@de-otio/repo-aegis-llm
LLM-assisted helpers for repo-aegis: Ollama HTTP client, prose extraction, marker-token suggestion (Phase 2), and per-engagement embedding profiles for the centralised semantic sweep (Phase 3). Both phases are implemented; the public surface listed below is stable.
Internal — do not depend on this package directly. It is consumed by
@de-otio/repo-aegis (the CLI's suggest-markers verb) and
@de-otio/repo-aegis-scan (the --semantic sweep and
rebuild-profiles verb). The deterministic gate code in
@de-otio/repo-aegis-core does not depend on this package, and the
import-graph guard test in packages/core/src/import-graph.test.ts
enforces that.
What's in here
| Module | Phase | Purpose |
|---|---|---|
ollama-client.ts | 2 + 3 | chat, embed, cosine. Endpoint validation [SEC H-1] (loopback-only by default; localhost is DNS-checked to defeat /etc/hosts redirection). No retries, no fallbacks. |
prose-extraction.ts | 2 + 3 | Walks a repo to gather prose for the LLM. Hard-skips secrets / .git / .ssh / .aws / .gnupg. [SEC C-1, H-4] realpath / TOCTOU defence. [SEC M-2] resource caps. [SEC C-2] author-domain remote-egress guard. |
synthesis.ts | 2 | Synthesise word-boundary regexes per token kind (company, codename, person-name, domain, ticket-prefix, account-id, other). [SEC M-4] Unicode-safe boundaries. |
filters.ts | 2 | Filter dictionary words, dependency names, existing patterns. Pure functions. |
token-extraction.ts | 2 | Token-extraction prompt (TOKEN_EXTRACTION_PROMPT_V1). [SEC C-3] anti-injection preamble + fence delimiters. Zod-validated response. |
profile.ts | 3 | Build, write, read, diff per-engagement embedding profiles. Atomic tmp+fsync+rename [SEC M-5]. sha256-stamped manifest [SEC H-3]. |
exceptions.ts | 2 + 3 | Ollama-client errors: RemoteEndpointDisallowedError (REMOTE_DISALLOWED / URL_PARSE), OllamaError. (Module-local errors — RootContainmentError, BundleFenceCollisionError, BundleTooLargeError — live in prose-extraction.ts / token-extraction.ts.) |
Why this is a separate package
The deterministic gate (PostToolUse hook, pre-commit hook,
repo-aegis check) must stay fast, offline, and free of
heavy runtime dependencies (not measured here: each hook invocation is a
Node process start). Splitting LLM-adjacent code into its own
package keeps core lean and makes the hot-path independence property
machine-checkable. See
doc/design/zero-config-onboarding.md
for the rationale.
License
GPL-3.0-or-later. Copyright (C) 2026 Richard Myers and contributors.
A De Otio tool — https://de-otio.org.