daemora 1.0.0-alpha.0

package/dist/projects/ProjectStore.d.ts

@@ -0,0 +1,73 @@
+/**
+ * ProjectStore — multi-step project / task planning persistence.
+ *
+ * Unlike TaskStore (agent turn records) or TeamStore (multi-worker
+ * orchestration), ProjectStore is the agent's own "write plan, check
+ * off tasks" notebook. It survives restarts so the agent can resume
+ * long-running work after a crash or new session.
+ *
+ * Tables:
+ *   projects        — top-level project with id, name, status
+ *   project_tasks   — ordered tasks per project with per-task status
+ */
+import type Database from "better-sqlite3";
+declare const TASK_STATUSES: readonly ["pending", "in_progress", "done", "failed", "skipped"];
+export type TaskStatus = typeof TASK_STATUSES[number];
+declare const PROJECT_STATUSES: readonly ["in_progress", "completed", "abandoned"];
+export type ProjectStatus = typeof PROJECT_STATUSES[number];
+export interface ProjectRow {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly status: ProjectStatus;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+}
+export interface ProjectTaskRow {
+    readonly id: string;
+    readonly projectId: string;
+    readonly position: number;
+    readonly title: string;
+    readonly description: string;
+    readonly status: TaskStatus;
+    readonly notes: string;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+}
+export declare class ProjectStore {
+    private readonly db;
+    private readonly insertProject;
+    private readonly updateProject;
+    private readonly selectProject;
+    private readonly listProjects;
+    private readonly deleteProject;
+    private readonly insertTask;
+    private readonly updateTask;
+    private readonly selectTask;
+    private readonly listTasks;
+    private readonly deleteTask;
+    private readonly nextPosition;
+    constructor(db: Database.Database);
+    createProject(opts: {
+        name: string;
+        description?: string;
+        tasks?: readonly {
+            title: string;
+            description?: string;
+        }[];
+    }): ProjectRow;
+    getProject(id: string): ProjectRow | null;
+    allProjects(): readonly ProjectRow[];
+    updateProjectRow(id: string, patch: Partial<Pick<ProjectRow, "name" | "description" | "status">>): boolean;
+    deleteProjectRow(id: string): boolean;
+    addTask(projectId: string, opts: {
+        title: string;
+        description?: string;
+    }): ProjectTaskRow;
+    getTask(id: string): ProjectTaskRow | null;
+    listProjectTasks(projectId: string): readonly ProjectTaskRow[];
+    updateTaskRow(id: string, patch: Partial<Pick<ProjectTaskRow, "title" | "description" | "status" | "notes">>): boolean;
+    deleteTaskRow(id: string): boolean;
+}
+export { TASK_STATUSES, PROJECT_STATUSES };
+//# sourceMappingURL=ProjectStore.d.ts.map

package/dist/projects/ProjectStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectStore.d.ts","sourceRoot":"","sources":["../../src/projects/ProjectStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAM3C,QAAA,MAAM,aAAa,kEAAmE,CAAC;AACvF,MAAM,MAAM,UAAU,GAAG,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAEtD,QAAA,MAAM,gBAAgB,oDAAqD,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA2BD,qBAAa,YAAY;IAaX,OAAO,CAAC,QAAQ,CAAC,EAAE;IAZ/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;gBAErB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IA2ClD,aAAa,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,GAAG,UAAU;IAcnI,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIzC,WAAW,IAAI,SAAS,UAAU,EAAE;IAIpC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAC,GAAG,OAAO;IAa1G,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIrC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc;IAQzF,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAI1C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE;IAI9D,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,OAAO;IActH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAGnC;AAED,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/projects/ProjectStore.js

@@ -0,0 +1,132 @@
+/**
+ * ProjectStore — multi-step project / task planning persistence.
+ *
+ * Unlike TaskStore (agent turn records) or TeamStore (multi-worker
+ * orchestration), ProjectStore is the agent's own "write plan, check
+ * off tasks" notebook. It survives restarts so the agent can resume
+ * long-running work after a crash or new session.
+ *
+ * Tables:
+ *   projects        — top-level project with id, name, status
+ *   project_tasks   — ordered tasks per project with per-task status
+ */
+import { randomUUID } from "node:crypto";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("projects");
+const TASK_STATUSES = ["pending", "in_progress", "done", "failed", "skipped"];
+const PROJECT_STATUSES = ["in_progress", "completed", "abandoned"];
+const SCHEMA = `
+CREATE TABLE IF NOT EXISTS projects (
+  id          TEXT PRIMARY KEY,
+  name        TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  status      TEXT NOT NULL DEFAULT 'in_progress',
+  created_at  INTEGER NOT NULL,
+  updated_at  INTEGER NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS project_tasks (
+  id          TEXT PRIMARY KEY,
+  project_id  TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+  position    INTEGER NOT NULL,
+  title       TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  status      TEXT NOT NULL DEFAULT 'pending',
+  notes       TEXT NOT NULL DEFAULT '',
+  created_at  INTEGER NOT NULL,
+  updated_at  INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS project_tasks_by_project ON project_tasks(project_id, position);
+`;
+export class ProjectStore {
+    db;
+    insertProject;
+    updateProject;
+    selectProject;
+    listProjects;
+    deleteProject;
+    insertTask;
+    updateTask;
+    selectTask;
+    listTasks;
+    deleteTask;
+    nextPosition;
+    constructor(db) {
+        this.db = db;
+        db.exec(SCHEMA);
+        this.insertProject = db.prepare(`INSERT INTO projects (id, name, description, status, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?)`);
+        this.updateProject = db.prepare(`UPDATE projects SET name=?, description=?, status=?, updated_at=? WHERE id=?`);
+        this.selectProject = db.prepare(`SELECT id, name, description, status, created_at AS createdAt, updated_at AS updatedAt
+       FROM projects WHERE id=?`);
+        this.listProjects = db.prepare(`SELECT id, name, description, status, created_at AS createdAt, updated_at AS updatedAt
+       FROM projects ORDER BY updated_at DESC`);
+        this.deleteProject = db.prepare(`DELETE FROM projects WHERE id=?`);
+        this.insertTask = db.prepare(`INSERT INTO project_tasks (id, project_id, position, title, description, status, notes, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+        this.updateTask = db.prepare(`UPDATE project_tasks SET title=?, description=?, status=?, notes=?, updated_at=? WHERE id=?`);
+        this.selectTask = db.prepare(`SELECT id, project_id AS projectId, position, title, description, status, notes,
+              created_at AS createdAt, updated_at AS updatedAt
+       FROM project_tasks WHERE id=?`);
+        this.listTasks = db.prepare(`SELECT id, project_id AS projectId, position, title, description, status, notes,
+              created_at AS createdAt, updated_at AS updatedAt
+       FROM project_tasks WHERE project_id=? ORDER BY position ASC`);
+        this.deleteTask = db.prepare(`DELETE FROM project_tasks WHERE id=?`);
+        this.nextPosition = db.prepare(`SELECT COALESCE(MAX(position), 0) + 1 AS next FROM project_tasks WHERE project_id=?`);
+    }
+    createProject(opts) {
+        const id = randomUUID();
+        const now = Date.now();
+        this.insertProject.run(id, opts.name, opts.description ?? "", "in_progress", now, now);
+        if (opts.tasks?.length) {
+            for (let i = 0; i < opts.tasks.length; i++) {
+                const t = opts.tasks[i];
+                this.addTask(id, { title: t.title, ...(t.description ? { description: t.description } : {}) });
+            }
+        }
+        log.info({ id, name: opts.name, tasks: opts.tasks?.length ?? 0 }, "project created");
+        return this.getProject(id);
+    }
+    getProject(id) {
+        return this.selectProject.get(id) ?? null;
+    }
+    allProjects() {
+        return this.listProjects.all();
+    }
+    updateProjectRow(id, patch) {
+        const existing = this.getProject(id);
+        if (!existing)
+            return false;
+        this.updateProject.run(patch.name ?? existing.name, patch.description ?? existing.description, patch.status ?? existing.status, Date.now(), id);
+        return true;
+    }
+    deleteProjectRow(id) {
+        return this.deleteProject.run(id).changes > 0;
+    }
+    addTask(projectId, opts) {
+        const id = randomUUID();
+        const now = Date.now();
+        const pos = this.nextPosition.get(projectId).next;
+        this.insertTask.run(id, projectId, pos, opts.title, opts.description ?? "", "pending", "", now, now);
+        return this.getTask(id);
+    }
+    getTask(id) {
+        return this.selectTask.get(id) ?? null;
+    }
+    listProjectTasks(projectId) {
+        return this.listTasks.all(projectId);
+    }
+    updateTaskRow(id, patch) {
+        const existing = this.getTask(id);
+        if (!existing)
+            return false;
+        this.updateTask.run(patch.title ?? existing.title, patch.description ?? existing.description, patch.status ?? existing.status, patch.notes ?? existing.notes, Date.now(), id);
+        return true;
+    }
+    deleteTaskRow(id) {
+        return this.deleteTask.run(id).changes > 0;
+    }
+}
+export { TASK_STATUSES, PROJECT_STATUSES };
+//# sourceMappingURL=ProjectStore.js.map

package/dist/projects/ProjectStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectStore.js","sourceRoot":"","sources":["../../src/projects/ProjectStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAErC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAGvF,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAwB5E,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBd,CAAC;AAEF,MAAM,OAAO,YAAY;IAaM;IAZZ,aAAa,CAAqB;IAClC,aAAa,CAAqB;IAClC,aAAa,CAAqB;IAClC,YAAY,CAAqB;IACjC,aAAa,CAAqB;IAClC,UAAU,CAAqB;IAC/B,UAAU,CAAqB;IAC/B,UAAU,CAAqB;IAC/B,SAAS,CAAqB;IAC9B,UAAU,CAAqB;IAC/B,YAAY,CAAqB;IAElD,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,OAAO,CAC7B;iCAC2B,CAC5B,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,OAAO,CAC7B,8EAA8E,CAC/E,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,OAAO,CAC7B;gCAC0B,CAC3B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,OAAO,CAC5B;8CACwC,CACzC,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAEnE,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAC1B;0CACoC,CACrC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAC1B,6FAA6F,CAC9F,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAC1B;;qCAE+B,CAChC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,OAAO,CACzB;;mEAE6D,CAC9D,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,OAAO,CAC5B,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,IAAwG;QACpH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACvF,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAE,CAAC;IAC9B,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,OAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAgB,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAkB,CAAC;IACjD,CAAC;IAED,gBAAgB,CAAC,EAAU,EAAE,KAAmE;QAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CACpB,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAC3B,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,EACzC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAC/B,IAAI,CAAC,GAAG,EAAE,EACV,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,IAA6C;QACtE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAsB,CAAC,IAAI,CAAC;QACxE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAoB,IAAI,IAAI,CAAC;IAC7D,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAqB,CAAC;IAC3D,CAAC;IAED,aAAa,CAAC,EAAU,EAAE,KAAkF;QAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CACjB,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAC7B,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,EACzC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAC/B,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAC7B,IAAI,CAAC,GAAG,EAAE,EACV,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/safety/AuditLog.d.ts

@@ -0,0 +1,53 @@
+/**
+ * AuditLog — append-only audit trail for sensitive operations.
+ *
+ * Every tool call, secret access, file mutation, command execution,
+ * and crew spawn gets a permanent record here. The table is append-only:
+ * no UPDATE or DELETE statements exist.
+ *
+ * Table: audit_log
+ */
+import type Database from "better-sqlite3";
+export type AuditAction = "tool_call" | "secret_read" | "file_write" | "command_exec" | "email_sent" | "crew_spawn" | "cron_fire" | "watcher_trigger" | "goal_check" | "session_create" | "vault_unlock" | "vault_lock";
+export type AuditRisk = "low" | "medium" | "high" | "critical";
+export interface AuditEntry {
+    readonly id: string;
+    readonly action: AuditAction;
+    readonly actor: string;
+    readonly target: string | null;
+    readonly detail: string | null;
+    readonly risk: AuditRisk;
+    readonly createdAt: number;
+}
+export declare class AuditLog {
+    private readonly db;
+    private readonly stmts;
+    constructor(db: Database.Database);
+    /**
+     * Append an audit entry. This is the hot path — it should never throw
+     * under normal operation (malformed input is clamped, not rejected).
+     */
+    log(action: AuditAction, target?: string | null, detail?: string | null, risk?: AuditRisk): AuditEntry;
+    /**
+     * Retrieve the most recent audit entries.
+     */
+    recent(limit?: number): readonly AuditEntry[];
+    /**
+     * Full-text search across action, target, and detail columns.
+     * Uses SQLite LIKE for simplicity — the audit_log is append-only and
+     * relatively small, so a full-text index is unnecessary.
+     */
+    search(query: string, limit?: number): readonly AuditEntry[];
+    /**
+     * Count entries by action type, optionally filtered to a time range.
+     * Useful for dashboards / rate limiting heuristics.
+     */
+    countByAction(sinceMs?: number): ReadonlyMap<AuditAction, number>;
+    /**
+     * Count entries at or above a given risk level since a timestamp.
+     */
+    countByRisk(minRisk: AuditRisk, sinceMs?: number): number;
+    private createTable;
+    private prepareStatements;
+}
+//# sourceMappingURL=AuditLog.d.ts.map

package/dist/safety/AuditLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLog.d.ts","sourceRoot":"","sources":["../../src/safety/AuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAQ3C,MAAM,MAAM,WAAW,GACnB,WAAW,GACX,aAAa,GACb,YAAY,GACZ,cAAc,GACd,YAAY,GACZ,YAAY,GACZ,WAAW,GACX,iBAAiB,GACjB,YAAY,GACZ,gBAAgB,GAChB,cAAc,GACd,YAAY,CAAC;AAEjB,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA6BD,qBAAa,QAAQ;IAGP,OAAO,CAAC,QAAQ,CAAC,EAAE;IAF/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;gBAErC,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAMlD;;;OAGG;IACH,GAAG,CACD,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,IAAI,CAAC,EAAE,SAAS,GACf,UAAU;IA8Bb;;OAEG;IACH,MAAM,CAAC,KAAK,SAAM,GAAG,SAAS,UAAU,EAAE;IAM1C;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,SAAS,UAAU,EAAE;IAOzD;;;OAGG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;IAYjE;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAczD,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,iBAAiB;CAyB1B"}

package/dist/safety/AuditLog.js

@@ -0,0 +1,170 @@
+/**
+ * AuditLog — append-only audit trail for sensitive operations.
+ *
+ * Every tool call, secret access, file mutation, command execution,
+ * and crew spawn gets a permanent record here. The table is append-only:
+ * no UPDATE or DELETE statements exist.
+ *
+ * Table: audit_log
+ */
+import { randomUUID } from "node:crypto";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("audit-log");
+// ── Valid sets for runtime validation ──────────────────────────────
+const VALID_ACTIONS = new Set([
+    "tool_call",
+    "secret_read",
+    "file_write",
+    "command_exec",
+    "email_sent",
+    "crew_spawn",
+]);
+const VALID_RISKS = new Set(["low", "medium", "high", "critical"]);
+// ── AuditLog ───────────────────────────────────────────────────────
+export class AuditLog {
+    db;
+    stmts;
+    constructor(db) {
+        this.db = db;
+        this.createTable();
+        this.stmts = this.prepareStatements();
+        log.debug("audit log initialized");
+    }
+    /**
+     * Append an audit entry. This is the hot path — it should never throw
+     * under normal operation (malformed input is clamped, not rejected).
+     */
+    log(action, target, detail, risk) {
+        const id = randomUUID();
+        const now = Date.now();
+        // Clamp unknown action/risk to safe defaults rather than throwing —
+        // an audit failure must never break the operation being audited.
+        const safeAction = VALID_ACTIONS.has(action) ? action : "tool_call";
+        const safeRisk = risk !== undefined && VALID_RISKS.has(risk) ? risk : "low";
+        const safeTarget = target ?? null;
+        const safeDetail = detail ?? null;
+        try {
+            this.stmts.insert.run(id, safeAction, "agent", safeTarget, safeDetail, safeRisk, now);
+        }
+        catch (err) {
+            // Log but do not propagate — auditing is observability, not control flow.
+            log.error({ err, action: safeAction, target: safeTarget }, "failed to write audit entry");
+            // Still return the entry object so callers don't need error handling.
+        }
+        return {
+            id,
+            action: safeAction,
+            actor: "agent",
+            target: safeTarget,
+            detail: safeDetail,
+            risk: safeRisk,
+            createdAt: now,
+        };
+    }
+    /**
+     * Retrieve the most recent audit entries.
+     */
+    recent(limit = 100) {
+        const clamped = Math.max(1, Math.min(limit, 10_000));
+        const rows = this.stmts.recent.all(clamped);
+        return rows.map(rowToEntry);
+    }
+    /**
+     * Full-text search across action, target, and detail columns.
+     * Uses SQLite LIKE for simplicity — the audit_log is append-only and
+     * relatively small, so a full-text index is unnecessary.
+     */
+    search(query, limit = 100) {
+        const clamped = Math.max(1, Math.min(limit, 10_000));
+        const pattern = `%${escapeLike(query)}%`;
+        const rows = this.stmts.search.all(pattern, pattern, pattern, clamped);
+        return rows.map(rowToEntry);
+    }
+    /**
+     * Count entries by action type, optionally filtered to a time range.
+     * Useful for dashboards / rate limiting heuristics.
+     */
+    countByAction(sinceMs) {
+        const since = sinceMs ?? 0;
+        const rows = this.stmts.countByAction.all(since);
+        const result = new Map();
+        for (const r of rows) {
+            if (VALID_ACTIONS.has(r.action)) {
+                result.set(r.action, r.cnt);
+            }
+        }
+        return result;
+    }
+    /**
+     * Count entries at or above a given risk level since a timestamp.
+     */
+    countByRisk(minRisk, sinceMs) {
+        const since = sinceMs ?? 0;
+        const riskLevels = riskAndAbove(minRisk);
+        // Build a simple OR query since the risk set is tiny (max 4 values).
+        let total = 0;
+        for (const r of riskLevels) {
+            const row = this.stmts.countRisk.get(r, since);
+            total += row?.cnt ?? 0;
+        }
+        return total;
+    }
+    // ── Internals ───────────────────────────────────────────────────
+    createTable() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS audit_log (
+        id         TEXT PRIMARY KEY,
+        action     TEXT NOT NULL,
+        actor      TEXT NOT NULL DEFAULT 'agent',
+        target     TEXT,
+        detail     TEXT,
+        risk       TEXT NOT NULL DEFAULT 'low',
+        created_at INTEGER NOT NULL
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_audit_created ON audit_log(created_at);
+      CREATE INDEX IF NOT EXISTS idx_audit_action ON audit_log(action);
+      CREATE INDEX IF NOT EXISTS idx_audit_risk ON audit_log(risk);
+    `);
+    }
+    prepareStatements() {
+        return {
+            insert: this.db.prepare(`INSERT INTO audit_log (id, action, actor, target, detail, risk, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`),
+            recent: this.db.prepare("SELECT * FROM audit_log ORDER BY created_at DESC LIMIT ?"),
+            search: this.db.prepare(`SELECT * FROM audit_log
+         WHERE action LIKE ? OR target LIKE ? OR detail LIKE ?
+         ORDER BY created_at DESC
+         LIMIT ?`),
+            countByAction: this.db.prepare(`SELECT action, COUNT(*) AS cnt FROM audit_log
+         WHERE created_at >= ?
+         GROUP BY action`),
+            countRisk: this.db.prepare("SELECT COUNT(*) AS cnt FROM audit_log WHERE risk = ? AND created_at >= ?"),
+        };
+    }
+}
+// ── Helpers ────────────────────────────────────────────────────────
+function rowToEntry(row) {
+    return {
+        id: row.id,
+        action: row.action,
+        actor: row.actor,
+        target: row.target,
+        detail: row.detail,
+        risk: row.risk,
+        createdAt: row.created_at,
+    };
+}
+/** Escape special LIKE characters so user input is treated literally. */
+function escapeLike(s) {
+    return s.replace(/[%_\\]/g, (ch) => `\\${ch}`);
+}
+const RISK_ORDER = ["low", "medium", "high", "critical"];
+/** Return the given risk level and all levels above it. */
+function riskAndAbove(minRisk) {
+    const idx = RISK_ORDER.indexOf(minRisk);
+    if (idx === -1)
+        return ["low", "medium", "high", "critical"];
+    return RISK_ORDER.slice(idx);
+}
+//# sourceMappingURL=AuditLog.js.map

package/dist/safety/AuditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLog.js","sourceRoot":"","sources":["../../src/safety/AuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AA0CtC,sEAAsE;AAEtE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAc;IACzC,WAAW;IACX,aAAa;IACb,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE9E,sEAAsE;AAEtE,MAAM,OAAO,QAAQ;IAGU;IAFZ,KAAK,CAA4C;IAElE,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,GAAG,CACD,MAAmB,EACnB,MAAsB,EACtB,MAAsB,EACtB,IAAgB;QAEhB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5E,MAAM,UAAU,GAAG,MAAM,IAAI,IAAI,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,IAAI,IAAI,CAAC;QAElC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAC1F,sEAAsE;QACxE,CAAC;QAED,OAAO;YACL,EAAE;YACF,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,GAAG,GAAG;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAe,CAAC;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAa,EAAE,KAAK,GAAG,GAAG;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAe,CAAC;QACrF,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,OAAgB;QAC5B,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAsC,CAAC;QACtF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAqB,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAqB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAkB,EAAE,OAAgB;QAC9C,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC;QAC3B,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,qEAAqE;QACrE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAgC,CAAC;YAC9E,KAAK,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mEAAmE;IAE3D,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;KAcZ,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB;QACvB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CACrB;sCAC8B,CAC/B;YACD,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CACrB,0DAA0D,CAC3D;YACD,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CACrB;;;iBAGS,CACV;YACD,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;;yBAEiB,CAClB;YACD,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CACxB,0EAA0E,CAC3E;SACO,CAAC;IACb,CAAC;CACF;AAED,sEAAsE;AAEtE,SAAS,UAAU,CAAC,GAAa;IAC/B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAqB;QACjC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAiB;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,GAAyB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAE/E,2DAA2D;AAC3D,SAAS,YAAY,CAAC,OAAkB;IACtC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/safety/CircuitBreaker.d.ts

@@ -0,0 +1,53 @@
+/**
+ * CircuitBreaker — stops cascading failures by tripping on repeated
+ * tool or agent errors.
+ *
+ * Two independent tracks:
+ *
+ *   • **Per-tool:** N failures within a cooldown window disables the
+ *     tool temporarily. Callers should consult `isToolDisabled(name)`
+ *     before invoking and surface a helpful error if tripped.
+ *
+ *   • **Per-agent/task:** M consecutive failures trip the breaker.
+ *     The TaskRunner / Supervisor can use this to pause the task and
+ *     request human intervention instead of looping forever on the
+ *     same broken call.
+ *
+ * Cooldown auto-resets once the window expires. Successful outcomes
+ * clear the corresponding agent-failure counter (tools auto-clear on
+ * cooldown only, so a string of flaky calls still trips).
+ */
+import { EventEmitter } from "node:events";
+export interface CircuitBreakerOpts {
+    readonly maxToolFailures?: number;
+    readonly toolCooldownMs?: number;
+    readonly maxAgentFailures?: number;
+}
+export interface BreakerResult {
+    readonly tripped: boolean;
+    readonly reason?: string;
+}
+export declare class CircuitBreaker extends EventEmitter {
+    private readonly toolFailures;
+    private readonly agentFailures;
+    private readonly maxToolFailures;
+    private readonly toolCooldownMs;
+    private readonly maxAgentFailures;
+    constructor(opts?: CircuitBreakerOpts);
+    /** Record a tool failure. Returns `tripped: true` when the tool has been disabled. */
+    recordToolFailure(toolName: string): BreakerResult;
+    /** Record a whole-task failure. Returns `tripped: true` at the limit. */
+    recordAgentFailure(taskId: string): BreakerResult;
+    /** A loop detection counts as a double tool failure. */
+    recordLoopDetection(toolName: string): BreakerResult;
+    /** Called after a successful call — clears the agent's counter. */
+    recordSuccess(taskId: string): void;
+    /** Is this tool currently in the tripped/disabled state? */
+    isToolDisabled(toolName: string): boolean;
+    stats(): {
+        disabledTools: string[];
+        activeBreakers: number;
+    };
+}
+export declare const circuitBreaker: CircuitBreaker;
+//# sourceMappingURL=CircuitBreaker.d.ts.map

package/dist/safety/CircuitBreaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CircuitBreaker.d.ts","sourceRoot":"","sources":["../../src/safety/CircuitBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAYD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,cAAe,SAAQ,YAAY;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAE/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAE9B,IAAI,GAAE,kBAAuB;IAOzC,sFAAsF;IACtF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa;IAgClD,yEAAyE;IACzE,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa;IAiBjD,wDAAwD;IACxD,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa;IAKpD,mEAAmE;IACnE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAInC,4DAA4D;IAC5D,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAYzC,KAAK,IAAI;QAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;CAQ7D;AAED,eAAO,MAAM,cAAc,gBAAuB,CAAC"}

package/dist/safety/CircuitBreaker.js

@@ -0,0 +1,112 @@
+/**
+ * CircuitBreaker — stops cascading failures by tripping on repeated
+ * tool or agent errors.
+ *
+ * Two independent tracks:
+ *
+ *   • **Per-tool:** N failures within a cooldown window disables the
+ *     tool temporarily. Callers should consult `isToolDisabled(name)`
+ *     before invoking and surface a helpful error if tripped.
+ *
+ *   • **Per-agent/task:** M consecutive failures trip the breaker.
+ *     The TaskRunner / Supervisor can use this to pause the task and
+ *     request human intervention instead of looping forever on the
+ *     same broken call.
+ *
+ * Cooldown auto-resets once the window expires. Successful outcomes
+ * clear the corresponding agent-failure counter (tools auto-clear on
+ * cooldown only, so a string of flaky calls still trips).
+ */
+import { EventEmitter } from "node:events";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("circuit-breaker");
+export class CircuitBreaker extends EventEmitter {
+    toolFailures = new Map();
+    agentFailures = new Map();
+    maxToolFailures;
+    toolCooldownMs;
+    maxAgentFailures;
+    constructor(opts = {}) {
+        super();
+        this.maxToolFailures = opts.maxToolFailures ?? 5;
+        this.toolCooldownMs = opts.toolCooldownMs ?? 60_000;
+        this.maxAgentFailures = opts.maxAgentFailures ?? 3;
+    }
+    /** Record a tool failure. Returns `tripped: true` when the tool has been disabled. */
+    recordToolFailure(toolName) {
+        const now = Date.now();
+        const entry = this.toolFailures.get(toolName) ?? {
+            count: 0,
+            firstFailure: now,
+            disabled: false,
+        };
+        // Reset the window if cooldown has elapsed.
+        if (now - entry.firstFailure > this.toolCooldownMs) {
+            entry.count = 0;
+            entry.firstFailure = now;
+            entry.disabled = false;
+        }
+        entry.count++;
+        if (entry.count >= this.maxToolFailures) {
+            entry.disabled = true;
+            this.toolFailures.set(toolName, entry);
+            log.warn({ tool: toolName, failures: entry.count }, "tool circuit tripped");
+            this.emit("tool:disabled", { toolName, failures: entry.count });
+            return {
+                tripped: true,
+                reason: `Tool '${toolName}' disabled: ${entry.count} failures in ${Math.round(this.toolCooldownMs / 1000)}s. ` +
+                    `Will reset automatically.`,
+            };
+        }
+        this.toolFailures.set(toolName, entry);
+        return { tripped: false };
+    }
+    /** Record a whole-task failure. Returns `tripped: true` at the limit. */
+    recordAgentFailure(taskId) {
+        const entry = this.agentFailures.get(taskId) ?? { consecutive: 0 };
+        entry.consecutive++;
+        if (entry.consecutive >= this.maxAgentFailures) {
+            this.agentFailures.set(taskId, entry);
+            log.warn({ taskId, failures: entry.consecutive }, "agent circuit tripped");
+            this.emit("agent:stopped", { taskId, failures: entry.consecutive });
+            return {
+                tripped: true,
+                reason: `Task stopped after ${entry.consecutive} consecutive failures — human intervention needed.`,
+            };
+        }
+        this.agentFailures.set(taskId, entry);
+        return { tripped: false };
+    }
+    /** A loop detection counts as a double tool failure. */
+    recordLoopDetection(toolName) {
+        this.recordToolFailure(toolName);
+        return this.recordToolFailure(toolName);
+    }
+    /** Called after a successful call — clears the agent's counter. */
+    recordSuccess(taskId) {
+        this.agentFailures.delete(taskId);
+    }
+    /** Is this tool currently in the tripped/disabled state? */
+    isToolDisabled(toolName) {
+        const entry = this.toolFailures.get(toolName);
+        if (!entry?.disabled)
+            return false;
+        if (Date.now() - entry.firstFailure > this.toolCooldownMs) {
+            entry.disabled = false;
+            entry.count = 0;
+            this.toolFailures.set(toolName, entry);
+            return false;
+        }
+        return true;
+    }
+    stats() {
+        return {
+            disabledTools: [...this.toolFailures.entries()]
+                .filter(([, e]) => e.disabled)
+                .map(([name]) => name),
+            activeBreakers: this.agentFailures.size,
+        };
+    }
+}
+export const circuitBreaker = new CircuitBreaker();
+//# sourceMappingURL=CircuitBreaker.js.map

package/dist/safety/CircuitBreaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CircuitBreaker.js","sourceRoot":"","sources":["../../src/safety/CircuitBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAuB5C,MAAM,OAAO,cAAe,SAAQ,YAAY;IAC7B,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE9C,eAAe,CAAS;IACxB,cAAc,CAAS;IACvB,gBAAgB,CAAS;IAE1C,YAAY,OAA2B,EAAE;QACvC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,sFAAsF;IACtF,iBAAiB,CAAC,QAAgB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;YAC/C,KAAK,EAAE,CAAC;YACR,YAAY,EAAE,GAAG;YACjB,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,4CAA4C;QAC5C,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACnD,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;YAChB,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC;YACzB,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAChE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EACJ,SAAS,QAAQ,eAAe,KAAK,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK;oBACtG,2BAA2B;aAC9B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,yEAAyE;IACzE,kBAAkB,CAAC,MAAc;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,WAAW,EAAE,CAAC;QAEpB,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,sBAAsB,KAAK,CAAC,WAAW,oDAAoD;aACpG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,wDAAwD;IACxD,mBAAmB,CAAC,QAAgB;QAClC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,mEAAmE;IACnE,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,4DAA4D;IAC5D,cAAc,CAAC,QAAgB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1D,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;YACvB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,OAAO;YACL,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;YACxB,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI;SACxC,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC"}