rterm-backend 2.7.7 → 2.7.8

package/bin/gybackend.js

@@ -382391,6 +382391,83 @@ function parsePolicyYaml(yaml) {
   return doc;
 }
 
+// ../../packages/backend/src/services/review/reviewService.ts
+var ReviewService = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.reviewerId = deps.reviewerId ?? "review-model";
+    this.reviewMode = deps.reviewMode ?? "strict";
+  }
+  reviewerId;
+  reviewMode;
+  /** Review an action. Returns the review result. */
+  async review(action) {
+    if (this.reviewMode === "auto-approve" && this.isLowRisk(action)) {
+      return {
+        verdict: "approved",
+        issues: [],
+        confidence: 1,
+        reasoning: "auto-approved (low-risk action)",
+        reviewerId: this.reviewerId,
+        skipped: true
+      };
+    }
+    const prompt = this.buildReviewPrompt(action);
+    const result = await this.deps.runReviewModel(prompt);
+    let verdict = result.verdict;
+    if (this.reviewMode === "advisory" && verdict === "escalate") {
+      verdict = "needs_revision";
+    }
+    return {
+      verdict,
+      issues: result.issues ?? [],
+      confidence: result.confidence ?? 0.5,
+      reasoning: result.reasoning ?? "",
+      reviewerId: this.reviewerId,
+      skipped: false
+    };
+  }
+  /** Check if an action is low-risk (for auto-approve mode). */
+  isLowRisk(action) {
+    const type2 = action.type.toLowerCase();
+    const target = (action.target ?? "").toLowerCase();
+    if (["read", "status", "list", "show", "get", "describe", "check"].some((w) => type2.includes(w))) return true;
+    if (target.includes("dev") || target.includes("staging") || target.includes("test")) return true;
+    return false;
+  }
+  /** Build the review prompt for the review model. */
+  buildReviewPrompt(action) {
+    return `You are a review model. Independently verify the following action for correctness, completeness, safety, compliance, and accuracy.
+
+Action type: ${action.type}
+Target: ${action.target ?? "unknown"}
+Command: ${action.command ?? "none"}
+User request: ${action.userRequest ?? "unknown"}
+
+Evaluate the action on 5 dimensions:
+1. Correctness: Is this the right action for the user's intent?
+2. Completeness: Does this action fully address the user's request?
+3. Safety: Is this action safe (not destructive, not harmful)?
+4. Compliance: Does this action comply with policy?
+5. Accuracy: Is the information in this action accurate?
+
+Return your verdict: approved, needs_revision, or escalate, with issues and reasoning.`;
+  }
+};
+function createSkippedReviewResult() {
+  return {
+    verdict: "approved",
+    issues: [],
+    confidence: 1,
+    reasoning: "review skipped (no reviewModelId specified)",
+    reviewerId: "none",
+    skipped: true
+  };
+}
+function shouldSkipReview(reviewModelId) {
+  return !reviewModelId || reviewModelId.trim() === "";
+}
+
 // ../../packages/backend/src/services/observability.ts
 function createObservability(deps) {
   const log = deps.onLog ?? (() => {
@@ -382504,6 +382581,16 @@ function createObservability(deps) {
   });
   void policyEngine.load().catch(() => {
   });
+  const reviewService = new ReviewService({
+    runReviewModel: deps.runReviewModel ?? (async (_prompt) => ({
+      verdict: "approved",
+      issues: [],
+      reasoning: "no review model configured",
+      confidence: 1
+    })),
+    reviewerId: deps.reviewerId ?? "review-model",
+    reviewMode: deps.reviewMode ?? "strict"
+  });
   const pluginScanRoot = (process.env.GYBACKEND_DATA_DIR ?? "./.gybackend-data") + "/plugins";
   const bundlePluginRoot = new URL("../../plugins/", import.meta.url).pathname;
   const scanRoots = [pluginScanRoot, "./plugins"];
@@ -382578,6 +382665,7 @@ function createObservability(deps) {
     audit: { ledger: auditLedger, sealer: evidenceSealer },
     monitorStatus,
     governance: { policyEngine },
+    review: { service: reviewService, shouldSkipReview, createSkippedReviewResult },
     pluginRegistry
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rterm-backend",
-  "version": "2.7.7",
+  "version": "2.7.8",
   "description": "RTerm headless backend — run RTerm-as-a-service (AI agent, SSH/WinRM/Serial/local terminals, fleet orchestration, advanced automation with event-driven triggers + NATS event mesh, scheduled automation, SRE observability, Netdata integration, AWS APerf performance deep-dive, plugin system) and drive it over a WebSocket JSON-RPC gateway. No desktop UI required.",
   "license": "Apache-2.0",
   "type": "module",