@alneas/eaos-server 0.0.0-stage → 0.2.0

package/dist/chunk-F2J6IQ6I.js

@@ -0,0 +1,247 @@
+import {
+  createChatClient
+} from "./chunk-YMHVRBUU.js";
+import {
+  createCommandAgentExecutor,
+  validateAgentRuntimePolicy
+} from "./chunk-32746UQZ.js";
+import {
+  ServerAgentExecutionError
+} from "./chunk-YABTQZDJ.js";
+
+// src/agentic/autonomous-worker.ts
+import { createOpenAICompatibleChatAdapter } from "@alneas/appkit-core/ai/ai-chat";
+import { defaultRuntimePlacementPolicy, McpGatekeeper } from "@alneas/eaos-core";
+import { randomUUID } from "node:crypto";
+function inferRuntimeRole() {
+  const configured = process.env.EAOS_RUNTIME_ROLE;
+  if (configured === "edge" || configured === "application-worker" || configured === "ai") return configured;
+  return process.arch === "arm64" ? "ai" : "application-worker";
+}
+var ServerAutonomousWorker = class {
+  gatekeeper;
+  goosePath;
+  hermesAgentPath;
+  litellmUrl;
+  litellmModel;
+  litellmHeaders;
+  chatOptions;
+  maxOutputChars;
+  runtimePolicy;
+  runtimeRole;
+  activeTasks = 0;
+  fetchImpl;
+  executors;
+  /**
+   * Captures runtime settings and validates resource policy, role, and output ceiling.
+   * @param options - Trusted host configuration; omitted gatekeeper uses a new McpGatekeeper and runtime role uses EAOS_RUNTIME_ROLE, then ai on arm64 or application-worker otherwise.
+   * @throws Invalid resource policy, role, or output limit.
+   */
+  constructor(options) {
+    this.gatekeeper = options?.gatekeeper || new McpGatekeeper();
+    this.goosePath = options?.gooseBinaryPath || process.env.GOOSE_BIN_PATH || "goose";
+    this.hermesAgentPath = options?.hermesAgentBinaryPath || process.env.HERMES_AGENT_BIN_PATH || "hermes";
+    this.litellmUrl = options?.litellmEndpoint || process.env.LITELLM_ENDPOINT || "http://localhost:4000/v1";
+    this.litellmModel = options?.litellmModel || process.env.LITELLM_MODEL;
+    this.litellmHeaders = { ...options?.litellmHeaders };
+    this.chatOptions = { ...options?.chat, parameters: structuredClone(options?.chat?.parameters) };
+    this.maxOutputChars = options?.maxOutputChars ?? 1e6;
+    this.runtimePolicy = validateAgentRuntimePolicy(options?.runtimePolicy || defaultRuntimePlacementPolicy().ai.agentRuntime);
+    this.runtimeRole = options?.runtimeRole || inferRuntimeRole();
+    if (!["edge", "application-worker", "ai"].includes(this.runtimeRole)) throw new Error("Invalid agent runtime role");
+    this.fetchImpl = options?.fetch || fetch;
+    this.executors = options?.executors || {};
+    if (!Number.isSafeInteger(this.maxOutputChars) || this.maxOutputChars < 1 || this.maxOutputChars > 1e7) throw new Error("Invalid worker output limit");
+  }
+  /**
+   * Checks task limits and gatekeeper policy before dispatching one runtime attempt.
+   * @param request - Verified task identity and instructions; required strings must be nonblank, title at most 500 characters, instructions at most 1000000, and timeout a safe integer 1–3600000 milliseconds when provided.
+   * @param execution - Optional cancellation signal for built-in shared chat tasks; does not change injected executor or process contracts.
+   * @returns COMPLETED text output, PENDING_APPROVAL ticket data without execution, or FAILED data with error and optional classification/retry advice. Duration is measured in wall-clock milliseconds.
+   * @throws Can reject a throwing gatekeeper or malformed gatekeeper interaction before dispatch; runtime execution errors are normally returned as FAILED data.
+   * @remarks Gatekeeper receives fixed agent/server_bot roles rather than request user roles. Approval tickets are generated but not persisted here. The configured framework policy overrides request.runtimePolicy before execution. Injected executors and built-in chat outputs are bounded by maxOutputChars. LiteLLM uses Appkit SSE transport through createChatClient; JSON-only endpoints require a Host adapter or executor. Existing FAILED/PENDING_APPROVAL/COMPLETED envelopes and injected-executor priority remain unchanged.
+   * @example
+   * ```typescript
+   * import { ServerAutonomousWorker, type ServerWorkerOptions } from "@alneas/eaos-server/agentic/autonomous-worker";
+   * import type { ServerAgentTaskRequest } from "@alneas/eaos-server/agentic/types";
+   * export async function execute(options: ServerWorkerOptions, request: ServerAgentTaskRequest) {
+   *   return new ServerAutonomousWorker(options).runTask(request);
+   * }
+   * ```
+   */
+  async runTask(request, execution = {}) {
+    const startTime = Date.now();
+    if (!request || [request.id, request.tenantId, request.userId, request.title, request.instructions].some((value) => typeof value !== "string" || !value.trim())) {
+      return { taskId: typeof request?.id === "string" ? request.id : "unknown", status: "FAILED", error: "Invalid agent task request", durationMs: Date.now() - startTime };
+    }
+    if (request.instructions.length > 1e6 || request.title.length > 500 || request.timeoutMs !== void 0 && (!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 1 || request.timeoutMs > 36e5)) {
+      return { taskId: request.id, status: "FAILED", error: "Agent task exceeds configured limits", durationMs: Date.now() - startTime };
+    }
+    const policy = this.gatekeeper.validateCall({
+      toolName: `server_agent_${request.workerType}`,
+      userRoles: ["agent", "server_bot"],
+      tenantId: request.tenantId
+    });
+    if (!policy.allowed) {
+      return {
+        taskId: request.id,
+        status: "FAILED",
+        error: `Task execution blocked by security policy: ${policy.reason}`,
+        riskLevel: policy.riskLevel,
+        durationMs: Date.now() - startTime
+      };
+    }
+    if (policy.requireHumanApproval) {
+      return {
+        taskId: request.id,
+        status: "PENDING_APPROVAL",
+        approvalTicketId: randomUUID(),
+        approvalLevel: policy.approvalLevel,
+        riskLevel: policy.riskLevel,
+        durationMs: Date.now() - startTime
+      };
+    }
+    const frameworkManaged = !this.executors[request.workerType];
+    if (frameworkManaged && (request.workerType === "goose" || request.workerType === "hermes_agent") && this.runtimeRole !== "ai") {
+      return {
+        taskId: request.id,
+        status: "FAILED",
+        error: `Built-in ${request.workerType} execution is restricted to the AI runtime placement`,
+        failureCode: "AGENT_UNAVAILABLE",
+        retryable: true,
+        durationMs: Date.now() - startTime
+      };
+    }
+    if (frameworkManaged && this.activeTasks >= this.runtimePolicy.maxConcurrent) {
+      return {
+        taskId: request.id,
+        status: "FAILED",
+        error: "Agent runtime concurrency limit reached",
+        failureCode: "AGENT_UNAVAILABLE",
+        retryable: true,
+        durationMs: Date.now() - startTime
+      };
+    }
+    if (frameworkManaged) this.activeTasks += 1;
+    try {
+      const output = await this.execute({ ...structuredClone(request), runtimePolicy: structuredClone(this.runtimePolicy) }, execution.signal);
+      return {
+        taskId: request.id,
+        status: "COMPLETED",
+        output,
+        durationMs: Date.now() - startTime
+      };
+    } catch (err) {
+      return {
+        taskId: request.id,
+        status: "FAILED",
+        error: err.message,
+        ...err instanceof ServerAgentExecutionError ? { failureCode: err.failureCode, retryable: err.retryable } : {},
+        durationMs: Date.now() - startTime
+      };
+    } finally {
+      if (frameworkManaged) this.activeTasks -= 1;
+    }
+  }
+  async execute(request, signal) {
+    const injected = this.executors[request.workerType];
+    if (injected) return this.boundOutput(await injected(structuredClone(request)));
+    if (request.workerType === "goose") return this.executeHeadlessGoose(request);
+    if (request.workerType === "hermes_agent") return this.executeHeadlessHermesAgent(request);
+    if (request.workerType === "litellm") return this.executeLiteLlm(request, signal);
+    throw new Error(`No executor configured for worker type '${request.workerType}'`);
+  }
+  /**
+   * Execute Goose in headless batch mode
+   */
+  async executeHeadlessGoose(request) {
+    return createCommandAgentExecutor({
+      command: this.goosePath,
+      buildArgs: (task) => ["run", "--text", task.instructions],
+      includeProcessEnv: true,
+      maxOutputChars: this.maxOutputChars,
+      sandbox: { mode: "auto", policy: this.runtimePolicy }
+    })(request);
+  }
+  /**
+   * Execute NousResearch Hermes Agent in headless mode (-z / non-interactive)
+   * Hermes Agent provides persistent cross-session memory and self-improving skill extraction.
+   */
+  async executeHeadlessHermesAgent(request) {
+    return createCommandAgentExecutor({
+      command: this.hermesAgentPath,
+      buildArgs: (task) => ["run", "-z", task.instructions],
+      includeProcessEnv: true,
+      maxOutputChars: this.maxOutputChars,
+      sandbox: { mode: "auto", policy: this.runtimePolicy }
+    })(request);
+  }
+  /**
+   * Execute a host-selected model through LiteLLM.
+   */
+  async executeLiteLlm(request, signal) {
+    const configured = this.chatOptions;
+    let adapter = configured.adapter;
+    if (!adapter) {
+      if (!this.litellmModel) throw new Error("LiteLLM model is not configured");
+      const endpoint = new URL(this.litellmUrl);
+      if (!["http:", "https:"].includes(endpoint.protocol)) throw new Error("Invalid LiteLLM endpoint");
+      endpoint.pathname = `${endpoint.pathname.replace(/\/$/, "")}/chat/completions`;
+      adapter = createOpenAICompatibleChatAdapter({
+        api: endpoint.href,
+        model: this.litellmModel,
+        headers: this.litellmHeaders,
+        maxResponseChars: Math.min(1e7, this.maxOutputChars * 6 + 65536),
+        fetch: async (input, init) => {
+          const response = await this.fetchImpl(input, { ...init, redirect: "error" });
+          if (!response.ok) {
+            try {
+              void response.body?.cancel().catch(() => {
+              });
+            } catch {
+            }
+            throw new Error(`LiteLLM request failed (${response.status})`);
+          }
+          return response;
+        }
+      });
+    }
+    const metadata = configured.parameters?.metadata;
+    const timeout = request.timeoutMs ?? 6e4;
+    const chat = createChatClient({
+      ...configured,
+      adapter,
+      timeoutMs: Math.min(timeout, configured.timeoutMs ?? timeout),
+      maxInputChars: configured.maxInputChars ?? 7e6,
+      maxOutputChars: Math.min(1e7, configured.maxOutputChars ?? this.maxOutputChars * 6 + 65536),
+      parameters: { ...configured.parameters, metadata: {
+        ...metadata && typeof metadata === "object" && !Array.isArray(metadata) ? metadata : {},
+        tenantId: request.tenantId,
+        taskId: request.id
+      } },
+      governance: { ...configured.governance, sessionId: configured.governance?.sessionId ?? request.id },
+      authorize: async (principal, operation) => {
+        if (principal.tenantId !== request.tenantId || principal.userId !== request.userId) return false;
+        if (configured.authorize && await configured.authorize(principal, operation) !== true) return false;
+        const decision = this.gatekeeper.validateCall({ toolName: "server_agent_litellm", userRoles: ["agent", "server_bot"], tenantId: principal.tenantId });
+        return decision.allowed && !decision.requireHumanApproval;
+      }
+    });
+    const completed = await chat.complete({ tenantId: request.tenantId, userId: request.userId }, {
+      messages: [{ id: request.id, role: "user", parts: [{ type: "text", text: request.instructions }] }],
+      tools: "none",
+      signal
+    });
+    if (completed.message.parts.some((part) => part.type !== "text")) throw new Error("LiteLLM returned no assistant content");
+    return this.boundOutput(completed.message.parts.map((part) => part.type === "text" ? part.text : "").join(""));
+  }
+  boundOutput(output) {
+    if (output.length > this.maxOutputChars) throw new Error("Agent output exceeds configured limit");
+    return output;
+  }
+};
+
+export {
+  ServerAutonomousWorker
+};
+//# sourceMappingURL=chunk-F2J6IQ6I.js.map

package/dist/chunk-F2J6IQ6I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentic/autonomous-worker.ts"],"sourcesContent":["import {createOpenAICompatibleChatAdapter, type AIChatAdapter} from '@alneas/appkit-core/ai/ai-chat'\nimport {createChatClient, type ChatClientOptions} from '../execution/chat'\nimport { defaultRuntimePlacementPolicy, McpGatekeeper, type AgentRuntimeResourcePolicy } from '@alneas/eaos-core'\nimport { ServerAgentExecutionError, type ServerAgentExecutor, type ServerAgentTaskRequest, type ServerAgentTaskResult, type ServerAgentWorkerType } from './types'\nimport { randomUUID } from 'node:crypto'\nimport { createCommandAgentExecutor, validateAgentRuntimePolicy } from './executor'\n\n/**\n * Host composition of the shared chat path for built-in model tasks.\n * @remarks Defaults retain the worker gatekeeper, 60-second task timeout and worker output bound. Tools are undisclosed; action orchestration belongs to createToolAgent. No model transport or credential is selected from model output.\n * @see ServerWorkerOptions for complete worker configuration.\n */\nexport interface ServerWorkerChatOptions extends Omit<ChatClientOptions, 'adapter' | 'authorize' | 'tools'> {\n  /** Optional host adapter; omission uses Appkit's OpenAI-compatible LiteLLM transport. */\n  adapter?: AIChatAdapter\n  /** Optional live Host authorization, combined with the worker gatekeeper before and after asynchronous work. */\n  authorize?: ChatClientOptions['authorize']\n}\n\n/**\n * Trusted gatekeeper, runtime endpoints/adapters, and execution limits for {@link ServerAutonomousWorker}.\n */\nexport interface ServerWorkerOptions {\n  /** Host security/approval policies; defaults to a new McpGatekeeper. */\n  gatekeeper?: McpGatekeeper\n  /** Trusted executable path; defaults to GOOSE_BIN_PATH or goose. */\n  gooseBinaryPath?: string\n  /** Trusted executable path; defaults to HERMES_AGENT_BIN_PATH or hermes. */\n  hermesAgentBinaryPath?: string\n  /** Host LiteLLM base URL; defaults to LITELLM_ENDPOINT or http://localhost:4000/v1. */\n  litellmEndpoint?: string\n  /** Host model identifier; defaults to LITELLM_MODEL and is required for built-in LiteLLM execution. */\n  litellmModel?: string\n  /** Host-owned provider headers; captured at construction and never read from task/model input. */\n  litellmHeaders?: Readonly<Record<string, string>>\n  /** Optional shared chat model routing, live authorization, limits, guards, usage, budget and observability. */\n  chat?: ServerWorkerChatOptions\n  /** Combined command output/string result ceiling, safe integer 1–10000000; defaults to 1000000. */\n  maxOutputChars?: number\n  /** Framework default is safe for the ARM agent host. Host adapters may tighten it. */\n  runtimePolicy?: AgentRuntimeResourcePolicy\n  /** Built-in Goose/Hermes execution is permitted only on the AI placement. */\n  runtimeRole?: ServerRuntimeRole\n  /** Host fetch implementation for built-in LiteLLM; defaults to global fetch. */\n  fetch?: typeof fetch\n  /** Host/plugin adapters for coding agents and other external runtimes. */\n  executors?: Partial<Record<ServerAgentWorkerType, ServerAgentExecutor>>\n}\n\n/**\n * Host placement role controlling whether built-in Goose/Hermes processes may run locally.\n * @see ServerAutonomousWorker.\n */\nexport type ServerRuntimeRole = 'edge' | 'application-worker' | 'ai'\n\nfunction inferRuntimeRole(): ServerRuntimeRole {\n  const configured = process.env.EAOS_RUNTIME_ROLE\n  if (configured === 'edge' || configured === 'application-worker' || configured === 'ai') return configured\n  // The supported three-host topology places the AI runtime on the ARM host.\n  // Unknown x64 hosts therefore fail closed as application-worker hosts.\n  return process.arch === 'arm64' ? 'ai' : 'application-worker'\n}\n\n/**\n * Admits and executes host agent tasks through a gatekeeper and bounded runtime adapters.\n * @remarks This class runs only when runTask is called; it installs no scheduler. The host authenticates tenant/user claims before admission. Framework-managed tasks share a per-instance concurrency counter; injected executors own scheduling and are exempt from it. Built-in Goose/Hermes require the ai role and Node process/systemd support. Queue persistence, approvals, retries, and side-effect idempotency belong to the host.\n * @example\n * ```typescript\n * import { ServerAutonomousWorker, type ServerWorkerOptions } from \"@alneas/eaos-server/agentic/autonomous-worker\";\n * export function worker(options: ServerWorkerOptions) { return new ServerAutonomousWorker(options); }\n * ```\n */\nexport class ServerAutonomousWorker {\n  private gatekeeper: McpGatekeeper\n  private goosePath: string\n  private hermesAgentPath: string\n  private litellmUrl: string\n  private litellmModel?: string\n  private litellmHeaders: Record<string, string>\n  private chatOptions: ServerWorkerChatOptions\n  private maxOutputChars: number\n  private runtimePolicy: AgentRuntimeResourcePolicy\n  private runtimeRole: ServerRuntimeRole\n  private activeTasks = 0\n  private fetchImpl: typeof fetch\n  private executors: Partial<Record<ServerAgentWorkerType, ServerAgentExecutor>>\n\n  /**\n   * Captures runtime settings and validates resource policy, role, and output ceiling.\n   * @param options - Trusted host configuration; omitted gatekeeper uses a new McpGatekeeper and runtime role uses EAOS_RUNTIME_ROLE, then ai on arm64 or application-worker otherwise.\n   * @throws Invalid resource policy, role, or output limit.\n   */\n  constructor(options?: ServerWorkerOptions) {\n    this.gatekeeper = options?.gatekeeper || new McpGatekeeper()\n    this.goosePath = options?.gooseBinaryPath || process.env.GOOSE_BIN_PATH || 'goose'\n    this.hermesAgentPath = options?.hermesAgentBinaryPath || process.env.HERMES_AGENT_BIN_PATH || 'hermes'\n    this.litellmUrl = options?.litellmEndpoint || process.env.LITELLM_ENDPOINT || 'http://localhost:4000/v1'\n    this.litellmModel = options?.litellmModel || process.env.LITELLM_MODEL\n    this.litellmHeaders = {...options?.litellmHeaders}\n    this.chatOptions = {...options?.chat, parameters: structuredClone(options?.chat?.parameters)}\n    this.maxOutputChars = options?.maxOutputChars ?? 1_000_000\n    this.runtimePolicy = validateAgentRuntimePolicy(options?.runtimePolicy || defaultRuntimePlacementPolicy().ai.agentRuntime)\n    this.runtimeRole = options?.runtimeRole || inferRuntimeRole()\n    if (!['edge', 'application-worker', 'ai'].includes(this.runtimeRole)) throw new Error('Invalid agent runtime role')\n    this.fetchImpl = options?.fetch || fetch\n    this.executors = options?.executors || {}\n    if (!Number.isSafeInteger(this.maxOutputChars) || this.maxOutputChars < 1 || this.maxOutputChars > 10_000_000) throw new Error('Invalid worker output limit')\n  }\n\n  /**\n   * Checks task limits and gatekeeper policy before dispatching one runtime attempt.\n   * @param request - Verified task identity and instructions; required strings must be nonblank, title at most 500 characters, instructions at most 1000000, and timeout a safe integer 1–3600000 milliseconds when provided.\n   * @param execution - Optional cancellation signal for built-in shared chat tasks; does not change injected executor or process contracts.\n   * @returns COMPLETED text output, PENDING_APPROVAL ticket data without execution, or FAILED data with error and optional classification/retry advice. Duration is measured in wall-clock milliseconds.\n   * @throws Can reject a throwing gatekeeper or malformed gatekeeper interaction before dispatch; runtime execution errors are normally returned as FAILED data.\n   * @remarks Gatekeeper receives fixed agent/server_bot roles rather than request user roles. Approval tickets are generated but not persisted here. The configured framework policy overrides request.runtimePolicy before execution. Injected executors and built-in chat outputs are bounded by maxOutputChars. LiteLLM uses Appkit SSE transport through createChatClient; JSON-only endpoints require a Host adapter or executor. Existing FAILED/PENDING_APPROVAL/COMPLETED envelopes and injected-executor priority remain unchanged.\n   * @example\n   * ```typescript\n   * import { ServerAutonomousWorker, type ServerWorkerOptions } from \"@alneas/eaos-server/agentic/autonomous-worker\";\n   * import type { ServerAgentTaskRequest } from \"@alneas/eaos-server/agentic/types\";\n   * export async function execute(options: ServerWorkerOptions, request: ServerAgentTaskRequest) {\n   *   return new ServerAutonomousWorker(options).runTask(request);\n   * }\n   * ```\n   */\n  async runTask(request: ServerAgentTaskRequest, execution: {\n    /** Cooperatively cancel built-in shared chat. Injected executors and Goose/Hermes retain their own cancellation contracts. */\n    signal?: AbortSignal\n  } = {}): Promise<ServerAgentTaskResult> {\n    const startTime = Date.now()\n\n    if (!request || [request.id, request.tenantId, request.userId, request.title, request.instructions].some(value => typeof value !== 'string' || !value.trim())) {\n      return { taskId: typeof request?.id === 'string' ? request.id : 'unknown', status: 'FAILED', error: 'Invalid agent task request', durationMs: Date.now() - startTime }\n    }\n    if (request.instructions.length > 1_000_000 || request.title.length > 500 || request.timeoutMs !== undefined && (!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 1 || request.timeoutMs > 3_600_000)) {\n      return { taskId: request.id, status: 'FAILED', error: 'Agent task exceeds configured limits', durationMs: Date.now() - startTime }\n    }\n\n    // 1. Evaluate security and gatekeeper policies\n    const policy = this.gatekeeper.validateCall({\n      toolName: `server_agent_${request.workerType}`,\n      userRoles: ['agent', 'server_bot'],\n      tenantId: request.tenantId,\n    })\n\n    if (!policy.allowed) {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: `Task execution blocked by security policy: ${policy.reason}`,\n        riskLevel: policy.riskLevel,\n        durationMs: Date.now() - startTime,\n      }\n    }\n\n    if (policy.requireHumanApproval) {\n      return {\n        taskId: request.id,\n        status: 'PENDING_APPROVAL',\n        approvalTicketId: randomUUID(),\n        approvalLevel: policy.approvalLevel,\n        riskLevel: policy.riskLevel,\n        durationMs: Date.now() - startTime,\n      }\n    }\n\n    // Explicitly injected executors are host-owned adapters and may implement\n    // their own queue/scheduler. The framework-managed Goose/Hermes path is\n    // bounded by the default policy so a forgotten host setting cannot create\n    // unbounded local agent concurrency.\n    const frameworkManaged = !this.executors[request.workerType]\n    if (frameworkManaged && (request.workerType === 'goose' || request.workerType === 'hermes_agent') && this.runtimeRole !== 'ai') {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: `Built-in ${request.workerType} execution is restricted to the AI runtime placement`,\n        failureCode: 'AGENT_UNAVAILABLE',\n        retryable: true,\n        durationMs: Date.now() - startTime,\n      }\n    }\n    if (frameworkManaged && this.activeTasks >= this.runtimePolicy.maxConcurrent) {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: 'Agent runtime concurrency limit reached',\n        failureCode: 'AGENT_UNAVAILABLE',\n        retryable: true,\n        durationMs: Date.now() - startTime,\n      }\n    }\n\n    // 2. Dispatch according to worker type\n    if (frameworkManaged) this.activeTasks += 1\n    try {\n      const output = await this.execute({ ...structuredClone(request), runtimePolicy: structuredClone(this.runtimePolicy) }, execution.signal)\n      return {\n        taskId: request.id,\n        status: 'COMPLETED',\n        output,\n        durationMs: Date.now() - startTime,\n      }\n    } catch (err) {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: (err as Error).message,\n        ...(err instanceof ServerAgentExecutionError ? { failureCode: err.failureCode, retryable: err.retryable } : {}),\n        durationMs: Date.now() - startTime,\n      }\n    } finally {\n      if (frameworkManaged) this.activeTasks -= 1\n    }\n  }\n\n  private async execute(request: ServerAgentTaskRequest, signal?: AbortSignal): Promise<string> {\n    const injected = this.executors[request.workerType]\n    if (injected) return this.boundOutput(await injected(structuredClone(request)))\n    if (request.workerType === 'goose') return this.executeHeadlessGoose(request)\n    if (request.workerType === 'hermes_agent') return this.executeHeadlessHermesAgent(request)\n    if (request.workerType === 'litellm') return this.executeLiteLlm(request, signal)\n    throw new Error(`No executor configured for worker type '${request.workerType}'`)\n  }\n\n  /**\n   * Execute Goose in headless batch mode\n   */\n  private async executeHeadlessGoose(request: ServerAgentTaskRequest): Promise<string> {\n    return createCommandAgentExecutor({\n      command: this.goosePath,\n      buildArgs: task => ['run', '--text', task.instructions],\n      includeProcessEnv: true,\n      maxOutputChars: this.maxOutputChars,\n      sandbox: { mode: 'auto', policy: this.runtimePolicy },\n    })(request)\n  }\n\n  /**\n   * Execute NousResearch Hermes Agent in headless mode (-z / non-interactive)\n   * Hermes Agent provides persistent cross-session memory and self-improving skill extraction.\n   */\n  private async executeHeadlessHermesAgent(request: ServerAgentTaskRequest): Promise<string> {\n    return createCommandAgentExecutor({\n      command: this.hermesAgentPath,\n      buildArgs: task => ['run', '-z', task.instructions],\n      includeProcessEnv: true,\n      maxOutputChars: this.maxOutputChars,\n      sandbox: { mode: 'auto', policy: this.runtimePolicy },\n    })(request)\n  }\n\n  /**\n   * Execute a host-selected model through LiteLLM.\n   */\n  private async executeLiteLlm(request: ServerAgentTaskRequest, signal?: AbortSignal): Promise<string> {\n    const configured = this.chatOptions\n    let adapter = configured.adapter\n    if (!adapter) {\n      if (!this.litellmModel) throw new Error('LiteLLM model is not configured')\n      const endpoint = new URL(this.litellmUrl)\n      if (!['http:', 'https:'].includes(endpoint.protocol)) throw new Error('Invalid LiteLLM endpoint')\n      endpoint.pathname = `${endpoint.pathname.replace(/\\/$/, '')}/chat/completions`\n      adapter = createOpenAICompatibleChatAdapter({\n        api: endpoint.href, model: this.litellmModel, headers: this.litellmHeaders,\n        maxResponseChars: Math.min(10_000_000, this.maxOutputChars * 6 + 65_536),\n        fetch: async (input, init) => {\n          const response = await this.fetchImpl(input, {...init, redirect: 'error'})\n          if (!response.ok) {\n            try { void response.body?.cancel().catch(() => {}) } catch { /* Preserve the provider status while releasing unread bodies. */ }\n            throw new Error(`LiteLLM request failed (${response.status})`)\n          }\n          return response\n        },\n      })\n    }\n    const metadata = configured.parameters?.metadata\n    const timeout = request.timeoutMs ?? 60_000\n    const chat = createChatClient({\n      ...configured, adapter,\n      timeoutMs: Math.min(timeout, configured.timeoutMs ?? timeout),\n      maxInputChars: configured.maxInputChars ?? 7_000_000,\n      maxOutputChars: Math.min(10_000_000, configured.maxOutputChars ?? this.maxOutputChars * 6 + 65_536),\n      parameters: {...configured.parameters, metadata: {\n        ...(metadata && typeof metadata === 'object' && !Array.isArray(metadata) ? metadata : {}),\n        tenantId: request.tenantId, taskId: request.id,\n      }},\n      governance: {...configured.governance, sessionId: configured.governance?.sessionId ?? request.id},\n      authorize: async (principal, operation) => {\n        if (principal.tenantId !== request.tenantId || principal.userId !== request.userId) return false\n        if (configured.authorize && await configured.authorize(principal, operation) !== true) return false\n        const decision = this.gatekeeper.validateCall({toolName: 'server_agent_litellm', userRoles: ['agent', 'server_bot'], tenantId: principal.tenantId})\n        return decision.allowed && !decision.requireHumanApproval\n      },\n    })\n    const completed = await chat.complete({tenantId: request.tenantId, userId: request.userId}, {\n      messages: [{id: request.id, role: 'user', parts: [{type: 'text', text: request.instructions}]}],\n      tools: 'none', signal,\n    })\n    if (completed.message.parts.some(part => part.type !== 'text')) throw new Error('LiteLLM returned no assistant content')\n    return this.boundOutput(completed.message.parts.map(part => part.type === 'text' ? part.text : '').join(''))\n  }\n\n  private boundOutput(output: string): string {\n    if (output.length > this.maxOutputChars) throw new Error('Agent output exceeds configured limit')\n    return output\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAQ,yCAA4D;AAEpE,SAAS,+BAA+B,qBAAsD;AAE9F,SAAS,kBAAkB;AAmD3B,SAAS,mBAAsC;AAC7C,QAAM,aAAa,QAAQ,IAAI;AAC/B,MAAI,eAAe,UAAU,eAAe,wBAAwB,eAAe,KAAM,QAAO;AAGhG,SAAO,QAAQ,SAAS,UAAU,OAAO;AAC3C;AAWO,IAAM,yBAAN,MAA6B;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,YAAY,SAA+B;AACzC,SAAK,aAAa,SAAS,cAAc,IAAI,cAAc;AAC3D,SAAK,YAAY,SAAS,mBAAmB,QAAQ,IAAI,kBAAkB;AAC3E,SAAK,kBAAkB,SAAS,yBAAyB,QAAQ,IAAI,yBAAyB;AAC9F,SAAK,aAAa,SAAS,mBAAmB,QAAQ,IAAI,oBAAoB;AAC9E,SAAK,eAAe,SAAS,gBAAgB,QAAQ,IAAI;AACzD,SAAK,iBAAiB,EAAC,GAAG,SAAS,eAAc;AACjD,SAAK,cAAc,EAAC,GAAG,SAAS,MAAM,YAAY,gBAAgB,SAAS,MAAM,UAAU,EAAC;AAC5F,SAAK,iBAAiB,SAAS,kBAAkB;AACjD,SAAK,gBAAgB,2BAA2B,SAAS,iBAAiB,8BAA8B,EAAE,GAAG,YAAY;AACzH,SAAK,cAAc,SAAS,eAAe,iBAAiB;AAC5D,QAAI,CAAC,CAAC,QAAQ,sBAAsB,IAAI,EAAE,SAAS,KAAK,WAAW,EAAG,OAAM,IAAI,MAAM,4BAA4B;AAClH,SAAK,YAAY,SAAS,SAAS;AACnC,SAAK,YAAY,SAAS,aAAa,CAAC;AACxC,QAAI,CAAC,OAAO,cAAc,KAAK,cAAc,KAAK,KAAK,iBAAiB,KAAK,KAAK,iBAAiB,IAAY,OAAM,IAAI,MAAM,6BAA6B;AAAA,EAC9J;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,QAAQ,SAAiC,YAG3C,CAAC,GAAmC;AACtC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,QAAQ,UAAU,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,YAAY,EAAE,KAAK,WAAS,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,CAAC,GAAG;AAC7J,aAAO,EAAE,QAAQ,OAAO,SAAS,OAAO,WAAW,QAAQ,KAAK,WAAW,QAAQ,UAAU,OAAO,8BAA8B,YAAY,KAAK,IAAI,IAAI,UAAU;AAAA,IACvK;AACA,QAAI,QAAQ,aAAa,SAAS,OAAa,QAAQ,MAAM,SAAS,OAAO,QAAQ,cAAc,WAAc,CAAC,OAAO,cAAc,QAAQ,SAAS,KAAK,QAAQ,YAAY,KAAK,QAAQ,YAAY,OAAY;AACpN,aAAO,EAAE,QAAQ,QAAQ,IAAI,QAAQ,UAAU,OAAO,wCAAwC,YAAY,KAAK,IAAI,IAAI,UAAU;AAAA,IACnI;AAGA,UAAM,SAAS,KAAK,WAAW,aAAa;AAAA,MAC1C,UAAU,gBAAgB,QAAQ,UAAU;AAAA,MAC5C,WAAW,CAAC,SAAS,YAAY;AAAA,MACjC,UAAU,QAAQ;AAAA,IACpB,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAO,8CAA8C,OAAO,MAAM;AAAA,QAClE,WAAW,OAAO;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AAEA,QAAI,OAAO,sBAAsB;AAC/B,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,kBAAkB,WAAW;AAAA,QAC7B,eAAe,OAAO;AAAA,QACtB,WAAW,OAAO;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AAMA,UAAM,mBAAmB,CAAC,KAAK,UAAU,QAAQ,UAAU;AAC3D,QAAI,qBAAqB,QAAQ,eAAe,WAAW,QAAQ,eAAe,mBAAmB,KAAK,gBAAgB,MAAM;AAC9H,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAO,YAAY,QAAQ,UAAU;AAAA,QACrC,aAAa;AAAA,QACb,WAAW;AAAA,QACX,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,oBAAoB,KAAK,eAAe,KAAK,cAAc,eAAe;AAC5E,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,aAAa;AAAA,QACb,WAAW;AAAA,QACX,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AAGA,QAAI,iBAAkB,MAAK,eAAe;AAC1C,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,QAAQ,EAAE,GAAG,gBAAgB,OAAO,GAAG,eAAe,gBAAgB,KAAK,aAAa,EAAE,GAAG,UAAU,MAAM;AACvI,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR;AAAA,QACA,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAQ,IAAc;AAAA,QACtB,GAAI,eAAe,4BAA4B,EAAE,aAAa,IAAI,aAAa,WAAW,IAAI,UAAU,IAAI,CAAC;AAAA,QAC7G,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF,UAAE;AACA,UAAI,iBAAkB,MAAK,eAAe;AAAA,IAC5C;AAAA,EACF;AAAA,EAEA,MAAc,QAAQ,SAAiC,QAAuC;AAC5F,UAAM,WAAW,KAAK,UAAU,QAAQ,UAAU;AAClD,QAAI,SAAU,QAAO,KAAK,YAAY,MAAM,SAAS,gBAAgB,OAAO,CAAC,CAAC;AAC9E,QAAI,QAAQ,eAAe,QAAS,QAAO,KAAK,qBAAqB,OAAO;AAC5E,QAAI,QAAQ,eAAe,eAAgB,QAAO,KAAK,2BAA2B,OAAO;AACzF,QAAI,QAAQ,eAAe,UAAW,QAAO,KAAK,eAAe,SAAS,MAAM;AAChF,UAAM,IAAI,MAAM,2CAA2C,QAAQ,UAAU,GAAG;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,qBAAqB,SAAkD;AACnF,WAAO,2BAA2B;AAAA,MAChC,SAAS,KAAK;AAAA,MACd,WAAW,UAAQ,CAAC,OAAO,UAAU,KAAK,YAAY;AAAA,MACtD,mBAAmB;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,SAAS,EAAE,MAAM,QAAQ,QAAQ,KAAK,cAAc;AAAA,IACtD,CAAC,EAAE,OAAO;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,2BAA2B,SAAkD;AACzF,WAAO,2BAA2B;AAAA,MAChC,SAAS,KAAK;AAAA,MACd,WAAW,UAAQ,CAAC,OAAO,MAAM,KAAK,YAAY;AAAA,MAClD,mBAAmB;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,SAAS,EAAE,MAAM,QAAQ,QAAQ,KAAK,cAAc;AAAA,IACtD,CAAC,EAAE,OAAO;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,eAAe,SAAiC,QAAuC;AACnG,UAAM,aAAa,KAAK;AACxB,QAAI,UAAU,WAAW;AACzB,QAAI,CAAC,SAAS;AACZ,UAAI,CAAC,KAAK,aAAc,OAAM,IAAI,MAAM,iCAAiC;AACzE,YAAM,WAAW,IAAI,IAAI,KAAK,UAAU;AACxC,UAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,0BAA0B;AAChG,eAAS,WAAW,GAAG,SAAS,SAAS,QAAQ,OAAO,EAAE,CAAC;AAC3D,gBAAU,kCAAkC;AAAA,QAC1C,KAAK,SAAS;AAAA,QAAM,OAAO,KAAK;AAAA,QAAc,SAAS,KAAK;AAAA,QAC5D,kBAAkB,KAAK,IAAI,KAAY,KAAK,iBAAiB,IAAI,KAAM;AAAA,QACvE,OAAO,OAAO,OAAO,SAAS;AAC5B,gBAAM,WAAW,MAAM,KAAK,UAAU,OAAO,EAAC,GAAG,MAAM,UAAU,QAAO,CAAC;AACzE,cAAI,CAAC,SAAS,IAAI;AAChB,gBAAI;AAAE,mBAAK,SAAS,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,cAAC,CAAC;AAAA,YAAE,QAAQ;AAAA,YAAoE;AAC/H,kBAAM,IAAI,MAAM,2BAA2B,SAAS,MAAM,GAAG;AAAA,UAC/D;AACA,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,WAAW,WAAW,YAAY;AACxC,UAAM,UAAU,QAAQ,aAAa;AACrC,UAAM,OAAO,iBAAiB;AAAA,MAC5B,GAAG;AAAA,MAAY;AAAA,MACf,WAAW,KAAK,IAAI,SAAS,WAAW,aAAa,OAAO;AAAA,MAC5D,eAAe,WAAW,iBAAiB;AAAA,MAC3C,gBAAgB,KAAK,IAAI,KAAY,WAAW,kBAAkB,KAAK,iBAAiB,IAAI,KAAM;AAAA,MAClG,YAAY,EAAC,GAAG,WAAW,YAAY,UAAU;AAAA,QAC/C,GAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC;AAAA,QACvF,UAAU,QAAQ;AAAA,QAAU,QAAQ,QAAQ;AAAA,MAC9C,EAAC;AAAA,MACD,YAAY,EAAC,GAAG,WAAW,YAAY,WAAW,WAAW,YAAY,aAAa,QAAQ,GAAE;AAAA,MAChG,WAAW,OAAO,WAAW,cAAc;AACzC,YAAI,UAAU,aAAa,QAAQ,YAAY,UAAU,WAAW,QAAQ,OAAQ,QAAO;AAC3F,YAAI,WAAW,aAAa,MAAM,WAAW,UAAU,WAAW,SAAS,MAAM,KAAM,QAAO;AAC9F,cAAM,WAAW,KAAK,WAAW,aAAa,EAAC,UAAU,wBAAwB,WAAW,CAAC,SAAS,YAAY,GAAG,UAAU,UAAU,SAAQ,CAAC;AAClJ,eAAO,SAAS,WAAW,CAAC,SAAS;AAAA,MACvC;AAAA,IACF,CAAC;AACD,UAAM,YAAY,MAAM,KAAK,SAAS,EAAC,UAAU,QAAQ,UAAU,QAAQ,QAAQ,OAAM,GAAG;AAAA,MAC1F,UAAU,CAAC,EAAC,IAAI,QAAQ,IAAI,MAAM,QAAQ,OAAO,CAAC,EAAC,MAAM,QAAQ,MAAM,QAAQ,aAAY,CAAC,EAAC,CAAC;AAAA,MAC9F,OAAO;AAAA,MAAQ;AAAA,IACjB,CAAC;AACD,QAAI,UAAU,QAAQ,MAAM,KAAK,UAAQ,KAAK,SAAS,MAAM,EAAG,OAAM,IAAI,MAAM,uCAAuC;AACvH,WAAO,KAAK,YAAY,UAAU,QAAQ,MAAM,IAAI,UAAQ,KAAK,SAAS,SAAS,KAAK,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;AAAA,EAC7G;AAAA,EAEQ,YAAY,QAAwB;AAC1C,QAAI,OAAO,SAAS,KAAK,eAAgB,OAAM,IAAI,MAAM,uCAAuC;AAChG,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-F3O7CELI.js

@@ -0,0 +1,23 @@
+// src/browser-auth/kratos-session.ts
+function createKratosSessionVerifier(options) {
+  const base = new URL(options.publicUrl);
+  if (!["http:", "https:"].includes(base.protocol) || base.username || base.password || base.search || base.hash || base.pathname !== "/") throw new Error("Invalid Kratos endpoint");
+  const request = options.fetch ?? fetch;
+  return async (credentials) => {
+    if (!credentials.cookie && !credentials.sessionToken) return null;
+    const headers = { Accept: "application/json" };
+    if (credentials.sessionToken) headers["X-Session-Token"] = credentials.sessionToken;
+    else if (credentials.cookie) headers.Cookie = credentials.cookie;
+    const response = await request(new URL("/sessions/whoami", base), { headers, cache: "no-store", redirect: "error", signal: AbortSignal.timeout(options.timeoutMs ?? 1e4) });
+    if (response.status === 401 || response.status === 403) return null;
+    if (!response.ok) throw new Error("Identity provider unavailable");
+    const session = await response.json();
+    if (session.active !== true || typeof session.identity?.id !== "string" || !session.identity.id.trim()) return null;
+    return { userId: session.identity.id, identity: session.identity };
+  };
+}
+
+export {
+  createKratosSessionVerifier
+};
+//# sourceMappingURL=chunk-F3O7CELI.js.map

package/dist/chunk-F3O7CELI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser-auth/kratos-session.ts"],"sourcesContent":["/**\n * Creates a public Kratos whoami verifier without using the Admin API or minting sessions.\n * @param options - publicUrl is an HTTP(S) origin with root path and no embedded credentials/query/fragment; fetch defaults to global fetch and timeoutMs to 10000 milliseconds.\n * @returns An async verifier accepting cookie/sessionToken credentials and resolving userId plus provider identity, or null for absent credentials, 401/403 responses, inactive sessions, or missing identity IDs. sessionToken takes precedence over cookie.\n * @throws Synchronously for an invalid provider URL. Verification rejects transport, abort, invalid timeout, non-OK provider responses other than 401/403, and JSON parsing failures.\n * @remarks Credentials are forwarded only to the configured origin with redirects disabled and no-store caching. The host must trust this origin and separately resolve memberships and tenant lifecycle. This verifier creates no listeners or background work.\n * @example\n * ```typescript\n * import { createKratosSessionVerifier } from \"@alneas/eaos-server/browser-auth/kratos-session\";\n * const verify = createKratosSessionVerifier({ publicUrl: \"https://identity.example.com\" });\n * export async function authenticate(cookie: string | undefined) {\n *   return verify({ cookie });\n * }\n * ```\n */\nexport function createKratosSessionVerifier(options: {\n  /**\n * Trusted HTTP(S) Kratos origin with a root path and no embedded credentials, query, or fragment.\n */\npublicUrl: string;\n  /**\n * Host transport for public whoami calls; defaults to global fetch, with redirects disabled and no-store caching.\n */\nfetch?: typeof fetch;\n  /**\n * AbortSignal timeout in milliseconds for each whoami request; defaults to 10000 and invalid values fail when invoked.\n */\ntimeoutMs?: number }) {\n  const base = new URL(options.publicUrl)\n  if (!['http:', 'https:'].includes(base.protocol) || base.username || base.password || base.search || base.hash || base.pathname !== '/') throw new Error('Invalid Kratos endpoint')\n  const request = options.fetch ?? fetch\n  return async (credentials: { cookie?: string; sessionToken?: string }) => {\n    if (!credentials.cookie && !credentials.sessionToken) return null\n    const headers: Record<string, string> = { Accept: 'application/json' }\n    // Do not mix potentially different identities from two transports.\n    if (credentials.sessionToken) headers['X-Session-Token'] = credentials.sessionToken\n    else if (credentials.cookie) headers.Cookie = credentials.cookie\n    const response = await request(new URL('/sessions/whoami', base), { headers, cache: 'no-store', redirect: 'error', signal: AbortSignal.timeout(options.timeoutMs ?? 10_000) })\n    if (response.status === 401 || response.status === 403) return null\n    if (!response.ok) throw new Error('Identity provider unavailable')\n    const session = await response.json() as any\n    if (session.active !== true || typeof session.identity?.id !== 'string' || !session.identity.id.trim()) return null\n    return { userId: session.identity.id as string, identity: session.identity as Record<string, unknown> }\n  }\n}\n"],"mappings":";AAeO,SAAS,4BAA4B,SAYtB;AACpB,QAAM,OAAO,IAAI,IAAI,QAAQ,SAAS;AACtC,MAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,KAAK,QAAQ,KAAK,KAAK,YAAY,KAAK,YAAY,KAAK,UAAU,KAAK,QAAQ,KAAK,aAAa,IAAK,OAAM,IAAI,MAAM,yBAAyB;AAClL,QAAM,UAAU,QAAQ,SAAS;AACjC,SAAO,OAAO,gBAA4D;AACxE,QAAI,CAAC,YAAY,UAAU,CAAC,YAAY,aAAc,QAAO;AAC7D,UAAM,UAAkC,EAAE,QAAQ,mBAAmB;AAErE,QAAI,YAAY,aAAc,SAAQ,iBAAiB,IAAI,YAAY;AAAA,aAC9D,YAAY,OAAQ,SAAQ,SAAS,YAAY;AAC1D,UAAM,WAAW,MAAM,QAAQ,IAAI,IAAI,oBAAoB,IAAI,GAAG,EAAE,SAAS,OAAO,YAAY,UAAU,SAAS,QAAQ,YAAY,QAAQ,QAAQ,aAAa,GAAM,EAAE,CAAC;AAC7K,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IAAK,QAAO;AAC/D,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,+BAA+B;AACjE,UAAM,UAAU,MAAM,SAAS,KAAK;AACpC,QAAI,QAAQ,WAAW,QAAQ,OAAO,QAAQ,UAAU,OAAO,YAAY,CAAC,QAAQ,SAAS,GAAG,KAAK,EAAG,QAAO;AAC/G,WAAO,EAAE,QAAQ,QAAQ,SAAS,IAAc,UAAU,QAAQ,SAAoC;AAAA,EACxG;AACF;","names":[]}

package/dist/chunk-F4IITPGX.js

@@ -0,0 +1,221 @@
+import {
+  createLifecycleGuard,
+  resolveLifecycleBackend
+} from "./chunk-L6PMAEMB.js";
+import {
+  createAuthMiddleware
+} from "./chunk-XIEY2OF4.js";
+import {
+  createErrorHandler
+} from "./chunk-AVDMLTPF.js";
+import {
+  createModuleGuard
+} from "./chunk-VC2PCK2S.js";
+import {
+  createHealthRouter
+} from "./chunk-R4ADP2DC.js";
+import {
+  createMcpRouter
+} from "./chunk-VF5YDZJC.js";
+import {
+  createPluginEntitlementGuard,
+  resolveEngineEntitlementPrincipal
+} from "./chunk-46UWPEW2.js";
+
+// src/engine.ts
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { PluginRegistry } from "@alneas/eaos-core";
+import { McpGatekeeper } from "@alneas/eaos-core";
+import { SecretResolver } from "@alneas/eaos-core";
+function defineConfig(config) {
+  return config;
+}
+var ErpEngine = class {
+  /** Public plugin registry populated during initialize; external mutation affects subsequently composed apps. */
+  registry = new PluginRegistry();
+  /** Shared MCP policy registry populated from plugin manifests during initialize. */
+  gatekeeper = new McpGatekeeper();
+  initialized = false;
+  config;
+  /**
+   * Retains host composition configuration for registration and future app creation.
+   * @param config - App label, plugin manifests, and optional host composition settings.
+   */
+  constructor(config) {
+    this.config = config;
+  }
+  /**
+   * Registers manifests and gatekeeper policies and validates declared plugin secrets by default.
+   * @returns No value; resolves after registration and validation, or immediately after a prior successful initialization.
+   * @throws Rejects duplicate plugin IDs, registry failures, or secret validation failures.
+   * @remarks Registration occurs before secret validation, so failure can leave partial registry state. Concurrent initialization is not serialized and retrying a failed initialization may encounter already-registered IDs. Create a new engine after correcting failed setup. No migrations or plugin activation are performed.
+   * @example
+   * ```typescript
+   * import { createErpEngine } from "@alneas/eaos-server/engine";
+   * const engine = createErpEngine({ appName: "example-service", plugins: [] });
+   * await engine.initialize();
+   * console.log(engine.getRegisteredPlugins().length); // 0
+   * ```
+   */
+  async initialize() {
+    if (this.initialized) return;
+    console.log(`[ErpEngine] Initializing ${this.config.appName}...`);
+    for (const manifest of this.config.plugins) {
+      if (this.registry.get(manifest.id)) throw new Error(`Duplicate plugin: ${manifest.id}`);
+      this.registry.register(manifest);
+      if (manifest.agentCapabilities?.gatekeeperPolicies) {
+        for (const [toolName, policy] of Object.entries(
+          manifest.agentCapabilities.gatekeeperPolicies
+        )) {
+          this.gatekeeper.registerPolicy(toolName, policy);
+        }
+      }
+      if (this.config.validateSecrets !== false && manifest.secrets && manifest.secrets.length > 0) {
+        await SecretResolver.validatePluginSecrets(manifest.id, manifest.secrets);
+      }
+    }
+    this.initialized = true;
+    console.log(
+      `[ErpEngine] Successfully loaded ${this.registry.getAll().length} plugins.`
+    );
+  }
+  /**
+   * Composes registered plugin routes, shared middleware, optional MCP/custom routes, and public health endpoints.
+   * @param options - Live host adapters and route settings; see {@link CreateAppOptions}.
+   * @returns A new Hono app sharing this engine registry, gatekeeper, and configured adapters; it does not start a server.
+   * @throws Before initialization, or for synchronous middleware, plugin route factory, or health setup failures. Request-time adapter errors pass through the app error handler.
+   * @remarks Module guarding defaults on. Lifecycle enforcement is installed only when supplied, while declared plugin entitlements require their corresponding runtime checks. CORS uses configured origins with credentials enabled; unknown origins receive the first configured allow-origin value. Repeated calls create separate routers but may reuse host dependencies.
+   * @example
+   * ```typescript
+   * import { createErpEngine } from "@alneas/eaos-server/engine";
+   * const engine = createErpEngine({ appName: "example-service", plugins: [] });
+   * await engine.initialize();
+   * const app = engine.createApp();
+   * console.log((await app.request("/health/live")).status);
+   * ```
+   */
+  createApp(options) {
+    if (!this.initialized) throw new Error("Call initialize() before createApp()");
+    const app = new Hono();
+    app.onError(createErrorHandler());
+    if (this.config.cors?.allowOrigins && this.config.cors.allowOrigins.length > 0) {
+      const allowed = this.config.cors.allowOrigins;
+      app.use(
+        "*",
+        cors({
+          origin: (origin) => allowed.includes(origin) ? origin : allowed[0],
+          allowMethods: ["POST", "GET", "PUT", "PATCH", "DELETE", "OPTIONS"],
+          credentials: true
+        })
+      );
+    }
+    const verifier = options?.verifier || this.config.auth?.verifier;
+    if (verifier) {
+      app.use("*", createAuthMiddleware({ verifier, skipPaths: this.config.auth?.skipPaths }));
+    }
+    if (this.config.middleware) {
+      for (const mw of this.config.middleware) {
+        mw(app);
+      }
+    }
+    for (const plugin of this.registry.getAll()) {
+      if (plugin.entitlement?.allowedTenants) {
+        const conceal = async (c, next) => {
+          const principal = await (options?.resolveEntitlementPrincipal ?? resolveEngineEntitlementPrincipal)(c);
+          if (!principal) return c.json({ error: "Unauthorized" }, 401);
+          if (!plugin.entitlement.allowedTenants.includes(principal.tenantId)) return c.json({ error: "Plugin unavailable" }, 404);
+          await next();
+        };
+        app.use(`${plugin.api.prefix}/*`, conceal);
+      }
+      if (options?.lifecycle) {
+        const guard = createLifecycleGuard(options.lifecycle, plugin.id);
+        app.use(plugin.api.prefix, guard);
+        app.use(`${plugin.api.prefix}/*`, guard);
+      }
+      if (options?.enableModuleGuard !== false) {
+        const guard = options?.requireModule ? options.requireModule(plugin.id) : createModuleGuard(plugin.id);
+        app.use(`${plugin.api.prefix}/*`, guard);
+        if (plugin.extensions) {
+          for (const ext of plugin.extensions) {
+            const requiredKey = ext.industry ? `industry_${ext.industry}` : ext.id;
+            const extGuard = options?.requireModule ? options.requireModule(requiredKey) : createModuleGuard(requiredKey);
+            app.use(`${plugin.api.prefix}/${ext.id}/*`, extGuard);
+          }
+        }
+      }
+      if (plugin.entitlement) {
+        const guard = createPluginEntitlementGuard(plugin.id, plugin.entitlement, options?.entitlements, options?.resolveEntitlementPrincipal);
+        app.use(`${plugin.api.prefix}/*`, guard);
+      }
+      if (plugin.createRoutes) {
+        app.route(plugin.api.prefix, plugin.createRoutes(options?.pluginOptions?.[plugin.id]));
+      }
+    }
+    if (options?.mcp) app.route(options.mcp.prefix ?? "/api/mcp", createMcpRouter(this, {
+      ...options.mcp,
+      entitlements: options.entitlements ?? options.mcp.entitlements,
+      isPluginEnabled: async (principal, id) => (!options.lifecycle || await options.lifecycle.lifecycle.isEnabled(await resolveLifecycleBackend(options.lifecycle, principal.tenantId), principal.tenantId, id)) && (!options.mcp?.isPluginEnabled || await options.mcp.isPluginEnabled(principal, id))
+    }));
+    if (options?.customRoutes) {
+      for (const { prefix, router } of options.customRoutes) {
+        app.route(prefix, router);
+      }
+    }
+    app.route("/", createHealthRouter({ appName: this.config.appName, ...options?.health }));
+    return app;
+  }
+  /**
+   * Reads the manifests currently registered in this engine.
+   * @returns Registry manifest list, empty before registration or with no configured plugins; objects are not deep-cloned by this method.
+   * @example
+   * ```typescript
+   * import { createErpEngine } from "@alneas/eaos-server/engine";
+   * const engine = createErpEngine({ appName: "example-service", plugins: [] });
+   * await engine.initialize();
+   * console.log(engine.getRegisteredPlugins()); // []
+   * ```
+   */
+  getRegisteredPlugins() {
+    return this.registry.getAll();
+  }
+  /**
+   * Collects MCP tool definitions from all currently registered manifests.
+   * @returns Registry tool definitions, or an empty array when none exist; this list is not filtered for a request principal or tenant.
+   * @example
+   * ```typescript
+   * import { createErpEngine } from "@alneas/eaos-server/engine";
+   * const engine = createErpEngine({ appName: "example-service", plugins: [] });
+   * await engine.initialize();
+   * console.log(engine.getAllMcpTools()); // []
+   * ```
+   */
+  getAllMcpTools() {
+    return this.registry.getAllMcpTools();
+  }
+  /**
+   * Reads the host configuration retained at construction.
+   * @returns The original mutable configuration object; no cloning occurs.
+   * @example
+   * ```typescript
+   * import { createErpEngine } from "@alneas/eaos-server/engine";
+   * const engine = createErpEngine({ appName: "example-service", plugins: [] });
+   * await engine.initialize();
+   * console.log(engine.getConfig().appName);
+   * ```
+   */
+  getConfig() {
+    return this.config;
+  }
+};
+function createErpEngine(config) {
+  return new ErpEngine(config);
+}
+
+export {
+  defineConfig,
+  ErpEngine,
+  createErpEngine
+};
+//# sourceMappingURL=chunk-F4IITPGX.js.map

package/dist/chunk-F4IITPGX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/engine.ts"],"sourcesContent":["import { resolveLifecycleBackend, createLifecycleGuard, type LifecycleRuntime } from './lifecycle/index'\nimport { createMcpRouter, type McpRouterOptions } from './mcp'\nimport { Hono } from 'hono'\nimport { cors } from 'hono/cors'\nimport { PluginRegistry } from '@alneas/eaos-core'\nimport { McpGatekeeper } from '@alneas/eaos-core'\nimport { SecretResolver } from '@alneas/eaos-core'\nimport { createModuleGuard } from './middleware/module-guard'\nimport { createAuthMiddleware, type AuthSessionVerifier } from './middleware/auth'\nimport { createErrorHandler } from './middleware/error-handler'\nimport type { PluginManifest } from '@alneas/eaos-core'\nimport type { EaosEnv } from '@alneas/eaos-core'\nimport { createHealthRouter, type HealthRouterOptions } from './health/index'\nimport { createPluginEntitlementGuard, resolveEngineEntitlementPrincipal, type PluginEntitlementRuntime, type EntitlementPrincipalResolver } from './entitlements/index'\n\n// ---------- Config 型 ----------\n\n/**\n * Engine composition settings retained by {@link ErpEngine}; host adapters own authentication and persistence.\n */\nexport interface EaosConfig {\n  /** Nonblank application label used by public health responses. */\n  appName: string\n  /** Trusted plugin manifests registered sequentially during initialize. */\n  plugins: PluginManifest[]\n  /** Optional host UI theme metadata retained in config; the server engine does not apply it. */\n  theme?: {\n    /** Optional host UI accent color; not interpreted by this engine. */\n    primaryColor?: string\n    /** Optional host UI logo URL; not fetched by this engine. */\n    logoUrl?: string\n  }\n  /** Optional host driver metadata retained in config; this engine does not create a database connection. */\n  database?: {\n    /** Selected host database dialect; does not create or migrate a connection. */\n    driver: 'oracle' | 'supabase' | 'postgres'\n  }\n  /** Optional exact browser allowOrigins list; empty/absent disables CORS middleware. */\n  cors?: {\n    /** Exact allowed browser origins; credentials are enabled for configured CORS. */\n    allowOrigins: string[]\n  }\n  /** Optional verifier and skipped path prefixes; see AuthMiddlewareOptions. */\n  auth?: {\n    /** Optional verified session/API-key adapter; omission installs no authentication. */\n    verifier?: AuthSessionVerifier\n    /** Authentication-exempt path prefixes; defaults follow createAuthMiddleware. */\n    skipPaths?: string[]\n  }\n  /** Validate each manifest's declared secrets unless exactly false. Defaults to true. */\n  validateSecrets?: boolean\n  /** Host composition callbacks invoked synchronously after shared authentication and before plugin route guards; each receives the app and returns no value. */\n  middleware?: Array<(app: Hono<EaosEnv>) => void>\n}\n\n/**\n * Returns an engine configuration unchanged while checking its TypeScript shape.\n * @param config - Configuration to retain; no runtime validation or cloning occurs.\n * @returns The same object reference.\n * @example\n * ```typescript\n * import { defineConfig } from \"@alneas/eaos-server/engine\";\n * const config = defineConfig({ appName: \"example-service\", plugins: [] });\n * console.log(config.appName);\n * ```\n */\nexport function defineConfig(config: EaosConfig): EaosConfig {\n  return config\n}\n\n// ---------- Engine ----------\n\n/**\n * Per-application host authorization, route, and health adapters for {@link ErpEngine.createApp}.\n */\nexport interface CreateAppOptions {\n  /** Optional shared runtime for declared commercial/usage entitlement admission. */\n  entitlements?: PluginEntitlementRuntime\n  /** Optional verified principal resolver; defaults to resolveEngineEntitlementPrincipal. */\n  resolveEntitlementPrincipal?: EntitlementPrincipalResolver\n  /** Optional current lifecycle/tenant/backend admission for plugin routes and MCP tools. */\n  lifecycle?: LifecycleRuntime\n  /** Optional module middleware factory called at composition for each plugin/extension requirement; defaults to createModuleGuard. */\n  requireModule?: (moduleId: string) => any\n  /** Optional authentication verifier overriding config.auth.verifier. */\n  verifier?: AuthSessionVerifier\n  /** Install module guards unless exactly false. Defaults to true. */\n  enableModuleGuard?: boolean\n  /** Per-plugin dependencies passed to the route factory. */\n  pluginOptions?: Record<string, unknown>\n  /** Optional MCP adapter configuration; prefix defaults to /api/mcp and shared entitlements take precedence. */\n  mcp?: McpRouterOptions & { \n  /**\n   * Optional mount path for the shared MCP router; defaults to /api/mcp when the engine composes routes.\n   */\n  prefix?: string }\n  /** Additional host routers mounted after plugin/MCP routes; no plugin-specific guard is automatically added. */\n  customRoutes?: Array<{\n    /** Host-selected mount prefix passed directly to Hono route composition; this entry receives no automatic plugin/module-specific guard. */\n    prefix: string\n    /** Trusted Hono child router; host composition must install its route-specific authorization before exposing handlers. */\n    router: Hono<any>\n  }>\n  /** Optional dependency readiness checks and clock; engine appName is supplied automatically. */\n  health?: Omit<HealthRouterOptions, 'appName'>\n}\n\n/**\n * Registers plugin manifests and composes Hono routes with host authentication, entitlement, and lifecycle adapters.\n * @remarks Constructing the engine creates no HTTP listener or persistent store. Initialize once before composing apps. Configuration is retained by reference. Authentication is installed only when a verifier is supplied; custom routes need their own authorization policies beyond the shared middleware.\n * @example\n * ```typescript\n * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n * await engine.initialize();\n * const app = engine.createApp();\n * console.log((await app.request(\"/health/live\")).status); // 200\n * ```\n */\nexport class ErpEngine {\n  /** Public plugin registry populated during initialize; external mutation affects subsequently composed apps. */\n  readonly registry = new PluginRegistry()\n  /** Shared MCP policy registry populated from plugin manifests during initialize. */\n  readonly gatekeeper = new McpGatekeeper()\n  private initialized = false\n  private config: EaosConfig\n\n  /**\n   * Retains host composition configuration for registration and future app creation.\n   * @param config - App label, plugin manifests, and optional host composition settings.\n   */\n  constructor(config: EaosConfig) {\n    this.config = config\n  }\n\n  /**\n   * Registers manifests and gatekeeper policies and validates declared plugin secrets by default.\n   * @returns No value; resolves after registration and validation, or immediately after a prior successful initialization.\n   * @throws Rejects duplicate plugin IDs, registry failures, or secret validation failures.\n   * @remarks Registration occurs before secret validation, so failure can leave partial registry state. Concurrent initialization is not serialized and retrying a failed initialization may encounter already-registered IDs. Create a new engine after correcting failed setup. No migrations or plugin activation are performed.\n   * @example\n   * ```typescript\n   * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n   * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n   * await engine.initialize();\n   * console.log(engine.getRegisteredPlugins().length); // 0\n   * ```\n   */\n  async initialize(): Promise<void> {\n    if (this.initialized) return\n    console.log(`[ErpEngine] Initializing ${this.config.appName}...`)\n\n    for (const manifest of this.config.plugins) {\n      if (this.registry.get(manifest.id)) throw new Error(`Duplicate plugin: ${manifest.id}`)\n      this.registry.register(manifest)\n\n      if (manifest.agentCapabilities?.gatekeeperPolicies) {\n        for (const [toolName, policy] of Object.entries(\n          manifest.agentCapabilities.gatekeeperPolicies\n        )) {\n          this.gatekeeper.registerPolicy(toolName, policy)\n        }\n      }\n\n      if (\n        this.config.validateSecrets !== false &&\n        manifest.secrets &&\n        manifest.secrets.length > 0\n      ) {\n        await SecretResolver.validatePluginSecrets(manifest.id, manifest.secrets)\n      }\n    }\n\n    this.initialized = true\n    console.log(\n      `[ErpEngine] Successfully loaded ${this.registry.getAll().length} plugins.`\n    )\n  }\n\n  /**\n   * Composes registered plugin routes, shared middleware, optional MCP/custom routes, and public health endpoints.\n   * @param options - Live host adapters and route settings; see {@link CreateAppOptions}.\n   * @returns A new Hono app sharing this engine registry, gatekeeper, and configured adapters; it does not start a server.\n   * @throws Before initialization, or for synchronous middleware, plugin route factory, or health setup failures. Request-time adapter errors pass through the app error handler.\n   * @remarks Module guarding defaults on. Lifecycle enforcement is installed only when supplied, while declared plugin entitlements require their corresponding runtime checks. CORS uses configured origins with credentials enabled; unknown origins receive the first configured allow-origin value. Repeated calls create separate routers but may reuse host dependencies.\n   * @example\n   * ```typescript\n   * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n   * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n   * await engine.initialize();\n   * const app = engine.createApp();\n   * console.log((await app.request(\"/health/live\")).status);\n   * ```\n   */\n  createApp(options?: CreateAppOptions): Hono<EaosEnv> {\n    if (!this.initialized) throw new Error(\"Call initialize() before createApp()\")\n    const app = new Hono<EaosEnv>()\n\n    // 1. エラーハンドラ登録\n    app.onError(createErrorHandler())\n\n    // 2. CORS\n    if (this.config.cors?.allowOrigins && this.config.cors.allowOrigins.length > 0) {\n      const allowed = this.config.cors.allowOrigins\n      app.use(\n        '*',\n        cors({\n          origin: (origin) =>\n            allowed.includes(origin) ? origin : allowed[0],\n          allowMethods: ['POST', 'GET', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],\n          credentials: true,\n        })\n      )\n    }\n\n    // 3. 認証ミドルウェア (Ory Kratos / API Key / Bearer)\n    const verifier = options?.verifier || this.config.auth?.verifier\n    if (verifier) {\n      app.use('*', createAuthMiddleware({ verifier, skipPaths: this.config.auth?.skipPaths }))\n    }\n\n    // 4. Config 層から注入された独自ミドルウェア\n    if (this.config.middleware) {\n      for (const mw of this.config.middleware) {\n        mw(app)\n      }\n    }\n\n    // 5. Plugin 層のルートを動的マウント & ライセンス認可ガード (requireModule)\n    for (const plugin of this.registry.getAll()) {\n      if (plugin.entitlement?.allowedTenants) {\n        const conceal = async (c: any, next: () => Promise<void>) => {\n          const principal = await (options?.resolveEntitlementPrincipal ?? resolveEngineEntitlementPrincipal)(c)\n          if (!principal) return c.json({ error: 'Unauthorized' }, 401)\n          if (!plugin.entitlement!.allowedTenants!.includes(principal.tenantId)) return c.json({ error: 'Plugin unavailable' }, 404)\n          await next()\n        }\n        app.use(`${plugin.api.prefix}/*`, conceal)\n      }\n      if (options?.lifecycle) {\n        const guard = createLifecycleGuard(options.lifecycle, plugin.id)\n        app.use(plugin.api.prefix, guard)\n        app.use(`${plugin.api.prefix}/*`, guard)\n      }\n      if (options?.enableModuleGuard !== false) {\n        const guard = options?.requireModule ? options.requireModule(plugin.id) : createModuleGuard(plugin.id)\n        app.use(`${plugin.api.prefix}/*`, guard)\n\n        if (plugin.extensions) {\n          for (const ext of plugin.extensions) {\n            const requiredKey = ext.industry ? `industry_${ext.industry}` : ext.id\n            const extGuard = options?.requireModule ? options.requireModule(requiredKey) : createModuleGuard(requiredKey)\n            app.use(`${plugin.api.prefix}/${ext.id}/*`, extGuard)\n          }\n        }\n      }\n\n      if (plugin.entitlement) {\n        const guard = createPluginEntitlementGuard(plugin.id, plugin.entitlement, options?.entitlements, options?.resolveEntitlementPrincipal)\n        app.use(`${plugin.api.prefix}/*`, guard)\n      }\n      if (plugin.createRoutes) {\n        app.route(plugin.api.prefix, plugin.createRoutes(options?.pluginOptions?.[plugin.id]))\n      }\n    }\n\n    if (options?.mcp) app.route(options.mcp.prefix ?? '/api/mcp', createMcpRouter(this, {\n      ...options.mcp,\n      entitlements: options.entitlements ?? options.mcp.entitlements,\n      isPluginEnabled: async (principal, id) =>\n        (!options.lifecycle || await options.lifecycle.lifecycle.isEnabled(await resolveLifecycleBackend(options.lifecycle, principal.tenantId), principal.tenantId, id)) &&\n        (!options.mcp?.isPluginEnabled || await options.mcp.isPluginEnabled(principal, id)),\n    }))\n\n    // 6. カスタムルートのマウント\n    if (options?.customRoutes) {\n      for (const { prefix, router } of options.customRoutes) {\n        app.route(prefix, router)\n      }\n    }\n\n    // 7. Liveness/readiness. Dependency checks are explicit host adapters.\n    app.route('/', createHealthRouter({ appName: this.config.appName, ...options?.health }))\n\n    return app\n  }\n\n  /**\n   * Reads the manifests currently registered in this engine.\n   * @returns Registry manifest list, empty before registration or with no configured plugins; objects are not deep-cloned by this method.\n   * @example\n   * ```typescript\n   * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n   * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n   * await engine.initialize();\n   * console.log(engine.getRegisteredPlugins()); // []\n   * ```\n   */\n  getRegisteredPlugins(): PluginManifest[] {\n    return this.registry.getAll()\n  }\n\n  /**\n   * Collects MCP tool definitions from all currently registered manifests.\n   * @returns Registry tool definitions, or an empty array when none exist; this list is not filtered for a request principal or tenant.\n   * @example\n   * ```typescript\n   * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n   * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n   * await engine.initialize();\n   * console.log(engine.getAllMcpTools()); // []\n   * ```\n   */\n  getAllMcpTools() {\n    return this.registry.getAllMcpTools()\n  }\n\n  /**\n   * Reads the host configuration retained at construction.\n   * @returns The original mutable configuration object; no cloning occurs.\n   * @example\n   * ```typescript\n   * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n   * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n   * await engine.initialize();\n   * console.log(engine.getConfig().appName);\n   * ```\n   */\n  getConfig(): EaosConfig {\n    return this.config\n  }\n}\n\n/**\n * Creates an uninitialized engine retaining the supplied host configuration.\n * @param config - Engine composition settings; see {@link EaosConfig}.\n * @returns A new engine; await initialize before createApp.\n * @example\n * ```typescript\n * import { createErpEngine } from \"@alneas/eaos-server/engine\";\n * const engine = createErpEngine({ appName: \"example-service\", plugins: [] });\n * await engine.initialize();\n * const app = engine.createApp();\n * console.log((await app.request(\"/health/live\")).status);\n * ```\n */\nexport function createErpEngine(config: EaosConfig): ErpEngine {\n  return new ErpEngine(config)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAEA,SAAS,YAAY;AACrB,SAAS,YAAY;AACrB,SAAS,sBAAsB;AAC/B,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AA4DxB,SAAS,aAAa,QAAgC;AAC3D,SAAO;AACT;AAmDO,IAAM,YAAN,MAAgB;AAAA;AAAA,EAEZ,WAAW,IAAI,eAAe;AAAA;AAAA,EAE9B,aAAa,IAAI,cAAc;AAAA,EAChC,cAAc;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMR,YAAY,QAAoB;AAC9B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,aAA4B;AAChC,QAAI,KAAK,YAAa;AACtB,YAAQ,IAAI,4BAA4B,KAAK,OAAO,OAAO,KAAK;AAEhE,eAAW,YAAY,KAAK,OAAO,SAAS;AAC1C,UAAI,KAAK,SAAS,IAAI,SAAS,EAAE,EAAG,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,EAAE;AACtF,WAAK,SAAS,SAAS,QAAQ;AAE/B,UAAI,SAAS,mBAAmB,oBAAoB;AAClD,mBAAW,CAAC,UAAU,MAAM,KAAK,OAAO;AAAA,UACtC,SAAS,kBAAkB;AAAA,QAC7B,GAAG;AACD,eAAK,WAAW,eAAe,UAAU,MAAM;AAAA,QACjD;AAAA,MACF;AAEA,UACE,KAAK,OAAO,oBAAoB,SAChC,SAAS,WACT,SAAS,QAAQ,SAAS,GAC1B;AACA,cAAM,eAAe,sBAAsB,SAAS,IAAI,SAAS,OAAO;AAAA,MAC1E;AAAA,IACF;AAEA,SAAK,cAAc;AACnB,YAAQ;AAAA,MACN,mCAAmC,KAAK,SAAS,OAAO,EAAE,MAAM;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,UAAU,SAA2C;AACnD,QAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,sCAAsC;AAC7E,UAAM,MAAM,IAAI,KAAc;AAG9B,QAAI,QAAQ,mBAAmB,CAAC;AAGhC,QAAI,KAAK,OAAO,MAAM,gBAAgB,KAAK,OAAO,KAAK,aAAa,SAAS,GAAG;AAC9E,YAAM,UAAU,KAAK,OAAO,KAAK;AACjC,UAAI;AAAA,QACF;AAAA,QACA,KAAK;AAAA,UACH,QAAQ,CAAC,WACP,QAAQ,SAAS,MAAM,IAAI,SAAS,QAAQ,CAAC;AAAA,UAC/C,cAAc,CAAC,QAAQ,OAAO,OAAO,SAAS,UAAU,SAAS;AAAA,UACjE,aAAa;AAAA,QACf,CAAC;AAAA,MACH;AAAA,IACF;AAGA,UAAM,WAAW,SAAS,YAAY,KAAK,OAAO,MAAM;AACxD,QAAI,UAAU;AACZ,UAAI,IAAI,KAAK,qBAAqB,EAAE,UAAU,WAAW,KAAK,OAAO,MAAM,UAAU,CAAC,CAAC;AAAA,IACzF;AAGA,QAAI,KAAK,OAAO,YAAY;AAC1B,iBAAW,MAAM,KAAK,OAAO,YAAY;AACvC,WAAG,GAAG;AAAA,MACR;AAAA,IACF;AAGA,eAAW,UAAU,KAAK,SAAS,OAAO,GAAG;AAC3C,UAAI,OAAO,aAAa,gBAAgB;AACtC,cAAM,UAAU,OAAO,GAAQ,SAA8B;AAC3D,gBAAM,YAAY,OAAO,SAAS,+BAA+B,mCAAmC,CAAC;AACrG,cAAI,CAAC,UAAW,QAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;AAC5D,cAAI,CAAC,OAAO,YAAa,eAAgB,SAAS,UAAU,QAAQ,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AACzH,gBAAM,KAAK;AAAA,QACb;AACA,YAAI,IAAI,GAAG,OAAO,IAAI,MAAM,MAAM,OAAO;AAAA,MAC3C;AACA,UAAI,SAAS,WAAW;AACtB,cAAM,QAAQ,qBAAqB,QAAQ,WAAW,OAAO,EAAE;AAC/D,YAAI,IAAI,OAAO,IAAI,QAAQ,KAAK;AAChC,YAAI,IAAI,GAAG,OAAO,IAAI,MAAM,MAAM,KAAK;AAAA,MACzC;AACA,UAAI,SAAS,sBAAsB,OAAO;AACxC,cAAM,QAAQ,SAAS,gBAAgB,QAAQ,cAAc,OAAO,EAAE,IAAI,kBAAkB,OAAO,EAAE;AACrG,YAAI,IAAI,GAAG,OAAO,IAAI,MAAM,MAAM,KAAK;AAEvC,YAAI,OAAO,YAAY;AACrB,qBAAW,OAAO,OAAO,YAAY;AACnC,kBAAM,cAAc,IAAI,WAAW,YAAY,IAAI,QAAQ,KAAK,IAAI;AACpE,kBAAM,WAAW,SAAS,gBAAgB,QAAQ,cAAc,WAAW,IAAI,kBAAkB,WAAW;AAC5G,gBAAI,IAAI,GAAG,OAAO,IAAI,MAAM,IAAI,IAAI,EAAE,MAAM,QAAQ;AAAA,UACtD;AAAA,QACF;AAAA,MACF;AAEA,UAAI,OAAO,aAAa;AACtB,cAAM,QAAQ,6BAA6B,OAAO,IAAI,OAAO,aAAa,SAAS,cAAc,SAAS,2BAA2B;AACrI,YAAI,IAAI,GAAG,OAAO,IAAI,MAAM,MAAM,KAAK;AAAA,MACzC;AACA,UAAI,OAAO,cAAc;AACvB,YAAI,MAAM,OAAO,IAAI,QAAQ,OAAO,aAAa,SAAS,gBAAgB,OAAO,EAAE,CAAC,CAAC;AAAA,MACvF;AAAA,IACF;AAEA,QAAI,SAAS,IAAK,KAAI,MAAM,QAAQ,IAAI,UAAU,YAAY,gBAAgB,MAAM;AAAA,MAClF,GAAG,QAAQ;AAAA,MACX,cAAc,QAAQ,gBAAgB,QAAQ,IAAI;AAAA,MAClD,iBAAiB,OAAO,WAAW,QAChC,CAAC,QAAQ,aAAa,MAAM,QAAQ,UAAU,UAAU,UAAU,MAAM,wBAAwB,QAAQ,WAAW,UAAU,QAAQ,GAAG,UAAU,UAAU,EAAE,OAC9J,CAAC,QAAQ,KAAK,mBAAmB,MAAM,QAAQ,IAAI,gBAAgB,WAAW,EAAE;AAAA,IACrF,CAAC,CAAC;AAGF,QAAI,SAAS,cAAc;AACzB,iBAAW,EAAE,QAAQ,OAAO,KAAK,QAAQ,cAAc;AACrD,YAAI,MAAM,QAAQ,MAAM;AAAA,MAC1B;AAAA,IACF;AAGA,QAAI,MAAM,KAAK,mBAAmB,EAAE,SAAS,KAAK,OAAO,SAAS,GAAG,SAAS,OAAO,CAAC,CAAC;AAEvF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,uBAAyC;AACvC,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,iBAAiB;AACf,WAAO,KAAK,SAAS,eAAe;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,YAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AACF;AAeO,SAAS,gBAAgB,QAA+B;AAC7D,SAAO,IAAI,UAAU,MAAM;AAC7B;","names":[]}