@claude-flow/cli 3.32.26 → 3.32.30

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/audit-service.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GAAG,yBAAyB,GAC7C,qBAAqB,GAAG,qBAAqB,GAC7C,kBAAkB,GAAG,oBAAoB,GACzC,iBAAiB,GAAG,iBAAiB,GACrC,iBAAiB,GAAG,oBAAoB,GACxC,cAAc,GAAG,kBAAkB,GACnC,kBAAkB,GAAG,iBAAiB,GACtC,cAAc,GAAG,cAAc,GAAG,aAAa,GAC/C,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GACvD,eAAe,GAAG,cAAc,GAAG,qBAAqB,GACxD,oBAAoB,GAAG,iBAAiB,GACxC,mBAAmB,GAAG,kBAAkB,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,CAAC;AAErG,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAE7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,WAAW,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACpE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAoED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;gBAEpC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAMlE,GAAG,CACP,SAAS,EAAE,wBAAwB,EACnC,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,gBAAgB,CAAC,CAAM,GAC/I,OAAO,CAAC,oBAAoB,CAAC;IAa1B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAKzD,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAarE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,aAAa,IAAI,MAAM;IAIvB,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,KAAK;CAmBd"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.js

@@ -0,0 +1,149 @@
+const DEFAULT_AUDIT_CONFIG = {
+    complianceMode: 'none',
+    retentionDays: 90,
+    batchSize: 100,
+};
+const SEVERITY_BY_EVENT_TYPE = {
+    peer_discovered: 'info',
+    peer_manifest_published: 'info',
+    handshake_initiated: 'info',
+    handshake_completed: 'info',
+    handshake_failed: 'warn',
+    handshake_rejected: 'warn',
+    session_created: 'info',
+    session_renewed: 'info',
+    session_expired: 'info',
+    session_terminated: 'info',
+    message_sent: 'info',
+    message_received: 'info',
+    message_rejected: 'warn',
+    message_timeout: 'warn',
+    pii_detected: 'warn',
+    pii_stripped: 'info',
+    pii_blocked: 'warn',
+    threat_detected: 'error',
+    threat_blocked: 'critical',
+    threat_learned: 'info',
+    claim_checked: 'info',
+    claim_denied: 'warn',
+    trust_level_changed: 'warn',
+    consensus_proposed: 'info',
+    consensus_voted: 'info',
+    consensus_reached: 'info',
+    consensus_failed: 'warn',
+};
+const CATEGORY_BY_EVENT_TYPE = {
+    peer_discovered: 'discovery',
+    peer_manifest_published: 'discovery',
+    handshake_initiated: 'handshake',
+    handshake_completed: 'handshake',
+    handshake_failed: 'handshake',
+    handshake_rejected: 'handshake',
+    session_created: 'handshake',
+    session_renewed: 'handshake',
+    session_expired: 'handshake',
+    session_terminated: 'handshake',
+    message_sent: 'message',
+    message_received: 'message',
+    message_rejected: 'message',
+    message_timeout: 'message',
+    pii_detected: 'pii',
+    pii_stripped: 'pii',
+    pii_blocked: 'pii',
+    threat_detected: 'security',
+    threat_blocked: 'security',
+    threat_learned: 'security',
+    claim_checked: 'security',
+    claim_denied: 'security',
+    trust_level_changed: 'security',
+    consensus_proposed: 'consensus',
+    consensus_voted: 'consensus',
+    consensus_reached: 'consensus',
+    consensus_failed: 'consensus',
+};
+export class AuditService {
+    deps;
+    config;
+    buffer;
+    constructor(deps, config) {
+        this.deps = deps;
+        this.config = { ...DEFAULT_AUDIT_CONFIG, ...config };
+        this.buffer = [];
+    }
+    async log(eventType, details = {}) {
+        const event = this.buildEvent(eventType, details);
+        this.buffer.push(event);
+        this.deps.onAuditEvent?.(event);
+        if (this.buffer.length >= this.config.batchSize || event.severity === 'critical') {
+            await this.flush();
+        }
+        return event;
+    }
+    async query(query) {
+        await this.flush();
+        return this.deps.queryEvents(query);
+    }
+    async export(query, format) {
+        const events = await this.query(query);
+        switch (format) {
+            case 'json':
+                return JSON.stringify(events, null, 2);
+            case 'ndjson':
+                return events.map(e => JSON.stringify(e)).join('\n');
+            case 'csv':
+                return this.toCsv(events);
+        }
+    }
+    async flush() {
+        const eventsToFlush = this.buffer.splice(0, this.buffer.length);
+        for (const event of eventsToFlush) {
+            await this.deps.persistEvent(event);
+        }
+    }
+    getBufferSize() {
+        return this.buffer.length;
+    }
+    buildEvent(eventType, details) {
+        const event = {
+            eventId: this.deps.generateEventId(),
+            timestamp: new Date().toISOString(),
+            nodeId: this.deps.getLocalNodeId(),
+            eventType,
+            severity: SEVERITY_BY_EVENT_TYPE[eventType],
+            category: CATEGORY_BY_EVENT_TYPE[eventType],
+            complianceMode: this.config.complianceMode,
+            dataResidency: this.config.dataResidency,
+            ...details,
+        };
+        if (this.config.complianceMode === 'hipaa') {
+            return this.applyHipaaCompliance(event);
+        }
+        return event;
+    }
+    applyHipaaCompliance(event) {
+        if (event.piiDetected && event.metadata) {
+            const sanitizedMetadata = { ...event.metadata };
+            delete sanitizedMetadata['rawContent'];
+            delete sanitizedMetadata['originalValue'];
+            return { ...event, metadata: sanitizedMetadata };
+        }
+        return event;
+    }
+    toCsv(events) {
+        if (events.length === 0)
+            return '';
+        const headers = [
+            'eventId', 'timestamp', 'nodeId', 'eventType', 'severity',
+            'category', 'sourceNodeId', 'targetNodeId', 'sessionId',
+            'trustLevel', 'piiDetected', 'threatDetected', 'latencyMs',
+        ];
+        const rows = events.map(e => headers.map(h => {
+            const val = e[h];
+            if (val === undefined || val === null)
+                return '';
+            return String(val);
+        }).join(','));
+        return [headers.join(','), ...rows].join('\n');
+    }
+}
+//# sourceMappingURL=audit-service.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-service.js","sourceRoot":"","sources":["../../../src/domain/services/audit-service.ts"],"names":[],"mappings":"AAiFA,MAAM,oBAAoB,GAAuB;IAC/C,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,EAAE;IACjB,SAAS,EAAE,GAAG;CACf,CAAC;AAEF,MAAM,sBAAsB,GAAoD;IAC9E,eAAe,EAAE,MAAM;IACvB,uBAAuB,EAAE,MAAM;IAC/B,mBAAmB,EAAE,MAAM;IAC3B,mBAAmB,EAAE,MAAM;IAC3B,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,MAAM;IACvB,kBAAkB,EAAE,MAAM;IAC1B,YAAY,EAAE,MAAM;IACpB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,MAAM;IACxB,eAAe,EAAE,MAAM;IACvB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,OAAO;IACxB,cAAc,EAAE,UAAU;IAC1B,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,MAAM;IACpB,mBAAmB,EAAE,MAAM;IAC3B,kBAAkB,EAAE,MAAM;IAC1B,eAAe,EAAE,MAAM;IACvB,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAEF,MAAM,sBAAsB,GAAoD;IAC9E,eAAe,EAAE,WAAW;IAC5B,uBAAuB,EAAE,WAAW;IACpC,mBAAmB,EAAE,WAAW;IAChC,mBAAmB,EAAE,WAAW;IAChC,gBAAgB,EAAE,WAAW;IAC7B,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,WAAW;IAC5B,eAAe,EAAE,WAAW;IAC5B,eAAe,EAAE,WAAW;IAC5B,kBAAkB,EAAE,WAAW;IAC/B,YAAY,EAAE,SAAS;IACvB,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;IAC3B,eAAe,EAAE,SAAS;IAC1B,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,UAAU;IAC3B,cAAc,EAAE,UAAU;IAC1B,cAAc,EAAE,UAAU;IAC1B,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,UAAU;IACxB,mBAAmB,EAAE,UAAU;IAC/B,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,WAAW;IAC5B,iBAAiB,EAAE,WAAW;IAC9B,gBAAgB,EAAE,WAAW;CAC9B,CAAC;AAEF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,MAAM,CAAqB;IAC3B,MAAM,CAAyB;IAEhD,YAAY,IAAsB,EAAE,MAAoC;QACtE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,GAAG,CACP,SAAmC,EACnC,UAA8I,EAAE;QAEhJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAElD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAiB,EAAE,MAAyB;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEvC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACzC,KAAK,QAAQ;gBACX,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAEO,UAAU,CAChB,SAAmC,EACnC,OAA2I;QAE3I,MAAM,KAAK,GAAyB;YAClC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAClC,SAAS;YACT,QAAQ,EAAE,sBAAsB,CAAC,SAAS,CAAC;YAC3C,QAAQ,EAAE,sBAAsB,CAAC,SAAS,CAAC;YAC3C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,GAAG,OAAO;SACX,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAAC,KAA2B;QACtD,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,iBAAiB,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACvC,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAC1C,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,MAA8B;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEnC,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU;YACzD,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW;YACvD,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW;SAC3D,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACd,MAAM,GAAG,GAAG,CAAC,CAAC,CAA+B,CAAC,CAAC;YAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACb,CAAC;QAEF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;CACF"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.d.ts

@@ -0,0 +1,68 @@
+import { FederationNode } from '../entities/federation-node.js';
+import type { WgManifestSection } from '../value-objects/wg-config.js';
+export type DiscoveryMechanism = 'static' | 'dns-sd' | 'ipfs-registry' | 'a2a-card';
+export interface FederationManifest {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: {
+        readonly agentTypes: readonly string[];
+        readonly maxConcurrentSessions: number;
+        readonly supportedProtocols: readonly string[];
+        readonly complianceModes: readonly string[];
+    };
+    readonly version: string;
+    readonly signature: string;
+    readonly timestamp: string;
+    /**
+     * ADR-111 — optional WG mesh identity. Present only when the publishing
+     * node has opted into the in-tree WG layer (`config.wgMesh: true`).
+     * The Ed25519 manifest signature covers this block too — peers verifying
+     * the manifest also verify the WG-key binding.
+     */
+    readonly wg?: WgManifestSection;
+}
+export interface DiscoveryServiceDeps {
+    signManifest: (manifest: Omit<FederationManifest, 'signature'>) => Promise<string>;
+    verifyManifest: (manifest: FederationManifest) => Promise<boolean>;
+    onPeerDiscovered?: (node: FederationNode) => void;
+}
+export interface DiscoveryConfig {
+    readonly staticPeers: readonly string[];
+    readonly enableDnsSd: boolean;
+    readonly enableIpfsRegistry: boolean;
+    readonly ipfsRegistryCid?: string;
+    readonly discoveryIntervalMs: number;
+    readonly staleThresholdMs: number;
+}
+export declare class DiscoveryService {
+    private readonly deps;
+    private readonly config;
+    private readonly knownPeers;
+    private localManifest;
+    private discoveryTimer;
+    constructor(deps: DiscoveryServiceDeps, config?: Partial<DiscoveryConfig>);
+    publishManifest(manifest: Omit<FederationManifest, 'signature'>): Promise<FederationManifest>;
+    getLocalManifest(): FederationManifest | null;
+    discoverPeers(): Promise<FederationNode[]>;
+    addStaticPeer(endpoint: string, manifest?: FederationManifest): Promise<FederationNode>;
+    /**
+     * Register an externally-discovered peer (e.g. mapped from an A2A Agent
+     * Card via `fromAgentCard`). Unlike `addStaticPeer` this takes a fully
+     * constructed node — the caller owns validation of the external format —
+     * and the node keeps whatever trust level it was constructed with
+     * (A2A-card peers arrive UNTRUSTED). Existing peers are refreshed, not
+     * replaced, so accumulated trust state survives re-discovery.
+     */
+    registerExternalPeer(node: FederationNode): FederationNode;
+    removePeer(nodeId: string): boolean;
+    getPeer(nodeId: string): FederationNode | undefined;
+    listPeers(): FederationNode[];
+    listActivePeers(): FederationNode[];
+    pruneStale(): string[];
+    startPeriodicDiscovery(): void;
+    stopPeriodicDiscovery(): void;
+    private findByEndpoint;
+    private hashEndpoint;
+}
+//# sourceMappingURL=discovery-service.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/discovery-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA4B,MAAM,gCAAgC,CAAC;AAE1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;AAEpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;QACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;QACvC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;QAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7C,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnF,cAAc,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAUD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,cAAc,CAAwC;gBAElD,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAQnE,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMnG,gBAAgB,IAAI,kBAAkB,GAAG,IAAI;IAIvC,aAAa,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IA2B1C,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IAwC7F;;;;;;;OAOG;IACH,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc;IAW1D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAInC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAInD,SAAS,IAAI,cAAc,EAAE;IAI7B,eAAe,IAAI,cAAc,EAAE;IAInC,UAAU,IAAI,MAAM,EAAE;IAWtB,sBAAsB,IAAI,IAAI;IAO9B,qBAAqB,IAAI,IAAI;IAO7B,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,YAAY;CASrB"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.js

@@ -0,0 +1,161 @@
+import { FederationNode } from '../entities/federation-node.js';
+import { TrustLevel } from '../entities/trust-level.js';
+const DEFAULT_DISCOVERY_CONFIG = {
+    staticPeers: [],
+    enableDnsSd: false,
+    enableIpfsRegistry: false,
+    discoveryIntervalMs: 60_000,
+    staleThresholdMs: 300_000,
+};
+export class DiscoveryService {
+    deps;
+    config;
+    knownPeers;
+    localManifest;
+    discoveryTimer;
+    constructor(deps, config) {
+        this.deps = deps;
+        this.config = { ...DEFAULT_DISCOVERY_CONFIG, ...config };
+        this.knownPeers = new Map();
+        this.localManifest = null;
+        this.discoveryTimer = null;
+    }
+    async publishManifest(manifest) {
+        const signature = await this.deps.signManifest(manifest);
+        this.localManifest = { ...manifest, signature };
+        return this.localManifest;
+    }
+    getLocalManifest() {
+        return this.localManifest;
+    }
+    async discoverPeers() {
+        const discovered = [];
+        for (const endpoint of this.config.staticPeers) {
+            const existing = this.findByEndpoint(endpoint);
+            if (!existing) {
+                const node = FederationNode.create({
+                    nodeId: `static-${this.hashEndpoint(endpoint)}`,
+                    publicKey: '',
+                    endpoint,
+                    capabilities: {
+                        agentTypes: [],
+                        maxConcurrentSessions: 1,
+                        supportedProtocols: ['websocket', 'http'],
+                        complianceModes: [],
+                    },
+                    metadata: { discoveryMechanism: 'static' },
+                });
+                this.knownPeers.set(node.nodeId, node);
+                discovered.push(node);
+                this.deps.onPeerDiscovered?.(node);
+            }
+        }
+        return discovered;
+    }
+    async addStaticPeer(endpoint, manifest) {
+        if (manifest) {
+            if (manifest.endpoint !== endpoint) {
+                throw new Error(`Manifest endpoint mismatch: expected ${endpoint}`);
+            }
+            const valid = await this.deps.verifyManifest(manifest);
+            if (!valid) {
+                throw new Error(`Invalid manifest signature for endpoint: ${endpoint}`);
+            }
+        }
+        const nodeId = manifest?.nodeId ?? `static-${this.hashEndpoint(endpoint)}`;
+        const existing = this.knownPeers.get(nodeId);
+        if (existing) {
+            existing.markSeen();
+            return existing;
+        }
+        const node = FederationNode.create({
+            nodeId,
+            publicKey: manifest?.publicKey ?? '',
+            endpoint,
+            capabilities: manifest?.capabilities ?? {
+                agentTypes: [],
+                maxConcurrentSessions: 1,
+                supportedProtocols: ['websocket', 'http'],
+                complianceModes: [],
+            },
+            trustLevel: manifest ? TrustLevel.VERIFIED : TrustLevel.UNTRUSTED,
+            metadata: {
+                discoveryMechanism: 'static',
+                version: manifest?.version,
+            },
+        });
+        this.knownPeers.set(nodeId, node);
+        this.deps.onPeerDiscovered?.(node);
+        return node;
+    }
+    /**
+     * Register an externally-discovered peer (e.g. mapped from an A2A Agent
+     * Card via `fromAgentCard`). Unlike `addStaticPeer` this takes a fully
+     * constructed node — the caller owns validation of the external format —
+     * and the node keeps whatever trust level it was constructed with
+     * (A2A-card peers arrive UNTRUSTED). Existing peers are refreshed, not
+     * replaced, so accumulated trust state survives re-discovery.
+     */
+    registerExternalPeer(node) {
+        const existing = this.knownPeers.get(node.nodeId);
+        if (existing) {
+            existing.markSeen();
+            return existing;
+        }
+        this.knownPeers.set(node.nodeId, node);
+        this.deps.onPeerDiscovered?.(node);
+        return node;
+    }
+    removePeer(nodeId) {
+        return this.knownPeers.delete(nodeId);
+    }
+    getPeer(nodeId) {
+        return this.knownPeers.get(nodeId);
+    }
+    listPeers() {
+        return Array.from(this.knownPeers.values());
+    }
+    listActivePeers() {
+        return this.listPeers().filter(p => !p.isStale(this.config.staleThresholdMs));
+    }
+    pruneStale() {
+        const pruned = [];
+        for (const [nodeId, node] of this.knownPeers) {
+            if (node.isStale(this.config.staleThresholdMs)) {
+                this.knownPeers.delete(nodeId);
+                pruned.push(nodeId);
+            }
+        }
+        return pruned;
+    }
+    startPeriodicDiscovery() {
+        if (this.discoveryTimer)
+            return;
+        this.discoveryTimer = setInterval(() => {
+            this.discoverPeers().catch(() => { });
+        }, this.config.discoveryIntervalMs);
+    }
+    stopPeriodicDiscovery() {
+        if (this.discoveryTimer) {
+            clearInterval(this.discoveryTimer);
+            this.discoveryTimer = null;
+        }
+    }
+    findByEndpoint(endpoint) {
+        for (const node of this.knownPeers.values()) {
+            if (node.endpoint === endpoint)
+                return node;
+        }
+        return undefined;
+    }
+    hashEndpoint(endpoint) {
+        let hash = 0;
+        for (let i = 0; i < endpoint.length; i++) {
+            const char = endpoint.charCodeAt(i);
+            hash = ((hash << 5) - hash) + char;
+            hash |= 0;
+        }
+        return Math.abs(hash).toString(36);
+    }
+}
+//# sourceMappingURL=discovery-service.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-service.js","sourceRoot":"","sources":["../../../src/domain/services/discovery-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA4B,MAAM,gCAAgC,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AA0CxD,MAAM,wBAAwB,GAAoB;IAChD,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,KAAK;IAClB,kBAAkB,EAAE,KAAK;IACzB,mBAAmB,EAAE,MAAM;IAC3B,gBAAgB,EAAE,OAAO;CAC1B,CAAC;AAEF,MAAM,OAAO,gBAAgB;IACV,IAAI,CAAuB;IAC3B,MAAM,CAAkB;IACxB,UAAU,CAA8B;IACjD,aAAa,CAA4B;IACzC,cAAc,CAAwC;IAE9D,YAAY,IAA0B,EAAE,MAAiC;QACvE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,wBAAwB,EAAE,GAAG,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAA+C;QACnE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,UAAU,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE;oBAC/C,SAAS,EAAE,EAAE;oBACb,QAAQ;oBACR,YAAY,EAAE;wBACZ,UAAU,EAAE,EAAE;wBACd,qBAAqB,EAAE,CAAC;wBACxB,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;wBACzC,eAAe,EAAE,EAAE;qBACpB;oBACD,QAAQ,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;iBAC3C,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,QAA6B;QACjE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,UAAU,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;YACjC,MAAM;YACN,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,EAAE;YACpC,QAAQ;YACR,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI;gBACtC,UAAU,EAAE,EAAE;gBACd,qBAAqB,EAAE,CAAC;gBACxB,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC;gBACzC,eAAe,EAAE,EAAE;aACpB;YACD,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS;YACjE,QAAQ,EAAE;gBACR,kBAAkB,EAAE,QAA8B;gBAClD,OAAO,EAAE,QAAQ,EAAE,OAAO;aAC3B;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB,CAAC,IAAoB;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,SAAS;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,UAAU;QACR,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sBAAsB;QACpB,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACtC,CAAC;IAED,qBAAqB;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YACnC,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;CACF"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.d.ts

@@ -0,0 +1,58 @@
+import { FederationNode } from '../entities/federation-node.js';
+import { FederationSession } from '../entities/federation-session.js';
+export interface HandshakeChallenge {
+    readonly challengeId: string;
+    readonly nonce: string;
+    readonly timestamp: string;
+    readonly sourceNodeId: string;
+    readonly targetNodeId: string;
+}
+export interface HandshakeChallengeResponse {
+    readonly challengeId: string;
+    readonly signedNonce: string;
+    readonly publicKey: string;
+    readonly capabilities: readonly string[];
+}
+export interface HandshakeResult {
+    readonly success: boolean;
+    readonly session?: FederationSession;
+    readonly error?: string;
+}
+export interface HandshakeServiceDeps {
+    generateSessionId: () => string;
+    generateSessionToken: () => string;
+    generateNonce: () => string;
+    signChallenge: (nonce: string) => Promise<string>;
+    verifySignature: (nonce: string, signature: string, publicKey: string) => Promise<boolean>;
+    getLocalNodeId: () => string;
+    getLocalPublicKey: () => string;
+    getLocalCapabilities: () => readonly string[];
+}
+export interface HandshakeConfig {
+    readonly sessionTtlMs: number;
+    readonly maxSessionTtlMs: number;
+    readonly heartbeatIntervalMs: number;
+    readonly challengeTimeoutMs: number;
+}
+export declare class HandshakeService {
+    private readonly deps;
+    private readonly config;
+    private readonly pendingChallenges;
+    constructor(deps: HandshakeServiceDeps, config?: Partial<HandshakeConfig>);
+    initiateHandshake(remoteNode: FederationNode): Promise<HandshakeChallenge>;
+    respondToHandshake(challenge: HandshakeChallenge): Promise<HandshakeChallengeResponse>;
+    verifyChallenge(response: HandshakeChallengeResponse, remoteNode: FederationNode): Promise<HandshakeResult>;
+    /**
+     * Establish a capability-limited session from discovery evidence.
+     *
+     * A signed manifest proves that the advertised key bound the protocol list;
+     * it does not prove live challenge response, so this path never elevates
+     * beyond VERIFIED. Endpoint-only peers remain UNTRUSTED with no negotiated
+     * optional capabilities. A future wire handshake may elevate either session
+     * after authenticating a response received from the remote process.
+     */
+    establishDiscoverySession(remoteNode: FederationNode, verifiedManifest: boolean): FederationSession;
+    renewSession(session: FederationSession): FederationSession;
+    private cleanExpiredChallenges;
+}
+//# sourceMappingURL=handshake-service.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/handshake-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAuB,MAAM,mCAAmC,CAAC;AAG3F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,MAAM,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,MAAM,CAAC;IACnC,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AASD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoE;gBAE1F,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAMnE,iBAAiB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmB1E,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAWtF,eAAe,CACnB,QAAQ,EAAE,0BAA0B,EACpC,UAAU,EAAE,cAAc,GACzB,OAAO,CAAC,eAAe,CAAC;IAiD3B;;;;;;;;OAQG;IACH,yBAAyB,CACvB,UAAU,EAAE,cAAc,EAC1B,gBAAgB,EAAE,OAAO,GACxB,iBAAiB;IAsBpB,YAAY,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB;IAY3D,OAAO,CAAC,sBAAsB;CAQ/B"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.js

@@ -0,0 +1,122 @@
+import { FederationSession } from '../entities/federation-session.js';
+import { TrustLevel } from '../entities/trust-level.js';
+const DEFAULT_HANDSHAKE_CONFIG = {
+    sessionTtlMs: 3_600_000,
+    maxSessionTtlMs: 86_400_000,
+    heartbeatIntervalMs: 30_000,
+    challengeTimeoutMs: 10_000,
+};
+export class HandshakeService {
+    deps;
+    config;
+    pendingChallenges;
+    constructor(deps, config) {
+        this.deps = deps;
+        this.config = { ...DEFAULT_HANDSHAKE_CONFIG, ...config };
+        this.pendingChallenges = new Map();
+    }
+    async initiateHandshake(remoteNode) {
+        const nonce = this.deps.generateNonce();
+        const challenge = {
+            challengeId: this.deps.generateSessionId(),
+            nonce,
+            timestamp: new Date().toISOString(),
+            sourceNodeId: this.deps.getLocalNodeId(),
+            targetNodeId: remoteNode.nodeId,
+        };
+        this.pendingChallenges.set(challenge.challengeId, {
+            challenge,
+            expiresAt: Date.now() + this.config.challengeTimeoutMs,
+        });
+        this.cleanExpiredChallenges();
+        return challenge;
+    }
+    async respondToHandshake(challenge) {
+        const signedNonce = await this.deps.signChallenge(challenge.nonce);
+        return {
+            challengeId: challenge.challengeId,
+            signedNonce,
+            publicKey: this.deps.getLocalPublicKey(),
+            capabilities: this.deps.getLocalCapabilities(),
+        };
+    }
+    async verifyChallenge(response, remoteNode) {
+        const pending = this.pendingChallenges.get(response.challengeId);
+        if (!pending) {
+            return { success: false, error: 'Unknown or expired challenge' };
+        }
+        if (Date.now() > pending.expiresAt) {
+            this.pendingChallenges.delete(response.challengeId);
+            return { success: false, error: 'Challenge expired' };
+        }
+        const isValid = await this.deps.verifySignature(pending.challenge.nonce, response.signedNonce, response.publicKey);
+        this.pendingChallenges.delete(response.challengeId);
+        if (!isValid) {
+            return { success: false, error: 'Invalid challenge signature' };
+        }
+        const localCapabilities = this.deps.getLocalCapabilities();
+        const negotiatedCapabilities = localCapabilities.filter(cap => response.capabilities.includes(cap));
+        const now = new Date();
+        const session = new FederationSession({
+            sessionId: this.deps.generateSessionId(),
+            localNodeId: this.deps.getLocalNodeId(),
+            remoteNodeId: remoteNode.nodeId,
+            trustLevel: TrustLevel.ATTESTED,
+            negotiatedCapabilities,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + this.config.sessionTtlMs),
+            heartbeatInterval: this.config.heartbeatIntervalMs,
+            sessionToken: this.deps.generateSessionToken(),
+            metrics: FederationSession.createMetrics(),
+        });
+        remoteNode.updateTrustLevel(TrustLevel.ATTESTED);
+        remoteNode.markSeen();
+        return { success: true, session };
+    }
+    /**
+     * Establish a capability-limited session from discovery evidence.
+     *
+     * A signed manifest proves that the advertised key bound the protocol list;
+     * it does not prove live challenge response, so this path never elevates
+     * beyond VERIFIED. Endpoint-only peers remain UNTRUSTED with no negotiated
+     * optional capabilities. A future wire handshake may elevate either session
+     * after authenticating a response received from the remote process.
+     */
+    establishDiscoverySession(remoteNode, verifiedManifest) {
+        const remoteCapabilities = verifiedManifest
+            ? remoteNode.capabilities.supportedProtocols
+            : [];
+        const negotiatedCapabilities = this.deps.getLocalCapabilities().filter((capability) => remoteCapabilities.includes(capability));
+        const now = new Date();
+        return new FederationSession({
+            sessionId: this.deps.generateSessionId(),
+            localNodeId: this.deps.getLocalNodeId(),
+            remoteNodeId: remoteNode.nodeId,
+            trustLevel: verifiedManifest ? TrustLevel.VERIFIED : TrustLevel.UNTRUSTED,
+            negotiatedCapabilities,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + this.config.sessionTtlMs),
+            heartbeatInterval: this.config.heartbeatIntervalMs,
+            sessionToken: this.deps.generateSessionToken(),
+            metrics: FederationSession.createMetrics(),
+        });
+    }
+    renewSession(session) {
+        const remainingTtl = this.config.maxSessionTtlMs - (Date.now() - session.createdAt.getTime());
+        const renewalTtl = Math.min(this.config.sessionTtlMs, remainingTtl);
+        if (renewalTtl <= 0) {
+            throw new Error('Session has exceeded maximum TTL and cannot be renewed');
+        }
+        session.renew(new Date(Date.now() + renewalTtl));
+        return session;
+    }
+    cleanExpiredChallenges() {
+        const now = Date.now();
+        for (const [id, pending] of this.pendingChallenges) {
+            if (now > pending.expiresAt) {
+                this.pendingChallenges.delete(id);
+            }
+        }
+    }
+}
+//# sourceMappingURL=handshake-service.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-service.js","sourceRoot":"","sources":["../../../src/domain/services/handshake-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAuB,MAAM,mCAAmC,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAyCxD,MAAM,wBAAwB,GAAoB;IAChD,YAAY,EAAE,SAAS;IACvB,eAAe,EAAE,UAAU;IAC3B,mBAAmB,EAAE,MAAM;IAC3B,kBAAkB,EAAE,MAAM;CAC3B,CAAC;AAEF,MAAM,OAAO,gBAAgB;IACV,IAAI,CAAuB;IAC3B,MAAM,CAAkB;IACxB,iBAAiB,CAAoE;IAEtG,YAAY,IAA0B,EAAE,MAAiC;QACvE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,wBAAwB,EAAE,GAAG,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAA0B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,SAAS,GAAuB;YACpC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC1C,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YACxC,YAAY,EAAE,UAAU,CAAC,MAAM;SAChC,CAAC;QAEF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YAChD,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAA6B;QACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEnE,OAAO;YACL,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACxC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;SAC/C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAAoC,EACpC,UAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAC7C,OAAO,CAAC,SAAS,CAAC,KAAK,EACvB,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,SAAS,CACnB,CAAC;QAEF,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC3D,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,MAAM,CACrD,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3C,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACxC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YACvC,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,UAAU,EAAE,UAAU,CAAC,QAAQ;YAC/B,sBAAsB;YACtB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7D,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAClD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9C,OAAO,EAAE,iBAAiB,CAAC,aAAa,EAAE;SAC3C,CAAC,CAAC;QAEH,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjD,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;;OAQG;IACH,yBAAyB,CACvB,UAA0B,EAC1B,gBAAyB;QAEzB,MAAM,kBAAkB,GAAG,gBAAgB;YACzC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,kBAAkB;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,sBAAsB,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,MAAM,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,CACxD,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,iBAAiB,CAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACxC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YACvC,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS;YACzE,sBAAsB;YACtB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7D,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAClD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9C,OAAO,EAAE,iBAAiB,CAAC,aAAa,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,OAA0B;QACrC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAEpE,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,sBAAsB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}