@compilr-dev/sdk 0.17.14 → 0.17.15

package/dist/team/role-aliases.js

@@ -31,8 +31,10 @@ export const ROLE_NAME_ALIASES = {
     developer: 'dev',
     architect: 'arch',
     'technical-writer': 'docs',
-    security: 'reviewer',
-    designer: 'default',
+    // 'security' is now a canonical role (Security Auditor) — passthrough handles it.
+    designer: 'visual',
+    'art-director': 'visual',
+    'visual-director': 'visual',
     'character-dev': 'writer',
     'content-designer': 'writer',
     plotter: 'writer',

package/dist/team/tool-config.d.ts

@@ -7,7 +7,7 @@
  * Tool names are defined as string constants below. These cover all tools
  * from @compilr-dev/agents, @compilr-dev/agents-coding, and platform tools.
  */
-export type ToolProfile = 'full' | 'read-only' | 'developer' | 'security' | 'docs' | 'devops' | 'qa' | 'architect' | 'planner' | 'analyst' | 'custom';
+export type ToolProfile = 'full' | 'read-only' | 'developer' | 'security' | 'docs' | 'devops' | 'qa' | 'architect' | 'planner' | 'analyst' | 'designer' | 'custom';
 export interface ToolConfig {
     /** Tool profile (predefined set) */
     profile: ToolProfile;

package/dist/team/tool-config.js

@@ -670,6 +670,25 @@ export const TOOL_PROFILES = {
         'web',
         'factory_models',
     ],
+    // Designer - visual canvas authoring (canvas/artifacts/documents), reads code
+    // but does not edit source files.
+    designer: [
+        'file_read',
+        'interaction',
+        'handoff',
+        'consult',
+        'guide',
+        'subagents',
+        'meta',
+        'project',
+        'search',
+        'documents',
+        'canvas',
+        'artifacts',
+        'anchors',
+        'web',
+        'factory_models',
+    ],
     // Custom - user selected (groups specified in customGroups)
     custom: [],
 };
@@ -724,6 +743,11 @@ export const PROFILE_INFO = {
         description: 'Requirements gathering - user stories, documents, business analysis',
         isReadOnly: true,
     },
+    designer: {
+        label: 'Visual Designer',
+        description: 'Create visual canvases, infographics, and decks - reads code, no source edits',
+        isReadOnly: true,
+    },
     custom: {
         label: 'Custom',
         description: 'Select tool groups manually',

package/dist/team/types.d.ts

@@ -5,7 +5,7 @@
  */
 import type { AgentConfig, AgentState } from '@compilr-dev/agents';
 import type { ModelTier } from '../models/index.js';
-export type ToolProfile = 'full' | 'read-only' | 'developer' | 'security' | 'docs' | 'devops' | 'qa' | 'architect' | 'planner' | 'analyst' | 'custom';
+export type ToolProfile = 'full' | 'read-only' | 'developer' | 'security' | 'docs' | 'devops' | 'qa' | 'architect' | 'planner' | 'analyst' | 'designer' | 'custom';
 /**
  * Information about a background agent session.
  * Used by /bg overlay to display status.
@@ -29,11 +29,11 @@ export interface BackgroundSessionInfo {
 /**
  * Mascot expressions for visual differentiation of agents
  */
-export type MascotExpression = '[•_•]' | '[◈_◈]' | '[▣_▣]' | '[◉_◉]' | '[▲_▲]' | '[◆_◆]' | '[○_○]' | '[◇_◇]' | '[◎_◎]' | '[⊘_⊘]' | '[✎_✎]' | '[◒_◒]' | '[◔_◔]' | '[◓_◓]' | '[◕_◕]' | '[□_□]';
+export type MascotExpression = '[•_•]' | '[◈_◈]' | '[▣_▣]' | '[◉_◉]' | '[▲_▲]' | '[◆_◆]' | '[○_○]' | '[◇_◇]' | '[◎_◎]' | '[⊘_⊘]' | '[✎_✎]' | '[◒_◒]' | '[◔_◔]' | '[◓_◓]' | '[◕_◕]' | '[◐_◐]' | '[⊗_⊗]' | '[□_□]';
 /**
  * Predefined agent roles with default configurations
  */
-export type AgentRole = 'default' | 'pm' | 'arch' | 'qa' | 'dev' | 'ops' | 'docs' | 'ba' | 'researcher' | 'reviewer' | 'editor' | 'writer' | 'analyst' | 'strategist' | 'instructor' | 'custom';
+export type AgentRole = 'default' | 'pm' | 'arch' | 'qa' | 'dev' | 'ops' | 'docs' | 'ba' | 'researcher' | 'reviewer' | 'editor' | 'writer' | 'analyst' | 'strategist' | 'instructor' | 'visual' | 'security' | 'custom';
 /**
  * Role groups for UI display (Workshop, team overlay).
  * Groups roles by domain — used for visual categorization.
@@ -42,7 +42,7 @@ export declare const ROLE_GROUPS: Record<string, AgentRole[]>;
 /**
  * List of predefined role IDs (for validation against custom agent IDs)
  */
-export declare const PREDEFINED_ROLE_IDS: readonly ["default", "pm", "arch", "qa", "dev", "ops", "docs", "ba", "researcher", "reviewer", "editor", "writer", "analyst", "strategist", "instructor"];
+export declare const PREDEFINED_ROLE_IDS: readonly ["default", "pm", "arch", "qa", "dev", "ops", "docs", "ba", "researcher", "reviewer", "editor", "writer", "analyst", "strategist", "instructor", "visual", "security"];
 /**
  * Role metadata for predefined roles
  */

package/dist/team/types.js

@@ -8,8 +8,9 @@
  * Groups roles by domain — used for visual categorization.
  */
 export const ROLE_GROUPS = {
-    Software: ['dev', 'arch', 'qa', 'pm', 'ops'],
+    Software: ['dev', 'arch', 'qa', 'pm', 'ops', 'security'],
     'Writing & Analysis': ['writer', 'editor', 'reviewer', 'researcher', 'analyst', 'docs', 'ba'],
+    Design: ['visual'],
     'Business & Education': ['strategist', 'instructor'],
 };
 /**
@@ -31,6 +32,8 @@ export const PREDEFINED_ROLE_IDS = [
     'analyst',
     'strategist',
     'instructor',
+    'visual',
+    'security',
 ];
 /**
  * Role expertise keywords for team awareness
@@ -70,6 +73,8 @@ export const ROLE_EXPERTISE = {
     analyst: ['market research', 'data analysis', 'competitive intelligence', 'trends'],
     strategist: ['business strategy', 'vision', 'go-to-market', 'planning'],
     instructor: ['curriculum design', 'lesson planning', 'assessment', 'pedagogy'],
+    visual: ['infographics', 'carousels', 'boards', 'data-viz', 'visual hierarchy'],
+    security: ['security review', 'OWASP', 'vulnerabilities', 'dependency risk', 'threat modeling'],
     custom: [], // User-defined
 };
 /**
@@ -901,6 +906,51 @@ You are the **Instructor** in this multi-agent team. You specialize in education
         defaultToolProfile: 'docs', // Read + write educational content
         defaultModelTier: 'balanced',
     },
+    visual: {
+        displayName: 'Visual Director',
+        mascot: '[◐_◐]',
+        description: 'Visual canvases — infographics, carousels, boards',
+        defaultToolProfile: 'designer',
+        defaultModelTier: 'balanced',
+        defaultSystemPromptAddition: `# ROLE: VISUAL DIRECTOR
+
+You are the **Visual Director**. Your PRIMARY deliverable is a **visual canvas**, not prose.
+
+## How you work
+- When a request can be answered visually — a stat, a comparison, a process, an announcement, a summary, a pitch, a layout — you produce a CANVAS, not a text reply.
+- Pick the type deliberately: **infographic** (one composition), **carousel** (a sequence / deck), **board** (spatial mind-map / UI sketch). Then follow the matching craft skill (infographic / carousel / board) for the design rules.
+- Author with \`canvas_write\` / \`canvas_edit\` incrementally (small calls). Theme with \`var(--canvas-*)\`; set an explicit \`var(--canvas-bg)\` (except boards — keep those transparent); add 2–4 bound Tweaks.
+- You MAY add a one-line framing note, but the ARTIFACT is the canvas.
+
+## Collaboration
+- Take copy, data, and structure from the writer / strategist / researcher and turn it into visuals. You are the team's eyes: turn text into something worth looking at.
+
+## Guardrail
+- Canvas is your DEFAULT, not your cage. If the user explicitly asks for text, a document, or prose, honor that — don't force a canvas where words are wanted.`,
+    },
+    security: {
+        displayName: 'Security Auditor',
+        mascot: '[⊗_⊗]',
+        description: 'Security review — vulnerabilities, dependencies, unsafe patterns',
+        defaultToolProfile: 'security',
+        defaultModelTier: 'balanced',
+        defaultSystemPromptAddition: `# ROLE: SECURITY AUDITOR
+
+You are the **Security Auditor**. You review code, config, and dependencies for vulnerabilities and unsafe patterns — you do NOT ship features or edit code.
+
+## Focus
+- OWASP Top 10: injection, broken authn/authz, secrets in code, SSRF, path traversal, unsafe deserialization, insecure defaults.
+- Dependencies: known-vuln packages, supply-chain risk, over-broad permissions.
+- Input validation, output encoding, least privilege, safe defaults.
+
+## How you work
+- READ code / config / dependencies (you have read + search + dependency tools; you have NO edit tools — that is intentional).
+- Use the \`security-review\` / \`code-review\` skills for structured passes.
+- Report findings with **SEVERITY**, \`file:line\`, and a concrete fix. Rank by exploitability × impact; surface the top risks first. Hand off remediation to the developer.
+
+## Boundary
+- Advisory only — you flag and recommend; you do not apply the fix.`,
+    },
     custom: {
         displayName: 'Custom Agent',
         mascot: '[□_□]',
@@ -986,4 +1036,14 @@ export const ROLE_COPY = {
         bestFor: "you're teaching something and need it structured for learners.",
         pairsWith: ['reviewer', 'writer'],
     },
+    visual: {
+        tagline: 'Turns ideas and copy into visual canvases — infographics, decks, boards.',
+        bestFor: 'you want something SHOWN, not written — a one-pager, a carousel, a mind-map.',
+        pairsWith: ['writer', 'strategist'],
+    },
+    security: {
+        tagline: 'Audits code and dependencies for vulnerabilities — advisory, no edits.',
+        bestFor: 'you want a security pass — OWASP risks, dependency vulns, unsafe patterns.',
+        pairsWith: ['dev', 'arch'],
+    },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compilr-dev/sdk",
-  "version": "0.17.14",
+  "version": "0.17.15",
   "description": "Universal agent runtime for building AI-powered applications",
   "type": "module",
   "main": "dist/index.js",