@agenthippo-ai/agenthippo 1.110.9 → 1.110.19

package/out/cli/commands/chat.js

@@ -1,357 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.chatCommand = chatCommand;
-/**
- * Chat Command - Interactive REPL
- */
-const readline = __importStar(require("readline"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-const headless_1 = require("../../headless");
-const pack_loader_1 = require("../pack-loader");
-const utils_1 = require("../utils");
-const branding_1 = require("../../branding");
-const runtime_1 = require("../runtime");
-const customRegistry_1 = require("../../engines/customRegistry");
-const BANNER_LINE = '-'.repeat(62);
-async function chatCommand(options) {
-    const apiConfig = (0, pack_loader_1.getApiConfig)();
-    // Load pack if specified
-    let pack;
-    let packId = 'default';
-    let engine;
-    let model;
-    let claudeCheapModel;
-    const syncLogger = options.verbose ? new headless_1.ConsoleLogger('[Sync]') : new headless_1.NoOpLogger();
-    if (options.agent) {
-        try {
-            pack = await (0, pack_loader_1.loadAgentPack)(options.agent, options.workspace);
-            packId = pack.manifest.metadata.name;
-            const resolvedEngine = options.engine || pack.manifest.spec.engine;
-            engine = resolvedEngine;
-            const customEngineDefaultModel = !['claude', 'codex'].includes(engine)
-                ? (0, customRegistry_1.tryResolveCustomEngineManifest)(options.workspace, engine)?.model?.defaultModel
-                : undefined;
-            // Custom engine manifest defaultModel beats the global AGENTHIPPO_DEFAULT_MODEL
-            // so --engine gemini without --model uses gemini's manifest default, not the
-            // user's global Claude/Codex fallback.
-            const rawModel = options.model || pack.manifest.spec.model || customEngineDefaultModel || (0, pack_loader_1.getEnvDefaultModel)() || (0, pack_loader_1.getDefaultConfig)().model;
-            model = (0, headless_1.resolveModelAlias)(rawModel);
-            const rawCheapModel = pack.manifest.spec.cheapModel?.trim();
-            claudeCheapModel = rawCheapModel ? (0, headless_1.resolveModelAlias)(rawCheapModel) : undefined;
-            // Sync pack content to workspace (now includes packId)
-            await (0, headless_1.syncPackToWorkspace)(options.workspace, pack.packPath, packId, engine, syncLogger, (0, utils_1.findBundledBasePromptsDir)());
-            console.log(`${utils_1.COLORS.green}OK:${utils_1.COLORS.reset} Loaded agent: ${pack.manifest.metadata.name} v${pack.manifest.metadata.version}`);
-            if (rawModel !== model) {
-                console.log(`${utils_1.COLORS.dim}   Model: ${rawModel} -> ${model}${utils_1.COLORS.reset}`);
-            }
-            if (rawCheapModel && rawCheapModel !== claudeCheapModel) {
-                console.log(`${utils_1.COLORS.dim}   Cheap model: ${rawCheapModel} -> ${claudeCheapModel}${utils_1.COLORS.reset}`);
-            }
-        }
-        catch (err) {
-            console.error(`${utils_1.COLORS.red}Error: ${err instanceof Error ? err.message : err}${utils_1.COLORS.reset}`);
-            process.exit(1);
-        }
-    }
-    else {
-        const defaults = (0, pack_loader_1.getDefaultConfig)();
-        engine = options.engine || defaults.engine;
-        const customEngineDefaultModel = !['claude', 'codex'].includes(engine)
-            ? (0, customRegistry_1.tryResolveCustomEngineManifest)(options.workspace, engine)?.model?.defaultModel
-            : undefined;
-        const rawModel = options.model || customEngineDefaultModel || (0, pack_loader_1.getEnvDefaultModel)() || defaults.model;
-        model = (0, headless_1.resolveModelAlias)(rawModel);
-        if (rawModel !== model) {
-            console.log(`${utils_1.COLORS.dim}Model: ${rawModel} -> ${model}${utils_1.COLORS.reset}`);
-        }
-    }
-    if (!apiConfig.apiKey && (engine === 'claude' || engine === 'codex')) {
-        const quickstartLines = (0, utils_1.getLiteLLMQuickstartHintLines)();
-        console.log([
-            'To start a chat, set an API key and re-run the command. Example:',
-            `  ${quickstartLines[1]}`,
-            '',
-            'Other options:',
-            '  AGENTHIPPO_LITELLM_API_KEY=your_key AGENTHIPPO_LITELLM_BASE_URL=https://... dist/agenthippo chat',
-            '  LITELLM_API_KEY=your_key LITELLM_BASE_URL=https://... dist/agenthippo chat',
-            '  ANTHROPIC_API_KEY=your_key dist/agenthippo chat',
-            '  OPENAI_API_KEY=your_key dist/agenthippo chat',
-        ].join('\n'));
-        process.exit(1);
-    }
-    // Create runner
-    const storagePath = path.join(os.tmpdir(), `${branding_1.AGENTIDE_CLI_NAME}-cli`);
-    const logger = options.verbose ? new headless_1.ConsoleLogger('[Agent]') : new headless_1.NoOpLogger();
-    // Find SDK CLI paths and bundled prompts
-    const claudeCodePath = (0, utils_1.findClaudeCodePath)();
-    const codexPath = (0, utils_1.findCodexPath)();
-    const bundledPromptsDir = (0, utils_1.findBundledBasePromptsDir)();
-    // Validate required CLI is available
-    if (engine === 'claude' && !claudeCodePath) {
-        console.error(`${utils_1.COLORS.red}Error: Claude Code CLI not found.${utils_1.COLORS.reset}`);
-        console.error('   Install it: npm install -g @anthropic-ai/claude-code');
-        console.error('   Or set CLAUDE_CODE_PATH environment variable');
-        console.error('   Or use --engine codex instead');
-        process.exit(1);
-    }
-    if (engine === 'codex' && !codexPath) {
-        console.error(`${utils_1.COLORS.red}Error: Codex CLI not found.${utils_1.COLORS.reset}`);
-        console.error('   Install it: npm install -g @openai/codex');
-        console.error('   Or set CODEX_PATH environment variable');
-        console.error('   Or use --engine claude instead');
-        process.exit(1);
-    }
-    // V1 permissions are non-interactive in CLI mode.
-    const permissionHandler = new headless_1.AutoApprovePermissionHandler();
-    const permissions = {
-        fileAccess: (0, pack_loader_1.getFileAccess)(pack),
-    };
-    const sessionId = `cli-${Date.now()}`;
-    const createRunner = () => (0, headless_1.createHeadlessRunner)({
-        storagePath,
-        packId,
-        packVersion: pack?.manifest.metadata.version,
-        bundledPromptsDir,
-        apiKey: apiConfig.apiKey,
-        baseUrl: apiConfig.baseUrl,
-        useLiteLLM: apiConfig.useLiteLLM,
-        litellmApiKey: apiConfig.litellmApiKey,
-        openaiApiKey: apiConfig.openaiApiKey,
-        anthropicApiKey: apiConfig.anthropicApiKey,
-        logger,
-        freshState: false, // Persist session within REPL
-        claudeCodeExecutablePath: claudeCodePath,
-        codexExecutablePath: codexPath,
-        permissionHandler,
-        cliEnvPatch: (0, runtime_1.buildCliEnvPatch)({
-            cliPath: process.execPath,
-            workspaceRoot: options.workspace,
-            agentId: packId,
-            chatSessionId: sessionId,
-            baseEnv: process.env,
-        }),
-        ...(claudeCheapModel ? { engineSettings: { claudeCheapModel } } : {}),
-    });
-    const state = {
-        runner: createRunner(),
-        sessionId,
-        engine,
-        model,
-    };
-    // Streaming emitter
-    const createStreamingEmitter = () => ({
-        async thinking(delta) {
-            process.stdout.write(`${utils_1.COLORS.gray}${delta}${utils_1.COLORS.reset}`);
-        },
-        async text(delta) {
-            process.stdout.write(delta);
-        },
-        async toolStart(name, input) {
-            console.log(`\n${utils_1.COLORS.blue}Tool: ${name}${utils_1.COLORS.reset}`);
-            if (input && input.length < 200 && options.verbose) {
-                console.log(`   ${utils_1.COLORS.gray}${input}${utils_1.COLORS.reset}`);
-            }
-        },
-        async toolEnd(_name, _toolCallId, result, isError) {
-            if (isError) {
-                console.log(`   ${utils_1.COLORS.red}Error: ${result?.slice(0, 100)}${utils_1.COLORS.reset}`);
-            }
-            else {
-                console.log(`   ${utils_1.COLORS.green}OK${utils_1.COLORS.reset}`);
-            }
-        },
-        async progress(msg) {
-            if (options.verbose) {
-                console.log(`${utils_1.COLORS.yellow}Progress: ${msg}${utils_1.COLORS.reset}`);
-            }
-        },
-        async error(msg) {
-            console.error(`${utils_1.COLORS.red}Error: ${msg}${utils_1.COLORS.reset}`);
-        },
-        async question(_payload) {
-            // CLI has no UI for questions; decline so engine can proceed with defaults or fail
-            return { selected: [], freeText: null, declined: true };
-        },
-        async done() {
-            console.log('\n');
-        },
-    });
-    // Print banner
-    console.log('');
-    console.log(BANNER_LINE);
-    console.log(`${branding_1.AGENTIDE_BRAND_NAME} Chat`);
-    console.log(BANNER_LINE);
-    console.log(`Engine:    ${state.engine}`);
-    console.log(`Model:     ${state.model}`);
-    if (claudeCheapModel) {
-        console.log(`Cheap:     ${claudeCheapModel}`);
-    }
-    console.log(`Workspace: ${options.workspace}`);
-    if (pack) {
-        console.log(`Agent:     ${pack.manifest.metadata.name}`);
-    }
-    console.log(BANNER_LINE);
-    console.log('Type a message to chat. Commands: /help');
-    console.log('');
-    // Create readline interface
-    const rl = readline.createInterface({
-        input: process.stdin,
-        output: process.stdout,
-    });
-    const prompt = () => {
-        rl.question(`${utils_1.COLORS.cyan}> ${utils_1.COLORS.reset}`, async (input) => {
-            const trimmed = input.trim();
-            if (!trimmed) {
-                prompt();
-                return;
-            }
-            // Handle commands
-            if (trimmed.startsWith('/')) {
-                const handled = await handleCommand(trimmed, state, rl, {
-                    createRunner,
-                    claudeCodePath,
-                    codexPath,
-                });
-                if (!handled) {
-                    return; // Exit
-                }
-                prompt();
-                return;
-            }
-            // Send message
-            try {
-                const result = await state.runner.run({
-                    engineId: state.engine,
-                    modelId: state.model,
-                    message: trimmed,
-                    workspaceRoot: options.workspace,
-                    sessionId: state.sessionId,
-                    emitter: createStreamingEmitter(),
-                    permissions,
-                });
-                // Check for errors in result (may not have been streamed)
-                if (!result.success && result.error) {
-                    console.error(`\n${utils_1.COLORS.red}Error: ${result.error}${utils_1.COLORS.reset}\n`);
-                }
-            }
-            catch (err) {
-                console.error(`\n${utils_1.COLORS.red}Error: ${err instanceof Error ? err.message : err}${utils_1.COLORS.reset}\n`);
-            }
-            prompt();
-        });
-    };
-    prompt();
-}
-async function handleCommand(input, state, rl, handlers) {
-    const [cmd, ...args] = input.split(/\s+/);
-    switch (cmd) {
-        case '/exit':
-        case '/quit':
-            console.log('Goodbye!');
-            state.runner.dispose();
-            rl.close();
-            return false;
-        case '/clear':
-        case '/reset':
-        case '/new':
-            state.runner.dispose();
-            state.runner = handlers.createRunner();
-            state.sessionId = `cli-${Date.now()}`;
-            console.log('Session cleared. Fresh state.');
-            return true;
-        case '/engine': {
-            const nextEngine = args[0]?.trim();
-            if (!nextEngine) {
-                console.log('Usage: /engine <id>');
-                return true;
-            }
-            if (nextEngine === 'claude' && !handlers.claudeCodePath) {
-                console.log('Cannot switch to claude: Claude Code CLI not found.');
-                return true;
-            }
-            if (nextEngine === 'codex' && !handlers.codexPath) {
-                console.log('Cannot switch to codex: Codex CLI not found.');
-                return true;
-            }
-            state.engine = nextEngine;
-            console.log(`Switched engine to ${state.engine}`);
-            return true;
-        }
-        case '/model': {
-            const nextModel = args[0];
-            if (!nextModel) {
-                console.log('Usage: /model <model-id>');
-                return true;
-            }
-            const resolvedModel = (0, headless_1.resolveModelAlias)(nextModel);
-            state.model = resolvedModel;
-            if (resolvedModel === nextModel) {
-                console.log(`Switched model to ${state.model}`);
-            }
-            else {
-                console.log(`Switched model to ${nextModel} -> ${state.model}`);
-            }
-            return true;
-        }
-        case '/status':
-            console.log([
-                'Current session:',
-                `  Engine: ${state.engine}`,
-                `  Model: ${state.model}`,
-                `  Session: ${state.sessionId}`,
-            ].join('\n'));
-            return true;
-        case '/help':
-            console.log([
-                'Commands:',
-                '  /exit, /quit    Exit the chat',
-                '  /clear          Clear session history',
-                '  /reset, /new    Alias for /clear',
-                '  /engine <id>    Switch engine (claude|codex or custom engine id)',
-                '  /model <id>     Switch model for this session',
-                '  /status         Show current engine/model/session',
-                '  /help           Show this help',
-            ].join('\n'));
-            return true;
-        default:
-            console.log(`Unknown command: ${cmd}. Type /help for available commands.`);
-            return true;
-    }
-}

package/out/cli/commands/conformance.js

@@ -1,249 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.conformanceCommand = conformanceCommand;
-/**
- * `agenthippo conformance` — the deployment's own proof (PLAN/serve-v4-clean.md §11 step 5).
- *
- * This is the artifact a partner runs at a client site without us in the room, and the honest
- * answer to "why should I believe the isolation claim": the buyer runs the test themselves.
- *
- * Deployment checks PROBE rather than assert — "the four keys are undefined in-sandbox" has to be
- * measured inside a running sandbox, not read off a config file. Checks that cannot be measured in
- * the current environment report `skip` with the reason; a skip is never a pass.
- *
- * The contract checks (cost-cap, warrant-integrity, rollback-kill-switch) are a different claim:
- * they verify THIS BINARY implements the bindings it advertises, and pass anywhere, including on a
- * machine with no deployment. They are reported separately and cannot make a run green on their
- * own — a conformance run that probed nothing exits 2, because a buyer must never be able to get a
- * clean report against a system that was never touched.
- */
-const node_child_process_1 = require("node:child_process");
-const node_util_1 = require("node:util");
-const support_1 = require("../../sandbox/support");
-const lease_1 = require("../../pack/lease");
-const warrant_1 = require("../../authority/warrant");
-const pexec = (0, node_util_1.promisify)(node_child_process_1.execFile);
-async function run(bin, args) {
-    try {
-        const { stdout } = await pexec(bin, args, { maxBuffer: 8 << 20 });
-        return { out: stdout, code: 0 };
-    }
-    catch (e) {
-        const err = e;
-        return { out: `${err.stdout ?? ''}${err.stderr ?? ''}`, code: typeof err.code === 'number' ? err.code : 1 };
-    }
-}
-/**
- * credential-confinement — no data, model, or channel credential is reachable from inside a
- * sandbox (env, /proc, filesystem). This is the check that would have caught the P2 leak: with the
- * connector in the agent container, `PGPASSWORD` was readable from a sibling's /proc.
- */
-async function credentialConfinement(opts) {
-    const name = 'credential-confinement';
-    if (!opts.sandbox) {
-        return { name, status: 'skip', detail: 'no --sandbox given; cannot probe inside a running sandbox' };
-    }
-    const rt = opts.runtime ?? 'docker';
-    // 1. The sandbox's own environment.
-    const env = await run(rt, ['exec', opts.sandbox, 'sh', '-c', 'env']);
-    if (env.code !== 0) {
-        return { name, status: 'skip', detail: `cannot exec in sandbox ${opts.sandbox}: ${env.out.trim().slice(0, 120)}` };
-    }
-    const SECRET_PATTERNS = [
-        ['provider-key', /sk-[A-Za-z0-9]{16,}/],
-        ['api-key-var', /(^|\n)[A-Z_]*API_KEY=\S/],
-        ['db-password', /(^|\n)PG(PASSWORD|PASSFILE)=\S/],
-        ['aws-secret', /(^|\n)AWS_SECRET_ACCESS_KEY=\S/],
-        ['bearer-token-var', /(^|\n)[A-Z_]*_TOKEN=\S/],
-        ['generic-secret-var', /(^|\n)[A-Z_]*SECRET[A-Z_]*=\S/],
-    ];
-    // The ONE credential permitted in a sandbox is its own model token: sandbox-bound, spend-capped,
-    // worthless anywhere else. Normalize those assignments away so the scan reports only
-    // material that would actually be worth stealing.
-    const stripSandboxTokens = (text) => text.replace(/^[A-Z_]*=ahc_\S*$/gm, '');
-    const hits = (text) => SECRET_PATTERNS.filter(([, re]) => re.test(stripSandboxTokens(text))).map(([label]) => label);
-    const envHits = hits(env.out);
-    // 2. Every readable process environment in the sandbox's PID namespace — the actual attack that
-    // recovered PGPASSWORD from a sibling when the connector ran in the agent container (P2).
-    const proc = await run(rt, ['exec', opts.sandbox, 'sh', '-c',
-        'for p in /proc/[0-9]*; do tr "\\0" "\\n" < $p/environ 2>/dev/null; done']);
-    const procHits = hits(proc.out);
-    if (envHits.length === 0 && procHits.length === 0) {
-        const hasSandboxToken = /=ahc_/.test(env.out);
-        return {
-            name, status: 'pass',
-            detail: hasSandboxToken
-                ? 'only a sandbox-scoped model token is present; no provider key, DB password, or bearer secret in env or any /proc environ'
-                : 'no credential reachable in the sandbox env or any process environ',
-        };
-    }
-    return {
-        name, status: 'fail',
-        detail: `credential material reachable inside the sandbox — env: [${envHits.join(', ') || 'none'}], /proc: [${procHits.join(', ') || 'none'}]`,
-    };
-}
-/** isolation-tier — the declared tier is actually in force, probed, not assumed. */
-async function isolationTier(opts) {
-    const name = 'isolation-tier';
-    if (opts.tier === undefined) {
-        return { name, status: 'skip', detail: 'no --tier declared' };
-    }
-    if (opts.tier === 0) {
-        return { name, status: 'pass', detail: 'tier 0 declares no boundary — nothing to enforce' };
-    }
-    if (!opts.sandbox) {
-        return { name, status: 'skip', detail: 'no --sandbox given; cannot probe the boundary' };
-    }
-    const rt = opts.runtime ?? 'docker';
-    const pids = await run(rt, ['exec', opts.sandbox, 'sh', '-c', 'ls -d /proc/[0-9]* | wc -l']);
-    if (pids.code !== 0) {
-        return { name, status: 'skip', detail: 'cannot probe the sandbox' };
-    }
-    const count = parseInt(pids.out.trim(), 10);
-    // A sandbox in its own PID namespace sees only its own handful of processes. A sandbox sharing the
-    // host namespace sees everything — which is what tier 0 looks like wearing a tier-2 label.
-    if (!Number.isFinite(count)) {
-        return { name, status: 'skip', detail: 'unreadable process count' };
-    }
-    if (count > 50) {
-        return { name, status: 'fail', detail: `sandbox sees ${count} processes — PID namespace is NOT isolated despite tier ${opts.tier}` };
-    }
-    const nets = await run(rt, ['inspect', opts.sandbox, '--format', '{{json .NetworkSettings.Networks}}']);
-    const networks = Object.keys(JSON.parse(nets.out.trim() || '{}'));
-    if (networks.includes('bridge')) {
-        return { name, status: 'fail', detail: 'sandbox is on the default bridge — it is not route-confined' };
-    }
-    return {
-        name, status: 'pass',
-        detail: `tier ${opts.tier} in force: own PID namespace (${count} procs), routes=${networks.join(',') || 'none'}`,
-    };
-}
-/**
- * cost-cap — the model credential in a sandbox cannot be replayed elsewhere (blocker C).
- *
- * Exercises the SHIPPED credential (the ES256 inference warrant serve actually mints), not the
- * removed HMAC token: a check that proves a property of dead code proves nothing about the
- * deployment. The proxy verifies with a public key, so it can check a warrant but never mint one.
- */
-function costCap() {
-    const name = 'cost-cap';
-    const upstream = 'sk-conformance-upstream-key';
-    const key = (0, warrant_1.generateWarrantKeypair)('conformance-cost-cap');
-    const pubs = { [key.kid]: key.publicKeyPem };
-    const token = (0, support_1.mintSandboxInferenceWarrant)(key, {
-        user: 'probe@corp.com', pack: 'probe', packVersion: '0.0.0', sandboxId: 'sandbox-A', tier: 2,
-    });
-    const boundToOwnSandbox = (0, warrant_1.verifyWarrant)(token, pubs, { audience: 'inference', channelSandboxId: 'sandbox-A' }).ok;
-    const usableElsewhere = (0, warrant_1.verifyWarrant)(token, pubs, { audience: 'inference', channelSandboxId: 'sandbox-B' }).ok;
-    const leaksProvider = token.includes(upstream);
-    if (boundToOwnSandbox && !usableElsewhere && !leaksProvider) {
-        return { name, status: 'pass', detail: 'model token is a sandbox-bound signed warrant and carries no provider key — a cap cannot be evaded by replay' };
-    }
-    return {
-        name, status: 'fail',
-        detail: `warrant binding broken (own=${boundToOwnSandbox}, elsewhere=${usableElsewhere}, leaks=${leaksProvider})`,
-    };
-}
-/** evidence-integrity — a warrant proves authority and a gateway cannot mint one. */
-function warrantIntegrity() {
-    const name = 'warrant-integrity';
-    const key = (0, warrant_1.generateWarrantKeypair)('conformance');
-    const pubs = { [key.kid]: key.publicKeyPem };
-    const token = (0, warrant_1.mintWarrant)({
-        user: 'probe@corp.com', pack: 'probe', packVersion: '0.0.0',
-        sandboxId: 'sandbox-A', tier: 2, aud: 'data',
-    }, key);
-    const own = (0, warrant_1.verifyWarrant)(token, pubs, { audience: 'data', channelSandboxId: 'sandbox-A' });
-    const lifted = (0, warrant_1.verifyWarrant)(token, pubs, { audience: 'data', channelSandboxId: 'sandbox-B' });
-    const wrongAud = (0, warrant_1.verifyWarrant)(token, pubs, { audience: 'inference', channelSandboxId: 'sandbox-A' });
-    if (own.ok && !lifted.ok && !wrongAud.ok) {
-        return { name, status: 'pass', detail: 'warrants are signed, sandbox-bound, and audience-scoped; gateways verify but cannot mint' };
-    }
-    return { name, status: 'fail', detail: `warrant binding broken (own=${own.ok}, lifted=${lifted.ok}, wrongAud=${wrongAud.ok})` };
-}
-/** rollback + kill-switch — admission refuses unpinned versions and revoked leases. */
-function rollbackAndKill() {
-    const name = 'rollback-kill-switch';
-    const now = Math.floor(Date.now() / 1000);
-    const pinned = { pack: 'probe', version: '1.0.0', expiresAt: now + 60, enabled: true };
-    const results = {
-        pinnedAdmits: safe(() => (0, lease_1.assertAdmitted)(pinned, { pack: 'probe', version: '1.0.0', nowSeconds: now })),
-        otherVersionRefused: !safe(() => (0, lease_1.assertAdmitted)(pinned, { pack: 'probe', version: '1.0.1', nowSeconds: now })),
-        killSwitchRefuses: !safe(() => (0, lease_1.assertAdmitted)({ ...pinned, enabled: false }, { pack: 'probe', version: '1.0.0', nowSeconds: now })),
-        expiredRefused: !safe(() => (0, lease_1.assertAdmitted)({ ...pinned, expiresAt: now - 1 }, { pack: 'probe', version: '1.0.0', nowSeconds: now })),
-    };
-    const ok = Object.values(results).every(Boolean);
-    return {
-        name, status: ok ? 'pass' : 'fail',
-        detail: ok
-            ? 'pinned version admits, other versions refused, kill switch and expiry both fail closed'
-            : `admission contract broken: ${JSON.stringify(results)}`,
-    };
-}
-function safe(fn) {
-    try {
-        fn();
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-async function conformanceCommand(opts) {
-    const tag = (kind) => (c) => ({ ...c, kind });
-    const results = [
-        tag('deployment')(await credentialConfinement(opts)),
-        tag('deployment')(await isolationTier(opts)),
-        tag('algorithm')(costCap()),
-        tag('algorithm')(warrantIntegrity()),
-        tag('algorithm')(rollbackAndKill()),
-    ];
-    const deployment = results.filter((r) => r.kind === 'deployment');
-    const probed = deployment.filter((r) => r.status !== 'skip');
-    const failed = results.filter((r) => r.status === 'fail');
-    // A run that probed nothing is the case this command exists to prevent: it must never be
-    // mistaken for a deployment that passed, in the text output, the JSON, or the exit code.
-    const nothingProbed = probed.length === 0;
-    if (opts.json) {
-        console.log(JSON.stringify({
-            results,
-            deployment_probed: !nothingProbed,
-            summary: nothingProbed
-                ? 'no deployment was probed — algorithm checks verify this binary only'
-                : `${probed.filter((r) => r.status === 'pass').length}/${probed.length} deployment checks passed`,
-        }, null, 2));
-    }
-    else {
-        console.log('\nAgentHippo conformance\n');
-        const show = (r) => {
-            const mark = r.status === 'pass' ? 'PASS' : r.status === 'fail' ? 'FAIL' : 'SKIP';
-            console.log(`  ${mark}  ${r.name}\n        ${r.detail}`);
-        };
-        console.log('THIS DEPLOYMENT  (probes a running sandbox)');
-        deployment.forEach(show);
-        console.log('\nTHIS BINARY  (contract checks — environment-independent, pass with no deployment)');
-        results.filter((r) => r.kind === 'algorithm').forEach(show);
-        console.log('');
-        if (nothingProbed) {
-            console.log('NO DEPLOYMENT WAS PROBED. The binary checks above say nothing about a running');
-            console.log('system — pass --sandbox <container> --tier <n> to actually test one.');
-        }
-        else {
-            const passed = probed.filter((r) => r.status === 'pass').length;
-            console.log(`${passed}/${probed.length} deployment checks passed` +
-                (deployment.length - probed.length ? `, ${deployment.length - probed.length} not probed` : ''));
-        }
-        if (failed.length) {
-            console.log(`${failed.length} FAILED`);
-        }
-    }
-    // Non-zero on failure so this can gate a deployment in CI — and non-zero when nothing was
-    // probed, so "green" always means a real deployment was measured.
-    if (failed.length) {
-        return 1;
-    }
-    return nothingProbed ? 2 : 0;
-}

package/out/cli/commands/data-plane.js

@@ -1,67 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.dataPlaneSidecarCommand = dataPlaneSidecarCommand;
-/**
- * `agenthippo data-plane` — run the connector as a SIDECAR (secure-obo-design §7.6).
- *
- * This process is the connector's own trust domain: it holds the backend BASE credential
- * (AWS keys, Postgres pool login, …) and runs in a SEPARATE container from the engine. The
- * agent container's `serve` registers turns with this sidecar's authenticated control API and
- * never sees the base credential.
- */
-const pack_loader_1 = require("../pack-loader");
-const data_plane_1 = require("../data-plane");
-const headless_1 = require("../../headless");
-const utils_1 = require("../utils");
-async function dataPlaneSidecarCommand(options) {
-    const registerToken = process.env.AGENTHIPPO_DATA_PLANE_TOKEN?.trim();
-    if (!registerToken) {
-        console.error('Error: AGENTHIPPO_DATA_PLANE_TOKEN is required (shared secret the trusted EDGE — or, legacy, the agent\'s serve — presents to register turns).');
-        process.exit(1);
-    }
-    let pack;
-    try {
-        pack = await (0, pack_loader_1.loadAgentPack)(options.agent, options.workspace);
-    }
-    catch (err) {
-        console.error(`Error: ${err instanceof Error ? err.message : err}`);
-        process.exit(1);
-        return;
-    }
-    const cfg = (0, data_plane_1.resolveDataPlaneConfig)(pack.manifest.spec, pack.packPath);
-    if (!cfg) {
-        console.error('Error: pack declares no spec.dataPlane — nothing for the sidecar to run.');
-        process.exit(1);
-        return;
-    }
-    const logger = options.verbose ? new headless_1.ConsoleLogger('[Sidecar]') : new headless_1.NoOpLogger();
-    let sidecar;
-    try {
-        sidecar = await (0, data_plane_1.startDataPlaneSidecar)({
-            config: cfg,
-            registerToken,
-            gatewayPort: options.gatewayPort,
-            controlPort: options.controlPort,
-            bindHost: options.host ?? '0.0.0.0',
-            logger,
-        });
-    }
-    catch (err) {
-        console.error(`${utils_1.COLORS.red}Error: failed to start the data-plane sidecar:${utils_1.COLORS.reset} ${err instanceof Error ? err.message : err}`);
-        process.exit(1);
-        return;
-    }
-    console.log(`OK: Data-plane sidecar (provider=${cfg.provider ?? 'passthrough'}) — connector: ${cfg.connectorPath}`);
-    console.log(`  gateway (engine dials, nonce-auth): ${sidecar.gatewayUrl}`);
-    console.log(`  control (edge/serve registers, bearer):  :${sidecar.controlPort}`);
-    console.log('  Base credentials live here only — never in the agent container.');
-    console.log('  Edge mode (P1): give the register token to the IdP edge only; serve runs with AGENTHIPPO_DATA_PLANE_EDGE=1 and no token.');
-    const shutdown = () => { void sidecar.close().finally(() => process.exit(0)); };
-    process.on('SIGINT', shutdown);
-    process.on('SIGTERM', shutdown);
-    // Keep the process alive.
-    await new Promise(() => { });
-}