qlogicagent 2.13.5 → 2.13.6

package/dist/skills/memory/sqlite-memory-schema.js

@@ -1,152 +0,0 @@
-export const MEMORY_SCHEMA_SQL = `
-CREATE TABLE IF NOT EXISTS memories (
-  id TEXT PRIMARY KEY,
-  text TEXT NOT NULL,
-  user_id TEXT NOT NULL,
-  category TEXT NOT NULL DEFAULT 'general',
-  importance REAL NOT NULL DEFAULT 0.5,
-  confidence REAL NOT NULL DEFAULT 1.0,
-  source TEXT NOT NULL DEFAULT 'agent',
-  session_id TEXT NOT NULL DEFAULT '',
-  event_date TEXT NOT NULL DEFAULT '',
-  tags TEXT NOT NULL DEFAULT '[]',
-  embedding BLOB,
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL,
-  access_count INTEGER NOT NULL DEFAULT 0,
-  last_accessed_at INTEGER NOT NULL DEFAULT 0,
-  is_archived INTEGER NOT NULL DEFAULT 0
-);
-
-CREATE INDEX IF NOT EXISTS idx_memories_user ON memories(user_id);
-CREATE INDEX IF NOT EXISTS idx_memories_user_category ON memories(user_id, category);
-CREATE INDEX IF NOT EXISTS idx_memories_user_importance ON memories(user_id, importance DESC);
-CREATE INDEX IF NOT EXISTS idx_memories_created ON memories(created_at DESC);
-
-CREATE TABLE IF NOT EXISTS memory_observations (
-  id TEXT PRIMARY KEY,
-  user_id TEXT NOT NULL,
-  text TEXT NOT NULL,
-  source TEXT NOT NULL,
-  source_priority INTEGER NOT NULL DEFAULT 0,
-  session_id TEXT NOT NULL DEFAULT '',
-  evidence_type TEXT NOT NULL DEFAULT 'text',
-  payload TEXT NOT NULL DEFAULT '{}',
-  created_at INTEGER NOT NULL
-);
-
-CREATE INDEX IF NOT EXISTS idx_memory_observations_user_created ON memory_observations(user_id, created_at DESC);
-CREATE INDEX IF NOT EXISTS idx_memory_observations_source ON memory_observations(user_id, source);
-
-CREATE TABLE IF NOT EXISTS memory_proposals (
-  id TEXT PRIMARY KEY,
-  user_id TEXT NOT NULL,
-  observation_ids TEXT NOT NULL DEFAULT '[]',
-  text TEXT NOT NULL,
-  category TEXT NOT NULL DEFAULT 'general',
-  importance REAL NOT NULL DEFAULT 0.5,
-  confidence REAL NOT NULL DEFAULT 0.5,
-  source TEXT NOT NULL DEFAULT 'agent',
-  source_priority INTEGER NOT NULL DEFAULT 0,
-  entity TEXT NOT NULL DEFAULT '',
-  predicate TEXT NOT NULL DEFAULT '',
-  value_json TEXT NOT NULL DEFAULT '{}',
-  valid_time TEXT NOT NULL DEFAULT '',
-  tags TEXT NOT NULL DEFAULT '[]',
-  status TEXT NOT NULL DEFAULT 'pending',
-  related_claim_ids TEXT NOT NULL DEFAULT '[]',
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL
-);
-
-CREATE INDEX IF NOT EXISTS idx_memory_proposals_user_status ON memory_proposals(user_id, status);
-CREATE INDEX IF NOT EXISTS idx_memory_proposals_fact ON memory_proposals(user_id, entity, predicate, valid_time);
-
-CREATE TABLE IF NOT EXISTS memory_claims (
-  id TEXT PRIMARY KEY,
-  memory_id TEXT NOT NULL DEFAULT '',
-  user_id TEXT NOT NULL,
-  entity TEXT NOT NULL DEFAULT '',
-  predicate TEXT NOT NULL DEFAULT '',
-  value_json TEXT NOT NULL DEFAULT '{}',
-  text TEXT NOT NULL,
-  category TEXT NOT NULL DEFAULT 'general',
-  importance REAL NOT NULL DEFAULT 0.5,
-  confidence REAL NOT NULL DEFAULT 0.5,
-  source TEXT NOT NULL DEFAULT 'agent',
-  source_priority INTEGER NOT NULL DEFAULT 0,
-  status TEXT NOT NULL DEFAULT 'active',
-  valid_time TEXT NOT NULL DEFAULT '',
-  evidence_ids TEXT NOT NULL DEFAULT '[]',
-  supersedes_claim_id TEXT NOT NULL DEFAULT '',
-  conflict_group_id TEXT NOT NULL DEFAULT '',
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL
-);
-
-CREATE INDEX IF NOT EXISTS idx_memory_claims_user_status ON memory_claims(user_id, status);
-CREATE INDEX IF NOT EXISTS idx_memory_claims_memory ON memory_claims(memory_id);
-CREATE INDEX IF NOT EXISTS idx_memory_claims_fact ON memory_claims(user_id, entity, predicate, valid_time);
-
-CREATE TABLE IF NOT EXISTS memory_conflicts (
-  id TEXT PRIMARY KEY,
-  user_id TEXT NOT NULL,
-  claim_a_id TEXT NOT NULL,
-  claim_b_id TEXT NOT NULL,
-  reason TEXT NOT NULL,
-  status TEXT NOT NULL DEFAULT 'open',
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL
-);
-
-CREATE INDEX IF NOT EXISTS idx_memory_conflicts_user_status ON memory_conflicts(user_id, status);
-
-CREATE TABLE IF NOT EXISTS memory_attachments (
-  id TEXT PRIMARY KEY,
-  memory_id TEXT NOT NULL DEFAULT '',
-  user_id TEXT NOT NULL,
-  kind TEXT NOT NULL DEFAULT 'file',
-  filename TEXT NOT NULL DEFAULT '',
-  mime_type TEXT NOT NULL DEFAULT '',
-  size INTEGER NOT NULL DEFAULT 0,
-  rel_path TEXT NOT NULL,
-  extracted_text TEXT NOT NULL DEFAULT '',
-  created_at INTEGER NOT NULL
-);
-
-CREATE INDEX IF NOT EXISTS idx_memory_attachments_memory ON memory_attachments(memory_id);
-CREATE INDEX IF NOT EXISTS idx_memory_attachments_orphan ON memory_attachments(user_id, memory_id, created_at);
-
-CREATE VIRTUAL TABLE IF NOT EXISTS memories_fts USING fts5(
-  id UNINDEXED,
-  user_id UNINDEXED,
-  text,
-  category,
-  tags,
-  content=memories,
-  content_rowid=rowid,
-  tokenize='unicode61 remove_diacritics 2'
-);
-
-CREATE TRIGGER IF NOT EXISTS memories_ai AFTER INSERT ON memories BEGIN
-  INSERT INTO memories_fts(rowid, id, user_id, text, category, tags)
-  VALUES (new.rowid, new.id, new.user_id, new.text, new.category, new.tags);
-END;
-
-CREATE TRIGGER IF NOT EXISTS memories_ad AFTER DELETE ON memories BEGIN
-  INSERT INTO memories_fts(memories_fts, rowid, id, user_id, text, category, tags)
-  VALUES ('delete', old.rowid, old.id, old.user_id, old.text, old.category, old.tags);
-END;
-
-CREATE TRIGGER IF NOT EXISTS memories_au AFTER UPDATE ON memories BEGIN
-  INSERT INTO memories_fts(memories_fts, rowid, id, user_id, text, category, tags)
-  VALUES ('delete', old.rowid, old.id, old.user_id, old.text, old.category, old.tags);
-  INSERT INTO memories_fts(rowid, id, user_id, text, category, tags)
-  VALUES (new.rowid, new.id, new.user_id, new.text, new.category, new.tags);
-END;
-`;
-export function initializeMemorySchema(db) {
-    db.pragma("journal_mode = WAL");
-    db.pragma("foreign_keys = ON");
-    db.exec(MEMORY_SCHEMA_SQL);
-}

package/dist/skills/permissions/bash-classifier.d.ts

@@ -1,30 +0,0 @@
-/**
- * Bash Classifier — CC yoloClassifier bash branch parity.
- *
- * Specialized classifier for shell/bash commands.
- * CC decomposes each bash tool call into structured analysis:
- *   1. Parse the command string
- *   2. Check against known safe/dangerous command patterns
- *   3. Check working directory context
- *   4. If ambiguous, defer to the LLM classifier
- *
- * This is a pre-filter that runs BEFORE the general classifier,
- * so commonly-used safe shell commands bypass the LLM entirely.
- *
- * Reference: claude-code src/utils/permissions/yoloClassifier.ts (bash branch)
- */
-export interface BashClassifyResult {
-    decision: "allow" | "deny" | "defer";
-    reason: string;
-    /** Informational warning for destructive commands (CC parity). */
-    destructiveWarning?: string;
-}
-/**
- * Classify a bash/shell command for safety.
- *
- * @param command - The shell command string
- * @param cwd - Current working directory (for project context check)
- * @param projectRoot - Project root directory
- * @returns Classification result: allow / deny / defer (to LLM classifier)
- */
-export declare function classifyBashCommand(command: string, cwd?: string, projectRoot?: string): BashClassifyResult;

package/dist/skills/permissions/bash-classifier.js

@@ -1,174 +0,0 @@
-/**
- * Bash Classifier — CC yoloClassifier bash branch parity.
- *
- * Specialized classifier for shell/bash commands.
- * CC decomposes each bash tool call into structured analysis:
- *   1. Parse the command string
- *   2. Check against known safe/dangerous command patterns
- *   3. Check working directory context
- *   4. If ambiguous, defer to the LLM classifier
- *
- * This is a pre-filter that runs BEFORE the general classifier,
- * so commonly-used safe shell commands bypass the LLM entirely.
- *
- * Reference: claude-code src/utils/permissions/yoloClassifier.ts (bash branch)
- */
-import { getDestructiveCommandWarning, getPowerShellDestructiveCommandWarning, } from "../tools/shell/destructive-command-warning.js";
-// ── Safe Command Patterns ──────────────────────────────────
-/**
- * Commands that are always safe to run (read-only or standard dev workflow).
- * CC parity: isKnownSafe() list from yoloClassifier.ts
- */
-const SAFE_COMMAND_PREFIXES = new Set([
-    // Version / help
-    "nodeversion", "npmversion", "npxversion", "pnpmversion",
-    "yarnversion", "bunversion", "denoversion",
-    "pythonversion", "python3version", "pipversion",
-    "rubyversion", "go version", "rustcversion", "cargoversion",
-    "java -version", "javac -version", "dotnetversion",
-    "gccversion", "g++version", "clangversion",
-    "gitversion", "dockerversion",
-    // Help commands
-    "--help", "-h",
-]);
-/**
- * Command base names that are read-only / safe.
- */
-const SAFE_COMMANDS = new Set([
-    // Filesystem read-only
-    "ls", "dir", "find", "fd", "locate", "which", "where", "type",
-    "cat", "head", "tail", "less", "more", "bat",
-    "wc", "file", "stat", "du", "df",
-    "tree", "exa", "eza",
-    // Search
-    "grep", "rg", "ripgrep", "ag", "ack", "fgrep", "egrep",
-    // Git read-only
-    "git status", "git log", "git diff", "git show", "git branch",
-    "git tag", "git remote", "git stash list", "git blame",
-    "git shortlog", "git describe", "git rev-parse", "git ls-files",
-    "git ls-tree", "git cat-file", "git reflog",
-    // Process and system info
-    "ps", "top", "htop", "uptime", "uname", "hostname", "whoami", "id",
-    "env", "printenv", "echo",
-    // Network info (read-only)
-    "ping", "nslookup", "dig", "host", "ifconfig", "ip",
-    "netstat", "ss",
-    // Package info
-    "npm list", "npm ls", "npm info", "npm view", "npm outdated", "npm audit",
-    "pnpm list", "pnpm ls", "pnpm outdated",
-    "pip list", "pip show", "pip freeze",
-    "cargo tree",
-    // Build/test (standard dev workflow)
-    "npm test", "npm run test", "npm run build", "npm run lint",
-    "pnpm test", "pnpm run test", "pnpm run build", "pnpm run lint",
-    "yarn test", "yarn build", "yarn lint",
-    "cargo test", "cargo build", "cargo check", "cargo clippy",
-    "go test", "go build", "go vet",
-    "make", "cmake",
-    "pytest", "python -m pytest", "python3 -m pytest",
-    "jest", "vitest", "mocha",
-    "tsc", "tscnoEmit",
-    "eslint", "prettier", "oxlint",
-]);
-/**
- * Commands/patterns that are always dangerous.
- */
-const DANGEROUS_PATTERNS = [
-    // Destructive
-    /\brm\s+-rf?\s+[/~]/, // rm -rf / or ~
-    /\brm\s+-rf?\s+\.\.\//, // rm -rf ../
-    /\bsudo\b/,
-    /\bsu\s/,
-    /\bchmod\s+777\b/,
-    /\bmkfs\b/,
-    /\bfdisk\b/,
-    /\bdd\s+if=/,
-    // System config modification
-    /\bsystemctl\s+(start|stop|restart|enable|disable)\b/,
-    /\bservice\s+\S+\s+(start|stop|restart)\b/,
-    // Registry / system files
-    /\breg\s+(add|delete)\b/i,
-    /\\Windows\\System32/i,
-    /\/etc\/(passwd|shadow|sudoers|fstab)/,
-    // Force push
-    /\bgit\s+push\s+.*--force\b/,
-    /\bgit\s+push\s+-f\b/,
-    // Credential/secret exposure
-    /\bcurl\b.*(-H|--header)\s+.*[Aa]uthorization/,
-    /\bwget\b.*--header.*[Aa]uthorization/,
-    // Download and execute
-    /\bcurl\b.*\|\s*(sh|bash|zsh)\b/,
-    /\bwget\b.*-O\s*-\s*\|\s*(sh|bash|zsh)\b/,
-    // Package manager global install (system-wide side effect)
-    /\bnpm\s+install\s+-g\b/,
-    /\bpip\s+install\b(?!.*-r\b)(?!.*requirements)/,
-    // Drop database
-    /\bDROP\s+(DATABASE|TABLE|SCHEMA)\b/i,
-    /\bTRUNCATE\s+TABLE\b/i,
-];
-/**
- * Commands that are safe when run within the project directory.
- */
-const SAFE_IN_PROJECT = new Set([
-    "npm install", "npm i", "npm ci",
-    "pnpm install", "pnpm i",
-    "yarn install", "yarn",
-    "pip install -r", "pip install -e",
-    "cargo build", "cargo install",
-    "go mod download", "go get",
-    "bundle install",
-    "composer install",
-    "git add", "git commit", "git stash",
-    "git checkout", "git switch", "git merge",
-    "git rebase", "git cherry-pick",
-    "git pull", "git fetch",
-    "docker build", "docker compose",
-    "mkdir", "touch", "cp",
-]);
-// ── Classifier ──────────────────────────────────────────────
-/**
- * Classify a bash/shell command for safety.
- *
- * @param command - The shell command string
- * @param cwd - Current working directory (for project context check)
- * @param projectRoot - Project root directory
- * @returns Classification result: allow / deny / defer (to LLM classifier)
- */
-export function classifyBashCommand(command, cwd, projectRoot) {
-    const trimmed = command.trim();
-    if (!trimmed)
-        return { decision: "allow", reason: "empty command" };
-    // Detect destructive command patterns (informational warning — CC parity)
-    const destructiveWarning = getDestructiveCommandWarning(trimmed)
-        ?? getPowerShellDestructiveCommandWarning(trimmed)
-        ?? undefined;
-    // Check dangerous patterns first
-    for (const pattern of DANGEROUS_PATTERNS) {
-        if (pattern.test(trimmed)) {
-            return { decision: "deny", reason: `matches dangerous pattern: ${pattern.source}`, destructiveWarning };
-        }
-    }
-    // Check safe command prefixes (exact match)
-    for (const prefix of SAFE_COMMAND_PREFIXES) {
-        if (trimmed === prefix || trimmed.startsWith(prefix + " ")) {
-            return { decision: "allow", reason: `known safe command: ${prefix}`, destructiveWarning };
-        }
-    }
-    // Extract the base command (first word or first two words)
-    const words = trimmed.split(/\s+/);
-    const baseCmd = words[0];
-    const twoWordCmd = words.length > 1 ? `${words[0]} ${words[1]}` : baseCmd;
-    // Check safe commands (single or two-word match)
-    if (SAFE_COMMANDS.has(baseCmd) || SAFE_COMMANDS.has(twoWordCmd)) {
-        return { decision: "allow", reason: `known safe command: ${baseCmd}`, destructiveWarning };
-    }
-    // Check safe-in-project commands
-    const isInProject = cwd && projectRoot && cwd.startsWith(projectRoot);
-    if (isInProject) {
-        if (SAFE_IN_PROJECT.has(baseCmd) || SAFE_IN_PROJECT.has(twoWordCmd)) {
-            return { decision: "allow", reason: `safe in project: ${twoWordCmd}`, destructiveWarning };
-        }
-    }
-    // Unknown command — defer to LLM classifier
-    return { decision: "defer", reason: "unknown command — needs LLM classification", destructiveWarning };
-}

package/dist/skills/permissions/classifier-cache.d.ts

@@ -1,51 +0,0 @@
-/**
- * Classifier Cache — CC preToolUse approval cache parity.
- *
- * Caches already-judged tool use classification results to avoid
- * redundant LLM classifier calls for identical tool invocations.
- *
- * CC pattern: The auto-mode classifier is expensive (2 LLM calls per tool).
- * Caching results for identical (toolName + normalized args) combinations
- * eliminates redundant classification within a session.
- *
- * Cache Key: `${toolName}::${normalizedArgs}`
- *   - Args are sorted-key JSON for deterministic comparison
- *   - Bash commands are normalized (whitespace collapse, env var strip)
- *
- * Cache is session-scoped (cleared on session end or mode change).
- *
- * Reference: claude-code src/utils/permissions/permissionCache.ts
- */
-export interface CachedClassification {
-    shouldBlock: boolean;
-    reason: string;
-    /** Timestamp when this classification was made */
-    classifiedAt: number;
-    /** How many times this cache entry was reused */
-    hitCount: number;
-}
-export declare class ClassifierCache {
-    private cache;
-    /**
-     * Look up a cached classification result.
-     * Returns undefined if not cached or expired.
-     */
-    get(toolName: string, args: Record<string, unknown>): CachedClassification | undefined;
-    /**
-     * Store a classification result.
-     */
-    set(toolName: string, args: Record<string, unknown>, result: {
-        shouldBlock: boolean;
-        reason: string;
-    }): void;
-    /**
-     * Check if a tool+args combination is cached.
-     */
-    has(toolName: string, args: Record<string, unknown>): boolean;
-    /** Clear all cached classifications (called on mode change or session end) */
-    clear(): void;
-    /** Number of cached entries */
-    get size(): number;
-    /** Total cache hits across all entries */
-    get totalHits(): number;
-}

package/dist/skills/permissions/classifier-cache.js

@@ -1,103 +0,0 @@
-/**
- * Classifier Cache — CC preToolUse approval cache parity.
- *
- * Caches already-judged tool use classification results to avoid
- * redundant LLM classifier calls for identical tool invocations.
- *
- * CC pattern: The auto-mode classifier is expensive (2 LLM calls per tool).
- * Caching results for identical (toolName + normalized args) combinations
- * eliminates redundant classification within a session.
- *
- * Cache Key: `${toolName}::${normalizedArgs}`
- *   - Args are sorted-key JSON for deterministic comparison
- *   - Bash commands are normalized (whitespace collapse, env var strip)
- *
- * Cache is session-scoped (cleared on session end or mode change).
- *
- * Reference: claude-code src/utils/permissions/permissionCache.ts
- */
-// ── Normalization ──────────────────────────────────────────
-/**
- * Normalize tool arguments for cache key generation.
- * Strips volatile fields that don't affect safety classification.
- */
-function normalizeArgs(args) {
-    // Sort keys for deterministic comparison
-    const sorted = Object.keys(args).sort();
-    const normalized = {};
-    for (const key of sorted) {
-        const val = args[key];
-        if (typeof val === "string") {
-            // Normalize whitespace in string values
-            normalized[key] = val.replace(/\s+/g, " ").trim();
-        }
-        else {
-            normalized[key] = val;
-        }
-    }
-    return JSON.stringify(normalized);
-}
-/**
- * Build a cache key from tool name and arguments.
- */
-function buildCacheKey(toolName, args) {
-    return `${toolName}::${normalizeArgs(args)}`;
-}
-// ── Classifier Cache ───────────────────────────────────────
-const MAX_CACHE_SIZE = 500;
-export class ClassifierCache {
-    cache = new Map();
-    /**
-     * Look up a cached classification result.
-     * Returns undefined if not cached or expired.
-     */
-    get(toolName, args) {
-        const key = buildCacheKey(toolName, args);
-        const entry = this.cache.get(key);
-        if (!entry)
-            return undefined;
-        // Cache entries are valid for the entire session (no TTL expiry)
-        entry.hitCount++;
-        return entry;
-    }
-    /**
-     * Store a classification result.
-     */
-    set(toolName, args, result) {
-        // Evict oldest entries if cache is full
-        if (this.cache.size >= MAX_CACHE_SIZE) {
-            const firstKey = this.cache.keys().next().value;
-            if (firstKey !== undefined)
-                this.cache.delete(firstKey);
-        }
-        const key = buildCacheKey(toolName, args);
-        this.cache.set(key, {
-            shouldBlock: result.shouldBlock,
-            reason: result.reason,
-            classifiedAt: Date.now(),
-            hitCount: 0,
-        });
-    }
-    /**
-     * Check if a tool+args combination is cached.
-     */
-    has(toolName, args) {
-        return this.cache.has(buildCacheKey(toolName, args));
-    }
-    /** Clear all cached classifications (called on mode change or session end) */
-    clear() {
-        this.cache.clear();
-    }
-    /** Number of cached entries */
-    get size() {
-        return this.cache.size;
-    }
-    /** Total cache hits across all entries */
-    get totalHits() {
-        let total = 0;
-        for (const entry of this.cache.values()) {
-            total += entry.hitCount;
-        }
-        return total;
-    }
-}

package/dist/skills/permissions/community-sandbox-policy.d.ts

@@ -1,3 +0,0 @@
-import type { PermissionRuleEntry } from "./types.js";
-export type CommunitySandboxRuleId = "community-l1-shell" | "community-l1-file-read" | "community-l1-file-write" | "community-l1-network" | "community-l1-mcp" | "community-l1-host-control" | "community-l2-host-side-effect" | "community-l2-data-egress" | "community-l2-provider-prompt-egress" | "community-l2-provider-media-egress";
-export declare function createCommunitySandboxScopedRules(): PermissionRuleEntry[];