@bluefly/openstandardagents 0.4.4 → 0.4.5

package/dist/services/governance/governance-generator.service.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Governance Generator Service
+ *
+ * Generates governance artifacts from an OSSA agent manifest.
+ * Extracts from `extensions.governance`, `spec.autonomy`, and `spec.constraints`
+ * to produce a complete governance directory structure:
+ *
+ *   governance/compliance.yaml         -- Compliance framework declarations
+ *   governance/policies/autonomy.yaml  -- Autonomy boundaries
+ *   governance/policies/constraints.yaml -- Cost/performance/resource limits
+ *   governance/policies/team-permissions.yaml -- Per-member permissions (when team exists)
+ *   governance/audit.yaml              -- Audit trail configuration
+ *
+ * Design: generates meaningful defaults when governance data is sparse so that
+ * every exported agent ships with sensible governance out of the box.
+ */
+import type { OssaAgent } from '../../types/index.js';
+import type { ExportFile } from '../../adapters/base/adapter.interface.js';
+export declare class GovernanceGeneratorService {
+    /**
+     * Generate all governance artifacts from an OSSA manifest.
+     * Returns an array of ExportFile entries ready for writing.
+     */
+    generate(manifest: OssaAgent): ExportFile[];
+    /**
+     * Resolve governance extension from both spec-level and top-level extensions.
+     * Spec-level takes precedence. Returns a normalised structure.
+     */
+    private resolveGovernanceExtension;
+    private resolveAutonomy;
+    private resolveConstraints;
+    /**
+     * Extract team members from multiple possible locations:
+     *   spec.team.members, spec.team.agents, spec.team.participants
+     */
+    private resolveTeamMembers;
+    /**
+     * Generate governance/compliance.yaml with framework-specific requirements.
+     */
+    private generateComplianceFile;
+    /**
+     * Generate governance/policies/autonomy.yaml with clear boundaries.
+     */
+    private generateAutonomyPolicy;
+    /**
+     * Generate governance/policies/constraints.yaml with budget, performance, and resource limits.
+     */
+    private generateConstraintsPolicy;
+    /**
+     * Generate governance/policies/team-permissions.yaml with per-member permissions.
+     * Permission scoping is based on agent kind:
+     *   - team-lead / orchestrator -> broad permissions
+     *   - teammate / worker        -> scoped to assigned role
+     *   - subagent                 -> restricted to specific tasks
+     */
+    private generateTeamPermissions;
+    /**
+     * Generate governance/audit.yaml with retention, format, and event configuration.
+     */
+    private generateAuditConfig;
+    /**
+     * Infer data classification from compliance frameworks.
+     * Stricter frameworks imply higher classification.
+     */
+    private inferDataClassification;
+    /**
+     * Infer clearance level from agent kind.
+     * More powerful agent kinds get higher default clearance.
+     */
+    private inferClearanceLevel;
+    /**
+     * Infer autonomy level from agent kind.
+     */
+    private inferAutonomyLevel;
+    /**
+     * Default allowed actions based on agent kind.
+     */
+    private defaultAllowedActions;
+    /**
+     * Default blocked actions based on agent kind.
+     */
+    private defaultBlockedActions;
+    /**
+     * Build escalation policy based on autonomy level.
+     */
+    private buildEscalationPolicy;
+    /**
+     * Infer agent kind from a role description string.
+     */
+    private inferKindFromRole;
+    /**
+     * Compute member permissions tier based on kind and base clearance.
+     */
+    private computeMemberTier;
+    /**
+     * Derive coordination model from architecture pattern.
+     */
+    private inferCoordinationModel;
+    /**
+     * Compute audit retention days from the strictest framework requirement.
+     *
+     * HIPAA:  6 years (2190 days)
+     * FedRAMP: 3 years (1095 days)
+     * PCI-DSS: 1 year (365 days)
+     * SOC2:   1 year (365 days)
+     * GDPR:   context-dependent, default 365 days
+     * Default: 90 days
+     */
+    private computeRetentionDays;
+    /**
+     * Halve a Kubernetes-style resource string for request values.
+     * Examples: "1000m" -> "500m", "2Gi" -> "1Gi", "512Mi" -> "256Mi"
+     */
+    private halveResource;
+    /**
+     * Serialise a document to YAML with consistent formatting.
+     */
+    private toYaml;
+}
+//# sourceMappingURL=governance-generator.service.d.ts.map

package/dist/services/governance/governance-generator.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-generator.service.d.ts","sourceRoot":"","sources":["../../../src/services/governance/governance-generator.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAoO3E,qBAAa,0BAA0B;IACrC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,UAAU,EAAE;IAmC3C;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAclC,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,kBAAkB;IAI1B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAkI9B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA8E9B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA4DjC;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAoE/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAqG3B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAQ/B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAmB7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgD7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAiBzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwIzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAsB5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IASrB;;OAEG;IACH,OAAO,CAAC,MAAM;CASf"}