@adhd/agent-engine-compiler 2.1.8 → 2.1.10

package/src/resolve/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/resolve/model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAExE,iDAAiD;AACjD,gFAAgF;AAChF,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,iEAAiE;AACjE,EAAE;AACF,iFAAiF;AACjF,qFAAqF;AACrF,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,+EAA+E;AAC/E,qFAAqF;AACrF,kFAAkF;AAClF,8EAA8E;AAC9E,uFAAuF;AACvF,iDAAiD;AAEjD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY;AAC1B,8DAA8D;AAC9D,EAA8B,EAC9B,SAAiB,EACjB,QAAgB;IAEhB,yCAAyC;IACzC,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAS,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAElC,iFAAiF;IACjF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,wFAAwF;IACxF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,eAAe;YAC9B,GAAG,CAAC,IAAI,KAAK,yBAAyB,EACtC,CAAC;YACD,4EAA4E;YAC5E,wEAAwE;YACxE,8EAA8E;YAC9E,8BAA8B;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/src/resolve/policy.d.ts

@@ -0,0 +1,34 @@
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+/** A resolved policy constraint ready for header/body rendering. */
+export interface Constraint {
+    /** The policy template slug (e.g. 'no-credentials'). */
+    policySlug: string;
+    /** The human-readable constraint text rendered into the compiled output. */
+    text: string;
+    /** True when this constraint is mandatory (cannot be overridden). */
+    isMandatory: boolean;
+    /**
+     * Category slug this constraint was inherited from, or null for direct-attach.
+     * Surfaces the provenance of inherited constraints in compiled output.
+     */
+    inheritedFrom: string | null;
+}
+/**
+ * Resolve all effective policy constraints for an agent (direct + inherited).
+ *
+ * Delegates the full 3-query merge (direct rows + category memberships + category
+ * policies) to {@link AgentPolicyStore.resolveForAgent} — this function does NOT
+ * re-implement the inheritance join.  The [dod.3] negative-control is:
+ * "return empty constraints when no agent_policy rows exist" — the constraint block
+ * is keyed exclusively on the agent_policy table.
+ *
+ * Each resolved row is joined to its template via {@link PolicyTemplateStore.read}
+ * and rendered as a {@link Constraint}.  The constraint text = the template's
+ * `description`, which is the human-readable summary the compiler emits.
+ *
+ * @param db         - The shared registry Drizzle handle (all table prefixes).
+ * @param agentSlug  - Slug of the agent whose policy constraints to resolve.
+ * @returns Ordered list of constraints (direct first, then inherited by category).
+ */
+export declare function resolvePolicyConstraints(db: BetterSQLite3Database<any>, agentSlug: string): Constraint[];
+//# sourceMappingURL=policy.d.ts.map

package/src/resolve/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/resolve/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAwBxE,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,WAAW,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAEtC,EAAE,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAC9B,SAAS,EAAE,MAAM,GAChB,UAAU,EAAE,CA2Bd"}

package/src/resolve/policy.js

@@ -0,0 +1,44 @@
+import { AgentPolicyStore, PolicyTemplateStore } from '@adhd/agent-core-policy';
+/**
+ * Resolve all effective policy constraints for an agent (direct + inherited).
+ *
+ * Delegates the full 3-query merge (direct rows + category memberships + category
+ * policies) to {@link AgentPolicyStore.resolveForAgent} — this function does NOT
+ * re-implement the inheritance join.  The [dod.3] negative-control is:
+ * "return empty constraints when no agent_policy rows exist" — the constraint block
+ * is keyed exclusively on the agent_policy table.
+ *
+ * Each resolved row is joined to its template via {@link PolicyTemplateStore.read}
+ * and rendered as a {@link Constraint}.  The constraint text = the template's
+ * `description`, which is the human-readable summary the compiler emits.
+ *
+ * @param db         - The shared registry Drizzle handle (all table prefixes).
+ * @param agentSlug  - Slug of the agent whose policy constraints to resolve.
+ * @returns Ordered list of constraints (direct first, then inherited by category).
+ */
+export function resolvePolicyConstraints(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+db, agentSlug) {
+    // Step 1: full effective policy set — direct + inherited.
+    // resolveForAgent is the SINGLE place the 3-query merge lives ([ref:store-read]).
+    const agentPolicyStore = new AgentPolicyStore(db);
+    const rows = agentPolicyStore.resolveForAgent(agentSlug);
+    // Step 2: for each row, read the policy template and render the constraint text.
+    const templateStore = new PolicyTemplateStore(db);
+    const constraints = [];
+    for (const row of rows) {
+        const template = templateStore.read(row.policySlug);
+        // Constraint text = the template's description.
+        // This is the consumer-visible text the compiler renders into the header/body
+        // ([def:policy-constraint], [inv:platform-shaped-observable]).
+        const text = template.description;
+        constraints.push({
+            policySlug: row.policySlug,
+            text,
+            isMandatory: row.isMandatory,
+            inheritedFrom: row.inheritedFrom,
+        });
+    }
+    return constraints;
+}
+//# sourceMappingURL=policy.js.map

package/src/resolve/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/resolve/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAqChF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB;AACtC,8DAA8D;AAC9D,EAA8B,EAC9B,SAAiB;IAEjB,0DAA0D;IAC1D,kFAAkF;IAClF,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAEzD,iFAAiF;IACjF,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEpD,gDAAgD;QAChD,8EAA8E;QAC9E,+DAA+D;QAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC;QAElC,WAAW,CAAC,IAAI,CAAC;YACf,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,IAAI;YACJ,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/src/resolve/tools.d.ts

@@ -0,0 +1,33 @@
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+/** A resolved platform alias for one canonical tool grant. */
+export interface ResolvedTool {
+    /** Canonical tool name (e.g. 'file_read', 'shell_exec'). */
+    canonicalName: string;
+    /** Platform-specific alias (e.g. 'Read' on claude_code, 'read_file' on claude_api). */
+    platformAlias: string;
+    /** Availability on this platform: 'available' | 'restricted' | 'requires_permission'. */
+    availability: string;
+}
+/**
+ * Resolve an agent's tool grants to ordered, de-duplicated platform aliases.
+ *
+ * Algorithm:
+ *   1. `AgentToolStore.listForAgent(agentSlug)` — fetch all `tool_*` grants.
+ *   2. `BindingStore.listForPlatform(platform)` — one platform-keyed query;
+ *      index `idx_bindings_platform` makes this O(1) vs. the catalog size.
+ *   3. For each grant, look up its binding row in the result set.
+ *      - No row → skip (tool has no binding for this platform).
+ *      - `availability = 'unavailable'` → drop (e.g. `human_input` on `claude_api`).
+ *      - Otherwise → emit `platformToolName` as the resolved alias.
+ *
+ * The platform filter is applied to BOTH the listForPlatform call AND the
+ * Map lookup so the result is always platform-shaped, never canonical-named.
+ * This is the invariant the [dod.1] negative-control tests.
+ *
+ * @param db         - The shared registry Drizzle handle (all table prefixes).
+ * @param agentSlug  - Slug of the agent whose tool grants to resolve.
+ * @param platform   - Target platform id (e.g. 'claude_code', 'claude_api').
+ * @returns Ordered, de-duplicated `ResolvedTool[]` ready for header emission.
+ */
+export declare function resolveTools(db: BetterSQLite3Database<any>, agentSlug: string, platform: string): ResolvedTool[];
+//# sourceMappingURL=tools.d.ts.map

package/src/resolve/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/resolve/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAgCxE,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,aAAa,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAE1B,EAAE,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAC9B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,YAAY,EAAE,CAiDhB"}

package/src/resolve/tools.js

@@ -0,0 +1,62 @@
+import { AgentToolStore, BindingStore, } from '@adhd/agent-store-tools';
+/**
+ * Resolve an agent's tool grants to ordered, de-duplicated platform aliases.
+ *
+ * Algorithm:
+ *   1. `AgentToolStore.listForAgent(agentSlug)` — fetch all `tool_*` grants.
+ *   2. `BindingStore.listForPlatform(platform)` — one platform-keyed query;
+ *      index `idx_bindings_platform` makes this O(1) vs. the catalog size.
+ *   3. For each grant, look up its binding row in the result set.
+ *      - No row → skip (tool has no binding for this platform).
+ *      - `availability = 'unavailable'` → drop (e.g. `human_input` on `claude_api`).
+ *      - Otherwise → emit `platformToolName` as the resolved alias.
+ *
+ * The platform filter is applied to BOTH the listForPlatform call AND the
+ * Map lookup so the result is always platform-shaped, never canonical-named.
+ * This is the invariant the [dod.1] negative-control tests.
+ *
+ * @param db         - The shared registry Drizzle handle (all table prefixes).
+ * @param agentSlug  - Slug of the agent whose tool grants to resolve.
+ * @param platform   - Target platform id (e.g. 'claude_code', 'claude_api').
+ * @returns Ordered, de-duplicated `ResolvedTool[]` ready for header emission.
+ */
+export function resolveTools(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+db, agentSlug, platform) {
+    const agentToolStore = new AgentToolStore(db);
+    const bindingStore = new BindingStore(db);
+    // Step 1: all grants for this agent (tool_* prefix, logical agent_slug key).
+    const grants = agentToolStore.listForAgent(agentSlug);
+    // Step 2: one platform-keyed query — reuses BindingStore ([ref:store-read]).
+    // Index idx_bindings_platform keeps this O(catalog-size), not O(grants).
+    const platformBindings = bindingStore.listForPlatform(platform);
+    // Build a Map<canonicalToolName, binding> for O(1) grant lookups.
+    // Platform is already baked in — the Map only holds bindings for THIS platform.
+    const bindingByTool = new Map(platformBindings.map((b) => [b.toolName, b]));
+    // Step 3: walk grants in their stored order; de-duplicate by canonical name.
+    const seen = new Set();
+    const results = [];
+    for (const grant of grants) {
+        if (seen.has(grant.toolName)) {
+            continue; // de-duplicate (should not occur with a well-formed DB, but defensive)
+        }
+        seen.add(grant.toolName);
+        const binding = bindingByTool.get(grant.toolName);
+        if (!binding) {
+            // No binding row for this tool on this platform — skip silently.
+            continue;
+        }
+        if (binding.availability === 'unavailable') {
+            // Explicitly unavailable on this platform (e.g. human_input on claude_api).
+            // [def:tools-header]: drop these — do not emit.
+            continue;
+        }
+        results.push({
+            canonicalName: grant.toolName,
+            platformAlias: binding.platformToolName,
+            availability: binding.availability,
+        });
+    }
+    return results;
+}
+//# sourceMappingURL=tools.js.map

package/src/resolve/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/resolve/tools.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,cAAc,EACd,YAAY,GAEb,MAAM,yBAAyB,CAAC;AAoCjC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,YAAY;AAC1B,8DAA8D;AAC9D,EAA8B,EAC9B,SAAiB,EACjB,QAAgB;IAEhB,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;IAE1C,6EAA6E;IAC7E,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAEtD,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,gBAAgB,GACpB,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAEzC,kEAAkE;IAClE,gFAAgF;IAChF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAC7C,CAAC;IAEF,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,uEAAuE;QACnF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iEAAiE;YACjE,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YAC3C,4EAA4E;YAC5E,gDAAgD;YAChD,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,aAAa,EAAE,KAAK,CAAC,QAAQ;YAC7B,aAAa,EAAE,OAAO,CAAC,gBAAgB;YACvC,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/src/seed/fixtures.d.ts

@@ -0,0 +1,52 @@
+/**
+ * fixtures.ts — real-row fixture seeder for agent-compiler e2e tests.
+ *
+ * Exports `seedFixtureAgent(db)` which seeds the `api-design-reviewer` fixture
+ * agent (modelled after SEED_DATA.md §14 `code-reviewer`) into a shared SQLite
+ * DB handle that already has all four package migrations applied.
+ *
+ * Seed coverage:
+ *   - registry prefix : taxonomy category, agent, components, junction rows
+ *   - tool prefix     : agent tool grants (file_read, file_grep, web_search)
+ *   - provider prefix : model_hint = claude_sonnet_4_6 (seeded by seedProvider)
+ *   - policy prefix   : no-credentials policy template + direct attachment
+ *
+ * The two `success_criteria` junction rows are conditioned:
+ *   position=4 → code-review-criteria   (no context condition — general/review)
+ *   position=5 → security-audit-criteria (context_condition={ticket_type:"security"})
+ *
+ * This mirrors the exact pattern from SEED_DATA.md §14 (code-reviewer, positions
+ * 5+6) and USAGE.md "Context-Conditional Composition".
+ *
+ * [inv:one-db-handle]    — caller passes ONE shared DB handle, all four prefixes.
+ * [inv:real-rows-not-mocks] — this function seeds real rows; no mocks needed.
+ */
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+/** Slug of the seeded fixture agent. */
+export declare const FIXTURE_AGENT_SLUG = "api-design-reviewer-e2e";
+export declare const FIXTURE_CATEGORY_SLUG = "e2e-api-specialists";
+export declare const COMP_ROLE = "generic-reviewer-role";
+export declare const COMP_IDENTITY = "reviewer-identity";
+export declare const COMP_RULE = "default-skeptic";
+export declare const COMP_REVIEW_CRITERIA = "code-review-criteria";
+export declare const COMP_SECURITY_CRITERIA = "security-audit-criteria";
+export declare const TOOL_FILE_READ = "file_read";
+export declare const TOOL_FILE_GREP = "file_grep";
+export declare const TOOL_WEB_SEARCH = "web_search";
+/**
+ * Seed the `api-design-reviewer-e2e` fixture agent into `db`.
+ *
+ * Prerequisites (caller must have already run against `db`):
+ *   - All four package migrations applied.
+ *   - seedRegistry(db)      — for components (generic-reviewer-role etc.)
+ *   - seedToolRegistry(db)  — for tool catalog + platform bindings
+ *   - seedProvider(db)      — for model_platform_bindings (claude_sonnet_4_6)
+ *   - seedPolicy(db)        — for policy_policy_types + no-credentials template
+ *
+ * Idempotence: NOT idempotent — call once per test DB.  Tests create a fresh
+ * temp file per suite so re-seed is never needed.
+ *
+ * @param db - The shared Drizzle handle (all four table prefixes).
+ */
+export declare function seedFixtureAgent(db: BetterSQLite3Database<any>): void;
+//# sourceMappingURL=fixtures.d.ts.map

package/src/seed/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../src/seed/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAYxE,wCAAwC;AACxC,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAC5D,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAI3D,eAAO,MAAM,SAAS,0BAA0B,CAAC;AACjD,eAAO,MAAM,aAAa,sBAAsB,CAAC;AACjD,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAC3C,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAGhE,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C,eAAO,MAAM,eAAe,eAAe,CAAC;AAI5C;;;;;;;;;;;;;;GAcG;AAEH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,IAAI,CAsGrE"}

package/src/seed/fixtures.js

@@ -0,0 +1,148 @@
+/**
+ * fixtures.ts — real-row fixture seeder for agent-compiler e2e tests.
+ *
+ * Exports `seedFixtureAgent(db)` which seeds the `api-design-reviewer` fixture
+ * agent (modelled after SEED_DATA.md §14 `code-reviewer`) into a shared SQLite
+ * DB handle that already has all four package migrations applied.
+ *
+ * Seed coverage:
+ *   - registry prefix : taxonomy category, agent, components, junction rows
+ *   - tool prefix     : agent tool grants (file_read, file_grep, web_search)
+ *   - provider prefix : model_hint = claude_sonnet_4_6 (seeded by seedProvider)
+ *   - policy prefix   : no-credentials policy template + direct attachment
+ *
+ * The two `success_criteria` junction rows are conditioned:
+ *   position=4 → code-review-criteria   (no context condition — general/review)
+ *   position=5 → security-audit-criteria (context_condition={ticket_type:"security"})
+ *
+ * This mirrors the exact pattern from SEED_DATA.md §14 (code-reviewer, positions
+ * 5+6) and USAGE.md "Context-Conditional Composition".
+ *
+ * [inv:one-db-handle]    — caller passes ONE shared DB handle, all four prefixes.
+ * [inv:real-rows-not-mocks] — this function seeds real rows; no mocks needed.
+ */
+import { AgentStore, TaxonomyStore, CompositionStore, } from '@adhd/agent-store-prompts';
+import { AgentToolStore } from '@adhd/agent-store-tools';
+import { AgentPolicyStore } from '@adhd/agent-core-policy';
+// ── exported fixture constants ─────────────────────────────────────────────
+/** Slug of the seeded fixture agent. */
+export const FIXTURE_AGENT_SLUG = 'api-design-reviewer-e2e';
+export const FIXTURE_CATEGORY_SLUG = 'e2e-api-specialists';
+// Component slugs from the shared registry seed (SEED_DATA.md §8).
+// These must exist after seedRegistry() has run against the same DB.
+export const COMP_ROLE = 'generic-reviewer-role'; // position 1
+export const COMP_IDENTITY = 'reviewer-identity'; // position 2
+export const COMP_RULE = 'default-skeptic'; // position 3
+export const COMP_REVIEW_CRITERIA = 'code-review-criteria'; // position 4 – general
+export const COMP_SECURITY_CRITERIA = 'security-audit-criteria'; // position 5 – {ticket_type:security}
+// Tool slugs granted to the fixture agent.
+export const TOOL_FILE_READ = 'file_read';
+export const TOOL_FILE_GREP = 'file_grep';
+export const TOOL_WEB_SEARCH = 'web_search';
+// ── seedFixtureAgent ───────────────────────────────────────────────────────
+/**
+ * Seed the `api-design-reviewer-e2e` fixture agent into `db`.
+ *
+ * Prerequisites (caller must have already run against `db`):
+ *   - All four package migrations applied.
+ *   - seedRegistry(db)      — for components (generic-reviewer-role etc.)
+ *   - seedToolRegistry(db)  — for tool catalog + platform bindings
+ *   - seedProvider(db)      — for model_platform_bindings (claude_sonnet_4_6)
+ *   - seedPolicy(db)        — for policy_policy_types + no-credentials template
+ *
+ * Idempotence: NOT idempotent — call once per test DB.  Tests create a fresh
+ * temp file per suite so re-seed is never needed.
+ *
+ * @param db - The shared Drizzle handle (all four table prefixes).
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function seedFixtureAgent(db) {
+    // ── 1. Taxonomy category ────────────────────────────────────────────────
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const taxonomyStore = new TaxonomyStore(db);
+    taxonomyStore.createCategory({
+        slug: FIXTURE_CATEGORY_SLUG,
+        name: 'E2E API Specialists',
+        position: 99,
+    });
+    // ── 2. Agent (model_hint = claude_sonnet_4_6, per spec) ─────────────────
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const agentStore = new AgentStore(db);
+    agentStore.create({
+        slug: FIXTURE_AGENT_SLUG,
+        displayName: 'API Design Reviewer (E2E Fixture)',
+        description: 'Reviews REST and GraphQL API designs for correctness, security, and usability',
+        modelHint: 'claude_sonnet_4_6',
+        taxonomyCategory: FIXTURE_CATEGORY_SLUG,
+    });
+    // ── 3. Junction rows — ORDERED, context-conditioned ([def:junction-order]) ─
+    //
+    // Position layout (mirrors SEED_DATA.md §14 code-reviewer):
+    //   1  generic-reviewer-role      — always included (role)
+    //   2  reviewer-identity          — always included (identity)
+    //   3  default-skeptic            — always included (rule)
+    //   4  code-review-criteria       — always included (success_criteria, general/review)
+    //   5  security-audit-criteria    — {ticket_type:"security"} only (success_criteria)
+    //
+    // No version_pin on any row — resolve latest at compile time.
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const compositionStore = new CompositionStore(db);
+    compositionStore.attach({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        componentSlug: COMP_ROLE,
+        position: 1,
+    });
+    compositionStore.attach({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        componentSlug: COMP_IDENTITY,
+        position: 2,
+    });
+    compositionStore.attach({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        componentSlug: COMP_RULE,
+        position: 3,
+    });
+    // General success criteria — no context condition (always included).
+    // This is the "review" path: present when context is empty OR {ticket_type:"review"}.
+    compositionStore.attach({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        componentSlug: COMP_REVIEW_CRITERIA,
+        position: 4,
+        contextCondition: null,
+    });
+    // Security success criteria — only included when {ticket_type:"security"}.
+    compositionStore.attach({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        componentSlug: COMP_SECURITY_CRITERIA,
+        position: 5,
+        contextCondition: JSON.stringify({ ticket_type: 'security' }),
+    });
+    // ── 4. Tool grants (registry prefix — [up:tools]) ───────────────────────
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const agentToolStore = new AgentToolStore(db);
+    agentToolStore.grant({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        toolName: TOOL_FILE_READ,
+        permission: 'read_only',
+    });
+    agentToolStore.grant({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        toolName: TOOL_FILE_GREP,
+        permission: 'read_only',
+    });
+    agentToolStore.grant({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        toolName: TOOL_WEB_SEARCH,
+        permission: 'full',
+    });
+    // ── 5. Policy attachment — no-credentials (direct attach) ───────────────
+    // The policy template is in the seed data already (seedPolicy ran above).
+    // Direct attach: inheritedFrom = null ([def:policy-constraint]).
+    const agentPolicyStore = new AgentPolicyStore(db);
+    agentPolicyStore.attach({
+        agentSlug: FIXTURE_AGENT_SLUG,
+        policySlug: 'no-credentials',
+        isMandatory: true,
+    });
+}
+//# sourceMappingURL=fixtures.js.map

package/src/seed/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/seed/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EACL,UAAU,EACV,aAAa,EACb,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,8EAA8E;AAE9E,wCAAwC;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAE3D,mEAAmE;AACnE,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC,CAAC,aAAa;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC,CAAC,aAAa;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,aAAa;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,CAAC,uBAAuB;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,CAAC,sCAAsC;AAEvG,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAE5C,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,EAA8B;IAC7D,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,EAAS,CAAC,CAAC;IACnD,aAAa,CAAC,cAAc,CAAC;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;IAEH,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAS,CAAC,CAAC;IAC7C,UAAU,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,mCAAmC;QAChD,WAAW,EACT,+EAA+E;QACjF,SAAS,EAAE,mBAAmB;QAC9B,gBAAgB,EAAE,qBAAqB;KACxC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,EAAE;IACF,4DAA4D;IAC5D,2DAA2D;IAC3D,+DAA+D;IAC/D,2DAA2D;IAC3D,uFAAuF;IACvF,qFAAqF;IACrF,EAAE;IACF,8DAA8D;IAC9D,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,EAAS,CAAC,CAAC;IAEzD,gBAAgB,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,SAAS;QACxB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,aAAa;QAC5B,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,SAAS;QACxB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,qEAAqE;IACrE,sFAAsF;IACtF,gBAAgB,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,oBAAoB;QACnC,QAAQ,EAAE,CAAC;QACX,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,2EAA2E;IAC3E,gBAAgB,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,sBAAsB;QACrC,QAAQ,EAAE,CAAC;QACX,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;KAC9D,CAAC,CAAC;IAEH,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,EAAS,CAAC,CAAC;IAErD,cAAc,CAAC,KAAK,CAAC;QACnB,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IAEH,cAAc,CAAC,KAAK,CAAC;QACnB,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IAEH,cAAc,CAAC,KAAK,CAAC;QACnB,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;IAEH,2EAA2E;IAC3E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAElD,gBAAgB,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,kBAAkB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC"}