orquesta-cli 0.1.12

package/SECURITY.md

@@ -0,0 +1,290 @@
+# Security Considerations for Orquesta CLI
+
+## ⚠️ IMPORTANT: Understanding the Risks
+
+Orquesta CLI is a powerful AI coding assistant that can execute commands on your system. **By using this tool, you are giving an AI model the ability to:**
+
+- Execute arbitrary bash/PowerShell commands
+- Read and write files on your filesystem
+- Install packages and dependencies
+- Make network requests
+- Access your development environment
+
+**Please read this entire document before using Orquesta CLI in production environments.**
+
+---
+
+## 🔒 Security Model
+
+### Command Execution by Design
+
+Orquesta CLI **intentionally** allows the LLM to execute commands. This is a core feature, not a bug. However, this comes with risks:
+
+**What can go wrong:**
+- Accidental file deletion
+- Unintended system modifications
+- Resource exhaustion (CPU, memory, disk)
+- Network requests to unintended destinations
+- Credential exposure (if not properly configured)
+
+### Built-in Protections
+
+We've implemented several security measures:
+
+#### 1. Environment Variable Filtering
+```
+✅ Safe vars passed: PATH, HOME, TERM, SHELL
+❌ Blocked patterns: API_KEY, TOKEN, SECRET, PASSWORD
+⚙️ User configurable: safeEnvVars in config.json
+🎯 Explicit per-command: env parameter in tool calls
+```
+
+**How to configure:**
+```json
+// ~/.local-cli/config.json
+{
+  "safeEnvVars": ["DATABASE_URL", "MY_API_KEY"]
+}
+```
+
+#### 2. Dangerous Command Blocking
+```bash
+# Blocked patterns (can be bypassed - see limitations):
+rm -rf /
+sudo rm -rf
+format C:
+Remove-Item -Recurse -Force C:\
+Stop-Computer
+```
+
+**⚠️ LIMITATION:** Regex-based blocking can be bypassed with creative escaping. Do not rely on this as your only protection.
+
+#### 3. File Size Limits
+```
+Read operations: 100MB max
+Write operations: 50MB max
+```
+
+Prevents memory exhaustion from reading/writing massive files.
+
+#### 4. CWD Validation
+Working directory must exist and be a valid directory before command execution.
+
+---
+
+## 🛡️ Recommended Security Practices
+
+### 1. Use Trusted LLM Endpoints Only
+
+**Never use Orquesta CLI with untrusted LLM providers.** A malicious LLM could:
+- Execute destructive commands
+- Exfiltrate sensitive data
+- Install malware
+
+**Recommended:**
+- Self-hosted models (vLLM, Ollama)
+- Trusted cloud providers (Anthropic Claude, OpenAI)
+- Your organization's approved endpoints
+
+### 2. Run in Isolated Environments
+
+**Development/Testing:**
+```bash
+# Use Docker containers
+docker run -it --rm -v $(pwd):/workspace ubuntu bash
+cd /workspace
+npm install -g orquesta-cli
+orquesta
+```
+
+**Production:** Consider sandboxing technologies:
+- Docker/Podman containers
+- VMs with snapshot/restore
+- firejail, bubblewrap, or similar sandboxing tools
+
+### 3. Review Before Approval
+
+**Enable manual approval for destructive operations:**
+```json
+// config.json
+{
+  "settings": {
+    "autoApprove": false  // Recommended for production
+  }
+}
+```
+
+Always review commands before they execute, especially:
+- File deletions
+- System modifications
+- Package installations
+- Git operations (push, force-push, reset)
+
+### 4. Protect Sensitive Environment Variables
+
+**Don't export sensitive credentials to your shell:**
+```bash
+# ❌ BAD - Available to all processes
+export DATABASE_PASSWORD="secret123"
+
+# ✅ GOOD - Use .env files or secret managers
+# Only load when needed
+```
+
+**Use config-based allowlisting:**
+```json
+{
+  "safeEnvVars": ["NODE_ENV", "LOG_LEVEL"]
+  // Don't add sensitive vars here
+}
+```
+
+### 5. Regular Backups
+
+**Before using Orquesta CLI on important projects:**
+```bash
+# Git commit your work
+git add -A && git commit -m "Before orquesta session"
+
+# Or create a backup
+tar -czf backup-$(date +%Y%m%d).tar.gz .
+```
+
+### 6. Monitor File System Changes
+
+Use version control to track what the AI modifies:
+```bash
+# After session, review changes
+git diff
+git status
+```
+
+### 7. Network Isolation (Optional)
+
+For maximum security, run Orquesta CLI without internet access:
+```bash
+# Linux/macOS with network namespace isolation
+unshare --net orquesta
+
+# Or use firewall rules to restrict network access
+```
+
+---
+
+## 🚨 Known Limitations & Attack Vectors
+
+### 1. Command Filter Bypasses
+
+**The dangerous command filters can be bypassed:**
+```bash
+# Blocked: rm -rf /
+# Bypass examples:
+\rm -rf /              # Escaped command
+/bin/rm -rf /          # Full path
+bash -c "rm -rf /"     # Nested shell
+$(rm -rf /)            # Command substitution
+```
+
+**Mitigation:** Don't rely solely on filters. Use manual approval and sandboxing.
+
+### 2. Environment Variable Leakage
+
+Even with filtering, there are edge cases:
+- Environment variables set AFTER Orquesta CLI starts
+- Variables passed through other mechanisms (files, pipes)
+- Variables in command strings
+
+**Mitigation:** Review the `env` parameter in tool calls. Check logs.
+
+### 3. File Path Traversal
+
+While we validate CWD, symlinks and relative paths could potentially access files outside the working directory.
+
+**Mitigation:** Run in containers with limited filesystem access.
+
+### 4. Resource Exhaustion
+
+Despite file size limits, an LLM could:
+- Spawn many background processes
+- Create infinite loops
+- Fill disk with many small files
+
+**Mitigation:** Use system resource limits (ulimit, cgroups).
+
+### 5. Supply Chain Attacks
+
+If your LLM endpoint is compromised, the attacker gains full control.
+
+**Mitigation:** Self-host your LLM or use reputable providers only.
+
+---
+
+## 📊 Security Checklist
+
+Before using Orquesta CLI in production:
+
+- [ ] Review this entire security document
+- [ ] Use only trusted LLM endpoints
+- [ ] Enable manual approval (`autoApprove: false`)
+- [ ] Configure `safeEnvVars` carefully
+- [ ] Don't export sensitive credentials to shell
+- [ ] Run in isolated environment (Docker/VM)
+- [ ] Create backups before sessions
+- [ ] Use version control to track changes
+- [ ] Review all commands before execution
+- [ ] Monitor file system and network activity
+- [ ] Set up resource limits (ulimit, cgroups)
+- [ ] Have rollback plan ready
+
+---
+
+## 🆘 If Something Goes Wrong
+
+### Immediate Actions
+
+1. **Stop Orquesta CLI immediately:** Ctrl+C or kill the process
+2. **Review damage:**
+   ```bash
+   git status          # Check modified files
+   git diff            # See changes
+   ps aux | grep node  # Check running processes
+   ```
+3. **Rollback if needed:**
+   ```bash
+   git reset --hard HEAD  # Discard all changes (careful!)
+   git clean -fd          # Remove untracked files
+   ```
+
+### Recovery
+
+- Restore from backup
+- Review git history
+- Check for malicious network connections: `netstat -tuln`
+- Scan for malware if suspicious activity detected
+
+---
+
+## 📝 Reporting Security Issues
+
+**Found a security vulnerability?**
+
+Please report it responsibly:
+- **Email:** security@orquesta.live (if available)
+- **GitHub:** Create a private security advisory
+- **Do NOT** open public issues for security vulnerabilities
+
+---
+
+## 📚 Additional Resources
+
+- [OWASP Top 10](https://owasp.org/www-project-top-ten/)
+- [Docker Security Best Practices](https://docs.docker.com/engine/security/)
+- [Linux Sandboxing](https://wiki.archlinux.org/title/Security#Sandboxing_applications)
+
+---
+
+## ⚖️ Disclaimer
+
+**USE AT YOUR OWN RISK.** Orquesta CLI is provided "as is" without warranty of any kind. The developers are not responsible for any damage caused by using this tool.
+
+By using Orquesta CLI, you acknowledge that you understand the risks and accept full responsibility for any consequences.

package/TEST_LOCAL.md

@@ -0,0 +1,245 @@
+# Local Testing Checklist for Orquesta CLI
+
+## Before Testing
+
+Current version: 0.1.1
+Branch: prod
+Last commit: 8ef8f83b
+
+---
+
+## Test 1: Installation & Basic Functionality
+
+```bash
+# Already linked globally via npm link
+orquesta --version
+# Expected: 0.1.1
+
+# Check help
+orquesta --help
+```
+
+---
+
+## Test 2: UI & Branding
+
+```bash
+# Start orquesta CLI (will show new logo)
+orquesta
+```
+
+**Expected to see:**
+```
+  ╔═══╗    ORQUESTA CLI v0.1.1
+  ║ ♪ ║    Orchestrating AI-Powered Development
+  ╚═╦═╝
+    ║
+   ╱│╲
+```
+
+**Colors:** Purple/Blue/Cyan gradient (not pure cyan)
+
+**Check for:**
+- ✅ New conductor/orchestra logo (not box)
+- ✅ "ORQUESTA CLI" text (not LOCAL-CLI)
+- ✅ "Orchestrating AI-Powered Development" tagline
+- ✅ Gradient animation working
+- ✅ No LOCAL-CLI references anywhere
+
+---
+
+## Test 3: Security Documentation
+
+```bash
+# Check security docs exist
+ls -la SECURITY.md README.md
+
+# Verify README has security warning
+head -20 README.md | grep -i security
+```
+
+**Expected:**
+- ✅ SECURITY.md exists and is comprehensive
+- ✅ README.md has security warning section
+
+---
+
+## Test 4: Environment Variable Filtering
+
+**Create a test script:**
+```bash
+# Create test directory
+mkdir -p /tmp/orquesta-test
+cd /tmp/orquesta-test
+
+# Create test env vars
+export TEST_API_KEY="should_be_filtered"
+export TEST_SECRET="should_be_filtered"
+export PATH="/usr/bin:$PATH"  # Safe, should pass
+
+# Test with orquesta
+orquesta -p "Run: env | grep TEST"
+```
+
+**Expected behavior:**
+- ❌ TEST_API_KEY should NOT appear (filtered)
+- ❌ TEST_SECRET should NOT appear (filtered)
+- ✅ PATH should appear (whitelisted)
+
+---
+
+## Test 5: Config-Based Safe Env Vars
+
+**Edit config:**
+```bash
+# Edit ~/.local-cli/config.json
+nano ~/.local-cli/config.json
+```
+
+**Add:**
+```json
+{
+  "safeEnvVars": ["TEST_MY_VAR"]
+}
+```
+
+**Test:**
+```bash
+export TEST_MY_VAR="this_should_pass"
+orquesta -p "Run: env | grep TEST_MY_VAR"
+```
+
+**Expected:**
+- ✅ TEST_MY_VAR should appear (user configured it as safe)
+
+---
+
+## Test 6: Explicit Env Parameter
+
+**Note:** This requires the LLM to use the env parameter in tool calls.
+The bash/powershell tools now accept an optional `env` object parameter.
+
+**Manual test:**
+```bash
+# Start orquesta and ask it to:
+orquesta
+
+# Then type:
+"Run a command that needs NODE_ENV=production. Use the env parameter."
+```
+
+**Expected:**
+- ✅ LLM should be able to pass env vars explicitly via tool parameter
+
+---
+
+## Test 7: File Size Limits
+
+**Create test files:**
+```bash
+cd /tmp/orquesta-test
+
+# Create a 10MB file (should work - under 100MB limit)
+dd if=/dev/zero of=test-10mb.bin bs=1M count=10
+
+# Create a 200MB file (should fail - over 100MB limit)
+dd if=/dev/zero of=test-200mb.bin bs=1M count=200
+
+# Test with orquesta
+orquesta -p "Read the file test-10mb.bin"
+# Expected: Success (under limit)
+
+orquesta -p "Read the file test-200mb.bin"
+# Expected: Error message about file too large
+```
+
+---
+
+## Test 8: No Auto-Updater
+
+**Check for git-auto-updater:**
+```bash
+# Search for auto-updater references
+cd /home/kai/Escritorio/PROGRAMACION/orquesta/packages/orquesta-cli
+find src -name "*auto*" -type f
+grep -r "github.com/A2G-Dev-Space" src/ || echo "✅ No third-party repo references"
+```
+
+**Expected:**
+- ❌ No git-auto-updater.ts file
+- ❌ No references to A2G-Dev-Space/Local-CLI
+- ✅ "No third-party repo references" message
+
+---
+
+## Test 9: Build & TypeScript
+
+```bash
+# Clean build
+npm run build
+
+# Check for errors
+echo $?
+# Expected: 0 (success)
+```
+
+---
+
+## Test 10: Integration with orquesta-agent
+
+**If you have orquesta-agent setup:**
+```bash
+# orquesta-agent should detect orquesta CLI
+which orquesta
+# Expected: /home/kai/.nvm/versions/node/v22.11.0/bin/orquesta
+
+# Start orquesta-agent (it should prefer orquesta over claude)
+# Check agent logs for "Spawning: orquesta -p ..."
+```
+
+---
+
+## Issues to Watch For
+
+**Potential problems:**
+1. Logo not rendering correctly (Unicode issues)
+2. Colors not showing (terminal compatibility)
+3. Env var filtering too aggressive (blocks needed vars)
+4. File size limits too strict (can't read normal files)
+5. Build errors
+
+**If you find issues:**
+- Note the error message
+- Check console logs
+- Try in different terminal (some don't support Unicode)
+
+---
+
+## Success Criteria
+
+Before pushing to prod, confirm:
+
+- [ ] orquesta --version shows 0.1.1
+- [ ] New logo displays correctly
+- [ ] No "LOCAL-CLI" text anywhere in UI
+- [ ] SECURITY.md exists and is readable
+- [ ] README.md has security warning
+- [ ] Environment filtering works
+- [ ] File size limits work
+- [ ] Build completes without errors
+- [ ] No git-auto-updater references
+- [ ] Integration test with orquesta-agent (if applicable)
+
+---
+
+## After Testing
+
+If all tests pass:
+```bash
+git push origin prod
+```
+
+If issues found:
+- Document the issue
+- Fix and rebuild
+- Retest

package/dist/agents/base/base-agent.d.ts

@@ -0,0 +1,38 @@
+import { LLMClient } from '../../core/llm/llm-client.js';
+import { Message, ToolDefinition } from '../../types/index.js';
+export interface AgentContext {
+    workingDirectory?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface AgentResult {
+    success: boolean;
+    result?: string;
+    error?: string;
+    metadata?: {
+        iterations?: number;
+        toolCalls?: number;
+        duration?: number;
+    };
+}
+export interface AgentConfig {
+    maxIterations?: number;
+    temperature?: number;
+    maxTokens?: number;
+}
+export declare abstract class BaseAgent {
+    abstract readonly name: string;
+    abstract readonly description: string;
+    protected llmClient: LLMClient;
+    protected config: AgentConfig;
+    constructor(llmClient: LLMClient, config?: AgentConfig);
+    abstract execute(input: string, context?: AgentContext): Promise<AgentResult>;
+    protected abstract getTools(): ToolDefinition[];
+    protected abstract buildSystemPrompt(context?: AgentContext): string;
+    protected runToolLoop(messages: Message[], toolExecutor: (toolName: string, args: Record<string, unknown>) => Promise<string>): Promise<{
+        success: boolean;
+        result: string;
+        iterations: number;
+    }>;
+}
+export default BaseAgent;
+//# sourceMappingURL=base-agent.d.ts.map

package/dist/agents/base/base-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-agent.d.ts","sourceRoot":"","sources":["../../../src/agents/base/base-agent.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM/D,MAAM,WAAW,YAAY;IAE3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAKD,MAAM,WAAW,WAAW;IAE1B,OAAO,EAAE,OAAO,CAAC;IAEjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAKD,MAAM,WAAW,WAAW;IAE1B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,8BAAsB,SAAS;IAE7B,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAEtC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;gBAElB,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW;IAYtD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAK7E,SAAS,CAAC,QAAQ,CAAC,QAAQ,IAAI,cAAc,EAAE;IAK/C,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,MAAM;cAKpD,WAAW,CACzB,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,GACjF,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CA+DrE;AAED,eAAe,SAAS,CAAC"}

package/dist/agents/base/base-agent.js

@@ -0,0 +1,69 @@
+import { logger } from '../../utils/logger.js';
+export class BaseAgent {
+    llmClient;
+    config;
+    constructor(llmClient, config) {
+        this.llmClient = llmClient;
+        this.config = {
+            maxIterations: config?.maxIterations ?? 10,
+            temperature: config?.temperature ?? 0.3,
+            maxTokens: config?.maxTokens ?? 4000,
+        };
+    }
+    async runToolLoop(messages, toolExecutor) {
+        const tools = this.getTools();
+        let iterations = 0;
+        let finalResult = '';
+        logger.enter(`${this.name}.runToolLoop`);
+        while (iterations < this.config.maxIterations) {
+            iterations++;
+            logger.flow(`${this.name} iteration ${iterations}`);
+            const response = await this.llmClient.chatCompletion({
+                messages,
+                tools: tools.length > 0 ? tools : undefined,
+                temperature: this.config.temperature,
+                max_tokens: this.config.maxTokens,
+            });
+            const assistantMessage = response.choices[0]?.message;
+            if (!assistantMessage) {
+                throw new Error('No response from LLM');
+            }
+            messages.push(assistantMessage);
+            if (assistantMessage.tool_calls && assistantMessage.tool_calls.length > 0) {
+                for (const toolCall of assistantMessage.tool_calls) {
+                    let args;
+                    try {
+                        args = JSON.parse(toolCall.function.arguments);
+                    }
+                    catch (error) {
+                        logger.warn('Failed to parse tool arguments', { error, arguments: toolCall.function.arguments });
+                        messages.push({
+                            role: 'tool',
+                            content: 'Error: Invalid tool arguments. The arguments must be a valid JSON object.',
+                            tool_call_id: toolCall.id,
+                        });
+                        continue;
+                    }
+                    const result = await toolExecutor(toolCall.function.name, args);
+                    messages.push({
+                        role: 'tool',
+                        content: result,
+                        tool_call_id: toolCall.id,
+                    });
+                }
+            }
+            else {
+                finalResult = assistantMessage.content || '';
+                break;
+            }
+        }
+        logger.exit(`${this.name}.runToolLoop`, { iterations });
+        return {
+            success: true,
+            result: finalResult,
+            iterations,
+        };
+    }
+}
+export default BaseAgent;
+//# sourceMappingURL=base-agent.js.map

package/dist/agents/base/base-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-agent.js","sourceRoot":"","sources":["../../../src/agents/base/base-agent.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AA6C/C,MAAM,OAAgB,SAAS;IAMnB,SAAS,CAAY;IACrB,MAAM,CAAc;IAE9B,YAAY,SAAoB,EAAE,MAAoB;QACpD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE;YAC1C,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,GAAG;YACvC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;SACrC,CAAC;IACJ,CAAC;IAoBS,KAAK,CAAC,WAAW,CACzB,QAAmB,EACnB,YAAkF;QAElF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;QAEzC,OAAO,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAc,EAAE,CAAC;YAC/C,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,UAAU,EAAE,CAAC,CAAC;YAEpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;gBACnD,QAAQ;gBACR,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC3C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;YACtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAGhC,IAAI,gBAAgB,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1E,KAAK,MAAM,QAAQ,IAAI,gBAAgB,CAAC,UAAU,EAAE,CAAC;oBACnD,IAAI,IAA6B,CAAC;oBAClC,IAAI,CAAC;wBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACjD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;wBACjG,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,MAAM;4BACZ,OAAO,EAAE,2EAA2E;4BACpF,YAAY,EAAE,QAAQ,CAAC,EAAE;yBAC1B,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAChE,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM;wBACf,YAAY,EAAE,QAAQ,CAAC,EAAE;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBAEN,WAAW,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC7C,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAExD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW;YACnB,UAAU;SACX,CAAC;IACJ,CAAC;CACF;AAED,eAAe,SAAS,CAAC"}

package/dist/agents/docs-search/index.d.ts

@@ -0,0 +1,33 @@
+import { BaseAgent, AgentContext, AgentResult, AgentConfig } from '../base/base-agent.js';
+import { LLMClient } from '../../core/llm/llm-client.js';
+import { ToolDefinition } from '../../types/index.js';
+export type DocsSearchProgressCallback = (type: 'info' | 'tell_user' | 'complete', message: string, data?: {
+    summary?: string;
+    findings?: string;
+    sources?: string[];
+}) => void;
+export declare function setDocsSearchProgressCallback(callback: DocsSearchProgressCallback | null): void;
+export declare class DocsSearchAgent extends BaseAgent {
+    readonly name = "DocsSearchAgent";
+    readonly description = "Searches ~/.local-cli/docs using hierarchical navigation";
+    constructor(llmClient: LLMClient, config?: Partial<AgentConfig>);
+    protected getTools(): ToolDefinition[];
+    protected buildSystemPrompt(_context?: AgentContext): string;
+    execute(input: string, _context?: AgentContext): Promise<AgentResult>;
+    private formatToolArgs;
+    private formatFinalResult;
+}
+export declare function createDocsSearchAgent(llmClient: LLMClient, config?: Partial<AgentConfig>): DocsSearchAgent;
+export declare function executeDocsSearchAgent(llmClient: LLMClient, query: string): Promise<{
+    success: boolean;
+    result?: string;
+    error?: string;
+}>;
+export declare function initializeDocsDirectory(): Promise<void>;
+export declare function addDocumentationFile(filename: string, content: string): Promise<{
+    success: boolean;
+    path?: string;
+    error?: string;
+}>;
+export default DocsSearchAgent;
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/docs-search/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/docs-search/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAW,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAQ/D,MAAM,MAAM,0BAA0B,GAAG,CACvC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,EACvC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,KAC/D,IAAI,CAAC;AAUV,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAE/F;AAoBD,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,8DAA8D;gBAEtE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAI/D,SAAS,CAAC,QAAQ,IAAI,cAAc,EAAE;IAItC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,MAAM;IAItD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAqJ3E,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,iBAAiB;CAe1B;AAKD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,eAAe,CAE1G;AAKD,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAGhE;AAKD,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAwD7D;AAKD,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqB9D;AAED,eAAe,eAAe,CAAC"}