atabey 0.0.37 → 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (513) hide show
  1. package/ATABEY.md +1 -1
  2. package/PRIVACY.md +2 -2
  3. package/README.md +58 -46
  4. package/bin/completion.sh +1 -1
  5. package/dist/atabey/src/cli/commands/api.d.ts +1 -0
  6. package/dist/atabey/src/cli/commands/api.js +90 -0
  7. package/dist/atabey/src/cli/commands/api.js.map +1 -0
  8. package/dist/atabey/src/cli/commands/audit.d.ts +9 -0
  9. package/dist/atabey/src/cli/commands/audit.js +73 -0
  10. package/dist/atabey/src/cli/commands/audit.js.map +1 -0
  11. package/dist/atabey/src/cli/commands/check.js +15 -6
  12. package/dist/atabey/src/cli/commands/check.js.map +1 -1
  13. package/dist/atabey/src/cli/commands/contract.js +51 -8
  14. package/dist/atabey/src/cli/commands/contract.js.map +1 -1
  15. package/dist/atabey/src/cli/commands/coverage.js +17 -12
  16. package/dist/atabey/src/cli/commands/coverage.js.map +1 -1
  17. package/dist/atabey/src/cli/commands/dashboard.js +101 -16
  18. package/dist/atabey/src/cli/commands/dashboard.js.map +1 -1
  19. package/dist/atabey/src/cli/commands/db.d.ts +1 -0
  20. package/dist/atabey/src/cli/commands/db.js +58 -0
  21. package/dist/atabey/src/cli/commands/db.js.map +1 -0
  22. package/dist/atabey/src/cli/commands/hitl.js +2 -1
  23. package/dist/atabey/src/cli/commands/hitl.js.map +1 -1
  24. package/dist/atabey/src/cli/commands/index-codebase.js +10 -0
  25. package/dist/atabey/src/cli/commands/index-codebase.js.map +1 -1
  26. package/dist/atabey/src/cli/commands/init/scaffold-app.js +82 -7
  27. package/dist/atabey/src/cli/commands/init/scaffold-app.js.map +1 -1
  28. package/dist/atabey/src/cli/commands/init/scaffold-core.js +3 -3
  29. package/dist/atabey/src/cli/commands/init/scaffold-core.js.map +1 -1
  30. package/dist/atabey/src/cli/commands/init/scaffold-docs.js +1 -1
  31. package/dist/atabey/src/cli/commands/init/scaffold-docs.js.map +1 -1
  32. package/dist/atabey/src/cli/commands/init/scaffold-ops.js +47 -7
  33. package/dist/atabey/src/cli/commands/init/scaffold-ops.js.map +1 -1
  34. package/dist/atabey/src/cli/commands/init/scaffold-standards.js +8 -15
  35. package/dist/atabey/src/cli/commands/init/scaffold-standards.js.map +1 -1
  36. package/dist/atabey/src/cli/commands/init.js +28 -62
  37. package/dist/atabey/src/cli/commands/init.js.map +1 -1
  38. package/dist/atabey/src/cli/commands/lint.d.ts +2 -1
  39. package/dist/atabey/src/cli/commands/lint.js +20 -1
  40. package/dist/atabey/src/cli/commands/lint.js.map +1 -1
  41. package/dist/atabey/src/cli/commands/mcp.js +71 -33
  42. package/dist/atabey/src/cli/commands/mcp.js.map +1 -1
  43. package/dist/atabey/src/cli/commands/orchestrate.d.ts +4 -4
  44. package/dist/atabey/src/cli/commands/orchestrate.js +1 -1
  45. package/dist/atabey/src/cli/commands/orchestrate.js.map +1 -1
  46. package/dist/atabey/src/cli/commands/plan.d.ts +1 -1
  47. package/dist/atabey/src/cli/commands/plan.js +10 -0
  48. package/dist/atabey/src/cli/commands/plan.js.map +1 -1
  49. package/dist/atabey/src/cli/commands/quickstart.js +1 -1
  50. package/dist/atabey/src/cli/commands/quickstart.js.map +1 -1
  51. package/dist/atabey/src/cli/commands/script.js +4 -0
  52. package/dist/atabey/src/cli/commands/script.js.map +1 -1
  53. package/dist/atabey/src/cli/commands/secrets.d.ts +1 -0
  54. package/dist/atabey/src/cli/commands/secrets.js +146 -0
  55. package/dist/atabey/src/cli/commands/secrets.js.map +1 -0
  56. package/dist/atabey/src/cli/commands/worktree.d.ts +10 -0
  57. package/dist/atabey/src/cli/commands/worktree.js +90 -0
  58. package/dist/atabey/src/cli/commands/worktree.js.map +1 -0
  59. package/dist/atabey/src/cli/index.js +75 -16
  60. package/dist/atabey/src/cli/index.js.map +1 -1
  61. package/dist/atabey/src/cli/platforms/core.d.ts +0 -1
  62. package/dist/atabey/src/cli/platforms/core.js +0 -14
  63. package/dist/atabey/src/cli/platforms/core.js.map +1 -1
  64. package/dist/atabey/src/cli/platforms/index.d.ts +2 -2
  65. package/dist/atabey/src/cli/platforms/index.js +1 -1
  66. package/dist/atabey/src/cli/platforms/index.js.map +1 -1
  67. package/dist/atabey/src/cli/platforms/paths.d.ts +0 -2
  68. package/dist/atabey/src/cli/platforms/paths.js +1 -8
  69. package/dist/atabey/src/cli/platforms/paths.js.map +1 -1
  70. package/dist/atabey/src/cli/platforms/scaffold.js +1 -1
  71. package/dist/atabey/src/cli/platforms/scaffold.js.map +1 -1
  72. package/dist/atabey/src/cli/utils/claude.js +6 -0
  73. package/dist/atabey/src/cli/utils/claude.js.map +1 -1
  74. package/dist/atabey/src/cli/utils/compliance.d.ts +1 -1
  75. package/dist/atabey/src/cli/utils/compliance.js +33 -20
  76. package/dist/atabey/src/cli/utils/compliance.js.map +1 -1
  77. package/dist/atabey/src/cli/utils/fs.js +1 -1
  78. package/dist/atabey/src/cli/utils/fs.js.map +1 -1
  79. package/dist/atabey/src/cli/utils/i18n.js +2 -2
  80. package/dist/atabey/src/cli/utils/i18n.js.map +1 -1
  81. package/dist/atabey/src/cli/utils/memory.js +27 -16
  82. package/dist/atabey/src/cli/utils/memory.js.map +1 -1
  83. package/dist/atabey/src/cli/utils/pkg.js +5 -2
  84. package/dist/atabey/src/cli/utils/pkg.js.map +1 -1
  85. package/dist/atabey/src/cli/utils/quality.d.ts +1 -1
  86. package/dist/atabey/src/cli/utils/ui.d.ts +1 -1
  87. package/dist/atabey/src/cli/utils/ui.js +1 -1
  88. package/dist/atabey/src/modules/agents/definitions.d.ts +1 -1
  89. package/dist/atabey/src/modules/agents/definitions.js +13 -9
  90. package/dist/atabey/src/modules/agents/definitions.js.map +1 -1
  91. package/dist/atabey/src/modules/agents/registry/analyst.js +0 -2
  92. package/dist/atabey/src/modules/agents/registry/analyst.js.map +1 -1
  93. package/dist/atabey/src/modules/agents/registry/architect.js +0 -2
  94. package/dist/atabey/src/modules/agents/registry/architect.js.map +1 -1
  95. package/dist/atabey/src/modules/agents/registry/backend.js +0 -2
  96. package/dist/atabey/src/modules/agents/registry/backend.js.map +1 -1
  97. package/dist/atabey/src/modules/agents/registry/database.js +0 -2
  98. package/dist/atabey/src/modules/agents/registry/database.js.map +1 -1
  99. package/dist/atabey/src/modules/agents/registry/devops.js +0 -2
  100. package/dist/atabey/src/modules/agents/registry/devops.js.map +1 -1
  101. package/dist/atabey/src/modules/agents/registry/explorer.js +0 -2
  102. package/dist/atabey/src/modules/agents/registry/explorer.js.map +1 -1
  103. package/dist/atabey/src/modules/agents/registry/frontend.js +0 -2
  104. package/dist/atabey/src/modules/agents/registry/frontend.js.map +1 -1
  105. package/dist/atabey/src/modules/agents/registry/git.js +0 -2
  106. package/dist/atabey/src/modules/agents/registry/git.js.map +1 -1
  107. package/dist/atabey/src/modules/agents/registry/manager.js +0 -3
  108. package/dist/atabey/src/modules/agents/registry/manager.js.map +1 -1
  109. package/dist/atabey/src/modules/agents/registry/mobile.js +0 -2
  110. package/dist/atabey/src/modules/agents/registry/mobile.js.map +1 -1
  111. package/dist/atabey/src/modules/agents/registry/native.js +0 -2
  112. package/dist/atabey/src/modules/agents/registry/native.js.map +1 -1
  113. package/dist/atabey/src/modules/agents/registry/quality.js +3 -5
  114. package/dist/atabey/src/modules/agents/registry/quality.js.map +1 -1
  115. package/dist/atabey/src/modules/agents/registry/security.js +0 -2
  116. package/dist/atabey/src/modules/agents/registry/security.js.map +1 -1
  117. package/dist/atabey/src/modules/agents/types.d.ts +0 -1
  118. package/dist/atabey/src/modules/audit/export.d.ts +22 -0
  119. package/dist/atabey/src/modules/audit/export.js +58 -0
  120. package/dist/atabey/src/modules/audit/export.js.map +1 -0
  121. package/dist/atabey/src/modules/contracts/api.d.ts +2 -2
  122. package/dist/atabey/src/modules/engines/agent-executor.js +37 -0
  123. package/dist/atabey/src/modules/engines/agent-executor.js.map +1 -1
  124. package/dist/atabey/src/modules/engines/evaluation-engine.js +10 -0
  125. package/dist/atabey/src/modules/engines/evaluation-engine.js.map +1 -1
  126. package/dist/atabey/src/modules/engines/quality-gate.js +2 -2
  127. package/dist/atabey/src/modules/engines/quality-gate.js.map +1 -1
  128. package/dist/atabey/src/modules/engines/routing-engine.js +1 -1
  129. package/dist/atabey/src/modules/engines/routing-engine.js.map +1 -1
  130. package/dist/atabey/src/modules/memory/code-graph.d.ts +44 -0
  131. package/dist/atabey/src/modules/memory/code-graph.js +180 -0
  132. package/dist/atabey/src/modules/memory/code-graph.js.map +1 -0
  133. package/dist/atabey/src/modules/memory/context-assembler.d.ts +50 -0
  134. package/dist/atabey/src/modules/memory/context-assembler.js +146 -0
  135. package/dist/atabey/src/modules/memory/context-assembler.js.map +1 -0
  136. package/dist/atabey/src/modules/providers/definitions.js +78 -41
  137. package/dist/atabey/src/modules/providers/definitions.js.map +1 -1
  138. package/dist/atabey/src/modules/providers/shared.d.ts +1 -1
  139. package/dist/atabey/src/modules/providers/shared.js +34 -15
  140. package/dist/atabey/src/modules/providers/shared.js.map +1 -1
  141. package/dist/atabey/src/modules/providers/types.d.ts +0 -4
  142. package/dist/atabey/src/modules/runtime/adapters/headless-cli.d.ts +35 -0
  143. package/dist/atabey/src/modules/runtime/adapters/headless-cli.js +115 -0
  144. package/dist/atabey/src/modules/runtime/adapters/headless-cli.js.map +1 -0
  145. package/dist/atabey/src/modules/runtime/adapters/index.d.ts +2 -0
  146. package/dist/atabey/src/modules/runtime/adapters/index.js +3 -0
  147. package/dist/atabey/src/modules/runtime/adapters/index.js.map +1 -0
  148. package/dist/atabey/src/modules/runtime/adapters/types.d.ts +48 -0
  149. package/dist/atabey/src/modules/runtime/adapters/types.js +12 -0
  150. package/dist/atabey/src/modules/runtime/adapters/types.js.map +1 -0
  151. package/dist/atabey/src/modules/runtime/agent-runtime.d.ts +54 -0
  152. package/dist/atabey/src/modules/runtime/agent-runtime.js +203 -0
  153. package/dist/atabey/src/modules/runtime/agent-runtime.js.map +1 -0
  154. package/dist/atabey/src/modules/runtime/dispatcher.d.ts +75 -0
  155. package/dist/atabey/src/modules/runtime/dispatcher.js +255 -0
  156. package/dist/atabey/src/modules/runtime/dispatcher.js.map +1 -0
  157. package/dist/atabey/src/modules/runtime/evidence.d.ts +39 -0
  158. package/dist/atabey/src/modules/runtime/evidence.js +53 -0
  159. package/dist/atabey/src/modules/runtime/evidence.js.map +1 -0
  160. package/dist/atabey/src/modules/runtime/worktree.d.ts +44 -0
  161. package/dist/atabey/src/modules/runtime/worktree.js +259 -0
  162. package/dist/atabey/src/modules/runtime/worktree.js.map +1 -0
  163. package/dist/atabey/src/modules/skills/adapter-skills.d.ts +0 -29
  164. package/dist/atabey/src/modules/skills/adapter-skills.js +0 -61
  165. package/dist/atabey/src/modules/skills/adapter-skills.js.map +1 -1
  166. package/dist/atabey/src/modules/skills/definitions.d.ts +1 -1
  167. package/dist/atabey/src/modules/skills/definitions.js +8 -8
  168. package/dist/atabey/src/schema/agent-lifecycle.d.ts +36 -0
  169. package/dist/atabey/src/schema/agent-lifecycle.js +96 -0
  170. package/dist/atabey/src/schema/agent-lifecycle.js.map +1 -0
  171. package/dist/atabey-mcp/src/mcp/utils/ast-scan.d.ts +21 -0
  172. package/dist/atabey-mcp/src/mcp/utils/ast-scan.js +64 -0
  173. package/dist/atabey-mcp/src/mcp/utils/ast-scan.js.map +1 -0
  174. package/dist/atabey-mcp/src/mcp/utils/auth.d.ts +73 -0
  175. package/dist/atabey-mcp/src/mcp/utils/auth.js +316 -0
  176. package/dist/atabey-mcp/src/mcp/utils/auth.js.map +1 -0
  177. package/dist/atabey-mcp/src/mcp/utils/auto-rollback.d.ts +83 -0
  178. package/dist/atabey-mcp/src/mcp/utils/auto-rollback.js +418 -0
  179. package/dist/atabey-mcp/src/mcp/utils/auto-rollback.js.map +1 -0
  180. package/dist/atabey-mcp/src/mcp/utils/context-optimizer.d.ts +85 -0
  181. package/dist/atabey-mcp/src/mcp/utils/context-optimizer.js +296 -0
  182. package/dist/atabey-mcp/src/mcp/utils/context-optimizer.js.map +1 -0
  183. package/dist/atabey-mcp/src/mcp/utils/discipline.d.ts +72 -0
  184. package/dist/atabey-mcp/src/mcp/utils/discipline.js +385 -0
  185. package/dist/atabey-mcp/src/mcp/utils/discipline.js.map +1 -0
  186. package/dist/atabey-mcp/src/mcp/utils/finops.d.ts +81 -0
  187. package/dist/atabey-mcp/src/mcp/utils/finops.js +274 -0
  188. package/dist/atabey-mcp/src/mcp/utils/finops.js.map +1 -0
  189. package/dist/atabey-mcp/src/mcp/utils/loop-detector.d.ts +106 -0
  190. package/dist/atabey-mcp/src/mcp/utils/loop-detector.js +419 -0
  191. package/dist/atabey-mcp/src/mcp/utils/loop-detector.js.map +1 -0
  192. package/dist/atabey-mcp/src/mcp/utils/rules-engine.d.ts +80 -0
  193. package/dist/atabey-mcp/src/mcp/utils/rules-engine.js +296 -0
  194. package/dist/atabey-mcp/src/mcp/utils/rules-engine.js.map +1 -0
  195. package/dist/atabey-mcp/src/mcp/utils/telemetry-streamer.d.ts +133 -0
  196. package/dist/atabey-mcp/src/mcp/utils/telemetry-streamer.js +400 -0
  197. package/dist/atabey-mcp/src/mcp/utils/telemetry-streamer.js.map +1 -0
  198. package/dist/atabey-mcp/src/shared/logger.d.ts +1 -0
  199. package/dist/atabey-mcp/src/shared/logger.js +2 -0
  200. package/dist/atabey-mcp/src/shared/logger.js.map +1 -0
  201. package/dist/atabey-mcp/src/shared/pii.d.ts +1 -0
  202. package/dist/atabey-mcp/src/shared/pii.js +2 -0
  203. package/dist/atabey-mcp/src/shared/pii.js.map +1 -0
  204. package/dist/atabey-mcp/src/shared/storage.d.ts +2 -0
  205. package/dist/atabey-mcp/src/shared/storage.js +3 -0
  206. package/dist/atabey-mcp/src/shared/storage.js.map +1 -0
  207. package/dist/shared/src/agent-identity.d.ts +1 -0
  208. package/dist/shared/src/agent-identity.js +2 -0
  209. package/dist/shared/src/agent-identity.js.map +1 -0
  210. package/dist/shared/src/api-catalog.d.ts +1 -0
  211. package/dist/shared/src/api-catalog.js +2 -0
  212. package/dist/shared/src/api-catalog.js.map +1 -0
  213. package/dist/shared/src/audit-chain.d.ts +1 -51
  214. package/dist/shared/src/audit-chain.js +1 -84
  215. package/dist/shared/src/audit-chain.js.map +1 -1
  216. package/dist/shared/src/audit.d.ts +1 -113
  217. package/dist/shared/src/audit.js +1 -284
  218. package/dist/shared/src/audit.js.map +1 -1
  219. package/dist/shared/src/constants.d.ts +1 -152
  220. package/dist/shared/src/constants.js +1 -215
  221. package/dist/shared/src/constants.js.map +1 -1
  222. package/dist/shared/src/database.d.ts +1 -5
  223. package/dist/shared/src/database.js +1 -12
  224. package/dist/shared/src/database.js.map +1 -1
  225. package/dist/shared/src/errors.d.ts +1 -46
  226. package/dist/shared/src/errors.js +1 -68
  227. package/dist/shared/src/errors.js.map +1 -1
  228. package/dist/shared/src/file-lock.d.ts +1 -88
  229. package/dist/shared/src/file-lock.js +1 -250
  230. package/dist/shared/src/file-lock.js.map +1 -1
  231. package/dist/shared/src/fs.d.ts +1 -9
  232. package/dist/shared/src/fs.js +1 -53
  233. package/dist/shared/src/fs.js.map +1 -1
  234. package/dist/shared/src/index.d.ts +2 -22
  235. package/dist/shared/src/index.js +2 -22
  236. package/dist/shared/src/index.js.map +1 -1
  237. package/dist/shared/src/job-queue.d.ts +1 -53
  238. package/dist/shared/src/job-queue.js +1 -126
  239. package/dist/shared/src/job-queue.js.map +1 -1
  240. package/dist/shared/src/lock.d.ts +1 -82
  241. package/dist/shared/src/lock.js +1 -158
  242. package/dist/shared/src/lock.js.map +1 -1
  243. package/dist/shared/src/logger.d.ts +1 -30
  244. package/dist/shared/src/logger.js +1 -126
  245. package/dist/shared/src/logger.js.map +1 -1
  246. package/dist/shared/src/memory-prune.d.ts +1 -0
  247. package/dist/shared/src/memory-prune.js +2 -0
  248. package/dist/shared/src/memory-prune.js.map +1 -0
  249. package/dist/shared/src/migrations.d.ts +1 -0
  250. package/dist/shared/src/migrations.js +2 -0
  251. package/dist/shared/src/migrations.js.map +1 -0
  252. package/dist/shared/src/modules/agent/agent-identity.d.ts +34 -0
  253. package/dist/shared/src/modules/agent/agent-identity.js +77 -0
  254. package/dist/shared/src/modules/agent/agent-identity.js.map +1 -0
  255. package/dist/shared/src/modules/agent/api-catalog.d.ts +57 -0
  256. package/dist/shared/src/modules/agent/api-catalog.js +254 -0
  257. package/dist/shared/src/modules/agent/api-catalog.js.map +1 -0
  258. package/dist/shared/src/modules/agent/index.d.ts +3 -0
  259. package/dist/shared/src/modules/agent/index.js +4 -0
  260. package/dist/shared/src/modules/agent/index.js.map +1 -0
  261. package/dist/shared/src/modules/agent/tokenizer.d.ts +54 -0
  262. package/dist/shared/src/modules/agent/tokenizer.js +272 -0
  263. package/dist/shared/src/modules/agent/tokenizer.js.map +1 -0
  264. package/dist/shared/src/modules/concurrency/file-lock.d.ts +93 -0
  265. package/dist/shared/src/modules/concurrency/file-lock.js +240 -0
  266. package/dist/shared/src/modules/concurrency/file-lock.js.map +1 -0
  267. package/dist/shared/src/modules/concurrency/index.d.ts +6 -0
  268. package/dist/shared/src/modules/concurrency/index.js +7 -0
  269. package/dist/shared/src/modules/concurrency/index.js.map +1 -0
  270. package/dist/shared/src/modules/concurrency/job-queue.d.ts +76 -0
  271. package/dist/shared/src/modules/concurrency/job-queue.js +200 -0
  272. package/dist/shared/src/modules/concurrency/job-queue.js.map +1 -0
  273. package/dist/shared/src/modules/concurrency/lock.d.ts +82 -0
  274. package/dist/shared/src/modules/concurrency/lock.js +159 -0
  275. package/dist/shared/src/modules/concurrency/lock.js.map +1 -0
  276. package/dist/shared/src/modules/concurrency/resilience.d.ts +84 -0
  277. package/dist/shared/src/modules/concurrency/resilience.js +217 -0
  278. package/dist/shared/src/modules/concurrency/resilience.js.map +1 -0
  279. package/dist/shared/src/modules/concurrency/worker-pool.d.ts +52 -0
  280. package/dist/shared/src/modules/concurrency/worker-pool.js +229 -0
  281. package/dist/shared/src/modules/concurrency/worker-pool.js.map +1 -0
  282. package/dist/shared/src/modules/concurrency/worker-thread.d.ts +21 -0
  283. package/dist/shared/src/modules/concurrency/worker-thread.js +67 -0
  284. package/dist/shared/src/modules/concurrency/worker-thread.js.map +1 -0
  285. package/dist/shared/src/modules/index.d.ts +14 -0
  286. package/dist/shared/src/modules/index.js +15 -0
  287. package/dist/shared/src/modules/index.js.map +1 -0
  288. package/dist/shared/src/modules/observability/audit-chain.d.ts +80 -0
  289. package/dist/shared/src/modules/observability/audit-chain.js +262 -0
  290. package/dist/shared/src/modules/observability/audit-chain.js.map +1 -0
  291. package/dist/shared/src/modules/observability/audit.d.ts +121 -0
  292. package/dist/shared/src/modules/observability/audit.js +322 -0
  293. package/dist/shared/src/modules/observability/audit.js.map +1 -0
  294. package/dist/shared/src/modules/observability/index.d.ts +4 -0
  295. package/dist/shared/src/modules/observability/index.js +5 -0
  296. package/dist/shared/src/modules/observability/index.js.map +1 -0
  297. package/dist/shared/src/modules/observability/logger.d.ts +31 -0
  298. package/dist/shared/src/modules/observability/logger.js +153 -0
  299. package/dist/shared/src/modules/observability/logger.js.map +1 -0
  300. package/dist/shared/src/modules/observability/otel.d.ts +39 -0
  301. package/dist/shared/src/modules/observability/otel.js +93 -0
  302. package/dist/shared/src/modules/observability/otel.js.map +1 -0
  303. package/dist/shared/src/modules/primitives/constants.d.ts +150 -0
  304. package/dist/shared/src/modules/primitives/constants.js +212 -0
  305. package/dist/shared/src/modules/primitives/constants.js.map +1 -0
  306. package/dist/shared/src/modules/primitives/errors.d.ts +46 -0
  307. package/dist/shared/src/modules/primitives/errors.js +69 -0
  308. package/dist/shared/src/modules/primitives/errors.js.map +1 -0
  309. package/dist/shared/src/modules/primitives/fs.d.ts +9 -0
  310. package/dist/shared/src/modules/primitives/fs.js +54 -0
  311. package/dist/shared/src/modules/primitives/fs.js.map +1 -0
  312. package/dist/shared/src/modules/primitives/index.d.ts +7 -0
  313. package/dist/shared/src/modules/primitives/index.js +8 -0
  314. package/dist/shared/src/modules/primitives/index.js.map +1 -0
  315. package/dist/shared/src/modules/primitives/outbound-http.d.ts +32 -0
  316. package/dist/shared/src/modules/primitives/outbound-http.js +88 -0
  317. package/dist/shared/src/modules/primitives/outbound-http.js.map +1 -0
  318. package/dist/shared/src/modules/primitives/string.d.ts +1 -0
  319. package/dist/shared/src/modules/primitives/string.js +30 -0
  320. package/dist/shared/src/modules/primitives/string.js.map +1 -0
  321. package/dist/shared/src/modules/primitives/time.d.ts +5 -0
  322. package/dist/shared/src/modules/primitives/time.js +35 -0
  323. package/dist/shared/src/modules/primitives/time.js.map +1 -0
  324. package/dist/shared/src/modules/primitives/types.d.ts +27 -0
  325. package/dist/shared/src/modules/primitives/types.js +17 -0
  326. package/dist/shared/src/modules/primitives/types.js.map +1 -0
  327. package/dist/shared/src/modules/sandbox/index.d.ts +3 -0
  328. package/dist/shared/src/modules/sandbox/index.js +4 -0
  329. package/dist/shared/src/modules/sandbox/index.js.map +1 -0
  330. package/dist/shared/src/modules/sandbox/sandbox-fs.d.ts +28 -0
  331. package/dist/shared/src/modules/sandbox/sandbox-fs.js +143 -0
  332. package/dist/shared/src/modules/sandbox/sandbox-fs.js.map +1 -0
  333. package/dist/shared/src/modules/sandbox/sandbox-runtime.d.ts +78 -0
  334. package/dist/shared/src/modules/sandbox/sandbox-runtime.js +282 -0
  335. package/dist/shared/src/modules/sandbox/sandbox-runtime.js.map +1 -0
  336. package/dist/shared/src/modules/sandbox/sandbox.d.ts +54 -0
  337. package/dist/shared/src/modules/sandbox/sandbox.js +179 -0
  338. package/dist/shared/src/modules/sandbox/sandbox.js.map +1 -0
  339. package/dist/shared/src/modules/security/index.d.ts +5 -0
  340. package/dist/shared/src/modules/security/index.js +6 -0
  341. package/dist/shared/src/modules/security/index.js.map +1 -0
  342. package/dist/shared/src/modules/security/pii.d.ts +70 -0
  343. package/dist/shared/src/modules/security/pii.js +276 -0
  344. package/dist/shared/src/modules/security/pii.js.map +1 -0
  345. package/dist/shared/src/modules/security/policy-gate.d.ts +42 -0
  346. package/dist/shared/src/modules/security/policy-gate.js +172 -0
  347. package/dist/shared/src/modules/security/policy-gate.js.map +1 -0
  348. package/dist/shared/src/modules/security/retention.d.ts +68 -0
  349. package/dist/shared/src/modules/security/retention.js +218 -0
  350. package/dist/shared/src/modules/security/retention.js.map +1 -0
  351. package/dist/shared/src/modules/security/secrets.d.ts +99 -0
  352. package/dist/shared/src/modules/security/secrets.js +371 -0
  353. package/dist/shared/src/modules/security/secrets.js.map +1 -0
  354. package/dist/shared/src/modules/security/tls.d.ts +87 -0
  355. package/dist/shared/src/modules/security/tls.js +154 -0
  356. package/dist/shared/src/modules/security/tls.js.map +1 -0
  357. package/dist/shared/src/modules/storage/database.d.ts +6 -0
  358. package/dist/shared/src/modules/storage/database.js +16 -0
  359. package/dist/shared/src/modules/storage/database.js.map +1 -0
  360. package/dist/shared/src/modules/storage/index.d.ts +4 -0
  361. package/dist/shared/src/modules/storage/index.js +5 -0
  362. package/dist/shared/src/modules/storage/index.js.map +1 -0
  363. package/dist/shared/src/modules/storage/memory-prune.d.ts +18 -0
  364. package/dist/shared/src/modules/storage/memory-prune.js +48 -0
  365. package/dist/shared/src/modules/storage/memory-prune.js.map +1 -0
  366. package/dist/shared/src/modules/storage/migrations.d.ts +69 -0
  367. package/dist/shared/src/modules/storage/migrations.js +394 -0
  368. package/dist/shared/src/modules/storage/migrations.js.map +1 -0
  369. package/dist/shared/src/modules/storage/storage.d.ts +341 -0
  370. package/dist/shared/src/modules/storage/storage.js +1004 -0
  371. package/dist/shared/src/modules/storage/storage.js.map +1 -0
  372. package/dist/shared/src/otel.d.ts +1 -0
  373. package/dist/shared/src/otel.js +2 -0
  374. package/dist/shared/src/otel.js.map +1 -0
  375. package/dist/shared/src/outbound-http.d.ts +1 -0
  376. package/dist/shared/src/outbound-http.js +2 -0
  377. package/dist/shared/src/outbound-http.js.map +1 -0
  378. package/dist/shared/src/pii.d.ts +1 -69
  379. package/dist/shared/src/pii.js +1 -219
  380. package/dist/shared/src/pii.js.map +1 -1
  381. package/dist/shared/src/policy-gate.d.ts +1 -42
  382. package/dist/shared/src/policy-gate.js +1 -147
  383. package/dist/shared/src/policy-gate.js.map +1 -1
  384. package/dist/shared/src/resilience.d.ts +1 -84
  385. package/dist/shared/src/resilience.js +1 -216
  386. package/dist/shared/src/resilience.js.map +1 -1
  387. package/dist/shared/src/retention.d.ts +1 -63
  388. package/dist/shared/src/retention.js +1 -170
  389. package/dist/shared/src/retention.js.map +1 -1
  390. package/dist/shared/src/sandbox-fs.d.ts +1 -28
  391. package/dist/shared/src/sandbox-fs.js +1 -149
  392. package/dist/shared/src/sandbox-fs.js.map +1 -1
  393. package/dist/shared/src/sandbox-runtime.d.ts +1 -85
  394. package/dist/shared/src/sandbox-runtime.js +1 -249
  395. package/dist/shared/src/sandbox-runtime.js.map +1 -1
  396. package/dist/shared/src/sandbox.d.ts +1 -54
  397. package/dist/shared/src/sandbox.js +1 -178
  398. package/dist/shared/src/sandbox.js.map +1 -1
  399. package/dist/shared/src/secrets.d.ts +1 -0
  400. package/dist/shared/src/secrets.js +2 -0
  401. package/dist/shared/src/secrets.js.map +1 -0
  402. package/dist/shared/src/storage.d.ts +1 -274
  403. package/dist/shared/src/storage.js +1 -723
  404. package/dist/shared/src/storage.js.map +1 -1
  405. package/dist/shared/src/string.d.ts +1 -1
  406. package/dist/shared/src/string.js +1 -29
  407. package/dist/shared/src/string.js.map +1 -1
  408. package/dist/shared/src/time.d.ts +1 -5
  409. package/dist/shared/src/time.js +1 -30
  410. package/dist/shared/src/time.js.map +1 -1
  411. package/dist/shared/src/tls.d.ts +1 -0
  412. package/dist/shared/src/tls.js +2 -0
  413. package/dist/shared/src/tls.js.map +1 -0
  414. package/dist/shared/src/tokenizer.d.ts +1 -0
  415. package/dist/shared/src/tokenizer.js +2 -0
  416. package/dist/shared/src/tokenizer.js.map +1 -0
  417. package/dist/shared/src/types.d.ts +1 -27
  418. package/dist/shared/src/types.js +1 -16
  419. package/dist/shared/src/types.js.map +1 -1
  420. package/dist/shared/src/worker-pool.d.ts +1 -52
  421. package/dist/shared/src/worker-pool.js +1 -209
  422. package/dist/shared/src/worker-pool.js.map +1 -1
  423. package/dist/shared/src/worker-thread.d.ts +1 -21
  424. package/dist/shared/src/worker-thread.js +1 -66
  425. package/dist/shared/src/worker-thread.js.map +1 -1
  426. package/package.json +4 -6
  427. package/templates/docs/tech-stack.md +21 -0
  428. package/templates/full/ATABEY_FULL.md +38 -50
  429. package/templates/prompts/security-audit-recipe.md +1 -1
  430. package/templates/standards/architecture-standards.md +6 -4
  431. package/templates/standards/crud-governance.md +1 -1
  432. package/templates/standards/deployment-standards.md +1 -1
  433. package/templates/standards/enterprise-systems-standards.md +5 -1
  434. package/templates/standards/eslint-standards.md +10 -0
  435. package/templates/standards/frontend-standards.md +2 -2
  436. package/templates/standards/governance-standards.md +2 -2
  437. package/templates/standards/i18n-standards.md +1 -1
  438. package/templates/standards/logging-and-secrets.md +1 -1
  439. package/templates/standards/native-standards.md +1 -1
  440. package/templates/standards/quality-standards.md +1 -1
  441. package/templates/standards/security-audit-standards.md +1 -1
  442. package/templates/standards/security-standards.md +1 -1
  443. package/templates/standards/testing-standards.md +1 -1
  444. package/templates/standards/token-economy.md +27 -0
  445. package/dist/atabey/src/cli/commands/init/create-agent.d.ts +0 -4
  446. package/dist/atabey/src/cli/commands/init/create-agent.js +0 -59
  447. package/dist/atabey/src/cli/commands/init/create-agent.js.map +0 -1
  448. package/dist/atabey/src/cli/utils/config-schema.d.ts +0 -213
  449. package/dist/atabey/src/cli/utils/config-schema.js +0 -58
  450. package/dist/atabey/src/cli/utils/config-schema.js.map +0 -1
  451. package/dist/atabey/src/cli/utils/schemas.d.ts +0 -49
  452. package/dist/atabey/src/cli/utils/schemas.js +0 -20
  453. package/dist/atabey/src/cli/utils/schemas.js.map +0 -1
  454. package/dist/atabey/src/contracts/index.d.ts +0 -1
  455. package/dist/atabey/src/contracts/index.js +0 -2
  456. package/dist/atabey/src/contracts/index.js.map +0 -1
  457. package/dist/atabey/src/contracts/tasks.d.ts +0 -44
  458. package/dist/atabey/src/contracts/tasks.js +0 -21
  459. package/dist/atabey/src/contracts/tasks.js.map +0 -1
  460. package/dist/atabey/src/modules/contracts/index.d.ts +0 -5
  461. package/dist/atabey/src/modules/contracts/index.js +0 -6
  462. package/dist/atabey/src/modules/contracts/index.js.map +0 -1
  463. package/dist/atabey/src/modules/engines/contract-engine.d.ts +0 -46
  464. package/dist/atabey/src/modules/engines/contract-engine.js +0 -116
  465. package/dist/atabey/src/modules/engines/contract-engine.js.map +0 -1
  466. package/dist/atabey/src/modules/engines/discovery-engine.d.ts +0 -42
  467. package/dist/atabey/src/modules/engines/discovery-engine.js +0 -161
  468. package/dist/atabey/src/modules/engines/discovery-engine.js.map +0 -1
  469. package/dist/atabey/src/modules/engines/file-lock.d.ts +0 -56
  470. package/dist/atabey/src/modules/engines/file-lock.js +0 -171
  471. package/dist/atabey/src/modules/engines/file-lock.js.map +0 -1
  472. package/dist/atabey/src/modules/engines/phase-engine.d.ts +0 -82
  473. package/dist/atabey/src/modules/engines/phase-engine.js +0 -204
  474. package/dist/atabey/src/modules/engines/phase-engine.js.map +0 -1
  475. package/dist/atabey/src/modules/engines/policy-engine.d.ts +0 -63
  476. package/dist/atabey/src/modules/engines/policy-engine.js +0 -188
  477. package/dist/atabey/src/modules/engines/policy-engine.js.map +0 -1
  478. package/dist/atabey/src/modules/engines/sandbox.d.ts +0 -31
  479. package/dist/atabey/src/modules/engines/sandbox.js +0 -57
  480. package/dist/atabey/src/modules/engines/sandbox.js.map +0 -1
  481. package/dist/atabey/src/modules/engines/session-engine.d.ts +0 -68
  482. package/dist/atabey/src/modules/engines/session-engine.js +0 -141
  483. package/dist/atabey/src/modules/engines/session-engine.js.map +0 -1
  484. package/dist/atabey/src/modules/engines/worker-pool.d.ts +0 -8
  485. package/dist/atabey/src/modules/engines/worker-pool.js +0 -9
  486. package/dist/atabey/src/modules/engines/worker-pool.js.map +0 -1
  487. package/dist/atabey/src/modules/providers/llm-provider.d.ts +0 -87
  488. package/dist/atabey/src/modules/providers/llm-provider.js +0 -242
  489. package/dist/atabey/src/modules/providers/llm-provider.js.map +0 -1
  490. package/dist/atabey/src/shared/file-lock.d.ts +0 -1
  491. package/dist/atabey/src/shared/file-lock.js +0 -2
  492. package/dist/atabey/src/shared/file-lock.js.map +0 -1
  493. package/dist/atabey/src/shared/job-queue.d.ts +0 -1
  494. package/dist/atabey/src/shared/job-queue.js +0 -2
  495. package/dist/atabey/src/shared/job-queue.js.map +0 -1
  496. package/dist/atabey/src/shared/lock.d.ts +0 -1
  497. package/dist/atabey/src/shared/lock.js +0 -2
  498. package/dist/atabey/src/shared/lock.js.map +0 -1
  499. package/dist/atabey/src/shared/resilience.d.ts +0 -1
  500. package/dist/atabey/src/shared/resilience.js +0 -2
  501. package/dist/atabey/src/shared/resilience.js.map +0 -1
  502. package/dist/atabey/src/shared/retention.d.ts +0 -1
  503. package/dist/atabey/src/shared/retention.js +0 -2
  504. package/dist/atabey/src/shared/retention.js.map +0 -1
  505. package/dist/atabey/src/shared/sandbox-runtime.d.ts +0 -1
  506. package/dist/atabey/src/shared/sandbox-runtime.js +0 -2
  507. package/dist/atabey/src/shared/sandbox-runtime.js.map +0 -1
  508. package/dist/atabey/src/shared/sandbox.d.ts +0 -1
  509. package/dist/atabey/src/shared/sandbox.js +0 -2
  510. package/dist/atabey/src/shared/sandbox.js.map +0 -1
  511. package/dist/atabey/src/shared/worker-pool.d.ts +0 -1
  512. package/dist/atabey/src/shared/worker-pool.js +0 -2
  513. package/dist/atabey/src/shared/worker-pool.js.map +0 -1
@@ -0,0 +1,21 @@
1
+ # [TOOL] Project Tech Stack
2
+
3
+ > Auto-generated by `atabey init`. Source of truth: `.atabey/config.json`.
4
+
5
+ ## Application Stack
6
+ - **Backend Language:** Node.js (TypeScript)
7
+ - **Frontend Framework:** Vite (React)
8
+ - **Native / Platform Tier:** Rust or Go (mandatory for every native artifact)
9
+
10
+ ## Runtime & Packaging
11
+ - **Runtime:** Node.js >= 22
12
+ - **Package Manager:** npm workspaces (monorepo)
13
+
14
+ ## Governance & Orchestration (Atabey)
15
+ - **Protocol:** Model Context Protocol (MCP)
16
+ - **MCP Surface:** 40 strictly-typed tools
17
+ - **Storage:** SQLite (`better-sqlite3`)
18
+ - **Messaging:** Hermes WSS Bus (`ws`)
19
+ - **Validation:** Zod
20
+ - **Audit Trail:** keyed HMAC-SHA256 hash chain
21
+ - **Sandbox:** native OS isolation (macOS `seatbelt` / POSIX `uid` drop)
@@ -1,11 +1,11 @@
1
- # Atabey Governance Framework Enterprise
1
+ # Atabey Local Governance Framework
2
2
  # Place in project root. This file is the single source of truth for Base Project AI Extensions.
3
3
 
4
4
  ## [ATABEY] SUPREME LAW & ZERO DEVIATION POLICY (MANDATORY)
5
5
  > Any deviation from these rules is considered a violation of "Atabey Order," and the development process is immediately HALTED.
6
6
  - [ ] **Surgical Precision:** No file editing is allowed except via `replace_text` or `patch_file`. Overwriting the entire file is forbidden.
7
7
  - [ ] **Zero Type Hole:** Using the `any` type is a disciplinary offense at the level of 'treason'.
8
- - [ ] **Zero Console:** Usage of `console.log` is forbidden; only `EnterpriseLogger` is used.
8
+ - [ ] **Zero Console:** Usage of `console.log` is forbidden; only structured `logger` is used.
9
9
  - [ ] **Phase Discipline:** Phases cannot be skipped. No transition to the next step until success criteria are met.
10
10
  - [ ] **Contract First:** Code cannot be written if the contract signature (`contract_hash`) is broken.
11
11
 
@@ -64,7 +64,7 @@ This file (`./ATABEY.md`) and the `.atabey/knowledge/` folder represent the "Sup
64
64
  6. **Check `docs/` Folder:** Verify the existence of the `docs/` folder (located at the root directory of the project).
65
65
  7. **Absorb Context:** Read `docs/README.md`. If it is missing, check if the architecture folder exists.
66
66
  8. **Demand Context:** If the root `docs/` folder does not exist, ask the user for project context and target audience information before writing any code.
67
- 9. **Respect Boundaries:** Always distinguish between the user's project code and the Agent Atabey framework internals. Read `.atabey/knowledge/framework_vs_user_project_boundary.md` if unsure. Never mix the two.
67
+ 9. **Respect Boundaries:** Always distinguish between the user's project code and the Atabey framework internals. Read `.atabey/knowledge/framework_vs_user_project_boundary.md` if unsure. Never mix the two.
68
68
  10. **Automatic @manager Mode:** You are ALWAYS operating as `@manager`. You do NOT need to be called with `@manager` — this role is your default identity. You analyze, delegate, and orchestrate on EVERY turn without exception.
69
69
 
70
70
  **NEVER SKIP THIS STEP.** Do not assume context; read first, then act as @manager.
@@ -73,10 +73,10 @@ This file (`./ATABEY.md`) and the `.atabey/knowledge/` folder represent the "Sup
73
73
 
74
74
  ## CORE PRINCIPLES
75
75
 
76
- - **Permanent @manager Identity (Enterprise Standard):** The AI assistant is ALWAYS the `@manager` by default — on every turn, every message, without exception. The user does NOT need to type `@manager` to trigger this role. Explicitly typing a different agent (e.g. `@backend`, `@frontend`, `@analyst`) does NOT bypass @manager. All requests must still be processed by @manager first.
77
- - **Manager MANDATORY Orchestration (Enterprise Project Rule):** Every user request — regardless of how it is phrased or which agent is directly addressed — MUST first be received, analyzed, and orchestrated by the `@manager` agent. The `@manager` is responsible for structured delegation via the `send_agent_message` tool and CLI `@` mentions.
76
+ - **Permanent @manager Identity (Local Control Standard):** The AI assistant is ALWAYS the `@manager` by default — on every turn, every message, without exception. The user does NOT need to type `@manager` to trigger this role. Explicitly typing a different agent (e.g. `@backend`, `@frontend`, `@analyst`) does NOT bypass @manager. All requests must still be processed by @manager first.
77
+ - **Manager MANDATORY Orchestration (Local Control Standard):** Every user request — regardless of how it is phrased or which agent is directly addressed — MUST first be received, analyzed, and orchestrated by the `@manager` agent. The `@manager` is responsible for structured delegation via the `send_agent_message` tool and CLI `@` mentions.
78
78
  - **CLI @-Mentions:** The CLI supports direct delegation via `atabey @agent "task"`. This bypasses manual JSON creation and follows the Hermes protocol.
79
- - **Enterprise CRUD & Admin Governance (Enterprise Standard):** All high-risk administrative operations (user/permission management, bulk delete/purge, system config changes, audit log access, critical integrations, PII export, production schema changes, etc.) are strictly under @manager control. Specialist agents (@backend, @frontend, etc.) **must refuse** and immediately redirect such requests to @manager. Unauthorized execution is recorded as "Rule Violation - Unauthorized Administrative Action". Full list and rules are defined in `.atabey/knowledge/crud-governance.md` → "Corporate CRUD and Administrative Operation Governance".
79
+ - **Local CRUD & Admin Governance (Governance Standard):** All high-risk administrative operations (user/permission management, bulk delete/purge, system config changes, audit log access, critical integrations, PII export, production schema changes, etc.) are strictly under @manager control. Specialist agents (@backend, @frontend, etc.) **must refuse** and immediately redirect such requests to @manager. Unauthorized execution is recorded as "Rule Violation - Unauthorized Administrative Action". Full list and rules are defined in `.atabey/knowledge/crud-governance.md` → "Corporate CRUD and Administrative Operation Governance".
80
80
  - **Zero-Request Logging Policy:** Agents MUST log every action and update `PROJECT_MEMORY.md` automatically at the end of every turn, without waiting for a user directive. This is the "Operating Mode" of the framework.
81
81
  - **Immediate Memory Sync:** Every state change, decision, or improved capability must be reflected in the memory files immediately.
82
82
  - **Zero Temporary Storage & Single Source of Truth:** Storing, caching, or writing project details, logs, tasks, files, or agent planning documents (including implementation plans, scratch scripts, or intermediate tasks) in the operating system's temporary directory (`/tmp`, `/var/tmp`, `temp`, etc.) is strictly forbidden. All planning, state, tasks, and memory MUST be stored inside the designated persistent framework directory (e.g., `.atabey/` or `.agents/`) or the project workspace. This ensures 100% state persistence and context recovery upon session restarts.
@@ -97,10 +97,10 @@ This file (`./ATABEY.md`) and the `.atabey/knowledge/` folder represent the "Sup
97
97
  - **Framework vs User Project Boundary (Critical Rule):**
98
98
  When working on the user's own application, agents **must never** suggest, create, or modify files inside the framework's own source code (`node_modules/atabey-mcp/src/`, `node_modules/atabey/src/`, `.atabey/agents/`, etc.).
99
99
  All development must happen exclusively inside the user's project structure (`apps/backend/src/`, `apps/web/src/`, `src/`, etc.).
100
- The only exception is when the **explicit goal** of the session is to improve or extend the Agent Atabey framework itself.
100
+ The only exception is when the **explicit goal** of the session is to improve or extend the Atabey framework itself.
101
101
  Violating this boundary causes confusion, broken setups, and is considered a serious rule violation. @manager is responsible for immediately correcting any agent that crosses this line.
102
102
 
103
- - **Documentation Ownership Rule (Enterprise Standard — Zero Tolerance):**
103
+ - **Documentation Ownership Rule (Governance Standard — Zero Tolerance):**
104
104
  Agents are **mandatory** to write all documentation they produce for the user's project (architectural decisions, patterns, implementation details, toaster/approval flow documents, research findings, etc.) **exclusively into the user's own `docs/` folder**.
105
105
  These documents must **never** be written into `.atabey/knowledge/`, `.atabey/agents/`, or any framework folder.
106
106
  Violation is considered a serious rule breach and is corrected by @manager.
@@ -152,7 +152,7 @@ Every agent must use the **Mandatory Output Flow** defined in their specific `.m
152
152
  ## ABSOLUTE DON'TS — APPLIES TO EVERY RESPONSE
153
153
 
154
154
  - **`any` Type is Forbidden:** The use of `any` is strictly forbidden in TypeScript projects.
155
- - **`console.log` is Forbidden:** `console.log` cannot be present in production code. Use `EnterpriseLogger` (from `src/shared/logger.ts`) instead.
155
+ - **`console.log` is Forbidden:** `console.log` cannot be present in production code. Use structured `logger` (from `src/shared/logger.ts`) instead.
156
156
  - **Mock Data is Forbidden:** The use of fake (mock) data or placeholders is strictly forbidden. Every line of code must connect to a real endpoint or a typed contract. (Exception: Controlled mock usage is allowed for external 3rd party services like Stripe, Twilio).
157
157
  - **File Ownership Violation:** Making unauthorized changes in files outside your scope is forbidden.
158
158
  - **Security Rule Violation:** Violating security protocols is strictly forbidden.
@@ -288,7 +288,6 @@ Agent completes task → @quality reviews → PASS → Task done + Memory update
288
288
  ### 4. Approval Chain
289
289
  - All task completions go through `@quality` by default
290
290
  - High-risk tasks (Risk Engine score ≥ 60) additionally require human approval via `atabey approve <traceId>` before `@quality` review
291
- - The `ApprovalCenter` in the Dashboard visualizes pending approvals
292
291
 
293
292
  ---
294
293
 
@@ -387,26 +386,22 @@ node node_modules/atabey-mcp/dist/atabey-mcp/src/mcp/index.js
387
386
 
388
387
  ---
389
388
 
390
- ## [DASHBOARD] WEB CONTROL PANEL
389
+ ## [MCP] HEADLESS LOCAL CONTROL PLANE
391
390
 
392
- The Dashboard is a web-based visual control plane powered by Vite + React.
391
+ Atabey operates as a headless Local AI Control Plane via MCP (Model Context Protocol).
393
392
 
394
- ### 1. Access
393
+ ### 1. Startup & Status
395
394
  ```bash
396
- atabey dashboard # Default port: 5858
397
- atabey dashboard 4200 # Custom port
395
+ npx atabey mcp start # Start headless MCP server (stdio / sse)
396
+ atabey status # Inspect agent statuses and token costs
397
+ atabey check # System health check
398
398
  ```
399
399
 
400
- ### 2. Dashboard Features
401
- - **AgentMonitor:** Real-time agent statuses, phases, and trace IDs
402
- - **ApprovalCenter:** Pending human approvals with accept/reject actions
403
- - **CompliancePanel:** Compliance check results and reports
404
- - **HermesBrokerView:** Message queue contents and agent communication flow
405
-
406
- ### 3. Dashboard Stack
407
- - **Frontend:** Vite + React + TypeScript
408
- - **API:** `useApi` and `useSSE` hooks for real-time data
409
- - **Styling:** CSS with SharedStyles component
400
+ ### 2. Core Governance Capabilities
401
+ - **Agent Governance:** Strict tool access matrix per agent role
402
+ - **Approval Flow:** Human-in-the-loop approvals via `atabey hitl answer` / `approve_operation`
403
+ - **Memory & Integrity:** Project state persistence in `.atabey/` with cryptographic audit chain
404
+ - **Hermes Broker:** Inter-agent messaging and task execution tracing
410
405
 
411
406
  ---
412
407
 
@@ -484,34 +479,27 @@ Integration tests must use a real database (`better-sqlite3` in-memory) or servi
484
479
 
485
480
  ---
486
481
 
487
- ## DASHBOARD ARCHITECTURE
482
+ ## SYSTEM ARCHITECTURE
488
483
 
489
484
  ```
490
- +---------------------------+
491
- | Vite + React Dashboard |
492
- | (src/dashboard/) |
493
- +------------+--------------+
494
- |
495
- +------------+--------------+
496
- | Hermes API (useApi) |
497
- | SSE Events (useSSE) |
498
- +------------+--------------+
499
- |
500
- +------------------------+------------------------+
501
- | | |
502
- +-------+--------+ +---------+-------+ +----------+-------+
503
- | AgentMonitor | | ApprovalCenter | | CompliancePanel |
504
- | Real-time | | Pending approvals| | Check results |
505
- | agent status | | Accept/Reject | | Reports |
506
- +-----------------+ +-----------------+ +------------------+
507
-
508
- +--------------------------+
509
- | HermesBrokerView |
510
- | Message queue contents |
511
- | Agent comm flow |
512
- +--------------------------+
485
+ [Host AI Tool (Claude Code, Gemini CLI, Cursor, Windsurf)]
486
+ │
487
+ (stdio / MCP SSE)
488
+ ▼
489
+ ┌───────────────────────────┐
490
+ │ Atabey MCP Server │
491
+ │ (PolicyGate + Matrix) │
492
+ └─────────────┬─────────────┘
493
+ │
494
+ ┌─────────────────┼─────────────────┐
495
+ ▼ ▼ ▼
496
+ ┌───────────┐ ┌───────────┐ ┌───────────┐
497
+ │ Memory & │ │ Sandbox │ │ Cryptographic│
498
+ │ State │ │ Runtime │ │ Audit Chain │
499
+ │ (.atabey) │ │ (FS/Shell)│ │ (HMAC-SHA256)│
500
+ └───────────┘ └───────────┘ └───────────┘
513
501
  ```
514
502
 
515
503
  ---
516
504
 
517
- Developed by **Yusuf BEKAR** | [Enterprise Inquiries](mailto:ybekar@msn.com)
505
+ Developed by **Yusuf BEKAR** | [Inquiries](mailto:ybekar@msn.com)
@@ -1,6 +1,6 @@
1
1
  # [SECURITY] Engineering Recipe: Advanced Security Audit
2
2
 
3
- This recipe governs the @security agent's protocol for identifying and mitigating vulnerabilities within the Agent Atabey framework.
3
+ This recipe governs the @security agent's protocol for identifying and mitigating vulnerabilities within the Atabey framework.
4
4
 
5
5
  ## 🏁 Phase 1: Automated Reconnaissance
6
6
  1. **Secret Scan:** Run `grep_search` for keywords: `apiKey`, `secret`, `password`, `token`, `private_key`.
@@ -1,6 +1,6 @@
1
1
  # 📐 Corporate Architecture Standards (AL Framework)
2
2
 
3
- This project is developed in accordance with the "Architectural Order" (Architectural Order) rules defined by Agent Atabey.
3
+ This project is developed in accordance with the "Architectural Order" (Architectural Order) rules defined by Atabey.
4
4
 
5
5
  ## 1. Directory Structure (Monorepo Standard)
6
6
  - `apps/backend/`: Business logic, API, and database layers.
@@ -9,9 +9,11 @@ This project is developed in accordance with the "Architectural Order" (Architec
9
9
 
10
10
  ## 2. Layered Architecture
11
11
  All business logic must follow this hierarchy:
12
- 1. **Routes/Controllers:** API entry points and request validation.
13
- 2. **Services:** Where business logic is coordinated.
14
- 3. **Repositories/Models:** Database access and raw data mutations.
12
+ 1. **Routes:** API endpoint routing, rate limiting, and middleware registration.
13
+ 2. **Controllers:** Request validation (Zod/class-validator), DTO parsing, and HTTP status handling.
14
+ 3. **Services:** Core business logic orchestration, domain rules, and background job dispatching.
15
+ 4. **Repositories/Models:** Database access, schema models, and transactional mutations.
16
+ 5. **Job Workers:** Asynchronous background processing backed by database queue persistence.
15
17
 
16
18
  ## 3. Type Safety and Contracts
17
19
  - The hash in the `contract.version.json` file must always match the active code.
@@ -1,6 +1,6 @@
1
1
  # [GOV] Corporate CRUD and Governance Standards
2
2
 
3
- This document defines the strict rules applicable to data mutation and administrative operations in projects managed by the Agent Atabey AL.
3
+ This document defines the strict rules applicable to data mutation and administrative operations in projects managed by the Atabey AL.
4
4
 
5
5
  ## 1. High-Risk Operations
6
6
  The following operations are considered "High-Risk" and cannot be performed autonomously by specialist agents (@backend, @database, etc.):
@@ -1,6 +1,6 @@
1
1
  # [START] Deployment and Release Standards
2
2
 
3
- This document outlines the protocols for deploying, updating, and rolling back services managed by Agent Atabey.
3
+ This document outlines the protocols for deploying, updating, and rolling back services managed by Atabey.
4
4
 
5
5
  ## 1. Release Strategy
6
6
  - **Version Control:** All releases must follow Semantic Versioning (SemVer) and be tagged in Git with the format `vX.Y.Z`.
@@ -14,10 +14,14 @@
14
14
  - **Lock Minimization:** Avoid `ALTER TABLE` operations that acquire exclusive table locks in production; use concurrent indexing where supported.
15
15
 
16
16
  ## 3. Background Jobs & Job Queues
17
+ - **Mandatory Database Persistence:** All background jobs, asynchronous queues, and workers MUST persist their lifecycle in the database (e.g., `jobs` / `background_tasks` table). Volatile, in-memory-only queues are strictly prohibited for business workflows.
18
+ - **Transactional Enqueueing:** Enqueueing jobs must be committed within the same database transaction as the business operation to eliminate dual-write hazards.
19
+ - **Status State Machine:** Jobs must transition through explicit database statuses: `PENDING` -> `PROCESSING` -> `COMPLETED` / `FAILED` / `DEAD_LETTER`.
17
20
  - **Idempotency:** All job handlers must be idempotent. Use `idempotency_key` or message deduplication hashes.
18
- - **Retry & Dead-Letter Queues (DLQ):** Failed jobs must use exponential backoff with jitter (max 5 retries) before being routed to a dead-letter queue.
21
+ - **Retry & Dead-Letter Queues (DLQ):** Failed jobs must record attempt count, last error trace, and use exponential backoff with jitter (max 5 retries) before being routed to a dead-letter queue.
19
22
  - **Graceful Shutdown:** Workers must listen to `SIGTERM` / `SIGINT` signals, stop accepting new jobs, and allow in-flight tasks up to 30 seconds to finish.
20
23
 
24
+
21
25
  ## 4. Caching & Cache Invalidation
22
26
  - **Cache-Aside Pattern:** Query cache first; on miss, query database, populate cache with TTL, and return.
23
27
  - **Strict TTLs:** Never set infinite cache lifespans. Default TTL: 5 minutes for dynamic entities, 1 hour for static reference data.
@@ -0,0 +1,10 @@
1
+ # [ATABEY] Atabey — ESLint Standards
2
+
3
+ This document outlines the strict ESLint coding standards for Atabey projects.
4
+
5
+ ## 📏 Core Rules
6
+ - **Indentation:** 4 spaces (strict).
7
+ - **Quotes:** Double quotes (`"`) for strings.
8
+ - **Semicolons:** Always terminate statements with a semicolon (`;`).
9
+ - **No Explicit Any:** Avoid using `any`. Use strongly typed interfaces, generics, or `unknown` with type assertions.
10
+ - **Unused Variables:** Warning on unused variables unless prefixed with an underscore (`_`).
@@ -1,12 +1,12 @@
1
1
  # 🎨 Corporate Frontend and Responsive Standards
2
2
 
3
- This document defines the UI/UX standards for projects managed by Agent Atabey. All interfaces must comply with "Mobile-First", "Fluid Responsive", and "Cross-Device Adaptive" principles.
3
+ This document defines the UI/UX standards for projects managed by Atabey. All interfaces must comply with "Mobile-First", "Fluid Responsive", and "Cross-Device Adaptive" principles.
4
4
 
5
5
  ## 1. Zero UI Library Policy (Supreme Mandate)
6
6
  - **NO Third-Party UI Frameworks:** Usage of `@chakra-ui`, `mui`, `@shadcn`, `antd`, or similar pre-built component libraries is **STRICTLY FORBIDDEN**.
7
7
  - **Atomic Manual Construction:** Every UI component (Button, Modal, Input, etc.) must be built manually from scratch using atomic CSS principles.
8
8
  - **Styling Engine:** All styles must be written with type-safe **Panda CSS** or structured **Tailwind CSS**.
9
- - **Reasoning:** Pre-built libraries introduce massive bloat, difficult-to-override styles, and dependency lock-in. Agent Atabey enforces pure, lightweight, and 100% customizable UI code.
9
+ - **Reasoning:** Pre-built libraries introduce massive bloat, difficult-to-override styles, and dependency lock-in. Atabey enforces pure, lightweight, and 100% customizable UI code.
10
10
 
11
11
  ## 2. Design System: Panda CSS & Tailwind Integration
12
12
  - **Token Usage:** Colors, spacing, and font sizes must be managed via the `token()` function or standard CSS variables.
@@ -1,6 +1,6 @@
1
- # [ATABEY] Agent Atabey — Governance & Order Standards
1
+ # [ATABEY] Atabey — Governance & Order Standards
2
2
 
3
- This document defines the supreme governance mandates of the Agent Atabey framework.
3
+ This document defines the supreme governance mandates of the Atabey framework.
4
4
  All agents **must** internalize these rules before executing any task.
5
5
 
6
6
  ---
@@ -1,6 +1,6 @@
1
1
  # 🌐 Corporate Multi-Language (i18n) Standards
2
2
 
3
- This document defines the localization, internationalization, and multi-language management rules for projects managed by Agent Atabey.
3
+ This document defines the localization, internationalization, and multi-language management rules for projects managed by Atabey.
4
4
 
5
5
  ## 1. Centralized Management
6
6
  - **Hardcoded Forbidden:** No text visible to the user shall be written directly into the code (JSX/HTML/TS).
@@ -1,6 +1,6 @@
1
1
  # 🪵 Corporate Logging and Secret Management (.env) Standards
2
2
 
3
- This document defines the logging discipline and sensitive data (secret) management rules for projects managed by the Agent Atabey AL.
3
+ This document defines the logging discipline and sensitive data (secret) management rules for projects managed by the Atabey AL.
4
4
 
5
5
  ## 1. Logging Discipline (Zero Console Policy)
6
6
  - **console.log Forbidden:** The use of `console.log`, `console.warn`, or `console.error` in production code is strictly forbidden.
@@ -1,7 +1,7 @@
1
1
  # [NATIVE] Corporate Native / Platform-Layer Standards (Rust / Go)
2
2
 
3
3
  This document defines the mandatory language, safety, and FFI rules for the
4
- native / platform tier of any project governed by Agent Atabey.
4
+ native / platform tier of any project governed by Atabey.
5
5
 
6
6
  > **Supreme rule:** The native/platform layer is written in **Rust (preferred)**
7
7
  > or **Go**. TypeScript/JavaScript is FORBIDDEN for this tier. Business logic
@@ -1,6 +1,6 @@
1
1
  # ⚖️ Corporate Code Quality and Discipline (Linting & Standards)
2
2
 
3
- This document defines the technical discipline rules that all code produced by the Agent Atabey AL must comply with. The goal is zero errors, maximum readability, and sustainability.
3
+ This document defines the technical discipline rules that all code produced by the Atabey AL must comply with. The goal is zero errors, maximum readability, and sustainability.
4
4
 
5
5
  ## 1. TypeScript Discipline
6
6
  - **Strict Mode:** `strict: true` is mandatory in all projects.
@@ -1,6 +1,6 @@
1
1
  # [SECURITY] Security Audit Standards
2
2
 
3
- This document defines the security audit procedures required for all Agent Atabey-managed projects to ensure a "Defense-in-Depth" posture, aligned with OWASP ASVS and the OWASP Top 10.
3
+ This document defines the security audit procedures required for all Atabey-managed projects to ensure a "Defense-in-Depth" posture, aligned with OWASP ASVS and the OWASP Top 10.
4
4
 
5
5
  ## 1. Automated Vulnerability Scanning
6
6
  - **Dependency Audit:** All projects must execute `npm audit` within the CI/CD pipeline. Any high/critical vulnerability must block deployment.
@@ -1,6 +1,6 @@
1
1
  # [SECURITY] Corporate Security and Data Protection Standards
2
2
 
3
- This document defines the security protocols and data protection standards for projects managed by Agent Atabey.
3
+ This document defines the security protocols and data protection standards for projects managed by Atabey.
4
4
 
5
5
  ## 1. Database Security (RLS)
6
6
  - **Row Level Security (RLS):** All user data must be protected with RLS policies. A user cannot access another user's data except through a permission protocol approved by `@manager`.
@@ -1,6 +1,6 @@
1
1
  # [SKILL] Corporate Testing Standards
2
2
 
3
- This document defines the testing discipline and scope rules for projects managed by Agent Atabey. Code quality must be ensured with automated tests.
3
+ This document defines the testing discipline and scope rules for projects managed by Atabey. Code quality must be ensured with automated tests.
4
4
 
5
5
  ## 1. Test Pyramid and Strategy
6
6
  - **Unit Tests:** Written for the smallest parts of business logic. Must be fast and isolated.
@@ -0,0 +1,27 @@
1
+ # 🪙 Token Economy & Context Management Standards
2
+
3
+ This document defines the strict context management and token cost optimization rules for Atabey projects. All agents must follow these mandates to minimize LLM usage costs and prevent context drift.
4
+
5
+ ## 1. Search Before Reading (Mandatory)
6
+ * **Rule:** Never execute a full directory listing (`list_dir`) recursively or read an entire file (`read_file`) without searching first.
7
+ * **Method:** Use `grep_search` to find the exact line number of interest. Then, read only the surrounding lines (e.g. ±20 lines) using `read_file` with `StartLine` and `EndLine`.
8
+ * **Cost Impact:** Prevents thousands of unnecessary input tokens from being loaded into context.
9
+
10
+ ## 2. Surgical Modifications
11
+ * **Rule:** Do not write or replace whole files unless they are very small (<50 lines).
12
+ * **Method:** Use targeted text replacement tools (`replace_text`, `patch_file`, `replace_file_content`, `multi_replace_file_content`) to apply edits to specific lines only.
13
+ * **Cost Impact:** Reduces output token generation by up to 95%, keeping LLM responses fast and cost-effective.
14
+
15
+ ## 3. Output Conciseness
16
+ * **Rule:** Keep explanations and logs to the absolute minimum required.
17
+ * **Method:** Do not output verbose comments, intermediate thinking logs, or redundant progress messages. Avoid repeating what the code does; explain only the "why" if non-obvious.
18
+ * **Cost Impact:** Saves output tokens in CLI streams and communication queues.
19
+
20
+ ## 4. Context Compaction & Memory Pruning
21
+ * **Rule:** Do not carry the entire history of the development session.
22
+ * **Method:** Before initiating a task, retrieve only the active state via `get_memory_insights` or by reading `PROJECT_MEMORY.md`. Archive completed tasks and older logs in `.atabey/memory/archive/`.
23
+ * **Cost Impact:** Keeps the prompt context window clean and prevents performance degradation due to long-context attention dilution.
24
+
25
+ ## 5. No Blind Coding & Stopping Gates
26
+ * **Rule:** Halt execution and ask the user for clarification if a task requires reading more than 5 large files without producing a clear search match.
27
+ * **Method:** Do not guess the structure or keep querying the filesystem repeatedly. Report the block to `@manager` and wait.
@@ -1,4 +0,0 @@
1
- /**
2
- * Plugin SDK: Creates a new custom agent template.
3
- */
4
- export declare function createAgentCommand(name: string): Promise<void>;
@@ -1,59 +0,0 @@
1
- import fs from "fs";
2
- import path from "path";
3
- import { writeTextFile } from "../../../shared/fs.js";
4
- import { UI } from "../../utils/ui.js";
5
- /**
6
- * Plugin SDK: Creates a new custom agent template.
7
- */
8
- export async function createAgentCommand(name) {
9
- const projectRoot = process.cwd();
10
- const agentsDir = path.join(projectRoot, "src/modules/agents/registry");
11
- if (!fs.existsSync(agentsDir)) {
12
- UI.error("Agent registry directory not found. Please ensure you are in an Atabey development environment.");
13
- return;
14
- }
15
- const filePath = path.join(agentsDir, `${name}.ts`);
16
- if (fs.existsSync(filePath)) {
17
- UI.error(`Agent '${name}' already exists.`);
18
- return;
19
- }
20
- const template = `import { AgentDefinition } from "../types.js";
21
-
22
- const STATE_MACHINE = "../schema/agent-lifecycle-schema.json" as const;
23
-
24
- export const ${name}: AgentDefinition = {
25
- name: "${name}",
26
- displayName: "${name.charAt(0).toUpperCase() + name.slice(1)} Specialist",
27
- role: "Custom Specialty",
28
- description: "Automatically generated custom agent for specific project needs.",
29
- capability: 7,
30
- tier: "core",
31
- tags: ["custom"],
32
- stateMachine: STATE_MACHINE,
33
- tools: [
34
- "read_file",
35
- "write_file",
36
- "replace_text",
37
- "grep_search",
38
- "send_agent_message",
39
- ],
40
- instructions: {
41
- identity: "${name.toUpperCase()} Domain Expert",
42
- mission: "Execute tasks related to ${name} with high precision and following Atabey standards.",
43
- chainOfThought: "1. Analyze Task\\n2. Plan Steps\\n3. Execute\\n4. Verify",
44
- rules: [
45
- "Always maintain type safety.",
46
- "Log all critical actions.",
47
- ],
48
- knowledgeFiles: [],
49
- },
50
- specialties: {
51
- ${name}: 10,
52
- },
53
- };
54
- `;
55
- writeTextFile(filePath, template);
56
- UI.success(`[OK] New agent '${name}' created at src/modules/agents/registry/${name}.ts`);
57
- UI.warning("[INFO] Don't forget to register the agent in src/modules/agents/definitions.ts");
58
- }
59
- //# sourceMappingURL=create-agent.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"create-agent.js","sourceRoot":"","sources":["../../../../../../src/cli/commands/init/create-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAEvC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAExE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;QAC5G,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;QAC5C,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG;;;;eAIN,IAAI;aACN,IAAI;oBACG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;qBAe3C,IAAI,CAAC,WAAW,EAAE;6CACM,IAAI;;;;;;;;;UASvC,IAAI;;;CAGb,CAAC;IAEE,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClC,EAAE,CAAC,OAAO,CAAC,mBAAmB,IAAI,4CAA4C,IAAI,KAAK,CAAC,CAAC;IACzF,EAAE,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC;AACjG,CAAC"}