@claude-flow/plugin-agent-federation 1.0.4 → 1.0.5

package/dist/application/federation-coordinator.d.ts

@@ -0,0 +1,211 @@
+import { FederationNode, type FederationNodeStateRecord } from '../domain/entities/federation-node.js';
+import { FederationSession } from '../domain/entities/federation-session.js';
+import { type FederationMessageType } from '../domain/entities/federation-envelope.js';
+import { TrustLevel } from '../domain/entities/trust-level.js';
+import { type SuspensionReason } from '../domain/value-objects/federation-node-state.js';
+import { DiscoveryService, type FederationManifest } from '../domain/services/discovery-service.js';
+import { HandshakeService } from '../domain/services/handshake-service.js';
+import { RoutingService, type RoutingResult } from '../domain/services/routing-service.js';
+import { AuditService } from '../domain/services/audit-service.js';
+import { PIIPipelineService } from '../domain/services/pii-pipeline-service.js';
+import { TrustEvaluator, type BootstrapElevationAuditEntry } from './trust-evaluator.js';
+import { PolicyEngine } from './policy-engine.js';
+import { enforceBudget, validateBudget } from '../domain/value-objects/federation-budget.js';
+import type { FederationBreakerService } from './federation-breaker-service.js';
+import type { SpendReporter } from './spend-reporter.js';
+import type { WgMeshService, WgCommand } from '../domain/services/wg-mesh-service.js';
+/**
+ * Optional per-call budget controls (ADR-097 Phase 1). All fields are
+ * optional; omitted means "no limit on that axis" (the default unbounded
+ * budget still has maxHops = 8 to defang recursive delegation loops).
+ */
+export interface SendOptions {
+    readonly budget?: {
+        maxTokens?: number;
+        maxUsd?: number;
+    };
+    readonly maxHops?: number;
+    /**
+     * How many hops this message has already traveled (0 on the originator).
+     * Phase 1 enforces at the send side because there is no inbound dispatcher
+     * yet; callers re-forwarding a received message should pass the original
+     * envelope's hopCount here.
+     */
+    readonly hopCount?: number;
+    /** Caller-reported usage from the previous leg, for cumulative checks. */
+    readonly spent?: {
+        tokens?: number;
+        usd?: number;
+    };
+}
+export interface FederationCoordinatorConfig {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: readonly string[];
+    /** Wire protocols this runtime is prepared to advertise and negotiate. */
+    readonly supportedProtocols?: readonly string[];
+    readonly version?: string;
+}
+export interface FederationStatus {
+    readonly nodeId: string;
+    readonly activeSessions: number;
+    readonly knownPeers: number;
+    readonly trustLevels: Record<string, TrustLevel>;
+    readonly healthy: boolean;
+}
+/**
+ * Optional integrations (ADR-097 Phase 3 upstream + Phase 2.b breaker
+ * wiring). Both are constructor-injected; both default to no-op.
+ *
+ * - `spendReporter` — invoked by reportSpend() when present; persists
+ *   the FederationSpendEvent to whatever backend the integrator wired
+ *   (cost-tracker bus, ruflo memory federation-spend namespace, etc.)
+ * - `breakerService` — invoked by reportSpend() when present; calls
+ *   recordOutcome() so the breaker's in-memory rolling buffer is fed
+ *   without requiring the integrator to wire two parallel pipelines
+ */
+export interface FederationCoordinatorIntegrations {
+    readonly spendReporter?: SpendReporter;
+    readonly breakerService?: FederationBreakerService;
+    /**
+     * ADR-111 Phase 3 — optional WG mesh service. When present, peer state
+     * transitions (evict/reactivate/breaker-suspend) emit `wg set` commands
+     * to a sink supplied by `wgCommandSink`. No-op for peers without a `wg`
+     * manifest block, so wiring the service is safe even in mixed deployments.
+     */
+    readonly wgMesh?: WgMeshService;
+    /**
+     * Where emitted WG commands go. Defaults to the audit log only. Integrators
+     * can plug in a shell executor here (after operator approval — bringing up
+     * a network interface is destructive). Commands include shell-ready
+     * `wg set <iface> ...` strings; the sink should still validate before exec.
+     */
+    readonly wgCommandSink?: (cmd: WgCommand) => void | Promise<void>;
+}
+export declare class FederationCoordinator {
+    private readonly config;
+    private readonly discovery;
+    private readonly handshake;
+    private readonly routing;
+    private readonly audit;
+    private readonly piiPipeline;
+    private readonly trustEvaluator;
+    private readonly policyEngine;
+    private readonly sessions;
+    private initialized;
+    private readonly spendReporter?;
+    private readonly breakerService?;
+    private readonly wgMesh?;
+    private readonly wgCommandSink?;
+    constructor(config: FederationCoordinatorConfig, discovery: DiscoveryService, handshake: HandshakeService, routing: RoutingService, audit: AuditService, piiPipeline: PIIPipelineService, trustEvaluator: TrustEvaluator, policyEngine: PolicyEngine, integrations?: FederationCoordinatorIntegrations);
+    /**
+     * ADR-111 Phase 3 — emit a WG command for an audited peer transition.
+     * No-op if no wgMesh is configured or the peer lacks a `wg` manifest
+     * block. Commands flow to `wgCommandSink` (if any) and always to the
+     * audit log so reactivation is fully traceable.
+     */
+    private emitWgCommand;
+    initialize(manifest: Omit<FederationManifest, 'signature'>): Promise<void>;
+    shutdown(): Promise<void>;
+    joinPeer(endpoint: string, manifest?: FederationManifest): Promise<FederationSession>;
+    leavePeer(nodeId: string): Promise<void>;
+    sendMessage<T>(targetNodeId: string, messageType: FederationMessageType, payload: T, options?: SendOptions): Promise<RoutingResult>;
+    /**
+     * Re-export the budget primitives so external callers (e.g. follow-up
+     * iterations adding receive-side decrement) can reuse them without
+     * dipping into domain/value-objects directly.
+     */
+    static readonly budget: {
+        validate: typeof validateBudget;
+        enforce: typeof enforceBudget;
+    };
+    broadcastMessage<T>(messageType: FederationMessageType, payload: T): Promise<RoutingResult[]>;
+    handleThreatDetection(nodeId: string): void;
+    handleHmacFailure(nodeId: string): void;
+    getStatus(): FederationStatus;
+    /**
+     * ADR-097 Phase 4: per-peer breaker state snapshot for the doctor
+     * surface and `federation_breaker_status` MCP tool.
+     *
+     * Returns one entry per known peer with the entity's stateRecord —
+     * what state, when it changed, why, and which caller's correlation
+     * key triggered it. Pure read; does not mutate.
+     */
+    getPeerStates(): readonly (FederationNodeStateRecord & {
+        readonly nodeId: string;
+    })[];
+    /**
+     * ADR-111 Phase 6: public read of the discovery peer list. Used by
+     * federation_wg_status MCP tool + WG firewall projection. Returns the
+     * full known-peer set (active + suspended + evicted) — filter via
+     * .isActive / state if you only want the live mesh members.
+     */
+    listPeers(): readonly FederationNode[];
+    /**
+     * Aggregated counts for the doctor surface — `{ active: N, suspended: M,
+     * evicted: K }`. Cheap O(peers) sweep; safe to call from a status line.
+     */
+    getPeerStateCounts(): {
+        readonly active: number;
+        readonly suspended: number;
+        readonly evicted: number;
+    };
+    /**
+     * Operator-initiated evict. Returns true on transition, false if the
+     * peer was already EVICTED or unknown. Logs to audit either way.
+     *
+     * Does NOT remove the peer from the discovery registry — `leavePeer`
+     * is the registry-removal API. Eviction is the breaker layer; the peer
+     * remains queryable so the operator can later reactivate.
+     */
+    evictPeer(nodeId: string, reason?: SuspensionReason, correlationId?: string): Promise<boolean>;
+    /**
+     * ADR-097 Phase 3 upstream: report the actual cost of a federated
+     * call. Federation doesn't own model pricing, so the integrator calls
+     * this after the downstream agent completes.
+     *
+     * Fans out to:
+     *   - spendReporter (if injected) — persists to integrator's backend
+     *   - breakerService.recordOutcome (if injected) — feeds the breaker's
+     *     in-memory rolling buffer for cost/failure-ratio thresholds
+     *
+     * Both are no-ops if the corresponding integration isn't wired, so
+     * callers don't need to branch on configuration. Negative tokens/usd
+     * are clamped to 0 at the breaker layer (anti-credit-inflation); the
+     * spend reporter receives the raw values so backends can audit them.
+     *
+     * Auto-fills `ts` if the caller omits it.
+     */
+    reportSpend(input: {
+        readonly peerId: string;
+        readonly taskId?: string;
+        readonly tokensUsed: number;
+        readonly usdSpent: number;
+        readonly success: boolean;
+        readonly ts?: string;
+    }): Promise<void>;
+    /**
+     * Founder-bootstrap trust elevation (ADR-164 §3.5.4 — operator escape hatch
+     * used in the autopilot Day-1 scenario where a freshly-joined BBS peer
+     * needs TRUSTED before organic minInteractions thresholds can accrue).
+     *
+     * Refuses if the target node is not a registered federation peer (returns
+     * null). On success, writes a `trust_level_changed` audit entry tagged
+     * `bootstrap_elevation` with the operator-supplied reason, and returns
+     * the audit entry so the CLI / caller can print it to stdout.
+     */
+    bootstrapElevatePeer(nodeId: string, newLevel: TrustLevel, reason: string): Promise<BootstrapElevationAuditEntry | null>;
+    /**
+     * Operator-initiated reactivate. Used after an integrator-supplied
+     * health probe confirms a SUSPENDED peer is healthy, OR as an
+     * operator-override escape from EVICTED. Returns true on transition.
+     */
+    reactivatePeer(nodeId: string, correlationId?: string): Promise<boolean>;
+    getSession(sessionId: string): FederationSession | undefined;
+    getActiveSessions(): FederationSession[];
+    private establishSession;
+    private findSessionByNodeId;
+    private ensureInitialized;
+}
+//# sourceMappingURL=federation-coordinator.d.ts.map

package/dist/application/inbound-dispatcher.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Inbound message dispatcher (ADR-109).
+ *
+ * The federation plugin's `transport.listen()` accepts inbound bytes
+ * but until this module landed, the bytes had no consumer — they sat
+ * in the transport's per-address message queue with no one polling.
+ *
+ * `dispatchInbound()` is what the plugin registers as the
+ * transport.onMessage handler. For each received message it:
+ *
+ *   1. Resolves the sender via `sourceNodeId` in metadata
+ *   2. Verifies the peer is in the discovery registry (unknown → reject)
+ *   3. Verifies peer is ACTIVE (SUSPENDED/EVICTED → reject defense-in-depth)
+ *   4. Audits success or rejection
+ *   5. Emits a typed event on the eventBus for the integrator to handle
+ *
+ * Anti-coupling: dispatcher does NOT actually execute inbound tasks.
+ * That's the integrator's job. The dispatcher's contract is "deliver
+ * an envelope to the integrator's handler IFF it passes safety gates."
+ */
+import type { AgentMessage } from '../transport/midstream-aware-loader.js';
+import type { DiscoveryService } from '../domain/services/discovery-service.js';
+import type { AuditService } from '../domain/services/audit-service.js';
+import type { FederationNode } from '../domain/entities/federation-node.js';
+export declare const FEDERATION_INBOUND_EVENT_PREFIX = "federation:inbound";
+/** Reasons we reject an inbound message — constant strings, no oracle leak. */
+export type InboundRejectionReason = 'PEER_UNKNOWN' | 'PEER_SUSPENDED' | 'PEER_EVICTED' | 'MISSING_METADATA' | 'INVALID_PAYLOAD' | 'INVALID_SIGNATURE' | 'LEGACY_SIGNATURE_TYPE_REJECTED' | 'AUTHORIZATION_DENIED' | 'AUTHORIZATION_ERROR';
+/**
+ * Verifier function for inbound envelopes. Given the canonical bytes of
+ * the message + the claimed signature + the peer's published public
+ * key, returns true iff the signature is valid. Plugin wires this with
+ * `@noble/ed25519`; tests inject a mock.
+ *
+ * Returning `null` means "no signature provided" — handled by the
+ * dispatcher as INVALID_SIGNATURE (defense: unsigned messages from
+ * known peers are still rejected).
+ */
+export type EnvelopeVerifier = (canonicalBytes: string, signatureHex: string | null, peerPublicKeyHex: string) => boolean;
+export declare const JCS_SIGNATURE_PROTOCOL: "ruflo-signature-jcs-v1";
+export type EnvelopeSignatureVersion = 'legacy-v1' | 'jcs-v1';
+export type EnvelopeSignatureMode = 'legacy' | 'prefer-jcs' | 'require-jcs';
+/**
+ * Updated peers advertise and negotiate recursively complete JCS signatures
+ * without operator configuration. Legacy mode remains explicit for low-risk
+ * heartbeat/status interoperability only.
+ */
+export declare const DEFAULT_ENVELOPE_SIGNATURE_MODE: EnvelopeSignatureMode;
+export type InboundAuthorizationMode = 'legacy' | 'observe' | 'enforce';
+export declare function isLegacyEnvelopeTypeAllowed(messageType: string): boolean;
+export interface InboundAuthorizationRequest {
+    readonly address: string;
+    readonly sourceNodeId: string;
+    readonly messageType: string;
+    readonly message: AgentMessage;
+    readonly peer: FederationNode;
+    readonly signatureVersion: EnvelopeSignatureVersion;
+    readonly messageSizeBytes: number;
+}
+export interface InboundAuthorizationDecision {
+    readonly allowed: boolean;
+    readonly reason?: string;
+}
+export type InboundAuthorizationEvaluator = (request: InboundAuthorizationRequest) => InboundAuthorizationDecision | Promise<InboundAuthorizationDecision>;
+/** Dispatch dependencies (kept narrow for testability). */
+export interface InboundDispatchDeps {
+    readonly discovery: Pick<DiscoveryService, 'getPeer'>;
+    readonly audit: Pick<AuditService, 'log'>;
+    readonly eventBus: {
+        emit: (event: string, data: unknown) => void;
+    };
+    readonly logger: {
+        debug: (m: string) => void;
+        warn: (m: string) => void;
+    };
+    /**
+     * Optional Ed25519 envelope verifier. When PROVIDED, every accepted
+     * message MUST pass verification — `null` signature or false-returning
+     * verifier rejects the message as INVALID_SIGNATURE.
+     *
+     * When OMITTED, the dispatcher operates in legacy "trust the metadata"
+     * mode (backward compat for tests that inject minimal deps). Production
+     * MUST inject this — see the plugin.ts wiring.
+    */
+    readonly verifyEnvelope?: EnvelopeVerifier;
+    /** Defaults to both versions; enforce-only deployments pass `['jcs-v1']`. */
+    readonly acceptedSignatureVersions?: readonly EnvelopeSignatureVersion[];
+    /** Compatibility mode defaults to legacy; enforce is fail-closed. */
+    readonly authorizationMode?: InboundAuthorizationMode;
+    /** Injected policy decision point. It is always called before event emission. */
+    readonly authorizeInbound?: InboundAuthorizationEvaluator;
+}
+export declare function selectEnvelopeSignatureVersion(mode: EnvelopeSignatureMode, peerProtocols: readonly string[], messageType?: string): EnvelopeSignatureVersion;
+export declare function canonicalizeEnvelopeForVerify(message: AgentMessage, requestedVersion?: EnvelopeSignatureVersion): string;
+/** Outcome reported to the caller (mostly for tests + observability). */
+export type InboundDispatchOutcome = {
+    readonly accepted: true;
+    readonly sourceNodeId: string;
+    readonly messageType: string;
+} | {
+    readonly accepted: false;
+    readonly reason: InboundRejectionReason;
+};
+/**
+ * Process one received message. Pure-ish: no side effects beyond audit
+ * + event emission, both injected.
+ *
+ * `address` is the wire-level remote (e.g. `192.168.1.42:54321`).
+ * `message.metadata.sourceNodeId` is the cryptographic identity claim.
+ * The two MAY differ (e.g. behind NAT) — we trust `sourceNodeId` for
+ * peer lookup since it's bound to the Ed25519 keypair.
+ */
+export declare function dispatchInbound(address: string, message: AgentMessage, deps: InboundDispatchDeps): Promise<InboundDispatchOutcome>;
+//# sourceMappingURL=inbound-dispatcher.d.ts.map

package/dist/application/policy-engine.d.ts

@@ -0,0 +1,42 @@
+import { TrustLevel } from '../domain/entities/trust-level.js';
+import { type PIIAction, type PIIDetection, type PIIPolicyConfig } from '../domain/services/pii-pipeline-service.js';
+import { type FederationMessageType } from '../domain/entities/federation-envelope.js';
+export type FederationClaimType = 'federation:discover' | 'federation:connect' | 'federation:read' | 'federation:write' | 'federation:admin' | 'federation:memory' | 'federation:spawn';
+export interface SecurityPolicy {
+    readonly maxMessageSizeBytes: number;
+    readonly maxMessagesPerMinute: number;
+    readonly allowedMessageTypes: readonly FederationMessageType[];
+    readonly requirePiiScan: boolean;
+    readonly requireAiDefenceScan: boolean;
+    readonly minTrustLevelForWrite: TrustLevel;
+    readonly minTrustLevelForMemory: TrustLevel;
+    readonly minTrustLevelForSpawn: TrustLevel;
+    readonly minTrustLevelForAdmin: TrustLevel;
+}
+export interface PolicyEvaluationResult {
+    readonly allowed: boolean;
+    readonly reason: string;
+    readonly requiredClaims: readonly FederationClaimType[];
+    readonly trustLevelSufficient: boolean;
+    readonly piiAction?: PIIAction;
+}
+export interface PolicyEngineDeps {
+    checkClaim: (claim: FederationClaimType) => boolean;
+}
+export declare class PolicyEngine {
+    private readonly deps;
+    private readonly securityPolicy;
+    private readonly piiPolicy;
+    private readonly rateLimitCounters;
+    constructor(deps: PolicyEngineDeps, securityPolicy?: Partial<SecurityPolicy>, piiPolicy?: PIIPolicyConfig);
+    evaluateMessage(messageType: FederationMessageType, trustLevel: TrustLevel, messageSizeBytes: number, sourceNodeId: string): PolicyEvaluationResult;
+    evaluatePiiDetection(detection: PIIDetection, trustLevel: TrustLevel): PIIAction;
+    evaluateTrustChange(currentLevel: TrustLevel, proposedLevel: TrustLevel): {
+        allowed: boolean;
+        requiresHumanApproval: boolean;
+        reason: string;
+    };
+    private checkRateLimit;
+    private getOperationForMessageType;
+}
+//# sourceMappingURL=policy-engine.d.ts.map

package/dist/application/policy-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAgB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACnI,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AAuED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsD;gBAGtF,IAAI,EAAE,gBAAgB,EACtB,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EACxC,SAAS,CAAC,EAAE,eAAe;IAc7B,eAAe,CACb,WAAW,EAAE,qBAAqB,EAClC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,sBAAsB;IAsEzB,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAWhF,mBAAmB,CACjB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,UAAU,GACxB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgCvE,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,0BAA0B;CAyBnC"}
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAgB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACnI,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AAuFD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsD;gBAGtF,IAAI,EAAE,gBAAgB,EACtB,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EACxC,SAAS,CAAC,EAAE,eAAe;IAc7B,eAAe,CACb,WAAW,EAAE,qBAAqB,EAClC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,sBAAsB;IAsEzB,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAWhF,mBAAmB,CACjB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,UAAU,GACxB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgCvE,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,0BAA0B;CA4BnC"}

package/dist/application/policy-engine.js

@@ -12,6 +12,7 @@ const DEFAULT_SECURITY_POLICY = {
     minTrustLevelForWrite: TrustLevel.ATTESTED,
     minTrustLevelForMemory: TrustLevel.TRUSTED,
     minTrustLevelForSpawn: TrustLevel.PRIVILEGED,
+    minTrustLevelForAdmin: TrustLevel.TRUSTED,
 };
 const POLICY_CATEGORY_FOR_MESSAGE_TYPE = {
     'task-assignment': 'write',
@@ -20,7 +21,9 @@ const POLICY_CATEGORY_FOR_MESSAGE_TYPE = {
     'memory-query': 'memory',
     'memory-response': 'memory',
     'agent-spawn': 'spawn',
-    'agent-handoff': 'spawn',
+    'agent-handoff': 'write+spawn',
+    'trust-change': 'admin',
+    'topology-change': 'admin',
 };
 function policyThresholdForCategory(policy, category) {
     switch (category) {
@@ -30,6 +33,10 @@ function policyThresholdForCategory(policy, category) {
             return policy.minTrustLevelForMemory;
         case 'spawn':
             return policy.minTrustLevelForSpawn;
+        case 'admin':
+            return policy.minTrustLevelForAdmin;
+        case 'write+spawn':
+            return Math.max(policy.minTrustLevelForWrite, policy.minTrustLevelForSpawn);
     }
 }
 const CLAIMS_FOR_MESSAGE_TYPE = {
@@ -197,6 +204,9 @@ export class PolicyEngine {
                 return 'send';
             case 'agent-spawn':
                 return 'remote-spawn';
+            case 'trust-change':
+            case 'topology-change':
+                return 'admin-change';
             case 'status-broadcast':
                 return 'status';
             case 'heartbeat':

package/dist/application/policy-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAgCnF,MAAM,uBAAuB,GAAmB;IAC9C,mBAAmB,EAAE,SAAS;IAC9B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE;QACnB,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;QACpD,eAAe,EAAE,kBAAkB,EAAE,WAAW;QAChD,cAAc,EAAE,iBAAiB,EAAE,aAAa;KACjD;IACD,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,UAAU,CAAC,QAAQ;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO;IAC1C,qBAAqB,EAAE,UAAU,CAAC,UAAU;CAC7C,CAAC;AAQF,MAAM,gCAAgC,GAAgE;IACpG,iBAAiB,EAAE,OAAO;IAC1B,eAAe,EAAE,OAAO;IACxB,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,QAAQ;IACxB,iBAAiB,EAAE,QAAQ;IAC3B,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,SAAS,0BAA0B,CAAC,MAAsB,EAAE,QAA6B;IACvF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,sBAAsB,CAAC;QACvC,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;IACxC,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAyD;IACpF,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACxD,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAC3D,eAAe,EAAE,CAAC,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,CAAC,kBAAkB,CAAC;IACpC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;IAC5C,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;IAC3C,qDAAqD;IACrD,4EAA4E;IAC5E,+CAA+C;IAC/C,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CAC1D,CAAC;AAMF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,cAAc,CAAiB;IAC/B,SAAS,CAAkB;IAC3B,iBAAiB,CAAsD;IAExF,YACE,IAAsB,EACtB,cAAwC,EACxC,SAA2B;QAE3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAAc,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI;YAC5B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,eAAe,CACb,WAAkC,EAClC,UAAsB,EACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,WAAW,qCAAqC;gBACzE,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,gBAAgB,oBAAoB,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE;gBACrG,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC,YAAY,EAAE;gBACtD,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,gCAAgC,gBAAgB,GAAG;gBACpF,cAAc;gBACd,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YACtF,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,eAAe,UAAU,6BAA6B,aAAa,QAAQ,cAAc,aAAa;oBAC9G,cAAc;oBACd,oBAAoB,EAAE,KAAK;iBAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,cAAc;YACd,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,SAAuB,EAAE,UAAsB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,mBAAmB,CACjB,YAAwB,EACxB,aAAyB;QAEzB,IAAI,aAAa,GAAG,YAAY,IAAI,aAAa,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,MAAM,EAAE,+EAA+E;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,sBAAsB,YAAY,OAAO,aAAa,UAAU;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,wBAAwB,YAAY,OAAO,aAAa,UAAU;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,qBAAqB,EAAE,KAAK;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IACnE,CAAC;IAEO,0BAA0B,CAAC,WAAkC;QACnE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,gBAAgB,CAAC;YAC1B,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,iBAAiB;gBACpB,OAAO,MAAM,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,cAAc,CAAC;YACxB,KAAK,kBAAkB;gBACrB,OAAO,QAAQ,CAAC;YAClB,KAAK,WAAW,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB,CAAC;YACxB,KAAK,mBAAmB;gBACtB,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAiCnF,MAAM,uBAAuB,GAAmB;IAC9C,mBAAmB,EAAE,SAAS;IAC9B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE;QACnB,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;QACpD,eAAe,EAAE,kBAAkB,EAAE,WAAW;QAChD,cAAc,EAAE,iBAAiB,EAAE,aAAa;KACjD;IACD,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,UAAU,CAAC,QAAQ;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO;IAC1C,qBAAqB,EAAE,UAAU,CAAC,UAAU;IAC5C,qBAAqB,EAAE,UAAU,CAAC,OAAO;CAC1C,CAAC;AAcF,MAAM,gCAAgC,GAAgE;IACpG,iBAAiB,EAAE,OAAO;IAC1B,eAAe,EAAE,OAAO;IACxB,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,QAAQ;IACxB,iBAAiB,EAAE,QAAQ;IAC3B,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,aAAa;IAC9B,cAAc,EAAE,OAAO;IACvB,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAEF,SAAS,0BAA0B,CAAC,MAAsB,EAAE,QAA6B;IACvF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,sBAAsB,CAAC;QACvC,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;QACtC,KAAK,aAAa;YAChB,OAAO,IAAI,CAAC,GAAG,CACb,MAAM,CAAC,qBAAqB,EAC5B,MAAM,CAAC,qBAAqB,CACf,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAyD;IACpF,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACxD,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAC3D,eAAe,EAAE,CAAC,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,CAAC,kBAAkB,CAAC;IACpC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;IAC5C,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;IAC3C,qDAAqD;IACrD,4EAA4E;IAC5E,+CAA+C;IAC/C,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CAC1D,CAAC;AAMF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,cAAc,CAAiB;IAC/B,SAAS,CAAkB;IAC3B,iBAAiB,CAAsD;IAExF,YACE,IAAsB,EACtB,cAAwC,EACxC,SAA2B;QAE3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAAc,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI;YAC5B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,eAAe,CACb,WAAkC,EAClC,UAAsB,EACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,WAAW,qCAAqC;gBACzE,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,gBAAgB,oBAAoB,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE;gBACrG,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC,YAAY,EAAE;gBACtD,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,gCAAgC,gBAAgB,GAAG;gBACpF,cAAc;gBACd,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YACtF,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,eAAe,UAAU,6BAA6B,aAAa,QAAQ,cAAc,aAAa;oBAC9G,cAAc;oBACd,oBAAoB,EAAE,KAAK;iBAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,cAAc;YACd,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,SAAuB,EAAE,UAAsB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,mBAAmB,CACjB,YAAwB,EACxB,aAAyB;QAEzB,IAAI,aAAa,GAAG,YAAY,IAAI,aAAa,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,MAAM,EAAE,+EAA+E;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,sBAAsB,YAAY,OAAO,aAAa,UAAU;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,wBAAwB,YAAY,OAAO,aAAa,UAAU;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,qBAAqB,EAAE,KAAK;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IACnE,CAAC;IAEO,0BAA0B,CAAC,WAAkC;QACnE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,gBAAgB,CAAC;YAC1B,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,iBAAiB;gBACpB,OAAO,MAAM,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,cAAc,CAAC;YACxB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,cAAc,CAAC;YACxB,KAAK,kBAAkB;gBACrB,OAAO,QAAQ,CAAC;YAClB,KAAK,WAAW,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB,CAAC;YACxB,KAAK,mBAAmB;gBACtB,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/dist/application/spend-reporter.d.ts

@@ -0,0 +1,150 @@
+/**
+ * Federation spend-reporting interface (ADR-097 Phase 3 upstream).
+ *
+ * The federation layer doesn't own model pricing — it can't know how much
+ * a downstream agent's work cost until the integrator tells it. So the
+ * coordinator exposes a `reportSpend()` method that callers invoke after
+ * their downstream completes, and that method fans out to:
+ *
+ *   1. The injected SpendReporter (if any) — typically wires to the
+ *      cost-tracker bus / `federation-spend` memory namespace
+ *   2. The injected FederationBreakerService (if any) — its in-memory
+ *      buffer becomes a transparent cache when the cost-tracker
+ *      subscriber lands
+ *
+ * Both deps are constructor-optional. A coordinator with neither still
+ * accepts reportSpend() calls (silent no-op) so callers don't need to
+ * branch on which integrations are wired.
+ *
+ * Event shape matches the consumer contract pinned by
+ * plugins/ruflo-cost-tracker/scripts/federation.mjs:
+ *
+ *   { peerId, taskId, tokensUsed, usdSpent, ts }
+ *
+ * Storage layout (consumer convention): namespace `federation-spend`,
+ * key `fed-spend-<peerId>-<ts>`. The interface is storage-agnostic; the
+ * default in-memory reporter included here is for tests + a reference
+ * implementation. Production integrators write a thin adapter that
+ * persists to ruflo memory / Redis / Datadog / their accounting system.
+ */
+/** A single per-send cost report from the integrator. */
+export interface FederationSpendEvent {
+    /** Peer this cost was incurred against. */
+    readonly peerId: string;
+    /** Optional task correlation key — not all callers will have one. */
+    readonly taskId?: string;
+    /** Tokens consumed (input + output). Negative values clamped to 0 by sink. */
+    readonly tokensUsed: number;
+    /** USD spent. Negative values clamped to 0 by sink. */
+    readonly usdSpent: number;
+    /** ISO 8601 timestamp. Caller-supplied for testability; auto-filled if omitted by reportSpend. */
+    readonly ts: string;
+    /** Whether the underlying send succeeded (drives breaker failure-ratio). */
+    readonly success: boolean;
+}
+/**
+ * Strategy interface the coordinator calls when reportSpend() fires.
+ * Integrators implement this to push the event to whatever backend they
+ * want — cost-tracker bus, Datadog, accounting DB, etc.
+ *
+ * Implementations must be tolerant: dropping or persisting later is
+ * acceptable, but throwing here will surface to the integrator's caller.
+ * Buffer and retry inside the implementation.
+ */
+export interface SpendReporter {
+    reportSpend(event: FederationSpendEvent): Promise<void>;
+}
+/**
+ * In-memory reporter for tests + a reference implementation. Production
+ * code should wire a real SpendReporter that persists to durable storage.
+ *
+ * Buffer is unbounded — fine for tests, NOT fine for long-running
+ * production. The cost-tracker consumer reads from durable storage, not
+ * from this buffer.
+ */
+export declare class InMemorySpendReporter implements SpendReporter {
+    private readonly buffer;
+    reportSpend(event: FederationSpendEvent): Promise<void>;
+    /** Snapshot of all reported events (test inspection). */
+    getEvents(): readonly FederationSpendEvent[];
+    /** Drop everything (test cleanup). */
+    clear(): void;
+}
+/**
+ * Minimal memory-backend interface (ADR-110). The integrator wires this
+ * to whatever store satisfies their durability/consistency needs:
+ * ruflo memory, Redis, DynamoDB, file-backed JSON, etc. The federation
+ * plugin doesn't import any specific memory client — pluggable by
+ * design.
+ */
+export interface MemoryStore {
+    /** Persist a value under (namespace, key). Optional TTL in seconds. */
+    store(args: {
+        namespace: string;
+        key: string;
+        value: string;
+        ttl?: number;
+    }): Promise<void>;
+}
+/** Configuration for `MemorySpendReporter`. See ADR-110. */
+export interface MemorySpendReporterConfig {
+    /** Memory store impl. Required. */
+    readonly memoryStore: MemoryStore;
+    /** Namespace per the cost-tracker consumer contract. Default: `federation-spend`. */
+    readonly namespace?: string;
+    /** Optional TTL in seconds. Default: 7 days. Cost-tracker rolling windows are 1h/24h/7d, so anything older is irrelevant. */
+    readonly ttlSeconds?: number;
+}
+/** Default namespace per cost-tracker's `plugins/ruflo-cost-tracker/scripts/federation.mjs`. */
+export declare const DEFAULT_FEDERATION_SPEND_NAMESPACE = "federation-spend";
+/** Default TTL: 7 days, matching cost-tracker's longest rolling window. */
+export declare const DEFAULT_FEDERATION_SPEND_TTL_SECONDS: number;
+/**
+ * Production reporter (ADR-110) that satisfies the cost-tracker
+ * consumer contract: writes to namespace `federation-spend`, key
+ * `fed-spend-<peerId>-<ts>`. The consumer
+ * (`plugins/ruflo-cost-tracker/scripts/federation.mjs`) `memory list`s
+ * the namespace, retrieves each key, and aggregates into rolling
+ * windows.
+ *
+ * Storage-agnostic: the integrator injects a `MemoryStore`
+ * implementation. Common wirings:
+ *
+ *   // ruflo memory MCP
+ *   new MemorySpendReporter({
+ *     memoryStore: {
+ *       store: async (a) => mcpClient.call('memory_store', a),
+ *     },
+ *   });
+ *
+ *   // ruflo memory CLI shell-out
+ *   new MemorySpendReporter({
+ *     memoryStore: {
+ *       store: async ({namespace, key, value, ttl}) => {
+ *         await execFile('npx', ['ruflo', 'memory', 'store',
+ *           '--namespace', namespace, '--key', key, '--value', value]);
+ *       },
+ *     },
+ *   });
+ *
+ * Errors from the memory backend BUBBLE UP — the reporter does not
+ * retry/swallow. Wrap with the integrator's preferred retry strategy
+ * if needed.
+ *
+ * Negative `tokensUsed` / `usdSpent` are persisted as-is. Clamping is
+ * the breaker's responsibility (see federation-breaker-service.ts);
+ * the audit/spend log is an honest mirror of what the integrator
+ * reported.
+ */
+export declare class MemorySpendReporter implements SpendReporter {
+    private readonly memoryStore;
+    private readonly namespace;
+    private readonly ttlSeconds;
+    constructor(config: MemorySpendReporterConfig);
+    reportSpend(event: FederationSpendEvent): Promise<void>;
+    /** Read configured namespace (for the doctor/debug surface). */
+    getNamespace(): string;
+    /** Read configured TTL in seconds. */
+    getTtlSeconds(): number;
+}
+//# sourceMappingURL=spend-reporter.d.ts.map