let a of["settings.json","settings.local.json"]){let g=m(l,".claude",a);if(!y(g))continue;let w;try{w=JSON.parse(k(g,"utf-8"))}catch(d){o.push({severity:"fail",agent:s,msg:`${a}: JSON parse error \u2014 ${d.message}`});continue}let b=w.env||{};for(let[d,p]of Object.entries(b)){if(typeof p!="string")continue;let u=p.match(e);u&&o.push({severity:"fail",agent:s,msg:`${a} env.${d} contains unexpanded ${[...new Set(u)].join(",")} \u2014 Claude Code does NOT expand \${VAR} in settings.json (use a fully-literal value)`})}let t=b.PATH;if(typeof t=="string"){let d=t.split(":").filter(Boolean);d.includes("/usr/bin")||o.push({severity:"fail",agent:s,msg:`${a} env.PATH missing /usr/bin \u2014 cat/head/sh/which will fail`}),d.includes("/bin")||o.push({severity:"fail",agent:s,msg:`${a} env.PATH missing /bin \u2014 ls/cp/mv will fail`})}let c=w.permissions;if(c&&typeof c=="object"&&"allow"in c){let d=c.allow,p=c.deny;Array.isArray(d)&&d.length===0&&Array.isArray(p)&&p.length>0&&o.push({severity:"warn",agent:s,msg:`${a} permissions.allow is explicitly [] with ${p.length} deny rules \u2014 agent may be locked out (omit the key to use defaults instead)`})}}}if(o.length===0){n.push({severity:"ok",group:"Workspace settings",title:`All ${Object.keys(i.agents||{}).length} agent .claude/settings.json files clean`});return}for(let s of o)n.push({severity:s.severity,group:"Workspace settings",title:`${s.agent}: ${s.msg}`,fix:s.severity==="fail"?"Edit .claude/settings.json \u2014 replace ${VAR} with the literal value or omit the key to inherit.":"Either remove the empty allow list or populate it."})}function q(n,i){let e=i.webhooks??[],o=[],s=m(process.cwd(),i.workflows?.dir||".agentx/workflows"),r=new Set;try{if(y(s))for(let t of j(s))t.endsWith(".json")&&!t.startsWith("_")&&!t.endsWith(".disabled.json")&&r.add(t.replace(/\.json$/,""))}catch{}let l=new Set(["github","gitlab"]);for(let t of e){if(!t.enabled||!l.has(t.source))continue;!(t.triggers&&Object.keys(t.triggers).length>0)&&!t.defaultWorkflow&&o.push({severity:"warn",title:`webhook "${t.id}" (${t.source} -> ${t.agentId}) has no triggers map; every event-type collapses to the bound agent`,fix:'Add a triggers map: { "issues.opened": "wf-id", "pull_request.synchronize": "wf-id" } \u2014 or set defaultWorkflow.'})}for(let t of e)if(!(!t.enabled||!t.triggers)){for(let[c,d]of Object.entries(t.triggers))r.size>0&&!r.has(d)&&o.push({severity:"fail",title:`webhook "${t.id}".triggers["${c}"] -> "${d}" \u2014 no such workflow under ${i.workflows?.dir||".agentx/workflows"}`,fix:"Create the workflow file or fix the id in agentx.json"});t.defaultWorkflow&&r.size>0&&!r.has(t.defaultWorkflow)&&o.push({severity:"fail",title:`webhook "${t.id}".defaultWorkflow -> "${t.defaultWorkflow}" \u2014 no such workflow`,fix:"Create the workflow file or fix the id in agentx.json"})}try{if(y(s)){for(let t of j(s))if(!(!t.endsWith(".json")||t.startsWith("_")||t.endsWith(".disabled.json")))try{let c=JSON.parse(k(m(s,t),"utf-8"));c?.status==="active"&&c?.state==="quarantined"&&o.push({severity:"warn",title:`workflow "${c.id??t}" is status=active but state=quarantined \u2014 it looks live but will never dispatch`,fix:'Resolve the conflict the detector flagged, then set state back to "active" (or set status to "review" while parked).'})}catch{}}}catch{}let a=new Set((i.mesh?.peers??[]).map(t=>t.name));for(let t of e)!t.enabled||!t.node||a.has(t.node)||o.push({severity:"fail",title:`webhook "${t.id}" routes to mesh peer "${t.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or remove the node field on the webhook."});let g=new Map;for(let t of e){if(!t.enabled)continue;let c=`${t.source}:${t.agentId}`,d=g.get(c);d?o.push({severity:"warn",title:`webhook entries "${d}" and "${t.id}" both enabled for ${t.source} -> ${t.agentId}; only the first is dispatched`,fix:"Disable one entry, or merge their triggers maps into a single entry."}):g.set(c,t.id)}let w=new Set(Object.keys(i.agents??{}));for(let t of i.channels?.gitlab?.agentMappings??[])if(t?.agentId){if(t.node){a.has(t.node)||o.push({severity:"fail",title:`gitlab.agentMappings entry agentId="${t.agentId}" routes to mesh peer "${t.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or drop the node field on the mapping."});continue}w.has(t.agentId)||o.push({severity:"warn",title:`gitlab.agentMappings entry agentId="${t.agentId}" \u2014 no such agent in agents.* (and no node field, so it's not a cross-mesh route)`,fix:'Add the agent to agents.*, set node:"<peer>" if the agent lives remotely, or remove the mapping.'})}for(let[t,c]of Object.entries(i.channels?.telegram?.accounts??{}))c.agentBinding?w.has(c.agentBinding)||o.push({severity:"fail",title:`telegram account "${t}".agentBinding -> "${c.agentBinding}" \u2014 no such agent in agents.*`,fix:"Fix the agentBinding or define the agent in agents.*."}):o.push({severity:"fail",title:`telegram account "${t}" has no agentBinding; every DM to this bot will drop`,fix:"Set agentBinding to a valid agent id."});let b=new Set(["telegram-bot","whatsapp","slack-bot","discord-bot","gitlab-user","github-user","gmail","hotmail","smtp","hubspot","salesforce","pipedrive","odoo","trello","linear","asana","jira","notion","stripe","sentry","vercel","twilio","custom"]);for(let[t,c]of Object.entries(i.agents??{})){let d=c.integrations??[];if(!d.length)continue;let p=new Set;for(let u of d){let x=`${u.kind}::${u.label}`;p.has(x)&&o.push({severity:"warn",title:`agents.${t}.integrations: duplicate (${u.kind}, ${u.label})`,fix:"Remove the duplicate or rename one. (kind, label) must be unique per agent."}),p.add(x),b.has(u.kind)||o.push({severity:"warn",title:`agents.${t}.integrations: unknown kind "${u.kind}" on integration "${u.label}"`,fix:'Use a canonical kind from INTEGRATION_KINDS, or "custom" for ad-hoc services.'});let I=u.credentials||{};for(let[O,v]of Object.entries(I))typeof v=="string"&&/^[A-Z][A-Z0-9_]*$/.test(v)&&!process.env[v]&&o.push({severity:"warn",title:`agents.${t}.integrations[${u.kind}/${u.label}].${O} -> $${v} but env var is unset (in this shell)`,fix:`Set ${v} on the daemon environment. The daemon's process.env is what matters; this warning fires from your local shell.`})}}if(o.length===0){n.push({severity:"ok",group:"Routing",title:`${e.length} webhook(s), ${Object.keys(i.channels?.telegram?.accounts??{}).length} telegram account(s) \u2014 all routing references resolve`});return}for(let t of o)n.push({severity:t.severity,group:"Routing",title:t.title,fix:t.fix})}async function z(n,i){let e=i.dashboard?.daemonUrl?.replace(/\/+$/,"")||"http://127.0.0.1:18800",o={};i.dashboard?.token&&(o.Authorization=`Bearer ${i.dashboard.token}`);try{let s=new AbortController,r=setTimeout(()=>s.abort(),2e3),l=await fetch(e+"/health",{headers:o,signal:s.signal});if(clearTimeout(r),!l.ok){n.push({severity:"warn",group:"Runtime",title:`Daemon responded ${l.status}`,detail:e});return}let a=await l.json();n.push({severity:"ok",group:"Runtime",title:`Daemon healthy \u2014 ${a.agents?.length??0} agents live, uptime ${Math.round((a.uptime??0)/60)}m`,detail:e})}catch{n.push({severity:"warn",group:"Runtime",title:"Daemon not reachable (not running?)",detail:e,fix:"Run `agentx daemon start`. Skip this check with `agentx doctor --no-running`."})}}function B(n,i){let e=Object.entries(i.agents||{}).filter(([,s])=>s?.codegraph===!0&&(s.tier==="claude-code"||s.tier==="codex-cli"));if(e.length===0)return;let o=null;try{o=h(process.platform==="win32"?"where":"which",["codegraph"],{encoding:"utf-8"}).trim().split(`
 `)[0]||null}catch{o=null}if(o){let s;try{s=h("codegraph",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}n.push({severity:"ok",group:"CodeGraph",title:`codegraph CLI ${s||"installed"}`,detail:o})}else n.push({severity:"fail",group:"CodeGraph",title:"codegraph CLI not on PATH",detail:`${e.length} agent(s) have codegraph:true but the binary isn't available.`,fix:"Install with `npm i -g @colbymchenry/codegraph`."});for(let[s,r]of e){if(!r.workspace||!y(r.workspace)){n.push({severity:"warn",group:"CodeGraph",title:`${s}: workspace missing`,detail:`Workspace path ${r.workspace} does not exist \u2014 codegraph will skip this agent.`});continue}let l=m(r.workspace,".codegraph","codegraph.db");y(l)?n.push({severity:"ok",group:"CodeGraph",title:`${s}: index present`,detail:l}):n.push({severity:"warn",group:"CodeGraph",title:`${s}: index not built yet`,detail:".codegraph/ missing \u2014 daemon will background-index this workspace on next boot.",fix:`Run \`codegraph init --index ${r.workspace}\` to build it now.`})}}function A(n){return{errors:n.filter(i=>i.severity==="fail").length,warnings:n.filter(i=>i.severity==="warn").length,ok:n.filter(i=>i.severity==="ok").length}}function H(n){console.log(),console.log(f.bold("  agentx doctor")),console.log();let i=new Map;for(let o of n)i.has(o.group)||i.set(o.group,[]),i.get(o.group).push(o);for(let[o,s]of i){console.log(f.bold("  "+o));for(let r of s){let l=r.severity==="ok"?f.green("\u2713"):r.severity==="warn"?f.yellow("!"):f.red("\u2717");console.log(`    ${l} ${r.title}`),r.detail&&console.log(f.dim("      "+r.detail.replace(/\n/g,`
       `))),r.fix&&console.log(f.dim("      \u2192 "+r.fix))}console.log()}let e=A(n);e.errors>0?console.log(f.red.bold(`  ${e.errors} error${e.errors===1?"":"s"}`)+(e.warnings?f.yellow(`, ${e.warnings} warning${e.warnings===1?"":"s"}`):"")+`. Fix the error${e.errors===1?"":"s"} and rerun.`):e.warnings>0?console.log(f.yellow.bold(`  ${e.warnings} warning${e.warnings===1?"":"s"}.`)+f.dim(" Review but not blocking.")):console.log(f.green.bold(`  All checks passed (${e.ok}).`)),console.log()}export{E as a,K as b};
-//# sourceMappingURL=chunk-JKYMXLYL.js.map
+//# sourceMappingURL=chunk-DLOYTMYZ.js.map

package/dist/chunk-DWADWDMU.js

@@ -0,0 +1,96 @@
+import{existsSync as d,mkdirSync as P,writeFileSync as g,readFileSync as x}from"fs";import{resolve as u}from"path";import{createHash as F}from"crypto";import{readFileSync as C,existsSync as I,unlinkSync as B,readdirSync as ee}from"fs";import{resolve as A}from"path";function se(s,t){let n={},r=e=>{let o=A(s,e);if(I(o))try{return C(o,"utf-8").trim()||void 0}catch{return}};if(t){let e=r(`SOUL.${t}.md`);e?(n.soul=e,n.soulProfile=t):n.soul=r("SOUL.md")}else n.soul=r("SOUL.md");if(n.identity=r("IDENTITY.md"),n.user=r("USER.md"),n.agents=r("AGENTS.md"),n.bootstrap=r("BOOTSTRAP.md"),n.bootstrap)try{B(A(s,"BOOTSTRAP.md"))}catch{}return n}function ne(s){let t=[];return s.identity&&t.push(`[Identity]
+${s.identity}`),s.soul&&t.push(`[Personality & Boundaries]
+${s.soul}`),s.user&&t.push(`[User Profile]
+${s.user}`),s.bootstrap&&t.push(`[First-Run Instructions \u2014 one time only]
+${s.bootstrap}`),t.length===0?"":t.join(`
+
+`)}function _(s){return`# ${s.name}
+
+> Agent ID: \`${s.id}\` | Tier: ${s.tier||"claude-code"}
+
+## Role
+
+${s.role||"AI agent managed by AgentX orchestrator."}
+
+## Setup
+
+This workspace is managed by AgentX. The agent runs via:
+\`\`\`bash
+# Direct execution
+agentx daemon send ${s.id} "your task here"
+
+# Or via any connected channel (Telegram, WhatsApp, GitLab)
+\`\`\`
+
+## Code Style
+
+- Follow existing patterns in the codebase
+- Use the language and framework conventions already present
+- Keep changes minimal and focused
+
+## Testing
+
+Run tests before committing:
+\`\`\`bash
+npm test    # or the project's test command
+\`\`\`
+
+## PR Guidelines
+
+- One logical change per commit
+- Reference issue numbers when applicable
+- Keep PR descriptions concise
+
+## AgentX Integration
+
+This agent is part of an AgentX mesh. It can:
+- Receive tasks from messaging channels (Telegram, WhatsApp, Discord)
+- Respond to GitLab @mentions on issues and MRs
+- Delegate to other agents by mentioning their handles
+- Send cross-channel messages via the /send API
+- Access its wiki knowledge base for context
+`}function re(s){let t=s.match(/\/soul\s+(\w+)/i);return t?t[1].toLowerCase():/\/soul\s*$/i.test(s)?"default":null}import{execFile as U}from"child_process";import{existsSync as S}from"fs";import{resolve as N}from"path";var T=["mcp__codegraph__codegraph_search","mcp__codegraph__codegraph_context","mcp__codegraph__codegraph_callers","mcp__codegraph__codegraph_callees","mcp__codegraph__codegraph_impact","mcp__codegraph__codegraph_node","mcp__codegraph__codegraph_status","mcp__codegraph__codegraph_files"],v={command:"codegraph",args:["serve","--mcp"]};function E(){return["## CodeGraph","","This workspace has CodeGraph initialized \u2014 a semantic code-knowledge-graph indexed via tree-sitter. Use it instead of grep/find/Read for exploration.","","**ALWAYS spawn an Explore subagent for `codegraph_explore` / `codegraph_context`** \u2014 those tools return large source sections that would otherwise bloat the main session. Include this in the Explore prompt:","","> Use `codegraph_explore` as your PRIMARY tool \u2014 one call returns full source from all relevant files. Do not re-Read files codegraph_explore already returned. Fall back to grep/glob/Read only if codegraph returned no results.","","**In the main session, use these lightweight codegraph tools directly:**","","| Tool | Use for |","|---|---|","| `codegraph_search` | Find symbols by name across the codebase |","| `codegraph_callers` / `codegraph_callees` | Trace call flow |","| `codegraph_impact` | Check what's affected before editing a symbol |","| `codegraph_node` | Get a single symbol's details |","| `codegraph_files` | Indexed file structure (faster than ls) |","| `codegraph_status` | Index health |",""].join(`
+`)}function pe(s){let t=s.mcp??{};return!s.codegraph||t.codegraph?t:{...t,codegraph:{command:v.command,args:[...v.args]}}}var L=".codegraph",j=10*60*1e3,R=2;function G(s){let t=Date.now();return new Promise((n,r)=>{U("codegraph",["init","--index","--quiet",s],{timeout:j,maxBuffer:4*1024*1024},e=>{e?r(e):n(Date.now()-t)})})}async function ue(s,t=console.error){let n=[];for(let[o,i]of Object.entries(s))i.codegraph&&(i.tier!=="claude-code"&&i.tier!=="codex-cli"||S(i.workspace)&&(S(N(i.workspace,L))||n.push({agentId:o,workspace:i.workspace})));if(n.length===0)return;t(`codegraph: indexing ${n.length} workspace(s) in background (max ${R} parallel)`);let r=0,e=[];for(let o=0;o<Math.min(R,n.length);o++)e.push((async()=>{for(;;){let i=r++;if(i>=n.length)return;let{agentId:c,workspace:p}=n[i];try{let l=await G(p);t(`  codegraph: indexed ${c} in ${(l/1e3).toFixed(1)}s`)}catch(l){let h=l?.code==="ENOENT"?" (codegraph CLI not on PATH; install with `npm i -g @colbymchenry/codegraph`)":"";t(`  codegraph: ${c} index failed: ${l?.message??l}${h}`)}}})());await Promise.allSettled(e)}var y="<!-- agentx-managed: hash=",b=" -->";function $(s){return F("sha256").update(s.systemPrompt??"").update("\0").update(s.codegraph?"cg:1":"cg:0").digest("hex").slice(0,16)}function W(s){return`${y}${$(s)}${b}`}function q(s){let t=s.split(`
+`,1)[0]??"";return!t.startsWith(y)||!t.endsWith(b)?null:t.slice(y.length,t.length-b.length)}function D(s,t){let n=`${s} ${t.systemPrompt||""} ${t.name}`.toLowerCase();return/cod(e|ing|er)|develop|engineer|program/.test(n)?"coding":/pm|project.?manag|product|scrum/.test(n)?"pm":/devops|deploy|infra|ops|sre|ci.?cd/.test(n)?"devops":/qa|test|quality|forensic/.test(n)?"qa":"general"}function H(s,t,n){let r=D(s,t),e=[];switch(e.push(W(t)),e.push(`# ${t.name}`),e.push(""),e.push("@AGENTS.md"),e.push(""),t.systemPrompt&&t.systemPrompt.trim().length>0&&(e.push("## Role"),e.push(""),e.push(t.systemPrompt.trimEnd()),e.push("")),e.push("## Commands"),e.push(""),d(u(t.workspace,"package.json"))?(e.push("```bash"),e.push("npm install    # install dependencies"),e.push("npm test       # run tests"),e.push("npm run build  # build project"),e.push("```")):d(u(t.workspace,"requirements.txt"))&&(e.push("```bash"),e.push("pip install -r requirements.txt"),e.push("pytest"),e.push("```")),e.push(""),e.push("## Conventions"),e.push(""),r){case"coding":e.push("- Write tests for new code before committing"),e.push("- Keep functions small and focused"),e.push("- Follow existing patterns in the codebase"),e.push("- Run tests before pushing");break;case"pm":e.push("- Keep responses concise (3-5 lines main message)"),e.push("- Reference issues with #IID and MRs with !IID"),e.push("- Update issue labels and milestones when relevant"),e.push("- Summarize decisions, don't narrate process");break;case"devops":e.push("- Always check service status before making changes"),e.push("- Never run destructive commands without confirmation"),e.push("- Log all deployment actions"),e.push("- Verify changes in staging before production");break;case"qa":e.push("- Document reproduction steps for every bug"),e.push("- Include expected vs actual behavior"),e.push("- Check both happy path and edge cases"),e.push("- Attach screenshots when reporting UI issues");break;default:e.push("- Be concise \u2014 lead with the answer, skip preamble"),e.push("- Follow existing patterns in the codebase")}return e.push(""),e.push("## Cross-Channel Messaging"),e.push(""),e.push("You can send messages to any channel proactively:"),e.push("```bash"),e.push(`curl -X POST http://localhost:${n}/send \\`),e.push('  -H "Content-Type: application/json" \\'),e.push(`  -d '{"channel":"telegram","chatId":"<id>","text":"<message>","agentId":"${s}"}'`),e.push("```"),e.push("Channels: telegram, whatsapp, gitlab, discord"),e.push(""),e.push("## Typed actions \u2014 prefer these over free-form Bash"),e.push(""),e.push("Daemon-shipped typed actions cover the common needs. Each call appears in `/traces` as a structured step (input + output schema), unlike opaque `Bash`/`curl`/`Read` calls."),e.push(""),e.push("```bash"),e.push("# List available actions + their schemas"),e.push("agentx actions builtin                 # \u2192 catalog"),e.push("agentx actions builtin <name> --schema # \u2192 input/output schema"),e.push(""),e.push("# Invoke an action with typed JSON input"),e.push(`agentx actions builtin http.fetch        --input '{"url":"https://example.com/data"}'`),e.push(`agentx actions builtin http.post         --input '{"url":"https://x.tld/hook","body":{"k":"v"}}'`),e.push(`agentx actions builtin file.read_lines   --input '{"path":"data/prices.json"}'`),e.push(`agentx actions builtin file.write_jsonl  --input '{"path":"leads.jsonl","record":{"name":"\u2026","email":"\u2026"}}'`),e.push(`agentx actions builtin extract.structured --input '{"prompt":"<text>","schema":{"type":"object",\u2026}}'`),e.push(`agentx actions builtin rag.lexical       --input '{"agentId":"${s}","query":"\u2026","limit":5}'`),e.push(`agentx actions builtin agent.call        --input '{"agentId":"<local-agent>","message":"\u2026"}'`),e.push(`agentx actions builtin mesh.delegate     --input '{"peer":"<peer-name>","agent":"<peer-agent>","message":"\u2026"}'`),e.push("```"),e.push(""),e.push("Rule of thumb:"),e.push("- HTTP fetch/POST \u2192 `http.fetch` / `http.post` (not `Bash curl`)"),e.push("- Reading a file you'll parse \u2192 `file.read_lines` (not `Bash cat`)"),e.push("- Appending a structured record \u2192 `file.write_jsonl` (not `Bash echo >>` or `Write` with model-formatted JSON)"),e.push("- Extracting fields from text into a typed object \u2192 `extract.structured` (not asking the model to format JSON in its reply)"),e.push("- Searching a doc corpus \u2192 `rag.lexical` (not `Read` over every file)"),e.push("- Calling another agent on this daemon \u2192 `agent.call` (fresh session by default; not composing `Bash curl` to /task)"),e.push("- Calling an agent on a peer mesh node \u2192 `mesh.delegate` (cross-machine; same fresh-session default)"),e.push(""),t.codegraph&&e.push(E()),e.join(`
+`)}var f=["Bash(npx prisma migrate reset*)","Bash(prisma migrate reset*)","Bash(npx prisma db push*)","Bash(prisma db push*)","Bash(dropdb*)"];function X(s,t){return`curl -s --max-time 3 -H 'Content-Type: application/json' --data-binary @- '${`http://127.0.0.1:${t}/guard/check?agent=${encodeURIComponent(s)}`}' 2>/dev/null || true`}function O(s,t){let n=X(s,t);return[{matcher:"Bash",hooks:[{type:"command",command:n,timeout:10}]},{matcher:"Write|Edit",hooks:[{type:"command",command:n,timeout:10}]}]}function J(s){return Array.isArray(s?.hooks)&&s.hooks.some(t=>typeof t?.command=="string"&&(t.command.includes("/guard/check")||t.command.includes("guard check")))}function K(s,t,n="19900"){let r={autoMemoryEnabled:!0,env:{CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS:"1"}};if(t.permissionMode==="bypassPermissions"?r.permissions={deny:[...f]}:t.permissionMode==="plan"?r.permissions={deny:[...f,"Bash(rm -rf *)","Bash(drop *)","Bash(DELETE *)"]}:r.permissions={deny:[...f,"Bash(rm -rf /)","Bash(> /dev/sda*)","Bash(mkfs*)"]},t.codegraph){let o=r.permissions||{},i=Array.isArray(o.allow)?o.allow:[];o.allow=[...new Set([...i,...T])],r.permissions=o}let e={};return e.PreToolUse=O(s,n),e.Notification=[{matcher:"",hooks:[{type:"command",command:`echo "[${s}] notification: $(jq -r '.type // "unknown"')" >> /tmp/agentx-${s}.log`}]}],e.PostToolUse=[{matcher:"Bash",hooks:[{type:"command",command:`jq -r '.tool_input.command // empty' >> /tmp/agentx-${s}-commands.log`}]}],e.SessionStart=[{matcher:"compact",hooks:[{type:"command",command:`echo "Reminder: You are ${t.name} (${s}). Follow the conventions in CLAUDE.md."`}]}],r.hooks=e,r}function Y(s,t){let n=D(s,t),r=[];switch(n){case"coding":r.push({name:"testing.md",content:`---
+paths:
+  - "**/*.test.{ts,tsx,js,jsx}"
+  - "**/*.spec.{ts,tsx,js,jsx}"
+  - "test/**/*"
+---
+
+# Testing Rules
+
+- Every new function should have a corresponding test
+- Test both happy path and error cases
+- Use descriptive test names that explain what's being tested
+- Mock external dependencies, not internal modules
+`}),r.push({name:"code-quality.md",content:`# Code Quality
+
+- No console.log in production code (use a logger)
+- Handle errors explicitly \u2014 no empty catch blocks
+- Keep files under 300 lines
+- Extract repeated logic into shared utilities
+`});break;case"devops":r.push({name:"deployment-safety.md",content:`# Deployment Safety
+
+- Always verify staging before production
+- Check disk space and memory before deploying
+- Never expose secrets in logs or commits
+- Use rollback-safe deployment strategies
+`});break;case"pm":r.push({name:"communication.md",content:`# Communication Rules
+
+- Keep GitLab comments under 5 lines for the main message
+- Use <details> for verbose output (logs, commands, steps)
+- Reference issues with #IID, merge requests with !IID
+- Never mention Telegram handles on GitLab
+`});break;case"qa":r.push({name:"bug-reports.md",content:`# Bug Report Format
+
+Always include:
+1. Steps to reproduce
+2. Expected behavior
+3. Actual behavior
+4. Environment (browser, OS, version)
+5. Screenshots if applicable
+`});break}return r}function V(s,t,n="19900",r=console.error){let e=[],o=[],i=t.workspace;if(!d(i))return r(`Workspace not found: ${i}`),{created:e,skipped:o};if(t.tier!=="claude-code"&&t.tier!=="codex-cli")return{created:e,skipped:o};let c=(a,m)=>{d(a)?o.push(a):(P(u(a,".."),{recursive:!0}),g(a,m),e.push(a))},p=(a,m,M)=>{if(!d(a)){P(u(a,".."),{recursive:!0}),g(a,m),e.push(a);return}let k;try{k=x(a,"utf8")}catch{o.push(a);return}let w=q(k);if(w===null){o.push(a);return}if(w===M){o.push(a);return}g(a,m),e.push(`${a} (refreshed)`)};if(c(u(i,"AGENTS.md"),_({name:t.name,id:s,role:t.systemPrompt?.split(`
+`)[0],workspace:i,tier:t.tier})),t.tier==="codex-cli")return e.length>0&&r(`[${s}] workspace setup: created ${e.length} file(s)`),{created:e,skipped:o};p(u(i,"CLAUDE.md"),H(s,t,n),$(t));let l=u(i,".claude/settings.json");c(l,JSON.stringify(K(s,t,n),null,2));let h=Y(s,t);for(let a of h)c(u(i,".claude/rules",a.name),a.content);return e.length>0&&r(`[${s}] workspace setup: created ${e.length} file(s)`),{created:e,skipped:o}}function z(s,t){let n=u(s,".claude/settings.json");if(!d(n))return!1;try{let r=JSON.parse(x(n,"utf-8")),e=!1;for(let[o,i]of Object.entries(t))if(typeof i=="object"&&i!==null&&!Array.isArray(i)){r[o]||(r[o]={});for(let[c,p]of Object.entries(i))r[o][c]===void 0&&(r[o][c]=p,e=!0)}else r[o]===void 0&&(r[o]=i,e=!0);return e&&g(n,JSON.stringify(r,null,2)),e}catch{return!1}}function Q(s,t,n="19900"){let r=u(s,".claude/settings.json");if(!d(r))return!1;try{let e=JSON.parse(x(r,"utf-8")),o=!1,i=e.permissions??={},c=Array.isArray(i.deny)?i.deny:i.deny=[];for(let a of f)c.includes(a)||(c.push(a),o=!0);let p=e.hooks??={},h=[...Array.isArray(p.PreToolUse)?p.PreToolUse.filter(a=>!J(a)):[],...O(t,n)];return JSON.stringify(p.PreToolUse??null)!==JSON.stringify(h)&&(p.PreToolUse=h,o=!0),o&&g(r,JSON.stringify(e,null,2)),o}catch{return!1}}function ye(s,t="19900",n=console.error){let r=0,e=0,o=0;for(let[i,c]of Object.entries(s)){if(c.tier!=="claude-code"&&c.tier!=="codex-cli")continue;let p=V(i,c,t,n);r+=p.created.length,c.tier==="claude-code"&&z(c.workspace,{env:{CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS:"1"}})&&e++,c.tier==="claude-code"&&Q(c.workspace,i,t)&&o++}r>0&&n(`Workspace setup: ${r} file(s) created across agent workspaces`),e>0&&n(`Workspace patch: ${e} workspace(s) updated with agent teams support`),o>0&&n(`Guardrails: ${o} workspace(s) backfilled with deny list + PreToolUse guard hook`)}export{se as a,ne as b,re as c,pe as d,ue as e,q as f,H as g,V as h,Q as i,ye as j};
+//# sourceMappingURL=chunk-DWADWDMU.js.map

package/dist/chunk-DWADWDMU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agents/workspace-setup.ts","../src/agents/bootstrap.ts","../src/agents/codegraph-bootstrap.ts"],"sourcesContent":["import { existsSync, mkdirSync, writeFileSync, readFileSync } from \"fs\"\nimport { resolve } from \"path\"\nimport { createHash } from \"crypto\"\nimport type { AgentDef } from \"@/daemon/config\"\nimport { generateAgentsMd } from \"./bootstrap\"\nimport { CODEGRAPH_TOOLS, codegraphClaudeMdSection } from \"./codegraph-bootstrap\"\n\n// Marker stamped into auto-generated CLAUDE.md so we can tell agentx-managed\n// files apart from user-edited ones. On daemon start, files with the marker\n// are silently regenerated when the systemPrompt hash changes; files without\n// the marker are treated as user-owned and never touched.\nconst MANAGED_MARKER_PREFIX = \"<!-- agentx-managed: hash=\"\nconst MANAGED_MARKER_SUFFIX = \" -->\"\n\n/** Hash inputs that drive the managed-CLAUDE.md content. Anything that\n *  affects what `generateClaudeMd` emits should feed into this so flipping\n *  the input also refreshes the file on next boot. Currently:\n *  systemPrompt + codegraph flag (the codegraph instruction block is\n *  conditional on it). */\nfunction managedHashInputs(def: Pick<AgentDef, \"systemPrompt\" | \"codegraph\">): string {\n  return createHash(\"sha256\")\n    .update(def.systemPrompt ?? \"\")\n    .update(\"\\0\")\n    .update(def.codegraph ? \"cg:1\" : \"cg:0\")\n    .digest(\"hex\")\n    .slice(0, 16)\n}\n\nfunction buildManagedMarker(def: Pick<AgentDef, \"systemPrompt\" | \"codegraph\">): string {\n  return `${MANAGED_MARKER_PREFIX}${managedHashInputs(def)}${MANAGED_MARKER_SUFFIX}`\n}\n\n/**\n * Read the managed marker from an existing file's first line, if present.\n * Returns the hash (truncated sha256 hex) when found, null otherwise.\n * Files without the marker are user-managed and untouchable.\n */\nexport function readManagedHash(content: string): string | null {\n  const firstLine = content.split(\"\\n\", 1)[0] ?? \"\"\n  if (!firstLine.startsWith(MANAGED_MARKER_PREFIX)) return null\n  if (!firstLine.endsWith(MANAGED_MARKER_SUFFIX)) return null\n  return firstLine.slice(MANAGED_MARKER_PREFIX.length, firstLine.length - MANAGED_MARKER_SUFFIX.length)\n}\n\n// --- Workspace Setup: align agent workspaces with Claude Code best practices ---\n//\n// Generates on daemon start (if missing):\n//   CLAUDE.md          — project conventions, under 200 lines, @AGENTS.md import\n//   AGENTS.md          — agents.md spec for cross-tool compatibility\n//   .claude/settings.json — hooks, permissions, auto memory\n//   .claude/rules/     — path-specific rules based on agent role\n\n/** Detect agent role from systemPrompt or agent ID */\nfunction detectRole(agentId: string, def: AgentDef): \"coding\" | \"pm\" | \"devops\" | \"qa\" | \"general\" {\n  const text = `${agentId} ${def.systemPrompt || \"\"} ${def.name}`.toLowerCase()\n  if (/cod(e|ing|er)|develop|engineer|program/.test(text)) return \"coding\"\n  if (/pm|project.?manag|product|scrum/.test(text)) return \"pm\"\n  if (/devops|deploy|infra|ops|sre|ci.?cd/.test(text)) return \"devops\"\n  if (/qa|test|quality|forensic/.test(text)) return \"qa\"\n  return \"general\"\n}\n\n/** Generate CLAUDE.md for an agent workspace */\nexport function generateClaudeMd(agentId: string, def: AgentDef, daemonPort: string): string {\n  const role = detectRole(agentId, def)\n  const lines: string[] = []\n\n  // Managed-marker on line 1 — used by setupWorkspace to detect stale\n  // auto-generated files and regenerate them when systemPrompt changes.\n  // User-edited files (no marker) are left alone forever.\n  lines.push(buildManagedMarker(def))\n  lines.push(`# ${def.name}`)\n  lines.push(\"\")\n  lines.push(\"@AGENTS.md\")\n  lines.push(\"\")\n\n  // Agent identity from systemPrompt — emitted verbatim. Truncating here would\n  // silently drop instructions (e.g. multi-paragraph protocols), so we trade\n  // a few extra tokens in CLAUDE.md for fidelity. The runtime path already\n  // forwards the full systemPrompt via --append-system-prompt; this section\n  // mirrors it for tools that read CLAUDE.md as workspace context.\n  if (def.systemPrompt && def.systemPrompt.trim().length > 0) {\n    lines.push(\"## Role\")\n    lines.push(\"\")\n    lines.push(def.systemPrompt.trimEnd())\n    lines.push(\"\")\n  }\n\n  // Build/test commands\n  lines.push(\"## Commands\")\n  lines.push(\"\")\n  if (existsSync(resolve(def.workspace, \"package.json\"))) {\n    lines.push(\"```bash\")\n    lines.push(\"npm install    # install dependencies\")\n    lines.push(\"npm test       # run tests\")\n    lines.push(\"npm run build  # build project\")\n    lines.push(\"```\")\n  } else if (existsSync(resolve(def.workspace, \"requirements.txt\"))) {\n    lines.push(\"```bash\")\n    lines.push(\"pip install -r requirements.txt\")\n    lines.push(\"pytest\")\n    lines.push(\"```\")\n  }\n  lines.push(\"\")\n\n  // Role-specific conventions\n  lines.push(\"## Conventions\")\n  lines.push(\"\")\n  switch (role) {\n    case \"coding\":\n      lines.push(\"- Write tests for new code before committing\")\n      lines.push(\"- Keep functions small and focused\")\n      lines.push(\"- Follow existing patterns in the codebase\")\n      lines.push(\"- Run tests before pushing\")\n      break\n    case \"pm\":\n      lines.push(\"- Keep responses concise (3-5 lines main message)\")\n      lines.push(\"- Reference issues with #IID and MRs with !IID\")\n      lines.push(\"- Update issue labels and milestones when relevant\")\n      lines.push(\"- Summarize decisions, don't narrate process\")\n      break\n    case \"devops\":\n      lines.push(\"- Always check service status before making changes\")\n      lines.push(\"- Never run destructive commands without confirmation\")\n      lines.push(\"- Log all deployment actions\")\n      lines.push(\"- Verify changes in staging before production\")\n      break\n    case \"qa\":\n      lines.push(\"- Document reproduction steps for every bug\")\n      lines.push(\"- Include expected vs actual behavior\")\n      lines.push(\"- Check both happy path and edge cases\")\n      lines.push(\"- Attach screenshots when reporting UI issues\")\n      break\n    default:\n      lines.push(\"- Be concise — lead with the answer, skip preamble\")\n      lines.push(\"- Follow existing patterns in the codebase\")\n  }\n  lines.push(\"\")\n\n  // Cross-channel messaging capability\n  lines.push(\"## Cross-Channel Messaging\")\n  lines.push(\"\")\n  lines.push(\"You can send messages to any channel proactively:\")\n  lines.push(\"```bash\")\n  lines.push(`curl -X POST http://localhost:${daemonPort}/send \\\\`)\n  lines.push(`  -H \"Content-Type: application/json\" \\\\`)\n  lines.push(`  -d '{\"channel\":\"telegram\",\"chatId\":\"<id>\",\"text\":\"<message>\",\"agentId\":\"${agentId}\"}'`)\n  lines.push(\"```\")\n  lines.push('Channels: telegram, whatsapp, gitlab, discord')\n  lines.push(\"\")\n\n  // Typed actions catalog — prefer these over free-form Bash/Read/Write/curl\n  // when applicable. Each action's call lands in /traces as a structured\n  // step (action: <name>, input: …, output: …) which is how observability\n  // works in this codebase. Free-form Bash gets recorded as opaque shell\n  // text, which is harder to debug and harder to compose into workflows.\n  lines.push(\"## Typed actions — prefer these over free-form Bash\")\n  lines.push(\"\")\n  lines.push(\"Daemon-shipped typed actions cover the common needs. Each call appears in `/traces` as a structured step (input + output schema), unlike opaque `Bash`/`curl`/`Read` calls.\")\n  lines.push(\"\")\n  lines.push(\"```bash\")\n  lines.push(\"# List available actions + their schemas\")\n  lines.push(`agentx actions builtin                 # → catalog`)\n  lines.push(`agentx actions builtin <name> --schema # → input/output schema`)\n  lines.push(\"\")\n  lines.push(\"# Invoke an action with typed JSON input\")\n  lines.push(`agentx actions builtin http.fetch        --input '{\"url\":\"https://example.com/data\"}'`)\n  lines.push(`agentx actions builtin http.post         --input '{\"url\":\"https://x.tld/hook\",\"body\":{\"k\":\"v\"}}'`)\n  lines.push(`agentx actions builtin file.read_lines   --input '{\"path\":\"data/prices.json\"}'`)\n  lines.push(`agentx actions builtin file.write_jsonl  --input '{\"path\":\"leads.jsonl\",\"record\":{\"name\":\"…\",\"email\":\"…\"}}'`)\n  lines.push(`agentx actions builtin extract.structured --input '{\"prompt\":\"<text>\",\"schema\":{\"type\":\"object\",…}}'`)\n  lines.push(`agentx actions builtin rag.lexical       --input '{\"agentId\":\"${agentId}\",\"query\":\"…\",\"limit\":5}'`)\n  lines.push(`agentx actions builtin agent.call        --input '{\"agentId\":\"<local-agent>\",\"message\":\"…\"}'`)\n  lines.push(`agentx actions builtin mesh.delegate     --input '{\"peer\":\"<peer-name>\",\"agent\":\"<peer-agent>\",\"message\":\"…\"}'`)\n  lines.push(\"```\")\n  lines.push(\"\")\n  lines.push(\"Rule of thumb:\")\n  lines.push(\"- HTTP fetch/POST → `http.fetch` / `http.post` (not `Bash curl`)\")\n  lines.push(\"- Reading a file you'll parse → `file.read_lines` (not `Bash cat`)\")\n  lines.push(\"- Appending a structured record → `file.write_jsonl` (not `Bash echo >>` or `Write` with model-formatted JSON)\")\n  lines.push(\"- Extracting fields from text into a typed object → `extract.structured` (not asking the model to format JSON in its reply)\")\n  lines.push(\"- Searching a doc corpus → `rag.lexical` (not `Read` over every file)\")\n  lines.push(\"- Calling another agent on this daemon → `agent.call` (fresh session by default; not composing `Bash curl` to /task)\")\n  lines.push(\"- Calling an agent on a peer mesh node → `mesh.delegate` (cross-machine; same fresh-session default)\")\n  lines.push(\"\")\n\n  // CodeGraph instruction block — only when the agent opted in. See\n  // src/agents/codegraph-bootstrap.ts for the section content; sourcing it\n  // from one place keeps the wording consistent if upstream changes.\n  if (def.codegraph) {\n    lines.push(codegraphClaudeMdSection())\n  }\n\n  return lines.join(\"\\n\")\n}\n\n// Phase 0 stop-gap deny list for the destructive-action guardrails. Claude\n// Code deny globs are coarse (single trailing wildcard), so this is a blunt\n// backstop for the clearly-always-destructive prisma/dropdb classes that\n// caused the 2026-07-21 prod-wipe incident. The env-var-resolved, nuanced\n// matching (diff --shadow-database-url pointed at prod, pg_restore --clean,\n// migrate deploy) is done by the `agentx guard` PreToolUse hook, which runs\n// even under bypassPermissions (where deny rules may be skipped).\nconst GUARDRAIL_DENY = [\n  \"Bash(npx prisma migrate reset*)\",\n  \"Bash(prisma migrate reset*)\",\n  \"Bash(npx prisma db push*)\",\n  \"Bash(prisma db push*)\",\n  \"Bash(dropdb*)\",\n]\n\n/**\n * The command the PreToolUse hook runs. This fires on EVERY Bash/Write/Edit\n * call, so it must be cheap: spawning `node dist/cli.js guard check` cost\n * ~300ms of interpreter + bundle boot per tool call. Instead we POST the\n * payload to the already-running daemon over loopback (~1ms) and pipe its\n * response straight back to Claude Code. `/guard/check` is loopback-only.\n *\n * The trailing `|| true` is load-bearing: a PreToolUse hook exiting 2 BLOCKS\n * the tool call, and curl uses exit 2 for its own init failures. Forcing\n * exit 0 means a curl/daemon problem can never masquerade as a policy deny.\n * If the daemon is unreachable we fail open — acceptable because the daemon\n * is what spawns the agents in the first place, so \"daemon down\" means there\n * are no agent tool calls to guard.\n */\nfunction guardHookCommand(agentId: string, daemonPort: string): string {\n  const url = `http://127.0.0.1:${daemonPort}/guard/check?agent=${encodeURIComponent(agentId)}`\n  return `curl -s --max-time 3 -H 'Content-Type: application/json' --data-binary @- '${url}' 2>/dev/null || true`\n}\n\n/** PreToolUse hook entries wiring the guard onto Bash + Write/Edit. */\nfunction guardPreToolUseHooks(agentId: string, daemonPort: string): unknown[] {\n  const command = guardHookCommand(agentId, daemonPort)\n  return [\n    { matcher: \"Bash\", hooks: [{ type: \"command\", command, timeout: 10 }] },\n    { matcher: \"Write|Edit\", hooks: [{ type: \"command\", command, timeout: 10 }] },\n  ]\n}\n\n/** Is this hook entry one of ours? Matches both the current curl form and\n *  the earlier `guard check` CLI form, so stale entries get replaced rather\n *  than duplicated. */\nfunction isGuardEntry(entry: any): boolean {\n  return (\n    Array.isArray(entry?.hooks) &&\n    entry.hooks.some(\n      (h: any) =>\n        typeof h?.command === \"string\" && (h.command.includes(\"/guard/check\") || h.command.includes(\"guard check\")),\n    )\n  )\n}\n\n/** Generate .claude/settings.json with hooks and permissions */\nfunction generateSettings(agentId: string, def: AgentDef, daemonPort: string = \"19900\"): Record<string, unknown> {\n  const settings: Record<string, unknown> = {\n    autoMemoryEnabled: true,\n    env: {\n      CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: \"1\",\n    },\n  }\n\n  // Permission mode. The guardrail deny list is injected in ALL modes —\n  // including bypassPermissions, which previously had none — as a stop-gap\n  // backstop beneath the PreToolUse guard hook.\n  if (def.permissionMode === \"bypassPermissions\") {\n    settings[\"permissions\"] = { deny: [...GUARDRAIL_DENY] }\n  } else if (def.permissionMode === \"plan\") {\n    settings[\"permissions\"] = {\n      deny: [...GUARDRAIL_DENY, \"Bash(rm -rf *)\", \"Bash(drop *)\", \"Bash(DELETE *)\"],\n    }\n  } else {\n    // Default: deny destructive operations\n    settings[\"permissions\"] = {\n      deny: [\n        ...GUARDRAIL_DENY,\n        \"Bash(rm -rf /)\",\n        \"Bash(> /dev/sda*)\",\n        \"Bash(mkfs*)\",\n      ],\n    }\n  }\n\n  // Pre-authorize codegraph MCP tools so claude doesn't prompt for each\n  // call. Even under bypassPermissions there's no harm — an explicit allow\n  // list survives if the agent later switches to a stricter mode.\n  if (def.codegraph) {\n    const perms = (settings[\"permissions\"] as Record<string, unknown>) || {}\n    const existing = Array.isArray(perms[\"allow\"]) ? (perms[\"allow\"] as string[]) : []\n    perms[\"allow\"] = [...new Set([...existing, ...CODEGRAPH_TOOLS])]\n    settings[\"permissions\"] = perms\n  }\n\n  // Hooks\n  const hooks: Record<string, unknown[]> = {}\n\n  // PreToolUse — destructive-action guardrails. Runs the guard on every Bash\n  // and Write/Edit call; in warn mode it audits without blocking. This is the\n  // primary enforcement chokepoint (works even under bypassPermissions).\n  hooks[\"PreToolUse\"] = guardPreToolUseHooks(agentId, daemonPort)\n\n  // Notification hook — log when agent needs input\n  hooks[\"Notification\"] = [{\n    matcher: \"\",\n    hooks: [{\n      type: \"command\",\n      command: `echo \"[${agentId}] notification: $(jq -r '.type // \\\"unknown\\\"')\" >> /tmp/agentx-${agentId}.log`,\n    }],\n  }]\n\n  // PostToolUse — log tool activity\n  hooks[\"PostToolUse\"] = [{\n    matcher: \"Bash\",\n    hooks: [{\n      type: \"command\",\n      command: `jq -r '.tool_input.command // empty' >> /tmp/agentx-${agentId}-commands.log`,\n    }],\n  }]\n\n  // SessionStart after compaction — re-inject key context\n  hooks[\"SessionStart\"] = [{\n    matcher: \"compact\",\n    hooks: [{\n      type: \"command\",\n      command: `echo \"Reminder: You are ${def.name} (${agentId}). Follow the conventions in CLAUDE.md.\"`,\n    }],\n  }]\n\n  settings[\"hooks\"] = hooks\n  return settings\n}\n\n/** Generate .claude/rules/ files based on agent role */\nfunction generateRules(agentId: string, def: AgentDef): Array<{ name: string; content: string }> {\n  const role = detectRole(agentId, def)\n  const rules: Array<{ name: string; content: string }> = []\n\n  switch (role) {\n    case \"coding\":\n      rules.push({\n        name: \"testing.md\",\n        content: `---\npaths:\n  - \"**/*.test.{ts,tsx,js,jsx}\"\n  - \"**/*.spec.{ts,tsx,js,jsx}\"\n  - \"test/**/*\"\n---\n\n# Testing Rules\n\n- Every new function should have a corresponding test\n- Test both happy path and error cases\n- Use descriptive test names that explain what's being tested\n- Mock external dependencies, not internal modules\n`,\n      })\n      rules.push({\n        name: \"code-quality.md\",\n        content: `# Code Quality\n\n- No console.log in production code (use a logger)\n- Handle errors explicitly — no empty catch blocks\n- Keep files under 300 lines\n- Extract repeated logic into shared utilities\n`,\n      })\n      break\n\n    case \"devops\":\n      rules.push({\n        name: \"deployment-safety.md\",\n        content: `# Deployment Safety\n\n- Always verify staging before production\n- Check disk space and memory before deploying\n- Never expose secrets in logs or commits\n- Use rollback-safe deployment strategies\n`,\n      })\n      break\n\n    case \"pm\":\n      rules.push({\n        name: \"communication.md\",\n        content: `# Communication Rules\n\n- Keep GitLab comments under 5 lines for the main message\n- Use <details> for verbose output (logs, commands, steps)\n- Reference issues with #IID, merge requests with !IID\n- Never mention Telegram handles on GitLab\n`,\n      })\n      break\n\n    case \"qa\":\n      rules.push({\n        name: \"bug-reports.md\",\n        content: `# Bug Report Format\n\nAlways include:\n1. Steps to reproduce\n2. Expected behavior\n3. Actual behavior\n4. Environment (browser, OS, version)\n5. Screenshots if applicable\n`,\n      })\n      break\n  }\n\n  return rules\n}\n\n/**\n * Set up an agent workspace with CLI-agent best practices.\n * Only creates files that don't already exist (non-destructive).\n */\nexport function setupWorkspace(\n  agentId: string,\n  def: AgentDef,\n  daemonPort: string = \"19900\",\n  log: (...args: unknown[]) => void = console.error,\n): { created: string[]; skipped: string[] } {\n  const created: string[] = []\n  const skipped: string[] = []\n  const workspace = def.workspace\n\n  if (!existsSync(workspace)) {\n    log(`Workspace not found: ${workspace}`)\n    return { created, skipped }\n  }\n\n  // Only set up CLI-backed tier agents.\n  if (def.tier !== \"claude-code\" && def.tier !== \"codex-cli\") {\n    return { created, skipped }\n  }\n\n  const writeIfMissing = (path: string, content: string) => {\n    if (existsSync(path)) {\n      skipped.push(path)\n    } else {\n      mkdirSync(resolve(path, \"..\"), { recursive: true })\n      writeFileSync(path, content)\n      created.push(path)\n    }\n  }\n\n  /**\n   * Write a managed file with the agentx-managed marker. If the file already\n   * exists and starts with our marker, regenerate when the embedded hash\n   * doesn't match the current expected hash. Files without the marker are\n   * treated as user-owned and left alone.\n   */\n  const writeManaged = (path: string, content: string, expectedHash: string) => {\n    if (!existsSync(path)) {\n      mkdirSync(resolve(path, \"..\"), { recursive: true })\n      writeFileSync(path, content)\n      created.push(path)\n      return\n    }\n    let existing: string\n    try {\n      existing = readFileSync(path, \"utf8\")\n    } catch {\n      skipped.push(path)\n      return\n    }\n    const existingHash = readManagedHash(existing)\n    if (existingHash === null) {\n      // User-edited (no marker) — never overwrite.\n      skipped.push(path)\n      return\n    }\n    if (existingHash === expectedHash) {\n      skipped.push(path)\n      return\n    }\n    writeFileSync(path, content)\n    created.push(`${path} (refreshed)`)\n  }\n\n  // AGENTS.md (agents.md spec) — first-line of systemPrompt only, currently\n  // not managed-marker'd. Left as writeIfMissing for now.\n  writeIfMissing(\n    resolve(workspace, \"AGENTS.md\"),\n    generateAgentsMd({ name: def.name, id: agentId, role: def.systemPrompt?.split(\"\\n\")[0], workspace, tier: def.tier }),\n  )\n\n  if (def.tier === \"codex-cli\") {\n    if (created.length > 0) {\n      log(`[${agentId}] workspace setup: created ${created.length} file(s)`)\n    }\n    return { created, skipped }\n  }\n\n  // CLAUDE.md — managed: silently refreshed when systemPrompt OR codegraph\n  // flag changes (both feed into the marker hash via managedHashInputs).\n  writeManaged(\n    resolve(workspace, \"CLAUDE.md\"),\n    generateClaudeMd(agentId, def, daemonPort),\n    managedHashInputs(def),\n  )\n\n  // .claude/settings.json\n  const settingsPath = resolve(workspace, \".claude/settings.json\")\n  writeIfMissing(settingsPath, JSON.stringify(generateSettings(agentId, def, daemonPort), null, 2))\n\n  // .claude/rules/\n  const rules = generateRules(agentId, def)\n  for (const rule of rules) {\n    writeIfMissing(resolve(workspace, \".claude/rules\", rule.name), rule.content)\n  }\n\n  if (created.length > 0) {\n    log(`[${agentId}] workspace setup: created ${created.length} file(s)`)\n  }\n\n  return { created, skipped }\n}\n\n/**\n * Patch existing .claude/settings.json to add missing keys (non-destructive).\n * Used to enable new features (like agent teams) on workspaces that already have settings.\n */\nfunction patchSettings(workspace: string, patches: Record<string, unknown>): boolean {\n  const settingsPath = resolve(workspace, \".claude/settings.json\")\n  if (!existsSync(settingsPath)) return false\n\n  try {\n    const existing = JSON.parse(readFileSync(settingsPath, \"utf-8\"))\n    let changed = false\n\n    for (const [key, value] of Object.entries(patches)) {\n      if (typeof value === \"object\" && value !== null && !Array.isArray(value)) {\n        // Merge objects (e.g. env: { KEY: \"value\" })\n        if (!existing[key]) existing[key] = {}\n        for (const [subKey, subValue] of Object.entries(value as Record<string, unknown>)) {\n          if (existing[key][subKey] === undefined) {\n            existing[key][subKey] = subValue\n            changed = true\n          }\n        }\n      } else if (existing[key] === undefined) {\n        existing[key] = value\n        changed = true\n      }\n    }\n\n    if (changed) {\n      writeFileSync(settingsPath, JSON.stringify(existing, null, 2))\n    }\n    return changed\n  } catch {\n    return false\n  }\n}\n\n/**\n * Backfill the destructive-action guardrails into an EXISTING settings.json:\n * merge the stop-gap deny list into permissions.deny (dedup, no clobber) and\n * add the PreToolUse guard hook if absent. writeIfMissing never touches\n * existing files, so live workspaces need this explicit patch. Idempotent —\n * re-running is a no-op once both are present. Returns true if it changed.\n */\nexport function patchGuardrails(workspace: string, agentId: string, daemonPort: string = \"19900\"): boolean {\n  const settingsPath = resolve(workspace, \".claude/settings.json\")\n  if (!existsSync(settingsPath)) return false\n\n  try {\n    const existing = JSON.parse(readFileSync(settingsPath, \"utf-8\"))\n    let changed = false\n\n    // 1. deny list\n    const perms = (existing.permissions ??= {})\n    const deny: string[] = Array.isArray(perms.deny) ? perms.deny : (perms.deny = [])\n    for (const rule of GUARDRAIL_DENY) {\n      if (!deny.includes(rule)) {\n        deny.push(rule)\n        changed = true\n      }\n    }\n\n    // 2. PreToolUse guard hook. Drop any previous guard entries (including\n    //    the older node-CLI form) and re-add the current one, so a changed\n    //    port or invocation style self-heals instead of duplicating.\n    const hooks = (existing.hooks ??= {})\n    const others = Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse.filter((e: any) => !isGuardEntry(e)) : []\n    const desired = [...others, ...guardPreToolUseHooks(agentId, daemonPort)]\n    if (JSON.stringify(hooks.PreToolUse ?? null) !== JSON.stringify(desired)) {\n      hooks.PreToolUse = desired\n      changed = true\n    }\n\n    if (changed) writeFileSync(settingsPath, JSON.stringify(existing, null, 2))\n    return changed\n  } catch {\n    return false\n  }\n}\n\n/**\n * Set up all agent workspaces on daemon start.\n */\nexport function setupAllWorkspaces(\n  agents: Record<string, AgentDef>,\n  daemonPort: string = \"19900\",\n  log: (...args: unknown[]) => void = console.error,\n): void {\n  let totalCreated = 0\n  let totalPatched = 0\n  let totalGuarded = 0\n  for (const [id, def] of Object.entries(agents)) {\n    if (def.tier !== \"claude-code\" && def.tier !== \"codex-cli\") continue\n    const result = setupWorkspace(id, def, daemonPort, log)\n    totalCreated += result.created.length\n\n    // Patch existing settings with new features (agent teams, etc.)\n    if (def.tier === \"claude-code\" && patchSettings(def.workspace, {\n      env: { CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: \"1\" },\n    })) {\n      totalPatched++\n    }\n\n    // Backfill destructive-action guardrails (deny list + PreToolUse hook)\n    // onto existing workspaces.\n    if (def.tier === \"claude-code\" && patchGuardrails(def.workspace, id, daemonPort)) {\n      totalGuarded++\n    }\n  }\n  if (totalCreated > 0) {\n    log(`Workspace setup: ${totalCreated} file(s) created across agent workspaces`)\n  }\n  if (totalPatched > 0) {\n    log(`Workspace patch: ${totalPatched} workspace(s) updated with agent teams support`)\n  }\n  if (totalGuarded > 0) {\n    log(`Guardrails: ${totalGuarded} workspace(s) backfilled with deny list + PreToolUse guard hook`)\n  }\n}\n","import { readFileSync, existsSync, unlinkSync, readdirSync } from \"fs\"\nimport { resolve } from \"path\"\n\n// --- Bootstrap Identity Files ---\n//\n// Support for structured workspace identity files (inspired by OpenClaw).\n// These files live in the agent's workspace and are auto-loaded into context.\n//\n// Supported files:\n//   SOUL.md            — default personality, tone, boundaries\n//   SOUL.{profile}.md  — named soul profiles (e.g. SOUL.finance.md, SOUL.legal.md)\n//   IDENTITY.md        — name, role, emoji, tagline (persistent)\n//   USER.md            — user profile, preferences (persistent)\n//   AGENTS.md          — operating rules, standing orders (persistent)\n//   BOOTSTRAP.md       — one-time first-run ritual (auto-deleted after first load)\n//\n// Soul switching: send \"/soul finance\" to swap to SOUL.finance.md mid-session.\n\nexport interface BootstrapFiles {\n  soul?: string\n  /** Active soul profile name (undefined = default SOUL.md) */\n  soulProfile?: string\n  identity?: string\n  user?: string\n  agents?: string\n  bootstrap?: string\n}\n\nconst BOOTSTRAP_FILE_NAMES = [\n  \"SOUL.md\",\n  \"IDENTITY.md\",\n  \"USER.md\",\n  \"AGENTS.md\",\n  \"BOOTSTRAP.md\",\n] as const\n\n/**\n * Load bootstrap identity files from an agent's workspace.\n * @param soulProfile — optional soul profile name (e.g. \"finance\" loads SOUL.finance.md)\n */\nexport function loadBootstrapFiles(workspace: string, soulProfile?: string): BootstrapFiles {\n  const result: BootstrapFiles = {}\n\n  const tryLoad = (filename: string): string | undefined => {\n    const filePath = resolve(workspace, filename)\n    if (!existsSync(filePath)) return undefined\n    try {\n      const content = readFileSync(filePath, \"utf-8\").trim()\n      return content || undefined\n    } catch {\n      return undefined\n    }\n  }\n\n  // Load soul: profile-specific if requested, fallback to default\n  if (soulProfile) {\n    const profileSoul = tryLoad(`SOUL.${soulProfile}.md`)\n    if (profileSoul) {\n      result.soul = profileSoul\n      result.soulProfile = soulProfile\n    } else {\n      // Profile not found — fall back to default and note it\n      result.soul = tryLoad(\"SOUL.md\")\n    }\n  } else {\n    result.soul = tryLoad(\"SOUL.md\")\n  }\n\n  result.identity = tryLoad(\"IDENTITY.md\")\n  result.user = tryLoad(\"USER.md\")\n  result.agents = tryLoad(\"AGENTS.md\")\n  result.bootstrap = tryLoad(\"BOOTSTRAP.md\")\n\n  // BOOTSTRAP.md is one-time: delete after loading\n  if (result.bootstrap) {\n    try {\n      unlinkSync(resolve(workspace, \"BOOTSTRAP.md\"))\n    } catch {\n      // Best-effort deletion\n    }\n  }\n\n  return result\n}\n\n/**\n * Build context string from bootstrap files.\n * Returns empty string if no files found.\n */\nexport function buildBootstrapContext(files: BootstrapFiles): string {\n  const sections: string[] = []\n\n  if (files.identity) {\n    sections.push(`[Identity]\\n${files.identity}`)\n  }\n\n  if (files.soul) {\n    sections.push(`[Personality & Boundaries]\\n${files.soul}`)\n  }\n\n  // AGENTS.md is intentionally NOT injected into AgentX's --append-system-prompt\n  // anymore. It's loaded natively by Claude Code via `@AGENTS.md` in the\n  // workspace's CLAUDE.md (generated by workspace-setup.ts for new workspaces;\n  // added to existing workspaces by the 2026-04-24 distribution). Injecting it\n  // here on top of the native CLAUDE.md path would double the bytes. Keeping\n  // the load in BootstrapFiles for diagnostic/listing purposes only.\n\n  if (files.user) {\n    sections.push(`[User Profile]\\n${files.user}`)\n  }\n\n  if (files.bootstrap) {\n    sections.push(`[First-Run Instructions — one time only]\\n${files.bootstrap}`)\n  }\n\n  if (sections.length === 0) return \"\"\n\n  return sections.join(\"\\n\\n\")\n}\n\n/**\n * Check which bootstrap files exist in a workspace (for status/diagnostics).\n */\nexport function listBootstrapFiles(workspace: string): string[] {\n  return BOOTSTRAP_FILE_NAMES.filter((name) =>\n    existsSync(resolve(workspace, name))\n  )\n}\n\n/**\n * List available soul profiles in a workspace.\n * Returns profile names (e.g. [\"finance\", \"legal\", \"creative\"]).\n */\nexport function listSoulProfiles(workspace: string): string[] {\n  try {\n    return readdirSync(workspace)\n      .filter(f => f.startsWith(\"SOUL.\") && f.endsWith(\".md\") && f !== \"SOUL.md\")\n      .map(f => f.slice(5, -3)) // \"SOUL.finance.md\" → \"finance\"\n  } catch {\n    return []\n  }\n}\n\n/**\n * Generate a standard AGENTS.md for a new agent workspace.\n * Follows the agents.md community convention (https://agents.md/).\n * Readable by Claude Code, Codex, Cursor, Amp, Gemini CLI, etc.\n */\nexport function generateAgentsMd(agent: {\n  name: string\n  id: string\n  role?: string\n  workspace: string\n  tier?: string\n}): string {\n  return `# ${agent.name}\n\n> Agent ID: \\`${agent.id}\\` | Tier: ${agent.tier || \"claude-code\"}\n\n## Role\n\n${agent.role || \"AI agent managed by AgentX orchestrator.\"}\n\n## Setup\n\nThis workspace is managed by AgentX. The agent runs via:\n\\`\\`\\`bash\n# Direct execution\nagentx daemon send ${agent.id} \"your task here\"\n\n# Or via any connected channel (Telegram, WhatsApp, GitLab)\n\\`\\`\\`\n\n## Code Style\n\n- Follow existing patterns in the codebase\n- Use the language and framework conventions already present\n- Keep changes minimal and focused\n\n## Testing\n\nRun tests before committing:\n\\`\\`\\`bash\nnpm test    # or the project's test command\n\\`\\`\\`\n\n## PR Guidelines\n\n- One logical change per commit\n- Reference issue numbers when applicable\n- Keep PR descriptions concise\n\n## AgentX Integration\n\nThis agent is part of an AgentX mesh. It can:\n- Receive tasks from messaging channels (Telegram, WhatsApp, Discord)\n- Respond to GitLab @mentions on issues and MRs\n- Delegate to other agents by mentioning their handles\n- Send cross-channel messages via the /send API\n- Access its wiki knowledge base for context\n`\n}\n\n/**\n * Detect a /soul command in a message.\n * Returns the requested profile name, or null if no /soul command found.\n * \"/soul finance\" → \"finance\"\n * \"/soul\" or \"/soul default\" → \"default\" (reset to SOUL.md)\n */\nexport function detectSoulSwitch(message: string): string | null {\n  const match = message.match(/\\/soul\\s+(\\w+)/i)\n  if (match) return match[1].toLowerCase()\n  if (/\\/soul\\s*$/i.test(message)) return \"default\"\n  return null\n}\n","import { execFile } from \"child_process\"\nimport { existsSync } from \"fs\"\nimport { resolve } from \"path\"\nimport type { AgentDef } from \"@/daemon/config\"\nimport type { McpServerMap } from \"./agent-mcp\"\n\n// --- CodeGraph integration: per-agent semantic code-graph index ---\n//\n// CodeGraph (https://github.com/colbymchenry/codegraph) is a local\n// tree-sitter → SQLite knowledge graph exposed to Claude Code / Codex via\n// MCP. Opt-in per agent with `codegraph: true` on the agent's config.\n//\n// This module owns three responsibilities:\n//   1. `effectiveMcpConfig(def)` — synthesize the codegraph MCP server\n//      entry into the agent's MCP map. Used by the daemon's\n//      installAgentMcpConfig pass so the workspace's .mcp.json picks\n//      up `codegraph serve --mcp` automatically.\n//   2. `bootstrapCodegraphIndexes(agents, log)` — at daemon boot, fire\n//      off `codegraph init --index --quiet` in the background for any\n//      opted-in workspace whose `.codegraph/` is missing. Throttled to\n//      2 parallel jobs so a large fleet doesn't thrash the host.\n//      Returns immediately; the indexes finish on their own.\n//   3. Export the constant tool/CLI names that workspace-setup needs\n//      to keep CLAUDE.md and settings.json in sync.\n\n/** MCP tool names exposed by `codegraph serve --mcp`. Used to extend the\n *  per-workspace `.claude/settings.json` permissions.allow so claude\n *  doesn't prompt for permission on every call. Keep in sync with the\n *  upstream tool surface — additions are harmless, removals leave a\n *  stale allow entry (also harmless). */\nexport const CODEGRAPH_TOOLS = [\n  \"mcp__codegraph__codegraph_search\",\n  \"mcp__codegraph__codegraph_context\",\n  \"mcp__codegraph__codegraph_callers\",\n  \"mcp__codegraph__codegraph_callees\",\n  \"mcp__codegraph__codegraph_impact\",\n  \"mcp__codegraph__codegraph_node\",\n  \"mcp__codegraph__codegraph_status\",\n  \"mcp__codegraph__codegraph_files\",\n] as const\n\n/** MCP server stanza we inject into `.mcp.json` for opted-in agents. */\nexport const CODEGRAPH_MCP_SERVER: { command: string; args: string[] } = {\n  command: \"codegraph\",\n  args: [\"serve\", \"--mcp\"],\n}\n\n/** Markdown block appended to managed CLAUDE.md when codegraph is on.\n *  Tells the agent to prefer codegraph_* over grep, and to always spawn\n *  an Explore subagent for codegraph_explore so the large source-dump\n *  doesn't bloat the main session context. Mirrors the upstream-\n *  recommended wording from the README's \"Global Instructions\" block. */\nexport function codegraphClaudeMdSection(): string {\n  return [\n    \"## CodeGraph\",\n    \"\",\n    \"This workspace has CodeGraph initialized — a semantic code-knowledge-graph indexed via tree-sitter. Use it instead of grep/find/Read for exploration.\",\n    \"\",\n    \"**ALWAYS spawn an Explore subagent for `codegraph_explore` / `codegraph_context`** — those tools return large source sections that would otherwise bloat the main session. Include this in the Explore prompt:\",\n    \"\",\n    \"> Use `codegraph_explore` as your PRIMARY tool — one call returns full source from all relevant files. Do not re-Read files codegraph_explore already returned. Fall back to grep/glob/Read only if codegraph returned no results.\",\n    \"\",\n    \"**In the main session, use these lightweight codegraph tools directly:**\",\n    \"\",\n    \"| Tool | Use for |\",\n    \"|---|---|\",\n    \"| `codegraph_search` | Find symbols by name across the codebase |\",\n    \"| `codegraph_callers` / `codegraph_callees` | Trace call flow |\",\n    \"| `codegraph_impact` | Check what's affected before editing a symbol |\",\n    \"| `codegraph_node` | Get a single symbol's details |\",\n    \"| `codegraph_files` | Indexed file structure (faster than ls) |\",\n    \"| `codegraph_status` | Index health |\",\n    \"\",\n  ].join(\"\\n\")\n}\n\n/** Return the MCP server map an agent should expose to .mcp.json,\n *  layering codegraph on top of the operator-declared `def.mcp` when\n *  `def.codegraph === true`. Operator-declared entries win on key\n *  collision (operator can override by declaring their own\n *  `mcp.codegraph` block with different args). */\nexport function effectiveMcpConfig(def: AgentDef): McpServerMap {\n  const base: McpServerMap = ((def as any).mcp ?? {}) as McpServerMap\n  if (!def.codegraph) return base\n  if (base.codegraph) return base\n  return { ...base, codegraph: { command: CODEGRAPH_MCP_SERVER.command, args: [...CODEGRAPH_MCP_SERVER.args] } }\n}\n\nconst INDEX_DIR = \".codegraph\"\nconst INIT_TIMEOUT_MS = 10 * 60 * 1000 // 10 min — Swift Compiler benchmark indexed 25k files in ~4 min\nconst MAX_PARALLEL = 2\n\n/** Spawn `codegraph init --index --quiet` for one workspace. Returns the\n *  duration in ms on success, throws on failure. Caller decides whether\n *  to surface the error. */\nfunction indexWorkspace(workspace: string): Promise<number> {\n  const started = Date.now()\n  return new Promise<number>((res, rej) => {\n    execFile(\n      \"codegraph\",\n      [\"init\", \"--index\", \"--quiet\", workspace],\n      { timeout: INIT_TIMEOUT_MS, maxBuffer: 4 * 1024 * 1024 },\n      (err) => {\n        if (err) rej(err)\n        else res(Date.now() - started)\n      },\n    )\n  })\n}\n\n/** Boot-time helper: kick off `codegraph init --index` for every\n *  opted-in workspace whose `.codegraph/` is missing. Fire-and-forget —\n *  the returned promise resolves once all background jobs settle, but\n *  callers (daemon start) don't need to await it. Indexing happens\n *  while the daemon is already serving traffic; cold dispatches before\n *  the index lands gracefully fall through to grep (the MCP server\n *  returns an empty result, and CLAUDE.md tells the agent to fall back).\n *\n *  Throttled to MAX_PARALLEL concurrent jobs so a fleet boot doesn't\n *  saturate CPU/disk. */\nexport async function bootstrapCodegraphIndexes(\n  agents: Record<string, AgentDef>,\n  log: (...args: unknown[]) => void = console.error,\n): Promise<void> {\n  const pending: Array<{ agentId: string; workspace: string }> = []\n  for (const [agentId, def] of Object.entries(agents)) {\n    if (!def.codegraph) continue\n    if (def.tier !== \"claude-code\" && def.tier !== \"codex-cli\") continue\n    if (!existsSync(def.workspace)) continue\n    if (existsSync(resolve(def.workspace, INDEX_DIR))) continue\n    pending.push({ agentId, workspace: def.workspace })\n  }\n\n  if (pending.length === 0) return\n\n  log(`codegraph: indexing ${pending.length} workspace(s) in background (max ${MAX_PARALLEL} parallel)`)\n\n  let i = 0\n  const runners: Promise<void>[] = []\n  for (let slot = 0; slot < Math.min(MAX_PARALLEL, pending.length); slot++) {\n    runners.push((async () => {\n      while (true) {\n        const idx = i++\n        if (idx >= pending.length) return\n        const { agentId, workspace } = pending[idx]\n        try {\n          const ms = await indexWorkspace(workspace)\n          log(`  codegraph: indexed ${agentId} in ${(ms / 1000).toFixed(1)}s`)\n        } catch (err: any) {\n          // codegraph binary missing surfaces as ENOENT — recoverable hint\n          const hint = err?.code === \"ENOENT\"\n            ? \" (codegraph CLI not on PATH; install with `npm i -g @colbymchenry/codegraph`)\"\n            : \"\"\n          log(`  codegraph: ${agentId} index failed: ${err?.message ?? err}${hint}`)\n        }\n      }\n    })())\n  }\n  await Promise.allSettled(runners)\n}\n"],"mappings":"AAAA,OAAS,cAAAA,EAAY,aAAAC,EAAW,iBAAAC,EAAe,gBAAAC,MAAoB,KACnE,OAAS,WAAAC,MAAe,OACxB,OAAS,cAAAC,MAAkB,SCF3B,OAAS,gBAAAC,EAAc,cAAAC,EAAY,cAAAC,EAAY,eAAAC,OAAmB,KAClE,OAAS,WAAAC,MAAe,OAuCjB,SAASC,GAAmBC,EAAmBC,EAAsC,CAC1F,IAAMC,EAAyB,CAAC,EAE1BC,EAAWC,GAAyC,CACxD,IAAMC,EAAWC,EAAQN,EAAWI,CAAQ,EAC5C,GAAKG,EAAWF,CAAQ,EACxB,GAAI,CAEF,OADgBG,EAAaH,EAAU,OAAO,EAAE,KAAK,GACnC,MACpB,MAAE,CACA,MACF,CACF,EAGA,GAAIJ,EAAa,CACf,IAAMQ,EAAcN,EAAQ,QAAQF,MAAgB,EAChDQ,GACFP,EAAO,KAAOO,EACdP,EAAO,YAAcD,GAGrBC,EAAO,KAAOC,EAAQ,SAAS,OAGjCD,EAAO,KAAOC,EAAQ,SAAS,EASjC,GANAD,EAAO,SAAWC,EAAQ,aAAa,EACvCD,EAAO,KAAOC,EAAQ,SAAS,EAC/BD,EAAO,OAASC,EAAQ,WAAW,EACnCD,EAAO,UAAYC,EAAQ,cAAc,EAGrCD,EAAO,UACT,GAAI,CACFQ,EAAWJ,EAAQN,EAAW,cAAc,CAAC,CAC/C,MAAE,CAEF,CAGF,OAAOE,CACT,CAMO,SAASS,GAAsBC,EAA+B,CACnE,IAAMC,EAAqB,CAAC,EAyB5B,OAvBID,EAAM,UACRC,EAAS,KAAK;AAAA,EAAeD,EAAM,UAAU,EAG3CA,EAAM,MACRC,EAAS,KAAK;AAAA,EAA+BD,EAAM,MAAM,EAUvDA,EAAM,MACRC,EAAS,KAAK;AAAA,EAAmBD,EAAM,MAAM,EAG3CA,EAAM,WACRC,EAAS,KAAK;AAAA,EAA6CD,EAAM,WAAW,EAG1EC,EAAS,SAAW,EAAU,GAE3BA,EAAS,KAAK;AAAA;AAAA,CAAM,CAC7B,CA8BO,SAASC,EAAiBC,EAMtB,CACT,MAAO,KAAKA,EAAM;AAAA;AAAA,gBAEJA,EAAM,gBAAgBA,EAAM,MAAQ;AAAA;AAAA;AAAA;AAAA,EAIlDA,EAAM,MAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAOKA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAiC3B,CAQO,SAASC,GAAiBC,EAAgC,CAC/D,IAAMC,EAAQD,EAAQ,MAAM,iBAAiB,EAC7C,OAAIC,EAAcA,EAAM,CAAC,EAAE,YAAY,EACnC,cAAc,KAAKD,CAAO,EAAU,UACjC,IACT,CCtNA,OAAS,YAAAE,MAAgB,gBACzB,OAAS,cAAAC,MAAkB,KAC3B,OAAS,WAAAC,MAAe,OA4BjB,IAAMC,EAAkB,CAC7B,mCACA,oCACA,oCACA,oCACA,mCACA,iCACA,mCACA,iCACF,EAGaC,EAA4D,CACvE,QAAS,YACT,KAAM,CAAC,QAAS,OAAO,CACzB,EAOO,SAASC,GAAmC,CACjD,MAAO,CACL,eACA,GACA,6JACA,GACA,sNACA,GACA,0OACA,GACA,2EACA,GACA,qBACA,YACA,oEACA,kEACA,yEACA,uDACA,kEACA,wCACA,EACF,EAAE,KAAK;AAAA,CAAI,CACb,CAOO,SAASC,GAAmBC,EAA6B,CAC9D,IAAMC,EAAuBD,EAAY,KAAO,CAAC,EAEjD,MADI,CAACA,EAAI,WACLC,EAAK,UAAkBA,EACpB,CAAE,GAAGA,EAAM,UAAW,CAAE,QAASJ,EAAqB,QAAS,KAAM,CAAC,GAAGA,EAAqB,IAAI,CAAE,CAAE,CAC/G,CAEA,IAAMK,EAAY,aACZC,EAAkB,GAAK,GAAK,IAC5BC,EAAe,EAKrB,SAASC,EAAeC,EAAoC,CAC1D,IAAMC,EAAU,KAAK,IAAI,EACzB,OAAO,IAAI,QAAgB,CAACC,EAAKC,IAAQ,CACvChB,EACE,YACA,CAAC,OAAQ,UAAW,UAAWa,CAAS,EACxC,CAAE,QAASH,EAAiB,UAAW,EAAI,KAAO,IAAK,EACtDO,GAAQ,CACHA,EAAKD,EAAIC,CAAG,EACXF,EAAI,KAAK,IAAI,EAAID,CAAO,CAC/B,CACF,CACF,CAAC,CACH,CAYA,eAAsBI,GACpBC,EACAC,EAAoC,QAAQ,MAC7B,CACf,IAAMC,EAAyD,CAAC,EAChE,OAAW,CAACC,EAASf,CAAG,IAAK,OAAO,QAAQY,CAAM,EAC3CZ,EAAI,YACLA,EAAI,OAAS,eAAiBA,EAAI,OAAS,aAC1CN,EAAWM,EAAI,SAAS,IACzBN,EAAWC,EAAQK,EAAI,UAAWE,CAAS,CAAC,GAChDY,EAAQ,KAAK,CAAE,QAAAC,EAAS,UAAWf,EAAI,SAAU,CAAC,IAGpD,GAAIc,EAAQ,SAAW,EAAG,OAE1BD,EAAI,uBAAuBC,EAAQ,0CAA0CV,aAAwB,EAErG,IAAIY,EAAI,EACFC,EAA2B,CAAC,EAClC,QAASC,EAAO,EAAGA,EAAO,KAAK,IAAId,EAAcU,EAAQ,MAAM,EAAGI,IAChED,EAAQ,MAAM,SAAY,CACxB,OAAa,CACX,IAAME,EAAMH,IACZ,GAAIG,GAAOL,EAAQ,OAAQ,OAC3B,GAAM,CAAE,QAAAC,EAAS,UAAAT,CAAU,EAAIQ,EAAQK,CAAG,EAC1C,GAAI,CACF,IAAMC,EAAK,MAAMf,EAAeC,CAAS,EACzCO,EAAI,wBAAwBE,SAAeK,EAAK,KAAM,QAAQ,CAAC,IAAI,CACrE,OAASV,EAAP,CAEA,IAAMW,EAAOX,GAAK,OAAS,SACvB,gFACA,GACJG,EAAI,gBAAgBE,mBAAyBL,GAAK,SAAWA,IAAMW,GAAM,CAC3E,EAEJ,GAAG,CAAC,EAEN,MAAM,QAAQ,WAAWJ,CAAO,CAClC,CFpJA,IAAMK,EAAwB,6BACxBC,EAAwB,OAO9B,SAASC,EAAkBC,EAA2D,CACpF,OAAOC,EAAW,QAAQ,EACvB,OAAOD,EAAI,cAAgB,EAAE,EAC7B,OAAO,IAAI,EACX,OAAOA,EAAI,UAAY,OAAS,MAAM,EACtC,OAAO,KAAK,EACZ,MAAM,EAAG,EAAE,CAChB,CAEA,SAASE,EAAmBF,EAA2D,CACrF,MAAO,GAAGH,IAAwBE,EAAkBC,CAAG,IAAIF,GAC7D,CAOO,SAASK,EAAgBC,EAAgC,CAC9D,IAAMC,EAAYD,EAAQ,MAAM;AAAA,EAAM,CAAC,EAAE,CAAC,GAAK,GAE/C,MADI,CAACC,EAAU,WAAWR,CAAqB,GAC3C,CAACQ,EAAU,SAASP,CAAqB,EAAU,KAChDO,EAAU,MAAMR,EAAsB,OAAQQ,EAAU,OAASP,EAAsB,MAAM,CACtG,CAWA,SAASQ,EAAWC,EAAiBP,EAA8D,CACjG,IAAMQ,EAAO,GAAGD,KAAWP,EAAI,cAAgB,MAAMA,EAAI,OAAO,YAAY,EAC5E,MAAI,yCAAyC,KAAKQ,CAAI,EAAU,SAC5D,kCAAkC,KAAKA,CAAI,EAAU,KACrD,qCAAqC,KAAKA,CAAI,EAAU,SACxD,2BAA2B,KAAKA,CAAI,EAAU,KAC3C,SACT,CAGO,SAASC,EAAiBF,EAAiBP,EAAeU,EAA4B,CAC3F,IAAMC,EAAOL,EAAWC,EAASP,CAAG,EAC9BY,EAAkB,CAAC,EA2CzB,OAtCAA,EAAM,KAAKV,EAAmBF,CAAG,CAAC,EAClCY,EAAM,KAAK,KAAKZ,EAAI,MAAM,EAC1BY,EAAM,KAAK,EAAE,EACbA,EAAM,KAAK,YAAY,EACvBA,EAAM,KAAK,EAAE,EAOTZ,EAAI,cAAgBA,EAAI,aAAa,KAAK,EAAE,OAAS,IACvDY,EAAM,KAAK,SAAS,EACpBA,EAAM,KAAK,EAAE,EACbA,EAAM,KAAKZ,EAAI,aAAa,QAAQ,CAAC,EACrCY,EAAM,KAAK,EAAE,GAIfA,EAAM,KAAK,aAAa,EACxBA,EAAM,KAAK,EAAE,EACTC,EAAWC,EAAQd,EAAI,UAAW,cAAc,CAAC,GACnDY,EAAM,KAAK,SAAS,EACpBA,EAAM,KAAK,uCAAuC,EAClDA,EAAM,KAAK,4BAA4B,EACvCA,EAAM,KAAK,gCAAgC,EAC3CA,EAAM,KAAK,KAAK,GACPC,EAAWC,EAAQd,EAAI,UAAW,kBAAkB,CAAC,IAC9DY,EAAM,KAAK,SAAS,EACpBA,EAAM,KAAK,iCAAiC,EAC5CA,EAAM,KAAK,QAAQ,EACnBA,EAAM,KAAK,KAAK,GAElBA,EAAM,KAAK,EAAE,EAGbA,EAAM,KAAK,gBAAgB,EAC3BA,EAAM,KAAK,EAAE,EACLD,EAAM,CACZ,IAAK,SACHC,EAAM,KAAK,8CAA8C,EACzDA,EAAM,KAAK,oCAAoC,EAC/CA,EAAM,KAAK,4CAA4C,EACvDA,EAAM,KAAK,4BAA4B,EACvC,MACF,IAAK,KACHA,EAAM,KAAK,mDAAmD,EAC9DA,EAAM,KAAK,gDAAgD,EAC3DA,EAAM,KAAK,oDAAoD,EAC/DA,EAAM,KAAK,8CAA8C,EACzD,MACF,IAAK,SACHA,EAAM,KAAK,qDAAqD,EAChEA,EAAM,KAAK,uDAAuD,EAClEA,EAAM,KAAK,8BAA8B,EACzCA,EAAM,KAAK,+CAA+C,EAC1D,MACF,IAAK,KACHA,EAAM,KAAK,6CAA6C,EACxDA,EAAM,KAAK,uCAAuC,EAClDA,EAAM,KAAK,wCAAwC,EACnDA,EAAM,KAAK,+CAA+C,EAC1D,MACF,QACEA,EAAM,KAAK,yDAAoD,EAC/DA,EAAM,KAAK,4CAA4C,CAC3D,CACA,OAAAA,EAAM,KAAK,EAAE,EAGbA,EAAM,KAAK,4BAA4B,EACvCA,EAAM,KAAK,EAAE,EACbA,EAAM,KAAK,mDAAmD,EAC9DA,EAAM,KAAK,SAAS,EACpBA,EAAM,KAAK,iCAAiCF,WAAoB,EAChEE,EAAM,KAAK,0CAA0C,EACrDA,EAAM,KAAK,6EAA6EL,MAAY,EACpGK,EAAM,KAAK,KAAK,EAChBA,EAAM,KAAK,+CAA+C,EAC1DA,EAAM,KAAK,EAAE,EAObA,EAAM,KAAK,0DAAqD,EAChEA,EAAM,KAAK,EAAE,EACbA,EAAM,KAAK,6KAA6K,EACxLA,EAAM,KAAK,EAAE,EACbA,EAAM,KAAK,SAAS,EACpBA,EAAM,KAAK,0CAA0C,EACrDA,EAAM,KAAK,yDAAoD,EAC/DA,EAAM,KAAK,qEAAgE,EAC3EA,EAAM,KAAK,EAAE,EACbA,EAAM,KAAK,0CAA0C,EACrDA,EAAM,KAAK,uFAAuF,EAClGA,EAAM,KAAK,kGAAkG,EAC7GA,EAAM,KAAK,gFAAgF,EAC3FA,EAAM,KAAK,uHAA6G,EACxHA,EAAM,KAAK,2GAAsG,EACjHA,EAAM,KAAK,iEAAiEL,iCAAkC,EAC9GK,EAAM,KAAK,mGAA8F,EACzGA,EAAM,KAAK,qHAAgH,EAC3HA,EAAM,KAAK,KAAK,EAChBA,EAAM,KAAK,EAAE,EACbA,EAAM,KAAK,gBAAgB,EAC3BA,EAAM,KAAK,uEAAkE,EAC7EA,EAAM,KAAK,yEAAoE,EAC/EA,EAAM,KAAK,qHAAgH,EAC3HA,EAAM,KAAK,kIAA6H,EACxIA,EAAM,KAAK,4EAAuE,EAClFA,EAAM,KAAK,2HAAsH,EACjIA,EAAM,KAAK,2GAAsG,EACjHA,EAAM,KAAK,EAAE,EAKTZ,EAAI,WACNY,EAAM,KAAKG,EAAyB,CAAC,EAGhCH,EAAM,KAAK;AAAA,CAAI,CACxB,CASA,IAAMI,EAAiB,CACrB,kCACA,8BACA,4BACA,wBACA,eACF,EAgBA,SAASC,EAAiBV,EAAiBG,EAA4B,CAErE,MAAO,8EADK,oBAAoBA,uBAAgC,mBAAmBH,CAAO,0BAE5F,CAGA,SAASW,EAAqBX,EAAiBG,EAA+B,CAC5E,IAAMS,EAAUF,EAAiBV,EAASG,CAAU,EACpD,MAAO,CACL,CAAE,QAAS,OAAQ,MAAO,CAAC,CAAE,KAAM,UAAW,QAAAS,EAAS,QAAS,EAAG,CAAC,CAAE,EACtE,CAAE,QAAS,aAAc,MAAO,CAAC,CAAE,KAAM,UAAW,QAAAA,EAAS,QAAS,EAAG,CAAC,CAAE,CAC9E,CACF,CAKA,SAASC,EAAaC,EAAqB,CACzC,OACE,MAAM,QAAQA,GAAO,KAAK,GAC1BA,EAAM,MAAM,KACTC,GACC,OAAOA,GAAG,SAAY,WAAaA,EAAE,QAAQ,SAAS,cAAc,GAAKA,EAAE,QAAQ,SAAS,aAAa,EAC7G,CAEJ,CAGA,SAASC,EAAiBhB,EAAiBP,EAAeU,EAAqB,QAAkC,CAC/G,IAAMc,EAAoC,CACxC,kBAAmB,GACnB,IAAK,CACH,qCAAsC,GACxC,CACF,EA0BA,GArBIxB,EAAI,iBAAmB,oBACzBwB,EAAS,YAAiB,CAAE,KAAM,CAAC,GAAGR,CAAc,CAAE,EAC7ChB,EAAI,iBAAmB,OAChCwB,EAAS,YAAiB,CACxB,KAAM,CAAC,GAAGR,EAAgB,iBAAkB,eAAgB,gBAAgB,CAC9E,EAGAQ,EAAS,YAAiB,CACxB,KAAM,CACJ,GAAGR,EACH,iBACA,oBACA,aACF,CACF,EAMEhB,EAAI,UAAW,CACjB,IAAMyB,EAASD,EAAS,aAA8C,CAAC,EACjEE,EAAW,MAAM,QAAQD,EAAM,KAAQ,EAAKA,EAAM,MAAwB,CAAC,EACjFA,EAAM,MAAW,CAAC,GAAG,IAAI,IAAI,CAAC,GAAGC,EAAU,GAAGC,CAAe,CAAC,CAAC,EAC/DH,EAAS,YAAiBC,EAI5B,IAAMG,EAAmC,CAAC,EAK1C,OAAAA,EAAM,WAAgBV,EAAqBX,EAASG,CAAU,EAG9DkB,EAAM,aAAkB,CAAC,CACvB,QAAS,GACT,MAAO,CAAC,CACN,KAAM,UACN,QAAS,UAAUrB,kEAA0EA,OAC/F,CAAC,CACH,CAAC,EAGDqB,EAAM,YAAiB,CAAC,CACtB,QAAS,OACT,MAAO,CAAC,CACN,KAAM,UACN,QAAS,uDAAuDrB,gBAClE,CAAC,CACH,CAAC,EAGDqB,EAAM,aAAkB,CAAC,CACvB,QAAS,UACT,MAAO,CAAC,CACN,KAAM,UACN,QAAS,2BAA2B5B,EAAI,SAASO,2CACnD,CAAC,CACH,CAAC,EAEDiB,EAAS,MAAWI,EACbJ,CACT,CAGA,SAASK,EAActB,EAAiBP,EAAyD,CAC/F,IAAMW,EAAOL,EAAWC,EAASP,CAAG,EAC9B8B,EAAkD,CAAC,EAEzD,OAAQnB,EAAM,CACZ,IAAK,SACHmB,EAAM,KAAK,CACT,KAAM,aACN,QAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAcX,CAAC,EACDA,EAAM,KAAK,CACT,KAAM,kBACN,QAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOX,CAAC,EACD,MAEF,IAAK,SACHA,EAAM,KAAK,CACT,KAAM,uBACN,QAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOX,CAAC,EACD,MAEF,IAAK,KACHA,EAAM,KAAK,CACT,KAAM,mBACN,QAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOX,CAAC,EACD,MAEF,IAAK,KACHA,EAAM,KAAK,CACT,KAAM,iBACN,QAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CASX,CAAC,EACD,KACJ,CAEA,OAAOA,CACT,CAMO,SAASC,EACdxB,EACAP,EACAU,EAAqB,QACrBsB,EAAoC,QAAQ,MACF,CAC1C,IAAMC,EAAoB,CAAC,EACrBC,EAAoB,CAAC,EACrBC,EAAYnC,EAAI,UAEtB,GAAI,CAACa,EAAWsB,CAAS,EACvB,OAAAH,EAAI,wBAAwBG,GAAW,EAChC,CAAE,QAAAF,EAAS,QAAAC,CAAQ,EAI5B,GAAIlC,EAAI,OAAS,eAAiBA,EAAI,OAAS,YAC7C,MAAO,CAAE,QAAAiC,EAAS,QAAAC,CAAQ,EAG5B,IAAME,EAAiB,CAACC,EAAcjC,IAAoB,CACpDS,EAAWwB,CAAI,EACjBH,EAAQ,KAAKG,CAAI,GAEjBC,EAAUxB,EAAQuB,EAAM,IAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EAClDE,EAAcF,EAAMjC,CAAO,EAC3B6B,EAAQ,KAAKI,CAAI,EAErB,EAQMG,EAAe,CAACH,EAAcjC,EAAiBqC,IAAyB,CAC5E,GAAI,CAAC5B,EAAWwB,CAAI,EAAG,CACrBC,EAAUxB,EAAQuB,EAAM,IAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EAClDE,EAAcF,EAAMjC,CAAO,EAC3B6B,EAAQ,KAAKI,CAAI,EACjB,OAEF,IAAIX,EACJ,GAAI,CACFA,EAAWgB,EAAaL,EAAM,MAAM,CACtC,MAAE,CACAH,EAAQ,KAAKG,CAAI,EACjB,MACF,CACA,IAAMM,EAAexC,EAAgBuB,CAAQ,EAC7C,GAAIiB,IAAiB,KAAM,CAEzBT,EAAQ,KAAKG,CAAI,EACjB,OAEF,GAAIM,IAAiBF,EAAc,CACjCP,EAAQ,KAAKG,CAAI,EACjB,OAEFE,EAAcF,EAAMjC,CAAO,EAC3B6B,EAAQ,KAAK,GAAGI,eAAkB,CACpC,EASA,GALAD,EACEtB,EAAQqB,EAAW,WAAW,EAC9BS,EAAiB,CAAE,KAAM5C,EAAI,KAAM,GAAIO,EAAS,KAAMP,EAAI,cAAc,MAAM;AAAA,CAAI,EAAE,CAAC,EAAG,UAAAmC,EAAW,KAAMnC,EAAI,IAAK,CAAC,CACrH,EAEIA,EAAI,OAAS,YACf,OAAIiC,EAAQ,OAAS,GACnBD,EAAI,IAAIzB,+BAAqC0B,EAAQ,gBAAgB,EAEhE,CAAE,QAAAA,EAAS,QAAAC,CAAQ,EAK5BM,EACE1B,EAAQqB,EAAW,WAAW,EAC9B1B,EAAiBF,EAASP,EAAKU,CAAU,EACzCX,EAAkBC,CAAG,CACvB,EAGA,IAAM6C,EAAe/B,EAAQqB,EAAW,uBAAuB,EAC/DC,EAAeS,EAAc,KAAK,UAAUtB,EAAiBhB,EAASP,EAAKU,CAAU,EAAG,KAAM,CAAC,CAAC,EAGhG,IAAMoB,EAAQD,EAActB,EAASP,CAAG,EACxC,QAAW8C,KAAQhB,EACjBM,EAAetB,EAAQqB,EAAW,gBAAiBW,EAAK,IAAI,EAAGA,EAAK,OAAO,EAG7E,OAAIb,EAAQ,OAAS,GACnBD,EAAI,IAAIzB,+BAAqC0B,EAAQ,gBAAgB,EAGhE,CAAE,QAAAA,EAAS,QAAAC,CAAQ,CAC5B,CAMA,SAASa,EAAcZ,EAAmBa,EAA2C,CACnF,IAAMH,EAAe/B,EAAQqB,EAAW,uBAAuB,EAC/D,GAAI,CAACtB,EAAWgC,CAAY,EAAG,MAAO,GAEtC,GAAI,CACF,IAAMnB,EAAW,KAAK,MAAMgB,EAAaG,EAAc,OAAO,CAAC,EAC3DI,EAAU,GAEd,OAAW,CAACC,EAAKC,CAAK,IAAK,OAAO,QAAQH,CAAO,EAC/C,GAAI,OAAOG,GAAU,UAAYA,IAAU,MAAQ,CAAC,MAAM,QAAQA,CAAK,EAAG,CAEnEzB,EAASwB,CAAG,IAAGxB,EAASwB,CAAG,EAAI,CAAC,GACrC,OAAW,CAACE,EAAQC,CAAQ,IAAK,OAAO,QAAQF,CAAgC,EAC1EzB,EAASwB,CAAG,EAAEE,CAAM,IAAM,SAC5B1B,EAASwB,CAAG,EAAEE,CAAM,EAAIC,EACxBJ,EAAU,SAGLvB,EAASwB,CAAG,IAAM,SAC3BxB,EAASwB,CAAG,EAAIC,EAChBF,EAAU,IAId,OAAIA,GACFV,EAAcM,EAAc,KAAK,UAAUnB,EAAU,KAAM,CAAC,CAAC,EAExDuB,CACT,MAAE,CACA,MAAO,EACT,CACF,CASO,SAASK,EAAgBnB,EAAmB5B,EAAiBG,EAAqB,QAAkB,CACzG,IAAMmC,EAAe/B,EAAQqB,EAAW,uBAAuB,EAC/D,GAAI,CAACtB,EAAWgC,CAAY,EAAG,MAAO,GAEtC,GAAI,CACF,IAAMnB,EAAW,KAAK,MAAMgB,EAAaG,EAAc,OAAO,CAAC,EAC3DI,EAAU,GAGRxB,EAASC,EAAS,cAAgB,CAAC,EACnC6B,EAAiB,MAAM,QAAQ9B,EAAM,IAAI,EAAIA,EAAM,KAAQA,EAAM,KAAO,CAAC,EAC/E,QAAWqB,KAAQ9B,EACZuC,EAAK,SAAST,CAAI,IACrBS,EAAK,KAAKT,CAAI,EACdG,EAAU,IAOd,IAAMrB,EAASF,EAAS,QAAU,CAAC,EAE7B8B,EAAU,CAAC,GADF,MAAM,QAAQ5B,EAAM,UAAU,EAAIA,EAAM,WAAW,OAAQ6B,GAAW,CAACrC,EAAaqC,CAAC,CAAC,EAAI,CAAC,EAC9E,GAAGvC,EAAqBX,EAASG,CAAU,CAAC,EACxE,OAAI,KAAK,UAAUkB,EAAM,YAAc,IAAI,IAAM,KAAK,UAAU4B,CAAO,IACrE5B,EAAM,WAAa4B,EACnBP,EAAU,IAGRA,GAASV,EAAcM,EAAc,KAAK,UAAUnB,EAAU,KAAM,CAAC,CAAC,EACnEuB,CACT,MAAE,CACA,MAAO,EACT,CACF,CAKO,SAASS,GACdC,EACAjD,EAAqB,QACrBsB,EAAoC,QAAQ,MACtC,CACN,IAAI4B,EAAe,EACfC,EAAe,EACfC,EAAe,EACnB,OAAW,CAACC,EAAI/D,CAAG,IAAK,OAAO,QAAQ2D,CAAM,EAAG,CAC9C,GAAI3D,EAAI,OAAS,eAAiBA,EAAI,OAAS,YAAa,SAC5D,IAAMgE,EAASjC,EAAegC,EAAI/D,EAAKU,EAAYsB,CAAG,EACtD4B,GAAgBI,EAAO,QAAQ,OAG3BhE,EAAI,OAAS,eAAiB+C,EAAc/C,EAAI,UAAW,CAC7D,IAAK,CAAE,qCAAsC,GAAI,CACnD,CAAC,GACC6D,IAKE7D,EAAI,OAAS,eAAiBsD,EAAgBtD,EAAI,UAAW+D,EAAIrD,CAAU,GAC7EoD,IAGAF,EAAe,GACjB5B,EAAI,oBAAoB4B,2CAAsD,EAE5EC,EAAe,GACjB7B,EAAI,oBAAoB6B,iDAA4D,EAElFC,EAAe,GACjB9B,EAAI,eAAe8B,kEAA6E,CAEpG","names":["existsSync","mkdirSync","writeFileSync","readFileSync","resolve","createHash","readFileSync","existsSync","unlinkSync","readdirSync","resolve","loadBootstrapFiles","workspace","soulProfile","result","tryLoad","filename","filePath","resolve","existsSync","readFileSync","profileSoul","unlinkSync","buildBootstrapContext","files","sections","generateAgentsMd","agent","detectSoulSwitch","message","match","execFile","existsSync","resolve","CODEGRAPH_TOOLS","CODEGRAPH_MCP_SERVER","codegraphClaudeMdSection","effectiveMcpConfig","def","base","INDEX_DIR","INIT_TIMEOUT_MS","MAX_PARALLEL","indexWorkspace","workspace","started","res","rej","err","bootstrapCodegraphIndexes","agents","log","pending","agentId","i","runners","slot","idx","ms","hint","MANAGED_MARKER_PREFIX","MANAGED_MARKER_SUFFIX","managedHashInputs","def","createHash","buildManagedMarker","readManagedHash","content","firstLine","detectRole","agentId","text","generateClaudeMd","daemonPort","role","lines","existsSync","resolve","codegraphClaudeMdSection","GUARDRAIL_DENY","guardHookCommand","guardPreToolUseHooks","command","isGuardEntry","entry","h","generateSettings","settings","perms","existing","CODEGRAPH_TOOLS","hooks","generateRules","rules","setupWorkspace","log","created","skipped","workspace","writeIfMissing","path","mkdirSync","writeFileSync","writeManaged","expectedHash","readFileSync","existingHash","generateAgentsMd","settingsPath","rule","patchSettings","patches","changed","key","value","subKey","subValue","patchGuardrails","deny","desired","e","setupAllWorkspaces","agents","totalCreated","totalPatched","totalGuarded","id","result"]}

package/dist/{chunk-SC5DIKBB.js → chunk-FFDXDUVQ.js}

@@ -1,5 +1,5 @@
-import{e as m,f as $,j as S}from"./chunk-GMNKJXTR.js";S();import{readFileSync as x,writeFileSync as P,existsSync as b}from"fs";import{resolve as f}from"path";function w(r){if(r)return f(r);let e=[f(process.cwd(),"agentx.json"),f(process.cwd(),".agentx/config.json")];for(let n of e)if(b(n))return n;return e[0]}function v(r){return JSON.parse(JSON.stringify(r))}async function O(r){try{let e=await fetch(`${r.replace(/\/$/,"")}/reload`,{method:"POST",signal:AbortSignal.timeout(3e3)});return e.ok?{ok:!0}:{ok:!1,reason:`HTTP ${e.status}`}}catch(e){return{ok:!1,reason:e?.cause?.code||e?.message||"unreachable"}}}async function J(r,e={}){let{validate:n=!0,dryRun:t=!1,reload:s=!0,configPath:u,daemonUrl:c}=e,o=w(u);if(!b(o))return{success:!1,path:o,error:`Config not found at ${o}. Run \`agentx init\` first.`};let d;try{d=x(o,"utf-8")}catch(a){return{success:!1,path:o,error:`Cannot read ${o}: ${a.message}`}}let g;try{g=JSON.parse(d)}catch(a){return{success:!1,path:o,error:`Invalid JSON in ${o}: ${a.message}`}}let i=v(g);try{await r(i)}catch(a){return{success:!1,path:o,error:`Mutator threw: ${a.message}`}}if(n){let a=$(i),l=m.safeParse(a);if(!l.success){let k=l.error.issues.map(y=>`  ${y.path.join(".")||"<root>"}: ${y.message}`).join(`
+import{e as m,f as $,j as S}from"./chunk-Z3RKXKE2.js";S();import{readFileSync as x,writeFileSync as P,existsSync as b}from"fs";import{resolve as f}from"path";function w(r){if(r)return f(r);let e=[f(process.cwd(),"agentx.json"),f(process.cwd(),".agentx/config.json")];for(let n of e)if(b(n))return n;return e[0]}function v(r){return JSON.parse(JSON.stringify(r))}async function O(r){try{let e=await fetch(`${r.replace(/\/$/,"")}/reload`,{method:"POST",signal:AbortSignal.timeout(3e3)});return e.ok?{ok:!0}:{ok:!1,reason:`HTTP ${e.status}`}}catch(e){return{ok:!1,reason:e?.cause?.code||e?.message||"unreachable"}}}async function J(r,e={}){let{validate:n=!0,dryRun:t=!1,reload:s=!0,configPath:u,daemonUrl:c}=e,o=w(u);if(!b(o))return{success:!1,path:o,error:`Config not found at ${o}. Run \`agentx init\` first.`};let d;try{d=x(o,"utf-8")}catch(a){return{success:!1,path:o,error:`Cannot read ${o}: ${a.message}`}}let g;try{g=JSON.parse(d)}catch(a){return{success:!1,path:o,error:`Invalid JSON in ${o}: ${a.message}`}}let i=v(g);try{await r(i)}catch(a){return{success:!1,path:o,error:`Mutator threw: ${a.message}`}}if(n){let a=$(i),l=m.safeParse(a);if(!l.success){let k=l.error.issues.map(y=>`  ${y.path.join(".")||"<root>"}: ${y.message}`).join(`
 `);return{success:!1,path:o,error:`Validation failed:
 ${k}`,after:i}}}if(t)return{success:!0,path:o,after:i,dryRun:!0};try{P(o,JSON.stringify(i,null,2)+`
 `)}catch(a){return{success:!1,path:o,error:`Write failed: ${a.message}`,after:i}}let p=!1,h;if(s){let a=c||R(i),l=await O(a);l.ok?p=!0:h=l.reason}return{success:!0,path:o,after:i,reloaded:p,reloadSkipped:h}}function R(r){let e=r?.node?.bind;if(!e)return"http://127.0.0.1:18800";let[n,t]=e.split(":");return`http://${n==="0.0.0.0"||n==="::"?"127.0.0.1":n}:${t}`}function N(r,e,n){let t=e.split("."),s=r;for(let u=0;u<t.length-1;u++){let c=t[u];(s[c]===void 0||s[c]===null)&&(s[c]={}),s=s[c]}s[t[t.length-1]]=n}function j(r,e){let n=e.split("."),t=r;for(let s of n){if(t==null)return;t=t[s]}return t}function A(r,e){let n=e.split("."),t=r;for(let s=0;s<n.length-1;s++){if(t==null)return;t=t[n[s]]}t!=null&&delete t[n[n.length-1]]}export{J as a,N as b,j as c,A as d};
-//# sourceMappingURL=chunk-SC5DIKBB.js.map
+//# sourceMappingURL=chunk-FFDXDUVQ.js.map

package/dist/{chunk-F5AEXRPR.js → chunk-JC6ZHSTY.js}

@@ -1,4 +1,4 @@
-import{a as Te,b as ft}from"./chunk-AJONZWLT.js";import{a as et,b as tt,c as nt,d as S,e as A,f as N}from"./chunk-F4HZTZHW.js";import{a as ne,b as He}from"./chunk-ZTEU5JVQ.js";import{o as we,p as Ke}from"./chunk-LCIREYTD.js";import{i as We,j as Ze}from"./chunk-GMNKJXTR.js";import{a as rt,b as ot,c as st,d as it,e as at,f as ct,g as ut,h as lt,i as dt,j as pt,k as mt,l as bt}from"./chunk-BH3GTCZ6.js";import{b as E,c as Ye,d as he}from"./chunk-FIOB3MEX.js";function R(e,t){$.set(e,t),X.delete(e)}function D(e){let t=X.get(e);if(t)return t;let r=$.get(e);if(!r){let o=Ee();throw new Error(`unknown decision backend "${e}"`+(o.length>0?` \u2014 registered: ${o.join(", ")}`:" \u2014 none registered"))}let n=r();return X.set(e,n),n}function Ee(){return[...$.keys()].sort()}function gt(){$.clear(),X.clear()}var $,X,C=E(()=>{"use strict";$=new Map,X=new Map});import yt from"better-sqlite3";import{createHash as ht}from"crypto";import{mkdirSync as wt}from"fs";import{dirname as Tt,resolve as Et}from"path";function Q(e){if(e.type==="noul"){let r=e.noul,n={yes:r,no:1-r},o=r>=.5?"yes":"no",s=Math.abs(r-.5)*2;return{predicted:o,confidence:s,probabilities:n,topLabel:o,topProb:Math.max(r,1-r),expectedScore:null,pMax:Math.max(r,1-r),negEntropy:s}}if(e.type==="choice")return{predicted:e.choice,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:e.choice,topProb:e.probabilities[e.choice]??0,expectedScore:null,pMax:e.pMax,negEntropy:e.negEntropy};let t=String(Math.round(e.score));return{predicted:t,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:t,topProb:e.probabilities[t]??0,expectedScore:e.score,pMax:e.pMax,negEntropy:e.negEntropy}}function kt(e){if(typeof e!="string"||e.length===0)return{};try{let t=JSON.parse(e);return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function xt(e){e.exec("CREATE TABLE IF NOT EXISTS schema_version (v INTEGER PRIMARY KEY);");let t=e.prepare("SELECT MAX(v) AS v FROM schema_version").get().v??0;t<1&&Rt(e),t<2&&At(e),t<3&&St(e)}function St(e){e.exec(`
+import{a as ne,b as He}from"./chunk-ZTEU5JVQ.js";import{a as Te,b as ft}from"./chunk-AJONZWLT.js";import{a as et,b as tt,c as nt,d as S,e as A,f as N}from"./chunk-F4HZTZHW.js";import{o as we,p as Ke}from"./chunk-LCIREYTD.js";import{i as We,j as Ze}from"./chunk-Z3RKXKE2.js";import{a as rt,b as ot,c as st,d as it,e as at,f as ct,g as ut,h as lt,i as dt,j as pt,k as mt,l as bt}from"./chunk-BH3GTCZ6.js";import{b as E,c as Ye,d as he}from"./chunk-FIOB3MEX.js";function R(e,t){$.set(e,t),X.delete(e)}function D(e){let t=X.get(e);if(t)return t;let r=$.get(e);if(!r){let o=Ee();throw new Error(`unknown decision backend "${e}"`+(o.length>0?` \u2014 registered: ${o.join(", ")}`:" \u2014 none registered"))}let n=r();return X.set(e,n),n}function Ee(){return[...$.keys()].sort()}function gt(){$.clear(),X.clear()}var $,X,C=E(()=>{"use strict";$=new Map,X=new Map});import yt from"better-sqlite3";import{createHash as ht}from"crypto";import{mkdirSync as wt}from"fs";import{dirname as Tt,resolve as Et}from"path";function Q(e){if(e.type==="noul"){let r=e.noul,n={yes:r,no:1-r},o=r>=.5?"yes":"no",s=Math.abs(r-.5)*2;return{predicted:o,confidence:s,probabilities:n,topLabel:o,topProb:Math.max(r,1-r),expectedScore:null,pMax:Math.max(r,1-r),negEntropy:s}}if(e.type==="choice")return{predicted:e.choice,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:e.choice,topProb:e.probabilities[e.choice]??0,expectedScore:null,pMax:e.pMax,negEntropy:e.negEntropy};let t=String(Math.round(e.score));return{predicted:t,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:t,topProb:e.probabilities[t]??0,expectedScore:e.score,pMax:e.pMax,negEntropy:e.negEntropy}}function kt(e){if(typeof e!="string"||e.length===0)return{};try{let t=JSON.parse(e);return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function xt(e){e.exec("CREATE TABLE IF NOT EXISTS schema_version (v INTEGER PRIMARY KEY);");let t=e.prepare("SELECT MAX(v) AS v FROM schema_version").get().v??0;t<1&&Rt(e),t<2&&At(e),t<3&&St(e)}function St(e){e.exec(`
     ALTER TABLE decision_calls ADD COLUMN features_json TEXT;
     INSERT INTO schema_version (v) VALUES (3);
   `)}function At(e){e.exec(`
@@ -111,4 +111,4 @@ import{a as Te,b as ft}from"./chunk-AJONZWLT.js";import{a as et,b as tt,c as nt,
 `)}if(!m)throw new Error(`local decision backend could not get a valid answer after ${f+1} attempt(s): ${h}`);let M={},L=!1;for(let[k,q]of Object.entries(s.questions)){let x=_(q,m[k],{normalize:e.normalizeProbabilities??!0});M[k]=x.answer,x.repaired&&(L=!0)}return{model:a,answers:M,usage:g,meta:{backend:"local",structureMode:c,answerMode:"probabilities",repaired:L,retries:f,stateTruncated:l.truncated,latencyMs:Date.now()-i}}}finally{b()}}}}async function $t(e,t,r,n,o){if(!e.generateRaw)throw new Error(`provider "${e.name}" has no generateRaw(); use structureMode "text"`);let s=[{role:"user",content:r},...n?[{role:"user",content:n}]:[]],i=await e.generateRaw(s,J,[{name:B,description:"Report a probability distribution for every question.",input_schema:se(t)}],{...o,toolChoice:{type:"tool",name:B}}),a=i.content.find(c=>c.type==="tool_use"&&c.name===B),u=a&&a.type==="tool_use"?a.input:null;return{answers:Pe(u),usage:{inputTokens:i.usage.input_tokens,outputTokens:i.usage.output_tokens}}}async function Vt(e,t,r,n,o){let s=[r,ae(t)].join(`
 `),i=[{role:"system",content:J},{role:"user",content:s},...n?[{role:"user",content:n}]:[]],a=await e.generate(i,o);return{answers:Pe(Te(a.content??"")),usage:{inputTokens:0,outputTokens:a.tokensUsed??0}}}function Pe(e){if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e;if(t.answers&&typeof t.answers=="object")return t.answers}return e}function zt(e,t){return e!=="auto"?e:t.generateRaw&&me[t.name]?.structuredOutput?"tool":"text"}function Jt(e,t){let r=new AbortController,n=setTimeout(()=>r.abort(new Error(`decision timed out after ${t}ms`)),t),o=()=>r.abort(e?.reason);return e&&(e.aborted?o():e.addEventListener("abort",o,{once:!0})),{signal:r.signal,dispose:()=>{clearTimeout(n),e?.removeEventListener("abort",o)}}}var Bt,Pt,qt,Be,Xt,be=E(()=>{"use strict";Ke();Ue();ft();j();Y();N();z();Bt="claude-code",Pt="claude-haiku-4-5-20251001",qt=24e3,Be=2e3,Xt=3e4});import{readFileSync as Gt}from"fs";import{homedir as Yt}from"os";import{join as Kt}from"path";function v(e={}){let t=(e.baseUrl??Ht).replace(/\/+$/,""),r=e.path??"/classifier",n=e.name??"simple-jev",o=e.maxStateChars??Zt,s=e.maxChoiceOptions??en,i={probabilitySource:e.probabilitySource??"logits",calibratedProbabilities:!1,maxChoiceOptions:s,maxStateChars:o,parallelQuestions:!0,images:!1};return{name:n,capabilities:i,async decide(a){A(a.questions),on(a.questions,s);let u=Date.now(),c=a.model??e.model;if(!c)throw new Error("simple-jev backend needs a model id");let l=G(a.state,o),p=e.fetchImpl??fetch,{signal:y,dispose:d}=sn(a.abortSignal,a.timeoutMs??e.timeoutMs??Wt);try{let b={"Content-Type":"application/json"},g=rn(e.apiKeyEnv,e.apiKeyFile);g&&(b.Authorization=`Bearer ${g}`);let w=await p(`${t}${r}`,{method:"POST",headers:b,body:JSON.stringify({model:c,state:l.text,questions:nn(a.questions)}),signal:y});if(!w.ok){let k=await w.text().catch(()=>"");throw new Error(`${n} ${w.status}: ${k.slice(0,300)}`)}let f=await w.json(),m=F(a.questions).safeParse(f.answers);if(!m.success)throw new Error(`${n} returned a response that does not match the requested questions (contract drift, not a model slip \u2014 retrying will not help):
 ${U(m.error)}`);let h=m.data,M={},L=!1;for(let[k,q]of Object.entries(a.questions)){let x=_(q,h[k]);M[k]=x.answer,x.repaired&&(L=!0)}return{model:f.model??c,answers:M,usage:{inputTokens:f.usage?.input_tokens??0,outputTokens:f.usage?.output_tokens??0},meta:{backend:n,structureMode:i.probabilitySource==="native"?"native":"logprobs",answerMode:"probabilities",repaired:L,retries:0,stateTruncated:l.truncated,latencyMs:Date.now()-u}}}finally{d()}}}}function nn(e){let t={};for(let[r,n]of Object.entries(e))t[r]=n.instructions?n:{...n,instructions:tn[n.type]};return t}function rn(e,t){let r=e?process.env[e]:void 0;if(r)return r;if(!t)return;let n=t.startsWith("~/")?Kt(Yt(),t.slice(2)):t;if(!Z.has(n))try{let o=Gt(n,"utf-8").trim();Z.set(n,o.length>0?o:null)}catch{Z.set(n,null)}return Z.get(n)??void 0}function on(e,t){for(let[r,n]of Object.entries(e))if(n.type==="choice"){let o=Object.keys(n.criteria).length;if(o>t)throw new Error(`question "${r}": accepts at most ${t} choice options, got ${o}`)}else if(n.type==="score"&&n.criteria.length>t)throw new Error(`question "${r}": accepts at most ${t} score levels, got ${n.criteria.length}`)}function sn(e,t){let r=new AbortController,n=setTimeout(()=>r.abort(new Error(`decision timed out after ${t}ms`)),t),o=()=>r.abort(e?.reason);return e&&(e.aborted?o():e.addEventListener("abort",o,{once:!0})),{signal:r.signal,dispose:()=>{clearTimeout(n),e?.removeEventListener("abort",o)}}}var Ht,Wt,Zt,en,tn,Z,fe=E(()=>{"use strict";j();N();z();Y();Ht="http://127.0.0.1:8000/v1",Wt=3e4,Zt=6e3,en=50;tn={choice:"Which option best fits?",score:"Which level best fits?",noul:"Is this true of the state?"};Z=new Map});var qe={};Ye(qe,{DecisionStore:()=>I,MAX_CHOICE_OPTIONS:()=>MAX_CHOICE_OPTIONS,SYSTEM_PROMPT:()=>J,TOOL_NAME:()=>B,UNCERTAINTY_HIGH:()=>Ce,UNCERTAINTY_LOW:()=>De,_resetDecisionBackendsForTesting:()=>gt,agreement:()=>rt,answerView:()=>Q,applyRecalibrator:()=>ue,applyTemperature:()=>lt,askSeat:()=>pn,band:()=>Ie,bootstrapInterval:()=>pt,brier:()=>at,buildDesign:()=>Ne,calibrationReport:()=>mt,choice:()=>tt,compareCalibrators:()=>Lt,confidenceFor:()=>re,configureDecisions:()=>cn,coverageCurve:()=>ut,createLocalDecisionBackend:()=>W,createMockDecisionBackend:()=>H,createSimpleJevBackend:()=>v,decisionsRuntime:()=>ln,describeIssues:()=>U,ece:()=>st,expectedScore:()=>Ae,finalizeAnswer:()=>_,fitLogistic:()=>ve,fitRecalibrator:()=>P,fitTemperature:()=>dt,getDecisionBackend:()=>D,getSeatMode:()=>Ve,labelsOf:()=>S,listDecisionBackends:()=>Ee,logLoss:()=>ct,logit:()=>le,mce:()=>it,measureConsistency:()=>Qt,normalizeDistribution:()=>xe,normalizedNegEntropy:()=>oe,noul:()=>et,pMax:()=>Se,parseSeatMode:()=>ge,rawAnswerSchema:()=>Re,rawAnswersSchema:()=>F,recordSeatOutcome:()=>dn,registerBuiltinDecisionBackends:()=>an,registerDecisionBackend:()=>R,reliabilityBins:()=>ot,renderQuestions:()=>_e,renderShapeInstructions:()=>ae,renderState:()=>G,renderUserPrompt:()=>ie,resetDecisionsRuntime:()=>un,score:()=>nt,seatEnvVar:()=>$e,sigmoid:()=>de,toolInputSchema:()=>se,validateQuestions:()=>A,withUid:()=>Qe});function an(e={},t={},r={},n={}){R("mock",()=>H()),R("local",()=>W(e)),R("simple-jev",()=>v(t)),R("jev",()=>v({name:"jev",baseUrl:"https://openrouter.ai/api/alpha",path:"/decisions",model:"jev-latest",apiKeyEnv:"OPENROUTER_API_KEY",apiKeyFile:"~/.agentx/openrouter-key.txt",probabilitySource:"native",maxChoiceOptions:255,maxStateChars:9e4,...r})),R("typesafe",()=>v({name:"typesafe",baseUrl:"https://api.typesafe.ai/v1",path:"/systemone",model:"jev-latest",apiKeyEnv:"TYPESAFE_API_KEY",apiKeyFile:"~/.agentx/typesafe-key.txt",probabilitySource:"native",maxChoiceOptions:255,maxStateChars:9e4,...n}))}var Xe=E(()=>{"use strict";ke();N();j();z();C();Y();V();bt();Me();je();ze();pe();be();fe();C();pe();be();fe()});function cn(e){T={...ye,...T,...e},ee=!0}function un(){T={...ye,seats:{}},ee=!1}function mn(){if(!ee){ee=!0;try{let{loadDaemonConfig:e}=(Ze(),he(We)),t=e()?.decisions;if(!t?.enabled)return;let{registerBuiltinDecisionBackends:r}=(Xe(),he(qe)),n=t.backends??{};r(n.local,n.simpleJev,n.jev,n.typesafe);let o=null;try{o=new I({path:t.dbPath})}catch{}T={enabled:!0,defaultBackend:t.defaultBackend,store:o,seats:Object.fromEntries(Object.entries(t.seats??{}).map(([s,i])=>[s,{...i,redactState:t.redactState,keepStateRows:t.keepStateRows}]))}}catch{}}}function ln(){return T}function ge(e){if(typeof e!="string")return null;let t=e.trim().toLowerCase();return bn.includes(t)?t:null}function $e(e){return`AGENTX_DECISION_SEAT_${e.toUpperCase().replace(/[^A-Z0-9]+/g,"_")}`}function Ve(e,t=process.env){mn();let r=ge(t[$e(e)]);return r||(T.enabled?ge(T.seats[e]?.mode)??"off":"off")}function dn(e,t,r=!1){if(!(!e||!T.store))try{T.store.recordOutcome(e,t,r)}catch{}}async function pn(e,t,r,n={}){let o=Ve(e);if(o==="off")return null;let s=T.seats[e]??{mode:o},i=n.backend??s.backend??T.defaultBackend,a=Date.now();try{let c=await D(i).decide({state:t,questions:r,model:n.model??s.model,abortSignal:n.signal,timeoutMs:n.timeoutMs??s.timeoutMs}),l=fn(e,o,t,r,c,n,s);return{answers:c.answers,callId:l,mode:o}}catch(u){return gn(e,o,t,r,i,n,s,a,u),yn(e,i,u),null}}function fn(e,t,r,n,o,s,i){if(!T.store)return null;try{return T.store.recordCall({seat:e,mode:t,backend:o.meta.backend,model:o.model,meta:o.meta,state:r,questions:n,answers:o.answers,usage:o.usage,incumbent:Ge(s.incumbent),links:s.links,features:s.features,keepState:!i.redactState})}catch{return null}}function gn(e,t,r,n,o,s,i,a,u){if(T.store)try{T.store.recordCall({seat:e,mode:t,backend:o,model:s.model??i.model??"unknown",meta:{structureMode:"text",answerMode:"probabilities",retries:0,stateTruncated:!1,latencyMs:Date.now()-a},state:r,questions:n,answers:{},incumbent:Ge(s.incumbent),links:s.links,features:s.features,error:String(u?.message??u).slice(0,500),keepState:!i.redactState})}catch{}}function Ge(e){if(!e)return;let t={};for(let[r,n]of Object.entries(e))n!==void 0&&(t[r]={value:n});return t}function yn(e,t,r){let n=Date.now();n-Je<6e4||(Je=n,console.warn(`[decisions] seat "${e}" on backend "${t}" failed: ${r?.message??r}`))}var ye,T,ee,bn,Je,ze=E(()=>{C();V();ye={enabled:!1,defaultBackend:"local",seats:{},store:null},T={...ye},ee=!1;bn=["off","shadow","active"];Je=0});export{D as a,Ee as b,C as c,I as d,V as e,Lt as f,Me as g,Qt as h,je as i,me as j,Un as k,Ue as l,an as m,Xe as n,cn as o,un as p,ln as q,ge as r,$e as s,Ve as t,dn as u,pn as v,ze as w};
-//# sourceMappingURL=chunk-F5AEXRPR.js.map
+//# sourceMappingURL=chunk-JC6ZHSTY.js.map