@avi770/testteam 3.0.0 → 3.2.0

package/dist/core/compliance/types.d.ts

@@ -0,0 +1,174 @@
+/**
+ * Compliance & Audit module (#18 — "The Inspector") — local types.
+ * This module COMPOSES engine-agent output (agents #65/#66/#67/#84 findings);
+ * it never re-scans and never changes the system.
+ * Spec: blueprint/agents/18-compliance-audit.md.
+ *
+ * DISCLAIMER: This module produces compliance evidence for engineering teams.
+ * It is NOT legal advice. Always consult qualified legal counsel for regulatory
+ * obligations.
+ */
+import type { Finding, EvidenceItem } from '../types.js';
+/** Supported regulatory/compliance frameworks. Extend as new ones are ratified. */
+export type ComplianceFramework = 'SOC2' | 'GDPR' | 'HIPAA' | 'PCI-DSS' | 'ISO27001' | 'WCAG-AAA' | 'EU-AI-Act';
+/**
+ * A single compliance control. Each control maps to one or more framework
+ * references and is proved/broken by evidence from engine-agent findings.
+ */
+export interface ComplianceControl {
+    /** Stable, human-readable id — e.g. "SOC2-CC6.1". */
+    readonly id: string;
+    /** Human-readable title. */
+    readonly title: string;
+    /** Which frameworks this control satisfies (multi-framework mapping, improvement #6). */
+    readonly frameworks: readonly ComplianceFramework[];
+    /**
+     * Engine-agent IDs whose findings are eligible as evidence for this control.
+     * Findings from other agents are ignored entirely.
+     */
+    readonly provedByAgentIds: readonly number[];
+    /**
+     * Regex pattern applied to finding.id AND finding.description — a finding
+     * MUST match this pattern to count as positive proof that the control passes.
+     * Absence of a matching finding = NOT compliant (no positive proof).
+     * A control is never "passing" based solely on non-breach findings.
+     */
+    readonly provedByFindingPattern: string;
+    /**
+     * Pattern applied to finding.id or finding.description — if matched on a
+     * PRESENT finding from the engine agents, this control is marked BREACHED
+     * (drift detected, improvement #10). Takes precedence over provedByFindingPattern.
+     */
+    readonly breachedByFindingPattern: string;
+}
+/** Returned when a control's regex pattern is malformed. */
+export interface PatternCompileError {
+    readonly kind: 'pattern-compile-error';
+    readonly controlId: string;
+    readonly field: 'breachedByFindingPattern' | 'provedByFindingPattern';
+    readonly rawPattern: string;
+    readonly message: string;
+}
+/**
+ * Evaluated status of a control:
+ * - 'passing':          breach absent + positive proof present from ALL responsible agents.
+ * - 'partial-evidence': proof present but NOT all provedByAgentIds returned data — does NOT
+ *                       count as compliant (treated as a gap; never inflates passingPct).
+ * - 'failing':          a breach finding is present.
+ * - 'no-evidence':      no breach and no positive proof.
+ */
+export type ControlStatus = 'passing' | 'failing' | 'no-evidence' | 'partial-evidence';
+/**
+ * The current evaluated status of a single control, derived from live engine
+ * findings — never assumed, never rounded up (improvement #16 / Avi's QA rule).
+ */
+export interface ControlEvaluation {
+    readonly controlId: string;
+    readonly status: ControlStatus;
+    /**
+     * Calibrated confidence 0..1. Computed from how many provedByAgentIds
+     * returned findings vs how many ran. Never rounded up; raw ratio.
+     */
+    readonly confidence: number;
+    /** Evidence items that directly support this control's current status. */
+    readonly linkedEvidence: readonly LinkedEvidence[];
+    /** The engine-agent finding that triggered a breach, if any. */
+    readonly breachFinding?: Finding;
+    /** ISO timestamp of last evaluation. */
+    readonly lastVerifiedAt: string;
+}
+/**
+ * A single entry in the immutable evidence vault. Entries are append-only;
+ * the vault detects any retrospective modification via a SHA-256 chain.
+ */
+export interface EvidenceVaultEntry {
+    /** Monotonically increasing sequence number within this vault instance. */
+    readonly seq: number;
+    /** ISO timestamp when evidence was ingested. */
+    readonly capturedAt: string;
+    /** Control this evidence relates to. */
+    readonly controlId: string;
+    /** The underlying engine finding or evidence item. */
+    readonly payload: Finding | EvidenceItem;
+    /**
+     * SHA-256 hex of `seq + capturedAt + controlId + JSON(payload) + prevHash`.
+     * The first entry uses prevHash = "GENESIS".
+     */
+    readonly hash: string;
+}
+/**
+ * A piece of evidence linked back to its vault entry. Carries the vault seq
+ * so callers can verify the chain.
+ */
+export interface LinkedEvidence {
+    readonly vaultSeq: number;
+    readonly controlId: string;
+    readonly capturedAt: string;
+    readonly payload: Finding | EvidenceItem;
+}
+/**
+ * Raised when a previously-passing control transitions to failing due to a
+ * new engine-agent finding. "Shift-left compliance" — fired immediately.
+ */
+export interface DriftAlert {
+    readonly controlId: string;
+    readonly frameworks: readonly ComplianceFramework[];
+    readonly triggeringFindingId: string;
+    readonly triggeringAgentId: number;
+    readonly detectedAt: string;
+    /** Human-readable description of what broke. */
+    readonly description: string;
+}
+/** A gap: a control that the system cannot currently demonstrate passing. */
+export interface ComplianceGap {
+    readonly controlId: string;
+    readonly controlTitle: string;
+    readonly frameworks: readonly ComplianceFramework[];
+    readonly reason: 'no-evidence' | 'failing' | 'partial-evidence';
+    /** Suggested remediation — non-binding, handed to fixer under gate. */
+    readonly remediationHint: string;
+}
+/**
+ * The audit-ready deliverable for a target framework. Contains only the
+ * controls relevant to that framework and the evidence backing each one.
+ * Matches what auditors want: framework, control list, evidence per control,
+ * gap list, generated timestamp.
+ */
+export interface AuditEvidencePack {
+    readonly framework: ComplianceFramework;
+    readonly generatedAt: string;
+    readonly disclaimer: string;
+    readonly controls: readonly ControlEvaluation[];
+    /** Controls in this framework that are not yet demonstrated. */
+    readonly gaps: readonly ComplianceGap[];
+    /** Raw vault entries backing every control in this pack. */
+    readonly vaultEntries: readonly EvidenceVaultEntry[];
+    /** Percentage of controls currently passing (never rounded up). */
+    readonly passingPct: number;
+}
+/** Top-level compliance posture across all frameworks — dashboard data. */
+export interface CompliancePosture {
+    readonly evaluatedAt: string;
+    readonly controlEvaluations: readonly ControlEvaluation[];
+    readonly driftAlerts: readonly DriftAlert[];
+    readonly gaps: readonly ComplianceGap[];
+    /**
+     * Per-framework pass percentages (never rounded up). Partial: only frameworks that
+     * have ≥1 control appear — a framework with zero controls is absent, not a 0-stub.
+     */
+    readonly frameworkSummary: Readonly<Partial<Record<ComplianceFramework, FrameworkSummary>>>;
+}
+export interface FrameworkSummary {
+    readonly framework: ComplianceFramework;
+    readonly totalControls: number;
+    readonly passingControls: number;
+    /** Pass rate as a 0..100 PERCENTAGE (not a 0..1 ratio), floored to 2dp:
+     *  `Math.floor((passingControls / totalControls) * 10000) / 100`. 0 when no controls. */
+    readonly passingPct: number;
+}
+/**
+ * The batch of findings emitted by the engine agents that the auditor
+ * consumes. Keyed by agentId for fast lookup.
+ */
+export type AgentFindingsBatch = Readonly<Record<number, readonly Finding[]>>;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/compliance/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../core/compliance/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMtD,mFAAmF;AACnF,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,MAAM,GACN,OAAO,GACP,SAAS,GACT,UAAU,GACV,UAAU,GACV,WAAW,CAAC;AAMhB;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAMD,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,0BAA0B,GAAG,wBAAwB,CAAC;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAEvF;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,SAAS,cAAc,EAAE,CAAC;IACnD,gEAAgE;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,wCAAwC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAMD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,CAAC;CAC1C;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAMD,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAChE,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAMD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IACxC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACrD,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAMD,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;6FACyF;IACzF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAMD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC"}

package/dist/core/compliance/types.js

@@ -0,0 +1,12 @@
+/**
+ * Compliance & Audit module (#18 — "The Inspector") — local types.
+ * This module COMPOSES engine-agent output (agents #65/#66/#67/#84 findings);
+ * it never re-scans and never changes the system.
+ * Spec: blueprint/agents/18-compliance-audit.md.
+ *
+ * DISCLAIMER: This module produces compliance evidence for engineering teams.
+ * It is NOT legal advice. Always consult qualified legal counsel for regulatory
+ * obligations.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/compliance/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../core/compliance/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/core/conductor/conductor.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The Conductor (#26 MVP, Phase 2.3) — the strategic brain on top of the engine. Decides what
+ * matters, routes by complexity (deterministic-first), governs a global budget, gates high-stakes
+ * calls to the human, and ACTS ONLY THROUGH THE HARNESS (never a direct prod action). Every
+ * decision is audited with a rationale. Not a SPOF: when unavailable, agents keep running their own
+ * loops + #27 triggers. Spec: blueprint/agents/26-master-orchestrator.md.
+ *
+ * Reuse-first: composes the Phase 1.2 Harness for actuation and core/cost-tracker.ts for budget.
+ */
+import { CostTracker, type CostBudget } from '../cost-tracker.js';
+import { type ActuationSafetyHarness } from '../harness/index.js';
+import { ModelRouter } from './model-router.js';
+import type { Decision, DecisionRequest } from './types.js';
+export declare class Conductor {
+    private readonly router;
+    private readonly harness;
+    private readonly budget;
+    private readonly log;
+    private readonly now;
+    private available;
+    constructor(harness: ActuationSafetyHarness, options?: {
+        readonly router?: ModelRouter;
+        readonly budget?: CostBudget;
+        readonly clock?: () => number;
+    });
+    /** Mark #26 up/down. When down, decisions degrade — the rest of the suite runs without it. */
+    setAvailable(value: boolean): void;
+    get decisionLog(): readonly Decision[];
+    get budgetState(): ReturnType<CostTracker['checkBudget']>;
+    /**
+     * Make one orchestration decision. Order: degradation -> budget -> human gate -> spend -> act via
+     * the Harness. Returns the audited Decision; the action callback runs ONLY on an allow verdict.
+     */
+    decide(request: DecisionRequest): Promise<Decision>;
+    private record;
+}
+//# sourceMappingURL=conductor.d.ts.map

package/dist/core/conductor/conductor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conductor.d.ts","sourceRoot":"","sources":["../../../core/conductor/conductor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAA8B,MAAM,SAAS,CAAC;AASrF,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkB;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,SAAS,CAAQ;gBAGvB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE;IAQ1G,8FAA8F;IAC9F,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIlC,IAAI,WAAW,IAAI,SAAS,QAAQ,EAAE,CAErC;IAED,IAAI,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAExD;IAED;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+CzD,OAAO,CAAC,MAAM;CAKf"}

package/dist/core/conductor/conductor.js

@@ -0,0 +1,96 @@
+/**
+ * The Conductor (#26 MVP, Phase 2.3) — the strategic brain on top of the engine. Decides what
+ * matters, routes by complexity (deterministic-first), governs a global budget, gates high-stakes
+ * calls to the human, and ACTS ONLY THROUGH THE HARNESS (never a direct prod action). Every
+ * decision is audited with a rationale. Not a SPOF: when unavailable, agents keep running their own
+ * loops + #27 triggers. Spec: blueprint/agents/26-master-orchestrator.md.
+ *
+ * Reuse-first: composes the Phase 1.2 Harness for actuation and core/cost-tracker.ts for budget.
+ */
+import { CostTracker } from '../cost-tracker.js';
+import { HarnessUnavailableError } from '../harness/index.js';
+import { ModelRouter } from './model-router.js';
+const UNLIMITED_BUDGET = {
+    maxPerRun: Number.POSITIVE_INFINITY,
+    maxPerAgent: Number.POSITIVE_INFINITY,
+    alertThreshold: 0.8,
+    onExceeded: 'abort',
+};
+export class Conductor {
+    router;
+    harness;
+    budget;
+    log = [];
+    now;
+    available = true;
+    constructor(harness, options) {
+        this.harness = harness;
+        this.router = options?.router ?? new ModelRouter();
+        this.budget = new CostTracker(options?.budget ?? UNLIMITED_BUDGET);
+        this.now = options?.clock ?? (() => Date.now());
+    }
+    /** Mark #26 up/down. When down, decisions degrade — the rest of the suite runs without it. */
+    setAvailable(value) {
+        this.available = value;
+    }
+    get decisionLog() {
+        return this.log.slice();
+    }
+    get budgetState() {
+        return this.budget.checkBudget();
+    }
+    /**
+     * Make one orchestration decision. Order: degradation -> budget -> human gate -> spend -> act via
+     * the Harness. Returns the audited Decision; the action callback runs ONLY on an allow verdict.
+     */
+    async decide(request) {
+        const route = this.router.route(request.complexity);
+        if (!this.available) {
+            return this.record(request, route, 'degraded', '#26 unavailable; agents continue on their own loops + #27 triggers');
+        }
+        if (this.budget.checkBudget().status === 'exceeded') {
+            return this.record(request, route, 'budget-halted', 'budget already exhausted — orchestration halted');
+        }
+        if (request.highStakes || request.complexity === 'strategic') {
+            return this.record(request, route, 'escalated-to-human', 'high-stakes/strategic decision → human gate (not executed unilaterally)');
+        }
+        // Validate cost BEFORE spending — a negative cost would refund the cap and NaN would poison
+        // the total (every comparison false → cap never trips). Either bypasses the budget guarantee.
+        const cost = request.estimatedCost ?? 0;
+        if (!Number.isFinite(cost) || cost < 0) {
+            return this.record(request, route, 'budget-halted', `invalid estimatedCost '${cost}' — orchestration halted`);
+        }
+        // Governs run-level spend (maxPerRun). Per-agent caps (maxPerAgent) are enforced by the
+        // execution engine where cost is attributed per agentId, not at this single-decision layer.
+        this.budget.trackCost('conductor', cost);
+        if (this.budget.checkBudget().status === 'exceeded') {
+            return this.record(request, route, 'budget-halted', 'budget exhausted by this decision — orchestration halted');
+        }
+        if (request.action) {
+            try {
+                const { verdict } = await this.harness.execute(request.action, async () => 'orchestrated');
+                if (verdict.decision === 'gate') {
+                    // A gated-tier action is HELD for human approval — not a denial.
+                    return this.record(request, route, 'escalated-to-human', `Harness gate: ${verdict.reason}`);
+                }
+                if (verdict.decision !== 'allow') {
+                    return this.record(request, route, 'harness-denied', `Harness ${verdict.decision}: ${verdict.reason}`);
+                }
+            }
+            catch (err) {
+                // Fail closed: an unavailable Harness must yield an AUDITED decision, never an unhandled throw.
+                if (err instanceof HarnessUnavailableError) {
+                    return this.record(request, route, 'harness-denied', `Harness unavailable: fail-safe block (${err.message})`);
+                }
+                throw err;
+            }
+        }
+        return this.record(request, route, 'executed', `routed via ${route.path} (${route.model})`);
+    }
+    record(request, route, status, rationale) {
+        const decision = { goal: request.goal, status, route, rationale, atMs: this.now() };
+        this.log.push(decision);
+        return decision;
+    }
+}
+//# sourceMappingURL=conductor.js.map

package/dist/core/conductor/conductor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conductor.js","sourceRoot":"","sources":["../../../core/conductor/conductor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAA+B,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,MAAM,gBAAgB,GAAe;IACnC,SAAS,EAAE,MAAM,CAAC,iBAAiB;IACnC,WAAW,EAAE,MAAM,CAAC,iBAAiB;IACrC,cAAc,EAAE,GAAG;IACnB,UAAU,EAAE,OAAO;CACpB,CAAC;AAEF,MAAM,OAAO,SAAS;IACH,MAAM,CAAc;IACpB,OAAO,CAAyB;IAChC,MAAM,CAAc;IACpB,GAAG,GAAe,EAAE,CAAC;IACrB,GAAG,CAAe;IAC3B,SAAS,GAAG,IAAI,CAAC;IAEzB,YACE,OAA+B,EAC/B,OAAwG;QAExG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,IAAI,gBAAgB,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,8FAA8F;IAC9F,YAAY,CAAC,KAAc;QACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAwB;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,oEAAoE,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,iDAAiD,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,yEAAyE,CAAC,CAAC;QACtI,CAAC;QAED,4FAA4F;QAC5F,8FAA8F;QAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,0BAA0B,IAAI,0BAA0B,CAAC,CAAC;QAChH,CAAC;QACD,wFAAwF;QACxF,4FAA4F;QAC5F,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,0DAA0D,CAAC,CAAC;QAClH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC;gBAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAChC,iEAAiE;oBACjE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9F,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzG,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gGAAgG;gBAChG,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;oBAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,yCAAyC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;gBAChH,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IAC9F,CAAC;IAEO,MAAM,CAAC,OAAwB,EAAE,KAAiB,EAAE,MAAsB,EAAE,SAAiB;QACnG,MAAM,QAAQ,GAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC9F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/core/conductor/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Master Orchestrator (#26 "The Conductor") MVP — public surface (Phase 2.3).
+ * Best-fit routing + budget governor + human gate + acts-via-Harness + decision audit.
+ * Spec: blueprint/agents/26-master-orchestrator.md.
+ */
+export type { TaskComplexity, RoutePath, ModelRoute, DecisionRequest, DecisionStatus, Decision, } from './types.js';
+export { ModelRouter } from './model-router.js';
+export { Conductor } from './conductor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/conductor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/conductor/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,YAAY,EACV,cAAc,EACd,SAAS,EACT,UAAU,EACV,eAAe,EACf,cAAc,EACd,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/core/conductor/index.js

@@ -0,0 +1,3 @@
+export { ModelRouter } from './model-router.js';
+export { Conductor } from './conductor.js';
+//# sourceMappingURL=index.js.map

package/dist/core/conductor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../core/conductor/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/core/conductor/model-router.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Best-fit model routing (Phase 2.3) — deterministic-first. Matches the model to the task's
+ * complexity so the heavyweight brain fires only when the job genuinely needs it (quality-optimal
+ * AND frugal). Pluggable + hot-swappable: swap the model behind any path without a rewrite.
+ * This mirrors the suite's own tiered orchestration (cheap workers + Opus for hard calls).
+ * Spec: blueprint/agents/26-master-orchestrator.md ("Best-fit model routing, deterministic-first").
+ */
+import type { ModelRoute, RoutePath, TaskComplexity } from './types.js';
+export declare class ModelRouter {
+    private readonly registry;
+    constructor(overrides?: Partial<Record<RoutePath, string>>);
+    /** Hot-swap the model behind a path (pluggable; no rewrite). */
+    setModel(path: RoutePath, model: string): void;
+    /** Route by complexity — most orchestration is cheap; only hard/strategic hits the heavyweight. */
+    route(complexity: TaskComplexity): ModelRoute;
+}
+//# sourceMappingURL=model-router.d.ts.map

package/dist/core/conductor/model-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-router.d.ts","sourceRoot":"","sources":["../../../core/conductor/model-router.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAiBrE,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;gBAEzC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAI1D,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9C,mGAAmG;IACnG,KAAK,CAAC,UAAU,EAAE,cAAc,GAAG,UAAU;CAI9C"}

package/dist/core/conductor/model-router.js

@@ -0,0 +1,29 @@
+const COMPLEXITY_TO_PATH = {
+    trivial: 'deterministic',
+    simple: 'cheap-model',
+    moderate: 'mid-model',
+    hard: 'heavyweight',
+    strategic: 'heavyweight',
+};
+const DEFAULT_MODELS = {
+    deterministic: 'rules',
+    'cheap-model': 'gemini-2.5-flash',
+    'mid-model': 'gpt-oss-120b',
+    heavyweight: 'claude-opus-4-8',
+};
+export class ModelRouter {
+    registry;
+    constructor(overrides) {
+        this.registry = { ...DEFAULT_MODELS, ...overrides };
+    }
+    /** Hot-swap the model behind a path (pluggable; no rewrite). */
+    setModel(path, model) {
+        this.registry[path] = model;
+    }
+    /** Route by complexity — most orchestration is cheap; only hard/strategic hits the heavyweight. */
+    route(complexity) {
+        const path = COMPLEXITY_TO_PATH[complexity];
+        return { path, model: this.registry[path], reason: `complexity '${complexity}' -> ${path}` };
+    }
+}
+//# sourceMappingURL=model-router.js.map

package/dist/core/conductor/model-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-router.js","sourceRoot":"","sources":["../../../core/conductor/model-router.ts"],"names":[],"mappings":"AASA,MAAM,kBAAkB,GAAsC;IAC5D,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,aAAa;CACzB,CAAC;AAEF,MAAM,cAAc,GAA8B;IAChD,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,kBAAkB;IACjC,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF,MAAM,OAAO,WAAW;IACL,QAAQ,CAA4B;IAErD,YAAY,SAA8C;QACxD,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,SAAS,EAAE,CAAC;IACtD,CAAC;IAED,gEAAgE;IAChE,QAAQ,CAAC,IAAe,EAAE,KAAa;QACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,UAA0B;QAC9B,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,UAAU,QAAQ,IAAI,EAAE,EAAE,CAAC;IAC/F,CAAC;CACF"}

package/dist/core/conductor/types.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Master Orchestrator (#26 "The Conductor") MVP — shared types (Phase 2.3).
+ * The strategic layer ON TOP of the deterministic engine (core/orchestrator.ts + MAH): decides what
+ * matters, routes by complexity (heavyweight brain only when earned), governs budget, gates
+ * high-stakes calls to the human, and acts ONLY through the Harness. Spec: blueprint/agents/26-*.md.
+ */
+import type { ActionRequest } from '../harness/index.js';
+export type TaskComplexity = 'trivial' | 'simple' | 'moderate' | 'hard' | 'strategic';
+export type RoutePath = 'deterministic' | 'cheap-model' | 'mid-model' | 'heavyweight';
+export interface ModelRoute {
+    readonly path: RoutePath;
+    readonly model: string;
+    readonly reason: string;
+}
+export interface DecisionRequest {
+    readonly goal: string;
+    readonly complexity: TaskComplexity;
+    /** Novel / irreversible / high-stakes → the human strategic gate. */
+    readonly highStakes?: boolean;
+    /** Estimated cost (tokens/$) for budget governance. */
+    readonly estimatedCost?: number;
+    /** If the decision actuates, the action routes through the Harness (the only actuation path). */
+    readonly action?: ActionRequest;
+}
+export type DecisionStatus = 'executed' | 'escalated-to-human' | 'budget-halted' | 'harness-denied' | 'degraded';
+export interface Decision {
+    readonly goal: string;
+    readonly status: DecisionStatus;
+    readonly route: ModelRoute;
+    readonly rationale: string;
+    readonly atMs: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/conductor/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../core/conductor/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;AACtF,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,aAAa,GAAG,WAAW,GAAG,aAAa,CAAC;AAEtF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,oBAAoB,GACpB,eAAe,GACf,gBAAgB,GAChB,UAAU,CAAC;AAEf,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB"}

package/dist/core/conductor/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/conductor/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../core/conductor/types.ts"],"names":[],"mappings":""}

package/dist/core/config.d.ts

@@ -21,6 +21,21 @@ export interface RoleEntry {
 }
 export interface AuthConfig {
     loginUrl?: string;
+    /**
+     * Optional logout endpoint. When set, Agent #88 will exercise the
+     * logout flow after a successful login and verify the session was
+     * invalidated. If absent, #88 falls back to scanning the
+     * connection-map for logout-shaped routes.
+     */
+    logoutUrl?: string;
+    /**
+     * Optional refresh-token endpoint. When set, Agent #88 exercises the
+     * token-refresh flow after login and verifies a fresh access token is
+     * issued. If absent, #88 falls back to scanning the connection-map for
+     * refresh-shaped routes (and only probes when a refresh token was
+     * captured at login).
+     */
+    refreshUrl?: string;
     credentials?: Record<string, CredentialEntry>;
     roles?: RoleEntry[];
 }
@@ -84,6 +99,101 @@ export interface ThresholdsConfig {
     bundleSizeLimit: number;
     maxConsoleErrors: number;
 }
+/**
+ * Optional dev-server descriptor used by Agent #88 (Localhost Walkthrough).
+ *
+ * If absent, #88 falls back to autodetecting an `npm run dev` script in the
+ * target project's package.json. Provide this block explicitly when the
+ * project uses a non-npm stack (Django, Rails, Go, etc.) or when the dev
+ * server lives on a non-default port.
+ */
+export interface DevServerConfig {
+    /** Shell command to start the dev server. e.g. 'npm run dev', 'python -m flask run'. */
+    command?: string;
+    /** Working directory for the command. Defaults to projectRoot. */
+    cwd?: string;
+    /** Port the server listens on. Used to build the health URL when healthUrl is omitted. */
+    port: number;
+    /** Override for the readiness URL. Defaults to http://localhost:<port>/. */
+    healthUrl?: string;
+    /** Optional stdout line to wait for before considering the server ready. */
+    readyText?: string;
+    /** Timeout (ms) to wait for readiness. Defaults to 60_000. */
+    readyTimeoutMs?: number;
+}
+/**
+ * Optional boundary-fuzzer descriptor used by Agent #91 (Boundary Fuzzer).
+ *
+ * The agent is opt-in: when `enabled` is omitted or false the agent exits
+ * with a single info finding and never brings up the dev server. This keeps
+ * a developer who pip-installs TestTeam from accidentally sending malformed
+ * inputs at a persistent dev database or shared auth service.
+ */
+export interface BoundaryFuzzerConfig {
+    /** Set to true to actually run the fuzzer. Default false. */
+    enabled?: boolean;
+    /**
+     * When true, fuzzes mutating methods (POST/PUT/PATCH/DELETE) in addition
+     * to GET/HEAD. Strongly NOT recommended against a real DB. Default false.
+     */
+    includeMutations?: boolean;
+}
+/**
+ * Optional repair-simulator descriptor used by Agent #92 (Repair Simulator).
+ *
+ * The free-tier behaviour (static + git-status pre-checks) always runs.
+ * When `runSandboxTests: true` is set on a Pro license, the agent
+ * additionally creates a git worktree at HEAD, runs `npm install` + the
+ * configured test command in it, and reports the baseline test status
+ * before the fix loop runs. Catches "tests are already broken, so
+ * Healer/Fixer have nothing to verify against" without polluting the
+ * working tree.
+ */
+export interface RepairSimulatorConfig {
+    /**
+     * When true, run the test suite inside a temporary git worktree to
+     * confirm the baseline is green before the fix loop kicks in.
+     * Default false — sandbox runs are expensive (npm install + full
+     * test suite) so we never run them without explicit opt-in.
+     */
+    runSandboxTests?: boolean;
+    /** Test command to run in the worktree. Default 'npm test'. */
+    testCommand?: string;
+    /** Install command to run before the tests. Default 'npm install --no-audit --no-fund'. */
+    installCommand?: string;
+    /** Hard timeout for the full sandbox run (install + test). Default 300_000 (5 min). */
+    timeoutMs?: number;
+}
+/**
+ * Optional rate-limit auditor descriptor used by Agent #101.
+ *
+ * Opt-in: when `enabled` is omitted or false the agent exits with a single
+ * info finding. When enabled, the agent bursts the login (and other
+ * sensitive) endpoints with a NON-EXISTENT email + random password and
+ * checks whether the server ever throttles (429 / 423). Using a fake
+ * account means a real account is never locked out; this tests IP-based
+ * limiting, the most common login protection.
+ */
+export interface RateLimitConfig {
+    /** Set to true to run the rate-limit probe. Default false. */
+    enabled?: boolean;
+    /** Number of rapid requests per endpoint. Default 20. */
+    burstSize?: number;
+}
+/**
+ * Opt-in runtime contract capture (Agent #116). When enabled, the agent
+ * probes a RUNNING server's GET routes and diffs the live JSON response
+ * shape against the OpenAPI/Swagger contract. Disabled by default so it
+ * never touches the network in a normal/CI run.
+ */
+export interface RuntimeContractConfig {
+    /** Set to true to probe a running server. Default false. */
+    enabled?: boolean;
+    /** Base URL to probe. Defaults to environments[phase].baseUrl. */
+    baseUrl?: string;
+    /** Per-request timeout in ms. Default 5000. */
+    timeoutMs?: number;
+}
 export interface TestTeamConfig {
     schemaVersion: number;
     name: string;
@@ -103,9 +213,46 @@ export interface TestTeamConfig {
     agentClassification: AgentClassificationConfig;
     thresholds: ThresholdsConfig;
     disabledAgents: number[];
+    /** Optional dev-server descriptor — consumed by Agent #88 (Localhost Walkthrough). */
+    devServer?: DevServerConfig;
+    /** Optional opt-in boundary-fuzzer descriptor — consumed by Agent #91. */
+    boundaryFuzzer?: BoundaryFuzzerConfig;
+    /** Optional opt-in repair-simulator sandbox descriptor — consumed by Agent #92 (Pro). */
+    repairSimulator?: RepairSimulatorConfig;
+    /** Optional opt-in rate-limit auditor descriptor — consumed by Agent #101. */
+    rateLimit?: RateLimitConfig;
+    /** Optional opt-in runtime contract-capture descriptor — consumed by Agent #116. */
+    runtimeContract?: RuntimeContractConfig;
+    /** Optional SLA thresholds — evaluated after a run on the Enterprise tier. */
+    sla?: SlaThresholds;
+    /** Optional opt-in auto-fix descriptor — consumed by Agent #11 (Fixer). */
+    autoFix?: AutoFixConfig;
+}
+/**
+ * Opt-in controls for the Fixer (Agent #11). Off by default so a pipeline run
+ * never mutates the host repo's git state.
+ */
+export interface AutoFixConfig {
+    /**
+     * When true, the Fixer creates + checks out a `fix/testteam-<date>` branch in
+     * the working repo to stage fixes. **Default false** — otherwise running a
+     * phase would silently switch the user's checked-out branch (see OBS-4). When
+     * off, the Fixer still processes findings and emits patch suggestions; it just
+     * never touches git.
+     */
+    createBranch?: boolean;
+}
+/** SLA thresholds for the Enterprise post-run check (structurally matches enterprise/sla SLAConfig). */
+export interface SlaThresholds {
+    maxPipelineDuration: number;
+    maxAgentDuration: number;
+    uptimeTarget: number;
+    responseTimeTarget: number;
 }
 export interface ValidatedConfig extends TestTeamConfig {
     disabledAgentSet: Set<number>;
 }
-export declare function validateConfig(raw: TestTeamConfig): ValidatedConfig;
+export declare function validateConfig(raw: TestTeamConfig, opts?: {
+    requireCredentials?: boolean;
+}): ValidatedConfig;
 //# sourceMappingURL=config.d.ts.map