@a5c-ai/agent-platform 5.0.1-staging.016f0b0e8119

package/dist/daemon/types.d.ts

@@ -0,0 +1,93 @@
+/**
+ * GAP-REMOTE-001: Daemon Mode — Type definitions.
+ */
+import type { AutomationRule, TimerAutomationRule, WebhookAutomationRule } from "@a5c-ai/agent-comm-mux";
+export interface DaemonConfig {
+    workspace: string;
+    triggers: TriggerConfig[];
+    maxConcurrentRuns?: number;
+}
+export interface FileTriggerConfig {
+    type: "file";
+    pattern: string;
+    processId: string;
+    entrypoint: string;
+    debounceMs?: number;
+}
+export type TriggerConfig = FileTriggerConfig | AutomationRule;
+export interface FileTriggerEvent {
+    type: "file";
+    processId: string;
+    entrypoint: string;
+    inputs?: Record<string, unknown>;
+}
+export interface AutomationTriggerEvent {
+    type: "automation";
+    rule: AutomationRule;
+    inputs?: Record<string, unknown>;
+}
+export type TriggerEvent = FileTriggerEvent | AutomationTriggerEvent;
+export declare function isFileTriggerConfig(trigger: TriggerConfig): trigger is FileTriggerConfig;
+export declare function isTimerAutomationRule(trigger: TriggerConfig): trigger is TimerAutomationRule;
+export declare function isWebhookAutomationRule(trigger: TriggerConfig): trigger is WebhookAutomationRule;
+export declare function isFileTriggerEvent(event: TriggerEvent): event is FileTriggerEvent;
+export declare function isAutomationTriggerEvent(event: TriggerEvent): event is AutomationTriggerEvent;
+export interface LegacyTriggerConfig {
+    type: "file" | "webhook" | "timer";
+    processId: string;
+    entrypoint: string;
+    pattern?: string;
+    port?: number;
+    cron?: string;
+    debounceMs?: number;
+}
+export interface DaemonStartOptions {
+    daemonDir: string;
+    workspace: string;
+    foreground?: boolean;
+    config?: DaemonConfig;
+}
+export interface DaemonStartOutput {
+    pid: number;
+    daemonDir: string;
+    startedAt: string;
+}
+export interface DaemonStopOptions {
+    daemonDir: string;
+    gracePeriodMs?: number;
+}
+export interface DaemonStopOutput {
+    pid: number;
+    stoppedAt: string;
+}
+export interface DaemonStatusOptions {
+    daemonDir: string;
+}
+export interface DaemonStatusOutput {
+    running: boolean;
+    pid?: number;
+    uptime?: number;
+    startedAt?: string;
+    activeTriggers?: number;
+    pendingRuns?: number;
+}
+export interface FileWatcherHandle {
+    dispose(): void;
+}
+export interface WebhookListenerOptions {
+    rule: WebhookAutomationRule;
+    onTrigger: TriggerCallback;
+}
+export interface WebhookListenerHandle {
+    close(): Promise<void>;
+    port: number;
+}
+export type TriggerCallback = (trigger: TriggerEvent) => void | Promise<void>;
+export interface DaemonMetadata {
+    workspace: string;
+    startedAt: string;
+    triggers: TriggerConfig[];
+    maxConcurrentRuns: number;
+    pid: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/daemon/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAIhC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;AAErE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,iBAAiB,CAExF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,mBAAmB,CAE5F;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,qBAAqB,CAEhG;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,gBAAgB,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,sBAAsB,CAE7F;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,IAAI,IAAI,CAAC;CACjB;AAID,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAI9E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/daemon/types.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Daemon Mode — Type definitions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isFileTriggerConfig = isFileTriggerConfig;
+exports.isTimerAutomationRule = isTimerAutomationRule;
+exports.isWebhookAutomationRule = isWebhookAutomationRule;
+exports.isFileTriggerEvent = isFileTriggerEvent;
+exports.isAutomationTriggerEvent = isAutomationTriggerEvent;
+function isFileTriggerConfig(trigger) {
+    return "type" in trigger && trigger.type === "file";
+}
+function isTimerAutomationRule(trigger) {
+    return "trigger" in trigger && trigger.trigger.type === "timer";
+}
+function isWebhookAutomationRule(trigger) {
+    return "trigger" in trigger && trigger.trigger.type === "webhook";
+}
+function isFileTriggerEvent(event) {
+    return event.type !== "automation";
+}
+function isAutomationTriggerEvent(event) {
+    return event.type === "automation";
+}

package/dist/daemon/webhookListener.d.ts

@@ -0,0 +1,6 @@
+/**
+ * GAP-REMOTE-001: Webhook Listener — HTTP trigger endpoint.
+ */
+import type { WebhookListenerOptions, WebhookListenerHandle } from "./types";
+export declare function createWebhookListener(options: WebhookListenerOptions): Promise<WebhookListenerHandle>;
+//# sourceMappingURL=webhookListener.d.ts.map

package/dist/daemon/webhookListener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookListener.d.ts","sourceRoot":"","sources":["../../src/daemon/webhookListener.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAI7E,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA0EhC"}

package/dist/daemon/webhookListener.js

@@ -0,0 +1,110 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Webhook Listener — HTTP trigger endpoint.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookListener = createWebhookListener;
+const http = __importStar(require("node:http"));
+const MAX_BODY_BYTES = 1024 * 1024; // 1 MiB
+async function createWebhookListener(options) {
+    const { rule, onTrigger } = options;
+    const port = rule.trigger.port;
+    const path = rule.trigger.path ?? "/trigger";
+    const method = rule.trigger.method ?? "POST";
+    const authToken = rule.trigger.auth?.type === "bearer" ? rule.trigger.auth.token : undefined;
+    const server = http.createServer((req, res) => {
+        if (req.method !== method || req.url !== path) {
+            res.writeHead(404, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Not found" }));
+            return;
+        }
+        // Auth check
+        if (authToken) {
+            const authHeader = req.headers.authorization;
+            if (!authHeader || authHeader !== `Bearer ${authToken}`) {
+                res.writeHead(401, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Unauthorized" }));
+                return;
+            }
+        }
+        let body = "";
+        let bodySize = 0;
+        req.on("data", (chunk) => {
+            bodySize += chunk.length;
+            if (bodySize > MAX_BODY_BYTES) {
+                res.writeHead(413, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Payload too large" }));
+                req.destroy();
+                return;
+            }
+            body += chunk.toString();
+        });
+        req.on("end", () => {
+            try {
+                const payload = JSON.parse(body);
+                const inputs = typeof payload.inputs === "object" && payload.inputs !== null && !Array.isArray(payload.inputs)
+                    ? payload.inputs
+                    : undefined;
+                void onTrigger({
+                    type: "automation",
+                    rule,
+                    inputs,
+                });
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ ok: true }));
+            }
+            catch {
+                res.writeHead(400, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Invalid JSON body" }));
+            }
+        });
+    });
+    return new Promise((resolve, reject) => {
+        server.on("error", reject);
+        server.listen(port, () => {
+            const addr = server.address();
+            const actualPort = typeof addr === "object" && addr ? addr.port : port;
+            resolve({
+                port: actualPort,
+                async close() {
+                    return new Promise((res, rej) => {
+                        server.close((err) => (err ? rej(err) : res()));
+                    });
+                },
+            });
+        });
+    });
+}

package/dist/governance/authority.d.ts

@@ -0,0 +1,68 @@
+/**
+ * GAP-SEC: Authority Chain system.
+ *
+ * Models delegation chains from human principals through agent principals,
+ * with monotonically narrowing scope at each hop.
+ */
+import type { MandateScope } from './mandate';
+/** A principal (human or agent) in the authority chain. */
+export interface AuthorityPrincipal {
+    kind: 'human' | 'agent';
+    id: string;
+    displayName: string;
+}
+/** A single grant of authority from one principal to another. */
+export interface AuthorityGrant {
+    from: AuthorityPrincipal;
+    to: AuthorityPrincipal;
+    scope: MandateScope;
+    grantedAt: string;
+    revokedAt?: string;
+    expiresAt?: string;
+}
+/** A link in the authority chain (wrapping a grant). */
+export interface AuthorityChainLink {
+    grant: AuthorityGrant;
+    index: number;
+}
+/** A full authority chain from root to leaf. */
+export interface AuthorityChain {
+    grants: AuthorityGrant[];
+    rootPrincipal: AuthorityPrincipal;
+    effectiveScope: MandateScope;
+}
+/** Result of chain validation. */
+export interface AuthorityChainValidationResult {
+    valid: boolean;
+    reason?: string;
+}
+/** Result of tracing authority to a human root. */
+export interface AuthorityTrace {
+    humanPrincipal: AuthorityPrincipal;
+    hopCount: number;
+    principalPath: string[];
+}
+/**
+ * Create an authority chain from an ordered list of grants.
+ * Computes the effective scope as the intersection of all grant scopes.
+ */
+export declare function createAuthorityChain(grants: AuthorityGrant[]): AuthorityChain;
+/**
+ * Validate an authority chain. Checks:
+ * 1. Root must be a human principal.
+ * 2. No revoked links.
+ * 3. No expired links.
+ * 4. Scopes monotonically narrow (no expansion).
+ */
+export declare function validateAuthorityChain(chain: AuthorityChain): AuthorityChainValidationResult;
+/**
+ * Attenuate (intersect) two scopes. The result is never wider than either input.
+ * Pure function.
+ */
+export declare function attenuateScope(parent: MandateScope, child: MandateScope): MandateScope;
+/**
+ * Trace authority back to the human root, returning the human principal,
+ * hop count, and full principal path.
+ */
+export declare function traceAuthorityToHuman(chain: AuthorityChain): AuthorityTrace;
+//# sourceMappingURL=authority.d.ts.map

package/dist/governance/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/governance/authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAM9C,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,kBAAkB,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,kBAAkB,CAAC;IAClC,cAAc,EAAE,YAAY,CAAC;CAC9B;AAED,kCAAkC;AAClC,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,kBAAkB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,cAAc,CAkB7E;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,8BAA8B,CAiC5F;AA2BD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAqBtF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAW3E"}

package/dist/governance/authority.js

@@ -0,0 +1,136 @@
+"use strict";
+/**
+ * GAP-SEC: Authority Chain system.
+ *
+ * Models delegation chains from human principals through agent principals,
+ * with monotonically narrowing scope at each hop.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthorityChain = createAuthorityChain;
+exports.validateAuthorityChain = validateAuthorityChain;
+exports.attenuateScope = attenuateScope;
+exports.traceAuthorityToHuman = traceAuthorityToHuman;
+// ---------------------------------------------------------------------------
+// Core functions
+// ---------------------------------------------------------------------------
+/**
+ * Create an authority chain from an ordered list of grants.
+ * Computes the effective scope as the intersection of all grant scopes.
+ */
+function createAuthorityChain(grants) {
+    if (grants.length === 0) {
+        throw new Error('Authority chain requires at least one grant');
+    }
+    const rootPrincipal = grants[0].from;
+    // Compute effective scope as intersection of all grant scopes
+    let effectiveScope = { ...grants[0].scope, allowedEffectKinds: [...grants[0].scope.allowedEffectKinds] };
+    for (let i = 1; i < grants.length; i++) {
+        effectiveScope = attenuateScope(effectiveScope, grants[i].scope);
+    }
+    return {
+        grants: [...grants],
+        rootPrincipal,
+        effectiveScope,
+    };
+}
+/**
+ * Validate an authority chain. Checks:
+ * 1. Root must be a human principal.
+ * 2. No revoked links.
+ * 3. No expired links.
+ * 4. Scopes monotonically narrow (no expansion).
+ */
+function validateAuthorityChain(chain) {
+    // 1. Root must be human
+    if (chain.rootPrincipal.kind !== 'human') {
+        return { valid: false, reason: 'Authority chain must be rooted in a human principal' };
+    }
+    const now = Date.now();
+    for (let i = 0; i < chain.grants.length; i++) {
+        const grant = chain.grants[i];
+        // 2. No revoked links
+        if (grant.revokedAt) {
+            return { valid: false, reason: `Grant at index ${i} has been revoked` };
+        }
+        // 3. No expired links
+        if (grant.expiresAt && new Date(grant.expiresAt).getTime() <= now) {
+            return { valid: false, reason: `Grant at index ${i} has expired` };
+        }
+        // 4. Scope must not expand beyond previous grant
+        if (i > 0) {
+            const parentScope = chain.grants[i - 1].scope;
+            const childScope = grant.scope;
+            if (!isScopeSubsetOrEqual(parentScope, childScope)) {
+                return { valid: false, reason: `Grant at index ${i} expands scope beyond parent` };
+            }
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Check if childScope is a subset of or equal to parentScope.
+ */
+function isScopeSubsetOrEqual(parent, child) {
+    // Check effect kinds
+    const parentWildcard = parent.allowedEffectKinds.length === 1 && parent.allowedEffectKinds[0] === '*';
+    if (!parentWildcard) {
+        for (const kind of child.allowedEffectKinds) {
+            if (kind === '*') {
+                return false; // wildcard child cannot escape non-wildcard parent
+            }
+            if (!parent.allowedEffectKinds.includes(kind)) {
+                return false;
+            }
+        }
+    }
+    // Check numeric limits
+    if (child.maxIterations > parent.maxIterations)
+        return false;
+    if (child.maxConcurrentTasks > parent.maxConcurrentTasks)
+        return false;
+    if (child.timeoutMs > parent.timeoutMs)
+        return false;
+    return true;
+}
+/**
+ * Attenuate (intersect) two scopes. The result is never wider than either input.
+ * Pure function.
+ */
+function attenuateScope(parent, child) {
+    const parentWildcard = parent.allowedEffectKinds.length === 1 && parent.allowedEffectKinds[0] === '*';
+    const childWildcard = child.allowedEffectKinds.length === 1 && child.allowedEffectKinds[0] === '*';
+    let allowedEffectKinds;
+    if (parentWildcard && childWildcard) {
+        allowedEffectKinds = ['*'];
+    }
+    else if (parentWildcard) {
+        allowedEffectKinds = [...child.allowedEffectKinds];
+    }
+    else if (childWildcard) {
+        allowedEffectKinds = [...parent.allowedEffectKinds];
+    }
+    else {
+        allowedEffectKinds = parent.allowedEffectKinds.filter(k => child.allowedEffectKinds.includes(k));
+    }
+    return {
+        allowedEffectKinds,
+        maxIterations: Math.min(parent.maxIterations, child.maxIterations),
+        maxConcurrentTasks: Math.min(parent.maxConcurrentTasks, child.maxConcurrentTasks),
+        timeoutMs: Math.min(parent.timeoutMs, child.timeoutMs),
+    };
+}
+/**
+ * Trace authority back to the human root, returning the human principal,
+ * hop count, and full principal path.
+ */
+function traceAuthorityToHuman(chain) {
+    const principalPath = [chain.grants[0].from.id];
+    for (const grant of chain.grants) {
+        principalPath.push(grant.to.id);
+    }
+    return {
+        humanPrincipal: chain.rootPrincipal,
+        hopCount: chain.grants.length,
+        principalPath,
+    };
+}

package/dist/governance/bridge.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Bridge from existing breakpoint rules to governance policies (GAP-SEC-001).
+ * Converts BreakpointRule[] into PolicyRule[] for unified evaluation.
+ */
+import type { BreakpointRule } from "@a5c-ai/babysitter-sdk";
+import type { PolicyRule } from './types';
+/**
+ * Convert breakpoint auto-approval rules into governance policy rules.
+ *
+ * Mapping:
+ * - "auto-approve" → allow policy (permission kind)
+ * - "never-auto-approve" → deny policy (permission kind)
+ *
+ * The breakpoint pattern is mapped to a "matches" condition on the taskId field.
+ */
+export declare function breakpointRulesToPolicies(rules: BreakpointRule[]): PolicyRule[];
+//# sourceMappingURL=bridge.d.ts.map

package/dist/governance/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/governance/bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAkB/E"}

package/dist/governance/bridge.js

@@ -0,0 +1,46 @@
+"use strict";
+/**
+ * Bridge from existing breakpoint rules to governance policies (GAP-SEC-001).
+ * Converts BreakpointRule[] into PolicyRule[] for unified evaluation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.breakpointRulesToPolicies = breakpointRulesToPolicies;
+/**
+ * Convert breakpoint auto-approval rules into governance policy rules.
+ *
+ * Mapping:
+ * - "auto-approve" → allow policy (permission kind)
+ * - "never-auto-approve" → deny policy (permission kind)
+ *
+ * The breakpoint pattern is mapped to a "matches" condition on the taskId field.
+ */
+function breakpointRulesToPolicies(rules) {
+    return rules.map(rule => ({
+        id: `bp-bridge:${rule.id}`,
+        kind: 'permission',
+        condition: {
+            field: 'taskId',
+            op: 'matches',
+            value: globToRegex(rule.pattern),
+        },
+        action: rule.action === 'auto-approve' ? 'allow' : 'deny',
+        priority: rule.action === 'never-auto-approve' ? 100 : 50,
+        metadata: {
+            source: 'breakpoint-bridge',
+            originalPattern: rule.pattern,
+            createdBy: rule.createdBy,
+            ...(rule.note ? { note: rule.note } : {}),
+        },
+    }));
+}
+/**
+ * Convert a simple glob pattern to a regex string.
+ * Supports * (any chars) and ? (single char).
+ */
+function globToRegex(glob) {
+    const escaped = glob
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*/g, '.*')
+        .replace(/\?/g, '.');
+    return `^${escaped}$`;
+}

package/dist/governance/builtins.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Built-in governance policy rules (GAP-SEC-001).
+ * Ready-to-use policy factories for common constraints.
+ */
+import type { PolicyRule, StatefulPolicyRule } from './types';
+/**
+ * Deny effects when the iteration count exceeds a limit.
+ */
+export declare function maxIterationsPolicy(limit: number): PolicyRule;
+/**
+ * Deny effects whose effectKind is not in the allowed list.
+ * Implemented as a deny rule that matches effectKinds NOT in the list.
+ *
+ * Since condition ops are single-value, this creates one deny rule per
+ * disallowed kind by using a special "neq" with a runtime check.
+ * For simplicity, we use a "matches" regex that rejects non-matching kinds.
+ */
+export declare function taskKindPolicy(allowedKinds: string[]): PolicyRule;
+/**
+ * Deny effects when the rate exceeds maxCount within windowMs.
+ * Uses an in-memory sliding window counter via StatefulPolicyRule.
+ * Note: counter resets on process restart (in-memory only).
+ */
+export declare function rateLimitPolicy(windowMs: number, maxCount: number): StatefulPolicyRule;
+//# sourceMappingURL=builtins.d.ts.map

package/dist/governance/builtins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../src/governance/builtins.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAA2B,MAAM,SAAS,CAAC;AAEvF;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAS7D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,UAAU,CAUjE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAqBtF"}

package/dist/governance/builtins.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * Built-in governance policy rules (GAP-SEC-001).
+ * Ready-to-use policy factories for common constraints.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maxIterationsPolicy = maxIterationsPolicy;
+exports.taskKindPolicy = taskKindPolicy;
+exports.rateLimitPolicy = rateLimitPolicy;
+/**
+ * Deny effects when the iteration count exceeds a limit.
+ */
+function maxIterationsPolicy(limit) {
+    return {
+        id: `builtin:max-iterations:${limit}`,
+        kind: 'resource-limit',
+        condition: { field: 'iteration', op: 'gt', value: String(limit) },
+        action: 'deny',
+        priority: 90,
+        metadata: { description: `Deny when iteration exceeds ${limit}` },
+    };
+}
+/**
+ * Deny effects whose effectKind is not in the allowed list.
+ * Implemented as a deny rule that matches effectKinds NOT in the list.
+ *
+ * Since condition ops are single-value, this creates one deny rule per
+ * disallowed kind by using a special "neq" with a runtime check.
+ * For simplicity, we use a "matches" regex that rejects non-matching kinds.
+ */
+function taskKindPolicy(allowedKinds) {
+    const pattern = `^(?!${allowedKinds.map(k => k.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|')}$)`;
+    return {
+        id: `builtin:task-kind:${allowedKinds.join(',')}`,
+        kind: 'permission',
+        condition: { field: 'effectKind', op: 'matches', value: pattern },
+        action: 'deny',
+        priority: 80,
+        metadata: { description: `Only allow effect kinds: ${allowedKinds.join(', ')}` },
+    };
+}
+/**
+ * Deny effects when the rate exceeds maxCount within windowMs.
+ * Uses an in-memory sliding window counter via StatefulPolicyRule.
+ * Note: counter resets on process restart (in-memory only).
+ */
+function rateLimitPolicy(windowMs, maxCount) {
+    let timestamps = [];
+    return {
+        id: `builtin:rate-limit:${maxCount}per${windowMs}ms`,
+        kind: 'rate-limit',
+        // Declarative condition is a no-op placeholder; shouldMatch does the real work
+        condition: { field: '__rate_limit__', op: 'eq', value: '__stateful__' },
+        action: 'deny',
+        priority: 95,
+        metadata: {
+            description: `Rate limit: ${maxCount} per ${windowMs}ms`,
+        },
+        shouldMatch(_context) {
+            const now = Date.now();
+            // Evict expired timestamps with filter (O(n) but no shift overhead)
+            timestamps = timestamps.filter(t => t > now - windowMs);
+            timestamps.push(now);
+            return timestamps.length > maxCount;
+        },
+    };
+}