team-anya-cli 0.1.0

package/packages/core/dist/constants.js

@@ -0,0 +1,59 @@
+// 任务状态枚举
+export const TaskStatus = {
+    NEW: 'NEW',
+    NEED_CLARIFICATION: 'NEED_CLARIFICATION',
+    READY: 'READY',
+    IN_PROGRESS: 'IN_PROGRESS',
+    DELIVERING: 'DELIVERING',
+    DONE: 'DONE',
+    BLOCKED: 'BLOCKED',
+    CANCELLED: 'CANCELLED',
+};
+/**
+ * @deprecated MCP v3 不再使用 Triage L0-L3 分级。
+ * Loid 改为 SOUL 驱动 + 硬约束模式。
+ * 保留此常量仅为向后兼容 intent-classifier 和 opportunity-manager。
+ */
+export const IntentLevel = {
+    L0_NOISE: 0,
+    L1_CONTEXT: 1,
+    L2_OPPORTUNITY: 2,
+    L3_COMMITMENT: 3,
+};
+// 承诺状态
+export const CommitmentStatus = {
+    ACTIVE: 'active',
+    FULFILLED: 'fulfilled',
+    BROKEN: 'broken',
+    CANCELLED: 'cancelled',
+};
+// 机会状态
+export const OpportunityStatus = {
+    DETECTED: 'detected',
+    CONFIRMED: 'confirmed',
+    SKIPPED: 'skipped',
+    REJECTED: 'rejected',
+    CONVERTED: 'converted',
+};
+// 连接状态
+export const ConnectionState = {
+    DISCONNECTED: 'disconnected',
+    CONNECTING: 'connecting',
+    CONNECTED: 'connected',
+    EXECUTING: 'executing',
+    ERROR: 'error',
+};
+// 任务 ID 前缀
+export const TASK_ID_PREFIX = 'ANYA';
+// 默认配置
+export const DEFAULTS = {
+    MAX_RETRIES: 3,
+    MAX_YOR_CONCURRENCY: 3,
+    HEARTBEAT_INTERVAL_MS: 15_000,
+    RECONNECT_BASE_DELAY_MS: 1_000,
+    RECONNECT_MAX_RETRIES: 3,
+    CONNECT_TIMEOUT_MS: 30_000,
+    IDLE_TIMEOUT_MS: 300_000,
+    TOTAL_TIMEOUT_MS: 3_600_000,
+};
+//# sourceMappingURL=constants.js.map

package/packages/core/dist/errors.js

@@ -0,0 +1,35 @@
+export class AnyaError extends Error {
+    code;
+    details;
+    constructor(message, code, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'AnyaError';
+    }
+}
+export class InvalidTransitionError extends AnyaError {
+    constructor(from, to) {
+        super(`非法状态转换: ${from} → ${to}`, 'INVALID_TRANSITION', { from, to });
+        this.name = 'InvalidTransitionError';
+    }
+}
+export class TaskNotFoundError extends AnyaError {
+    constructor(taskId) {
+        super(`任务不存在: ${taskId}`, 'TASK_NOT_FOUND', { taskId });
+        this.name = 'TaskNotFoundError';
+    }
+}
+export class StatusConflictError extends AnyaError {
+    constructor(taskId, expected, actual) {
+        super(`状态冲突: 任务 ${taskId} 期望 ${expected}，实际 ${actual}`, 'STATUS_CONFLICT', { taskId, expected, actual });
+        this.name = 'StatusConflictError';
+    }
+}
+export class ScopeDeniedError extends AnyaError {
+    constructor(tool, reason) {
+        super(`SCOPE 拒绝: ${tool} - ${reason}`, 'SCOPE_DENIED', { tool, reason });
+        this.name = 'ScopeDeniedError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/packages/core/dist/index.js

@@ -0,0 +1,7 @@
+export * from './types/index.js';
+export * from './constants.js';
+export * from './state-machine.js';
+export * from './errors.js';
+export * from './office-init.js';
+export * from './scope/index.js';
+//# sourceMappingURL=index.js.map

package/packages/core/dist/office-init.js

@@ -0,0 +1,97 @@
+import { mkdir, copyFile, stat } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+/** 每次启动强制覆盖的文件（提示词/协议，必须与 workspace 保持同步） */
+const ALWAYS_OVERWRITE_FILES = [
+    'CLAUDE.md',
+    'CHARTER.md',
+    'PROTOCOL.md',
+    'TOOLS.md',
+    'loid/CLAUDE.md',
+    'loid/PROFILE.md',
+    'loid/PLAYBOOK.md',
+    'yor/CLAUDE.md',
+    'yor/PROFILE.md',
+    'yor/PLAYBOOK.md',
+    'yor/SELF-HEAL.md',
+];
+/** 仅当目标不存在时才复制的文件（配置/数据，运行时可能被修改） */
+const COPY_IF_MISSING_FILES = [
+    '.mcp.json',
+    '.claude/settings.local.json',
+    'reference/org/ownership.yaml',
+    'reference/org/escalation.yaml',
+];
+/** 需要确保存在的空目录 */
+const REQUIRED_DIRS = [
+    'memory/people',
+    'memory/projects',
+    'memory/execution',
+    'memory/commitments',
+    'memory/self',
+    'reference/org',
+    'reference/identity',
+    'audit',
+    'reports',
+    'yor',
+    'loid',
+    '.claude',
+];
+async function exists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * 确保 office 目录存在并包含所有必需的模板文件和子目录。
+ * - 提示词/协议文件（.md）：每次启动强制覆盖，保证与 workspace 同步
+ * - 配置/数据文件：仅补缺，不覆盖运行时修改
+ */
+export async function ensureOffice(officePath, templateDir, logger) {
+    const isNew = !(await exists(officePath));
+    // 创建所有必需目录
+    for (const dir of REQUIRED_DIRS) {
+        await mkdir(join(officePath, dir), { recursive: true });
+    }
+    let overwritten = 0;
+    let created = 0;
+    let skipped = 0;
+    // 强制覆盖提示词/协议文件
+    for (const file of ALWAYS_OVERWRITE_FILES) {
+        const src = join(templateDir, file);
+        const dest = join(officePath, file);
+        if (!(await exists(src))) {
+            logger?.info(`模板文件不存在，跳过: ${file}`);
+            continue;
+        }
+        await mkdir(dirname(dest), { recursive: true });
+        await copyFile(src, dest);
+        overwritten++;
+    }
+    // 仅补缺的配置/数据文件
+    for (const file of COPY_IF_MISSING_FILES) {
+        const src = join(templateDir, file);
+        const dest = join(officePath, file);
+        if (await exists(dest)) {
+            skipped++;
+            continue;
+        }
+        if (!(await exists(src))) {
+            logger?.info(`模板文件不存在，跳过: ${file}`);
+            continue;
+        }
+        await mkdir(dirname(dest), { recursive: true });
+        await copyFile(src, dest);
+        created++;
+    }
+    if (isNew) {
+        logger?.info(`Office 目录已创建: ${officePath} (${overwritten + created} 个文件)`);
+    }
+    else {
+        logger?.info(`Office 已同步: ${overwritten} 个提示词覆盖, ${created} 个配置补全, ${skipped} 个配置跳过`);
+    }
+}
+//# sourceMappingURL=office-init.js.map

package/packages/core/dist/scope/checker.js

@@ -0,0 +1,114 @@
+import { DEFAULT_FORBIDDEN_COMMANDS, DEFAULT_FORBIDDEN_PATHS } from './defaults.js';
+/**
+ * 默认 scope（无特定限制，仅启用默认安全守卫）
+ */
+export const DEFAULT_SCOPE = {
+    allowedPaths: ['**'],
+    forbiddenPaths: [],
+    allowedCommands: ['**'],
+    forbiddenCommands: [],
+};
+/**
+ * SCOPE 安全检查器
+ *
+ * 在协议层拦截工具请求，不依赖提示词约束。
+ * Claude Code 每次调用工具前都会发送 control_request，
+ * ScopeChecker 在此处做硬拦截。
+ */
+export class ScopeChecker {
+    scope;
+    constructor(scope = DEFAULT_SCOPE) {
+        this.scope = scope;
+    }
+    /**
+     * 检查工具请求是否被允许
+     */
+    check(req) {
+        // 文件写入检查
+        if (this.isFileWriteTool(req.toolName)) {
+            const filePath = (req.input.file_path ?? req.input.path ?? '');
+            if (!filePath) {
+                return this.allow(req.requestId);
+            }
+            // 先检查默认禁止路径
+            if (this.matchesAnyGlob(filePath, DEFAULT_FORBIDDEN_PATHS)) {
+                return this.deny(req.requestId, `默认禁止路径: ${filePath}`);
+            }
+            // 再检查 task scope 的禁止路径
+            if (this.matchesAnyGlob(filePath, this.scope.forbiddenPaths)) {
+                return this.deny(req.requestId, `任务禁止路径: ${filePath}`);
+            }
+            // 检查是否在允许路径中
+            if (this.scope.allowedPaths.length > 0 &&
+                !this.scope.allowedPaths.includes('**') &&
+                !this.matchesAnyGlob(filePath, this.scope.allowedPaths)) {
+                return this.deny(req.requestId, `路径不在允许范围: ${filePath}`);
+            }
+        }
+        // 命令执行检查
+        if (req.toolName === 'Bash') {
+            const command = (req.input.command ?? '');
+            if (!command) {
+                return this.allow(req.requestId);
+            }
+            // 先检查默认禁止命令
+            if (this.matchesAnyRegex(command, DEFAULT_FORBIDDEN_COMMANDS)) {
+                return this.deny(req.requestId, `默认禁止命令: ${command}`);
+            }
+            // 再检查 task scope 的禁止命令
+            const customForbidden = this.scope.forbiddenCommands.map(p => new RegExp(p));
+            if (this.matchesAnyRegex(command, customForbidden)) {
+                return this.deny(req.requestId, `任务禁止命令: ${command}`);
+            }
+        }
+        return this.allow(req.requestId);
+    }
+    /**
+     * 创建一个绑定了当前 scope 的 onToolRequest handler
+     */
+    createHandler() {
+        return async (req) => this.check(req);
+    }
+    // ── 私有方法 ──
+    isFileWriteTool(toolName) {
+        return ['Write', 'Edit', 'NotebookEdit'].includes(toolName);
+    }
+    matchesAnyGlob(path, patterns) {
+        for (const pattern of patterns) {
+            if (this.globMatch(path, pattern))
+                return true;
+        }
+        return false;
+    }
+    matchesAnyRegex(text, patterns) {
+        for (const pattern of patterns) {
+            if (pattern.test(text))
+                return true;
+        }
+        return false;
+    }
+    /**
+     * 简单 glob 匹配
+     * 支持: * (匹配非/字符), ** (匹配任意字符含/), ? (匹配单字符)
+     */
+    globMatch(text, pattern) {
+        // 将 glob 转为正则
+        let regex = pattern
+            .replace(/\*\*/g, '<<DOUBLESTAR>>')
+            .replace(/\*/g, '[^/]*')
+            .replace(/<<DOUBLESTAR>>/g, '.*')
+            .replace(/\?/g, '.');
+        // 如果 pattern 不以 / 开头，允许匹配任意前缀
+        if (!pattern.startsWith('/') && !pattern.startsWith('*')) {
+            regex = '(.*/)?' + regex;
+        }
+        return new RegExp(`^${regex}$`).test(text);
+    }
+    allow(requestId) {
+        return { requestId, behavior: 'allow' };
+    }
+    deny(requestId, reason) {
+        return { requestId, behavior: 'deny', reason };
+    }
+}
+//# sourceMappingURL=checker.js.map

package/packages/core/dist/scope/defaults.js

@@ -0,0 +1,40 @@
+/**
+ * 默认禁止命令正则列表
+ * 即使 TaskScope 未配置 forbiddenCommands，这些命令也会被拦截
+ */
+export const DEFAULT_FORBIDDEN_COMMANDS = [
+    /\brm\s+-[rf]{1,2}\b/, // rm -rf
+    /\brm\s+-[rf]{1,2}\s+\//, // rm -rf /
+    /\bgit\s+push\s+--force\b/, // force push
+    /\bgit\s+push\b.*\b(main|master)\b/, // 直接推主分支
+    /\bgit\s+reset\s+--hard\b/, // hard reset
+    /\bgit\s+clean\s+-[fd]{1,2}\b/, // git clean
+    /\b(DROP|TRUNCATE)\s+/i, // 危险 SQL DDL
+    /\bDELETE\s+FROM\b/i, // 危险 SQL DML（无 WHERE）
+    /\b(shutdown|reboot|poweroff|halt)\b/, // 系统命令
+    /\bdd\s+if=/, // 磁盘操作
+    /:\(\)\s*\{.*\};\s*:/, // fork bomb
+    /\bcurl\b.*\|\s*\b(bash|sh)\b/, // curl | bash
+    /\bchmod\s+777\b/, // 过度开放权限
+    /\bsudo\b/, // sudo
+];
+/**
+ * 默认禁止写入路径
+ * 保护系统和敏感文件
+ */
+export const DEFAULT_FORBIDDEN_PATHS = [
+    '**/.env',
+    '**/.env.*',
+    '**/credentials*',
+    '**/secrets*',
+    '**/*.pem',
+    '**/*.key',
+    '**/id_rsa*',
+    '/etc/**',
+    '/usr/**',
+    '/var/**',
+    '**/node_modules/**',
+    '**/.git/objects/**',
+    '**/.git/refs/**',
+];
+//# sourceMappingURL=defaults.js.map

package/packages/core/dist/scope/index.js

@@ -0,0 +1,3 @@
+export { ScopeChecker, DEFAULT_SCOPE } from './checker.js';
+export { DEFAULT_FORBIDDEN_COMMANDS, DEFAULT_FORBIDDEN_PATHS } from './defaults.js';
+//# sourceMappingURL=index.js.map

package/packages/core/dist/state-machine.js

@@ -0,0 +1,85 @@
+import { TaskStatus, TASK_ID_PREFIX } from './constants.js';
+import { InvalidTransitionError } from './errors.js';
+/**
+ * 合法状态转换表
+ * 定义了每个状态可以转换到哪些目标状态
+ */
+export const VALID_TRANSITIONS = {
+    [TaskStatus.NEW]: [
+        TaskStatus.NEED_CLARIFICATION,
+        TaskStatus.READY,
+        TaskStatus.BLOCKED,
+        TaskStatus.CANCELLED,
+    ],
+    [TaskStatus.NEED_CLARIFICATION]: [
+        TaskStatus.READY,
+        TaskStatus.CANCELLED,
+    ],
+    [TaskStatus.READY]: [
+        TaskStatus.IN_PROGRESS,
+        TaskStatus.BLOCKED,
+        TaskStatus.CANCELLED,
+    ],
+    [TaskStatus.IN_PROGRESS]: [
+        TaskStatus.DELIVERING,
+        TaskStatus.BLOCKED,
+        TaskStatus.CANCELLED,
+    ],
+    [TaskStatus.DELIVERING]: [
+        TaskStatus.DONE,
+        TaskStatus.IN_PROGRESS,
+        TaskStatus.CANCELLED,
+    ],
+    [TaskStatus.BLOCKED]: [
+        TaskStatus.READY,
+        TaskStatus.CANCELLED,
+    ],
+    [TaskStatus.DONE]: [],
+    [TaskStatus.CANCELLED]: [],
+};
+/**
+ * 校验状态转换是否合法
+ */
+export function validateTransition(from, to) {
+    const allowed = VALID_TRANSITIONS[from];
+    if (!allowed)
+        return false;
+    return allowed.includes(to);
+}
+/**
+ * 校验状态转换，非法则抛异常
+ */
+export function assertTransition(from, to) {
+    if (!validateTransition(from, to)) {
+        throw new InvalidTransitionError(from, to);
+    }
+}
+/**
+ * 判断是否为终态（不可再转换）
+ */
+export function isTerminalStatus(status) {
+    return VALID_TRANSITIONS[status]?.length === 0;
+}
+/**
+ * 生成任务 ID
+ * 格式: ANYA-YYYYMMDD-NNN
+ */
+export function generateTaskId(sequence) {
+    const now = new Date();
+    const dateStr = now.toISOString().slice(0, 10).replace(/-/g, '');
+    const seqStr = String(sequence).padStart(3, '0');
+    return `${TASK_ID_PREFIX}-${dateStr}-${seqStr}`;
+}
+/**
+ * 解析任务 ID 中的日期和序号
+ */
+export function parseTaskId(taskId) {
+    const match = taskId.match(/^ANYA-(\d{8})-(\d{3})$/);
+    if (!match)
+        return null;
+    return {
+        date: match[1],
+        sequence: parseInt(match[2], 10),
+    };
+}
+//# sourceMappingURL=state-machine.js.map

package/packages/core/dist/types/audit.js

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+export const auditEventSchema = z.object({
+    id: z.number().optional(),
+    event_type: z.string(),
+    actor: z.string(),
+    task_id: z.string().nullable().optional(),
+    summary: z.string(),
+    detail: z.record(z.unknown()).nullable().optional(),
+    file_ref: z.string().nullable().optional(),
+    created_at: z.string().datetime().optional(),
+});
+//# sourceMappingURL=audit.js.map

package/packages/core/dist/types/backend.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backend.js.map

package/packages/core/dist/types/commitment.js

@@ -0,0 +1,17 @@
+/**
+ * @deprecated 此模块已废弃，改为 Agent 自主判断/使用 memory 系统。
+ * 保留此文件仅为兼容历史数据，新代码请勿使用。
+ */
+import { z } from 'zod';
+import { CommitmentStatus } from '../constants.js';
+export const commitmentSchema = z.object({
+    id: z.number().optional(),
+    task_id: z.string(),
+    promised_to: z.string(),
+    promise: z.string(),
+    deadline: z.string().datetime().nullable().optional(),
+    status: z.nativeEnum(CommitmentStatus).default('active'),
+    break_reason: z.string().nullable().optional(),
+    promised_at: z.string().datetime().optional(),
+});
+//# sourceMappingURL=commitment.js.map

package/packages/core/dist/types/communication.js

@@ -0,0 +1,18 @@
+/**
+ * @deprecated 此模块已废弃，改为 Agent 自主判断/使用 memory 系统。
+ * 保留此文件仅为兼容历史数据，新代码请勿使用。
+ */
+import { z } from 'zod';
+import { IntentLevel } from '../constants.js';
+export const communicationEventSchema = z.object({
+    id: z.number().optional(),
+    source_type: z.enum(['feishu', 'file']),
+    source_ref: z.string().nullable().optional(),
+    intent_level: z.nativeEnum(IntentLevel),
+    sender: z.string().nullable().optional(),
+    summary: z.string(),
+    raw_content_path: z.string().nullable().optional(),
+    opportunity_id: z.string().nullable().optional(),
+    created_at: z.string().datetime().optional(),
+});
+//# sourceMappingURL=communication.js.map

package/packages/core/dist/types/index.js

@@ -0,0 +1,8 @@
+export * from './task.js';
+export * from './commitment.js';
+export * from './opportunity.js';
+export * from './audit.js';
+export * from './communication.js';
+export * from './org.js';
+export * from './backend.js';
+//# sourceMappingURL=index.js.map

package/packages/core/dist/types/opportunity.js

@@ -0,0 +1,27 @@
+/**
+ * @deprecated 此模块已废弃，改为 Agent 自主判断/使用 memory 系统。
+ * 保留此文件仅为兼容历史数据，新代码请勿使用。
+ */
+import { z } from 'zod';
+import { OpportunityStatus } from '../constants.js';
+export const opportunityScoreSchema = z.object({
+    impact: z.number().min(0).max(1),
+    urgency: z.number().min(0).max(1),
+    feasibility: z.number().min(0).max(1),
+    permission: z.number().min(0).max(1),
+});
+export const opportunitySchema = z.object({
+    id: z.string(),
+    status: z.nativeEnum(OpportunityStatus).default('detected'),
+    source_ref: z.string().nullable().optional(),
+    summary: z.string(),
+    score_impact: z.number().nullable().optional(),
+    score_urgency: z.number().nullable().optional(),
+    score_feasibility: z.number().nullable().optional(),
+    score_permission: z.number().nullable().optional(),
+    total_score: z.number().nullable().optional(),
+    converted_task_id: z.string().nullable().optional(),
+    detected_at: z.string().datetime().optional(),
+    claimed_at: z.string().datetime().nullable().optional(),
+});
+//# sourceMappingURL=opportunity.js.map

package/packages/core/dist/types/org.js

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export const orgMemberSchema = z.object({
+    member_id: z.string(),
+    name: z.string(),
+    role: z.string().nullable().optional(),
+    team: z.string().nullable().optional(),
+    timezone: z.string().nullable().optional(),
+    profile_path: z.string().nullable().optional(),
+    response_pattern: z.string().nullable().optional(),
+    updated_at: z.string().datetime().optional(),
+});
+export const ownershipSchema = z.object({
+    id: z.number().optional(),
+    scope: z.enum(['repo', 'module']),
+    target: z.string(),
+    member_id: z.string(),
+    role: z.string().default('owner'),
+});
+export const escalationRuleSchema = z.object({
+    id: z.number().optional(),
+    scope: z.string().default('global'),
+    after_minutes: z.number(),
+    action: z.enum(['notify', 'escalate']),
+    targets: z.array(z.string()),
+});
+//# sourceMappingURL=org.js.map

package/packages/core/dist/types/task.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+import { TaskStatus } from '../constants.js';
+// ── Zod Schemas ──
+export const taskSourceSchema = z.object({
+    type: z.enum(['file', 'feishu', 'meeting_note', 'manual']),
+    ref: z.string().optional(),
+    received_at: z.string().datetime().optional(),
+});
+export const clarificationSchema = z.object({
+    id: z.number().optional(),
+    question: z.string(),
+    answer: z.string().nullable().optional(),
+    asked_by: z.string().default('loid'),
+    answered_by: z.string().nullable().optional(),
+    asked_at: z.string().datetime().optional(),
+    answered_at: z.string().datetime().nullable().optional(),
+});
+export const taskSchema = z.object({
+    task_id: z.string(),
+    title: z.string(),
+    status: z.nativeEnum(TaskStatus),
+    // 来源
+    source_type: z.enum(['file', 'feishu', 'meeting_note', 'manual']),
+    source_ref: z.string().nullable().optional(),
+    // 需求定义
+    objective: z.string().nullable().optional(),
+    acceptance_criteria: z.array(z.string()).optional(),
+    context: z.string().nullable().optional(),
+    // 执行指引
+    execution_guidance: z.string().nullable().optional(),
+    // 执行信息
+    project_id: z.string().nullable().optional(),
+    assignee: z.string().nullable().optional(),
+    deliverable_summary: z.string().nullable().optional(),
+    // 重试与阻塞
+    retry_count: z.number().default(0),
+    max_retries: z.number().default(3),
+    blocked_reason: z.string().nullable().optional(),
+    blocked_since: z.string().datetime().nullable().optional(),
+    // 文件路径
+    workspace_path: z.string().nullable().optional(),
+    // 时间戳
+    created_at: z.string().datetime().optional(),
+    updated_at: z.string().datetime().optional(),
+});
+//# sourceMappingURL=task.js.map

package/packages/core/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@team-anya/core",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "dependencies": {
+    "zod": "^3.24.0"
+  }
+}