@agentspec/sidecar 0.1.0

package/dist/embed.d.ts

@@ -0,0 +1,87 @@
+import { FastifyInstance } from 'fastify';
+import { ProofRecord, AgentSpecManifest } from '@agentspec/sdk';
+
+interface AuditEntry {
+    requestId: string;
+    timestamp: string;
+    method: string;
+    path: string;
+    statusCode?: number;
+    durationMs?: number;
+    upstreamMs?: number;
+    excerpt?: string;
+    /** OPA violation IDs that fired on this request (track or enforce mode). */
+    opaViolations?: string[];
+    /** true when enforce mode blocked this request with a 403 before upstream. */
+    opaBlocked?: boolean;
+    /** Guardrail types that actually ran during this request (from agent). */
+    guardrailsInvoked?: string[];
+    /** Tool names that were called during this request (from agent). */
+    toolsCalled?: string[];
+    /** Model calls recorded during this request. */
+    modelCalls?: {
+        modelId: string;
+        tokenCount: number;
+    }[];
+    /** true when OPA evaluated real behavioral data and allowed the request. */
+    behavioralCompliant?: boolean;
+}
+/**
+ * O(1) circular ring buffer for structured audit log entries.
+ *
+ * Uses head/tail indices on a pre-allocated array so eviction on overflow
+ * is O(1) rather than the O(n) cost of Array.shift().
+ *
+ * Subscribers receive each new entry synchronously as it is pushed.
+ */
+declare class AuditRing {
+    private readonly items;
+    private readonly maxSize;
+    private head;
+    private count;
+    private readonly listeners;
+    constructor(maxSize?: number);
+    push(entry: AuditEntry): void;
+    getAll(): AuditEntry[];
+    findById(requestId: string): AuditEntry | undefined;
+    /**
+     * Merge partial fields into an existing entry identified by requestId.
+     * Returns true if found and updated, false if not found.
+     * O(n) scan — same as findById.
+     */
+    updateById(requestId: string, partial: Partial<AuditEntry>): boolean;
+    /** Subscribe to new entries. Returns an unsubscribe function. */
+    subscribe(listener: (entry: AuditEntry) => void): () => void;
+    get size(): number;
+}
+
+/**
+ * In-memory store for proof records submitted by external tools.
+ * Each ruleId holds at most one proof record (the latest submission overwrites).
+ *
+ * WARNING: Records are lost on sidecar restart. For production use,
+ * re-submit proof records from your CI pipeline after deployment.
+ * Set AGENTSPEC_PROOF_TOKEN to require bearer-token auth on mutating routes.
+ */
+declare class ProofStore {
+    private records;
+    isValidRuleId(ruleId: string): boolean;
+    set(record: ProofRecord): void;
+    get(ruleId: string): ProofRecord | undefined;
+    getAll(): ProofRecord[];
+    delete(ruleId: string): boolean;
+    clear(): void;
+}
+
+interface ControlPlaneOptions {
+    logger?: boolean;
+    proxyUrl?: string;
+    startedAt?: number;
+    /** OPA URL to use for /events behavioral evaluation. Defaults to config.opaUrl. */
+    opaUrl?: string | null;
+    /** Proof store instance to use. If not provided a fresh store is created. */
+    proofStore?: ProofStore;
+}
+declare function buildControlPlaneApp(manifest: AgentSpecManifest, auditRing: AuditRing, opts?: ControlPlaneOptions): Promise<FastifyInstance>;
+
+export { AuditRing, type ControlPlaneOptions, ProofStore, buildControlPlaneApp };

package/dist/embed.js

@@ -0,0 +1,11 @@
+import {
+  AuditRing,
+  ProofStore,
+  buildControlPlaneApp
+} from "./chunk-KCNUMVLW.js";
+export {
+  AuditRing,
+  ProofStore,
+  buildControlPlaneApp
+};
+//# sourceMappingURL=embed.js.map

package/dist/embed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/index.js

@@ -0,0 +1,161 @@
+import {
+  AuditRing,
+  buildBehavioralOPAInput,
+  buildControlPlaneApp,
+  config,
+  loadManifest,
+  parseCommaSeparatedHeader,
+  queryOPA
+} from "./chunk-KCNUMVLW.js";
+
+// src/proxy.ts
+import { randomUUID } from "crypto";
+import Fastify from "fastify";
+import httpProxy from "@fastify/http-proxy";
+async function buildProxyApp(manifest, opts = {}) {
+  const app = Fastify({ logger: opts.logger ?? false });
+  const auditRing = opts.auditRing ?? new AuditRing(config.auditRingSize);
+  const upstream = opts.upstream ?? config.upstreamUrl;
+  const opaUrl = opts.opaUrl !== void 0 ? opts.opaUrl : config.opaUrl;
+  const opaMode = opts.opaProxyMode ?? config.opaProxyMode;
+  app.addHook("onRequest", async (request) => {
+    const requestId = request.headers["x-request-id"] ?? randomUUID();
+    request.headers["x-request-id"] = requestId;
+    request._startedAt = Date.now();
+  });
+  app.addHook("onResponse", async (request, reply) => {
+    if (request._opaBlocked) return;
+    const requestId = request.headers["x-request-id"];
+    auditRing.push({
+      requestId,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      method: request.method,
+      path: request.url,
+      statusCode: reply.statusCode,
+      durationMs: request._startedAt !== void 0 ? Date.now() - request._startedAt : void 0,
+      opaViolations: request._opaViolations,
+      // HeaderReporting behavioral fields — populated when the agent sets response headers
+      guardrailsInvoked: request._agentGuardrailsInvoked && request._agentGuardrailsInvoked.length > 0 ? request._agentGuardrailsInvoked : void 0,
+      toolsCalled: request._agentToolsCalled && request._agentToolsCalled.length > 0 ? request._agentToolsCalled : void 0,
+      behavioralCompliant: request._behavioralCompliant
+    });
+  });
+  app.addHook("onRequestAbort", async (request) => {
+    const requestId = request.headers["x-request-id"];
+    if (!requestId) return;
+    auditRing.push({
+      requestId,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      method: request.method,
+      path: request.url,
+      statusCode: void 0,
+      // aborted — no response status
+      durationMs: request._startedAt !== void 0 ? Date.now() - request._startedAt : void 0,
+      excerpt: "aborted"
+    });
+  });
+  await app.register(httpProxy, {
+    upstream,
+    disableRequestLogging: true
+  });
+  app.addHook("onSend", async (request, reply, payload) => {
+    const rawInvoked = reply.getHeader("x-agentspec-guardrails-invoked");
+    const rawTools = reply.getHeader("x-agentspec-tools-called");
+    const invoked = parseCommaSeparatedHeader(
+      typeof rawInvoked === "string" ? rawInvoked : Array.isArray(rawInvoked) ? rawInvoked : void 0
+    );
+    const toolsCalled = parseCommaSeparatedHeader(
+      typeof rawTools === "string" ? rawTools : Array.isArray(rawTools) ? rawTools : void 0
+    );
+    reply.removeHeader("x-agentspec-guardrails-invoked");
+    reply.removeHeader("x-agentspec-tools-called");
+    reply.removeHeader("x-agentspec-user-confirmed");
+    if (invoked.length > 0) request._agentGuardrailsInvoked = invoked;
+    if (toolsCalled.length > 0) request._agentToolsCalled = toolsCalled;
+    const hasBehavioralData = invoked.length > 0 || toolsCalled.length > 0;
+    if (opaUrl && opaMode !== "off" && hasBehavioralData) {
+      const opaInput = buildBehavioralOPAInput(manifest, invoked, toolsCalled);
+      const opaResult = await queryOPA(opaUrl, manifest.metadata.name, opaInput);
+      if (opaResult.violations.length > 0) {
+        request._opaViolations = opaResult.violations;
+        reply.header("X-AgentSpec-OPA-Violations", opaResult.violations.join(","));
+      }
+      request._behavioralCompliant = opaResult.allow;
+      if (opaMode === "enforce" && !opaResult.allow) {
+        const stream = payload;
+        if (stream?.resume) stream.resume();
+        else stream?.destroy?.();
+        const requestId = request.headers["x-request-id"];
+        auditRing.push({
+          requestId,
+          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+          method: request.method,
+          path: request.url,
+          statusCode: 403,
+          durationMs: request._startedAt !== void 0 ? Date.now() - request._startedAt : 0,
+          opaViolations: opaResult.violations,
+          opaBlocked: true,
+          guardrailsInvoked: invoked.length > 0 ? invoked : void 0,
+          toolsCalled: toolsCalled.length > 0 ? toolsCalled : void 0,
+          behavioralCompliant: false
+        });
+        request._opaBlocked = true;
+        reply.code(403).header("Content-Type", "application/json");
+        return JSON.stringify({
+          error: "PolicyViolation",
+          blocked: true,
+          violations: opaResult.violations,
+          message: `Request blocked by OPA policy: ${opaResult.violations.join(", ")}`
+        });
+      }
+    }
+    return payload;
+  });
+  return app;
+}
+
+// src/logger.ts
+function write(stream, level, msg, extra) {
+  const line = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), level, msg, ...extra });
+  stream.write(line + "\n");
+}
+var log = {
+  info(msg, extra) {
+    write(process.stdout, "info", msg, extra);
+  },
+  error(msg, extra) {
+    write(process.stderr, "error", msg, extra);
+  }
+};
+
+// src/index.ts
+async function main() {
+  const { manifest } = loadManifest(config.manifestPath);
+  const auditRing = new AuditRing(config.auditRingSize);
+  const startedAt = Date.now();
+  const proxyApp = await buildProxyApp(manifest, { auditRing });
+  const cpApp = await buildControlPlaneApp(manifest, auditRing, { startedAt });
+  await proxyApp.listen({ port: config.proxyPort, host: "0.0.0.0" });
+  await cpApp.listen({ port: config.controlPlanePort, host: "0.0.0.0" });
+  log.info("sidecar started", {
+    proxy: config.proxyPort,
+    controlPlane: config.controlPlanePort,
+    agent: manifest.metadata.name
+  });
+  const shutdown = async (signal) => {
+    log.info("shutdown signal received", { signal });
+    try {
+      await Promise.all([proxyApp.close(), cpApp.close()]);
+    } catch (err) {
+      log.error("error during shutdown", { err: String(err) });
+    }
+    process.exit(0);
+  };
+  process.once("SIGTERM", () => void shutdown("SIGTERM"));
+  process.once("SIGINT", () => void shutdown("SIGINT"));
+}
+main().catch((err) => {
+  log.error("fatal startup error", { err: String(err) });
+  process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/proxy.ts","../src/logger.ts","../src/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto'\nimport Fastify, { type FastifyInstance, type FastifyRequest } from 'fastify'\nimport httpProxy from '@fastify/http-proxy'\nimport type { AgentSpecManifest } from '@agentspec/sdk'\nimport { AuditRing } from './audit-ring.js'\nimport { config } from './config.js'\nimport {\n  buildBehavioralOPAInput,\n  parseCommaSeparatedHeader,\n  queryOPA,\n} from './control-plane/opa-client.js'\n\n// Augment Fastify's request type to carry per-request metadata\ndeclare module 'fastify' {\n  interface FastifyRequest {\n    _startedAt?: number\n    _opaViolations?: string[]\n    _opaBlocked?: boolean\n    /** Guardrail types that the agent reported it actually ran (HeaderReporting). */\n    _agentGuardrailsInvoked?: string[]\n    /** Tool names that the agent reported it called (HeaderReporting). */\n    _agentToolsCalled?: string[]\n    /** Whether OPA evaluated real behavioral data and allowed the request. */\n    _behavioralCompliant?: boolean\n  }\n}\n\nexport interface ProxyAppOptions {\n  logger?: boolean\n  upstream?: string\n  auditRing?: AuditRing\n  /**\n   * OPA base URL to use for per-request policy evaluation.\n   * Defaults to config.opaUrl (from OPA_URL env var).\n   * Pass null to disable OPA for this instance.\n   */\n  opaUrl?: string | null\n  /**\n   * Proxy OPA enforcement mode:\n   *   enforce — block with 403 when OPA denies (after agent responds)\n   *   track   — record violations in audit ring, forward the request\n   *   off     — disable OPA proxy checks entirely\n   * Defaults to config.opaProxyMode (from OPA_PROXY_MODE env var, default 'track').\n   *\n   * NOTE: OPA is triggered by agent RESPONSE headers (HeaderReporting), not by\n   * client request headers. The agent sets X-AgentSpec-Guardrails-Invoked etc.\n   * on its response; the sidecar reads them in the onSend hook before forwarding.\n   */\n  opaProxyMode?: 'enforce' | 'track' | 'off'\n}\n\nexport async function buildProxyApp(\n  manifest: AgentSpecManifest,\n  opts: ProxyAppOptions = {},\n): Promise<FastifyInstance> {\n  const app = Fastify({ logger: opts.logger ?? false })\n  const auditRing = opts.auditRing ?? new AuditRing(config.auditRingSize)\n  const upstream = opts.upstream ?? config.upstreamUrl\n  const opaUrl = opts.opaUrl !== undefined ? opts.opaUrl : config.opaUrl\n  const opaMode = opts.opaProxyMode ?? config.opaProxyMode\n\n  app.addHook('onRequest', async (request: FastifyRequest) => {\n    // ── Request ID injection + timing ─────────────────────────────────────────\n    // OPA is no longer evaluated here — it runs in replyOptions.onResponse\n    // after the agent has responded and reported what actually happened.\n    const requestId =\n      (request.headers['x-request-id'] as string | undefined) ?? randomUUID()\n    request.headers['x-request-id'] = requestId\n    request._startedAt = Date.now()\n  })\n\n  app.addHook('onResponse', async (request: FastifyRequest, reply) => {\n    // Skip — already recorded in the OPA block branch of replyOptions.onResponse\n    if (request._opaBlocked) return\n\n    const requestId = request.headers['x-request-id'] as string\n    auditRing.push({\n      requestId,\n      timestamp: new Date().toISOString(),\n      method: request.method,\n      path: request.url,\n      statusCode: reply.statusCode,\n      durationMs:\n        request._startedAt !== undefined\n          ? Date.now() - request._startedAt\n          : undefined,\n      opaViolations: request._opaViolations,\n      // HeaderReporting behavioral fields — populated when the agent sets response headers\n      guardrailsInvoked:\n        request._agentGuardrailsInvoked && request._agentGuardrailsInvoked.length > 0\n          ? request._agentGuardrailsInvoked\n          : undefined,\n      toolsCalled:\n        request._agentToolsCalled && request._agentToolsCalled.length > 0\n          ? request._agentToolsCalled\n          : undefined,\n      behavioralCompliant: request._behavioralCompliant,\n    })\n  })\n\n  // onRequestAbort fires when the client disconnects before a response is sent.\n  app.addHook('onRequestAbort', async (request: FastifyRequest) => {\n    const requestId = request.headers['x-request-id'] as string\n    if (!requestId) return\n    auditRing.push({\n      requestId,\n      timestamp: new Date().toISOString(),\n      method: request.method,\n      path: request.url,\n      statusCode: undefined, // aborted — no response status\n      durationMs:\n        request._startedAt !== undefined\n          ? Date.now() - request._startedAt\n          : undefined,\n      excerpt: 'aborted',\n    })\n  })\n\n  await app.register(httpProxy, {\n    upstream,\n    disableRequestLogging: true,\n  })\n\n  /**\n   * HeaderReporting data path — fires BEFORE the response body is piped to the client,\n   * AFTER @fastify/reply-from has copied upstream headers onto `reply`.\n   *\n   * We use `onSend` (not replyOptions.onResponse) because:\n   *   - onSend is fully async (awaited by Fastify)\n   *   - onSend receives headers already on `reply` (not on a raw stream)\n   *   - onSend can replace the payload for enforce-mode 403 blocking\n   *   - replyOptions.onResponse in @fastify/reply-from v9 is NOT awaited and\n   *     receives the raw stream as third arg, not a response with headers\n   *\n   * Steps:\n   *   1. Read X-AgentSpec-* response headers set by the agent's sdk-langgraph middleware.\n   *   2. Strip them so clients never see internal headers.\n   *   3. If OPA is configured, evaluate the real behavioral data.\n   *   4. In enforce mode: replace payload with 403 JSON if OPA denies.\n   *   5. In track mode or allow: return payload unchanged.\n   */\n  app.addHook('onSend', async (request, reply, payload) => {\n    // ── 1. Read agent behavioral headers (already set on reply by reply-from) ────\n    const rawInvoked = reply.getHeader('x-agentspec-guardrails-invoked')\n    const rawTools = reply.getHeader('x-agentspec-tools-called')\n\n    const invoked = parseCommaSeparatedHeader(\n      typeof rawInvoked === 'string' ? rawInvoked\n        : Array.isArray(rawInvoked) ? (rawInvoked as string[])\n        : undefined,\n    )\n    const toolsCalled = parseCommaSeparatedHeader(\n      typeof rawTools === 'string' ? rawTools\n        : Array.isArray(rawTools) ? (rawTools as string[])\n        : undefined,\n    )\n\n    // ── 2. Strip internal headers before forwarding to client ────────────────────\n    reply.removeHeader('x-agentspec-guardrails-invoked')\n    reply.removeHeader('x-agentspec-tools-called')\n    reply.removeHeader('x-agentspec-user-confirmed')\n\n    // ── 3. Store behavioral data on request for onResponse hook ──────────────────\n    if (invoked.length > 0) request._agentGuardrailsInvoked = invoked\n    if (toolsCalled.length > 0) request._agentToolsCalled = toolsCalled\n\n    // ── 4. OPA evaluation from real agent response data (not client headers) ──────\n    const hasBehavioralData = invoked.length > 0 || toolsCalled.length > 0\n    if (opaUrl && opaMode !== 'off' && hasBehavioralData) {\n      const opaInput = buildBehavioralOPAInput(manifest, invoked, toolsCalled)\n      const opaResult = await queryOPA(opaUrl, manifest.metadata.name, opaInput)\n\n      if (opaResult.violations.length > 0) {\n        request._opaViolations = opaResult.violations\n        reply.header('X-AgentSpec-OPA-Violations', opaResult.violations.join(','))\n      }\n\n      // Record whether OPA cleared this request based on real behavioral data\n      request._behavioralCompliant = opaResult.allow\n\n      if (opaMode === 'enforce' && !opaResult.allow) {\n        // Drain the upstream response stream to avoid connection leaks\n        const stream = payload as { resume?: () => void; destroy?: () => void } | null\n        if (stream?.resume) stream.resume()\n        else stream?.destroy?.()\n\n        const requestId = request.headers['x-request-id'] as string\n        auditRing.push({\n          requestId,\n          timestamp: new Date().toISOString(),\n          method: request.method,\n          path: request.url,\n          statusCode: 403,\n          durationMs:\n            request._startedAt !== undefined\n              ? Date.now() - request._startedAt\n              : 0,\n          opaViolations: opaResult.violations,\n          opaBlocked: true,\n          guardrailsInvoked: invoked.length > 0 ? invoked : undefined,\n          toolsCalled: toolsCalled.length > 0 ? toolsCalled : undefined,\n          behavioralCompliant: false,\n        })\n        request._opaBlocked = true\n\n        reply.code(403).header('Content-Type', 'application/json')\n        return JSON.stringify({\n          error: 'PolicyViolation',\n          blocked: true,\n          violations: opaResult.violations,\n          message: `Request blocked by OPA policy: ${opaResult.violations.join(', ')}`,\n        })\n      }\n    }\n\n    // ── 5. Return payload unchanged — forward the upstream response ───────────────\n    return payload\n  })\n\n  return app\n}\n","/**\n * Minimal structured JSON logger for the sidecar.\n *\n * Writes newline-delimited JSON to stdout (info) or stderr (error),\n * compatible with Kubernetes log aggregators (Datadog, ELK, GCP Logging).\n *\n * Format: { \"ts\": \"<ISO>\", \"level\": \"info\"|\"error\", \"msg\": \"...\", ...extra }\n */\n\nfunction write(stream: NodeJS.WriteStream, level: string, msg: string, extra?: Record<string, unknown>): void {\n  const line = JSON.stringify({ ts: new Date().toISOString(), level, msg, ...extra })\n  stream.write(line + '\\n')\n}\n\nexport const log = {\n  info(msg: string, extra?: Record<string, unknown>): void {\n    write(process.stdout, 'info', msg, extra)\n  },\n  error(msg: string, extra?: Record<string, unknown>): void {\n    write(process.stderr, 'error', msg, extra)\n  },\n}\n","import { loadManifest } from '@agentspec/sdk'\nimport { config } from './config.js'\nimport { AuditRing } from './audit-ring.js'\nimport { buildProxyApp } from './proxy.js'\nimport { buildControlPlaneApp } from './control-plane/index.js'\nimport { log } from './logger.js'\n\nasync function main(): Promise<void> {\n  const { manifest } = loadManifest(config.manifestPath)\n\n  const auditRing = new AuditRing(config.auditRingSize)\n  const startedAt = Date.now()\n\n  const proxyApp = await buildProxyApp(manifest, { auditRing })\n  const cpApp = await buildControlPlaneApp(manifest, auditRing, { startedAt })\n\n  await proxyApp.listen({ port: config.proxyPort, host: '0.0.0.0' })\n  await cpApp.listen({ port: config.controlPlanePort, host: '0.0.0.0' })\n\n  log.info('sidecar started', {\n    proxy: config.proxyPort,\n    controlPlane: config.controlPlanePort,\n    agent: manifest.metadata.name,\n  })\n\n  // Graceful shutdown — handle SIGTERM (Docker/K8s stop) and SIGINT (Ctrl-C)\n  const shutdown = async (signal: string): Promise<void> => {\n    log.info('shutdown signal received', { signal })\n    try {\n      await Promise.all([proxyApp.close(), cpApp.close()])\n    } catch (err) {\n      log.error('error during shutdown', { err: String(err) })\n    }\n    process.exit(0)\n  }\n\n  process.once('SIGTERM', () => void shutdown('SIGTERM'))\n  process.once('SIGINT', () => void shutdown('SIGINT'))\n}\n\nmain().catch((err: unknown) => {\n  log.error('fatal startup error', { err: String(err) })\n  process.exit(1)\n})\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,OAAO,aAA4D;AACnE,OAAO,eAAe;AAiDtB,eAAsB,cACpB,UACA,OAAwB,CAAC,GACC;AAC1B,QAAM,MAAM,QAAQ,EAAE,QAAQ,KAAK,UAAU,MAAM,CAAC;AACpD,QAAM,YAAY,KAAK,aAAa,IAAI,UAAU,OAAO,aAAa;AACtE,QAAM,WAAW,KAAK,YAAY,OAAO;AACzC,QAAM,SAAS,KAAK,WAAW,SAAY,KAAK,SAAS,OAAO;AAChE,QAAM,UAAU,KAAK,gBAAgB,OAAO;AAE5C,MAAI,QAAQ,aAAa,OAAO,YAA4B;AAI1D,UAAM,YACH,QAAQ,QAAQ,cAAc,KAA4B,WAAW;AACxE,YAAQ,QAAQ,cAAc,IAAI;AAClC,YAAQ,aAAa,KAAK,IAAI;AAAA,EAChC,CAAC;AAED,MAAI,QAAQ,cAAc,OAAO,SAAyB,UAAU;AAElE,QAAI,QAAQ,YAAa;AAEzB,UAAM,YAAY,QAAQ,QAAQ,cAAc;AAChD,cAAU,KAAK;AAAA,MACb;AAAA,MACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,QAAQ,QAAQ;AAAA,MAChB,MAAM,QAAQ;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,YACE,QAAQ,eAAe,SACnB,KAAK,IAAI,IAAI,QAAQ,aACrB;AAAA,MACN,eAAe,QAAQ;AAAA;AAAA,MAEvB,mBACE,QAAQ,2BAA2B,QAAQ,wBAAwB,SAAS,IACxE,QAAQ,0BACR;AAAA,MACN,aACE,QAAQ,qBAAqB,QAAQ,kBAAkB,SAAS,IAC5D,QAAQ,oBACR;AAAA,MACN,qBAAqB,QAAQ;AAAA,IAC/B,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,QAAQ,kBAAkB,OAAO,YAA4B;AAC/D,UAAM,YAAY,QAAQ,QAAQ,cAAc;AAChD,QAAI,CAAC,UAAW;AAChB,cAAU,KAAK;AAAA,MACb;AAAA,MACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,QAAQ,QAAQ;AAAA,MAChB,MAAM,QAAQ;AAAA,MACd,YAAY;AAAA;AAAA,MACZ,YACE,QAAQ,eAAe,SACnB,KAAK,IAAI,IAAI,QAAQ,aACrB;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH,CAAC;AAED,QAAM,IAAI,SAAS,WAAW;AAAA,IAC5B;AAAA,IACA,uBAAuB;AAAA,EACzB,CAAC;AAoBD,MAAI,QAAQ,UAAU,OAAO,SAAS,OAAO,YAAY;AAEvD,UAAM,aAAa,MAAM,UAAU,gCAAgC;AACnE,UAAM,WAAW,MAAM,UAAU,0BAA0B;AAE3D,UAAM,UAAU;AAAA,MACd,OAAO,eAAe,WAAW,aAC7B,MAAM,QAAQ,UAAU,IAAK,aAC7B;AAAA,IACN;AACA,UAAM,cAAc;AAAA,MAClB,OAAO,aAAa,WAAW,WAC3B,MAAM,QAAQ,QAAQ,IAAK,WAC3B;AAAA,IACN;AAGA,UAAM,aAAa,gCAAgC;AACnD,UAAM,aAAa,0BAA0B;AAC7C,UAAM,aAAa,4BAA4B;AAG/C,QAAI,QAAQ,SAAS,EAAG,SAAQ,0BAA0B;AAC1D,QAAI,YAAY,SAAS,EAAG,SAAQ,oBAAoB;AAGxD,UAAM,oBAAoB,QAAQ,SAAS,KAAK,YAAY,SAAS;AACrE,QAAI,UAAU,YAAY,SAAS,mBAAmB;AACpD,YAAM,WAAW,wBAAwB,UAAU,SAAS,WAAW;AACvE,YAAM,YAAY,MAAM,SAAS,QAAQ,SAAS,SAAS,MAAM,QAAQ;AAEzE,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,gBAAQ,iBAAiB,UAAU;AACnC,cAAM,OAAO,8BAA8B,UAAU,WAAW,KAAK,GAAG,CAAC;AAAA,MAC3E;AAGA,cAAQ,uBAAuB,UAAU;AAEzC,UAAI,YAAY,aAAa,CAAC,UAAU,OAAO;AAE7C,cAAM,SAAS;AACf,YAAI,QAAQ,OAAQ,QAAO,OAAO;AAAA,YAC7B,SAAQ,UAAU;AAEvB,cAAM,YAAY,QAAQ,QAAQ,cAAc;AAChD,kBAAU,KAAK;AAAA,UACb;AAAA,UACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,QAAQ,QAAQ;AAAA,UAChB,MAAM,QAAQ;AAAA,UACd,YAAY;AAAA,UACZ,YACE,QAAQ,eAAe,SACnB,KAAK,IAAI,IAAI,QAAQ,aACrB;AAAA,UACN,eAAe,UAAU;AAAA,UACzB,YAAY;AAAA,UACZ,mBAAmB,QAAQ,SAAS,IAAI,UAAU;AAAA,UAClD,aAAa,YAAY,SAAS,IAAI,cAAc;AAAA,UACpD,qBAAqB;AAAA,QACvB,CAAC;AACD,gBAAQ,cAAc;AAEtB,cAAM,KAAK,GAAG,EAAE,OAAO,gBAAgB,kBAAkB;AACzD,eAAO,KAAK,UAAU;AAAA,UACpB,OAAO;AAAA,UACP,SAAS;AAAA,UACT,YAAY,UAAU;AAAA,UACtB,SAAS,kCAAkC,UAAU,WAAW,KAAK,IAAI,CAAC;AAAA,QAC5E,CAAC;AAAA,MACH;AAAA,IACF;AAGA,WAAO;AAAA,EACT,CAAC;AAED,SAAO;AACT;;;ACnNA,SAAS,MAAM,QAA4B,OAAe,KAAa,OAAuC;AAC5G,QAAM,OAAO,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,OAAO,KAAK,GAAG,MAAM,CAAC;AAClF,SAAO,MAAM,OAAO,IAAI;AAC1B;AAEO,IAAM,MAAM;AAAA,EACjB,KAAK,KAAa,OAAuC;AACvD,UAAM,QAAQ,QAAQ,QAAQ,KAAK,KAAK;AAAA,EAC1C;AAAA,EACA,MAAM,KAAa,OAAuC;AACxD,UAAM,QAAQ,QAAQ,SAAS,KAAK,KAAK;AAAA,EAC3C;AACF;;;ACdA,eAAe,OAAsB;AACnC,QAAM,EAAE,SAAS,IAAI,aAAa,OAAO,YAAY;AAErD,QAAM,YAAY,IAAI,UAAU,OAAO,aAAa;AACpD,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,WAAW,MAAM,cAAc,UAAU,EAAE,UAAU,CAAC;AAC5D,QAAM,QAAQ,MAAM,qBAAqB,UAAU,WAAW,EAAE,UAAU,CAAC;AAE3E,QAAM,SAAS,OAAO,EAAE,MAAM,OAAO,WAAW,MAAM,UAAU,CAAC;AACjE,QAAM,MAAM,OAAO,EAAE,MAAM,OAAO,kBAAkB,MAAM,UAAU,CAAC;AAErE,MAAI,KAAK,mBAAmB;AAAA,IAC1B,OAAO,OAAO;AAAA,IACd,cAAc,OAAO;AAAA,IACrB,OAAO,SAAS,SAAS;AAAA,EAC3B,CAAC;AAGD,QAAM,WAAW,OAAO,WAAkC;AACxD,QAAI,KAAK,4BAA4B,EAAE,OAAO,CAAC;AAC/C,QAAI;AACF,YAAM,QAAQ,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC;AAAA,IACrD,SAAS,KAAK;AACZ,UAAI,MAAM,yBAAyB,EAAE,KAAK,OAAO,GAAG,EAAE,CAAC;AAAA,IACzD;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,KAAK,WAAW,MAAM,KAAK,SAAS,SAAS,CAAC;AACtD,UAAQ,KAAK,UAAU,MAAM,KAAK,SAAS,QAAQ,CAAC;AACtD;AAEA,KAAK,EAAE,MAAM,CAAC,QAAiB;AAC7B,MAAI,MAAM,uBAAuB,EAAE,KAAK,OAAO,GAAG,EAAE,CAAC;AACrD,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@agentspec/sidecar",
+  "version": "0.1.0",
+  "description": "AgentSpec Sidecar — language-agnostic control plane for any agent",
+  "author": "Sallah Kokaina <sallah.kokaina@gmail.com>",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "exports": {
+    ".": "./dist/index.js",
+    "./embed": {
+      "types": "./dist/embed.d.ts",
+      "import": "./dist/embed.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@fastify/http-proxy": "^9.5.0",
+    "fastify": "^4.28.1",
+    "@agentspec/sdk": "0.3.0"
+  },
+  "optionalDependencies": {
+    "@anthropic-ai/sdk": "^0.39.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.17.0",
+    "tsup": "^8.3.5",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "test:all": "vitest run && vitest run --config vitest.e2e.config.ts",
+    "dev": "tsx watch src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "lint": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}