@amodalai/core 0.1.0

package/dist/src/runtime/user-context.js

@@ -0,0 +1,135 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Extract roles from a user context response object.
+ * Looks for: role (string), roles (string[]), permissions.role, user.role.
+ */
+export function extractRoles(data) {
+    // Direct role string
+    if (typeof data['role'] === 'string') {
+        return [data['role']];
+    }
+    // Direct roles array
+    if (Array.isArray(data['roles'])) {
+        return data['roles'].filter((r) => typeof r === 'string');
+    }
+    // Nested permissions.role
+    const permissions = data['permissions'];
+    if (permissions !== null && typeof permissions === 'object' && !Array.isArray(permissions)) {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- SDK boundary: verified object
+        const perms = permissions;
+        if (typeof perms['role'] === 'string') {
+            return [perms['role']];
+        }
+    }
+    // Nested user.role
+    const user = data['user'];
+    if (user !== null && typeof user === 'object' && !Array.isArray(user)) {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- SDK boundary: verified object
+        const usr = user;
+        if (typeof usr['role'] === 'string') {
+            return [usr['role']];
+        }
+    }
+    return [];
+}
+/**
+ * Resolve scope labels for a user's roles from all connections' rowScoping.
+ *
+ * For each entity in each connection's rowScoping, finds the first matching
+ * role's scoping rule label. If no role matches, the entity is skipped.
+ */
+export function resolveScopeLabels(connections, userRoles) {
+    const scopeLabels = {};
+    const scopeRules = {};
+    for (const [, conn] of connections) {
+        const rowScoping = conn.access.rowScoping;
+        if (!rowScoping)
+            continue;
+        for (const [entity, roleMap] of Object.entries(rowScoping)) {
+            // Already resolved this entity from a prior connection
+            if (scopeRules[entity])
+                continue;
+            // Try to find a matching role
+            let matched = false;
+            for (const role of userRoles) {
+                const rule = roleMap[role];
+                if (rule) {
+                    scopeRules[entity] = rule;
+                    scopeLabels[entity] = rule.label ?? `scoped by ${rule.type}`;
+                    matched = true;
+                    break;
+                }
+            }
+            // If no role matched, skip this entity
+            if (!matched)
+                continue;
+        }
+    }
+    return { scopeLabels, scopeRules };
+}
+/**
+ * Generate field guidance text from all connections' fieldRestrictions.
+ *
+ * Lists never_retrieve fields as "Do not request: entity.field (reason)"
+ * Lists role_gated fields with allowed roles
+ * Lists retrieve_but_redact fields as "Will be redacted: entity.field"
+ */
+export function generateFieldGuidance(connections, userRoles) {
+    const lines = [];
+    for (const [, conn] of connections) {
+        const restrictions = conn.access.fieldRestrictions;
+        if (!restrictions || restrictions.length === 0)
+            continue;
+        for (const r of restrictions) {
+            if (r.policy === 'never_retrieve') {
+                const reason = r.reason ? ` (${r.reason})` : '';
+                lines.push(`Do not request: ${r.entity}.${r.field}${reason}`);
+            }
+            else if (r.policy === 'role_gated') {
+                const allowed = r.allowedRoles ?? [];
+                const hasAccess = userRoles.some((role) => allowed.includes(role));
+                if (!hasAccess) {
+                    lines.push(`Do not request: ${r.entity}.${r.field} (requires role: ${allowed.join(', ')})`);
+                }
+            }
+            else if (r.policy === 'retrieve_but_redact') {
+                lines.push(`Will be redacted: ${r.entity}.${r.field}`);
+            }
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Generate alternative lookup guidance from all connections' alternativeLookups.
+ */
+export function generateAlternativeLookupGuidance(connections) {
+    const lines = [];
+    for (const [, conn] of connections) {
+        const lookups = conn.access.alternativeLookups;
+        if (!lookups || lookups.length === 0)
+            continue;
+        for (const lookup of lookups) {
+            const desc = lookup.description ? ` — ${lookup.description}` : '';
+            lines.push(`Instead of ${lookup.restrictedField}, use ${lookup.alternativeEndpoint}${desc}`);
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Create a default empty UserContextResult.
+ */
+export function defaultUserContext() {
+    return {
+        raw: {},
+        roles: [],
+        scopeLabels: {},
+        scopeRules: {},
+        fieldGuidance: '',
+        alternativeLookupGuidance: '',
+    };
+}
+//# sourceMappingURL=user-context.js.map

package/dist/src/runtime/user-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-context.js","sourceRoot":"","sources":["../../../src/runtime/user-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiBH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAA6B;IACxD,qBAAqB;IACrB,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,0BAA0B;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3F,wGAAwG;QACxG,MAAM,KAAK,GAAG,WAAsC,CAAC;QACrD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,wGAAwG;QACxG,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAA0C,EAC1C,SAAmB;IAEnB,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAgC,EAAE,CAAC;IAEnD,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,uDAAuD;YACvD,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAEjC,8BAA8B;YAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,IAAI,EAAE,CAAC;oBACT,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;oBAC1B,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC7D,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YAED,uCAAuC;YACvC,IAAI,CAAC,OAAO;gBAAE,SAAS;QACzB,CAAC;IACH,CAAC;IAED,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAA0C,EAC1C,SAAmB;IAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEzD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,KAAK,CAAC,IAAI,CACR,mBAAmB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAC/C,WAA0C;IAE1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,KAAK,CAAC,IAAI,CACR,cAAc,MAAM,CAAC,eAAe,SAAS,MAAM,CAAC,mBAAmB,GAAG,IAAI,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,GAAG,EAAE,EAAE;QACP,KAAK,EAAE,EAAE;QACT,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;QACjB,yBAAyB,EAAE,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/dist/src/sdk.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { AmodalConfig } from './amodal-config.js';
+import { VersionManager } from './versions/version-manager.js';
+import { PlatformClient } from './platform/platform-client.js';
+import type { AgentSDKConfig } from './platform/platform-types.js';
+/**
+ * The main public interface for the Agent Runtime Platform SDK.
+ *
+ * Wraps AmodalConfig + VersionManager + PlatformClient into a single entry point.
+ * Consumers create an AgentSDK, call initialize(), then use getConfig()
+ * to access the fully-configured runtime.
+ */
+export declare class AgentSDK {
+    private readonly sdkConfig;
+    private readonly configOverrides;
+    private amodalConfig;
+    private versionManager;
+    private platformClientInstance;
+    private initialized;
+    /**
+     * @param sdkConfig Platform, connections, audit, and role configuration
+     * @param configOverrides Additional ConfigParameters fields for the underlying
+     *   Config class (model, sessionId, cwd, etc.). Bundle-derived fields from
+     *   the version config will override matching fields in configOverrides.
+     */
+    constructor(sdkConfig: AgentSDKConfig, configOverrides?: Record<string, unknown>);
+    /**
+     * Load the version bundle (if configured), install deps, import handlers,
+     * build AmodalConfig, and call AmodalConfig.initialize().
+     *
+     * Must be called exactly once before getConfig() or getVersionManager().
+     */
+    initialize(): Promise<void>;
+    /**
+     * Access the initialized AmodalConfig instance.
+     * Throws if initialize() hasn't been called.
+     */
+    getConfig(): AmodalConfig;
+    /**
+     * Access the VersionManager instance.
+     * Throws if initialize() hasn't been called.
+     */
+    getVersionManager(): VersionManager;
+    /**
+     * Access the PlatformClient instance (if platform config was provided).
+     * Returns null if no platform config was set.
+     */
+    getPlatformClient(): PlatformClient | null;
+    /**
+     * Shutdown the SDK: flush audit logs.
+     */
+    shutdown(): Promise<void>;
+}

package/dist/src/sdk.js

@@ -0,0 +1,377 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { mkdir, writeFile } from 'node:fs/promises';
+import { AmodalConfig } from './amodal-config.js';
+import { VersionManager } from './versions/version-manager.js';
+import { PlatformClient } from './platform/platform-client.js';
+import { buildPlatformConfigParams } from './platform/config-builder.js';
+/**
+ * The main public interface for the Agent Runtime Platform SDK.
+ *
+ * Wraps AmodalConfig + VersionManager + PlatformClient into a single entry point.
+ * Consumers create an AgentSDK, call initialize(), then use getConfig()
+ * to access the fully-configured runtime.
+ */
+export class AgentSDK {
+    sdkConfig;
+    configOverrides;
+    amodalConfig = null;
+    versionManager = null;
+    platformClientInstance = null;
+    initialized = false;
+    /**
+     * @param sdkConfig Platform, connections, audit, and role configuration
+     * @param configOverrides Additional ConfigParameters fields for the underlying
+     *   Config class (model, sessionId, cwd, etc.). Bundle-derived fields from
+     *   the version config will override matching fields in configOverrides.
+     */
+    constructor(sdkConfig, configOverrides = {}) {
+        this.sdkConfig = sdkConfig;
+        this.configOverrides = configOverrides;
+    }
+    /**
+     * Load the version bundle (if configured), install deps, import handlers,
+     * build AmodalConfig, and call AmodalConfig.initialize().
+     *
+     * Must be called exactly once before getConfig() or getVersionManager().
+     */
+    async initialize() {
+        if (this.initialized) {
+            throw new Error('AgentSDK is already initialized');
+        }
+        this.initialized = true;
+        // 1. Determine bundle source and load if available
+        const baseDir = this.sdkConfig.versionBaseDir ?? tmpdir();
+        this.versionManager = new VersionManager({ baseDir });
+        let versionConfig = null;
+        if (this.sdkConfig.platform) {
+            // Create PlatformClient for KB/org/secrets fetching
+            this.platformClientInstance = new PlatformClient(this.sdkConfig.platform);
+            // Only fetch bundle when a deployment is configured
+            if (this.sdkConfig.platform.deployment) {
+                const bundle = await this.platformClientInstance.fetchLatestBundle();
+                const bundleDir = path.join(baseDir, 'bundles');
+                await mkdir(bundleDir, { recursive: true });
+                const bundlePath = path.join(bundleDir, `${bundle.version}.json`);
+                await writeFile(bundlePath, JSON.stringify(bundle), 'utf-8');
+                await this.versionManager.loadVersion({ path: bundlePath });
+                versionConfig = this.versionManager.getVersionConfig();
+            }
+        }
+        else if (this.sdkConfig.localBundlePath) {
+            await this.versionManager.loadVersion({
+                path: this.sdkConfig.localBundlePath,
+            });
+            versionConfig = this.versionManager.getVersionConfig();
+        }
+        // 1.5 Load base_prompt + agent_context from application (non-fatal)
+        if (this.platformClientInstance && this.sdkConfig.applicationId) {
+            try {
+                const app = await this.platformClientInstance.fetchApplication(this.sdkConfig.applicationId);
+                if (app.agent_context) {
+                    this.sdkConfig.agentContext = app.agent_context;
+                }
+                if (app.base_prompt) {
+                    this.configOverrides['basePrompt'] = app.base_prompt;
+                }
+                if (app.name) {
+                    this.configOverrides['agentName'] = app.name;
+                }
+                if (app.disabled_platform_tools && app.disabled_platform_tools.length > 0) {
+                    this.sdkConfig.disabledPlatformTools = app.disabled_platform_tools;
+                }
+                if (app.model) {
+                    this.configOverrides['model'] = app.model;
+                }
+                if (app.provider) {
+                    process.env['LLM_PROVIDER'] = app.provider;
+                    // Build ModelConfig for the MultiProviderContentGenerator
+                    const mc = {
+                        provider: app.provider,
+                        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+                        model: app.model ?? this.configOverrides['model'] ?? 'gemini-2.0-flash',
+                        baseUrl: app.provider_base_url ?? undefined,
+                        credentials: {},
+                    };
+                    if (app.provider_api_key) {
+                        const credKey = app.provider === 'anthropic' ? 'ANTHROPIC_API_KEY'
+                            : app.provider === 'openai' ? 'OPENAI_API_KEY'
+                                : 'API_KEY';
+                        mc.credentials = { [credKey]: app.provider_api_key };
+                    }
+                    this.configOverrides['modelConfig'] = mc;
+                }
+                if (app.provider_base_url) {
+                    this.configOverrides['providerBaseUrl'] = app.provider_base_url;
+                }
+                if (app.provider_api_key) {
+                    this.configOverrides['providerApiKey'] = app.provider_api_key;
+                }
+                if (app.simple_model) {
+                    this.configOverrides['simpleModel'] = app.simple_model;
+                }
+                if (app.advanced_model) {
+                    this.configOverrides['advancedModel'] = app.advanced_model;
+                }
+            }
+            catch {
+                process.stderr.write('[WARN] Failed to fetch application details\n');
+            }
+        }
+        // 2. Fetch knowledge base documents (non-fatal)
+        let appDocuments = [];
+        let tenantDocuments = [];
+        if (this.platformClientInstance) {
+            const appId = this.sdkConfig.applicationId;
+            if (appId) {
+                try {
+                    appDocuments = await this.platformClientInstance.fetchDocuments('application', appId, this.sdkConfig.sessionType);
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to fetch application knowledge base\n');
+                }
+            }
+            const tenId = this.sdkConfig.tenantId;
+            if (tenId) {
+                try {
+                    tenantDocuments = await this.platformClientInstance.fetchDocuments('tenant', tenId, this.sdkConfig.sessionType);
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to fetch tenant knowledge base\n');
+                }
+            }
+            // 2.5 Resolve tenant secrets and merge into connections (non-fatal)
+            const tenantIdForSecrets = this.sdkConfig.tenantId;
+            if (tenantIdForSecrets) {
+                try {
+                    const secrets = await this.platformClientInstance.resolveSecrets(tenantIdForSecrets);
+                    if (secrets.length > 0) {
+                        const connections = this.sdkConfig.connections ?? {};
+                        const resolved = {};
+                        for (const secret of secrets) {
+                            resolved[secret.name] = secret.value;
+                        }
+                        this.sdkConfig.connections = { ...connections, _secrets: resolved };
+                    }
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to resolve tenant secrets\n');
+                }
+                // 2.6 Resolve connections (credentials + request_config) — non-fatal
+                try {
+                    const resolvedConns = await this.platformClientInstance.resolveConnections(tenantIdForSecrets);
+                    const connections = this.sdkConfig.connections ?? {};
+                    for (const [connName, resolved] of Object.entries(resolvedConns)) {
+                        const connConfig = {
+                            ...resolved.credentials,
+                        };
+                        if (resolved.request_config) {
+                            connConfig['_request_config'] = resolved.request_config;
+                        }
+                        connections[connName] = connConfig;
+                    }
+                    this.sdkConfig.connections = connections;
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to resolve connections\n');
+                }
+            }
+        }
+        // 2.65 Fetch connection metadata for agent awareness (non-fatal)
+        let connectionInfos = [];
+        if (this.platformClientInstance && this.sdkConfig.applicationId) {
+            try {
+                connectionInfos = await this.platformClientInstance.fetchConnections(this.sdkConfig.applicationId, this.sdkConfig.sessionType);
+                if (connectionInfos.length > 0) {
+                    process.stderr.write(`[SDK] Loaded ${String(connectionInfos.length)} connection info(s)\n`);
+                }
+            }
+            catch {
+                process.stderr.write('[WARN] Failed to fetch connection metadata\n');
+            }
+        }
+        // 2.7 Fetch custom tools and separate by type (non-fatal)
+        const httpToolConfigs = [];
+        const chainToolConfigs = [];
+        const functionToolConfigs = [];
+        if (this.platformClientInstance) {
+            const toolAppId = this.sdkConfig.applicationId;
+            if (toolAppId) {
+                try {
+                    const tools = await this.platformClientInstance.fetchTools(toolAppId, this.sdkConfig.sessionType);
+                    for (const tool of tools) {
+                        const { type: _type, ...config } = tool;
+                        if (tool.type === 'http') {
+                            httpToolConfigs.push(config);
+                        }
+                        else if (tool.type === 'chain') {
+                            chainToolConfigs.push(config);
+                        }
+                        else if (tool.type === 'function') {
+                            functionToolConfigs.push(config);
+                        }
+                    }
+                    if (tools.length > 0) {
+                        process.stderr.write(`[SDK] Loaded ${String(tools.length)} custom tool(s)\n`);
+                    }
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to fetch custom tools\n');
+                }
+            }
+        }
+        // 2.8 Fetch skills from platform API (non-fatal)
+        let fetchedSkills = [];
+        if (this.platformClientInstance) {
+            const skillAppId = this.sdkConfig.applicationId;
+            if (skillAppId) {
+                try {
+                    fetchedSkills = await this.platformClientInstance.fetchSkills(skillAppId, this.sdkConfig.sessionType);
+                    if (fetchedSkills.length > 0) {
+                        process.stderr.write(`[SDK] Loaded ${String(fetchedSkills.length)} skill(s)\n`);
+                    }
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to fetch skills\n');
+                }
+            }
+        }
+        // 2.9 Fetch subagents from platform API (non-fatal)
+        let fetchedSubagents = [];
+        if (this.platformClientInstance) {
+            const saAppId = this.sdkConfig.applicationId;
+            if (saAppId) {
+                try {
+                    fetchedSubagents = await this.platformClientInstance.fetchSubagents(saAppId, this.sdkConfig.sessionType);
+                    if (fetchedSubagents.length > 0) {
+                        process.stderr.write(`[SDK] Loaded ${String(fetchedSubagents.length)} subagent(s)\n`);
+                    }
+                }
+                catch {
+                    process.stderr.write('[WARN] Failed to fetch subagents\n');
+                }
+            }
+        }
+        // 3. Build platform config params
+        const platformParams = buildPlatformConfigParams(versionConfig, this.sdkConfig);
+        // 4. Merge: configOverrides (base) + platformParams (override) + KB docs + custom tools
+        const mergedParams = {
+            ...this.configOverrides,
+            ...platformParams,
+            appDocuments,
+            tenantDocuments,
+            connectionInfos,
+        };
+        // Only set tool config arrays when there are tools to include
+        const bundleHttp = (platformParams.httpToolConfigs) ?? [];
+        const bundleChain = (platformParams.chainToolConfigs) ?? [];
+        const bundleFunction = (platformParams.functionToolConfigs) ?? [];
+        if (bundleHttp.length > 0 || httpToolConfigs.length > 0) {
+            mergedParams['httpToolConfigs'] = [...bundleHttp, ...httpToolConfigs];
+        }
+        if (bundleChain.length > 0 || chainToolConfigs.length > 0) {
+            mergedParams['chainToolConfigs'] = [...bundleChain, ...chainToolConfigs];
+        }
+        if (bundleFunction.length > 0 || functionToolConfigs.length > 0) {
+            mergedParams['functionToolConfigs'] = [...bundleFunction, ...functionToolConfigs];
+        }
+        // Merge skills
+        const bundleSkillsFromVersion = platformParams.bundleSkills ?? [];
+        if (bundleSkillsFromVersion.length > 0 || fetchedSkills.length > 0) {
+            mergedParams['bundleSkills'] = [...bundleSkillsFromVersion, ...fetchedSkills];
+        }
+        // Merge subagents
+        if (fetchedSubagents.length > 0) {
+            mergedParams['bundleSubagents'] = fetchedSubagents;
+        }
+        // 2.95 Fetch stores + knowledge from active deployment snapshot (non-fatal)
+        if (this.platformClientInstance) {
+            try {
+                const snapshot = await this.platformClientInstance.fetchActiveSnapshot(30000, this.sdkConfig.deployId);
+                if (snapshot) {
+                    // Stores
+                    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- snapshot from server
+                    const stores = snapshot['stores'];
+                    if (stores && stores.length > 0) {
+                        mergedParams['stores'] = stores;
+                        process.stderr.write(`[SDK] Loaded ${String(stores.length)} store(s)\n`);
+                    }
+                    // Knowledge from snapshot (repo-based, not from platform DB)
+                    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- snapshot from server
+                    const knowledge = snapshot['knowledge'];
+                    if (knowledge && knowledge.length > 0) {
+                        // Convert snapshot knowledge to KBDocument format
+                        const snapshotDocs = knowledge.map((k) => ({
+                            id: k.name,
+                            scope_type: 'application',
+                            scope_id: this.sdkConfig.applicationId ?? '',
+                            title: k.title,
+                            category: 'system_docs',
+                            body: k.body,
+                            tags: [],
+                            status: 'approved',
+                            created_by: 'deployment',
+                            created_at: new Date().toISOString(),
+                            updated_at: new Date().toISOString(),
+                        }));
+                        // Merge with any platform-fetched docs (snapshot docs first, platform docs override)
+                        const existingNames = new Set(appDocuments.map((d) => d.title));
+                        const newDocs = snapshotDocs.filter((d) => !existingNames.has(d.title));
+                        appDocuments = [...appDocuments, ...newDocs];
+                        // Update mergedParams since appDocuments was reassigned
+                        mergedParams['appDocuments'] = appDocuments;
+                        process.stderr.write(`[SDK] Loaded ${String(newDocs.length)} knowledge doc(s) from snapshot\n`);
+                    }
+                }
+            }
+            catch {
+                // Non-fatal — stores and knowledge are optional
+            }
+        }
+        // 5. Create AmodalConfig (composition wrapper) and initialize
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- merging partial configs
+        this.amodalConfig = new AmodalConfig(mergedParams);
+        await this.amodalConfig.initialize();
+    }
+    /**
+     * Access the initialized AmodalConfig instance.
+     * Throws if initialize() hasn't been called.
+     */
+    getConfig() {
+        if (!this.amodalConfig) {
+            throw new Error('AgentSDK not initialized. Call initialize() first.');
+        }
+        return this.amodalConfig;
+    }
+    /**
+     * Access the VersionManager instance.
+     * Throws if initialize() hasn't been called.
+     */
+    getVersionManager() {
+        if (!this.versionManager) {
+            throw new Error('AgentSDK not initialized. Call initialize() first.');
+        }
+        return this.versionManager;
+    }
+    /**
+     * Access the PlatformClient instance (if platform config was provided).
+     * Returns null if no platform config was set.
+     */
+    getPlatformClient() {
+        return this.platformClientInstance;
+    }
+    /**
+     * Shutdown the SDK: flush audit logs.
+     */
+    async shutdown() {
+        if (this.amodalConfig) {
+            await this.amodalConfig.shutdown();
+        }
+    }
+}
+//# sourceMappingURL=sdk.js.map

package/dist/src/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../src/sdk.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAA+B,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAMzE;;;;;;GAMG;AACH,MAAM,OAAO,QAAQ;IACF,SAAS,CAAiB;IAC1B,eAAe,CAA0B;IAClD,YAAY,GAAwB,IAAI,CAAC;IACzC,cAAc,GAA0B,IAAI,CAAC;IAC7C,sBAAsB,GAA0B,IAAI,CAAC;IACrD,WAAW,GAAG,KAAK,CAAC;IAE5B;;;;;OAKG;IACH,YACE,SAAyB,EACzB,kBAA2C,EAAE;QAE7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,IAAI,MAAM,EAAE,CAAC;QAC1D,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEtD,IAAI,aAAa,GAAmD,IAAI,CAAC;QAEzE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC5B,oDAAoD;YACpD,IAAI,CAAC,sBAAsB,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAE1E,oDAAoD;YACpD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,CAAC;gBACrE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAChD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,OAAO,CAAC,CAAC;gBAClE,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC7D,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5D,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACzD,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;gBACpC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe;aACrC,CAAC,CAAC;YACH,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;QACzD,CAAC;QAED,oEAAoE;QACpE,IAAI,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAC7B,CAAC;gBACF,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;oBACtB,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC;gBAClD,CAAC;gBACD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;oBACpB,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;gBACvD,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC/C,CAAC;gBACD,IAAI,GAAG,CAAC,uBAAuB,IAAI,GAAG,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1E,IAAI,CAAC,SAAS,CAAC,qBAAqB,GAAG,GAAG,CAAC,uBAAuB,CAAC;gBACrE,CAAC;gBACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBACd,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;gBAC5C,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACjB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;oBAE3C,0DAA0D;oBAC1D,MAAM,EAAE,GAAgB;wBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,uEAAuE;wBACvE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAK,IAAI,CAAC,eAAe,CAAC,OAAO,CAAwB,IAAI,kBAAkB;wBAC/F,OAAO,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;wBAC3C,WAAW,EAAE,EAAE;qBAChB,CAAC;oBACF,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;wBACzB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,mBAAmB;4BAChE,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB;gCAC9C,CAAC,CAAC,SAAS,CAAC;wBACd,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;oBACvD,CAAC;oBACD,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC3C,CAAC;gBACD,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;oBAC1B,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,iBAAiB,CAAC;gBAClE,CAAC;gBACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;oBACzB,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC;gBAChE,CAAC;gBACD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;oBACrB,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;gBACzD,CAAC;gBACD,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;oBACvB,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;gBAC7D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,YAAY,GAAiB,EAAE,CAAC;QACpC,IAAI,eAAe,GAAiB,EAAE,CAAC;QAEvC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAC3C,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAC7D,aAAa,EACb,KAAK,EACL,IAAI,CAAC,SAAS,CAAC,WAAW,CAC3B,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qDAAqD,CACtD,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YACtC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAChE,QAAQ,EACR,KAAK,EACL,IAAI,CAAC,SAAS,CAAC,WAAW,CAC3B,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,CACjD,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YACnD,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAC9D,kBAAkB,CACnB,CAAC;oBACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;wBACrD,MAAM,QAAQ,GAA2B,EAAE,CAAC;wBAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;4BAC7B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;wBACvC,CAAC;wBACD,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;oBACtE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;gBAED,qEAAqE;gBACrE,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CACxE,kBAAkB,CACnB,CAAC;oBACF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;oBACrD,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;wBACjE,MAAM,UAAU,GAA4B;4BAC1C,GAAG,QAAQ,CAAC,WAAW;yBACxB,CAAC;wBACF,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;4BAC5B,UAAU,CAAC,iBAAiB,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC;wBAC1D,CAAC;wBACD,WAAW,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;oBACrC,CAAC;oBACD,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,WAAW,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,CACzC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,IAAI,eAAe,GAAqB,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAClE,IAAI,CAAC,SAAS,CAAC,aAAa,EAC5B,IAAI,CAAC,SAAS,CAAC,WAAW,CAC3B,CAAC;gBACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,uBAAuB,CACtE,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,MAAM,eAAe,GAAc,EAAE,CAAC;QACtC,MAAM,gBAAgB,GAAc,EAAE,CAAC;QACvC,MAAM,mBAAmB,GAAc,EAAE,CAAC;QAE1C,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAC/C,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,MAAM,KAAK,GACT,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBACtF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;wBACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BACzB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC/B,CAAC;6BAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BACjC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAChC,CAAC;6BAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;4BACpC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACnC,CAAC;oBACH,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CACxD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,IAAI,aAAa,GAAkB,EAAE,CAAC;QAEtC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAChD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBACtG,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAC1D,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,gBAAgB,GAAqB,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,gBAAgB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBACzG,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAChE,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,cAAc,GAAG,yBAAyB,CAC9C,aAAa,EACb,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,wFAAwF;QACxF,MAAM,YAAY,GAA4B;YAC5C,GAAG,IAAI,CAAC,eAAe;YACvB,GAAG,cAAc;YACjB,YAAY;YACZ,eAAe;YACf,eAAe;SAChB,CAAC;QAEF,8DAA8D;QAC9D,MAAM,UAAU,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAElE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,eAAe,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,YAAY,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,mBAAmB,CAAC,CAAC;QACpF,CAAC;QAED,eAAe;QACf,MAAM,uBAAuB,GAAI,cAAc,CAAC,YAAuF,IAAI,EAAE,CAAC;QAC9I,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,uBAAuB,EAAE,GAAG,aAAa,CAAC,CAAC;QAChF,CAAC;QAED,kBAAkB;QAClB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,YAAY,CAAC,iBAAiB,CAAC,GAAG,gBAAgB,CAAC;QACrD,CAAC;QAED,4EAA4E;QAC5E,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACvG,IAAI,QAAQ,EAAE,CAAC;oBACb,SAAS;oBACT,+FAA+F;oBAC/F,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAA0B,CAAC;oBAC3D,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChC,YAAY,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;wBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CACnD,CAAC;oBACJ,CAAC;oBAED,6DAA6D;oBAC7D,+FAA+F;oBAC/F,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAmE,CAAC;oBAC1G,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtC,kDAAkD;wBAClD,MAAM,YAAY,GAAiB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACvD,EAAE,EAAE,CAAC,CAAC,IAAI;4BACV,UAAU,EAAE,aAAsB;4BAClC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,EAAE;4BAC5C,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,QAAQ,EAAE,aAAuC;4BACjD,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,IAAI,EAAE,EAAE;4BACR,MAAM,EAAE,UAAU;4BAClB,UAAU,EAAE,YAAY;4BACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBACrC,CAAC,CAAC,CAAC;wBACJ,qFAAqF;wBACrF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;wBAChE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;wBACxE,YAAY,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;wBAC7C,wDAAwD;wBACxD,YAAY,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;wBAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mCAAmC,CAC1E,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,kGAAkG;QAClG,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,YAAiD,CAAC,CAAC;QACxF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,sBAAsB,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;CACF"}

package/dist/src/security/action-gate.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { AccessConfig } from '../repo/connection-schemas.js';
+import type { GateResult } from './security-types.js';
+export interface ActionGateConfig {
+    accessConfigs: Map<string, AccessConfig>;
+    isDelegated: boolean;
+}
+/**
+ * Controls write operations based on confirmation tiers from access config.
+ */
+export declare class ActionGate {
+    private readonly accessConfigs;
+    private readonly isDelegated;
+    private readonly thresholdEvaluator;
+    constructor(config: ActionGateConfig);
+    evaluate(endpointPath: string, connectionName: string, params?: Record<string, unknown>): GateResult;
+    private resolveBaseTier;
+    private escalateDecision;
+}