auto-mode 1.0.1 → 2.0.0

package/dist/cli.js

@@ -1,11 +1,15 @@
 #!/usr/bin/env node
-import { C as resolveXDGDir, D as string, E as strictObject, S as CLI_LIMITS, T as number, _ as findGitEntry, a as EMPTY_SESSION_SCOPE, b as readHostEnvironment, c as loadPolicy, d as writeActionDiagnostic, f as toRepositorySlug, g as findCheckout, h as isUnresolvedWord, i as loadSessionScope, l as resolveShippedPolicyDir, m as resolveShellPath, n as classifyAction, o as splitGitCommand, p as collectShellCommands, r as resolveSessionScopePath, s as M, t as parseActionRequest, u as loadCheckoutFacts, v as DEFAULT_SCOPE_SOURCES, w as updateJSONFile, x as runCapped, y as loadConfig } from "./parse-action-request-BfkmQxEC.js";
-import { randomUUID } from "node:crypto";
+import { C as resolveXDGDir, S as CLI_LIMITS, _ as findGitEntry, a as EMPTY_SESSION_SCOPE, b as readHostEnvironment, c as loadPolicy, d as writeActionDiagnostic, f as toRepositorySlug, g as findCheckout, h as isUnresolvedWord, i as loadSessionScope, l as resolveShippedPolicyDir, m as resolveShellPath, n as classifyAction, o as splitGitCommand, p as collectShellCommands, r as resolveSessionScopePath, s as M, t as parseActionRequest, u as loadCheckoutFacts, v as DEFAULT_SCOPE_SOURCES, w as updateJSONFile, x as runCapped, y as loadConfig } from "./parse-action-request-DtReuNOc.js";
+import { a as literal, d as string, i as discriminatedUnion, r as boolean, s as number, u as strictObject } from "./schemas-Dc2424NY.js";
+import { createHash, randomUUID } from "node:crypto";
 import { chmod, mkdir, open, readFile, realpath, stat } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
-import { constants, existsSync } from "node:fs";
+import { setTimeout } from "node:timers/promises";
+import { spawn } from "node:child_process";
+import { constants, existsSync, statSync } from "node:fs";
 import { text } from "node:stream/consumers";
 import { parseArgs } from "node:util";
+import { connect } from "node:net";
 //#region src/capture/resolve-capture-dir.ts
 function resolveCaptureDir(capture, host) {
 	return capture.dir ?? join(resolveXDGDir(host, "state"), "captures");
@@ -73,7 +77,6 @@ async function writeOwnerFile(path, text, flag) {
 //#endregion
 //#region src/config/build-jev-only-config.ts
 function buildJevOnlyConfig(config) {
-	if (config.provider.protocol !== "system-one") return null;
 	const judge = config.judge === void 0 || config.judge === null ? config.judge : {
 		...config.judge,
 		timeoutMs: Math.min(config.judge.timeoutMs, CLI_LIMITS.judgeMs)
@@ -95,6 +98,117 @@ function resolveShippedModDir(startDir = import.meta.dirname) {
 	return modDir;
 }
 //#endregion
+//#region src/process/start-detached-process.ts
+function startDetachedProcess(file, args, env) {
+	const child = spawn(file, args, {
+		detached: true,
+		stdio: "ignore",
+		env
+	});
+	child.on("error", () => {});
+	child.unref();
+}
+//#endregion
+//#region src/judge/judge-server-response-schema.ts
+const judgeServerResponseSchema = discriminatedUnion("kind", [strictObject({
+	kind: literal("reply"),
+	text: string(),
+	model: string(),
+	safetyStops: number().nullable(),
+	fallback: boolean(),
+	warm: boolean().nullable()
+}), strictObject({
+	kind: literal("failure"),
+	aborted: boolean(),
+	message: string()
+})]);
+//#endregion
+//#region src/judge/make-judge-server-session.ts
+function makeJudgeServerSession(target) {
+	return {
+		review: async (model, request, signal) => {
+			const answer = await sendLine(await tryConnectOrStartServer(target, signal), `${JSON.stringify({
+				model,
+				timeoutMs: target.timeoutMs,
+				...request
+			})}\n`, signal);
+			const response = judgeServerResponseSchema.parse(JSON.parse(answer));
+			if (response.kind === "failure") throw response.aborted ? new DOMException(response.message, "AbortError") : new Error(response.message);
+			const { kind: _kind, ...reply } = response;
+			return reply;
+		},
+		stop: () => {}
+	};
+}
+const START_WAIT_MS = 1e4;
+const START_POLL_MS = 25;
+async function tryConnectOrStartServer(target, signal) {
+	const existing = await tryConnect(target.socketPath);
+	if (existing !== null) return existing;
+	const [file, ...args] = target.command;
+	startDetachedProcess(file, [
+		...args,
+		"judge-server",
+		target.socketPath
+	], target.env);
+	const deadline = Date.now() + START_WAIT_MS;
+	while (Date.now() < deadline) {
+		await setTimeout(START_POLL_MS, void 0, { signal });
+		const socket = await tryConnect(target.socketPath);
+		if (socket !== null) return socket;
+	}
+	throw new Error("the judge server did not start");
+}
+function tryConnect(socketPath) {
+	return new Promise((resolve) => {
+		const socket = connect(socketPath);
+		socket.once("connect", () => {
+			socket.off("error", onError);
+			resolve(socket);
+		});
+		const onError = () => {
+			resolve(null);
+		};
+		socket.once("error", onError);
+	});
+}
+function sendLine(socket, line, signal) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		const onAbort = () => {
+			socket.destroy();
+			reject(new DOMException("Judge review aborted", "AbortError"));
+		};
+		if (signal.aborted) {
+			onAbort();
+			return;
+		}
+		signal.addEventListener("abort", onAbort, { once: true });
+		socket.on("data", (chunk) => {
+			chunks.push(chunk);
+		});
+		socket.once("error", (error) => {
+			signal.removeEventListener("abort", onAbort);
+			reject(error);
+		});
+		socket.once("end", () => {
+			signal.removeEventListener("abort", onAbort);
+			socket.destroy();
+			resolve(Buffer.concat(chunks).toString("utf8").trim());
+		});
+		socket.write(line);
+	});
+}
+//#endregion
+//#region src/judge/resolve-judge-socket-path.ts
+function resolveJudgeSocketPath(host, sessionID, entry) {
+	const runtime = host.env["XDG_RUNTIME_DIR"];
+	const dir = runtime === void 0 || runtime === "" ? join(resolveXDGDir(host, "state"), "judge") : join(runtime, "auto-mode");
+	const build = statSync(entry, { throwIfNoEntry: false });
+	const name = createHash("sha256").update(`${sessionID}\0${entry}\0${String(build?.mtimeMs ?? 0)}`).digest("hex").slice(0, 24);
+	return join(dir, `judge-${name}.sock`);
+}
+//#endregion
 //#region src/scope/read-pull-request.ts
 const LOOKUP_TIMEOUT_MS = 5e3;
 const MAX_LOOKUP_OUTPUT_BYTES = 65536;
@@ -419,6 +533,7 @@ Usage:
   auto-mode print-prompt     Print the system prompt the classifier receives
   auto-mode record           Read a finished Bash call on stdin, add what it created to the session's scope
   auto-mode mod-path         Print the directory of the Claude Code mod this package ships
+  auto-mode judge-server <socket>  Serve one agent session's judge reviews on a unix socket
 
 Options:
   --classifier <path>   Use this framework file instead of the shipped one
@@ -449,14 +564,14 @@ async function runCLI(argv, io) {
 	if (command === "print-prompt") {
 		const config = await loadConfig(void 0, io.host);
 		printWarnings(io.stderr, config.warnings);
-		const framework = config.provider.protocol === "system-one" ? "decision.md" : "classifier.md";
 		const prompt = await loadPolicy({
 			classifierPath: args.values.classifier ?? config.classifierPath,
 			rulesPath: args.values.rules ?? config.rulesPath
-		}, framework);
+		}, "decision.md");
 		io.stdout.write(`${prompt}\n`);
 		return 0;
 	}
+	if (command === "judge-server") return runJudgeServer(io, args.positionals[1]);
 	if (command === "mod-path") try {
 		io.stdout.write(`${resolveShippedModDir()}\n`);
 		return 0;
@@ -467,6 +582,31 @@ async function runCLI(argv, io) {
 	io.stderr.write(`auto-mode: unknown command '${command}'\n\n${USAGE}`);
 	return 2;
 }
+function buildJudgeServerSession(io, config, sessionID) {
+	const judge = config.judge ?? null;
+	if (io.judgeServerCommand === void 0 || judge?.protocol !== "claude-code") return;
+	const command = io.judgeServerCommand;
+	const entry = command[1] ?? command[0];
+	return makeJudgeServerSession({
+		socketPath: resolveJudgeSocketPath(io.host, sessionID, entry),
+		command: io.judgeServerCommand,
+		env: io.host.env,
+		timeoutMs: judge.timeoutMs
+	});
+}
+async function runJudgeServer(io, socketPath) {
+	if (socketPath === void 0) {
+		io.stderr.write(`auto-mode: judge-server needs a socket path\n\n${USAGE}`);
+		return 2;
+	}
+	await (await (await import("./start-judge-server-Drj5c8js.js")).startJudgeServer({
+		socketPath,
+		env: io.host.env,
+		idleMs: JUDGE_IDLE_MS
+	}))?.closed;
+	return 0;
+}
+const JUDGE_IDLE_MS = 9e5;
 function tryParseCLIArgs(argv) {
 	try {
 		return parseArgs({
@@ -509,10 +649,6 @@ async function run(io, explain, localOnly, jevOnly, deadline) {
 	}
 	printWarnings(io.stderr, loaded.warnings);
 	const config = jevOnly ? buildJevOnlyConfig(loaded) : loaded;
-	if (config === null) {
-		await writeActionFailure(request, host, io.stderr);
-		return printNote(io.stderr, true, "Jev-only evaluation requires system-one; no verdict");
-	}
 	const deadlineAt = deadline === void 0 ? void 0 : Number(deadline);
 	if (deadlineAt !== void 0 && (!jevOnly || !Number.isSafeInteger(deadlineAt) || deadlineAt <= 0)) {
 		await writeActionFailure(request, host, io.stderr);
@@ -530,7 +666,8 @@ async function run(io, explain, localOnly, jevOnly, deadline) {
 			host,
 			stderr: io.stderr,
 			budget: true,
-			actionLog: true
+			actionLog: true,
+			judgeSession: buildJudgeServerSession(io, config, request.sessionID)
 		});
 		if (outcome.verdict !== null) printVerdict(io.stdout, outcome.verdict);
 		if (config.capture?.enabled === true) {
@@ -594,7 +731,8 @@ process.exitCode = await runCLI(process.argv.slice(2), {
 			process.off("SIGTERM", onStop);
 			process.off("SIGINT", onStop);
 		};
-	}
+	},
+	judgeServerCommand: [process.execPath, import.meta.filename]
 });
 //#endregion
 export {};

package/dist/index.d.ts

@@ -4,10 +4,27 @@ interface DenialBudget {
   readonly perSession: number;
 }
 //#endregion
+//#region src/messages/anthropic-client.d.ts
+interface ModelRequest {
+  readonly system: string;
+  readonly user: string;
+}
+//#endregion
 //#region src/judge/types.d.ts
 type OverturnBasis = 'consent' | 'misread';
 type JudgeOverturns = 'consent' | 'any';
 type JudgeStatus = 'confirmed' | 'overturned' | 'held' | 'failed';
+interface JudgeMessageReply {
+  readonly text: string;
+  readonly model: string;
+  readonly safetyStops: number | null;
+  readonly fallback: boolean;
+  readonly warm: boolean | null;
+}
+interface JudgeSession {
+  readonly review: (model: string, request: Readonly<ModelRequest>, signal: Readonly<AbortSignal>) => Promise<JudgeMessageReply>;
+  readonly stop: () => void;
+}
 type JudgeFailure = 'credential' | 'policy' | 'request' | 'timeout' | 'unreadable';
 interface JudgeDiagnostics {
   readonly status: JudgeStatus;
@@ -16,13 +33,14 @@ interface JudgeDiagnostics {
   readonly model: string;
   readonly answeringModel: string | null;
   readonly safetyStops: number | null;
+  readonly warm: boolean | null;
   readonly rule: string;
   readonly tier: 'hard' | 'soft';
   readonly elapsedMs: number;
 }
 //#endregion
 //#region src/types.d.ts
-type DecidingStage = 'local' | 'containment' | 'bypass' | 'jev' | 'judge' | 'messages' | 'retry' | 'budget';
+type DecidingStage = 'local' | 'containment' | 'bypass' | 'jev' | 'judge' | 'retry' | 'budget';
 interface DecisionRule {
   readonly name: string;
   readonly tier: 'hard' | 'soft';
@@ -216,6 +234,7 @@ interface ClassifyOptions extends EvaluationOptions {
   readonly actionLog?: boolean;
   readonly stderr?: Readonly<OutputStream> | undefined;
   readonly findCheckout?: CheckoutFinder | undefined;
+  readonly judgeSession?: JudgeSession | undefined;
 }
 export declare function classifyAction(request: ActionRequest, config: Config, options?: ClassifyOptions): Promise<ActionOutcome>;
 //#endregion

package/dist/index.js

@@ -1,2 +1,2 @@
-import { n as classifyAction, t as parseActionRequest, y as loadConfig } from "./parse-action-request-BfkmQxEC.js";
+import { n as classifyAction, t as parseActionRequest, y as loadConfig } from "./parse-action-request-DtReuNOc.js";
 export { classifyAction, loadConfig, parseActionRequest };