bobo-ai-cli 2.1.0 → 3.0.0

package/dist/tool-governance.js

@@ -0,0 +1,335 @@
+/**
+ * Tool Governance Pipeline
+ *
+ * Enforces safety and consistency for all tool executions:
+ * Input validation → Risk classification → PreToolUse Hook →
+ * Permission check → Execution → PostToolUse Hook → Telemetry
+ *
+ * Key principles:
+ * - Fail-closed: All tools are unsafe by default
+ * - Explicit permissions: isConcurrencySafe and isReadOnly must be declared
+ * - Stateful constraints: edit_file requires prior read_file
+ */
+import { runHooks } from './hooks.js';
+/**
+ * Governance state tracker.
+ */
+class GovernanceState {
+    filesRead = new Set();
+    toolCallHistory = [];
+    maxHistorySize = 100;
+    recordFileRead(path) {
+        this.filesRead.add(path);
+    }
+    hasReadFile(path) {
+        return this.filesRead.has(path);
+    }
+    recordToolCall(context) {
+        this.toolCallHistory.push(context);
+        if (this.toolCallHistory.length > this.maxHistorySize) {
+            this.toolCallHistory.shift();
+        }
+    }
+    getRecentToolCalls(limit = 10) {
+        return this.toolCallHistory.slice(-limit);
+    }
+    reset() {
+        this.filesRead.clear();
+        this.toolCallHistory = [];
+    }
+}
+// Global governance state (per process)
+const governanceState = new GovernanceState();
+/**
+ * Tool metadata registry.
+ * IMPORTANT: Default to fail-closed (unsafe) for unknown tools.
+ */
+const toolMetadataRegistry = {
+    // Read-only tools (safe)
+    read_file: {
+        name: 'read_file',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    list_directory: {
+        name: 'list_directory',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    search_files: {
+        name: 'search_files',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    git_status: {
+        name: 'git_status',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    git_diff: {
+        name: 'git_diff',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    git_log: {
+        name: 'git_log',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    search_memory: {
+        name: 'search_memory',
+        isReadOnly: true,
+        isConcurrencySafe: true,
+        riskLevel: 'safe',
+    },
+    // Moderate-risk tools (state-modifying but recoverable)
+    write_file: {
+        name: 'write_file',
+        isReadOnly: false,
+        isConcurrencySafe: false, // File system races
+        riskLevel: 'moderate',
+    },
+    edit_file: {
+        name: 'edit_file',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'moderate',
+        requiresPriorRead: ['read_file'], // MUST read file before editing
+    },
+    save_memory: {
+        name: 'save_memory',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'moderate',
+    },
+    // Dangerous tools (hard to reverse)
+    shell: {
+        name: 'shell',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous',
+    },
+    git_commit: {
+        name: 'git_commit',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous',
+    },
+    git_push: {
+        name: 'git_push',
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous',
+    },
+};
+/**
+ * Get tool metadata (fail-closed for unknown tools).
+ */
+export function getToolMetadata(toolName) {
+    return toolMetadataRegistry[toolName] || {
+        name: toolName,
+        isReadOnly: false,
+        isConcurrencySafe: false,
+        riskLevel: 'dangerous', // Unknown tools are dangerous by default
+    };
+}
+/**
+ * Register tool metadata (for external tools).
+ */
+export function registerToolMetadata(metadata) {
+    toolMetadataRegistry[metadata.name] = metadata;
+}
+/**
+ * Validate tool inputs against schema.
+ */
+function validateToolInputs(toolName, args) {
+    // Basic validation - can be extended with JSON schema validation
+    switch (toolName) {
+        case 'read_file':
+        case 'write_file':
+        case 'edit_file':
+            if (!args.path || typeof args.path !== 'string') {
+                return { valid: false, error: 'Missing or invalid "path" parameter' };
+            }
+            // Check for path traversal attempts
+            if (args.path.includes('..')) {
+                return { valid: false, error: 'Path traversal not allowed' };
+            }
+            break;
+        case 'shell':
+            if (!args.command || typeof args.command !== 'string') {
+                return { valid: false, error: 'Missing or invalid "command" parameter' };
+            }
+            // Check for dangerous patterns
+            const cmd = args.command;
+            if (cmd.includes('rm -rf /') || cmd.includes('mkfs') || cmd.includes(':(){:|:&};:')) {
+                return { valid: false, error: 'Dangerous command blocked' };
+            }
+            break;
+        case 'edit_file':
+            if (!args.oldText || !args.newText) {
+                return { valid: false, error: 'Missing "oldText" or "newText" parameter' };
+            }
+            break;
+    }
+    return { valid: true };
+}
+/**
+ * Check if tool execution should be allowed based on governance rules.
+ */
+function checkGovernanceRules(toolName, args) {
+    const metadata = getToolMetadata(toolName);
+    // Check for required prior tool calls
+    if (metadata.requiresPriorRead && metadata.requiresPriorRead.length > 0) {
+        if (toolName === 'edit_file' && args.path) {
+            const filePath = args.path;
+            if (!governanceState.hasReadFile(filePath)) {
+                return {
+                    allowed: false,
+                    reason: `Must read file "${filePath}" before editing. Use read_file first.`,
+                };
+            }
+        }
+    }
+    return { allowed: true };
+}
+/**
+ * Execute tool with full governance pipeline.
+ */
+export async function executeToolWithGovernance(toolName, args, executor) {
+    const startTime = Date.now();
+    const context = {
+        toolName,
+        args,
+        timestamp: startTime,
+    };
+    try {
+        // Step 1: Input validation
+        const validation = validateToolInputs(toolName, args);
+        if (!validation.valid) {
+            return {
+                success: false,
+                error: `Input validation failed: ${validation.error}`,
+                duration: Date.now() - startTime,
+                blocked: true,
+                blockReason: validation.error,
+            };
+        }
+        // Step 2: Risk classification (already in metadata)
+        const metadata = getToolMetadata(toolName);
+        // Step 3: Governance rules check
+        const governanceCheck = checkGovernanceRules(toolName, args);
+        if (!governanceCheck.allowed) {
+            return {
+                success: false,
+                error: `Governance rule violation: ${governanceCheck.reason}`,
+                duration: Date.now() - startTime,
+                blocked: true,
+                blockReason: governanceCheck.reason,
+            };
+        }
+        // Step 4: PreToolUse Hook
+        try {
+            runHooks('pre-tool-use', {
+                BOBO_TOOL_NAME: toolName,
+                BOBO_TOOL_RISK: metadata.riskLevel,
+                BOBO_TOOL_ARGS: JSON.stringify(args),
+            });
+        }
+        catch (hookError) {
+            return {
+                success: false,
+                error: `Pre-tool-use hook failed: ${hookError.message}`,
+                duration: Date.now() - startTime,
+                blocked: true,
+                blockReason: 'Hook rejection',
+            };
+        }
+        // Step 5: Execute tool
+        let output;
+        try {
+            const result = executor(toolName, args);
+            output = result instanceof Promise ? await result : result;
+        }
+        catch (execError) {
+            const duration = Date.now() - startTime;
+            governanceState.recordToolCall(context);
+            return {
+                success: false,
+                error: execError.message,
+                duration,
+            };
+        }
+        // Step 6: PostToolUse Hook
+        try {
+            runHooks('post-tool-use', {
+                BOBO_TOOL_NAME: toolName,
+                BOBO_TOOL_RISK: metadata.riskLevel,
+                BOBO_TOOL_SUCCESS: 'true',
+            });
+        }
+        catch {
+            // Post-execution hooks shouldn't block
+        }
+        // Step 7: Update governance state
+        governanceState.recordToolCall(context);
+        // Track file reads for edit_file enforcement
+        if (toolName === 'read_file' && args.path) {
+            governanceState.recordFileRead(args.path);
+        }
+        // Step 8: Telemetry (recorded in context history)
+        const duration = Date.now() - startTime;
+        return {
+            success: true,
+            output,
+            duration,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: `Governance pipeline error: ${error.message}`,
+            duration: Date.now() - startTime,
+        };
+    }
+}
+/**
+ * Check if tools can be run concurrently.
+ */
+export function canRunConcurrently(toolNames) {
+    return toolNames.every(name => {
+        const metadata = getToolMetadata(name);
+        return metadata.isConcurrencySafe;
+    });
+}
+/**
+ * Get governance statistics.
+ */
+export function getGovernanceStats() {
+    return {
+        filesRead: governanceState['filesRead'].size,
+        recentToolCalls: governanceState.getRecentToolCalls(20),
+    };
+}
+/**
+ * Reset governance state (useful for testing or session boundaries).
+ */
+export function resetGovernanceState() {
+    governanceState.reset();
+}
+/**
+ * Format governance result for user display.
+ */
+export function formatGovernanceError(result) {
+    if (result.blocked) {
+        return `🚫 Tool execution blocked: ${result.blockReason || result.error}`;
+    }
+    return `❌ Tool execution failed: ${result.error}`;
+}
+//# sourceMappingURL=tool-governance.js.map

package/dist/tool-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-governance.js","sourceRoot":"","sources":["../src/tool-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAwCtC;;GAEG;AACH,MAAM,eAAe;IACX,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAC;IACnC,eAAe,GAA2B,EAAE,CAAC;IAC7C,cAAc,GAAG,GAAG,CAAC;IAE7B,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,cAAc,CAAC,OAA6B;QAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACtD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE;QACnC,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,wCAAwC;AACxC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAE9C;;;GAGG;AACH,MAAM,oBAAoB,GAAiC;IACzD,yBAAyB;IACzB,SAAS,EAAE;QACT,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,IAAI;QAChB,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM;KAClB;IAED,wDAAwD;IACxD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK,EAAE,oBAAoB;QAC9C,SAAS,EAAE,UAAU;KACtB;IACD,SAAS,EAAE;QACT,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,UAAU;QACrB,iBAAiB,EAAE,CAAC,WAAW,CAAC,EAAE,gCAAgC;KACnE;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,UAAU;KACtB;IAED,oCAAoC;IACpC,KAAK,EAAE;QACL,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW;KACvB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW;KACvB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW;KACvB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,oBAAoB,CAAC,QAAQ,CAAC,IAAI;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,WAAW,EAAE,yCAAyC;KAClE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsB;IACzD,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,IAA6B;IAIzE,iEAAiE;IACjE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;YACxE,CAAC;YACD,oCAAoC;YACpC,IAAK,IAAI,CAAC,IAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC/D,CAAC;YACD,MAAM;QAER,KAAK,OAAO;YACV,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;YAC3E,CAAC;YACD,+BAA+B;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAiB,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;YAC9D,CAAC;YACD,MAAM;QAER,KAAK,WAAW;YACd,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;YAC7E,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,IAA6B;IAI3E,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE3C,sCAAsC;IACtC,IAAI,QAAQ,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAc,CAAC;YACrC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,mBAAmB,QAAQ,wCAAwC;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,IAA6B,EAC7B,QAAmF;IAEnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAyB;QACpC,QAAQ;QACR,IAAI;QACJ,SAAS,EAAE,SAAS;KACrB,CAAC;IAEF,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,4BAA4B,UAAU,CAAC,KAAK,EAAE;gBACrD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,UAAU,CAAC,KAAK;aAC9B,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE3C,iCAAiC;QACjC,MAAM,eAAe,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,8BAA8B,eAAe,CAAC,MAAM,EAAE;gBAC7D,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,eAAe,CAAC,MAAM;aACpC,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,EAAE;gBACvB,cAAc,EAAE,QAAQ;gBACxB,cAAc,EAAE,QAAQ,CAAC,SAAS;gBAClC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,6BAA8B,SAAmB,CAAC,OAAO,EAAE;gBAClE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,gBAAgB;aAC9B,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7D,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAExC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAG,SAAmB,CAAC,OAAO;gBACnC,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,EAAE;gBACxB,cAAc,EAAE,QAAQ;gBACxB,cAAc,EAAE,QAAQ,CAAC,SAAS;gBAClC,iBAAiB,EAAE,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,kCAAkC;QAClC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAExC,6CAA6C;QAC7C,IAAI,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1C,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QACtD,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,8BAA+B,KAAe,CAAC,OAAO,EAAE;YAC/D,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAmB;IACpD,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,QAAQ,CAAC,iBAAiB,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAIhC,OAAO;QACL,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC,IAAI;QAC5C,eAAe,EAAE,eAAe,CAAC,kBAAkB,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA2B;IAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,8BAA8B,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,4BAA4B,MAAM,CAAC,KAAK,EAAE,CAAC;AACpD,CAAC"}

package/dist/ui/hud.d.ts

@@ -0,0 +1,25 @@
+/**
+ * HUD — 轻量状态显示
+ *
+ * 在 CLI 交互模式下，显示当前 agent 状态、活跃 workflow、token 用量
+ */
+export interface HUDState {
+    sessionId: string;
+    model: string;
+    effort: string;
+    activeAgents: string[];
+    completedTasks: number;
+    totalTasks: number;
+    tokenUsage: {
+        input: number;
+        output: number;
+    };
+}
+/**
+ * 渲染单行 HUD
+ */
+export declare function renderHUD(state: HUDState): string;
+/**
+ * 渲染详细状态面板
+ */
+export declare function renderStatusPanel(state: HUDState): string;

package/dist/ui/hud.js

@@ -0,0 +1,67 @@
+/**
+ * HUD — 轻量状态显示
+ *
+ * 在 CLI 交互模式下，显示当前 agent 状态、活跃 workflow、token 用量
+ */
+import chalk from 'chalk';
+import { readActiveWorkflows } from '../state/manager.js';
+/**
+ * 渲染单行 HUD
+ */
+export function renderHUD(state) {
+    const agents = state.activeAgents.length > 0
+        ? state.activeAgents.map(a => chalk.cyan(a)).join(', ')
+        : chalk.dim('idle');
+    const progress = state.totalTasks > 0
+        ? `${state.completedTasks}/${state.totalTasks}`
+        : '-';
+    const tokens = state.tokenUsage.input + state.tokenUsage.output > 0
+        ? `${formatTokens(state.tokenUsage.input)}↓ ${formatTokens(state.tokenUsage.output)}↑`
+        : '';
+    const workflows = readActiveWorkflows();
+    const workflowStr = workflows.length > 0
+        ? chalk.yellow(` wf:${workflows.length}`)
+        : '';
+    return chalk.dim('[') +
+        chalk.bold(state.model) +
+        chalk.dim('/') +
+        state.effort +
+        chalk.dim('] ') +
+        agents +
+        chalk.dim(` ${progress}`) +
+        workflowStr +
+        (tokens ? chalk.dim(` ${tokens}`) : '');
+}
+/**
+ * 渲染详细状态面板
+ */
+export function renderStatusPanel(state) {
+    const lines = [
+        chalk.cyan.bold('─'.repeat(50)),
+        `  ${chalk.bold('Session:')} ${state.sessionId}`,
+        `  ${chalk.bold('Model:')}   ${state.model} (${state.effort})`,
+        `  ${chalk.bold('Agents:')}  ${state.activeAgents.length > 0 ? state.activeAgents.join(', ') : 'none'}`,
+        `  ${chalk.bold('Tasks:')}   ${state.completedTasks}/${state.totalTasks}`,
+    ];
+    if (state.tokenUsage.input + state.tokenUsage.output > 0) {
+        lines.push(`  ${chalk.bold('Tokens:')}  ${formatTokens(state.tokenUsage.input)} in / ${formatTokens(state.tokenUsage.output)} out`);
+    }
+    const workflows = readActiveWorkflows();
+    if (workflows.length > 0) {
+        lines.push(`  ${chalk.bold('Workflows:')}`);
+        for (const w of workflows) {
+            const icon = w.status === 'completed' ? '✅' : w.status === 'failed' ? '❌' : '⏳';
+            lines.push(`    ${icon} ${w.type} (${w.status})`);
+        }
+    }
+    lines.push(chalk.cyan.bold('─'.repeat(50)));
+    return lines.join('\n');
+}
+function formatTokens(n) {
+    if (n >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (n >= 1_000)
+        return `${(n / 1_000).toFixed(1)}K`;
+    return String(n);
+}
+//# sourceMappingURL=hud.js.map

package/dist/ui/hud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hud.js","sourceRoot":"","sources":["../../src/ui/hud.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAY1D;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAe;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC1C,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACvD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC;QACnC,CAAC,CAAC,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE;QAC/C,CAAC,CAAC,GAAG,CAAC;IAER,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG;QACtF,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QACd,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACf,MAAM;QACN,KAAK,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,WAAW;QACX,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,MAAM,KAAK,GAAa;QACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE;QAChD,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG;QAC9D,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;QACvG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,EAAE;KAC1E,CAAC;IAEF,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtI,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAChF,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC"}

package/dist/verification-agent.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Verification Agent — 'try to break it' philosophy
+ *
+ * Instead of confirming success, this agent actively tries to find flaws.
+ * - Enforces build/test/lint execution
+ * - Adversarial probing: boundary testing, actual API calls
+ * - Separation of concerns: independent from the code-writing agent
+ * - Returns VERDICT: PASS / FAIL / PARTIAL
+ */
+export type VerificationVerdict = 'PASS' | 'FAIL' | 'PARTIAL';
+export interface VerificationResult {
+    verdict: VerificationVerdict;
+    summary: string;
+    checks: VerificationCheck[];
+    reasoning: string;
+    suggestedFixes?: string[];
+}
+export interface VerificationCheck {
+    name: string;
+    passed: boolean;
+    output?: string;
+    error?: string;
+    skipped?: boolean;
+    skipReason?: string;
+}
+interface VerificationOptions {
+    cwd?: string;
+    skipTests?: boolean;
+    skipBuild?: boolean;
+    skipLint?: boolean;
+    adversarialTests?: AdversarialTest[];
+}
+interface AdversarialTest {
+    name: string;
+    command: string;
+    expectFail?: boolean;
+}
+/**
+ * Main verification function — runs all checks and returns verdict.
+ */
+export declare function runVerification(task: string, result: string, options?: VerificationOptions): Promise<VerificationResult>;
+/**
+ * Format verification result for display.
+ */
+export declare function formatVerificationResult(result: VerificationResult): string;
+export {};