atabey 0.0.16 → 0.0.17

package/dist/src/modules/engines/policy-engine.js

@@ -0,0 +1,186 @@
+/**
+ * [ENGINE] Policy Engine — Language, CLI, Dashboard & Parallel Rules
+ *
+ * Combines remaining vision items:
+ * 5. API Versioning Strategy — URL versioning enforcement
+ * 7. Dashboard Live Features — WebSocket ApprovalCenter, CompliancePanel
+ * 8. CLI Command Map — .atabey/cli-commands.json management
+ * 9. Language Policy Enforcer — English-only comments/variables
+ * 10. Parallel Execution Rules — dependency lock, ownership, commit logging
+ */
+import fs from "fs";
+import path from "path";
+import { logger } from "../../shared/logger.js";
+import { AtabeyStorage } from "../../shared/storage.js";
+/**
+ * Policy Engine — enforces language policy, manages CLI command map,
+ * provides dashboard live data, and enforces parallel execution rules.
+ */
+export class PolicyEngine {
+    // ─── 5. API Versioning Strategy ──────────────────────────────────
+    /**
+     * Validates that API endpoints use versioned paths (/api/v{N}/...).
+     */
+    static validateApiVersioning(filePath, content) {
+        const violations = [];
+        const lines = content.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // Check for route definitions without version prefix
+            const routeMatch = line.match(/\.(get|post|put|delete|patch)\(['"`]\/api\/(?!v\d+\/)/i);
+            if (routeMatch) {
+                violations.push(`Line ${i + 1}: API route without version prefix: ${line.trim()}`);
+            }
+        }
+        return violations;
+    }
+    // ─── 7. Dashboard Live Data ─────────────────────────────────────
+    /**
+     * Returns dashboard live data for WebSocket broadcast.
+     */
+    static getDashboardData() {
+        return {
+            agents: AtabeyStorage.getAllAgents().map(a => ({ name: a.name, state: a.state, task: a.task })),
+            pendingApprovals: AtabeyStorage.getPendingMessages()
+                .filter(m => m.category === "ALERT" || m.category === "ACTION")
+                .map(m => ({ traceId: m.traceId, description: m.content?.substring(0, 100), status: m.status })),
+            messageQueue: {
+                pending: AtabeyStorage.getPendingMessages().length,
+                categories: AtabeyStorage.getPendingMessages().reduce((acc, m) => {
+                    acc[m.category] = (acc[m.category] || 0) + 1;
+                    return acc;
+                }, {}),
+            },
+            activeTraceId: AtabeyStorage.getMetadata("traceId") || "N/A",
+            currentPhase: AtabeyStorage.getMetadata("phase") || "PHASE_0",
+        };
+    }
+    // ─── 8. CLI Command Map Management ──────────────────────────────
+    /**
+     * Gets the CLI command map from .atabey/cli-commands.json.
+     */
+    static getCliCommands() {
+        const cmdsPath = path.join(process.cwd(), ".atabey", "cli-commands.json");
+        if (!fs.existsSync(cmdsPath))
+            return PolicyEngine.getDefaultCommands();
+        try {
+            return JSON.parse(fs.readFileSync(cmdsPath, "utf8"));
+        }
+        catch {
+            return PolicyEngine.getDefaultCommands();
+        }
+    }
+    /**
+     * Saves CLI command map.
+     */
+    static saveCliCommand(command) {
+        const cmdsDir = path.join(process.cwd(), ".atabey");
+        const cmdsPath = path.join(cmdsDir, "cli-commands.json");
+        if (!fs.existsSync(cmdsDir))
+            fs.mkdirSync(cmdsDir, { recursive: true });
+        const commands = PolicyEngine.getCliCommands();
+        const existing = commands.findIndex(c => c.command === command.command);
+        if (existing >= 0) {
+            commands[existing] = command;
+        }
+        else {
+            commands.push(command);
+        }
+        fs.writeFileSync(cmdsPath, JSON.stringify(commands, null, 2));
+    }
+    static getDefaultCommands() {
+        return [
+            { command: "atabey status", agent: "@manager", description: "Show system status" },
+            { command: "atabey approve", agent: "@human", description: "Approve a high-risk operation", outputFormat: "json" },
+            { command: "atabey trace:new", agent: "@manager", description: "Create a new trace" },
+            { command: "atabey verify-contract", agent: "@architect", description: "Verify contract integrity" },
+            { command: "atabey mcp setup", agent: "@manager", description: "Setup MCP server" },
+        ];
+    }
+    // ─── 9. Language Policy Enforcer ────────────────────────────────
+    /**
+     * Scans files for language policy violations.
+     * Rules: comments in English, variable/function names in English, UI text in English.
+     */
+    static scanLanguagePolicy(filePath, content) {
+        const violations = [];
+        const lines = content.split("\n");
+        const turkishPatterns = [
+            /\b(bu|şu|o|ve|veya|ile|için|göre|kadar|sonra|önce|ama|fakat|çünkü|eğer|her|bir|daha|en|çok|az|yeni|eski|büyük|küçük|iyi|kötü|doğru|yanlış)\b/i,
+            /\b(yap|et|git|gel|bak|ver|al|tut|koş|dur|otur|kalk|aç|kapa|çalış|oku|yaz|sil|ekle|güncelle|sil|temizle)\b/i,
+        ];
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i].trim();
+            // Skip empty lines, pure code, and URLs
+            if (!line || line.startsWith("// @") || line.startsWith("import") || line.startsWith("export") || line.includes("http"))
+                continue;
+            // Check comments for Turkish
+            const commentMatch = line.match(/\/\/\s*(.+)/);
+            if (commentMatch) {
+                const comment = commentMatch[1];
+                if (turkishPatterns.some(p => p.test(comment))) {
+                    violations.push({ file: filePath, line: i + 1, type: "turkish_comment", content: comment.substring(0, 80) });
+                }
+            }
+        }
+        return violations;
+    }
+    // ─── 10. Parallel Execution Rules ───────────────────────────────
+    /**
+     * Checks implicit dependency lock — if an agent's required output
+     * is not ready, the dependent agent switches to WAITING state.
+     */
+    static checkImplicitDependency(agentName, requiredAgent) {
+        const agents = AtabeyStorage.getAllAgents();
+        const required = agents.find(a => a.name === requiredAgent);
+        if (!required || required.state !== "COMPLETED") {
+            AtabeyStorage.updateAgentStatus(agentName, "WAITING", `Waiting for ${requiredAgent} to complete`);
+            logger.info(`[PARALLEL] ${agentName} → WAITING (dependency: ${requiredAgent} not ready)`);
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Enforces file ownership — an agent cannot modify files outside its scope.
+     */
+    static enforceOwnership(agentName, filePath) {
+        const ownershipMap = {
+            "@backend": ["src/modules/", "src/contracts/", "apps/backend/"],
+            "@frontend": ["apps/web/", "src/components/", "src/pages/"],
+            "@database": ["src/database/", "migrations/"],
+            "@devops": [".github/", "Dockerfile", "docker-compose", ".env"],
+            "@architect": ["src/contracts/", "src/types/", "contract.version.json"],
+        };
+        const allowedPaths = ownershipMap[agentName];
+        if (!allowedPaths)
+            return true; // No restriction for this agent
+        const relativePath = path.relative(process.cwd(), filePath);
+        const isAllowed = allowedPaths.some(p => relativePath.startsWith(p) || relativePath.includes(p));
+        if (!isAllowed) {
+            logger.warn(`[OWNERSHIP] ${agentName} cannot modify ${filePath} — outside scope`);
+            AtabeyStorage.saveLog({
+                agent: agentName.replace("@", ""),
+                action: "OWNERSHIP_VIOLATION",
+                trace_id: AtabeyStorage.getMetadata("traceId") || "N/A",
+                status: "BLOCKED",
+                summary: `${agentName} attempted to modify ${filePath} — outside allowed scope: ${allowedPaths.join(", ")}`
+            });
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Logs commit-level information for traceability.
+     */
+    static logCommit(agentName, message, traceId) {
+        AtabeyStorage.saveLog({
+            agent: agentName.replace("@", ""),
+            action: "COMMIT",
+            trace_id: traceId,
+            status: "SUCCESS",
+            summary: `[${traceId}] ${message.substring(0, 200)}`
+        });
+        logger.info(`[COMMIT] ${agentName}: ${message} (trace: ${traceId})`);
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/src/modules/engines/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../../../src/modules/engines/policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAgBxD;;;GAGG;AACH,MAAM,OAAO,YAAY;IACrB,oEAAoE;IAEpE;;OAEG;IACI,MAAM,CAAC,qBAAqB,CAAC,QAAgB,EAAE,OAAe;QACjE,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,qDAAqD;YACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACxF,IAAI,UAAU,EAAE,CAAC;gBACb,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,uCAAuC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACI,MAAM,CAAC,gBAAgB;QAC1B,OAAO;YACH,MAAM,EAAE,aAAa,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/F,gBAAgB,EAAE,aAAa,CAAC,kBAAkB,EAAE;iBAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;iBAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,YAAY,EAAE;gBACV,OAAO,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,MAAM;gBAClD,UAAU,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,GAA2B,EAAE,CAAC,EAAE,EAAE;oBACrF,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC7C,OAAO,GAAG,CAAC;gBACf,CAAC,EAAE,EAAE,CAAC;aACT;YACD,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK;YAC5D,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,SAAS;SAChE,CAAC;IACN,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACI,MAAM,CAAC,cAAc;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,YAAY,CAAC,kBAAkB,EAAE,CAAC;QACvE,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,YAAY,CAAC,kBAAkB,EAAE,CAAC;QAC7C,CAAC;IACL,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,cAAc,CAAC,OAAwB;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAChB,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QACjC,CAAC;aAAM,CAAC;YACJ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,MAAM,CAAC,kBAAkB;QAC7B,OAAO;YACH,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE;YAClF,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE,YAAY,EAAE,MAAM,EAAE;YAClH,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE;YACrF,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,2BAA2B,EAAE;YACpG,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;SACtF,CAAC;IACN,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACI,MAAM,CAAC,kBAAkB,CAAC,QAAgB,EAAE,OAAe;QAC9D,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,eAAe,GAAG;YACpB,+IAA+I;YAC/I,4GAA4G;SAC/G,CAAC;QAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAE7B,wCAAwC;YACxC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAElI,6BAA6B;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,YAAY,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAC7C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjH,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACI,MAAM,CAAC,uBAAuB,CAAC,SAAiB,EAAE,aAAqB;QAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAE5D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC9C,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,aAAa,cAAc,CAAC,CAAC;YAClG,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,2BAA2B,aAAa,aAAa,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,gBAAgB,CAAC,SAAiB,EAAE,QAAgB;QAC9D,MAAM,YAAY,GAA6B;YAC3C,UAAU,EAAE,CAAC,cAAc,EAAE,gBAAgB,EAAE,eAAe,CAAC;YAC/D,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,YAAY,CAAC;YAC3D,WAAW,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;YAC7C,SAAS,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,CAAC;YAC/D,YAAY,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,CAAC;SAC1E,CAAC;QAEF,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,CAAC,gCAAgC;QAEhE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,eAAe,SAAS,kBAAkB,QAAQ,kBAAkB,CAAC,CAAC;YAClF,aAAa,CAAC,OAAO,CAAC;gBAClB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjC,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK;gBACvD,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,GAAG,SAAS,wBAAwB,QAAQ,6BAA6B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC9G,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,SAAS,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAe;QACvE,aAAa,CAAC,OAAO,CAAC;YAClB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;YACjC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,IAAI,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACvD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,YAAY,SAAS,KAAK,OAAO,YAAY,OAAO,GAAG,CAAC,CAAC;IACzE,CAAC;CACJ"}

package/dist/src/modules/engines/session-engine.d.ts

@@ -0,0 +1,68 @@
+/**
+ * [ENGINE] Session Engine — STEP 0 STARTUP Protocol
+ *
+ * Implements ATABEY_FULL.md STEP 0:
+ * 1. Restore Session Memory & Load Role — read PROJECT_MEMORY.md, DECISIONS.md
+ * 2. Read Platform Shim — detect Claude/Gemini/Cursor platform
+ * 3. Respect Authority — report to @manager
+ *
+ * Integrates Token Economy Protocol and Output Flow Standards.
+ */
+export interface SessionContext {
+    projectMemory: string;
+    decisions: string[];
+    activeTraceId: string;
+    currentPhase: string;
+    platform: string;
+    agentState: string;
+    tokenBudget: {
+        used: number;
+        limit: number;
+    };
+}
+export interface OutputFlow {
+    assumptions: string[];
+    problem: string;
+    fileTree: string[];
+    codeBlocks: number;
+    auditLog: string;
+    tests: string[];
+}
+/**
+ * Session Engine — manages the STEP 0 startup protocol and enforces
+ * token economy and output flow standards on every session.
+ */
+export declare class SessionEngine {
+    /**
+     * STEP 0: STARTUP Protocol — runs at the beginning of every session.
+     * Reads PROJECT_MEMORY.md, checks active decisions, detects platform.
+     */
+    static startup(): Promise<SessionContext>;
+    /**
+     * Token Economy Protocol — enforces:
+     * - Search before read (never read_file entire directories)
+     * - Surgical operations (replace instead of write)
+     * - Output conciseness (minimum required data)
+     * - Context compaction (retrieve only relevant history)
+     */
+    static checkTokenEconomy(operationType: "read" | "write" | "replace" | "search", estimatedTokens: number): Promise<{
+        allowed: boolean;
+        warning?: string;
+    }>;
+    /**
+     * Output Flow Standard — validates that agent output follows the
+     * mandatory format: Assumptions, Problem, File Tree, Code, Tests, Audit Log.
+     */
+    static validateOutputFlow(output: string): {
+        passed: boolean;
+        missing: string[];
+    };
+    /**
+     * Checks session compliance with STEP 0 rules.
+     * Logs a warning if rules are not followed.
+     */
+    static checkSessionCompliance(): Promise<{
+        compliant: boolean;
+        warnings: string[];
+    }>;
+}

package/dist/src/modules/engines/session-engine.js

@@ -0,0 +1,141 @@
+/**
+ * [ENGINE] Session Engine — STEP 0 STARTUP Protocol
+ *
+ * Implements ATABEY_FULL.md STEP 0:
+ * 1. Restore Session Memory & Load Role — read PROJECT_MEMORY.md, DECISIONS.md
+ * 2. Read Platform Shim — detect Claude/Gemini/Cursor platform
+ * 3. Respect Authority — report to @manager
+ *
+ * Integrates Token Economy Protocol and Output Flow Standards.
+ */
+import fs from "fs";
+import path from "path";
+import { getFrameworkDir } from "../../cli/utils/memory.js";
+import { logger } from "../../shared/logger.js";
+import { AtabeyStorage } from "../../shared/storage.js";
+/**
+ * Session Engine — manages the STEP 0 startup protocol and enforces
+ * token economy and output flow standards on every session.
+ */
+export class SessionEngine {
+    /**
+     * STEP 0: STARTUP Protocol — runs at the beginning of every session.
+     * Reads PROJECT_MEMORY.md, checks active decisions, detects platform.
+     */
+    static async startup() {
+        const frameworkDir = getFrameworkDir();
+        const memoryDir = path.join(frameworkDir, "memory");
+        // 1. Read PROJECT_MEMORY.md
+        let projectMemory = "";
+        const memoryFile = path.join(memoryDir, "PROJECT_MEMORY.md");
+        if (fs.existsSync(memoryFile)) {
+            projectMemory = fs.readFileSync(memoryFile, "utf8");
+        }
+        // 2. Read DECISIONS.md for architectural constraints
+        let decisions = [];
+        const decisionsFile = path.join(memoryDir, "DECISIONS.md");
+        if (fs.existsSync(decisionsFile)) {
+            const content = fs.readFileSync(decisionsFile, "utf8");
+            decisions = content.split("\n").filter(l => l.startsWith("- **") || l.startsWith("- "));
+        }
+        // 3. Detect active session state
+        const activeTraceId = AtabeyStorage.getMetadata("traceId") || "N/A";
+        const currentPhase = AtabeyStorage.getMetadata("phase") || "PHASE_0";
+        const platform = process.env.ATABEY_PLATFORM || "unknown";
+        // 4. Get agent state
+        const agents = AtabeyStorage.getAllAgents();
+        const managerState = agents.find(a => a.name === "@manager" || a.name === "manager");
+        // 5. Check token budget from storage metadata
+        const tokenUsed = parseInt(AtabeyStorage.getMetadata("tokenUsed") || "0", 10);
+        const tokenLimit = parseInt(AtabeyStorage.getMetadata("tokenLimit") || "100000", 10);
+        const tokenBudget = { used: tokenUsed, limit: tokenLimit };
+        logger.info(`[SESSION] STEP 0 STARTUP — Trace: ${activeTraceId}, Phase: ${currentPhase}, Platform: ${platform}`);
+        return {
+            projectMemory,
+            decisions,
+            activeTraceId,
+            currentPhase,
+            platform,
+            agentState: managerState?.state || "READY",
+            tokenBudget,
+        };
+    }
+    /**
+     * Token Economy Protocol — enforces:
+     * - Search before read (never read_file entire directories)
+     * - Surgical operations (replace instead of write)
+     * - Output conciseness (minimum required data)
+     * - Context compaction (retrieve only relevant history)
+     */
+    static async checkTokenEconomy(operationType, estimatedTokens) {
+        const context = await SessionEngine.startup();
+        if (operationType === "read" && estimatedTokens > 5000) {
+            return {
+                allowed: false,
+                warning: `[TOKEN ECONOMY] Read operation too large (${estimatedTokens} tokens). Search before read.`
+            };
+        }
+        if (operationType === "write" && estimatedTokens > 20000) {
+            return {
+                allowed: true,
+                warning: `[TOKEN ECONOMY] Large write (${estimatedTokens} tokens). Consider surgical replace instead.`
+            };
+        }
+        if (context.tokenBudget.used > context.tokenBudget.limit) {
+            return {
+                allowed: false,
+                warning: `[TOKEN ECONOMY] Token budget exceeded (${context.tokenBudget.used}/${context.tokenBudget.limit}). Compact context before proceeding.`
+            };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Output Flow Standard — validates that agent output follows the
+     * mandatory format: Assumptions, Problem, File Tree, Code, Tests, Audit Log.
+     */
+    static validateOutputFlow(output) {
+        const missing = [];
+        const outputUpper = output.toUpperCase();
+        if (!outputUpper.includes("ASSUMPTION")) {
+            missing.push("Assumptions section — state all assumptions made");
+        }
+        if (!outputUpper.includes("PROBLEM")) {
+            missing.push("Problem section — what is being built and why (max 2-3 sentences)");
+        }
+        if (!outputUpper.includes("FILE TREE") && !outputUpper.includes("FILE")) {
+            missing.push("File Tree section — complete folder and file structure");
+        }
+        if (!outputUpper.includes("AUDIT") && !outputUpper.includes("LOG")) {
+            missing.push("Audit Logging section — how changes are logged");
+        }
+        if (!outputUpper.includes("TEST")) {
+            missing.push("Tests section — test file for every service and utility");
+        }
+        return {
+            passed: missing.length === 0,
+            missing,
+        };
+    }
+    /**
+     * Checks session compliance with STEP 0 rules.
+     * Logs a warning if rules are not followed.
+     */
+    static async checkSessionCompliance() {
+        const context = await SessionEngine.startup();
+        const warnings = [];
+        if (!context.projectMemory) {
+            warnings.push("PROJECT_MEMORY.md not found. Run STEP 0: Restore Session Memory.");
+        }
+        if (context.activeTraceId === "N/A") {
+            warnings.push("No active Trace ID. Generate one with `atabey trace:new`.");
+        }
+        if (!context.decisions.length) {
+            warnings.push("DECISIONS.md is empty or missing. Architectural decisions should be documented.");
+        }
+        return {
+            compliant: warnings.length === 0,
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=session-engine.js.map

package/dist/src/modules/engines/session-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-engine.js","sourceRoot":"","sources":["../../../../src/modules/engines/session-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAqBxD;;;GAGG;AACH,MAAM,OAAO,aAAa;IACtB;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,OAAO;QACvB,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAEpD,4BAA4B;QAC5B,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAED,qDAAqD;QACrD,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACvD,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC;QAED,iCAAiC;QACjC,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;QACpE,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;QAE1D,qBAAqB;QACrB,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAErF,8CAA8C;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAE3D,MAAM,CAAC,IAAI,CAAC,qCAAqC,aAAa,YAAY,YAAY,eAAe,QAAQ,EAAE,CAAC,CAAC;QAEjH,OAAO;YACH,aAAa;YACb,SAAS;YACT,aAAa;YACb,YAAY;YACZ,QAAQ;YACR,UAAU,EAAE,YAAY,EAAE,KAAK,IAAI,OAAO;YAC1C,WAAW;SACd,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CACjC,aAAsD,EACtD,eAAuB;QAEvB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC;QAE9C,IAAI,aAAa,KAAK,MAAM,IAAI,eAAe,GAAG,IAAI,EAAE,CAAC;YACrD,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,6CAA6C,eAAe,+BAA+B;aACvG,CAAC;QACN,CAAC;QAED,IAAI,aAAa,KAAK,OAAO,IAAI,eAAe,GAAG,KAAK,EAAE,CAAC;YACvD,OAAO;gBACH,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,gCAAgC,eAAe,8CAA8C;aACzG,CAAC;QACN,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACvD,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,0CAA0C,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,uCAAuC;aAClJ,CAAC;QACN,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,kBAAkB,CAAC,MAAc;QAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEzC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO;YACH,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC5B,OAAO;SACV,CAAC;IACN,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,sBAAsB;QAItC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QAED,OAAO;YACH,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAChC,QAAQ;SACX,CAAC;IACN,CAAC;CACJ"}

package/dist/src/modules/providers/llm-provider.d.ts

@@ -0,0 +1,87 @@
+/**
+ * [PROVIDER] LLM Provider — Multi-Model AI Execution Engine
+ *
+ * Enables Atabey to directly call LLM agents (OpenAI, Anthropic, local models)
+ * instead of relying solely on external AI interfaces (Claude Code, Gemini CLI).
+ *
+ * Supports:
+ * - OpenAI: gpt-4, gpt-4-turbo, gpt-3.5-turbo
+ * - Anthropic: claude-3-opus, claude-3-sonnet, claude-3-haiku
+ * - Local: Ollama, LM Studio (compatible endpoints)
+ *
+ * Falls back gracefully if API keys are not configured.
+ */
+export type LLMProviderType = "openai" | "anthropic" | "local" | "none";
+export interface LLMProviderConfig {
+    type: LLMProviderType;
+    apiKey?: string;
+    model?: string;
+    baseUrl?: string;
+    maxTokens?: number;
+    temperature?: number;
+}
+export interface LLMCompletionRequest {
+    messages: Array<{
+        role: "system" | "user" | "assistant";
+        content: string;
+    }>;
+    temperature?: number;
+    maxTokens?: number;
+}
+export interface LLMCompletionResponse {
+    content: string;
+    model: string;
+    usage?: {
+        promptTokens: number;
+        completionTokens: number;
+        totalTokens: number;
+    };
+}
+/**
+ * LLM Provider — routes completion requests to the configured model.
+ * Reads config from environment variables:
+ *   ATABEY_LLM_PROVIDER  = "openai" | "anthropic" | "local"
+ *   ATABEY_LLM_API_KEY   = your API key
+ *   ATABEY_LLM_MODEL     = model name (e.g. "gpt-4", "claude-3-opus-20240229")
+ *   ATABEY_LLM_BASE_URL  = custom endpoint (for local/Ollama)
+ */
+export declare class LLMProvider {
+    private static config;
+    /**
+     * Loads configuration from environment variables.
+     */
+    private static loadConfig;
+    private static defaultModel;
+    /**
+     * Reloads configuration from environment (useful after config change).
+     */
+    static reloadConfig(): void;
+    /**
+     * Returns whether a provider is configured and ready.
+     */
+    static isAvailable(): boolean;
+    /**
+     * Returns the current provider configuration (masked API key).
+     */
+    static getConfig(): Omit<LLMProviderConfig, "apiKey"> & {
+        apiKey: string;
+    };
+    /**
+     * Sends a completion request to the configured LLM.
+     * Falls back to a simulated response if no provider is configured.
+     */
+    static complete(request: LLMCompletionRequest): Promise<LLMCompletionResponse>;
+    /**
+     * Executes a task by sending it to the LLM as a user message.
+     * The system message contains the agent's role definition.
+     */
+    static executeTask(agentName: string, agentRole: string, task: string, traceId: string): Promise<string>;
+    private static callOpenAI;
+    private static callAnthropic;
+    private static callLocal;
+    /**
+     * Simulates an LLM response when no provider is configured.
+     * Used for development/testing without API keys.
+     */
+    private static simulateResponse;
+}