bobo-ai-cli 2.0.0 → 3.0.0

package/dist/tool-governance.js

@@ -0,0 +1,335 @@
+/**
+ * Tool Governance Pipeline
+ *
+ * Enforces safety and consistency for all tool executions:
+ * Input validation → Risk classification → PreToolUse Hook →
+ * Permission check → Execution → PostToolUse Hook → Telemetry
+ *
+ * Key principles:
+ * - Fail-closed: All tools are unsafe by default
+ * - Explicit permissions: isConcurrencySafe and isReadOnly must be declared
+ * - Stateful constraints: edit_file requires prior read_file
+ */
+import { runHooks } from './hooks.js';
+/**
+ * Governance state tracker.
+ */
+class GovernanceState {
+    filesRead = new Set();
+    toolCallHistory = [];
+    maxHistorySize = 100;
+    recordFileRead(path) {
+        this.filesRead.add(path);
+    }
+    hasReadFile(path) {
+        return this.filesRead.has(path);
+    }
+    recordToolCall(context) {
+        this.toolCallHistory.push(context);
+        if (this.toolCallHistory.length > this.maxHistorySize) {
+            this.toolCallHistory.shift();
+        }
+    }
+    getRecentToolCalls(limit = 10) {
+        return this.toolCallHistory.slice(-limit);
+    }
+    reset() {
+        this.filesRead.clear();
+        this.toolCallHistory = [];
+    }
+}
+// Global governance state (per process)
+const governanceState = new GovernanceState();
+/**
+ * Tool metadata registry.
+ * IMPORTANT: Default to fail-closed (unsafe) for unknown tools.
+ */
+const toolMetadataRegistry = {
+    // Read-only tools (safe)
+    read_file: {
+        name: 'read_file',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    list_directory: {
+        name: 'list_directory',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    search_files: {
+        name: 'search_files',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    git_status: {
+        name: 'git_status',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    git_diff: {
+        name: 'git_diff',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    git_log: {
+        name: 'git_log',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    search_memory: {
+        name: 'search_memory',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    // Moderate-risk tools (state-modifying but recoverable)
+    write_file: {
+        name: 'write_file',
+        isReadOnly: false,
+        isConcurrencySafe: false, // File system races
+        riskLevel: 'moderate',
+    },
+    edit_file: {
+        name: 'edit_file',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'moderate',
+        requiresPriorRead: ['read_file'], // MUST read file before editing
+    },
+    save_memory: {
+        name: 'save_memory',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'moderate',
+    },
+    // Dangerous tools (hard to reverse)
+    shell: {
+        name: 'shell',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous',
+    },
+    git_commit: {
+        name: 'git_commit',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous',
+    },
+    git_push: {
+        name: 'git_push',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous',
+    },
+};
+/**
+ * Get tool metadata (fail-closed for unknown tools).
+ */
+export function getToolMetadata(toolName) {
+    return toolMetadataRegistry[toolName] || {
+        name: toolName,
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous', // Unknown tools are dangerous by default
+    };
+}
+/**
+ * Register tool metadata (for external tools).
+ */
+export function registerToolMetadata(metadata) {
+    toolMetadataRegistry[metadata.name] = metadata;
+}
+/**
+ * Validate tool inputs against schema.
+ */
+function validateToolInputs(toolName, args) {
+    // Basic validation - can be extended with JSON schema validation
+    switch (toolName) {
+        case 'read_file':
+        case 'write_file':
+        case 'edit_file':
+            if (!args.path || typeof args.path !== 'string') {
+                return { valid: false, error: 'Missing or invalid "path" parameter' };
+            }
+            // Check for path traversal attempts
+            if (args.path.includes('..')) {
+                return { valid: false, error: 'Path traversal not allowed' };
+            }
+            break;
+        case 'shell':
+            if (!args.command || typeof args.command !== 'string') {
+                return { valid: false, error: 'Missing or invalid "command" parameter' };
+            }
+            // Check for dangerous patterns
+            const cmd = args.command;
+            if (cmd.includes('rm -rf /') || cmd.includes('mkfs') || cmd.includes(':(){:|:&};:')) {
+                return { valid: false, error: 'Dangerous command blocked' };
+            }
+            break;
+        case 'edit_file':
+            if (!args.oldText || !args.newText) {
+                return { valid: false, error: 'Missing "oldText" or "newText" parameter' };
+            }
+            break;
+    }
+    return { valid: true };
+}
+/**
+ * Check if tool execution should be allowed based on governance rules.
+ */
+function checkGovernanceRules(toolName, args) {
+    const metadata = getToolMetadata(toolName);
+    // Check for required prior tool calls
+    if (metadata.requiresPriorRead && metadata.requiresPriorRead.length > 0) {
+        if (toolName === 'edit_file' && args.path) {
+            const filePath = args.path;
+            if (!governanceState.hasReadFile(filePath)) {
+                return {
+                    allowed: false,
+                    reason: `Must read file "${filePath}" before editing. Use read_file first.`,
+                };
+            }
+        }
+    }
+    return { allowed: true };
+}
+/**
+ * Execute tool with full governance pipeline.
+ */
+export async function executeToolWithGovernance(toolName, args, executor) {
+    const startTime = Date.now();
+    const context = {
+        toolName,
+        args,
+        timestamp: startTime,
+    };
+    try {
+        // Step 1: Input validation
+        const validation = validateToolInputs(toolName, args);
+        if (!validation.valid) {
+            return {
+                success: false,
+                error: `Input validation failed: ${validation.error}`,
+                duration: Date.now() - startTime,
+                blocked: true,
+                blockReason: validation.error,
+            };
+        }
+        // Step 2: Risk classification (already in metadata)
+        const metadata = getToolMetadata(toolName);
+        // Step 3: Governance rules check
+        const governanceCheck = checkGovernanceRules(toolName, args);
+        if (!governanceCheck.allowed) {
+            return {
+                success: false,
+                error: `Governance rule violation: ${governanceCheck.reason}`,
+                duration: Date.now() - startTime,
+                blocked: true,
+                blockReason: governanceCheck.reason,
+            };
+        }
+        // Step 4: PreToolUse Hook
+        try {
+            runHooks('pre-tool-use', {
+                BOBO_TOOL_NAME: toolName,
+                BOBO_TOOL_RISK: metadata.riskLevel,
+                BOBO_TOOL_ARGS: JSON.stringify(args),
+            });
+        }
+        catch (hookError) {
+            return {
+                success: false,
+                error: `Pre-tool-use hook failed: ${hookError.message}`,
+                duration: Date.now() - startTime,
+                blocked: true,
+                blockReason: 'Hook rejection',
+            };
+        }
+        // Step 5: Execute tool
+        let output;
+        try {
+            const result = executor(toolName, args);
+            output = result instanceof Promise ? await result : result;
+        }
+        catch (execError) {
+            const duration = Date.now() - startTime;
+            governanceState.recordToolCall(context);
+            return {
+                success: false,
+                error: execError.message,
+                duration,
+            };
+        }
+        // Step 6: PostToolUse Hook
+        try {
+            runHooks('post-tool-use', {
+                BOBO_TOOL_NAME: toolName,
+                BOBO_TOOL_RISK: metadata.riskLevel,
+                BOBO_TOOL_SUCCESS: 'true',
+            });
+        }
+        catch {
+            // Post-execution hooks shouldn't block
+        }
+        // Step 7: Update governance state
+        governanceState.recordToolCall(context);
+        // Track file reads for edit_file enforcement
+        if (toolName === 'read_file' && args.path) {
+            governanceState.recordFileRead(args.path);
+        }
+        // Step 8: Telemetry (recorded in context history)
+        const duration = Date.now() - startTime;
+        return {
+            success: true,
+            output,
+            duration,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: `Governance pipeline error: ${error.message}`,
+            duration: Date.now() - startTime,
+        };
+    }
+}
+/**
+ * Check if tools can be run concurrently.
+ */
+export function canRunConcurrently(toolNames) {
+    return toolNames.every(name => {
+        const metadata = getToolMetadata(name);
+        return metadata.isConcurrencySafe;
+    });
+}
+/**
+ * Get governance statistics.
+ */
+export function getGovernanceStats() {
+    return {
+        filesRead: governanceState['filesRead'].size,
+        recentToolCalls: governanceState.getRecentToolCalls(20),
+    };
+}
+/**
+ * Reset governance state (useful for testing or session boundaries).
+ */
+export function resetGovernanceState() {
+    governanceState.reset();
+}
+/**
+ * Format governance result for user display.
+ */
+export function formatGovernanceError(result) {
+    if (result.blocked) {
+        return `🚫 Tool execution blocked: ${result.blockReason || result.error}`;
+    }
+    return `❌ Tool execution failed: ${result.error}`;
+}
+//# sourceMappingURL=tool-governance.js.map

package/dist/tool-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-governance.js","sourceRoot":"","sources":["../src/tool-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAwCtC;;GAEG;AACH,MAAM,eAAe;IACX,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAC;IACnC,eAAe,GAA2B,EAAE,CAAC;IAC7C,cAAc,GAAG,GAAG,CAAC;IAE7B,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,cAAc,CAAC,OAA6B;QAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACtD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE;QACnC,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,wCAAwC;AACxC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAE9C;;;GAGG;AACH,MAAM,oBAAoB,GAAiC;IACzD,yBAAyB;IACzB,SAAS,EAAE;QACT,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IAED,wDAAwD;IACxD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK,EAAE,oBAAoB;QAC9C,SAAS,EAAE,UAAU;KACtB;IACD,SAAS,EAAE;QACT,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,UAAU;QACrB,iBAAiB,EAAE,CAAC,WAAW,CAAC,EAAE,gCAAgC;KACnE;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,UAAU;KACtB;IAED,oCAAoC;IACpC,KAAK,EAAE;QACL,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW;KACvB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW;KACvB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW;KACvB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,oBAAoB,CAAC,QAAQ,CAAC,IAAI;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW,EAAE,yCAAyC;KAClE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsB;IACzD,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,IAA6B;IAIzE,iEAAiE;IACjE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;YACxE,CAAC;YACD,oCAAoC;YACpC,IAAK,IAAI,CAAC,IAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC/D,CAAC;YACD,MAAM;QAER,KAAK,OAAO;YACV,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;YAC3E,CAAC;YACD,+BAA+B;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAiB,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;YAC9D,CAAC;YACD,MAAM;QAER,KAAK,WAAW;YACd,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;YAC7E,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,IAA6B;IAI3E,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE3C,sCAAsC;IACtC,IAAI,QAAQ,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAc,CAAC;YACrC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,mBAAmB,QAAQ,wCAAwC;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,IAA6B,EAC7B,QAAmF;IAEnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAyB;QACpC,QAAQ;QACR,IAAI;QACJ,SAAS,EAAE,SAAS;KACrB,CAAC;IAEF,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,4BAA4B,UAAU,CAAC,KAAK,EAAE;gBACrD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,UAAU,CAAC,KAAK;aAC9B,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE3C,iCAAiC;QACjC,MAAM,eAAe,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,8BAA8B,eAAe,CAAC,MAAM,EAAE;gBAC7D,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,eAAe,CAAC,MAAM;aACpC,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,EAAE;gBACvB,cAAc,EAAE,QAAQ;gBACxB,cAAc,EAAE,QAAQ,CAAC,SAAS;gBAClC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,6BAA8B,SAAmB,CAAC,OAAO,EAAE;gBAClE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,gBAAgB;aAC9B,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7D,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAExC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAG,SAAmB,CAAC,OAAO;gBACnC,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,EAAE;gBACxB,cAAc,EAAE,QAAQ;gBACxB,cAAc,EAAE,QAAQ,CAAC,SAAS;gBAClC,iBAAiB,EAAE,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,kCAAkC;QAClC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAExC,6CAA6C;QAC7C,IAAI,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1C,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QACtD,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,8BAA+B,KAAe,CAAC,OAAO,EAAE;YAC/D,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAmB;IACpD,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,QAAQ,CAAC,iBAAiB,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAIhC,OAAO;QACL,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC,IAAI;QAC5C,eAAe,EAAE,eAAe,CAAC,kBAAkB,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA2B;IAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,8BAA8B,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,4BAA4B,MAAM,CAAC,KAAK,EAAE,CAAC;AACpD,CAAC"}

package/dist/tools/claude-bridge-tool.d.ts

@@ -0,0 +1,4 @@
+import type { ChatCompletionTool } from 'openai/resources/index.js';
+export declare const claudeBridgeToolDefinitions: ChatCompletionTool[];
+export declare function isClaudeBridgeTool(name: string): boolean;
+export declare function executeClaudeBridgeTool(args: Record<string, unknown>): Promise<string>;

package/dist/tools/claude-bridge-tool.js

@@ -0,0 +1,44 @@
+import { delegateToClaudeFile, isClaudeAvailable } from '../claude-bridge.js';
+export const claudeBridgeToolDefinitions = [
+    {
+        type: 'function',
+        function: {
+            name: 'delegate_claude',
+            description: 'Delegate a heavy engineering or long-running task to local Claude Code CLI and return its result.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    task: { type: 'string', description: 'Task prompt to send to Claude Code' },
+                    cwd: { type: 'string', description: 'Working directory for Claude Code' },
+                    model: { type: 'string', description: 'Optional Claude model override' },
+                    maxTimeout: { type: 'number', description: 'Timeout in seconds (default 120)' },
+                    systemPromptAppend: { type: 'string', description: 'Extra system prompt appended to Claude Code' },
+                    outputFormat: { type: 'string', enum: ['text', 'json'], description: 'Claude output format' },
+                },
+                required: ['task'],
+            },
+        },
+    },
+];
+export function isClaudeBridgeTool(name) {
+    return name === 'delegate_claude';
+}
+export async function executeClaudeBridgeTool(args) {
+    if (!isClaudeAvailable()) {
+        return 'Error: Claude Code CLI is not available in PATH';
+    }
+    const result = delegateToClaudeFile({
+        task: args.task,
+        cwd: args.cwd,
+        model: args.model,
+        maxTimeout: args.maxTimeout,
+        systemPromptAppend: args.systemPromptAppend,
+        outputFormat: args.outputFormat || 'text',
+    });
+    const duration = `${(result.durationMs / 1000).toFixed(1)}s`;
+    if (result.success) {
+        return `Claude Code delegation succeeded in ${duration}\n\n${result.output}`.trim();
+    }
+    return `Claude Code delegation failed in ${duration}\nExit code: ${result.exitCode ?? 'unknown'}\n${result.error || result.output}`.trim();
+}
+//# sourceMappingURL=claude-bridge-tool.js.map

package/dist/tools/claude-bridge-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-bridge-tool.js","sourceRoot":"","sources":["../../src/tools/claude-bridge-tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,MAAM,CAAC,MAAM,2BAA2B,GAAyB;IAC/D;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,mGAAmG;YAChH,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;oBAC3E,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;oBACzE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBACxE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kCAAkC,EAAE;oBAC/E,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;oBAClG,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE;iBAC9F;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;KACF;CACF,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,KAAK,iBAAiB,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAA6B;IACzE,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,IAAI,EAAE,IAAI,CAAC,IAAc;QACzB,GAAG,EAAE,IAAI,CAAC,GAAyB;QACnC,KAAK,EAAE,IAAI,CAAC,KAA2B;QACvC,UAAU,EAAE,IAAI,CAAC,UAAgC;QACjD,kBAAkB,EAAE,IAAI,CAAC,kBAAwC;QACjE,YAAY,EAAG,IAAI,CAAC,YAA4C,IAAI,MAAM;KAC3E,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,uCAAuC,QAAQ,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC;IAED,OAAO,oCAAoC,QAAQ,gBAAgB,MAAM,CAAC,QAAQ,IAAI,SAAS,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7I,CAAC"}

package/dist/tools/claude-code.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Claude Code Bridge — invoke Claude Code as a tool from Bobo CLI.
+ *
+ * Architecture:
+ * - Bobo CLI decides WHAT to do (skill routing, planning, memory)
+ * - Claude Code does the HEAVY LIFTING (large refactors, long chains, testing)
+ * - Results flow back to Bobo CLI for tracking and memory
+ *
+ * Delegation rules:
+ * - Simple edits → Bobo's own tools
+ * - Complex multi-file refactors → Claude Code
+ * - Long-running tasks → Claude Code
+ * - Tasks needing browser/visual → Claude Code
+ * - Skill routing / planning → Bobo keeps
+ */
+import type { ChatCompletionTool } from 'openai/resources/index.js';
+export declare const claudeCodeToolDefinitions: ChatCompletionTool[];
+export declare function isClaudeCodeAvailable(): boolean;
+export declare function isClaudeCodeTool(name: string): boolean;
+export declare function executeClaudeCodeTool(name: string, args: Record<string, unknown>): string;
+export interface DelegationDecision {
+    target: 'bobo' | 'claude-code';
+    reason: string;
+    confidence: number;
+}
+/**
+ * Decide whether a task should be handled by Bobo or delegated to Claude Code.
+ */
+export declare function shouldDelegate(taskDescription: string): DelegationDecision;
+/**
+ * Cleanup all Claude Code sessions.
+ */
+export declare function cleanupClaudeSessions(): void;