@a5c-ai/agent-platform 5.0.1-staging.b436b3b3e611

package/dist/daemon/loop.js

@@ -0,0 +1,196 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Daemon Loop — main event loop with concurrent run pool.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDaemonLoop = runDaemonLoop;
+exports.readDaemonLoopStatus = readDaemonLoopStatus;
+const node_fs_1 = require("node:fs");
+const path = __importStar(require("node:path"));
+const types_1 = require("./types");
+const fileWatcher_1 = require("./fileWatcher");
+const webhookListener_1 = require("./webhookListener");
+const timerScheduler_1 = require("./timerScheduler");
+const daemonLog_1 = require("./daemonLog");
+async function runDaemonLoop(config, options) {
+    const maxConcurrent = config.maxConcurrentRuns ?? 4;
+    const handles = [];
+    const activeRuns = new Set();
+    const queue = [];
+    let statusWriteChain = Promise.resolve();
+    function scheduleStatusWrite() {
+        statusWriteChain = statusWriteChain.then(() => writeLoopStatus()).catch(() => {
+            // Status persistence is best-effort and must not surface as an
+            // unhandled rejection during trigger dispatch or shutdown races.
+        });
+    }
+    function drainQueue() {
+        while (queue.length > 0 && activeRuns.size < maxConcurrent) {
+            const next = queue.shift();
+            dispatchTrigger(next);
+        }
+        scheduleStatusWrite();
+    }
+    function dispatchTrigger(trigger) {
+        if (options?.onTrigger) {
+            const result = options.onTrigger(trigger);
+            // If onTrigger returns a Promise, track it for concurrency
+            if (result != null && typeof result.then === "function") {
+                const promise = result.then(() => {
+                    activeRuns.delete(promise);
+                    drainQueue();
+                }, () => {
+                    activeRuns.delete(promise);
+                    drainQueue();
+                });
+                activeRuns.add(promise);
+            }
+        }
+    }
+    async function writeLoopStatus() {
+        if (!options?.logDir)
+            return;
+        const statusPath = path.join(options.logDir, "daemon.status.json");
+        const status = {
+            activeRuns: activeRuns.size,
+            pendingRuns: queue.length,
+            updatedAt: new Date().toISOString(),
+        };
+        const tmpPath = `${statusPath}.tmp-${process.pid}-${Date.now()}`;
+        await node_fs_1.promises.writeFile(tmpPath, JSON.stringify(status), "utf-8");
+        await node_fs_1.promises.rename(tmpPath, statusPath);
+    }
+    const triggerCallback = (trigger) => {
+        // Log the activation
+        if (options?.logDir) {
+            const data = (0, types_1.isAutomationTriggerEvent)(trigger)
+                ? {
+                    type: "automation",
+                    ruleId: trigger.rule.id,
+                    triggerType: trigger.rule.trigger.type,
+                    projectId: trigger.rule.target.projectId,
+                    boardProjectId: trigger.rule.target.boardProjectId,
+                }
+                : {
+                    type: trigger.type,
+                    processId: trigger.processId,
+                    entrypoint: trigger.entrypoint,
+                };
+            void (0, daemonLog_1.appendDaemonLog)(options.logDir, {
+                timestamp: new Date().toISOString(),
+                event: "TRIGGER_ACTIVATED",
+                data,
+            }).catch(() => {
+                // Activation logging is best-effort and should never interrupt the loop.
+            });
+        }
+        if (activeRuns.size >= maxConcurrent) {
+            queue.push(trigger);
+            scheduleStatusWrite();
+            return;
+        }
+        dispatchTrigger(trigger);
+        scheduleStatusWrite();
+    };
+    // Set up file triggers
+    const fileTriggers = config.triggers
+        .filter(types_1.isFileTriggerConfig);
+    if (fileTriggers.length > 0) {
+        const handle = (0, fileWatcher_1.createFileWatcher)(fileTriggers, triggerCallback);
+        handles.push(handle);
+    }
+    // Set up webhook triggers
+    const webhookTriggers = config.triggers.filter(types_1.isWebhookAutomationRule);
+    for (const rule of webhookTriggers) {
+        try {
+            const handle = await (0, webhookListener_1.createWebhookListener)({
+                rule,
+                onTrigger: triggerCallback,
+            });
+            handles.push(handle);
+        }
+        catch {
+            // Port in use or other error — skip
+        }
+    }
+    // Set up timer/cron triggers
+    const timerTriggers = config.triggers.filter(types_1.isTimerAutomationRule);
+    if (timerTriggers.length > 0) {
+        const handle = (0, timerScheduler_1.createTimerScheduler)(timerTriggers, triggerCallback);
+        handles.push(handle);
+    }
+    // Wait for abort signal
+    if (options?.signal) {
+        await new Promise((resolve) => {
+            if (options.signal.aborted) {
+                resolve();
+                return;
+            }
+            options.signal.addEventListener("abort", () => resolve(), { once: true });
+        });
+    }
+    // Cleanup all handles
+    for (const handle of handles) {
+        if (handle.dispose)
+            handle.dispose();
+        if (handle.close)
+            await handle.close();
+    }
+    // Wait for active runs to finish
+    if (activeRuns.size > 0) {
+        await Promise.allSettled([...activeRuns]);
+    }
+    // Wait for any in-flight status writes then write final status
+    await statusWriteChain;
+    try {
+        await writeLoopStatus();
+    }
+    catch { /* directory may be gone in tests */ }
+}
+/**
+ * Read the daemon loop's runtime status from its status file.
+ * Returns null if the file doesn't exist or is unreadable.
+ */
+async function readDaemonLoopStatus(daemonDir) {
+    try {
+        const statusPath = path.join(daemonDir, "daemon.status.json");
+        const content = await node_fs_1.promises.readFile(statusPath, "utf-8");
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}

package/dist/daemon/timerScheduler.d.ts

@@ -0,0 +1,13 @@
+/**
+ * GAP-REMOTE-001: Timer Scheduler — cron-expression-based trigger scheduling.
+ *
+ * Supports a subset of cron syntax: minute, hour, day-of-month, month, day-of-week.
+ * Uses setInterval to check the cron expression against current time.
+ */
+import type { TimerAutomationRule } from "@a5c-ai/agent-comm-mux";
+import type { TriggerCallback } from "./types";
+export interface TimerSchedulerHandle {
+    dispose(): void;
+}
+export declare function createTimerScheduler(triggers: TimerAutomationRule[], onTrigger: TriggerCallback): TimerSchedulerHandle;
+//# sourceMappingURL=timerScheduler.d.ts.map

package/dist/daemon/timerScheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timerScheduler.d.ts","sourceRoot":"","sources":["../../src/daemon/timerScheduler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,oBAAoB;IACnC,OAAO,IAAI,IAAI,CAAC;CACjB;AAyFD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,SAAS,EAAE,eAAe,GACzB,oBAAoB,CA6BtB"}

package/dist/daemon/timerScheduler.js

@@ -0,0 +1,122 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Timer Scheduler — cron-expression-based trigger scheduling.
+ *
+ * Supports a subset of cron syntax: minute, hour, day-of-month, month, day-of-week.
+ * Uses setInterval to check the cron expression against current time.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTimerScheduler = createTimerScheduler;
+/**
+ * Parse a simple 5-field cron expression into match arrays.
+ * Fields: minute hour day-of-month month day-of-week
+ * Supports: *, specific numbers, comma-separated values.
+ */
+function parseCronField(field, min, max) {
+    if (field === "*")
+        return null; // matches all
+    const values = [];
+    for (const part of field.split(",")) {
+        const trimmed = part.trim();
+        // Step syntax: */N or M-N/S
+        if (trimmed.includes("/")) {
+            const [rangeStr, stepStr] = trimmed.split("/");
+            const step = parseInt(stepStr, 10);
+            if (isNaN(step) || step <= 0)
+                return [];
+            let start = min;
+            let end = max;
+            if (rangeStr !== "*") {
+                if (rangeStr.includes("-")) {
+                    const [rMin, rMax] = rangeStr.split("-").map((s) => parseInt(s, 10));
+                    if (isNaN(rMin) || isNaN(rMax))
+                        return [];
+                    start = rMin;
+                    end = rMax;
+                }
+                else {
+                    start = parseInt(rangeStr, 10);
+                    if (isNaN(start))
+                        return [];
+                }
+            }
+            for (let i = start; i <= end; i += step) {
+                values.push(i);
+            }
+        }
+        // Range syntax: M-N
+        else if (trimmed.includes("-")) {
+            const [rMin, rMax] = trimmed.split("-").map((s) => parseInt(s, 10));
+            if (isNaN(rMin) || isNaN(rMax) || rMin < min || rMax > max)
+                return [];
+            for (let i = rMin; i <= rMax; i++) {
+                values.push(i);
+            }
+        }
+        // Simple number
+        else {
+            const num = parseInt(trimmed, 10);
+            if (isNaN(num) || num < min || num > max)
+                return [];
+            values.push(num);
+        }
+    }
+    return values.length > 0 ? values : [];
+}
+function parseCron(expression) {
+    const fields = expression.trim().split(/\s+/);
+    if (fields.length !== 5)
+        return null;
+    return {
+        minutes: parseCronField(fields[0], 0, 59),
+        hours: parseCronField(fields[1], 0, 23),
+        daysOfMonth: parseCronField(fields[2], 1, 31),
+        months: parseCronField(fields[3], 1, 12),
+        daysOfWeek: parseCronField(fields[4], 0, 6),
+    };
+}
+function matchesCron(parsed, date) {
+    const minute = date.getMinutes();
+    const hour = date.getHours();
+    const dayOfMonth = date.getDate();
+    const month = date.getMonth() + 1;
+    const dayOfWeek = date.getDay();
+    if (parsed.minutes && !parsed.minutes.includes(minute))
+        return false;
+    if (parsed.hours && !parsed.hours.includes(hour))
+        return false;
+    if (parsed.daysOfMonth && !parsed.daysOfMonth.includes(dayOfMonth))
+        return false;
+    if (parsed.months && !parsed.months.includes(month))
+        return false;
+    if (parsed.daysOfWeek && !parsed.daysOfWeek.includes(dayOfWeek))
+        return false;
+    return true;
+}
+function createTimerScheduler(triggers, onTrigger) {
+    const parsedTriggers = triggers
+        .map((t) => ({ trigger: t, parsed: parseCron(t.trigger.cron) }))
+        .filter((t) => t.parsed !== null);
+    let lastMinute = -1;
+    const interval = setInterval(() => {
+        const now = new Date();
+        const currentMinute = now.getMinutes() + now.getHours() * 60;
+        // Only check once per minute
+        if (currentMinute === lastMinute)
+            return;
+        lastMinute = currentMinute;
+        for (const { trigger, parsed } of parsedTriggers) {
+            if (matchesCron(parsed, now)) {
+                void onTrigger({
+                    type: "automation",
+                    rule: trigger,
+                });
+            }
+        }
+    }, 30_000); // Check every 30 seconds
+    return {
+        dispose() {
+            clearInterval(interval);
+        },
+    };
+}

package/dist/daemon/types.d.ts

@@ -0,0 +1,93 @@
+/**
+ * GAP-REMOTE-001: Daemon Mode — Type definitions.
+ */
+import type { AutomationRule, TimerAutomationRule, WebhookAutomationRule } from "@a5c-ai/agent-comm-mux";
+export interface DaemonConfig {
+    workspace: string;
+    triggers: TriggerConfig[];
+    maxConcurrentRuns?: number;
+}
+export interface FileTriggerConfig {
+    type: "file";
+    pattern: string;
+    processId: string;
+    entrypoint: string;
+    debounceMs?: number;
+}
+export type TriggerConfig = FileTriggerConfig | AutomationRule;
+export interface FileTriggerEvent {
+    type: "file";
+    processId: string;
+    entrypoint: string;
+    inputs?: Record<string, unknown>;
+}
+export interface AutomationTriggerEvent {
+    type: "automation";
+    rule: AutomationRule;
+    inputs?: Record<string, unknown>;
+}
+export type TriggerEvent = FileTriggerEvent | AutomationTriggerEvent;
+export declare function isFileTriggerConfig(trigger: TriggerConfig): trigger is FileTriggerConfig;
+export declare function isTimerAutomationRule(trigger: TriggerConfig): trigger is TimerAutomationRule;
+export declare function isWebhookAutomationRule(trigger: TriggerConfig): trigger is WebhookAutomationRule;
+export declare function isFileTriggerEvent(event: TriggerEvent): event is FileTriggerEvent;
+export declare function isAutomationTriggerEvent(event: TriggerEvent): event is AutomationTriggerEvent;
+export interface LegacyTriggerConfig {
+    type: "file" | "webhook" | "timer";
+    processId: string;
+    entrypoint: string;
+    pattern?: string;
+    port?: number;
+    cron?: string;
+    debounceMs?: number;
+}
+export interface DaemonStartOptions {
+    daemonDir: string;
+    workspace: string;
+    foreground?: boolean;
+    config?: DaemonConfig;
+}
+export interface DaemonStartOutput {
+    pid: number;
+    daemonDir: string;
+    startedAt: string;
+}
+export interface DaemonStopOptions {
+    daemonDir: string;
+    gracePeriodMs?: number;
+}
+export interface DaemonStopOutput {
+    pid: number;
+    stoppedAt: string;
+}
+export interface DaemonStatusOptions {
+    daemonDir: string;
+}
+export interface DaemonStatusOutput {
+    running: boolean;
+    pid?: number;
+    uptime?: number;
+    startedAt?: string;
+    activeTriggers?: number;
+    pendingRuns?: number;
+}
+export interface FileWatcherHandle {
+    dispose(): void;
+}
+export interface WebhookListenerOptions {
+    rule: WebhookAutomationRule;
+    onTrigger: TriggerCallback;
+}
+export interface WebhookListenerHandle {
+    close(): Promise<void>;
+    port: number;
+}
+export type TriggerCallback = (trigger: TriggerEvent) => void | Promise<void>;
+export interface DaemonMetadata {
+    workspace: string;
+    startedAt: string;
+    triggers: TriggerConfig[];
+    maxConcurrentRuns: number;
+    pid: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/daemon/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAIhC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;AAErE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,iBAAiB,CAExF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,mBAAmB,CAE5F;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,qBAAqB,CAEhG;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,gBAAgB,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,sBAAsB,CAE7F;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,IAAI,IAAI,CAAC;CACjB;AAID,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAI9E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/daemon/types.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Daemon Mode — Type definitions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isFileTriggerConfig = isFileTriggerConfig;
+exports.isTimerAutomationRule = isTimerAutomationRule;
+exports.isWebhookAutomationRule = isWebhookAutomationRule;
+exports.isFileTriggerEvent = isFileTriggerEvent;
+exports.isAutomationTriggerEvent = isAutomationTriggerEvent;
+function isFileTriggerConfig(trigger) {
+    return "type" in trigger && trigger.type === "file";
+}
+function isTimerAutomationRule(trigger) {
+    return "trigger" in trigger && trigger.trigger.type === "timer";
+}
+function isWebhookAutomationRule(trigger) {
+    return "trigger" in trigger && trigger.trigger.type === "webhook";
+}
+function isFileTriggerEvent(event) {
+    return event.type !== "automation";
+}
+function isAutomationTriggerEvent(event) {
+    return event.type === "automation";
+}

package/dist/daemon/webhookListener.d.ts

@@ -0,0 +1,6 @@
+/**
+ * GAP-REMOTE-001: Webhook Listener — HTTP trigger endpoint.
+ */
+import type { WebhookListenerOptions, WebhookListenerHandle } from "./types";
+export declare function createWebhookListener(options: WebhookListenerOptions): Promise<WebhookListenerHandle>;
+//# sourceMappingURL=webhookListener.d.ts.map

package/dist/daemon/webhookListener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookListener.d.ts","sourceRoot":"","sources":["../../src/daemon/webhookListener.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAI7E,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA0EhC"}

package/dist/daemon/webhookListener.js

@@ -0,0 +1,110 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Webhook Listener — HTTP trigger endpoint.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookListener = createWebhookListener;
+const http = __importStar(require("node:http"));
+const MAX_BODY_BYTES = 1024 * 1024; // 1 MiB
+async function createWebhookListener(options) {
+    const { rule, onTrigger } = options;
+    const port = rule.trigger.port;
+    const path = rule.trigger.path ?? "/trigger";
+    const method = rule.trigger.method ?? "POST";
+    const authToken = rule.trigger.auth?.type === "bearer" ? rule.trigger.auth.token : undefined;
+    const server = http.createServer((req, res) => {
+        if (req.method !== method || req.url !== path) {
+            res.writeHead(404, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Not found" }));
+            return;
+        }
+        // Auth check
+        if (authToken) {
+            const authHeader = req.headers.authorization;
+            if (!authHeader || authHeader !== `Bearer ${authToken}`) {
+                res.writeHead(401, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Unauthorized" }));
+                return;
+            }
+        }
+        let body = "";
+        let bodySize = 0;
+        req.on("data", (chunk) => {
+            bodySize += chunk.length;
+            if (bodySize > MAX_BODY_BYTES) {
+                res.writeHead(413, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Payload too large" }));
+                req.destroy();
+                return;
+            }
+            body += chunk.toString();
+        });
+        req.on("end", () => {
+            try {
+                const payload = JSON.parse(body);
+                const inputs = typeof payload.inputs === "object" && payload.inputs !== null && !Array.isArray(payload.inputs)
+                    ? payload.inputs
+                    : undefined;
+                void onTrigger({
+                    type: "automation",
+                    rule,
+                    inputs,
+                });
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ ok: true }));
+            }
+            catch {
+                res.writeHead(400, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Invalid JSON body" }));
+            }
+        });
+    });
+    return new Promise((resolve, reject) => {
+        server.on("error", reject);
+        server.listen(port, () => {
+            const addr = server.address();
+            const actualPort = typeof addr === "object" && addr ? addr.port : port;
+            resolve({
+                port: actualPort,
+                async close() {
+                    return new Promise((res, rej) => {
+                        server.close((err) => (err ? rej(err) : res()));
+                    });
+                },
+            });
+        });
+    });
+}

package/dist/governance/authority.d.ts

@@ -0,0 +1,68 @@
+/**
+ * GAP-SEC: Authority Chain system.
+ *
+ * Models delegation chains from human principals through agent principals,
+ * with monotonically narrowing scope at each hop.
+ */
+import type { MandateScope } from './mandate';
+/** A principal (human or agent) in the authority chain. */
+export interface AuthorityPrincipal {
+    kind: 'human' | 'agent';
+    id: string;
+    displayName: string;
+}
+/** A single grant of authority from one principal to another. */
+export interface AuthorityGrant {
+    from: AuthorityPrincipal;
+    to: AuthorityPrincipal;
+    scope: MandateScope;
+    grantedAt: string;
+    revokedAt?: string;
+    expiresAt?: string;
+}
+/** A link in the authority chain (wrapping a grant). */
+export interface AuthorityChainLink {
+    grant: AuthorityGrant;
+    index: number;
+}
+/** A full authority chain from root to leaf. */
+export interface AuthorityChain {
+    grants: AuthorityGrant[];
+    rootPrincipal: AuthorityPrincipal;
+    effectiveScope: MandateScope;
+}
+/** Result of chain validation. */
+export interface AuthorityChainValidationResult {
+    valid: boolean;
+    reason?: string;
+}
+/** Result of tracing authority to a human root. */
+export interface AuthorityTrace {
+    humanPrincipal: AuthorityPrincipal;
+    hopCount: number;
+    principalPath: string[];
+}
+/**
+ * Create an authority chain from an ordered list of grants.
+ * Computes the effective scope as the intersection of all grant scopes.
+ */
+export declare function createAuthorityChain(grants: AuthorityGrant[]): AuthorityChain;
+/**
+ * Validate an authority chain. Checks:
+ * 1. Root must be a human principal.
+ * 2. No revoked links.
+ * 3. No expired links.
+ * 4. Scopes monotonically narrow (no expansion).
+ */
+export declare function validateAuthorityChain(chain: AuthorityChain): AuthorityChainValidationResult;
+/**
+ * Attenuate (intersect) two scopes. The result is never wider than either input.
+ * Pure function.
+ */
+export declare function attenuateScope(parent: MandateScope, child: MandateScope): MandateScope;
+/**
+ * Trace authority back to the human root, returning the human principal,
+ * hop count, and full principal path.
+ */
+export declare function traceAuthorityToHuman(chain: AuthorityChain): AuthorityTrace;
+//# sourceMappingURL=authority.d.ts.map

package/dist/governance/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/governance/authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAM9C,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,kBAAkB,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,kBAAkB,CAAC;IAClC,cAAc,EAAE,YAAY,CAAC;CAC9B;AAED,kCAAkC;AAClC,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,kBAAkB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,cAAc,CAkB7E;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,8BAA8B,CAiC5F;AA2BD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAqBtF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAW3E"}