@claude-flow/cli 3.32.29 → 3.32.32

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/inbound-dispatcher.js

@@ -0,0 +1,356 @@
+/**
+ * Inbound message dispatcher (ADR-109).
+ *
+ * The federation plugin's `transport.listen()` accepts inbound bytes
+ * but until this module landed, the bytes had no consumer — they sat
+ * in the transport's per-address message queue with no one polling.
+ *
+ * `dispatchInbound()` is what the plugin registers as the
+ * transport.onMessage handler. For each received message it:
+ *
+ *   1. Resolves the sender via `sourceNodeId` in metadata
+ *   2. Verifies the peer is in the discovery registry (unknown → reject)
+ *   3. Verifies peer is ACTIVE (SUSPENDED/EVICTED → reject defense-in-depth)
+ *   4. Audits success or rejection
+ *   5. Emits a typed event on the eventBus for the integrator to handle
+ *
+ * Anti-coupling: dispatcher does NOT actually execute inbound tasks.
+ * That's the integrator's job. The dispatcher's contract is "deliver
+ * an envelope to the integrator's handler IFF it passes safety gates."
+ */
+import { FederationNodeState } from '../domain/value-objects/federation-node-state.js';
+/** What gets emitted on the event bus per messageType. */
+export const FEDERATION_INBOUND_EVENT_PREFIX = 'federation:inbound';
+export const JCS_SIGNATURE_PROTOCOL = 'ruflo-signature-jcs-v1';
+/**
+ * Updated peers advertise and negotiate recursively complete JCS signatures
+ * without operator configuration. Legacy mode remains explicit for low-risk
+ * heartbeat/status interoperability only.
+ */
+export const DEFAULT_ENVELOPE_SIGNATURE_MODE = 'prefer-jcs';
+/**
+ * The historical serializer does not authenticate nested payload fields.
+ * Keep it available only for messages whose payload cannot mutate federation
+ * state or transfer data/ownership. Unknown types are intentionally denied.
+ */
+const LEGACY_V1_LOW_RISK_MESSAGE_TYPES = new Set([
+    'heartbeat',
+    'status-broadcast',
+]);
+export function isLegacyEnvelopeTypeAllowed(messageType) {
+    return LEGACY_V1_LOW_RISK_MESSAGE_TYPES.has(messageType);
+}
+/**
+ * Canonical serialization of an envelope for signing. This is the
+ * RFC 8785/JCS-compatible subset used by federation v1 while v2 schema
+ * negotiation is introduced. It recursively sorts object keys and rejects
+ * values outside the I-JSON-safe subset instead of silently dropping them.
+ * The `signature` field itself is excluded because it is what we verify.
+ *
+ * Federation messages are wrapped as `AgentMessage{id, type, payload,
+ * metadata}` on the wire. The `payload` is the actual FederationEnvelope
+ * (per `plugin.ts sendToNode`); we canonicalize the payload + the
+ * metadata so the receiver verifies the same bytes the sender signed.
+ */
+function canonicalizeJcsValue(value, ancestors) {
+    if (value === null)
+        return 'null';
+    switch (typeof value) {
+        case 'boolean':
+            return value ? 'true' : 'false';
+        case 'string':
+            return JSON.stringify(value);
+        case 'number':
+            if (!Number.isFinite(value) || Object.is(value, -0)) {
+                throw new TypeError('Federation canonicalization rejects non-canonical numbers');
+            }
+            if (Number.isInteger(value) && !Number.isSafeInteger(value)) {
+                throw new TypeError('Federation canonicalization rejects unsafe integers');
+            }
+            return JSON.stringify(value);
+        case 'bigint':
+        case 'function':
+        case 'symbol':
+        case 'undefined':
+            throw new TypeError(`Federation canonicalization rejects ${typeof value}`);
+        case 'object':
+            break;
+        default:
+            throw new TypeError(`Federation canonicalization rejects ${typeof value}`);
+    }
+    const object = value;
+    if (ancestors.has(object)) {
+        throw new TypeError('Federation canonicalization rejects cyclic values');
+    }
+    ancestors.add(object);
+    try {
+        if (Array.isArray(value)) {
+            const items = [];
+            for (let index = 0; index < value.length; index += 1) {
+                if (!Object.prototype.hasOwnProperty.call(value, index)) {
+                    throw new TypeError('Federation canonicalization rejects sparse arrays');
+                }
+                items.push(canonicalizeJcsValue(value[index], ancestors));
+            }
+            return `[${items.join(',')}]`;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError('Federation canonicalization accepts only plain objects');
+        }
+        const record = value;
+        const entries = Object.keys(record)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalizeJcsValue(record[key], ancestors)}`);
+        return `{${entries.join(',')}}`;
+    }
+    finally {
+        ancestors.delete(object);
+    }
+}
+function envelopeSignatureVersion(message) {
+    const version = message.metadata?.signatureVersion;
+    if (version === undefined)
+        return 'legacy-v1';
+    if (version === 'jcs-v1')
+        return version;
+    throw new TypeError(`Unsupported federation signature version: ${String(version)}`);
+}
+export function selectEnvelopeSignatureVersion(mode, peerProtocols, messageType) {
+    const selected = mode === 'legacy'
+        ? 'legacy-v1'
+        : peerProtocols.includes(JCS_SIGNATURE_PROTOCOL)
+            ? 'jcs-v1'
+            : mode === 'prefer-jcs'
+                ? 'legacy-v1'
+                : null;
+    if (selected === null) {
+        throw new Error('PEER_SIGNATURE_PROTOCOL_UNSUPPORTED');
+    }
+    if (selected === 'legacy-v1'
+        && messageType !== undefined
+        && !isLegacyEnvelopeTypeAllowed(messageType)) {
+        throw new Error(`PEER_SIGNATURE_PROTOCOL_UNSUPPORTED_FOR_MESSAGE: ${messageType}`);
+    }
+    return selected;
+}
+export function canonicalizeEnvelopeForVerify(message, requestedVersion) {
+    const meta = (message.metadata ?? {});
+    // Strip signature from metadata if present (we verify the rest)
+    const { signature: _sig, ...metaForSig } = meta;
+    const canon = {
+        id: message.id,
+        type: message.type,
+        payload: message.payload,
+        metadata: metaForSig,
+    };
+    const version = requestedVersion ?? envelopeSignatureVersion(message);
+    if (version === 'legacy-v1') {
+        // Byte-for-byte compatibility with releases through 1.0.0-alpha.16.
+        // Its recursive array replacer omits nested fields, so legacy messages
+        // cannot become privileged ownership mutations.
+        return JSON.stringify(canon, Object.keys(canon).sort());
+    }
+    return canonicalizeJcsValue(canon, new Set());
+}
+/**
+ * Process one received message. Pure-ish: no side effects beyond audit
+ * + event emission, both injected.
+ *
+ * `address` is the wire-level remote (e.g. `192.168.1.42:54321`).
+ * `message.metadata.sourceNodeId` is the cryptographic identity claim.
+ * The two MAY differ (e.g. behind NAT) — we trust `sourceNodeId` for
+ * peer lookup since it's bound to the Ed25519 keypair.
+ */
+export async function dispatchInbound(address, message, deps) {
+    const meta = (message.metadata ?? {});
+    const sourceNodeId = typeof meta.sourceNodeId === 'string' ? meta.sourceNodeId : null;
+    if (!sourceNodeId) {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId: undefined,
+            metadata: { address, reason: 'MISSING_METADATA' },
+        });
+        deps.logger.warn(`Inbound rejected: no sourceNodeId in metadata (from ${address})`);
+        return { accepted: false, reason: 'MISSING_METADATA' };
+    }
+    const peer = deps.discovery.getPeer(sourceNodeId);
+    if (!peer) {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: { address, reason: 'PEER_UNKNOWN' },
+        });
+        deps.logger.warn(`Inbound rejected: ${sourceNodeId} not in discovery (from ${address})`);
+        return { accepted: false, reason: 'PEER_UNKNOWN' };
+    }
+    if (peer.state === FederationNodeState.SUSPENDED) {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: { address, reason: 'PEER_SUSPENDED' },
+        });
+        return { accepted: false, reason: 'PEER_SUSPENDED' };
+    }
+    if (peer.state === FederationNodeState.EVICTED) {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: { address, reason: 'PEER_EVICTED' },
+        });
+        return { accepted: false, reason: 'PEER_EVICTED' };
+    }
+    let signatureVersion;
+    let canonicalEnvelope;
+    try {
+        signatureVersion = envelopeSignatureVersion(message);
+        const accepted = deps.acceptedSignatureVersions ?? ['legacy-v1', 'jcs-v1'];
+        if (!accepted.includes(signatureVersion)) {
+            throw new TypeError(`Signature version ${signatureVersion} is disabled`);
+        }
+        canonicalEnvelope = canonicalizeEnvelopeForVerify(message, signatureVersion);
+    }
+    catch {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: { address, reason: 'INVALID_PAYLOAD' },
+        });
+        deps.logger.warn(`Inbound rejected: non-canonical payload from ${sourceNodeId} (addr=${address})`);
+        return { accepted: false, reason: 'INVALID_PAYLOAD' };
+    }
+    // Cryptographic signature verification (closes the trust gate that
+    // peer-state checks alone don't provide — without this, a malicious
+    // sender could just claim sourceNodeId='known-peer' in metadata and
+    // pass the previous gates).
+    if (deps.verifyEnvelope) {
+        const sig = typeof meta.signature === 'string' ? meta.signature : null;
+        let ok = false;
+        try {
+            ok = deps.verifyEnvelope(canonicalEnvelope, sig, peer.publicKey);
+        }
+        catch {
+            await deps.audit.log('message_rejected', {
+                sourceNodeId,
+                metadata: { address, reason: 'INVALID_PAYLOAD' },
+            });
+            deps.logger.warn(`Inbound rejected: non-canonical payload from ${sourceNodeId} (addr=${address})`);
+            return { accepted: false, reason: 'INVALID_PAYLOAD' };
+        }
+        if (!ok) {
+            await deps.audit.log('message_rejected', {
+                sourceNodeId,
+                metadata: { address, reason: 'INVALID_SIGNATURE' },
+            });
+            deps.logger.warn(`Inbound rejected: bad signature from ${sourceNodeId} (addr=${address})`);
+            return { accepted: false, reason: 'INVALID_SIGNATURE' };
+        }
+    }
+    // The legacy serializer omits nested fields. No policy grant can make those
+    // unauthenticated bytes safe for a consequential operation, so this gate is
+    // independent of authorization compatibility mode.
+    if (signatureVersion === 'legacy-v1' &&
+        !isLegacyEnvelopeTypeAllowed(message.type)) {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: {
+                address,
+                reason: 'LEGACY_SIGNATURE_TYPE_REJECTED',
+                messageType: message.type,
+            },
+        });
+        deps.logger.warn(`Inbound rejected: legacy-v1 is not permitted for message type ${message.type} ` +
+            `from ${sourceNodeId}`);
+        return { accepted: false, reason: 'LEGACY_SIGNATURE_TYPE_REJECTED' };
+    }
+    const authorizationMode = deps.authorizationMode ?? 'legacy';
+    if (authorizationMode !== 'legacy' &&
+        authorizationMode !== 'observe' &&
+        authorizationMode !== 'enforce') {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: { address, reason: 'AUTHORIZATION_ERROR' },
+        });
+        return { accepted: false, reason: 'AUTHORIZATION_ERROR' };
+    }
+    let authorizationDecision;
+    if (deps.authorizeInbound) {
+        try {
+            const decision = await deps.authorizeInbound({
+                address,
+                sourceNodeId,
+                messageType: message.type,
+                message,
+                peer,
+                signatureVersion,
+                messageSizeBytes: new TextEncoder().encode(canonicalEnvelope).byteLength,
+            });
+            if (!decision || typeof decision.allowed !== 'boolean') {
+                throw new TypeError('Inbound authorization evaluator returned an invalid decision');
+            }
+            authorizationDecision = decision;
+        }
+        catch {
+            if (authorizationMode === 'enforce') {
+                await deps.audit.log('message_rejected', {
+                    sourceNodeId,
+                    metadata: { address, reason: 'AUTHORIZATION_ERROR', messageType: message.type },
+                });
+                deps.logger.warn(`Inbound authorization failed for ${sourceNodeId} (addr=${address})`);
+                return { accepted: false, reason: 'AUTHORIZATION_ERROR' };
+            }
+            deps.logger.warn(`Inbound authorization observation failed for ${sourceNodeId} (mode=${authorizationMode})`);
+        }
+    }
+    else if (authorizationMode === 'enforce') {
+        await deps.audit.log('message_rejected', {
+            sourceNodeId,
+            metadata: { address, reason: 'AUTHORIZATION_ERROR', messageType: message.type },
+        });
+        deps.logger.warn('Inbound rejected: enforce mode has no authorization evaluator');
+        return { accepted: false, reason: 'AUTHORIZATION_ERROR' };
+    }
+    if (authorizationDecision && !authorizationDecision.allowed) {
+        if (authorizationMode === 'enforce') {
+            await deps.audit.log('message_rejected', {
+                sourceNodeId,
+                metadata: {
+                    address,
+                    reason: 'AUTHORIZATION_DENIED',
+                    messageType: message.type,
+                    policyReason: authorizationDecision.reason,
+                },
+            });
+            deps.logger.warn(`Inbound authorization denied for ${sourceNodeId} (addr=${address})`);
+            return { accepted: false, reason: 'AUTHORIZATION_DENIED' };
+        }
+        deps.logger.warn(`Inbound authorization would deny ${message.type} from ${sourceNodeId} ` +
+            `(mode=${authorizationMode})`);
+    }
+    // Touch lastSeen on every successful inbound — drives the
+    // discovery service's stale-peer detection.
+    peer.markSeen();
+    // Audit accepted delivery
+    await deps.audit.log('message_received', {
+        sourceNodeId,
+        metadata: {
+            address,
+            messageType: message.type,
+            messageId: message.id,
+            authorizationMode,
+            authorizationAllowed: authorizationDecision?.allowed,
+        },
+    });
+    // Emit typed event for the integrator
+    // Examples: federation:inbound:task, federation:inbound:memory-query
+    const eventName = `${FEDERATION_INBOUND_EVENT_PREFIX}:${message.type}`;
+    try {
+        deps.eventBus.emit(eventName, {
+            address,
+            sourceNodeId,
+            message,
+            peer,
+        });
+    }
+    catch (err) {
+        // EventBus throw should not crash the receive loop.
+        deps.logger.warn(`EventBus emit failed for ${eventName}: ${err instanceof Error ? err.message : err}`);
+    }
+    return { accepted: true, sourceNodeId, messageType: message.type };
+}
+//# sourceMappingURL=inbound-dispatcher.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/inbound-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-dispatcher.js","sourceRoot":"","sources":["../../src/application/inbound-dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AAEvF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AA8BpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAiC,CAAC;AAGxE;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0B,YAAY,CAAC;AAGnF;;;;GAIG;AACH,MAAM,gCAAgC,GAAwB,IAAI,GAAG,CAAC;IACpE,WAAW;IACX,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CAAC,WAAmB;IAC7D,OAAO,gCAAgC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC;AAgDD;;;;;;;;;;;GAWG;AACH,SAAS,oBAAoB,CAAC,KAAc,EAAE,SAAsB;IAClE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAElC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACd,MAAM,IAAI,SAAS,CAAC,uCAAuC,OAAO,KAAK,EAAE,CAAC,CAAC;QAC7E,KAAK,QAAQ;YACX,MAAM;QACR;YACE,MAAM,IAAI,SAAS,CAAC,uCAAuC,OAAO,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,KAAe,CAAC;IAC/B,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEtB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;gBAC3E,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAqB;IACrD,MAAM,OAAO,GAAI,OAAO,CAAC,QAAgD,EAAE,gBAAgB,CAAC;IAC5F,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,IAAI,SAAS,CAAC,6CAA6C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAA2B,EAC3B,aAAgC,EAChC,WAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,KAAK,QAAQ;QAChC,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC9C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,KAAK,YAAY;gBACrB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IACE,QAAQ,KAAK,WAAW;WACrB,WAAW,KAAK,SAAS;WACzB,CAAC,2BAA2B,CAAC,WAAW,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,WAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAqB,EACrB,gBAA2C;IAE3C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACjE,gEAAgE;IAChE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,UAAU;KACrB,CAAC;IACF,MAAM,OAAO,GAAG,gBAAgB,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,oEAAoE;QACpE,uEAAuE;QACvE,gDAAgD;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,OAAqB,EACrB,IAAyB;IAEzB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,OAAO,GAAG,CAAC,CAAC;QACpF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,YAAY,2BAA2B,OAAO,GAAG,CAAC,CAAC;QACzF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACjD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE;SAChD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,mBAAmB,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE;SAC9C,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,gBAA0C,CAAC;IAC/C,IAAI,iBAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,gBAAgB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,SAAS,CAAC,qBAAqB,gBAAgB,cAAc,CAAC,CAAC;QAC3E,CAAC;QACD,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,YAAY,UAAU,OAAO,GAAG,CAAC,CAAC;QACnG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACxD,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,4BAA4B;IAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvC,YAAY;gBACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;aACjD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,YAAY,UAAU,OAAO,GAAG,CAAC,CAAC;YACnG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvC,YAAY;gBACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE;aACnD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,YAAY,UAAU,OAAO,GAAG,CAAC,CAAC;YAC3F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,IACE,gBAAgB,KAAK,WAAW;QAChC,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE;gBACR,OAAO;gBACP,MAAM,EAAE,gCAAgC;gBACxC,WAAW,EAAE,OAAO,CAAC,IAAI;aAC1B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iEAAiE,OAAO,CAAC,IAAI,GAAG;YAC9E,QAAQ,YAAY,EAAE,CACzB,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IAC7D,IACE,iBAAiB,KAAK,QAAQ;QAC9B,iBAAiB,KAAK,SAAS;QAC/B,iBAAiB,KAAK,SAAS,EAC/B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE;SACrD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,qBAA+D,CAAC;IACpE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;gBAC3C,OAAO;gBACP,YAAY;gBACZ,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,OAAO;gBACP,IAAI;gBACJ,gBAAgB;gBAChB,gBAAgB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,UAAU;aACzE,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACvD,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;YACtF,CAAC;YACD,qBAAqB,GAAG,QAAQ,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;oBACvC,YAAY;oBACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;iBAChF,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,YAAY,UAAU,OAAO,GAAG,CAAC,CAAC;gBACvF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gDAAgD,YAAY,UAAU,iBAAiB,GAAG,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACvC,YAAY;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE;SAChF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAClF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,qBAAqB,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvC,YAAY;gBACZ,QAAQ,EAAE;oBACR,OAAO;oBACP,MAAM,EAAE,sBAAsB;oBAC9B,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,YAAY,EAAE,qBAAqB,CAAC,MAAM;iBAC3C;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,YAAY,UAAU,OAAO,GAAG,CAAC,CAAC;YACvF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,OAAO,CAAC,IAAI,SAAS,YAAY,GAAG;YACtE,SAAS,iBAAiB,GAAG,CAChC,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,4CAA4C;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;IAEhB,0BAA0B;IAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;QACvC,YAAY;QACZ,QAAQ,EAAE;YACR,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,iBAAiB;YACjB,oBAAoB,EAAE,qBAAqB,EAAE,OAAO;SACrD;KACF,CAAC,CAAC;IAEH,sCAAsC;IACtC,qEAAqE;IACrE,MAAM,SAAS,GAAG,GAAG,+BAA+B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;YAC5B,OAAO;YACP,YAAY;YACZ,OAAO;YACP,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oDAAoD;QACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4BAA4B,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.d.ts

@@ -0,0 +1,41 @@
+import { TrustLevel } from '../domain/entities/trust-level.js';
+import { type PIIAction, type PIIDetection, type PIIPolicyConfig } from '../domain/services/pii-pipeline-service.js';
+import { type FederationMessageType } from '../domain/entities/federation-envelope.js';
+export type FederationClaimType = 'federation:discover' | 'federation:connect' | 'federation:read' | 'federation:write' | 'federation:admin' | 'federation:memory' | 'federation:spawn';
+export interface SecurityPolicy {
+    readonly maxMessageSizeBytes: number;
+    readonly maxMessagesPerMinute: number;
+    readonly allowedMessageTypes: readonly FederationMessageType[];
+    readonly requirePiiScan: boolean;
+    readonly requireAiDefenceScan: boolean;
+    readonly minTrustLevelForWrite: TrustLevel;
+    readonly minTrustLevelForMemory: TrustLevel;
+    readonly minTrustLevelForSpawn: TrustLevel;
+}
+export interface PolicyEvaluationResult {
+    readonly allowed: boolean;
+    readonly reason: string;
+    readonly requiredClaims: readonly FederationClaimType[];
+    readonly trustLevelSufficient: boolean;
+    readonly piiAction?: PIIAction;
+}
+export interface PolicyEngineDeps {
+    checkClaim: (claim: FederationClaimType) => boolean;
+}
+export declare class PolicyEngine {
+    private readonly deps;
+    private readonly securityPolicy;
+    private readonly piiPolicy;
+    private readonly rateLimitCounters;
+    constructor(deps: PolicyEngineDeps, securityPolicy?: Partial<SecurityPolicy>, piiPolicy?: PIIPolicyConfig);
+    evaluateMessage(messageType: FederationMessageType, trustLevel: TrustLevel, messageSizeBytes: number, sourceNodeId: string): PolicyEvaluationResult;
+    evaluatePiiDetection(detection: PIIDetection, trustLevel: TrustLevel): PIIAction;
+    evaluateTrustChange(currentLevel: TrustLevel, proposedLevel: TrustLevel): {
+        allowed: boolean;
+        requiresHumanApproval: boolean;
+        reason: string;
+    };
+    private checkRateLimit;
+    private getOperationForMessageType;
+}
+//# sourceMappingURL=policy-engine.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAgB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACnI,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AA4CD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsD;gBAGtF,IAAI,EAAE,gBAAgB,EACtB,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EACxC,SAAS,CAAC,EAAE,eAAe;IAc7B,eAAe,CACb,WAAW,EAAE,qBAAqB,EAClC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,sBAAsB;IAyDzB,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAWhF,mBAAmB,CACjB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,UAAU,GACxB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgCvE,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,0BAA0B;CAyBnC"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.js

@@ -0,0 +1,184 @@
+import { TrustLevel, isOperationAllowed } from '../domain/entities/trust-level.js';
+const DEFAULT_SECURITY_POLICY = {
+    maxMessageSizeBytes: 1_048_576,
+    maxMessagesPerMinute: 120,
+    allowedMessageTypes: [
+        'task-assignment', 'memory-query', 'memory-response',
+        'context-share', 'status-broadcast', 'heartbeat',
+        'trust-change', 'topology-change', 'agent-spawn',
+    ],
+    requirePiiScan: true,
+    requireAiDefenceScan: true,
+    minTrustLevelForWrite: TrustLevel.ATTESTED,
+    minTrustLevelForMemory: TrustLevel.TRUSTED,
+    minTrustLevelForSpawn: TrustLevel.PRIVILEGED,
+};
+const CLAIMS_FOR_MESSAGE_TYPE = {
+    'task-assignment': ['federation:write'],
+    'memory-query': ['federation:read', 'federation:memory'],
+    'memory-response': ['federation:read', 'federation:memory'],
+    'context-share': ['federation:write'],
+    'status-broadcast': ['federation:read'],
+    'trust-change': ['federation:admin'],
+    'topology-change': ['federation:admin'],
+    'agent-spawn': ['federation:spawn'],
+    'heartbeat': ['federation:connect'],
+    'challenge': ['federation:connect'],
+    'challenge-response': ['federation:connect'],
+    'handshake-init': ['federation:connect'],
+    'handshake-accept': ['federation:connect'],
+    'handshake-reject': ['federation:connect'],
+    'session-terminate': ['federation:connect'],
+    // ADR-101 Component C — federated claims operations.
+    // claim-event: broadcasts a ClaimDomainEvent (state mutation across peers),
+    // same authorization shape as task-assignment.
+    'claim-event': ['federation:write'],
+    // agent-handoff: transfers claim ownership to a remote agent. Requires
+    // both the write capability (state mutation) AND spawn-lifecycle authority
+    // (handoff is a sibling of agent-spawn — both reshape who owns work).
+    // Matches the consensus-gated security posture in ADR-101.
+    'agent-handoff': ['federation:write', 'federation:spawn'],
+};
+export class PolicyEngine {
+    deps;
+    securityPolicy;
+    piiPolicy;
+    rateLimitCounters;
+    constructor(deps, securityPolicy, piiPolicy) {
+        this.deps = deps;
+        this.securityPolicy = { ...DEFAULT_SECURITY_POLICY, ...securityPolicy };
+        this.piiPolicy = piiPolicy ?? {
+            defaultAction: 'redact',
+            overrides: {},
+            hashAlgorithm: 'sha256',
+            hashSalt: '',
+            redactionPlaceholder: '[REDACTED:{type}]',
+        };
+        this.rateLimitCounters = new Map();
+    }
+    evaluateMessage(messageType, trustLevel, messageSizeBytes, sourceNodeId) {
+        if (!this.securityPolicy.allowedMessageTypes.includes(messageType)) {
+            return {
+                allowed: false,
+                reason: `Message type '${messageType}' is not allowed by security policy`,
+                requiredClaims: [],
+                trustLevelSufficient: false,
+            };
+        }
+        if (messageSizeBytes > this.securityPolicy.maxMessageSizeBytes) {
+            return {
+                allowed: false,
+                reason: `Message size ${messageSizeBytes} exceeds maximum ${this.securityPolicy.maxMessageSizeBytes}`,
+                requiredClaims: [],
+                trustLevelSufficient: true,
+            };
+        }
+        if (!this.checkRateLimit(sourceNodeId)) {
+            return {
+                allowed: false,
+                reason: `Rate limit exceeded for node ${sourceNodeId}`,
+                requiredClaims: [],
+                trustLevelSufficient: true,
+            };
+        }
+        const requiredClaims = CLAIMS_FOR_MESSAGE_TYPE[messageType] ?? [];
+        const missingClaims = requiredClaims.filter(c => !this.deps.checkClaim(c));
+        if (missingClaims.length > 0) {
+            return {
+                allowed: false,
+                reason: `Missing required claims: ${missingClaims.join(', ')}`,
+                requiredClaims,
+                trustLevelSufficient: true,
+            };
+        }
+        const operationForType = this.getOperationForMessageType(messageType);
+        if (!isOperationAllowed(trustLevel, operationForType)) {
+            return {
+                allowed: false,
+                reason: `Trust level ${trustLevel} insufficient for operation '${operationForType}'`,
+                requiredClaims,
+                trustLevelSufficient: false,
+            };
+        }
+        return {
+            allowed: true,
+            reason: 'Policy check passed',
+            requiredClaims,
+            trustLevelSufficient: true,
+        };
+    }
+    evaluatePiiDetection(detection, trustLevel) {
+        const override = this.piiPolicy.overrides[detection.type];
+        if (override?.trustLevelOverride?.[trustLevel]) {
+            return override.trustLevelOverride[trustLevel];
+        }
+        if (override?.action) {
+            return override.action;
+        }
+        return this.piiPolicy.defaultAction;
+    }
+    evaluateTrustChange(currentLevel, proposedLevel) {
+        if (proposedLevel > currentLevel && proposedLevel === TrustLevel.PRIVILEGED) {
+            return {
+                allowed: true,
+                requiresHumanApproval: true,
+                reason: 'Elevation to PRIVILEGED requires institutional attestation and human approval',
+            };
+        }
+        if (proposedLevel > currentLevel) {
+            return {
+                allowed: true,
+                requiresHumanApproval: false,
+                reason: `Trust upgrade from ${currentLevel} to ${proposedLevel} allowed`,
+            };
+        }
+        if (proposedLevel < currentLevel) {
+            return {
+                allowed: true,
+                requiresHumanApproval: false,
+                reason: `Trust downgrade from ${currentLevel} to ${proposedLevel} allowed`,
+            };
+        }
+        return {
+            allowed: false,
+            requiresHumanApproval: false,
+            reason: 'No trust level change',
+        };
+    }
+    checkRateLimit(nodeId) {
+        const now = Date.now();
+        const counter = this.rateLimitCounters.get(nodeId);
+        if (!counter || now - counter.windowStart > 60_000) {
+            this.rateLimitCounters.set(nodeId, { count: 1, windowStart: now });
+            return true;
+        }
+        counter.count++;
+        return counter.count <= this.securityPolicy.maxMessagesPerMinute;
+    }
+    getOperationForMessageType(messageType) {
+        switch (messageType) {
+            case 'memory-query':
+            case 'memory-response':
+                return 'query-redacted';
+            case 'context-share':
+                return 'share-context';
+            case 'task-assignment':
+                return 'send';
+            case 'agent-spawn':
+                return 'remote-spawn';
+            case 'status-broadcast':
+                return 'status';
+            case 'heartbeat':
+            case 'challenge':
+            case 'challenge-response':
+            case 'handshake-init':
+            case 'handshake-accept':
+            case 'handshake-reject':
+            case 'session-terminate':
+                return 'ping';
+            default:
+                return 'send';
+        }
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAgCnF,MAAM,uBAAuB,GAAmB;IAC9C,mBAAmB,EAAE,SAAS;IAC9B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE;QACnB,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;QACpD,eAAe,EAAE,kBAAkB,EAAE,WAAW;QAChD,cAAc,EAAE,iBAAiB,EAAE,aAAa;KACjD;IACD,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,UAAU,CAAC,QAAQ;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO;IAC1C,qBAAqB,EAAE,UAAU,CAAC,UAAU;CAC7C,CAAC;AAEF,MAAM,uBAAuB,GAAyD;IACpF,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACxD,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAC3D,eAAe,EAAE,CAAC,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,CAAC,kBAAkB,CAAC;IACpC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;IAC5C,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;IAC3C,qDAAqD;IACrD,4EAA4E;IAC5E,+CAA+C;IAC/C,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CAC1D,CAAC;AAMF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,cAAc,CAAiB;IAC/B,SAAS,CAAkB;IAC3B,iBAAiB,CAAsD;IAExF,YACE,IAAsB,EACtB,cAAwC,EACxC,SAA2B;QAE3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAAc,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI;YAC5B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,eAAe,CACb,WAAkC,EAClC,UAAsB,EACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,WAAW,qCAAqC;gBACzE,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,gBAAgB,oBAAoB,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE;gBACrG,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC,YAAY,EAAE;gBACtD,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,gCAAgC,gBAAgB,GAAG;gBACpF,cAAc;gBACd,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,cAAc;YACd,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,SAAuB,EAAE,UAAsB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,mBAAmB,CACjB,YAAwB,EACxB,aAAyB;QAEzB,IAAI,aAAa,GAAG,YAAY,IAAI,aAAa,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,MAAM,EAAE,+EAA+E;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,sBAAsB,YAAY,OAAO,aAAa,UAAU;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,wBAAwB,YAAY,OAAO,aAAa,UAAU;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,qBAAqB,EAAE,KAAK;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IACnE,CAAC;IAEO,0BAA0B,CAAC,WAAkC;QACnE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,gBAAgB,CAAC;YAC1B,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,iBAAiB;gBACpB,OAAO,MAAM,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,cAAc,CAAC;YACxB,KAAK,kBAAkB;gBACrB,OAAO,QAAQ,CAAC;YAClB,KAAK,WAAW,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB,CAAC;YACxB,KAAK,mBAAmB;gBACtB,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}