kevlar-4u 1.0.0

package/dist/__tests__/sanitize.test.js

@@ -0,0 +1,138 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { scanForCredentials, stripPromptBoundaries, wrapContent, } from "../utils/sanitize.js";
+describe("scanForCredentials", () => {
+    it("detects Anthropic API keys (sk-ant-)", () => {
+        const result = scanForCredentials("my key is sk-ant-abcdefghijklmnopqr123456, keep it safe");
+        assert.ok(result.length > 0);
+        assert.ok(result[0].startsWith("sk-ant-a"));
+        assert.ok(result[0].endsWith("****"));
+    });
+    it("detects OpenAI API keys (sk-)", () => {
+        const result = scanForCredentials("key=sk-abcdefghijklmnopqrstuvwxyz1234567890abcde");
+        assert.ok(result.length > 0);
+        assert.ok(result[0].endsWith("****"));
+    });
+    it("detects Google AI keys (AIza)", () => {
+        const result = scanForCredentials("AIzaSyAAAAAAAAABBBBBBBBBBBCCCCCCCCCCCDDDDDD");
+        assert.ok(result.length > 0);
+    });
+    it("detects GitHub personal access tokens (ghp_)", () => {
+        const result = scanForCredentials("token ghp_abcdefghijklmnopqrstuvwxyz1234567890");
+        assert.ok(result.length > 0);
+    });
+    it("detects GitHub org tokens (gho_)", () => {
+        const result = scanForCredentials("gho_abcdefghijklmnopqrstuvwxyz1234567890");
+        assert.ok(result.length > 0);
+    });
+    it("detects Slack tokens (xoxb-)", () => {
+        const result = scanForCredentials("xoxb-1234567890-1234567890-abcdefghijklmnopqrstuvwx");
+        assert.ok(result.length > 0);
+    });
+    it("detects generic api/secret/key patterns with 16+ chars", () => {
+        const result = scanForCredentials("api_key_abcdefghijklmnopqrstuvwx");
+        assert.ok(result.length > 0);
+    });
+    it("returns empty array for safe text", () => {
+        const result = scanForCredentials("this is just normal text with no keys");
+        assert.deepEqual(result, []);
+    });
+    it("deduplicates matching patterns", () => {
+        const key = "sk-ant-abcdefghijklmnopqr123456";
+        const result = scanForCredentials(`${key} and ${key} again`);
+        assert.equal(result.length, 1);
+    });
+    it("truncates leaked key to first 8 chars + ****", () => {
+        const result = scanForCredentials("sk-ant-abcdefghijklmnopqr123456");
+        assert.ok(result[0].length <= 13);
+        assert.ok(result[0].includes("****"));
+    });
+});
+describe("stripPromptBoundaries", () => {
+    it("removes **指令** markers", () => {
+        const result = stripPromptBoundaries("before **指令** after");
+        assert.ok(!result.includes("**指令**"));
+        assert.ok(result.includes("before"));
+        assert.ok(result.includes("after"));
+    });
+    it("removes **角色描述** markers", () => {
+        const result = stripPromptBoundaries("before **角色描述** after");
+        assert.ok(!result.includes("**角色描述**"));
+        assert.ok(result.includes("before"));
+        assert.ok(result.includes("after"));
+    });
+    it("removes **待评审内容** markers", () => {
+        const result = stripPromptBoundaries("before **待评审内容** after");
+        assert.ok(!result.includes("**待评审内容**"));
+        assert.ok(result.includes("before"));
+        assert.ok(result.includes("after"));
+    });
+    it("removes **发布平台 & 目标受众背景** markers", () => {
+        const result = stripPromptBoundaries("before **发布平台 & 目标受众背景** after");
+        assert.ok(!result.includes("**发布平台"));
+        assert.ok(result.includes("before"));
+        assert.ok(result.includes("after"));
+    });
+    it("removes **发布平台 ＆ 目标受众背景** (fullwidth &)", () => {
+        const result = stripPromptBoundaries("before **发布平台 ＆ 目标受众背景** after");
+        assert.ok(!result.includes("**发布平台"));
+        assert.ok(result.includes("before"));
+        assert.ok(result.includes("after"));
+    });
+    it("removes the strict output format instruction", () => {
+        const result = stripPromptBoundaries("text before 请严格按照该人设要求的输出格式作答。 text after");
+        assert.ok(!result.includes("请严格按照该人设要求的输出格式作答"));
+        assert.ok(result.includes("text before"));
+        assert.ok(result.includes("text after"));
+    });
+    it("removes markdown headings", () => {
+        const result = stripPromptBoundaries("## Heading\ncontent\n### Sub");
+        assert.ok(!result.includes("## "));
+        assert.ok(result.includes("Heading"));
+        assert.ok(result.includes("Sub"));
+    });
+    it("removes horizontal rules", () => {
+        const result = stripPromptBoundaries("above\n---\nbelow");
+        assert.ok(!result.includes("---"));
+        assert.ok(result.includes("above"));
+        assert.ok(result.includes("below"));
+    });
+    it("trims whitespace", () => {
+        const result = stripPromptBoundaries("  **指令** content  ");
+        assert.equal(result, "content");
+    });
+    it("handles multiple patterns in one string", () => {
+        const result = stripPromptBoundaries("## Title\n**角色描述**\nYou are helpful.\n**指令**\nDo X.\n---");
+        assert.ok(!result.includes("## "));
+        assert.ok(!result.includes("**角色描述**"));
+        assert.ok(!result.includes("**指令**"));
+        assert.ok(result.includes("Title"));
+        assert.ok(result.includes("You are helpful"));
+        assert.ok(result.includes("Do X"));
+    });
+});
+describe("wrapContent", () => {
+    it("wraps content in random-suffixed tags", () => {
+        const result = wrapContent("hello world");
+        assert.ok(result.startsWith("<content_"));
+        assert.ok(result.endsWith(">"));
+        assert.ok(result.includes("hello world"));
+        assert.ok(result.includes("</content_"));
+    });
+    it("uses custom tag prefix", () => {
+        const result = wrapContent("test", "sp");
+        assert.ok(result.startsWith("<sp_"));
+        assert.ok(result.includes("</sp_"));
+    });
+    it("escapes matching tags inside content", () => {
+        const result = wrapContent("<content_abc123>nested</content_abc123>");
+        assert.ok(!result.includes("<content_abc123>"));
+    });
+    it("puts content on its own line", () => {
+        const result = wrapContent("hello");
+        const lines = result.split("\n");
+        assert.equal(lines.length, 3);
+        assert.equal(lines[1], "hello");
+    });
+});
+//# sourceMappingURL=sanitize.test.js.map

package/dist/__tests__/sanitize.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.js","sourceRoot":"","sources":["../../src/__tests__/sanitize.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,yDAAyD,CAAC,CAAC;QAC7F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,kDAAkD,CAAC,CAAC;QACtF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;QACjF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,gDAAgD,CAAC,CAAC;QACpF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,0CAA0C,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,qDAAqD,CAAC,CAAC;QACzF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,uCAAuC,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG,iCAAiC,CAAC;QAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,iCAAiC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,gCAAgC,CAAC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,gCAAgC,CAAC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,qBAAqB,CAAC,2CAA2C,CAAC,CAAC;QAClF,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC1B,MAAM,MAAM,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,qBAAqB,CAClC,0DAA0D,CAC3D,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,yCAAyC,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server.test.d.ts.map

package/dist/__tests__/server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/server.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/server.test.js

@@ -0,0 +1,49 @@
+import { describe, it, beforeEach, afterEach } from "node:test";
+import assert from "node:assert/strict";
+import * as path from "path";
+import * as fs from "fs";
+import * as os from "os";
+let tmpRoot;
+beforeEach(() => {
+    tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), "kevlar-server-test-"));
+});
+afterEach(() => {
+    fs.rmSync(tmpRoot, { recursive: true, force: true });
+});
+describe("createKevlarServer", () => {
+    it("creates skills directory and returns McpServer instance", async () => {
+        const skillsDir = path.join(tmpRoot, "skills");
+        assert.ok(!fs.existsSync(skillsDir));
+        process.env.KEVLAR_SKILLS_DIR = skillsDir;
+        const { createKevlarServer } = await import("../server.js");
+        const server = createKevlarServer();
+        assert.ok(server, "should return a server");
+        assert.ok(fs.existsSync(skillsDir), "should create skills dir");
+        assert.ok(typeof server.server?.setRequestHandler, "function");
+        delete process.env.KEVLAR_SKILLS_DIR;
+    });
+    it("cleans stale draft files older than 24h", async () => {
+        const skillsDir = path.join(tmpRoot, "skills");
+        fs.mkdirSync(skillsDir, { recursive: true });
+        const tmpDir = path.join(skillsDir, "tmp");
+        fs.mkdirSync(tmpDir, { recursive: true });
+        const stalePath = path.join(tmpDir, "old_draft.json");
+        fs.writeFileSync(stalePath, JSON.stringify({
+            sessionId: "old", createdAt: Date.now() - 90000000, fields: {},
+        }), "utf-8");
+        const recentPath = path.join(tmpDir, "recent_draft.json");
+        fs.writeFileSync(recentPath, JSON.stringify({
+            sessionId: "recent", createdAt: Date.now(), fields: {},
+        }), "utf-8");
+        process.env.KEVLAR_SKILLS_DIR = skillsDir;
+        const { createKevlarServer } = await import("../server.js");
+        createKevlarServer();
+        // The cleanup runs async; wait for it
+        await new Promise((r) => setTimeout(r, 300));
+        assert.ok(!fs.existsSync(stalePath), "stale draft should be deleted");
+        assert.ok(fs.existsSync(recentPath), "recent draft should survive");
+        assert.ok(fs.existsSync(tmpDir), "tmp dir should still exist");
+        delete process.env.KEVLAR_SKILLS_DIR;
+    });
+});
+//# sourceMappingURL=server.test.js.map

package/dist/__tests__/server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.js","sourceRoot":"","sources":["../../src/__tests__/server.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,IAAI,OAAe,CAAC;AAEpB,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAErC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAE1C,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAEpC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAE/D,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;YACzC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE;SAC/D,CAAC,EAAE,OAAO,CAAC,CAAC;QAEb,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;YAC1C,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE;SACvD,CAAC,EAAE,OAAO,CAAC,CAAC;QAEb,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAE1C,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5D,kBAAkB,EAAE,CAAC;QAErB,sCAAsC;QACtC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAE7C,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,+BAA+B,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,4BAA4B,CAAC,CAAC;QAE/D,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/execution/aggregator.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Result Aggregator for Multi-Agent Execution
+ *
+ * Combines results from multiple personas into a unified report.
+ */
+import type { ExecutionMode } from "./base.js";
+interface PersonaResult {
+    personaId: string;
+    personaName: string;
+    review: string;
+    error?: string;
+}
+interface PersonaResultWithMeta extends PersonaResult {
+    completedAt: Date;
+}
+interface PartialResult<T> {
+    successful: T[];
+    failed: Array<{
+        index: number;
+        error: string;
+    }>;
+    successRate: number;
+}
+export declare class ResultAggregator {
+    private results;
+    private failedCount;
+    addSuccess(result: PersonaResult): void;
+    addFailure(personaId: string, personaName: string, error: string): void;
+    getResults(): PersonaResultWithMeta[];
+    getSuccessful(): PersonaResultWithMeta[];
+    getFailed(): PersonaResultWithMeta[];
+    getPartialResult(): PartialResult<PersonaResultWithMeta>;
+}
+interface AggregatedReportOptions {
+    mode: ExecutionMode;
+    contentSummary: string;
+    personas: PersonaResultWithMeta[];
+}
+export declare function generateAggregatedReport(options: AggregatedReportOptions): string;
+export declare function estimateTokenCost(personas: number, contentLength: number, content?: string, personaSystemPrompts?: string[]): number;
+export declare function checkBudget(personas: number, contentLength: number, personaSystemPrompts?: string[]): void;
+export {};
+//# sourceMappingURL=aggregator.d.ts.map

package/dist/execution/aggregator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregator.d.ts","sourceRoot":"","sources":["../../src/execution/aggregator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAI/C,UAAU,aAAa;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,qBAAsB,SAAQ,aAAa;IACnD,WAAW,EAAE,IAAI,CAAC;CACnB;AAID,UAAU,aAAa,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,WAAW,CAAK;IAExB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAOvC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAWvE,UAAU,IAAI,qBAAqB,EAAE;IAIrC,aAAa,IAAI,qBAAqB,EAAE;IAIxC,SAAS,IAAI,qBAAqB,EAAE;IAIpC,gBAAgB,IAAI,aAAa,CAAC,qBAAqB,CAAC;CAazD;AAID,UAAU,uBAAuB;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAgDjF;AAoBD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,MAAM,EAChB,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAC9B,MAAM,CAqBR;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAW1G"}

package/dist/execution/aggregator.js

@@ -0,0 +1,132 @@
+/**
+ * Result Aggregator for Multi-Agent Execution
+ *
+ * Combines results from multiple personas into a unified report.
+ */
+// ── Aggregator ────────────────────────────────────────────────────────────────
+export class ResultAggregator {
+    results = [];
+    failedCount = 0;
+    addSuccess(result) {
+        this.results.push({
+            ...result,
+            completedAt: new Date(),
+        });
+    }
+    addFailure(personaId, personaName, error) {
+        this.failedCount++;
+        this.results.push({
+            personaId,
+            personaName,
+            review: "",
+            error,
+            completedAt: new Date(),
+        });
+    }
+    getResults() {
+        return [...this.results];
+    }
+    getSuccessful() {
+        return this.results.filter((r) => !r.error);
+    }
+    getFailed() {
+        return this.results.filter((r) => r.error);
+    }
+    getPartialResult() {
+        const total = this.results.length;
+        const successRate = total > 0 ? (total - this.failedCount) / total : 0;
+        return {
+            successful: this.getSuccessful(),
+            failed: this.getFailed().map((r, i) => ({
+                index: i,
+                error: r.error || "Unknown error",
+            })),
+            successRate,
+        };
+    }
+}
+export function generateAggregatedReport(options) {
+    const { mode, contentSummary, personas } = options;
+    const successful = personas.filter((p) => !p.error);
+    const failed = personas.filter((p) => p.error);
+    const modeLabels = {
+        orchestration: "宿主辅助兜底模式",
+        mcp_sampling: "MCP 采样模式",
+        direct_api: "直接 API 模式",
+    };
+    let report = `## 🛡️ Kevlar 压力测试报告
+
+**执行模式**：${modeLabels[mode]}
+**测试内容摘要**：${contentSummary}
+**参与评论员**：${successful.map((p) => p.personaName).join("、")}（共 ${successful.length} 位）`;
+    if (failed.length > 0) {
+        report += `\n**部分失败**：${failed.map((p) => `${p.personaName}（${p.error}）`).join("、")}`;
+    }
+    report += `\n**测试完成时间**：${new Date().toLocaleString("zh-CN")}`;
+    // Individual reviews
+    if (successful.length > 0) {
+        report += "\n\n---\n\n## 各评论员观点\n";
+        for (const p of successful) {
+            report += `\n### ${p.personaName}\n\n${p.review}\n`;
+        }
+    }
+    // Aggregated review summary
+    report += `
+
+---
+
+## 综合摘要
+
+${resultsSummary(successful)}`;
+    report += `
+
+---
+
+*由 Kevlar MCP Server 驱动 · 本地多智能体内容防弹衣*`;
+    return report;
+}
+function resultsSummary(successful) {
+    if (successful.length === 0)
+        return "无评论员成功完成评测。";
+    const lines = [];
+    for (const p of successful) {
+        const firstLine = p.review.split("\n")[0]?.replace(/^[#*\s]+/, "").slice(0, 80) || "";
+        lines.push(`- **${p.personaName}**：${firstLine}${firstLine.length >= 80 ? "…" : ""}`);
+    }
+    return lines.join("\n");
+}
+// ── Token Budget ──────────────────────────────────────────────────────────────
+const DEFAULT_TOKEN_BUDGET = {
+    per_task: 50_000,
+    per_persona: 10_000,
+};
+export function estimateTokenCost(personas, contentLength, content, personaSystemPrompts) {
+    let cjkRatio = 0.5;
+    if (content) {
+        const sample = content.slice(0, 200);
+        let cjkCount = 0;
+        for (const ch of sample) {
+            if (ch >= '\u4e00' && ch <= '\u9fff')
+                cjkCount++;
+        }
+        cjkRatio = cjkCount / Math.max(sample.length, 1);
+    }
+    const charsPerToken = 4 - cjkRatio * 2;
+    const contentTokens = Math.floor(contentLength / Math.max(charsPerToken, 1));
+    let systemPromptTokens = 0;
+    if (personaSystemPrompts) {
+        for (const sp of personaSystemPrompts) {
+            systemPromptTokens += Math.floor(sp.length / Math.max(charsPerToken, 1));
+        }
+    }
+    return contentTokens + personas * DEFAULT_TOKEN_BUDGET.per_persona + systemPromptTokens;
+}
+export function checkBudget(personas, contentLength, personaSystemPrompts) {
+    const budget = Number(process.env.KEVLAR_TOKEN_BUDGET_PER_TASK) || DEFAULT_TOKEN_BUDGET.per_task;
+    const estimated = estimateTokenCost(personas, contentLength, undefined, personaSystemPrompts);
+    if (estimated > budget) {
+        throw new Error(`预估 Token 消耗 (${estimated}) 超出预算 (${budget})。` +
+            `请减少评论员数量或缩短内容长度。`);
+    }
+}
+//# sourceMappingURL=aggregator.js.map

package/dist/execution/aggregator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregator.js","sourceRoot":"","sources":["../../src/execution/aggregator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAyBH,iFAAiF;AAEjF,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAA4B,EAAE,CAAC;IACtC,WAAW,GAAG,CAAC,CAAC;IAExB,UAAU,CAAC,MAAqB;QAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,GAAG,MAAM;YACT,WAAW,EAAE,IAAI,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa;QAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,SAAS;YACT,WAAW;YACX,MAAM,EAAE,EAAE;YACV,KAAK;YACL,WAAW,EAAE,IAAI,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,gBAAgB;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvE,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;YAChC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,eAAe;aAClC,CAAC,CAAC;YACH,WAAW;SACZ,CAAC;IACJ,CAAC;CACF;AAUD,MAAM,UAAU,wBAAwB,CAAC,OAAgC;IACvE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEnD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAkC;QAChD,aAAa,EAAE,UAAU;QACzB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,WAAW;KACxB,CAAC;IAEF,IAAI,MAAM,GAAG;;WAEJ,UAAU,CAAC,IAAI,CAAC;aACd,cAAc;YACf,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC;IAErF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;IAE/D,qBAAqB;IACrB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,wBAAwB,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC;QACtD,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,IAAI;;;;;;EAMV,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;IAE7B,MAAM,IAAI;;;;uCAI2B,CAAC;IAEtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,UAAmC;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAElD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,iFAAiF;AAEjF,MAAM,oBAAoB,GAAG;IAC3B,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,MAAM;CACpB,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,aAAqB,EACrB,OAAgB,EAChB,oBAA+B;IAE/B,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ;gBAAE,QAAQ,EAAE,CAAC;QACnD,CAAC;QACD,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IAE7E,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,oBAAoB,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACtC,kBAAkB,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,aAAa,GAAG,QAAQ,GAAG,oBAAoB,CAAC,WAAW,GAAG,kBAAkB,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,aAAqB,EAAE,oBAA+B;IAClG,MAAM,MAAM,GACV,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC;IACpF,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAE9F,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,gBAAgB,SAAS,WAAW,MAAM,IAAI;YAC5C,kBAAkB,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/execution/base.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Base types and interfaces for Kevlar execution modes
+ */
+import type { Persona } from "../utils/parser.js";
+export type ExecutionMode = "orchestration" | "mcp_sampling" | "direct_api";
+export type ResolveableMode = ExecutionMode | "auto";
+export type SamplingFunction = (params: {
+    systemPrompt: string;
+    message: string;
+    maxTokens?: number;
+}) => Promise<{
+    content: string;
+    stopReason?: string;
+}>;
+export type MultiTurnSamplingFunction = (params: {
+    systemPrompt: string;
+    messages: Array<{
+        role: "user" | "assistant";
+        content: string;
+    }>;
+    maxTokens?: number;
+}) => Promise<{
+    content: string;
+    stopReason?: string;
+}>;
+export interface ExecutionContext {
+    skillsDir: string;
+    personas: Persona[];
+    content: string;
+    context?: string;
+    samplingFn?: SamplingFunction;
+}
+export interface ExecutionResult {
+    report: string;
+    personas: string[];
+    mode: ExecutionMode;
+    partialFailures?: Array<{
+        personaId: string;
+        error: string;
+    }>;
+}
+export interface ExecutionHandler {
+    mode: ExecutionMode;
+    /** Check if current environment supports this mode */
+    canExecute(): boolean;
+    /** Execute the review */
+    execute(ctx: ExecutionContext): Promise<ExecutionResult>;
+    /** Default priority (lower number = higher priority) */
+    priority: number;
+}
+export interface ModeStatus {
+    mode: ExecutionMode;
+    available: boolean;
+    reason?: string;
+}
+export interface ModesInfo {
+    modes: ModeStatus[];
+    recommendedMode: ExecutionMode;
+    currentMode: ResolveableMode;
+    resolvedMode: ExecutionMode;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/execution/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/execution/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,cAAc,GAAG,YAAY,CAAC;AAE5E,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,MAAM,CAAC;AAIrD,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAExD,MAAM,MAAM,yBAAyB,GAAG,CAAC,MAAM,EAAE;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAIxD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAID,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAID,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,sDAAsD;IACtD,UAAU,IAAI,OAAO,CAAC;IACtB,yBAAyB;IACzB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,eAAe,EAAE,aAAa,CAAC;IAC/B,WAAW,EAAE,eAAe,CAAC;IAC7B,YAAY,EAAE,aAAa,CAAC;CAC7B"}

package/dist/execution/base.js

@@ -0,0 +1,5 @@
+/**
+ * Base types and interfaces for Kevlar execution modes
+ */
+export {};
+//# sourceMappingURL=base.js.map

package/dist/execution/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/execution/base.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/execution/client.d.ts

@@ -0,0 +1,9 @@
+/**
+ * MCP Client Capability Detection
+ *
+ * Detects whether the connected MCP client supports sampling capabilities.
+ */
+export declare function setClientInfo(name: string, version?: string): void;
+export declare function isSamplingSupported(clientName?: string): boolean;
+export declare function getSamplingClientList(): string[];
+//# sourceMappingURL=client.d.ts.map

package/dist/execution/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/execution/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAElE;AAID,wBAAgB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD"}

package/dist/execution/client.js

@@ -0,0 +1,30 @@
+/**
+ * MCP Client Capability Detection
+ *
+ * Detects whether the connected MCP client supports sampling capabilities.
+ */
+// ── Sampling-Supported Clients ─────────────────────────────────────────────────
+const SAMPLING_CLIENTS = new Set([
+    "claude-ai",
+    "cursor",
+    "claude-code",
+]);
+// ── Client Info Store ─────────────────────────────────────────────────────────
+let clientInfo = null;
+export function setClientInfo(name, version) {
+    clientInfo = { name: name.toLowerCase(), version };
+}
+// ── Capability Check ─────────────────────────────────────────────────────────
+export function isSamplingSupported(clientName) {
+    // Allow manual override for clients not in the known list
+    if (process.env.KEVLAR_ENABLE_SAMPLING === "true")
+        return true;
+    const name = clientName ?? clientInfo?.name;
+    if (!name)
+        return false;
+    return SAMPLING_CLIENTS.has(name.toLowerCase());
+}
+export function getSamplingClientList() {
+    return Array.from(SAMPLING_CLIENTS);
+}
+//# sourceMappingURL=client.js.map

package/dist/execution/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/execution/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,kFAAkF;AAElF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,QAAQ;IACR,aAAa;CACd,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAI,UAAU,GAA8C,IAAI,CAAC;AAEjE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAgB;IAC1D,UAAU,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,mBAAmB,CAAC,UAAmB;IACrD,0DAA0D;IAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,IAAI,GAAG,UAAU,IAAI,UAAU,EAAE,IAAI,CAAC;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACtC,CAAC"}

package/dist/execution/config.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Kevlar Configuration Management
+ *
+ * Reads and writes the kevlar-config.json file for user preferences.
+ * API keys are NEVER stored here - only environment variables.
+ */
+import type { ExecutionMode, ResolveableMode } from "./base.js";
+interface KevlarConfig {
+    mode: ResolveableMode;
+    multiAgent: {
+        maxConcurrency: number;
+        timeoutMs: number;
+    };
+    personaOrder: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+export declare function setConfigPath(skillsDir: string): void;
+export declare function readConfig(): KevlarConfig;
+export declare function readConfigAsync(): Promise<KevlarConfig>;
+interface UpdateConfigOptions {
+    mode?: ResolveableMode;
+    maxConcurrency?: number;
+    personaOrder?: string[];
+}
+export declare function updateConfig(options: UpdateConfigOptions): Promise<KevlarConfig>;
+export declare function isValidMode(mode: string): mode is ExecutionMode | "auto";
+export declare function isValidConcurrency(concurrency: number): boolean;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/execution/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/execution/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAIhE,UAAU,YAAY;IACpB,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAmBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAErD;AAID,wBAAgB,UAAU,IAAI,YAAY,CAyBzC;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC,CAG7D;AAID,UAAU,mBAAmB;IAC3B,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkCtF;AAID,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,aAAa,GAAG,MAAM,CAExE;AAED,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE/D"}