cli-fleet 0.1.0__py3-none-any.whl

cli_fleet/scripts/examples/hunt-layerzero.json

@@ -0,0 +1,30 @@
+{
+  "meta_team": "hunt-lz",
+  "project_dir": "/media/phantom-orchestrator/Elements1/Ubuntu/bounty-recon",
+  "teams": [
+    {
+      "name": "team-evm-v1",
+      "role": "Hunt V1 EVM contracts — UltraLightNodeV2, Endpoint V1, FPValidator ($15M cap each)",
+      "teammates": 3,
+      "task": "Create an agent team with 3 teammates to hunt Critical bugs in LayerZero V1 EVM contracts. These are the highest-value targets ($15M cap). Contracts: UltraLightNodeV2 (0x4D73AdB72bC3DD368966edD0f0b2148401A178E2, $412.5M TVL), Endpoint V1 (0x66A71Dcef29A0fFBDBE3c6a460a3B5BC225Cd675), FPValidator (0x07245eEa05826F5984c7c3C8F478b04892e4df89). Source: /home/phantom-orchestrator/Documents/Bug Bounty/layerzero/LayerZero/contracts/. Run: /home/phantom-orchestrator/bin/hunt-auto evm on each contract. Chase every finding. Focus on fund theft, permanent DoS, nonce manipulation. Post all findings to cross-team mailbox immediately."
+    },
+    {
+      "name": "team-evm-v2",
+      "role": "Hunt V2 EVM protocol contracts — EndpointV2, SendULN302, ReceiveULN302, DVN ($2M cap)",
+      "teammates": 3,
+      "task": "Create an agent team with 3 teammates to hunt Critical/High bugs in LayerZero V2 EVM contracts. Contracts: EndpointV2 (0x1a44076050125825900e736c501f859c50fE728c), SendULN302 (0xBb2ea70C9E858123480642Cf96acbcCE1372dce1), ReceiveULN302 (0xc02Ab410f0734EFa3F14628780e6e695156024C2), DVN (0x589dEDbD617e0CBcB916A9223F4d1300c294236b), SendULN301 (0xD231084BfB234C107D3eE2b22F97F3346fDAF705), ReceiveULN301 (0x245B6e8FFe9ea5Fc301e32d16F66bD4C2123EeFc). Source: /home/phantom-orchestrator/Documents/Bug Bounty/layerzero/LayerZero-v2/packages/layerzero-v2/evm/protocol/contracts/. Run: /home/phantom-orchestrator/bin/hunt-auto evm. Focus on DVN verification bypass, payload hash manipulation, fee accounting bugs."
+    },
+    {
+      "name": "team-crosschain",
+      "role": "Hunt cross-chain exploit chains — encoding mismatches, nonce desync, composed msg attacks ($2M-$15M)",
+      "teammates": 4,
+      "task": "Create an agent team with 4 teammates to hunt cross-chain exploit chains in LayerZero. This is the highest-value unexplored surface. NO single-chain bugs — ONLY cross-chain vectors. One teammate per attack surface: (1) Address encoding mismatches: EVM 20-byte vs Solana 32-byte vs TON 267-bit — test padding/truncation in bytes32 conversion. Wrong recipient = fund loss = Critical. (2) Nonce desync: V2 lazy inbound nonce + out-of-order delivery. Can you brick a channel by delivering messages out of order across chain pairs? (3) Executor gas: EVM gas vs Solana compute units vs TON gas. Force underpayment causing partial lzReceive execution. (4) Composed messages: lzCompose A→B→C chaining. Circular compose, manipulated composed data, orphaned state. Use tools: /home/phantom-orchestrator/bin/t xchain-abi-check, xchain-fuzz, xchain-tracer. All tests MUST use multi-fork harness (srcFork + dstFork)."
+    },
+    {
+      "name": "team-non-evm",
+      "role": "Hunt Solana + TON + Aptos contracts ($2M cap)",
+      "teammates": 3,
+      "task": "Create an agent team with 3 teammates, one per chain. Solana teammate: hunt DVN (4VDjp6XQ), EndpointV2 (76y77prs), SendULN302 (6doghB24), ReceiveULN302 (7a4WjyR8), OFT. Source: /home/phantom-orchestrator/Documents/Bug Bounty/layerzero/LayerZero-v2/packages/layerzero-v2/solana/. Run: /home/phantom-orchestrator/bin/hunt-auto solana. TON teammate: hunt Controller (0:1eb2bb), ULNManager (0:150645), DVNProxy (0:0d122d). Source: .../ton/. Run: /home/phantom-orchestrator/bin/hunt-auto ton. Aptos teammate: hunt Endpoint (0x54ad3d). Source: .../aptos/. Run: /home/phantom-orchestrator/bin/hunt-auto aptos. All: focus on chain-specific bugs that EVM tools miss. Share findings cross-team especially with team-crosschain."
+    }
+  ]
+}

cli_fleet/scripts/examples/openwindows-milestone2.json

@@ -0,0 +1,34 @@
+{
+  "meta_team": "ow-m2",
+  "project_dir": "/mnt/win-img/openwindows",
+  "teams": [
+    {
+      "name": "brain-ntdll",
+      "role": "Deep analysis and reimplementation of ntdll functions that real apps need",
+      "mode": "brain-stream",
+      "teammates": 3,
+      "task": "Investigate ntdll.dll functions that PowerShell and real Windows apps import. We have 23 of 2,455 exports implemented. The r2 analysis data is at /mnt/win-img/categorized/deep-analysis/tier-0/ntdll.dll-deep.json. The current implementation is at /mnt/win-img/openwindows/src/ntdll/ntdll.c. Focus on: RtlAllocateHeap, RtlFreeHeap (real heap, not stubs), NtCreateFile/NtOpenFile (already stubbed but need real implementation), RtlInitUnicodeString family, exception handling (RtlVirtualUnwind, RtlCaptureContext — these are called by 32 DLLs). The OpenWindows project runs unmodified Windows binaries on Linux by reimplementing the Win32 API. Start neurons on the highest-import-count functions."
+    },
+    {
+      "name": "brain-advapi32",
+      "role": "Design and implement advapi32.dll — security, registry, service APIs",
+      "mode": "brain-stream",
+      "teammates": 3,
+      "task": "Investigate advapi32.dll for reimplementation. It has 870 exports and is imported by 1,775 binaries. The r2 analysis is at /mnt/win-img/categorized/deep-analysis/tier-1/advapi32.dll-deep.json. PowerShell needs advapi32 for: RegOpenKeyExW/RegQueryValueExW (registry — we have basic stubs in kernelbase/registry.c), security token functions (OpenProcessToken, GetTokenInformation), service control (OpenSCManager, StartService — can stub for now), crypto basics (CryptAcquireContext). The existing registry implementation is at /mnt/win-img/openwindows/src/kernelbase/registry.c. advapi32 on real Windows mostly forwards to kernelbase, so many functions can be thin wrappers. Start neurons on what PowerShell actually imports from advapi32."
+    },
+    {
+      "name": "brain-loader",
+      "role": "Improve the PE loader — LoadLibrary, DLL dependencies, thread creation",
+      "mode": "brain-stream",
+      "teammates": 3,
+      "task": "Investigate what the OpenWindows PE loader needs to run PowerShell and real apps. Current loader at /mnt/win-img/openwindows/src/loader/pe_loader.c can load a single .exe and resolve imports against built-in DLLs. It CANNOT: dynamically load DLLs via LoadLibrary (returns NULL), load dependent DLLs that the .exe imports (only resolves against built-in reimplementations), create threads (CreateThread is stubbed). PowerShell.exe imports from ~30 DLLs. Many of these are api-ms-win-* shims that forward to kernelbase (we handle this). But some are real DLLs we'd need to load from the extracted Windows image: clrjit.dll, mscorlib.dll (.NET), or we need to provide our own. Start neurons on: what does LoadLibraryExW need to do, what DLLs does PowerShell actually need, can we load real Windows DLLs from the extracted image and resolve their imports too."
+    },
+    {
+      "name": "team-fixes",
+      "role": "Fix remaining code review issues and build test infrastructure",
+      "mode": "standard",
+      "teammates": 3,
+      "task": "Fix the remaining issues from the adversarial code review. Issues to fix: (1) _onexit/_initterm callbacks call Win64 function pointers with SysV ABI — need reverse-thunk wrappers in msvcrt.c. (2) ow_signal passes Win64 handler to Linux signal() — make it a no-op stub returning SIG_DFL. (3) Format parser in narrow_format_args() missing %f/%e/%g/%o specifiers and default case doesn't consume args — add float handling and fix arg consumption. (4) thunks.S WIN2LINUX macro can't forward 5+ args — migrate remaining thunks.S functions to use generate_thunk() from thunk_gen.c. (5) Remove startup printf noise from msvcrt registration. All code is at /mnt/win-img/openwindows/. Run bash tests/test_cmd.sh after every fix to verify no regressions."
+    }
+  ]
+}

cli_fleet/scripts/hooks/check-mailbox.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# Hook: check-mailbox.sh
+# Type: UserPromptSubmit — injects cross-team messages as additional context
+# Install: add to settings.json hooks.UserPromptSubmit
+#
+# Env vars expected:
+#   META_TEAM_NAME  — name of the meta-team (e.g., "hunt-lz")
+#   TEAM_NAME       — this team's name (e.g., "team-evm-v1")
+
+set -euo pipefail
+
+META_DIR="${META_TEAM_DIR:-$HOME/.claude/meta-teams}"
+META_TEAM="${META_TEAM_NAME:-}"
+TEAM="${TEAM_NAME:-}"
+
+# Skip if not in a multi-team context
+[[ -z "$META_TEAM" || -z "$TEAM" ]] && exit 0
+
+DIR="$META_DIR/$META_TEAM"
+[[ ! -d "$DIR/mailbox" ]] && exit 0
+
+CURSOR_FILE="$DIR/status/${TEAM}.cursor"
+LAST_READ="0"
+[[ -f "$CURSOR_FILE" ]] && LAST_READ=$(cat "$CURSOR_FILE")
+
+NEW_MESSAGES=""
+LATEST_TS="$LAST_READ"
+
+for msg_file in "$DIR/mailbox/"*.json; do
+    [[ ! -f "$msg_file" ]] && continue
+
+    basename=$(basename "$msg_file")
+    msg_ts="${basename%%-*}"
+
+    # Skip already-read
+    (( msg_ts <= LAST_READ )) && continue
+
+    # Check if message is for us or broadcast
+    to=$(python3 -c "import json; print(json.load(open('$msg_file'))['to'])" 2>/dev/null || echo "")
+    if [[ "$to" == "$TEAM" || "$to" == "all" ]]; then
+        from=$(python3 -c "import json; print(json.load(open('$msg_file'))['from'])" 2>/dev/null || echo "unknown")
+        msg_type=$(python3 -c "import json; print(json.load(open('$msg_file'))['type'])" 2>/dev/null || echo "message")
+        content=$(python3 -c "import json; print(json.load(open('$msg_file'))['content'])" 2>/dev/null || echo "")
+
+        NEW_MESSAGES+="[CROSS-TEAM ${msg_type^^}] From ${from}: ${content}"$'\n'
+
+        (( msg_ts > LATEST_TS )) && LATEST_TS="$msg_ts"
+    fi
+done
+
+# Update cursor
+if (( LATEST_TS > LAST_READ )); then
+    mkdir -p "$DIR/status"
+    echo "$LATEST_TS" > "$CURSOR_FILE"
+fi
+
+# Output new messages as hook context (shows up in Claude's context)
+if [[ -n "$NEW_MESSAGES" ]]; then
+    echo "## Cross-Team Mailbox (${META_TEAM})"
+    echo ""
+    echo "$NEW_MESSAGES"
+    echo ""
+    echo "Reply to any team with: source multi-team/lib/protocol.sh && meta_send \"$META_TEAM\" \"$TEAM\" \"<target>\" \"<type>\" \"<content>\""
+fi

cli_fleet/scripts/hooks/consciousness-bridge.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# Hook: consciousness-bridge.sh
+# Type: UserPromptSubmit — bridges consciousness file signals to FleetCode mailbox
+# AND bridges FleetCode mailbox messages into the consciousness stream
+#
+# Two-way bridge:
+#   consciousness → mailbox (when neurons find critical stuff)
+#   mailbox → consciousness (when other brains send intel)
+
+set -uo pipefail
+
+META_DIR="${META_TEAM_DIR:-$HOME/.claude/meta-teams}"
+META_TEAM="${META_TEAM_NAME:-}"
+TEAM="${TEAM_NAME:-}"
+SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+
+[[ -z "$META_TEAM" || -z "$TEAM" ]] && exit 0
+
+DIR="$META_DIR/$META_TEAM"
+[[ ! -d "$DIR" ]] && exit 0
+
+# Find this team's consciousness file
+CONSCIOUSNESS="$DIR/workdirs/$TEAM/consciousness.md"
+[[ ! -f "$CONSCIOUSNESS" ]] && CONSCIOUSNESS="/tmp/brain-stream/$TEAM/consciousness.md"
+[[ ! -f "$CONSCIOUSNESS" ]] && exit 0
+
+# === INBOUND: FleetCode mailbox → consciousness stream ===
+# Read unread cross-team messages and inject them as stimuli
+CURSOR_FILE="$DIR/status/${TEAM}-brain.cursor"
+LAST_READ="0"
+[[ -f "$CURSOR_FILE" ]] && LAST_READ=$(cat "$CURSOR_FILE")
+
+LATEST_TS="$LAST_READ"
+for msg_file in "$DIR/mailbox/"*.json; do
+    [[ ! -f "$msg_file" ]] && continue
+    basename=$(basename "$msg_file")
+    msg_ts="${basename%%-*}"
+    (( msg_ts <= LAST_READ )) && continue
+
+    to=$(python3 -c "import json; print(json.load(open('$msg_file'))['to'])" 2>/dev/null || echo "")
+    if [[ "$to" == "$TEAM" || "$to" == "all" ]]; then
+        from=$(python3 -c "import json; print(json.load(open('$msg_file'))['from'])" 2>/dev/null || echo "unknown")
+        content=$(python3 -c "import json; print(json.load(open('$msg_file'))['content'])" 2>/dev/null || echo "")
+        msg_type=$(python3 -c "import json; print(json.load(open('$msg_file'))['type'])" 2>/dev/null || echo "message")
+
+        # Skip our own messages
+        [[ "$from" == "$TEAM" ]] && continue
+
+        # Inject into consciousness stream
+        echo "[$(date +%H:%M:%S)] CROSS-BRAIN($from): $content" >> "$CONSCIOUSNESS"
+
+        (( msg_ts > LATEST_TS )) && LATEST_TS="$msg_ts"
+    fi
+done
+
+if (( LATEST_TS > LAST_READ )); then
+    mkdir -p "$DIR/status"
+    echo "$LATEST_TS" > "$CURSOR_FILE"
+fi
+
+# === OUTBOUND: Also run the standard mailbox check ===
+# (The regular check-mailbox.sh handles injecting into Claude's context)
+
+exit 0

cli_fleet/scripts/hooks/stream-stall-check.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Hook: stream-stall-check.sh
+# Type: TeammateIdle — detects stalled brain streams
+# Exit code 2 = keep teammate working (stream stalled, needs stimulus)
+# Exit code 0 = allow idle
+
+set -uo pipefail
+
+CF="${CONSCIOUSNESS_FILE:-}"
+[[ -z "$CF" || ! -f "$CF" ]] && exit 0
+
+LAST_LINE=$(tail -1 "$CF" 2>/dev/null)
+[[ -z "$LAST_LINE" ]] && exit 0
+
+LAST_TIME=$(echo "$LAST_LINE" | grep -oP '\[\K[0-9:]+' 2>/dev/null || echo "")
+[[ -z "$LAST_TIME" ]] && exit 0
+
+NOW=$(date +%s)
+LAST_EPOCH=$(date -d "$LAST_TIME" +%s 2>/dev/null || echo 0)
+DIFF=$((NOW - LAST_EPOCH))
+
+if [[ $DIFF -gt 120 ]]; then
+    echo "Stream stalled for ${DIFF}s. Read $CF and inject a specific stimulus about an unexplored angle." >&2
+    exit 2
+fi
+
+exit 0

cli_fleet/scripts/hooks/task-completed.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# Hook: TaskCompleted — quality gate before marking tasks done
+# Exit code 2 = reject completion with feedback
+# Exit code 0 = allow completion
+
+set -uo pipefail
+
+META_DIR="${META_TEAM_DIR:-$HOME/.claude/meta-teams}"
+META_TEAM="${META_TEAM_NAME:-}"
+TEAM="${TEAM_NAME:-}"
+
+# Skip if not in multi-team context
+[[ -z "$META_TEAM" || -z "$TEAM" ]] && exit 0
+
+# Notify captain that a task was completed
+DIR="$META_DIR/$META_TEAM"
+[[ ! -d "$DIR" ]] && exit 0
+
+SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+source "$SCRIPT_DIR/lib/protocol.sh" 2>/dev/null || exit 0
+
+# Post status update so captain sees task completion in real-time
+meta_send "$META_TEAM" "$TEAM" "captain" "status" "Task completed by $TEAM" 2>/dev/null || true
+
+# Allow completion
+exit 0

cli_fleet/scripts/hooks/teammate-idle.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+# Hook: TeammateIdle — prevents teammates from quitting early
+# Exit code 2 = send feedback and keep teammate working
+# Exit code 0 = allow idle (teammate is done)
+#
+# Checks: did the teammate post findings? Did they run enough tools?
+# If not, exit 2 to push them back to work.
+
+set -uo pipefail
+
+META_DIR="${META_TEAM_DIR:-$HOME/.claude/meta-teams}"
+META_TEAM="${META_TEAM_NAME:-}"
+TEAM="${TEAM_NAME:-}"
+
+# Skip if not in multi-team context
+[[ -z "$META_TEAM" || -z "$TEAM" ]] && exit 0
+
+DIR="$META_DIR/$META_TEAM"
+[[ ! -d "$DIR" ]] && exit 0
+
+# Check if this team has posted any findings
+FINDING_COUNT=$(ls "$DIR/findings/${TEAM}-"*.json 2>/dev/null | wc -l)
+
+# Check unread messages (teammate might have new directives)
+CURSOR_FILE="$DIR/status/${TEAM}.cursor"
+LAST_READ="0"
+[[ -f "$CURSOR_FILE" ]] && LAST_READ=$(cat "$CURSOR_FILE")
+
+UNREAD=0
+for msg_file in "$DIR/mailbox/"*.json; do
+    [[ ! -f "$msg_file" ]] && continue
+    basename=$(basename "$msg_file")
+    msg_ts="${basename%%-*}"
+    (( msg_ts <= LAST_READ )) && continue
+    to=$(python3 -c "import json; print(json.load(open('$msg_file'))['to'])" 2>/dev/null || echo "")
+    if [[ "$to" == "$TEAM" || "$to" == "all" ]]; then
+        ((UNREAD++))
+    fi
+done
+
+# If there are unread messages, keep working
+if [[ $UNREAD -gt 0 ]]; then
+    echo "You have $UNREAD unread cross-team messages. Check your mailbox before going idle."
+    echo "Run: source $(dirname "$0")/../lib/protocol.sh && meta_read_messages \"$META_TEAM\" \"$TEAM\""
+    exit 2
+fi
+
+# Allow idle — teammate has handled everything
+exit 0