Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files. Monorepo (P0): - 7-package Bun + Turborepo + TypeScript monorepo - dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules Contracts (P0): - 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform) Storage & Events (P1): - DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds) - 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only) - EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor - Project/Session/Artifact/Evidence stores + 8-step Recovery Tools & Permission (P2): - PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor - PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt) - ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor - CapabilityManifestValidator + CapabilityRegistry LLM & Context (P3): - ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter - AnthropicAdapter + OpenAICompatibleAdapter - ProviderManager facade - PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler Worker IPC & Scheduler (P4): - WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake) - WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite) - 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner) - TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager - Scheduler (state machine), 8-step Recovery C++ Toolchain (P5): - DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder - CppTestRunner, CppcheckRunner, ClangdClient - CppToolRegistrar + capability manifest Projection & TUI (P6): - ProjectionStore (hydrate/apply/snapshot/subscribe) - TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud) - ProjectionClient in-process ref Agents & Knowledge (P7): - MainAgent, ArchitectureDesigner - DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model) - Role integration wiring CLI & Doctor & Release (P8): - Logger + DeveloperLogEncryptor (AES-256-GCM) - DoctorService (self_bootstrap first) - RuntimeApp + ServiceRegistry - 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release - CliEntrypoint + air<TODO> Audit (in AirPlan/docs/): - Deepseek开发阶段审计.md (97 findings) - Opus开发阶段审计.md (140+ findings, 18 P0 blockers) - MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability) - AirPlan/TODO.md (technical debt + 42 TODOs by phase) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
70 lines
2.3 KiB
TypeScript
Executable File
70 lines
2.3 KiB
TypeScript
Executable File
// contracts §18 — Capability Contracts
|
|
// File: capability.ts — CapabilityManifestV1, ValidationResult, CapabilityRegistry, trust levels
|
|
// Implements: interface-contracts-v1.md §18
|
|
|
|
import type { CapabilityID, JsonSchema, JsonObject } from "./ids.js"
|
|
import type { ToolCategory } from "./tool.js"
|
|
import type { ToolPermissionSpec } from "./permission.js"
|
|
import type { ToolRegistry } from "./tool.js"
|
|
|
|
// =============================================================================
|
|
// contracts §18 — Capability Contracts
|
|
// =============================================================================
|
|
|
|
/**
|
|
* Trust levels for capabilities, ordered from most trusted to least trusted.
|
|
* Trust affects default enablement/prompt posture but never bypasses
|
|
* ToolRegistry or PermissionEngine.
|
|
*/
|
|
export type CapabilityTrustLevel =
|
|
| "built_in" // Core AirCoding capabilities, always trusted
|
|
| "project_local" // Project-scoped capabilities, trusted within project
|
|
| "user_installed" // User-installed capabilities, moderate trust
|
|
| "verified_publisher" // Third-party from verified publishers
|
|
| "untrusted" // Unverified third-party capabilities
|
|
|
|
export interface CapabilityToolSpec {
|
|
name: string
|
|
version: number
|
|
category: ToolCategory
|
|
description: string
|
|
input_schema: JsonSchema
|
|
output_schema: JsonSchema
|
|
streaming?: boolean
|
|
permissions: ToolPermissionSpec
|
|
}
|
|
|
|
export interface CapabilityManifestV1 {
|
|
schema_version: 1 // Must be exactly 1 per DoD
|
|
capability_id: CapabilityID
|
|
display_name: string
|
|
version: string
|
|
description: string
|
|
publisher?: string
|
|
source: JsonObject
|
|
trust_level: CapabilityTrustLevel
|
|
tools: CapabilityToolSpec[]
|
|
dependencies?: JsonObject[]
|
|
permissions: JsonObject
|
|
events?: {
|
|
produced?: string[]
|
|
consumed?: string[]
|
|
}
|
|
artifact_types?: string[]
|
|
config_schema?: JsonSchema
|
|
entrypoint?: JsonObject
|
|
}
|
|
|
|
export interface ValidationResult {
|
|
ok: boolean
|
|
errors: string[]
|
|
warnings: string[]
|
|
}
|
|
|
|
export interface CapabilityRegistry {
|
|
discover(): Promise<CapabilityManifestV1[]>
|
|
validate(manifest: CapabilityManifestV1): Promise<ValidationResult>
|
|
enable(capability_id: CapabilityID): Promise<void>
|
|
disable(capability_id: CapabilityID): Promise<void>
|
|
register_tools(tool_registry: ToolRegistry): Promise<void>
|
|
} |