@bluefly/openstandardagents 0.3.5 → 0.4.0

package/dist/cli/commands/export.command.js

@@ -1,56 +1,232 @@
 /**
- * OSSA Export Command
- * Export OSSA agent manifest to platform-specific formats
+ * Export Command (Production-Grade)
+ * Exports OSSA manifest to platform-specific format
+ *
+ * Features:
+ * - Dry-run mode (preview without writing files)
+ * - Verbose/quiet output modes
+ * - JSON output for automation
+ * - Force mode (skip confirmations)
+ * - Backup before overwrite
+ * - CI/CD optimized (no color in CI)
  */
 import chalk from 'chalk';
 import { Command } from 'commander';
 import * as fs from 'fs';
+import * as path from 'path';
 import { container } from '../../di-container.js';
 import { ManifestRepository } from '../../repositories/manifest.repository.js';
-import { GenerationService } from '../../services/generation.service.js';
-import { handleCommandError } from '../utils/index.js';
+import { LangChainConverter } from '../../adapters/langchain/converter.js';
+import { CrewAIConverter } from '../../adapters/crewai/converter.js';
+import { TemporalConverter } from '../../adapters/temporal/converter.js';
+import { N8NConverter } from '../../adapters/n8n/converter.js';
+import { GitLabConverter } from '../../adapters/gitlab/converter.js';
+import { DockerfileGenerator } from '../../adapters/docker/generators.js';
+import { KubernetesManifestGenerator } from '../../adapters/kubernetes/generator.js';
+import { KAgentCRDGenerator } from '../../sdks/kagent/crd-generator.js';
+import { registry } from '../../adapters/registry/platform-registry.js';
+import { addGlobalOptions, addMutationOptions, shouldUseColor, } from '../utils/standard-options.js';
 export const exportCommand = new Command('export')
-    .argument('<path>', 'Path to OSSA manifest')
-    .option('-t, --to <platform>', 'Target platform (cursor,openai,crewai,langchain,langflow,anthropic,vercel,llamaindex,langgraph,autogen)', 'cursor')
-    .option('-o, --output <path>', 'Output file path')
-    .option('--all', 'Export to all supported platforms')
-    .description('Export OSSA agent manifest to platform-specific format')
-    .action(async (manifestPath, options) => {
+    .description('Export OSSA manifest to platform-specific format')
+    .argument('<manifest>', 'Path to OSSA agent manifest')
+    .requiredOption('-p, --platform <platform>', 'Target platform (kagent, langchain, crewai, temporal, n8n, gitlab, docker, kubernetes, npm)')
+    .option('-o, --output <file>', 'Output file path')
+    .option('--format <format>', 'Output format (yaml, json, python)', 'yaml')
+    .option('--skill', 'Include Claude Skill (SKILL.md) - NPM platform only');
+// Add production-grade standard options
+addGlobalOptions(exportCommand);
+addMutationOptions(exportCommand);
+exportCommand.action(async (manifestPath, options) => {
+    const useColor = shouldUseColor(options);
     try {
+        // Logging helpers
+        const log = (msg) => {
+            if (options.quiet)
+                return;
+            console.log(useColor ? chalk.blue(msg) : msg);
+        };
+        const logVerbose = (msg) => {
+            if (!options.verbose || options.quiet)
+                return;
+            console.log(useColor ? chalk.gray(msg) : msg);
+        };
+        const logSuccess = (msg) => {
+            if (options.quiet)
+                return;
+            console.log(useColor ? chalk.green(msg) : msg);
+        };
+        // Dry-run mode
+        if (options.dryRun) {
+            log('🔍 DRY RUN MODE - No files will be written');
+        }
+        log(`Exporting agent: ${manifestPath}`);
+        log(`Platform: ${options.platform}`);
+        log(`Format: ${options.format}\n`);
+        logVerbose(`Verbose mode enabled`);
+        logVerbose(`Color: ${useColor ? 'enabled' : 'disabled'}`);
+        // Load manifest
         const manifestRepo = container.get(ManifestRepository);
-        const generationService = container.get(GenerationService);
         const manifest = await manifestRepo.load(manifestPath);
-        const platforms = options?.all
-            ? [
-                'cursor',
-                'openai',
-                'crewai',
-                'langchain',
-                'langflow',
-                'anthropic',
-                'vercel',
-                'llamaindex',
-                'langgraph',
-                'autogen',
-            ]
-            : [options?.to || 'cursor'];
-        console.log(chalk.blue(`Exporting agent to: ${platforms.join(', ')}`));
-        for (const platform of platforms) {
-            try {
-                const exported = await generationService.exportToPlatform(manifest, platform);
-                const outputPath = options?.output || `${platform}-agent.json`;
-                const finalPath = platforms.length > 1 ? `${platform}-${outputPath}` : outputPath;
-                fs.writeFileSync(finalPath, JSON.stringify(exported, null, 2));
-                console.log(chalk.green(`✓ Exported to ${platform}: ${finalPath}`));
-            }
-            catch (error) {
-                console.error(chalk.red(`✗ Failed to export to ${platform}:`), error instanceof Error ? error.message : String(error));
+        let output;
+        let defaultExtension;
+        switch (options.platform) {
+            case 'kagent': {
+                const generator = new KAgentCRDGenerator();
+                const crd = generator.generate(manifest);
+                output =
+                    options.format === 'json'
+                        ? JSON.stringify(crd, null, 2)
+                        : JSON.stringify(crd, null, 2);
+                defaultExtension = 'yaml';
+                break;
+            }
+            case 'langchain': {
+                const converter = new LangChainConverter();
+                if (options.format === 'python') {
+                    output = converter.generatePythonCode(manifest);
+                    defaultExtension = 'py';
+                }
+                else {
+                    const config = converter.convert(manifest);
+                    output = JSON.stringify(config, null, 2);
+                    defaultExtension = 'json';
+                }
+                break;
+            }
+            case 'crewai': {
+                const converter = new CrewAIConverter();
+                if (options.format === 'python') {
+                    output = converter.generatePythonCode(manifest);
+                    defaultExtension = 'py';
+                }
+                else {
+                    const config = converter.convert(manifest);
+                    output = JSON.stringify(config, null, 2);
+                    defaultExtension = 'json';
+                }
+                break;
+            }
+            case 'temporal': {
+                const converter = new TemporalConverter();
+                const workflow = { ...manifest };
+                if (options.format === 'typescript') {
+                    output = converter.generateTypeScriptCode(workflow);
+                    defaultExtension = 'ts';
+                }
+                else {
+                    const config = converter.convert(workflow);
+                    output = JSON.stringify(config, null, 2);
+                    defaultExtension = 'json';
+                }
+                break;
+            }
+            case 'n8n': {
+                const converter = new N8NConverter();
+                const workflow = { ...manifest };
+                output = converter.generateJSON(workflow);
+                defaultExtension = 'json';
+                break;
+            }
+            case 'gitlab': {
+                const converter = new GitLabConverter();
+                output = converter.generateYAML(manifest);
+                defaultExtension = 'yml';
+                break;
+            }
+            case 'docker': {
+                const generator = new DockerfileGenerator();
+                output = generator.generate(manifest);
+                defaultExtension = 'Dockerfile';
+                break;
             }
+            case 'kubernetes': {
+                const generator = new KubernetesManifestGenerator();
+                const manifests = generator.generateAll(manifest);
+                output = JSON.stringify(manifests, null, 2);
+                defaultExtension = 'json';
+                break;
+            }
+            case 'npm': {
+                // Use registry adapter for npm export
+                const adapter = registry.getAdapter('npm');
+                if (!adapter) {
+                    throw new Error('NPM adapter not registered');
+                }
+                const result = await adapter.export(manifest, {
+                    validate: true,
+                    outputDir: path.dirname(options.output || './npm-package'),
+                    includeSkill: options.skill || false,
+                });
+                if (!result.success) {
+                    throw new Error(result.error || 'NPM export failed');
+                }
+                // Create output directory
+                const outputDir = options.output || `./npm-${manifest.metadata?.name || 'agent'}`;
+                fs.mkdirSync(outputDir, { recursive: true });
+                // Write all generated files
+                for (const file of result.files) {
+                    const filePath = path.join(outputDir, file.path);
+                    const fileDir = path.dirname(filePath);
+                    fs.mkdirSync(fileDir, { recursive: true });
+                    fs.writeFileSync(filePath, file.content);
+                }
+                console.log(chalk.green(`✓ NPM package exported to: ${outputDir}`));
+                console.log(chalk.gray(`  Files: ${result.files.map(f => f.path).join(', ')}`));
+                if (options.skill) {
+                    console.log(chalk.green(`✓ Claude Skill included: SKILL.md`));
+                }
+                return; // Early return to skip single-file write
+            }
+            default:
+                throw new Error(`Unsupported platform: ${options.platform}`);
+        }
+        // Determine output file
+        const outputFile = options.output ||
+            `${manifest.metadata?.name || 'agent'}.${defaultExtension}`;
+        const outputPath = path.resolve(outputFile);
+        // Backup existing file if requested
+        if (!options.dryRun && options.backup && fs.existsSync(outputPath)) {
+            const backupDir = options.backupDir || './backups';
+            fs.mkdirSync(backupDir, { recursive: true });
+            const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+            const backupPath = path.join(backupDir, `${path.basename(outputFile)}.${timestamp}.bak`);
+            fs.copyFileSync(outputPath, backupPath);
+            logVerbose(`Backup created: ${backupPath}`);
+        }
+        // Write output (or simulate if dry-run)
+        if (options.dryRun) {
+            log(`\n📄 Would write to: ${outputPath}`);
+            logVerbose(`Output size: ${output.length} bytes`);
+            if (options.verbose) {
+                log('\n--- Preview (first 500 chars) ---');
+                console.log(output.substring(0, 500));
+                if (output.length > 500) {
+                    console.log('...');
+                }
+                log('--- End Preview ---\n');
+            }
+        }
+        else {
+            fs.writeFileSync(outputPath, output);
+            logSuccess(`✓ Exported to: ${outputPath}`);
+            logVerbose(`Output size: ${output.length} bytes`);
+        }
+        // JSON output for automation
+        if (options.json) {
+            const result = {
+                success: true,
+                manifest: manifestPath,
+                platform: options.platform,
+                output: outputPath,
+                dryRun: options.dryRun || false,
+                size: output.length,
+            };
+            console.log(JSON.stringify(result, null, 2));
         }
-        process.exit(0);
     }
     catch (error) {
-        handleCommandError(error);
+        console.error(chalk.red(`Export failed: ${error instanceof Error ? error.message : String(error)}`));
+        process.exit(1);
     }
 });
 //# sourceMappingURL=export.command.js.map

package/dist/cli/commands/export.command.js.map

@@ -1 +1 @@
-{"version":3,"file":"export.command.js","sourceRoot":"","sources":["../../../src/cli/commands/export.command.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC/C,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC3C,MAAM,CACL,qBAAqB,EACrB,yGAAyG,EACzG,QAAQ,CACT;KACA,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,OAAO,EAAE,mCAAmC,CAAC;KACpD,WAAW,CAAC,wDAAwD,CAAC;KACrE,MAAM,CACL,KAAK,EACH,YAAoB,EACpB,OAAyD,EACzD,EAAE;IACF,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,EAAE,GAAG;YAC5B,CAAC,CAAC;gBACE,QAAQ;gBACR,QAAQ;gBACR,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,YAAY;gBACZ,WAAW;gBACX,SAAS;aACV;YACH,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,QAAQ,CAAC,CAAC;QAE9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEvE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CACvD,QAAQ,EACR,QAUe,CAChB,CAAC;gBACF,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,IAAI,GAAG,QAAQ,aAAa,CAAC;gBAC/D,MAAM,SAAS,GACb,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBAElE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,QAAQ,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,yBAAyB,QAAQ,GAAG,CAAC,EAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CACF,CAAC"}
+{"version":3,"file":"export.command.js","sourceRoot":"","sources":["../../../src/cli/commands/export.command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAExE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAElB,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,kDAAkD,CAAC;KAC/D,QAAQ,CAAC,YAAY,EAAE,6BAA6B,CAAC;KACrD,cAAc,CACb,2BAA2B,EAC3B,6FAA6F,CAC9F;KACA,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,EAAE,MAAM,CAAC;KACzE,MAAM,CAAC,SAAS,EAAE,qDAAqD,CAAC,CAAC;AAE5E,wCAAwC;AACxC,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAChC,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAElC,aAAa,CAAC,MAAM,CAClB,KAAK,EACH,YAAoB,EACpB,OAaC,EACD,EAAE;IACF,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,kBAAkB;QAClB,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE;YAC1B,IAAI,OAAO,CAAC,KAAK;gBAAE,OAAO;YAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,EAAE;YACjC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK;gBAAE,OAAO;YAC9C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,EAAE;YACjC,IAAI,OAAO,CAAC,KAAK;gBAAE,OAAO;YAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,eAAe;QACf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,GAAG,CAAC,4CAA4C,CAAC,CAAC;QACpD,CAAC;QAED,GAAG,CAAC,oBAAoB,YAAY,EAAE,CAAC,CAAC;QACxC,GAAG,CAAC,aAAa,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrC,GAAG,CAAC,WAAW,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAEnC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACnC,UAAU,CAAC,UAAU,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAE1D,gBAAgB;QAChB,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEvD,IAAI,MAAc,CAAC;QACnB,IAAI,gBAAwB,CAAC;QAE7B,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACzC,MAAM;oBACJ,OAAO,CAAC,MAAM,KAAK,MAAM;wBACvB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACnC,gBAAgB,GAAG,MAAM,CAAC;gBAC1B,MAAM;YACR,CAAC;YAED,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,GAAG,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAChD,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACzC,gBAAgB,GAAG,MAAM,CAAC;gBAC5B,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,GAAG,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAChD,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACzC,gBAAgB,GAAG,MAAM,CAAC;gBAC5B,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAS,CAAC;gBACxC,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBACpC,MAAM,GAAG,SAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;oBACpD,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACzC,gBAAgB,GAAG,MAAM,CAAC;gBAC5B,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,MAAM,SAAS,GAAG,IAAI,YAAY,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAS,CAAC;gBACxC,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,gBAAgB,GAAG,MAAM,CAAC;gBAC1B,MAAM;YACR,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,gBAAgB,GAAG,KAAK,CAAC;gBACzB,MAAM;YACR,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBAC5C,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACtC,gBAAgB,GAAG,YAAY,CAAC;gBAChC,MAAM;YACR,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,SAAS,GAAG,IAAI,2BAA2B,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAClD,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5C,gBAAgB,GAAG,MAAM,CAAC;gBAC1B,MAAM;YACR,CAAC;YAED,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,sCAAsC;gBACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAC5C,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;oBAC1D,YAAY,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;iBACrC,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;gBACvD,CAAC;gBAED,0BAA0B;gBAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC;gBAClF,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE7C,4BAA4B;gBAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,CAAC,yCAAyC;YACnD,CAAC;YAED;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GACd,OAAO,CAAC,MAAM;YACd,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,OAAO,IAAI,gBAAgB,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,oCAAoC;QACpC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC;YACnD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,SAAS,EACT,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,SAAS,MAAM,CAChD,CAAC;YACF,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACxC,UAAU,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,GAAG,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;YAC1C,UAAU,CAAC,gBAAgB,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC;YAClD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,GAAG,CAAC,qCAAqC,CAAC,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;gBACD,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrC,UAAU,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;YAC3C,UAAU,CAAC,gBAAgB,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,6BAA6B;QAC7B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG;gBACb,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;gBAC/B,IAAI,EAAE,MAAM,CAAC,MAAM;aACpB,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3E,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/cli/commands/generate/conformance.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const generateConformanceCommand: Command;
+//# sourceMappingURL=conformance.d.ts.map

package/dist/cli/commands/generate/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/generate/conformance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,eAAO,MAAM,0BAA0B,SAuGnC,CAAC"}

package/dist/cli/commands/generate/conformance.js

@@ -0,0 +1,106 @@
+import { Command } from 'commander';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const PROJECT_ROOT = path.resolve(__dirname, '../../../'); // Path to the project root
+// Helper to load schema
+async function loadSchema(schemaFileName) {
+    const schemaPath = path.join(PROJECT_ROOT, 'schemas', schemaFileName);
+    const schemaContent = await fs.readFile(schemaPath, 'utf-8');
+    return JSON.parse(schemaContent);
+}
+export const generateConformanceCommand = new Command('conformance')
+    .description('Generates a conformance test skeleton for a given capability ID.')
+    .argument('<capabilityId>', 'The ID of the capability to generate tests for.')
+    .option('-o, --output-dir <dir>', 'Directory to save the generated test file.', 'tests/conformance')
+    .action(async (capabilityId, options) => {
+    // --- 1. Load Capability Contract (Placeholder) ---
+    const capabilityContract = {
+        id: capabilityId,
+        version: '0.1.0', // Placeholder version
+        description: `Conformance contract for ${capabilityId}`,
+        inputSchema: { type: 'object', properties: {} }, // Placeholder schema
+        outputSchema: { type: 'object', properties: {} }, // Placeholder schema
+        authRequirements: { type: 'apiKey', scopes: ['read'] }, // Placeholder auth
+        idempotencySemantics: 'idempotent',
+        slo: { maxLatencySeconds: 1000, maxErrorRate: 0.01 },
+        telemetryRequirements: {
+            metrics: ['invocations'],
+            logs: ['details'],
+            trace: true,
+        },
+    };
+    const testFileName = `${capabilityId}.test.ts`;
+    const outputPath = path.resolve(process.cwd(), options.outputDir);
+    const testFilePath = path.join(outputPath, testFileName);
+    // --- 2. Generate Test Skeleton Content ---
+    const toolName = capabilityId;
+    const testContent = `
+import { test, expect } from '@jest/globals';
+// Assuming CapabilityContract type and validation utilities are available
+import { CapabilityContract } from '../../src/types'; 
+// import { validateOutputSchema } from '../../src/utils/validation'; 
+
+// --- Mock Execution Environment ---
+const executeCapability = async (capabilityId: string, input: Record<string, unknown>): Promise<unknown> => {
+  return { success: true, data: 'mock_result' }; 
+};
+
+// --- Capability Contract Definition ---
+const capabilityContract: CapabilityContract = ${JSON.stringify(capabilityContract, null, 2)};
+
+describe('Conformance Tests for Capability: ${toolName}', () => {
+
+  // Test Case 1: Basic Execution with valid input
+  test('should execute ${toolName} successfully with valid input', async () => {
+    const validTestInput = { exampleParam: 'test_value' }; 
+    
+    const result = await executeCapability(capabilityContract.id, validTestInput);
+    
+    expect(result).toBeDefined(); 
+  });
+
+  // Test Case 2: Schema Validation for Input
+  test('should fail if input schema is invalid', async () => {
+    const invalidInput = { invalidField: 'some_value' }; 
+    await expect(executeCapability(capabilityContract.id, invalidInput)).rejects.toThrow(); 
+  });
+
+  // Test Case 3: Idempotency check (if applicable)
+  test('should be idempotent if specified', async () => {
+    if (capabilityContract.idempotencySemantics !== 'idempotent') {
+      return; 
+    }
+    
+    const inputData = { /* input */ }; 
+    const firstResult = await executeCapability(capabilityContract.id, inputData);
+    const secondResult = await executeCapability(capabilityContract.id, inputData);
+    
+    expect(secondResult).toEqual(firstResult); 
+  });
+
+  // Test Case 4: SLO - Latency
+  test('should meet latency SLO', async () => {
+    const startTime = Date.now();
+    await executeCapability(capabilityContract.id, { /* minimal input */ }); 
+    const endTime = Date.now();
+    const latency = endTime - startTime;
+    
+    const maxLatency = capabilityContract.slo?.maxLatencySeconds ? capabilityContract.slo.maxLatencySeconds * 1000 : 2000; 
+    expect(latency).toBeLessThan(maxLatency);
+  });
+
+  // Test Case 5: Telemetry Emission
+  test('should emit required telemetry metrics', async () => {
+    await executeCapability(capabilityContract.id, { /* input */ });
+  });
+
+});
+`;
+    await fs.mkdir(outputPath, { recursive: true });
+    await fs.writeFile(testFilePath, testContent);
+    console.log(`Generated conformance test skeleton for capability '${capabilityId}' at ${testFilePath}`);
+});
+//# sourceMappingURL=conformance.js.map

package/dist/cli/commands/generate/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../../src/cli/commands/generate/conformance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,2BAA2B;AAEtF,wBAAwB;AACxB,KAAK,UAAU,UAAU,CAAC,cAAsB;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC;KACjE,WAAW,CACV,kEAAkE,CACnE;KACA,QAAQ,CAAC,gBAAgB,EAAE,iDAAiD,CAAC;KAC7E,MAAM,CACL,wBAAwB,EACxB,4CAA4C,EAC5C,mBAAmB,CACpB;KACA,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,OAAO,EAAE,EAAE;IAC9C,oDAAoD;IACpD,MAAM,kBAAkB,GAAG;QACzB,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,OAAO,EAAE,sBAAsB;QACxC,WAAW,EAAE,4BAA4B,YAAY,EAAE;QACvD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,qBAAqB;QACtE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,qBAAqB;QACvE,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB;QAC3E,oBAAoB,EAAE,YAA+C;QACrE,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;QACpD,qBAAqB,EAAE;YACrB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,KAAK,EAAE,IAAI;SACZ;KACF,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,YAAY,UAAU,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEzD,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC;IAE9B,MAAM,WAAW,GAAG;;;;;;;;;;;;iDAYyB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;;8CAE9C,QAAQ;;;yBAG7B,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4ChC,CAAC;IAEE,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,uDAAuD,YAAY,QAAQ,YAAY,EAAE,CAC1F,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/cli/commands/identity/plan.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const planIdentityCommand: Command;
+//# sourceMappingURL=plan.d.ts.map

package/dist/cli/commands/identity/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/identity/plan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,eAAO,MAAM,mBAAmB,SAkM5B,CAAC"}

package/dist/cli/commands/identity/plan.js

@@ -0,0 +1,200 @@
+// @ts-nocheck
+import { Command } from 'commander';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import Ajv from 'ajv';
+import addFormats from 'ajv-formats';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const PROJECT_ROOT = path.resolve(__dirname, '../../../'); // Path to the project root
+// Helper function to load manifest (supports JSON and YAML)
+async function loadManifest(filePath) {
+    const fullPath = path.resolve(process.cwd(), filePath);
+    const content = await fs.readFile(fullPath, 'utf-8');
+    if (filePath.endsWith('.yaml') || filePath.endsWith('.yml')) {
+        try {
+            // Use dynamic import for YAML parsing if available, or fallback
+            const YAML = await import('yaml');
+            return YAML.parse(content);
+        }
+        catch (e) {
+            console.error("YAML parsing library 'yaml' not found. Please install it: npm install yaml");
+            throw e;
+        }
+    }
+    else {
+        return JSON.parse(content);
+    }
+}
+export const planIdentityCommand = new Command('identity')
+    .description('Generates an identity plan for an agent based on its manifest and configuration.')
+    .argument('<agent-manifest>', 'Path to the agent manifest file (e.g., agent.yaml, ossa.yaml, or package.json).')
+    .option('-o, --output <file>', 'Path to save the identity plan JSON file.', 'identity.plan.json')
+    .action(async (agentManifestPath, options) => {
+    console.log(`Planning identity for agent manifest: ${agentManifestPath}`);
+    // --- 1. Load Agent Manifest ---
+    let agentManifest;
+    try {
+        agentManifest = await loadManifest(agentManifestPath);
+        console.log('Agent manifest loaded.');
+    }
+    catch (error) {
+        console.error(`Error loading agent manifest ${agentManifestPath}: ${error.message}`);
+        process.exit(1);
+    }
+    // --- 2. Deterministically Derive Requirements ---
+    // This is the core logic: derive requirements from explicit declarations in the manifest,
+    // adapter configurations, and runtime profiles. It should NOT use LLM inference for core permissions.
+    const derivedPlan = {
+        agentName: agentManifest.metadata?.name ||
+            agentManifest.agent?.name ||
+            path.basename(agentManifestPath, path.extname(agentManifestPath)),
+        identityConfig: {
+            principal: {
+                category: 'service', // Default or derived from manifest/adapters
+                mode: 'service_account', // Default or derived
+                provider: 'unknown', // To be determined from adapters
+                region: 'us-east-1', // Default or derived
+                roleName: `${agentManifest.metadata?.name || agentManifest.agent?.name}-role`, // Example derivation
+                scopes: [], // To be derived
+                oidc: undefined, // To be derived if applicable
+            },
+            requiredPermissions: [], // Abstract permissions derived from tools/capabilities
+            credentialSource: {
+                type: 'env', // Default or derived from runtime profile/adapter config
+                ref: `${agentManifest.metadata?.name?.toUpperCase() || agentManifest.agent?.name?.toUpperCase()}_API_KEY`, // Example derivation
+            },
+        },
+        provisioningDetails: {}, // Provider-specific details for creation
+        rotationPolicy: {
+            maxAge: '90d', // Default or derived from policy
+            frequency: '30d', // Default or derived from policy
+        },
+    };
+    const provisioningDetails = derivedPlan.provisioningDetails;
+    // --- Example Derivation Logic ---
+    // This logic is simplified. A full implementation would involve:
+    // 1. Reading adapter configurations to understand provider capabilities and permission mappings.
+    // 2. Parsing OpenAPI specs linked to capabilities for security schemes and scopes.
+    // 3. Consulting runtime profiles for constraints on identity primitives.
+    // 4. Mapping abstract permissions to provider-specific scopes/roles.
+    // Infer principal provider and details from the first adapter declared in spec.adapters
+    if (agentManifest.spec?.adapters &&
+        agentManifest.spec.adapters.length > 0) {
+        const firstAdapter = agentManifest.spec.adapters[0];
+        const providerType = firstAdapter.type; // e.g., "scm.gitlab", "runtime.k8s"
+        const providerName = providerType.split('.')[0]; // e.g., "gitlab"
+        derivedPlan.identityConfig.principal.provider = providerName;
+        derivedPlan.identityConfig.principal.region =
+            firstAdapter.config?.region || 'us-east-1';
+        derivedPlan.identityConfig.principal.roleName =
+            firstAdapter.config?.roleName ||
+                `${derivedPlan.agentName}-${providerName}-role`;
+        derivedPlan.identityConfig.principal.scopes = firstAdapter.config
+            ?.scopes || ['default:read']; // Default scopes
+        derivedPlan.identityConfig.credentialSource.ref =
+            firstAdapter.config?.credentialRef ||
+                `${derivedPlan.agentName.toUpperCase()}_${providerName.toUpperCase()}_SECRET`;
+        if (firstAdapter.config?.oidc) {
+            derivedPlan.identityConfig.principal.oidc = firstAdapter.config.oidc;
+        }
+        // Populate provider-specific provisioning details
+        if (providerName === 'gitlab') {
+            provisioningDetails.gitlab = {
+                serviceAccount: {
+                    name: firstAdapter.config?.serviceAccountName ||
+                        `${derivedPlan.agentName}-gitlab-sa`,
+                    scopes: firstAdapter.config?.scopes || ['api', 'read_repository'],
+                },
+            };
+        }
+        else if (providerName === 'github') {
+            provisioningDetails.github = {
+                appPermissions: firstAdapter.config?.appPermissions || {
+                    metadata: 'read-only',
+                    contents: 'read-only',
+                    pull_requests: 'write',
+                },
+            };
+        }
+        // Add other providers like 'aws', 'azure', etc.
+    }
+    else if (agentManifest.agent?.runtime?.type) {
+        // Fallback for legacy agent format if no adapters specified
+        const runtimeProvider = agentManifest.agent.runtime.type.split('.')[0]; // e.g. 'docker'
+        derivedPlan.identityConfig.principal.provider = runtimeProvider;
+        derivedPlan.identityConfig.principal.roleName = `${derivedPlan.agentName}-${runtimeProvider}-runtime-role`;
+        // Add more fallback logic as needed for legacy formats
+    }
+    // Infer abstract permissions from declared tools and capabilities
+    const declaredPermissions = new Set();
+    if (agentManifest.spec?.tools) {
+        agentManifest.spec.tools.forEach((tool) => {
+            // Example: Map tool types/names to abstract permissions
+            if (tool.type === 'mcp')
+                declaredPermissions.add('tool:mcp');
+            if (tool.name === 'search')
+                declaredPermissions.add('read:search-data');
+            if (tool.capabilityId)
+                declaredPermissions.add(`capability:${tool.capabilityId}`);
+            // Add more mappings based on tool names/types
+        });
+    }
+    // Also consider capabilities directly declared if not linked via tools
+    if (agentManifest.spec?.capabilities) {
+        agentManifest.spec.capabilities.forEach((cap) => {
+            if (cap.id)
+                declaredPermissions.add(`capability:${cap.id}`);
+            // Add mappings for other capability fields if needed
+        });
+    }
+    derivedPlan.identityConfig.requiredPermissions =
+        Array.from(declaredPermissions);
+    // Ensure requiredPermissions has at least a default if empty
+    if (derivedPlan.identityConfig.requiredPermissions.length === 0) {
+        derivedPlan.identityConfig.requiredPermissions.push('default:execute');
+    }
+    // --- 3. Validate the generated plan against its schema ---
+    // @ts-expect-error - Ajv v8 API compatibility
+    const ajv = new Ajv({ allErrors: true });
+    addFormats(ajv); // Add common formats like date-time, uri, email
+    let planSchema;
+    try {
+        const schemaPath = path.join(PROJECT_ROOT, 'schemas', 'identity.plan.schema.json');
+        const schemaContent = await fs.readFile(schemaPath, 'utf-8');
+        planSchema = JSON.parse(schemaContent);
+        console.log('Identity plan schema loaded successfully.');
+    }
+    catch (error) {
+        console.error(`Error loading identity plan schema from ${PROJECT_ROOT}/schemas/identity.plan.schema.json: ${error.message}`);
+        process.exit(1);
+    }
+    const validate = ajv.compile(planSchema);
+    const isValid = validate(derivedPlan);
+    if (!isValid) {
+        console.error('Generated identity plan is invalid against its schema.');
+        logAjvErrors(validate.errors);
+        process.exit(1);
+    }
+    console.log('Generated identity plan is valid.');
+    // --- 4. Output the plan ---
+    try {
+        const outputPath = path.resolve(process.cwd(), options.output);
+        await fs.writeFile(outputPath, JSON.stringify(derivedPlan, null, 2));
+        console.log(`Identity plan saved to: ${outputPath}`);
+    }
+    catch (error) {
+        console.error(`Error saving identity plan to ${options.output}: ${error.message}`);
+        process.exit(1);
+    }
+});
+// Helper function to log Ajv errors more readably
+function logAjvErrors(errors) {
+    if (!errors)
+        return;
+    errors.forEach((err) => {
+        console.error(`- ${err.instancePath || 'Root'}: ${err.message} (${err.keyword})`);
+    });
+}
+//# sourceMappingURL=plan.js.map