sentinelayer-cli 0.6.2 → 0.8.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1009 -996
- package/bin/create-sentinelayer.js +5 -5
- package/bin/sentinelayer-cli.js +4 -4
- package/bin/sl.js +5 -5
- package/package.json +64 -63
- package/src/agents/ai-governance/index.js +12 -0
- package/src/agents/ai-governance/tools/base.js +171 -0
- package/src/agents/ai-governance/tools/eval-regression.js +47 -0
- package/src/agents/ai-governance/tools/hitl-audit.js +81 -0
- package/src/agents/ai-governance/tools/index.js +52 -0
- package/src/agents/ai-governance/tools/prompt-drift.js +42 -0
- package/src/agents/ai-governance/tools/provenance-check.js +69 -0
- package/src/agents/backend/index.js +12 -0
- package/src/agents/backend/tools/base.js +189 -0
- package/src/agents/backend/tools/circuit-breaker-check.js +123 -0
- package/src/agents/backend/tools/idempotency-audit.js +105 -0
- package/src/agents/backend/tools/index.js +87 -0
- package/src/agents/backend/tools/retry-audit.js +132 -0
- package/src/agents/backend/tools/timeout-audit.js +144 -0
- package/src/agents/code-quality/index.js +12 -0
- package/src/agents/code-quality/tools/base.js +159 -0
- package/src/agents/code-quality/tools/complexity-measure.js +197 -0
- package/src/agents/code-quality/tools/coupling-analysis.js +81 -0
- package/src/agents/code-quality/tools/cycle-detect.js +49 -0
- package/src/agents/code-quality/tools/dep-graph.js +196 -0
- package/src/agents/code-quality/tools/index.js +89 -0
- package/src/agents/data-layer/index.js +12 -0
- package/src/agents/data-layer/tools/base.js +181 -0
- package/src/agents/data-layer/tools/index-audit.js +165 -0
- package/src/agents/data-layer/tools/index.js +83 -0
- package/src/agents/data-layer/tools/migration-scan.js +135 -0
- package/src/agents/data-layer/tools/query-explain.js +120 -0
- package/src/agents/data-layer/tools/tenancy-scan.js +166 -0
- package/src/agents/documentation/index.js +12 -0
- package/src/agents/documentation/tools/api-diff.js +91 -0
- package/src/agents/documentation/tools/base.js +151 -0
- package/src/agents/documentation/tools/dead-link-check.js +58 -0
- package/src/agents/documentation/tools/docstring-coverage.js +78 -0
- package/src/agents/documentation/tools/index.js +52 -0
- package/src/agents/documentation/tools/readme-freshness.js +61 -0
- package/src/agents/envelope/fix-cycle.js +45 -0
- package/src/agents/envelope/index.js +31 -0
- package/src/agents/envelope/loop.js +150 -0
- package/src/agents/envelope/pulse.js +18 -0
- package/src/agents/envelope/stream.js +40 -0
- package/src/agents/infrastructure/index.js +12 -0
- package/src/agents/infrastructure/tools/base.js +171 -0
- package/src/agents/infrastructure/tools/checkov-run.js +32 -0
- package/src/agents/infrastructure/tools/drift-detect.js +59 -0
- package/src/agents/infrastructure/tools/iam-least-priv-check.js +78 -0
- package/src/agents/infrastructure/tools/index.js +52 -0
- package/src/agents/infrastructure/tools/tflint-run.js +31 -0
- package/src/agents/jules/config/definition.js +160 -160
- package/src/agents/jules/config/system-prompt.js +182 -182
- package/src/agents/jules/error-intake.js +51 -51
- package/src/agents/jules/fix-cycle.js +17 -17
- package/src/agents/jules/loop.js +460 -450
- package/src/agents/jules/pulse.js +10 -10
- package/src/agents/jules/stream.js +187 -186
- package/src/agents/jules/swarm/file-scanner.js +74 -74
- package/src/agents/jules/swarm/index.js +11 -11
- package/src/agents/jules/swarm/orchestrator.js +362 -362
- package/src/agents/jules/swarm/pattern-hunter.js +123 -123
- package/src/agents/jules/swarm/sub-agent.js +315 -309
- package/src/agents/jules/tools/aidenid-email.js +189 -189
- package/src/agents/jules/tools/auth-audit.js +1708 -1691
- package/src/agents/jules/tools/dispatch.js +340 -335
- package/src/agents/jules/tools/file-edit.js +2 -2
- package/src/agents/jules/tools/file-read.js +2 -2
- package/src/agents/jules/tools/frontend-analyze.js +570 -570
- package/src/agents/jules/tools/glob.js +2 -2
- package/src/agents/jules/tools/grep.js +2 -2
- package/src/agents/jules/tools/index.js +29 -29
- package/src/agents/jules/tools/path-guards.js +2 -2
- package/src/agents/jules/tools/runtime-audit.js +507 -507
- package/src/agents/jules/tools/shell.js +2 -2
- package/src/agents/jules/tools/url-policy.js +100 -100
- package/src/agents/mode.js +113 -0
- package/src/agents/observability/index.js +12 -0
- package/src/agents/observability/tools/alert-audit.js +39 -0
- package/src/agents/observability/tools/base.js +181 -0
- package/src/agents/observability/tools/dashboard-gap.js +42 -0
- package/src/agents/observability/tools/index.js +54 -0
- package/src/agents/observability/tools/log-schema-check.js +74 -0
- package/src/agents/observability/tools/span-coverage.js +74 -0
- package/src/agents/persona-visuals.js +102 -61
- package/src/agents/release/index.js +12 -0
- package/src/agents/release/tools/base.js +181 -0
- package/src/agents/release/tools/changelog-diff.js +86 -0
- package/src/agents/release/tools/feature-flag-audit.js +126 -0
- package/src/agents/release/tools/index.js +61 -0
- package/src/agents/release/tools/rollback-verify.js +129 -0
- package/src/agents/release/tools/semver-check.js +109 -0
- package/src/agents/reliability/index.js +12 -0
- package/src/agents/reliability/tools/backpressure-check.js +129 -0
- package/src/agents/reliability/tools/base.js +181 -0
- package/src/agents/reliability/tools/chaos-probe.js +109 -0
- package/src/agents/reliability/tools/graceful-degradation-check.js +114 -0
- package/src/agents/reliability/tools/health-check-audit.js +111 -0
- package/src/agents/reliability/tools/index.js +87 -0
- package/src/agents/run-persona.js +109 -0
- package/src/agents/security/index.js +12 -0
- package/src/agents/security/tools/authz-audit.js +134 -0
- package/src/agents/security/tools/base.js +190 -0
- package/src/agents/security/tools/crypto-review.js +175 -0
- package/src/agents/security/tools/index.js +97 -0
- package/src/agents/security/tools/sast-scan.js +175 -0
- package/src/agents/security/tools/secrets-scan.js +216 -0
- package/src/agents/shared-tools/dispatch-core.js +320 -315
- package/src/agents/shared-tools/file-edit.js +180 -180
- package/src/agents/shared-tools/file-read.js +100 -100
- package/src/agents/shared-tools/glob.js +168 -168
- package/src/agents/shared-tools/grep.js +228 -228
- package/src/agents/shared-tools/index.js +46 -46
- package/src/agents/shared-tools/path-guards.js +161 -161
- package/src/agents/shared-tools/shell.js +383 -383
- package/src/agents/supply-chain/index.js +12 -0
- package/src/agents/supply-chain/tools/attestation-check.js +42 -0
- package/src/agents/supply-chain/tools/base.js +151 -0
- package/src/agents/supply-chain/tools/index.js +52 -0
- package/src/agents/supply-chain/tools/lockfile-integrity.js +73 -0
- package/src/agents/supply-chain/tools/package-verify.js +56 -0
- package/src/agents/supply-chain/tools/sbom-diff.js +34 -0
- package/src/agents/testing/index.js +12 -0
- package/src/agents/testing/tools/base.js +202 -0
- package/src/agents/testing/tools/coverage-gap.js +144 -0
- package/src/agents/testing/tools/flake-detect.js +125 -0
- package/src/agents/testing/tools/index.js +85 -0
- package/src/agents/testing/tools/mutation-test.js +143 -0
- package/src/agents/testing/tools/snapshot-diff.js +103 -0
- package/src/ai/aidenid.js +1021 -1009
- package/src/ai/client.js +553 -553
- package/src/ai/domain-target-store.js +268 -268
- package/src/ai/identity-store.js +270 -270
- package/src/ai/proxy.js +137 -137
- package/src/ai/site-store.js +145 -145
- package/src/audit/agents/architecture.js +180 -180
- package/src/audit/agents/compliance.js +179 -179
- package/src/audit/agents/documentation.js +165 -165
- package/src/audit/agents/performance.js +145 -145
- package/src/audit/agents/security.js +215 -215
- package/src/audit/agents/testing.js +172 -172
- package/src/audit/orchestrator.js +557 -557
- package/src/audit/package.js +204 -204
- package/src/audit/registry.js +284 -284
- package/src/audit/replay.js +103 -103
- package/src/auth/gate.js +428 -371
- package/src/auth/http.js +681 -611
- package/src/auth/service.js +1106 -1106
- package/src/auth/session-store.js +813 -813
- package/src/cli.js +257 -252
- package/src/commands/ai/identity-lifecycle.js +1338 -1338
- package/src/commands/ai/provision-governance.js +1272 -1272
- package/src/commands/ai/shared.js +147 -147
- package/src/commands/ai.js +11 -11
- package/src/commands/apply.js +12 -12
- package/src/commands/audit.js +1171 -1166
- package/src/commands/auth.js +419 -419
- package/src/commands/chat.js +184 -191
- package/src/commands/config.js +184 -184
- package/src/commands/cost.js +311 -311
- package/src/commands/daemon/core.js +850 -850
- package/src/commands/daemon/extended.js +1048 -1048
- package/src/commands/daemon/shared.js +213 -213
- package/src/commands/daemon.js +11 -11
- package/src/commands/guide.js +174 -174
- package/src/commands/ingest.js +58 -58
- package/src/commands/init.js +55 -55
- package/src/commands/legacy-args.js +20 -10
- package/src/commands/mcp.js +461 -461
- package/src/commands/omargate.js +63 -29
- package/src/commands/persona.js +65 -20
- package/src/commands/plugin.js +260 -260
- package/src/commands/policy.js +132 -132
- package/src/commands/prompt.js +238 -238
- package/src/commands/review.js +704 -704
- package/src/commands/scan.js +865 -872
- package/src/commands/session.js +1238 -0
- package/src/commands/spec.js +771 -716
- package/src/commands/swarm.js +651 -651
- package/src/commands/telemetry.js +202 -202
- package/src/commands/watch.js +511 -511
- package/src/config/agent-dictionary.js +182 -182
- package/src/config/io.js +56 -56
- package/src/config/paths.js +18 -18
- package/src/config/schema.js +55 -55
- package/src/config/service.js +184 -184
- package/src/coord/events-log.js +141 -0
- package/src/coord/handshake.js +719 -0
- package/src/coord/index.js +35 -0
- package/src/coord/paths.js +84 -0
- package/src/coord/priority.js +62 -0
- package/src/coord/tarjan.js +157 -0
- package/src/cost/budget.js +235 -235
- package/src/cost/history.js +188 -188
- package/src/cost/tokenizer.js +160 -0
- package/src/cost/tracker.js +232 -171
- package/src/daemon/artifact-lineage.js +896 -534
- package/src/daemon/assignment-ledger.js +1083 -770
- package/src/daemon/ast-drift.js +496 -0
- package/src/daemon/ast-parser-layer.js +258 -258
- package/src/daemon/budget-governor.js +633 -633
- package/src/daemon/callgraph-overlay.js +646 -646
- package/src/daemon/error-worker.js +1209 -626
- package/src/daemon/fix-cycle.js +384 -377
- package/src/daemon/hybrid-mapper.js +929 -929
- package/src/daemon/ingest-refresh.js +79 -11
- package/src/daemon/jira-lifecycle.js +767 -632
- package/src/daemon/operator-control.js +657 -657
- package/src/daemon/pulse.js +327 -327
- package/src/daemon/reliability-lane.js +471 -471
- package/src/daemon/scope-engine.js +1068 -0
- package/src/daemon/watchdog.js +971 -971
- package/src/events/schema.js +190 -0
- package/src/guide/generator.js +316 -316
- package/src/ingest/engine.js +933 -918
- package/src/ingest/ownership.js +380 -0
- package/src/interactive/index.js +97 -97
- package/src/legacy-cli.js +3228 -2994
- package/src/mcp/registry.js +695 -695
- package/src/memory/blackboard.js +301 -301
- package/src/memory/retrieval.js +581 -581
- package/src/orchestrator/kai-chen.js +126 -0
- package/src/plugin/manifest.js +553 -553
- package/src/policy/packs.js +144 -144
- package/src/prompt/generator.js +136 -118
- package/src/review/ai-review.js +672 -679
- package/src/review/compliance-pack.js +389 -0
- package/src/review/investor-dd-config.js +54 -0
- package/src/review/investor-dd-file-loop.js +303 -0
- package/src/review/investor-dd-file-router.js +406 -0
- package/src/review/investor-dd-html-report.js +233 -0
- package/src/review/investor-dd-notification.js +120 -0
- package/src/review/investor-dd-orchestrator.js +405 -0
- package/src/review/investor-dd-persona-runner.js +275 -0
- package/src/review/live-validator.js +253 -0
- package/src/review/local-review.js +1351 -1305
- package/src/review/omargate-interactive.js +68 -68
- package/src/review/omargate-orchestrator.js +492 -300
- package/src/review/persona-prompts.js +484 -296
- package/src/review/reconciliation-rules.js +329 -0
- package/src/review/replay.js +235 -235
- package/src/review/report.js +664 -664
- package/src/review/reproducibility-chain.js +136 -0
- package/src/review/scan-modes.js +147 -42
- package/src/review/spec-binding.js +487 -487
- package/src/scaffold/generator.js +67 -67
- package/src/scaffold/templates.js +150 -150
- package/src/scan/generator.js +418 -418
- package/src/scan/gh-secrets.js +107 -107
- package/src/session/agent-registry.js +359 -0
- package/src/session/analytics.js +479 -0
- package/src/session/daemon.js +1396 -0
- package/src/session/file-locks.js +666 -0
- package/src/session/paths.js +37 -0
- package/src/session/recap.js +567 -0
- package/src/session/redact.js +82 -0
- package/src/session/runtime-bridge.js +762 -0
- package/src/session/scoring.js +406 -0
- package/src/session/setup-guides.js +304 -0
- package/src/session/store.js +704 -0
- package/src/session/stream.js +333 -0
- package/src/session/sync.js +753 -0
- package/src/session/tasks.js +1054 -0
- package/src/session/templates.js +188 -0
- package/src/spec/generator.js +619 -519
- package/src/spec/regenerate.js +237 -237
- package/src/spec/templates.js +91 -91
- package/src/swarm/dashboard.js +247 -247
- package/src/swarm/factory.js +363 -363
- package/src/swarm/pentest.js +934 -934
- package/src/swarm/registry.js +419 -419
- package/src/swarm/report.js +158 -158
- package/src/swarm/runtime.js +569 -576
- package/src/swarm/scenario-dsl.js +272 -272
- package/src/telemetry/ledger.js +302 -302
- package/src/telemetry/session-tracker.js +234 -234
- package/src/telemetry/sync.js +203 -203
- package/src/ui/command-hints.js +13 -13
- package/src/ui/markdown.js +220 -220
|
@@ -1,300 +1,492 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Omar Gate multi-persona orchestrator.
|
|
3
|
-
*
|
|
4
|
-
* Runs N persona-scoped AI review calls in parallel (bounded concurrency),
|
|
5
|
-
* merges findings into a blackboard, deduplicates, and produces a unified report.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
import { randomUUID } from "node:crypto";
|
|
9
|
-
|
|
10
|
-
import { runAiReviewLayer } from "./ai-review.js";
|
|
11
|
-
import { buildPersonaReviewPrompt, PERSONA_IDS } from "./persona-prompts.js";
|
|
12
|
-
import { resolveScanMode } from "./scan-modes.js";
|
|
13
|
-
import {
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
}
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
*
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
const
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
const
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
return {
|
|
192
|
-
personaId,
|
|
193
|
-
status: "
|
|
194
|
-
findings,
|
|
195
|
-
summary:
|
|
196
|
-
costUsd:
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
};
|
|
200
|
-
}
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
|
|
205
|
-
|
|
206
|
-
|
|
207
|
-
|
|
208
|
-
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
217
|
-
|
|
218
|
-
|
|
219
|
-
|
|
220
|
-
|
|
221
|
-
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
|
|
231
|
-
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
|
|
258
|
-
|
|
259
|
-
|
|
260
|
-
|
|
261
|
-
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
270
|
-
|
|
271
|
-
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
|
|
278
|
-
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
|
|
291
|
-
|
|
292
|
-
|
|
293
|
-
|
|
294
|
-
|
|
295
|
-
|
|
296
|
-
|
|
297
|
-
|
|
298
|
-
|
|
299
|
-
|
|
300
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Omar Gate multi-persona orchestrator.
|
|
3
|
+
*
|
|
4
|
+
* Runs N persona-scoped AI review calls in parallel (bounded concurrency),
|
|
5
|
+
* merges findings into a blackboard, deduplicates, and produces a unified report.
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
import { randomUUID } from "node:crypto";
|
|
9
|
+
|
|
10
|
+
import { runAiReviewLayer } from "./ai-review.js";
|
|
11
|
+
import { buildPersonaReviewPrompt, PERSONA_IDS } from "./persona-prompts.js";
|
|
12
|
+
import { resolveFilteredPersonas, resolveScanMode } from "./scan-modes.js";
|
|
13
|
+
import { reconcileReviewFindings } from "./report.js";
|
|
14
|
+
import { resolvePersonaVisual } from "../agents/persona-visuals.js";
|
|
15
|
+
import { syncRunToDashboard } from "../telemetry/sync.js";
|
|
16
|
+
import { createAgentEvent } from "../events/schema.js";
|
|
17
|
+
|
|
18
|
+
const OMAR_ORCHESTRATOR_AGENT = Object.freeze({
|
|
19
|
+
id: "omar-orchestrator",
|
|
20
|
+
persona: "Omar Gate Orchestrator",
|
|
21
|
+
});
|
|
22
|
+
|
|
23
|
+
/**
|
|
24
|
+
* Run bounded-concurrency parallel execution.
|
|
25
|
+
* @param {Array} items
|
|
26
|
+
* @param {number} maxConcurrent
|
|
27
|
+
* @param {Function} fn
|
|
28
|
+
* @returns {Promise<Array>}
|
|
29
|
+
*/
|
|
30
|
+
async function runWithConcurrency(items, maxConcurrent, fn) {
|
|
31
|
+
const results = [];
|
|
32
|
+
const executing = new Set();
|
|
33
|
+
|
|
34
|
+
for (const item of items) {
|
|
35
|
+
const p = fn(item).then((result) => {
|
|
36
|
+
executing.delete(p);
|
|
37
|
+
return result;
|
|
38
|
+
});
|
|
39
|
+
executing.add(p);
|
|
40
|
+
results.push(p);
|
|
41
|
+
|
|
42
|
+
if (executing.size >= maxConcurrent) {
|
|
43
|
+
await Promise.race(executing);
|
|
44
|
+
}
|
|
45
|
+
}
|
|
46
|
+
|
|
47
|
+
return Promise.allSettled(results);
|
|
48
|
+
}
|
|
49
|
+
|
|
50
|
+
/**
|
|
51
|
+
* Annotate persona result with visual identity so stream consumers
|
|
52
|
+
* and downstream reports never see faceless persona IDs.
|
|
53
|
+
*/
|
|
54
|
+
function decoratePersonaResult(personaId, baseResult) {
|
|
55
|
+
const visual = resolvePersonaVisual(personaId) || {};
|
|
56
|
+
return {
|
|
57
|
+
...baseResult,
|
|
58
|
+
personaId,
|
|
59
|
+
persona: {
|
|
60
|
+
id: personaId,
|
|
61
|
+
shortName: visual.shortName || personaId,
|
|
62
|
+
fullName: visual.fullName || personaId,
|
|
63
|
+
avatar: visual.avatar || "",
|
|
64
|
+
color: visual.color || "gray",
|
|
65
|
+
domain: visual.domain || personaId,
|
|
66
|
+
},
|
|
67
|
+
};
|
|
68
|
+
}
|
|
69
|
+
|
|
70
|
+
/**
|
|
71
|
+
* Run the Omar Gate multi-persona orchestrator.
|
|
72
|
+
*
|
|
73
|
+
* @param {object} options
|
|
74
|
+
* @param {string} options.targetPath - Repository path
|
|
75
|
+
* @param {string} [options.scanMode] - "baseline", "deep", or "full-depth"
|
|
76
|
+
* @param {number} [options.maxParallel] - Max concurrent persona calls (default 4)
|
|
77
|
+
* @param {string} [options.provider] - LLM provider override
|
|
78
|
+
* @param {string} [options.model] - LLM model override
|
|
79
|
+
* @param {number} [options.maxCostUsd] - Global cost ceiling (default 5.0)
|
|
80
|
+
* @param {boolean} [options.dryRun] - Dry-run mode (no LLM calls)
|
|
81
|
+
* @param {string} [options.outputDir] - Output directory override
|
|
82
|
+
* @param {object} [options.deterministic] - Deterministic scan results
|
|
83
|
+
* @param {Function} [options.onEvent] - Event callback for streaming
|
|
84
|
+
* @param {string[] | null} [options.includeOnly] - Only run these persona IDs (filters scan-mode roster).
|
|
85
|
+
* @param {string[] | null} [options.skipPersonas] - Skip these persona IDs (filters scan-mode roster).
|
|
86
|
+
* @returns {Promise<object>} Orchestrated results
|
|
87
|
+
*/
|
|
88
|
+
export async function runOmarGateOrchestrator({
|
|
89
|
+
targetPath,
|
|
90
|
+
scanMode = "deep",
|
|
91
|
+
maxParallel = 4,
|
|
92
|
+
provider = "",
|
|
93
|
+
model = "",
|
|
94
|
+
maxCostUsd = 5.0,
|
|
95
|
+
dryRun = false,
|
|
96
|
+
outputDir = "",
|
|
97
|
+
deterministic = null,
|
|
98
|
+
onEvent = null,
|
|
99
|
+
includeOnly = null,
|
|
100
|
+
skipPersonas = null,
|
|
101
|
+
} = {}) {
|
|
102
|
+
const runId = `omargate-${Date.now()}-${randomUUID().slice(0, 8)}`;
|
|
103
|
+
const startTime = Date.now();
|
|
104
|
+
|
|
105
|
+
const filterRequested =
|
|
106
|
+
(Array.isArray(includeOnly) && includeOnly.length > 0)
|
|
107
|
+
|| (Array.isArray(skipPersonas) && skipPersonas.length > 0);
|
|
108
|
+
|
|
109
|
+
const resolved = filterRequested
|
|
110
|
+
? resolveFilteredPersonas(scanMode, {
|
|
111
|
+
includeOnly: Array.isArray(includeOnly) ? includeOnly : undefined,
|
|
112
|
+
skipPersonas: Array.isArray(skipPersonas) ? skipPersonas : undefined,
|
|
113
|
+
})
|
|
114
|
+
: { ...resolveScanMode(scanMode), dropped: [], unknown: [] };
|
|
115
|
+
|
|
116
|
+
const { mode, personas } = resolved;
|
|
117
|
+
const droppedPersonas = resolved.dropped || [];
|
|
118
|
+
const unknownPersonas = resolved.unknown || [];
|
|
119
|
+
|
|
120
|
+
if (onEvent && (droppedPersonas.length > 0 || unknownPersonas.length > 0)) {
|
|
121
|
+
onEvent(createAgentEvent({
|
|
122
|
+
event: "omargate_persona_filter",
|
|
123
|
+
agent: OMAR_ORCHESTRATOR_AGENT,
|
|
124
|
+
payload: {
|
|
125
|
+
runId,
|
|
126
|
+
mode,
|
|
127
|
+
dropped: droppedPersonas,
|
|
128
|
+
unknown: unknownPersonas,
|
|
129
|
+
effective: personas,
|
|
130
|
+
},
|
|
131
|
+
runId,
|
|
132
|
+
}));
|
|
133
|
+
}
|
|
134
|
+
|
|
135
|
+
const roster = personas.map((personaId) => {
|
|
136
|
+
const visual = resolvePersonaVisual(personaId) || {};
|
|
137
|
+
return {
|
|
138
|
+
id: personaId,
|
|
139
|
+
shortName: visual.shortName || personaId,
|
|
140
|
+
fullName: visual.fullName || personaId,
|
|
141
|
+
avatar: visual.avatar || "",
|
|
142
|
+
color: visual.color || "gray",
|
|
143
|
+
domain: visual.domain || personaId,
|
|
144
|
+
};
|
|
145
|
+
});
|
|
146
|
+
|
|
147
|
+
if (onEvent) {
|
|
148
|
+
onEvent(createAgentEvent({
|
|
149
|
+
event: "omargate_start",
|
|
150
|
+
agent: OMAR_ORCHESTRATOR_AGENT,
|
|
151
|
+
payload: { runId, mode, personas, roster, maxParallel, maxCostUsd, dryRun },
|
|
152
|
+
runId,
|
|
153
|
+
}));
|
|
154
|
+
}
|
|
155
|
+
|
|
156
|
+
const detSummary = deterministic?.summary || { P0: 0, P1: 0, P2: 0, P3: 0 };
|
|
157
|
+
const detFindings = deterministic?.findings || [];
|
|
158
|
+
|
|
159
|
+
// Per-persona cost budget = global / persona count (with minimum floor)
|
|
160
|
+
const perPersonaCost = Math.max(0.25, maxCostUsd / personas.length);
|
|
161
|
+
let runningCostUsd = 0;
|
|
162
|
+
|
|
163
|
+
const personaResults = await runWithConcurrency(personas, maxParallel, async (personaId) => {
|
|
164
|
+
const visual = resolvePersonaVisual(personaId) || {};
|
|
165
|
+
const identity = {
|
|
166
|
+
id: personaId,
|
|
167
|
+
shortName: visual.shortName || personaId,
|
|
168
|
+
fullName: visual.fullName || personaId,
|
|
169
|
+
avatar: visual.avatar || "",
|
|
170
|
+
color: visual.color || "gray",
|
|
171
|
+
domain: visual.domain || personaId,
|
|
172
|
+
};
|
|
173
|
+
|
|
174
|
+
// Global budget check — skip remaining personas if exhausted
|
|
175
|
+
if (runningCostUsd >= maxCostUsd) {
|
|
176
|
+
if (onEvent) {
|
|
177
|
+
onEvent(createAgentEvent({
|
|
178
|
+
event: "persona_skipped",
|
|
179
|
+
agent: {
|
|
180
|
+
id: identity.id,
|
|
181
|
+
persona: identity.fullName,
|
|
182
|
+
shortName: identity.shortName,
|
|
183
|
+
color: identity.color,
|
|
184
|
+
avatar: identity.avatar,
|
|
185
|
+
domain: identity.domain,
|
|
186
|
+
},
|
|
187
|
+
payload: { personaId, identity, reason: "global_budget_exhausted", runningCostUsd, maxCostUsd },
|
|
188
|
+
runId,
|
|
189
|
+
}));
|
|
190
|
+
}
|
|
191
|
+
return {
|
|
192
|
+
personaId,
|
|
193
|
+
status: "skipped",
|
|
194
|
+
findings: [],
|
|
195
|
+
summary: { P0: 0, P1: 0, P2: 0, P3: 0 },
|
|
196
|
+
costUsd: 0,
|
|
197
|
+
durationMs: 0,
|
|
198
|
+
reason: "global_budget_exhausted",
|
|
199
|
+
};
|
|
200
|
+
}
|
|
201
|
+
|
|
202
|
+
const personaStart = Date.now();
|
|
203
|
+
|
|
204
|
+
if (onEvent) {
|
|
205
|
+
onEvent(createAgentEvent({
|
|
206
|
+
event: "persona_start",
|
|
207
|
+
agent: {
|
|
208
|
+
id: identity.id,
|
|
209
|
+
persona: identity.fullName,
|
|
210
|
+
shortName: identity.shortName,
|
|
211
|
+
color: identity.color,
|
|
212
|
+
avatar: identity.avatar,
|
|
213
|
+
domain: identity.domain,
|
|
214
|
+
},
|
|
215
|
+
payload: { personaId, identity, mode, runId },
|
|
216
|
+
runId,
|
|
217
|
+
}));
|
|
218
|
+
}
|
|
219
|
+
|
|
220
|
+
try {
|
|
221
|
+
const systemPrompt = buildPersonaReviewPrompt({
|
|
222
|
+
personaId,
|
|
223
|
+
targetPath,
|
|
224
|
+
deterministicSummary: detSummary,
|
|
225
|
+
});
|
|
226
|
+
|
|
227
|
+
const result = await runAiReviewLayer({
|
|
228
|
+
targetPath,
|
|
229
|
+
mode: "full",
|
|
230
|
+
runId: `${runId}-${personaId}`,
|
|
231
|
+
runDirectory: targetPath,
|
|
232
|
+
deterministic: {
|
|
233
|
+
summary: detSummary,
|
|
234
|
+
findings: detFindings,
|
|
235
|
+
metadata: deterministic?.metadata || {},
|
|
236
|
+
},
|
|
237
|
+
outputDir,
|
|
238
|
+
provider: provider || undefined,
|
|
239
|
+
model: model || undefined,
|
|
240
|
+
maxCostUsd: perPersonaCost,
|
|
241
|
+
dryRun,
|
|
242
|
+
env: process.env,
|
|
243
|
+
});
|
|
244
|
+
|
|
245
|
+
const findings = (result?.findings || []).map((f) => ({
|
|
246
|
+
...f,
|
|
247
|
+
persona: personaId,
|
|
248
|
+
layer: personaId,
|
|
249
|
+
}));
|
|
250
|
+
|
|
251
|
+
if (onEvent) {
|
|
252
|
+
for (const finding of findings) {
|
|
253
|
+
onEvent(createAgentEvent({
|
|
254
|
+
event: "persona_finding",
|
|
255
|
+
agent: {
|
|
256
|
+
id: identity.id,
|
|
257
|
+
persona: identity.fullName,
|
|
258
|
+
shortName: identity.shortName,
|
|
259
|
+
color: identity.color,
|
|
260
|
+
avatar: identity.avatar,
|
|
261
|
+
domain: identity.domain,
|
|
262
|
+
},
|
|
263
|
+
payload: { personaId, identity, ...finding },
|
|
264
|
+
runId,
|
|
265
|
+
}));
|
|
266
|
+
}
|
|
267
|
+
onEvent(createAgentEvent({
|
|
268
|
+
event: "persona_complete",
|
|
269
|
+
agent: {
|
|
270
|
+
id: identity.id,
|
|
271
|
+
persona: identity.fullName,
|
|
272
|
+
shortName: identity.shortName,
|
|
273
|
+
color: identity.color,
|
|
274
|
+
avatar: identity.avatar,
|
|
275
|
+
domain: identity.domain,
|
|
276
|
+
},
|
|
277
|
+
payload: {
|
|
278
|
+
personaId,
|
|
279
|
+
identity,
|
|
280
|
+
findings: findings.length,
|
|
281
|
+
summary: result?.summary || {},
|
|
282
|
+
costUsd: result?.costUsd || 0,
|
|
283
|
+
durationMs: Date.now() - personaStart,
|
|
284
|
+
},
|
|
285
|
+
runId,
|
|
286
|
+
}));
|
|
287
|
+
}
|
|
288
|
+
|
|
289
|
+
const personaCost = result?.costUsd || 0;
|
|
290
|
+
runningCostUsd += personaCost;
|
|
291
|
+
|
|
292
|
+
return {
|
|
293
|
+
personaId,
|
|
294
|
+
status: "ok",
|
|
295
|
+
findings,
|
|
296
|
+
summary: result?.summary || { P0: 0, P1: 0, P2: 0, P3: 0 },
|
|
297
|
+
costUsd: personaCost,
|
|
298
|
+
model: result?.model || model || null,
|
|
299
|
+
durationMs: Date.now() - personaStart,
|
|
300
|
+
};
|
|
301
|
+
} catch (err) {
|
|
302
|
+
if (onEvent) {
|
|
303
|
+
onEvent(createAgentEvent({
|
|
304
|
+
event: "persona_error",
|
|
305
|
+
agent: {
|
|
306
|
+
id: identity.id,
|
|
307
|
+
persona: identity.fullName,
|
|
308
|
+
shortName: identity.shortName,
|
|
309
|
+
color: identity.color,
|
|
310
|
+
avatar: identity.avatar,
|
|
311
|
+
domain: identity.domain,
|
|
312
|
+
},
|
|
313
|
+
payload: { personaId, identity, error: err.message },
|
|
314
|
+
runId,
|
|
315
|
+
}));
|
|
316
|
+
}
|
|
317
|
+
return {
|
|
318
|
+
personaId,
|
|
319
|
+
status: "error",
|
|
320
|
+
findings: [],
|
|
321
|
+
summary: { P0: 0, P1: 0, P2: 0, P3: 0 },
|
|
322
|
+
costUsd: 0,
|
|
323
|
+
error: err.message,
|
|
324
|
+
durationMs: Date.now() - personaStart,
|
|
325
|
+
};
|
|
326
|
+
}
|
|
327
|
+
});
|
|
328
|
+
|
|
329
|
+
// Collect results (handle settled promises)
|
|
330
|
+
const settled = personaResults.map((r) =>
|
|
331
|
+
r.status === "fulfilled"
|
|
332
|
+
? decoratePersonaResult(r.value.personaId, r.value)
|
|
333
|
+
: decoratePersonaResult("unknown", {
|
|
334
|
+
status: "error",
|
|
335
|
+
findings: [],
|
|
336
|
+
summary: { P0: 0, P1: 0, P2: 0, P3: 0 },
|
|
337
|
+
costUsd: 0,
|
|
338
|
+
error: r.reason?.message || "unknown",
|
|
339
|
+
durationMs: 0,
|
|
340
|
+
})
|
|
341
|
+
);
|
|
342
|
+
|
|
343
|
+
// Reconcile AI findings with deterministic findings — canonical single list.
|
|
344
|
+
// Confidence boost when multiple layers agree; deterministic findings get
|
|
345
|
+
// confidence 1.0; AI findings keep their self-reported confidence.
|
|
346
|
+
const allAiFindings = settled.flatMap((r) => r.findings);
|
|
347
|
+
const reconciled = reconcileReviewFindings({
|
|
348
|
+
deterministicFindings: detFindings,
|
|
349
|
+
aiFindings: allAiFindings,
|
|
350
|
+
});
|
|
351
|
+
const reconciledFindings = reconciled.findings;
|
|
352
|
+
const reconciledSummary = reconciled.summary;
|
|
353
|
+
|
|
354
|
+
const totalCost = settled.reduce((sum, r) => sum + (r.costUsd || 0), 0);
|
|
355
|
+
const totalDuration = Date.now() - startTime;
|
|
356
|
+
|
|
357
|
+
// Silent-failure detection: if >=50% of personas errored OR total cost is
|
|
358
|
+
// zero with non-zero personas dispatched, treat as a LOUD orchestrator
|
|
359
|
+
// warning. Prior behavior silently returned zero AI findings, masking
|
|
360
|
+
// auth failures or LLM proxy outages as "clean scan".
|
|
361
|
+
const personaErrorCount = settled.filter((r) => r.status === "error").length;
|
|
362
|
+
const personaSkippedCount = settled.filter((r) => r.status === "skipped").length;
|
|
363
|
+
const personaOkCount = settled.filter((r) => r.status === "ok").length;
|
|
364
|
+
const totalPersonas = settled.length;
|
|
365
|
+
const errorRatio = totalPersonas > 0 ? personaErrorCount / totalPersonas : 0;
|
|
366
|
+
const aiCoverageHealthy =
|
|
367
|
+
totalPersonas === 0 ||
|
|
368
|
+
(personaOkCount > 0 && totalCost > 0 && errorRatio < 0.5 && !dryRun);
|
|
369
|
+
|
|
370
|
+
const personaHealth = {
|
|
371
|
+
ok: personaOkCount,
|
|
372
|
+
error: personaErrorCount,
|
|
373
|
+
skipped: personaSkippedCount,
|
|
374
|
+
total: totalPersonas,
|
|
375
|
+
errorRatio,
|
|
376
|
+
healthy: aiCoverageHealthy || dryRun,
|
|
377
|
+
warnings: [],
|
|
378
|
+
};
|
|
379
|
+
if (!dryRun && totalPersonas > 0) {
|
|
380
|
+
if (personaOkCount === 0 && personaErrorCount > 0) {
|
|
381
|
+
personaHealth.warnings.push(
|
|
382
|
+
`ALL ${totalPersonas} personas errored. AI coverage is ZERO. Re-check auth (sl auth login) or LLM proxy config.`
|
|
383
|
+
);
|
|
384
|
+
} else if (errorRatio >= 0.5) {
|
|
385
|
+
personaHealth.warnings.push(
|
|
386
|
+
`${personaErrorCount}/${totalPersonas} personas errored (${Math.round(errorRatio * 100)}%). AI coverage is degraded.`
|
|
387
|
+
);
|
|
388
|
+
}
|
|
389
|
+
if (personaOkCount > 0 && totalCost <= 0) {
|
|
390
|
+
personaHealth.warnings.push(
|
|
391
|
+
`Personas reported ok status but totalCost=$0.00 — likely silently returned empty findings without making LLM calls.`
|
|
392
|
+
);
|
|
393
|
+
}
|
|
394
|
+
}
|
|
395
|
+
|
|
396
|
+
const result = {
|
|
397
|
+
runId,
|
|
398
|
+
mode,
|
|
399
|
+
roster,
|
|
400
|
+
personas: settled.map((r) => ({
|
|
401
|
+
id: r.personaId,
|
|
402
|
+
identity: r.persona,
|
|
403
|
+
status: r.status,
|
|
404
|
+
findings: (r.findings || []).length,
|
|
405
|
+
summary: r.summary || { P0: 0, P1: 0, P2: 0, P3: 0 },
|
|
406
|
+
costUsd: r.costUsd,
|
|
407
|
+
durationMs: r.durationMs,
|
|
408
|
+
model: r.model || null,
|
|
409
|
+
error: r.error || null,
|
|
410
|
+
})),
|
|
411
|
+
personaHealth,
|
|
412
|
+
findings: reconciledFindings,
|
|
413
|
+
findingsBySource: {
|
|
414
|
+
deterministic: detFindings.length,
|
|
415
|
+
ai: allAiFindings.length,
|
|
416
|
+
reconciled: reconciledFindings.length,
|
|
417
|
+
},
|
|
418
|
+
summary: reconciledSummary,
|
|
419
|
+
totalCostUsd: totalCost,
|
|
420
|
+
totalDurationMs: totalDuration,
|
|
421
|
+
reconciliation: {
|
|
422
|
+
deterministicFindings: detFindings.length,
|
|
423
|
+
aiFindings: allAiFindings.length,
|
|
424
|
+
reconciledFindings: reconciledFindings.length,
|
|
425
|
+
dedupedCount: detFindings.length + allAiFindings.length - reconciledFindings.length,
|
|
426
|
+
multiSourceFindings: reconciledFindings.filter(
|
|
427
|
+
(f) => Array.isArray(f.sources) && f.sources.length > 1
|
|
428
|
+
).length,
|
|
429
|
+
},
|
|
430
|
+
dryRun,
|
|
431
|
+
};
|
|
432
|
+
|
|
433
|
+
// Emit warnings to the event stream so terminal handler can render them.
|
|
434
|
+
if (onEvent && personaHealth.warnings.length > 0) {
|
|
435
|
+
onEvent(createAgentEvent({
|
|
436
|
+
event: "persona_health_warning",
|
|
437
|
+
agent: { id: "orchestrator", persona: "Omar Orchestrator" },
|
|
438
|
+
payload: {
|
|
439
|
+
ok: personaOkCount,
|
|
440
|
+
error: personaErrorCount,
|
|
441
|
+
total: totalPersonas,
|
|
442
|
+
errorRatio,
|
|
443
|
+
warnings: personaHealth.warnings,
|
|
444
|
+
},
|
|
445
|
+
runId,
|
|
446
|
+
}));
|
|
447
|
+
}
|
|
448
|
+
|
|
449
|
+
if (onEvent) {
|
|
450
|
+
onEvent(createAgentEvent({
|
|
451
|
+
event: "omargate_complete",
|
|
452
|
+
agent: OMAR_ORCHESTRATOR_AGENT,
|
|
453
|
+
payload: {
|
|
454
|
+
runId,
|
|
455
|
+
mode,
|
|
456
|
+
personaCount: settled.length,
|
|
457
|
+
findings: reconciledFindings.length,
|
|
458
|
+
summary: result.summary,
|
|
459
|
+
reconciliation: result.reconciliation,
|
|
460
|
+
totalCostUsd: totalCost,
|
|
461
|
+
totalDurationMs: totalDuration,
|
|
462
|
+
},
|
|
463
|
+
runId,
|
|
464
|
+
}));
|
|
465
|
+
}
|
|
466
|
+
|
|
467
|
+
// Fire-and-forget telemetry sync to dashboard
|
|
468
|
+
syncRunToDashboard({
|
|
469
|
+
command: `omargate deep --scan-mode ${mode}`,
|
|
470
|
+
persona: "omar-orchestrator",
|
|
471
|
+
usage: {
|
|
472
|
+
inputTokens: 0,
|
|
473
|
+
outputTokens: 0,
|
|
474
|
+
costUsd: totalCost,
|
|
475
|
+
durationMs: totalDuration,
|
|
476
|
+
toolCalls: personas.length,
|
|
477
|
+
},
|
|
478
|
+
summary: result.summary,
|
|
479
|
+
reconciliation: result.reconciliation,
|
|
480
|
+
stopReason: result.summary.blocking ? "blocked" : "passed",
|
|
481
|
+
personaBreakdown: settled.map((r) => ({
|
|
482
|
+
personaId: r.personaId,
|
|
483
|
+
fullName: r.persona?.fullName || r.personaId,
|
|
484
|
+
findings: r.findings?.length || 0,
|
|
485
|
+
costUsd: r.costUsd || 0,
|
|
486
|
+
durationMs: r.durationMs || 0,
|
|
487
|
+
status: r.status,
|
|
488
|
+
})),
|
|
489
|
+
}).catch(() => {});
|
|
490
|
+
|
|
491
|
+
return result;
|
|
492
|
+
}
|