joonecli 0.1.1 → 0.2.1

package/dist/middleware/commandSanitizer.js

@@ -1,50 +0,0 @@
-/**
- * Intercepts bash tool calls to block dangerous or interactive commands.
- *
- * Categories of blocked commands:
- * 1. Destructive: `rm -rf /`, `mkfs`, `dd if=`, fork bombs
- * 2. Interactive/hanging: `vim`, `nano`, `less`, `top`, `htop`, `man`
- * 3. Network abuse: `curl | sh`, `wget | bash`
- */
-export class CommandSanitizerMiddleware {
-    name = "CommandSanitizer";
-    /**
-     * Patterns that will cause a command to be blocked.
-     * Each entry is [regex, human-readable reason].
-     */
-    blockedPatterns = [
-        // Destructive
-        [/rm\s+(-\w*r\w*f\w*|-\w*f\w*r\w*)\s+\/(\*)?(?:\s|$)/, "destructive: rm -rf /"],
-        [/mkfs\b/, "destructive: filesystem format"],
-        [/\bdd\s+.*of=\/dev\//, "destructive: raw disk write"],
-        [/chmod\s+(-\w+\s+)*777\s+\//, "dangerous: chmod 777 on root"],
-        // Interactive / hanging
-        [/\b(vim|vi|nano|emacs|pico)\b/, "interactive: text editor (hangs the sandbox)"],
-        [/\b(less|more)\b/, "interactive: pager (hangs the sandbox)"],
-        [/\b(top|htop|glances)\b/, "interactive: process monitor (hangs the sandbox)"],
-        [/\bman\s+\w+/, "interactive: man page (hangs the sandbox)"],
-        // Network abuse: pipe-to-shell
-        [/curl\s+.*\|\s*(sh|bash|zsh)/, "unsafe: pipe remote script to shell"],
-        [/wget\s+.*\|\s*(sh|bash|zsh)/, "unsafe: pipe remote script to shell"],
-    ];
-    before(ctx) {
-        // Only applies to bash/shell tool calls
-        if (ctx.toolName !== "bash") {
-            return ctx;
-        }
-        const command = ctx.args.command;
-        if (typeof command !== "string") {
-            return ctx;
-        }
-        for (const [pattern, reason] of this.blockedPatterns) {
-            if (pattern.test(command)) {
-                return (`⚠ Blocked: Command rejected by sanitizer.\n` +
-                    `Reason: ${reason}\n` +
-                    `Command: ${command}\n` +
-                    `Use a safer alternative or refine your approach.`);
-            }
-        }
-        return ctx;
-    }
-}
-//# sourceMappingURL=commandSanitizer.js.map

package/dist/middleware/commandSanitizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"commandSanitizer.js","sourceRoot":"","sources":["../../src/middleware/commandSanitizer.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IAC5B,IAAI,GAAG,kBAAkB,CAAC;IAEnC;;;OAGG;IACc,eAAe,GAAuB;QACrD,cAAc;QACd,CAAC,oDAAoD,EAAE,uBAAuB,CAAC;QAC/E,CAAC,QAAQ,EAAE,gCAAgC,CAAC;QAC5C,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;QACtD,CAAC,4BAA4B,EAAE,8BAA8B,CAAC;QAE9D,wBAAwB;QACxB,CAAC,8BAA8B,EAAE,8CAA8C,CAAC;QAChF,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;QAC7D,CAAC,wBAAwB,EAAE,kDAAkD,CAAC;QAC9E,CAAC,aAAa,EAAE,2CAA2C,CAAC;QAE5D,+BAA+B;QAC/B,CAAC,6BAA6B,EAAE,qCAAqC,CAAC;QACtE,CAAC,6BAA6B,EAAE,qCAAqC,CAAC;KACvE,CAAC;IAEF,MAAM,CAAC,GAAoB;QACzB,wCAAwC;QACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,CACL,6CAA6C;oBAC7C,WAAW,MAAM,IAAI;oBACrB,YAAY,OAAO,IAAI;oBACvB,kDAAkD,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/middleware/permission.d.ts

@@ -1,17 +0,0 @@
-import { ToolCallContext, ToolMiddleware } from "./types.js";
-export type PermissionMode = "auto" | "ask_dangerous" | "ask_all";
-/**
- * PermissionMiddleware — gates dangerous tool calls behind user approval.
- *
- * Behavior per mode:
- * - `auto`: All tools execute without asking. (Default for power users.)
- * - `ask_dangerous`: Only tools in DANGEROUS_TOOLS require approval.
- * - `ask_all`: Every tool except SAFE_TOOLS requires approval.
- */
-export declare class PermissionMiddleware implements ToolMiddleware {
-    name: string;
-    private mode;
-    constructor(mode?: PermissionMode);
-    before(ctx: ToolCallContext): Promise<ToolCallContext | string | void>;
-    private requiresApproval;
-}

package/dist/middleware/permission.js

@@ -1,59 +0,0 @@
-import { HITLBridge } from "../hitl/bridge.js";
-/** Tools that are always safe and never need user approval. */
-const SAFE_TOOLS = new Set([
-    "read_file",
-    "view_file_outline",
-    "search_skills",
-    "load_skill",
-    "search_tools",
-    "ask_user_question", // Meta: the ask tool itself is always safe
-]);
-/** Tools that perform destructive or side-effect-heavy operations. */
-const DANGEROUS_TOOLS = new Set([
-    "bash",
-    "write_file",
-    "replace_file_content",
-    "multi_replace_file_content",
-    "install_deps",
-]);
-/**
- * PermissionMiddleware — gates dangerous tool calls behind user approval.
- *
- * Behavior per mode:
- * - `auto`: All tools execute without asking. (Default for power users.)
- * - `ask_dangerous`: Only tools in DANGEROUS_TOOLS require approval.
- * - `ask_all`: Every tool except SAFE_TOOLS requires approval.
- */
-export class PermissionMiddleware {
-    name = "PermissionMiddleware";
-    mode;
-    constructor(mode = "auto") {
-        this.mode = mode;
-    }
-    async before(ctx) {
-        if (this.mode === "auto")
-            return ctx;
-        const toolName = ctx.toolName;
-        const needsApproval = this.requiresApproval(toolName);
-        if (!needsApproval)
-            return ctx;
-        const bridge = HITLBridge.getInstance();
-        const approved = await bridge.requestPermission(toolName, ctx.args);
-        if (!approved) {
-            // Short-circuit: return a string to deny the tool call
-            return (`Permission denied: The user declined to approve the execution of "${toolName}". ` +
-                `Try an alternative approach or ask the user for guidance using the ask_user_question tool.`);
-        }
-        return ctx;
-    }
-    requiresApproval(toolName) {
-        if (SAFE_TOOLS.has(toolName))
-            return false;
-        if (this.mode === "ask_all")
-            return true;
-        if (this.mode === "ask_dangerous")
-            return DANGEROUS_TOOLS.has(toolName);
-        return false;
-    }
-}
-//# sourceMappingURL=permission.js.map

package/dist/middleware/permission.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../src/middleware/permission.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAK/C,+DAA+D;AAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACvB,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,YAAY;IACZ,cAAc;IACd,mBAAmB,EAAE,2CAA2C;CACnE,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM;IACN,YAAY;IACZ,sBAAsB;IACtB,4BAA4B;IAC5B,cAAc;CACjB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAC7B,IAAI,GAAG,sBAAsB,CAAC;IACtB,IAAI,CAAiB;IAE7B,YAAY,OAAuB,MAAM;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAoB;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;QAErC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEtD,IAAI,CAAC,aAAa;YAAE,OAAO,GAAG,CAAC;QAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAEpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,uDAAuD;YACvD,OAAO,CACH,qEAAqE,QAAQ,KAAK;gBAClF,4FAA4F,CAC/F,CAAC;QACN,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACrC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExE,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ"}

package/dist/middleware/pipeline.d.ts

@@ -1,31 +0,0 @@
-import { ToolCallContext, ToolMiddleware } from "./types.js";
-import { ToolResult } from "../tools/index.js";
-/**
- * Executes tool calls through a chain of middleware hooks.
- *
- * Execution flow:
- * 1. Run all `before()` hooks in registration order.
- *    - If any returns a string → short-circuit (tool is NOT executed).
- * 2. Execute the actual tool function.
- * 3. Run all `after()` hooks in reverse registration order.
- *    - Each can transform the result before it enters conversation history.
- */
-export declare class MiddlewarePipeline {
-    private middlewares;
-    /**
-     * Register a middleware. Middlewares run in the order they are added.
-     */
-    use(middleware: ToolMiddleware): void;
-    /**
-     * Returns the number of registered middlewares.
-     */
-    get length(): number;
-    /**
-     * Execute a tool call through the middleware pipeline.
-     *
-     * @param ctx - The tool call context (name, args, callId).
-     * @param executeFn - The actual tool execution function.
-     * @returns The final result string (possibly transformed by after-hooks).
-     */
-    run(ctx: ToolCallContext, executeFn: (ctx: ToolCallContext) => Promise<ToolResult> | ToolResult): Promise<string>;
-}

package/dist/middleware/pipeline.js

@@ -1,62 +0,0 @@
-/**
- * Executes tool calls through a chain of middleware hooks.
- *
- * Execution flow:
- * 1. Run all `before()` hooks in registration order.
- *    - If any returns a string → short-circuit (tool is NOT executed).
- * 2. Execute the actual tool function.
- * 3. Run all `after()` hooks in reverse registration order.
- *    - Each can transform the result before it enters conversation history.
- */
-export class MiddlewarePipeline {
-    middlewares = [];
-    /**
-     * Register a middleware. Middlewares run in the order they are added.
-     */
-    use(middleware) {
-        this.middlewares.push(middleware);
-    }
-    /**
-     * Returns the number of registered middlewares.
-     */
-    get length() {
-        return this.middlewares.length;
-    }
-    /**
-     * Execute a tool call through the middleware pipeline.
-     *
-     * @param ctx - The tool call context (name, args, callId).
-     * @param executeFn - The actual tool execution function.
-     * @returns The final result string (possibly transformed by after-hooks).
-     */
-    async run(ctx, executeFn) {
-        // ── Before phase: run hooks in order ──
-        let currentCtx = ctx;
-        for (const mw of this.middlewares) {
-            if (mw.before) {
-                const result = await mw.before(currentCtx);
-                if (typeof result === "string") {
-                    // Short-circuit: middleware rejected the call
-                    return result;
-                }
-                if (result !== undefined) {
-                    currentCtx = result;
-                }
-            }
-        }
-        // ── Execute the tool ──
-        let output = await executeFn(currentCtx);
-        // ── After phase: run hooks in reverse order ──
-        for (let i = this.middlewares.length - 1; i >= 0; i--) {
-            const mw = this.middlewares[i];
-            if (mw.after) {
-                const transformed = await mw.after(currentCtx, output);
-                if (transformed !== undefined) {
-                    output = transformed;
-                }
-            }
-        }
-        return output.content;
-    }
-}
-//# sourceMappingURL=pipeline.js.map

package/dist/middleware/pipeline.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/middleware/pipeline.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAkB;IACrB,WAAW,GAAqB,EAAE,CAAC;IAE3C;;OAEG;IACH,GAAG,CAAC,UAA0B;QAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CACP,GAAoB,EACpB,SAAqE;QAErE,yCAAyC;QACzC,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAE3C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC/B,8CAA8C;oBAC9C,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,UAAU,GAAG,MAAM,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,GAAe,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QAErD,gDAAgD;QAChD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,GAAG,WAAW,CAAC;gBACvB,CAAC;YACH,CAAC;QAAI,CAAC;QAER,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF"}

package/dist/middleware/preCompletion.d.ts

@@ -1,29 +0,0 @@
-import { ToolCallContext, ToolMiddleware } from "./types.js";
-import { ToolResult } from "../tools/index.js";
-/**
- * Prevents the agent from marking a task as "done" without running tests.
- *
- * Tracks whether any test command has been executed during the session.
- * If the agent attempts to signal completion without running tests first,
- * the middleware intercepts and forces verification.
- *
- * Reference: docs/02_edge_cases_and_mitigations.md — "The Fake Success Verification"
- */
-export declare class PreCompletionMiddleware implements ToolMiddleware {
-    readonly name = "PreCompletion";
-    private testsPassed;
-    /** Patterns in bash commands that count as "running tests". */
-    private readonly testPatterns;
-    /** Tool names that signal the agent is trying to complete the task. */
-    private readonly completionSignals;
-    before(ctx: ToolCallContext): ToolCallContext | string;
-    after(ctx: ToolCallContext, result: ToolResult): void;
-    /**
-     * Returns whether tests have been run and passed in this session.
-     */
-    hasPassedTests(): boolean;
-    /**
-     * Resets state. Useful for testing or session boundaries.
-     */
-    reset(): void;
-}

package/dist/middleware/preCompletion.js

@@ -1,82 +0,0 @@
-/**
- * Prevents the agent from marking a task as "done" without running tests.
- *
- * Tracks whether any test command has been executed during the session.
- * If the agent attempts to signal completion without running tests first,
- * the middleware intercepts and forces verification.
- *
- * Reference: docs/02_edge_cases_and_mitigations.md — "The Fake Success Verification"
- */
-export class PreCompletionMiddleware {
-    name = "PreCompletion";
-    testsPassed = false;
-    /** Patterns in bash commands that count as "running tests". */
-    testPatterns = [
-        /\bvitest\b/,
-        /\bjest\b/,
-        /\bpytest\b/,
-        /\bmocha\b/,
-        /\bnpm\s+test\b/,
-        /\bnpm\s+run\s+test\b/,
-        /\byarn\s+test\b/,
-        /\bpnpm\s+test\b/,
-        /\bgo\s+test\b/,
-        /\bcargo\s+test\b/,
-    ];
-    /** Tool names that signal the agent is trying to complete the task. */
-    completionSignals = new Set([
-        "task_complete",
-        "attempt_completion",
-        "finish_task",
-        "submit_result",
-    ]);
-    before(ctx) {
-        // When a test command is initiated, assume it hasn't passed yet
-        if (ctx.toolName === "bash" && typeof ctx.args.command === "string") {
-            for (const pattern of this.testPatterns) {
-                if (pattern.test(ctx.args.command)) {
-                    this.testsPassed = false;
-                    break;
-                }
-            }
-        }
-        // Intercept completion attempts
-        if (this.completionSignals.has(ctx.toolName)) {
-            if (!this.testsPassed) {
-                return ("⚠ You must run tests before completing the task, AND they must pass.\n" +
-                    "Use the bash tool to execute your test suite (e.g., `npm test`, `vitest`, `pytest`).\n" +
-                    "If tests fail, fix the issues. Once tests pass cleanly, you may attempt completion again.");
-            }
-        }
-        return ctx;
-    }
-    after(ctx, result) {
-        if (ctx.toolName === "bash" && typeof ctx.args.command === "string") {
-            for (const pattern of this.testPatterns) {
-                if (pattern.test(ctx.args.command)) {
-                    // Robustly check the exact exit code from the tool metadata
-                    if (result.metadata?.exitCode === 0) {
-                        this.testsPassed = true;
-                    }
-                    else {
-                        this.testsPassed = false;
-                    }
-                    break;
-                }
-            }
-        }
-    }
-    /**
-     * Returns whether tests have been run and passed in this session.
-     */
-    hasPassedTests() {
-        return this.testsPassed;
-    }
-    /**
-     * Resets state. Useful for testing or session boundaries.
-     */
-    reset() {
-        this.testsPassed = false;
-    }
-}
-//# sourceMappingURL=preCompletion.js.map

package/dist/middleware/preCompletion.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"preCompletion.js","sourceRoot":"","sources":["../../src/middleware/preCompletion.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,OAAO,uBAAuB;IACzB,IAAI,GAAG,eAAe,CAAC;IAExB,WAAW,GAAG,KAAK,CAAC;IAE5B,+DAA+D;IAC9C,YAAY,GAAG;QAC9B,YAAY;QACZ,UAAU;QACV,YAAY;QACZ,WAAW;QACX,gBAAgB;QAChB,sBAAsB;QACtB,iBAAiB;QACjB,iBAAiB;QACjB,eAAe;QACf,kBAAkB;KACnB,CAAC;IAEF,uEAAuE;IACtD,iBAAiB,GAAG,IAAI,GAAG,CAAC;QAC3C,eAAe;QACf,oBAAoB;QACpB,aAAa;QACb,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,CAAC,GAAoB;QACzB,gEAAgE;QAChE,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;oBACzB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,CACL,wEAAwE;oBACxE,wFAAwF;oBACxF,2FAA2F,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,GAAoB,EAAE,MAAkB;QAC5C,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnC,4DAA4D;oBAC5D,IAAI,MAAM,CAAC,QAAQ,EAAE,QAAQ,KAAK,CAAC,EAAE,CAAC;wBACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;oBAC3B,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;CACF"}

package/dist/middleware/types.d.ts

@@ -1,40 +0,0 @@
-/**
- * Middleware types for the tool execution pipeline.
- *
- * Each middleware can hook into both the "before" and "after" phases
- * of a tool call. The pipeline chains them in order.
- */
-import { ToolResult } from "../tools/index.js";
-/**
- * Context object passed through the middleware chain for each tool call.
- */
-export interface ToolCallContext {
-    /** Name of the tool being called (e.g., "bash", "read_file"). */
-    toolName: string;
-    /** Arguments passed to the tool. */
-    args: Record<string, any>;
-    /** Unique ID of this tool call (from the LLM response). */
-    callId: string;
-}
-/**
- * A middleware that can intercept tool calls before and after execution.
- *
- * - `before()`: Runs before the tool executes. Return the (possibly modified)
- *   context to continue, or a `string` to short-circuit with an error/warning.
- * - `after()`: Runs after the tool executes. Can transform the result before
- *   it enters the conversation history.
- */
-export interface ToolMiddleware {
-    /** Human-readable name for logging and debugging. */
-    name: string;
-    /**
-     * Pre-execution hook.
-     * @returns ToolCallContext to mutate, a string to short-circuit, or void to pass through unmodified.
-     */
-    before?(ctx: ToolCallContext): Promise<ToolCallContext | string | void> | ToolCallContext | string | void;
-    /**
-     * Post-execution hook.
-     * @returns The transformed tool result object, or void to pass through unmodified.
-     */
-    after?(ctx: ToolCallContext, result: ToolResult): Promise<ToolResult | void> | ToolResult | void;
-}

package/dist/middleware/types.js

@@ -1,8 +0,0 @@
-/**
- * Middleware types for the tool execution pipeline.
- *
- * Each middleware can hook into both the "before" and "after" phases
- * of a tool call. The pipeline chains them in order.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/middleware/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/middleware/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/skills/loader.d.ts

@@ -1,55 +0,0 @@
-import { SkillMeta } from "./types.js";
-/**
- * SkillLoader — discovers and loads skills from multiple directories.
- *
- * Discovery paths (priority order — project overrides user):
- * 1. Project root: ./skills/, ./.agents/skills/, ./.agent/skills/
- * 2. User home: ~/.joone/skills/, ~/.agents/skills/
- *
- * On Windows, ~ resolves to %USERPROFILE%.
- *
- * Skills are folders containing a SKILL.md with YAML frontmatter:
- * ---
- * name: my-skill
- * description: What this skill does
- * ---
- * ## Instructions
- * ...
- */
-export declare class SkillLoader {
-    private projectRoot;
-    private userHome;
-    private cachedSkills;
-    constructor(projectRoot?: string, userHome?: string);
-    /**
-     * Returns all skill discovery directories in priority order.
-     * Project-level directories come first (higher priority).
-     */
-    getDiscoveryPaths(): {
-        path: string;
-        source: "project" | "user";
-    }[];
-    /**
-     * Parses YAML frontmatter from a SKILL.md content string.
-     * Simple parser — handles `name:` and `description:` fields.
-     */
-    parseFrontmatter(content: string): {
-        name?: string;
-        description?: string;
-    };
-    /**
-     * Discovers all available skills from all discovery paths.
-     * Deduplicates by name — project-level skills override user-level.
-     * Results are cached per session.
-     */
-    discoverSkills(): SkillMeta[];
-    /**
-     * Loads the full content of a specific skill's SKILL.md.
-     * Returns undefined if the skill is not found.
-     */
-    loadSkill(name: string): string | undefined;
-    /**
-     * Clears the cached skills. Call when skills directory contents may have changed.
-     */
-    clearCache(): void;
-}

package/dist/skills/loader.js

@@ -1,132 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import * as os from "node:os";
-/**
- * SkillLoader — discovers and loads skills from multiple directories.
- *
- * Discovery paths (priority order — project overrides user):
- * 1. Project root: ./skills/, ./.agents/skills/, ./.agent/skills/
- * 2. User home: ~/.joone/skills/, ~/.agents/skills/
- *
- * On Windows, ~ resolves to %USERPROFILE%.
- *
- * Skills are folders containing a SKILL.md with YAML frontmatter:
- * ---
- * name: my-skill
- * description: What this skill does
- * ---
- * ## Instructions
- * ...
- */
-export class SkillLoader {
-    projectRoot;
-    userHome;
-    cachedSkills = null;
-    constructor(projectRoot, userHome) {
-        this.projectRoot = projectRoot ?? process.cwd();
-        this.userHome = userHome ?? os.homedir();
-    }
-    /**
-     * Returns all skill discovery directories in priority order.
-     * Project-level directories come first (higher priority).
-     */
-    getDiscoveryPaths() {
-        const home = this.userHome;
-        return [
-            // Project-level (highest priority)
-            { path: path.join(this.projectRoot, "skills"), source: "project" },
-            { path: path.join(this.projectRoot, ".agents", "skills"), source: "project" },
-            { path: path.join(this.projectRoot, ".agent", "skills"), source: "project" },
-            // User-level
-            { path: path.join(home, ".joone", "skills"), source: "user" },
-            { path: path.join(home, ".agents", "skills"), source: "user" },
-        ];
-    }
-    /**
-     * Parses YAML frontmatter from a SKILL.md content string.
-     * Simple parser — handles `name:` and `description:` fields.
-     */
-    parseFrontmatter(content) {
-        const match = content.match(/^---\s*\n([\s\S]*?)\n---/);
-        if (!match)
-            return {};
-        const yaml = match[1];
-        const nameMatch = yaml.match(/^name:\s*(.+)$/m);
-        const descMatch = yaml.match(/^description:\s*(.+)$/m);
-        return {
-            name: nameMatch?.[1]?.trim(),
-            description: descMatch?.[1]?.trim(),
-        };
-    }
-    /**
-     * Discovers all available skills from all discovery paths.
-     * Deduplicates by name — project-level skills override user-level.
-     * Results are cached per session.
-     */
-    discoverSkills() {
-        if (this.cachedSkills)
-            return this.cachedSkills;
-        const skills = new Map();
-        const paths = this.getDiscoveryPaths();
-        for (const { path: dir, source } of paths) {
-            if (!fs.existsSync(dir))
-                continue;
-            let entries;
-            try {
-                entries = fs.readdirSync(dir, { withFileTypes: true });
-            }
-            catch {
-                continue;
-            }
-            for (const entry of entries) {
-                if (!entry.isDirectory())
-                    continue;
-                const skillMdPath = path.join(dir, entry.name, "SKILL.md");
-                if (!fs.existsSync(skillMdPath))
-                    continue;
-                try {
-                    const content = fs.readFileSync(skillMdPath, "utf-8");
-                    const frontmatter = this.parseFrontmatter(content);
-                    const name = frontmatter.name || entry.name;
-                    // Only add if not already found (project overrides user)
-                    if (!skills.has(name)) {
-                        skills.set(name, {
-                            name,
-                            description: frontmatter.description || `Skill: ${name}`,
-                            path: skillMdPath,
-                            source,
-                        });
-                    }
-                }
-                catch {
-                    // Skip unreadable skills
-                }
-            }
-        }
-        this.cachedSkills = Array.from(skills.values());
-        return this.cachedSkills;
-    }
-    /**
-     * Loads the full content of a specific skill's SKILL.md.
-     * Returns undefined if the skill is not found.
-     */
-    loadSkill(name) {
-        const skills = this.discoverSkills();
-        const skill = skills.find((s) => s.name === name);
-        if (!skill)
-            return undefined;
-        try {
-            return fs.readFileSync(skill.path, "utf-8");
-        }
-        catch {
-            return undefined;
-        }
-    }
-    /**
-     * Clears the cached skills. Call when skills directory contents may have changed.
-     */
-    clearCache() {
-        this.cachedSkills = null;
-    }
-}
-//# sourceMappingURL=loader.js.map

package/dist/skills/loader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,WAAW;IACd,WAAW,CAAS;IACpB,QAAQ,CAAS;IACjB,YAAY,GAAuB,IAAI,CAAC;IAEhD,YAAY,WAAoB,EAAE,QAAiB;QACjD,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE3B,OAAO;YACL,mCAAmC;YACnC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE;YAC3E,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE;YACtF,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE;YACrF,aAAa;YACb,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE;YACtE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE;SACxE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,OAAe;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAEtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAEvD,OAAO;YACL,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YAC5B,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEvC,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAElC,IAAI,OAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAAE,SAAS;gBAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,SAAS;gBAE1C,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;oBACtD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;oBAEnD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;oBAE5C,yDAAyD;oBACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;4BACf,IAAI;4BACJ,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,UAAU,IAAI,EAAE;4BACxD,IAAI,EAAE,WAAW;4BACjB,MAAM;yBACP,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAY;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/skills/tools.d.ts

@@ -1,5 +0,0 @@
-import { DynamicToolInterface } from "../tools/index.js";
-import { SkillLoader } from "./loader.js";
-export declare function bindSkillLoader(loader: SkillLoader): void;
-export declare const SearchSkillsTool: DynamicToolInterface;
-export declare const LoadSkillTool: DynamicToolInterface;