@evalops/maestro 0.10.50 → 0.10.53

package/dist/agent/oracle-policy-experiment.js

@@ -0,0 +1,59 @@
+import { createHash } from "node:crypto";
+import { ENV_VARS, getEnvString } from "../config/env-vars.js";
+const BUCKET_BYTES = 6;
+const BUCKET_SPACE = 2 ** (BUCKET_BYTES * 8);
+/** Deterministically assign a session to one immutable Oracle policy arm. */
+export function assignOraclePolicyExperiment(input) {
+    if (!Number.isFinite(input.allocation) ||
+        input.allocation < 0 ||
+        input.allocation > 1) {
+        throw new RangeError("Oracle experiment allocation must be between 0 and 1");
+    }
+    const digest = createHash("sha256")
+        .update(input.experimentId)
+        .update("\0")
+        .update(input.sessionId)
+        .digest();
+    const bucket = digest.readUIntBE(0, BUCKET_BYTES) / BUCKET_SPACE;
+    const arm = input.allocation === 1 ||
+        (input.allocation !== 0 && bucket < input.allocation)
+        ? "treatment"
+        : "control";
+    return Object.freeze({
+        experimentId: input.experimentId,
+        arm,
+        policyVersion: arm === "treatment" ? input.treatmentVersion : input.controlVersion,
+        bucket,
+    });
+}
+/** Resolve the optional host-configured experiment. Partial configs fail closed. */
+export function getOraclePolicyExperimentConfig() {
+    const experimentId = getEnvString(ENV_VARS.ORACLE_EXPERIMENT_ID);
+    if (!experimentId)
+        return undefined;
+    const allocationValue = getEnvString(ENV_VARS.ORACLE_EXPERIMENT_ALLOCATION);
+    const controlVersion = getEnvString(ENV_VARS.ORACLE_EXPERIMENT_CONTROL_VERSION);
+    const treatmentVersion = getEnvString(ENV_VARS.ORACLE_EXPERIMENT_TREATMENT_VERSION);
+    const allocation = Number(allocationValue);
+    if (!allocationValue ||
+        !Number.isFinite(allocation) ||
+        allocation < 0 ||
+        allocation > 1 ||
+        !controlVersion ||
+        !treatmentVersion) {
+        throw new Error("Oracle experiment requires allocation in 0..1 plus control and treatment versions");
+    }
+    return Object.freeze({
+        experimentId,
+        allocation,
+        controlVersion,
+        treatmentVersion,
+    });
+}
+export function assignConfiguredOraclePolicyExperiment(sessionId) {
+    const config = getOraclePolicyExperimentConfig();
+    return config
+        ? assignOraclePolicyExperiment({ ...config, sessionId })
+        : undefined;
+}
+//# sourceMappingURL=oracle-policy-experiment.js.map

package/dist/agent/oracle-policy-experiment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-policy-experiment.js","sourceRoot":"","sources":["../../src/agent/oracle-policy-experiment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AA2B/D,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,UAAU,4BAA4B,CAC3C,KAAkC;IAElC,IACC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAClC,KAAK,CAAC,UAAU,GAAG,CAAC;QACpB,KAAK,CAAC,UAAU,GAAG,CAAC,EACnB,CAAC;QACF,MAAM,IAAI,UAAU,CACnB,sDAAsD,CACtD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;SAC1B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;SACvB,MAAM,EAAE,CAAC;IACX,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,YAAY,CAAC;IACjE,MAAM,GAAG,GACR,KAAK,CAAC,UAAU,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;QACpD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,GAAG;QACH,aAAa,EACZ,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc;QACpE,MAAM;KACN,CAAC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,+BAA+B;IAG9C,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACjE,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,YAAY,CAClC,QAAQ,CAAC,iCAAiC,CAC1C,CAAC;IACF,MAAM,gBAAgB,GAAG,YAAY,CACpC,QAAQ,CAAC,mCAAmC,CAC5C,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3C,IACC,CAAC,eAAe;QAChB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,UAAU,GAAG,CAAC;QACd,UAAU,GAAG,CAAC;QACd,CAAC,cAAc;QACf,CAAC,gBAAgB,EAChB,CAAC;QACF,MAAM,IAAI,KAAK,CACd,mFAAmF,CACnF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,YAAY;QACZ,UAAU;QACV,cAAc;QACd,gBAAgB;KAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACrD,SAAiB;IAEjB,MAAM,MAAM,GAAG,+BAA+B,EAAE,CAAC;IACjD,OAAO,MAAM;QACZ,CAAC,CAAC,4BAA4B,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;AACd,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { ENV_VARS, getEnvString } from \"../config/env-vars.js\";\n\nexport type OraclePolicyExperimentArm = \"control\" | \"treatment\";\n\nexport interface OraclePolicyExperimentInput {\n\texperimentId: string;\n\tsessionId: string;\n\t/** Fraction of sessions assigned to treatment, in the inclusive range 0..1. */\n\tallocation: number;\n\tcontrolVersion: string;\n\ttreatmentVersion: string;\n}\n\nexport interface OraclePolicyExperimentAssignment {\n\treadonly experimentId: string;\n\treadonly arm: OraclePolicyExperimentArm;\n\treadonly policyVersion: string;\n\treadonly bucket: number;\n}\n\nexport interface OraclePolicyExperimentConfig {\n\texperimentId: string;\n\tallocation: number;\n\tcontrolVersion: string;\n\ttreatmentVersion: string;\n}\n\nconst BUCKET_BYTES = 6;\nconst BUCKET_SPACE = 2 ** (BUCKET_BYTES * 8);\n\n/** Deterministically assign a session to one immutable Oracle policy arm. */\nexport function assignOraclePolicyExperiment(\n\tinput: OraclePolicyExperimentInput,\n): OraclePolicyExperimentAssignment {\n\tif (\n\t\t!Number.isFinite(input.allocation) ||\n\t\tinput.allocation < 0 ||\n\t\tinput.allocation > 1\n\t) {\n\t\tthrow new RangeError(\n\t\t\t\"Oracle experiment allocation must be between 0 and 1\",\n\t\t);\n\t}\n\n\tconst digest = createHash(\"sha256\")\n\t\t.update(input.experimentId)\n\t\t.update(\"\\0\")\n\t\t.update(input.sessionId)\n\t\t.digest();\n\tconst bucket = digest.readUIntBE(0, BUCKET_BYTES) / BUCKET_SPACE;\n\tconst arm: OraclePolicyExperimentArm =\n\t\tinput.allocation === 1 ||\n\t\t(input.allocation !== 0 && bucket < input.allocation)\n\t\t\t? \"treatment\"\n\t\t\t: \"control\";\n\n\treturn Object.freeze({\n\t\texperimentId: input.experimentId,\n\t\tarm,\n\t\tpolicyVersion:\n\t\t\tarm === \"treatment\" ? input.treatmentVersion : input.controlVersion,\n\t\tbucket,\n\t});\n}\n\n/** Resolve the optional host-configured experiment. Partial configs fail closed. */\nexport function getOraclePolicyExperimentConfig():\n\t| OraclePolicyExperimentConfig\n\t| undefined {\n\tconst experimentId = getEnvString(ENV_VARS.ORACLE_EXPERIMENT_ID);\n\tif (!experimentId) return undefined;\n\tconst allocationValue = getEnvString(ENV_VARS.ORACLE_EXPERIMENT_ALLOCATION);\n\tconst controlVersion = getEnvString(\n\t\tENV_VARS.ORACLE_EXPERIMENT_CONTROL_VERSION,\n\t);\n\tconst treatmentVersion = getEnvString(\n\t\tENV_VARS.ORACLE_EXPERIMENT_TREATMENT_VERSION,\n\t);\n\tconst allocation = Number(allocationValue);\n\tif (\n\t\t!allocationValue ||\n\t\t!Number.isFinite(allocation) ||\n\t\tallocation < 0 ||\n\t\tallocation > 1 ||\n\t\t!controlVersion ||\n\t\t!treatmentVersion\n\t) {\n\t\tthrow new Error(\n\t\t\t\"Oracle experiment requires allocation in 0..1 plus control and treatment versions\",\n\t\t);\n\t}\n\treturn Object.freeze({\n\t\texperimentId,\n\t\tallocation,\n\t\tcontrolVersion,\n\t\ttreatmentVersion,\n\t});\n}\n\nexport function assignConfiguredOraclePolicyExperiment(\n\tsessionId: string,\n): OraclePolicyExperimentAssignment | undefined {\n\tconst config = getOraclePolicyExperimentConfig();\n\treturn config\n\t\t? assignOraclePolicyExperiment({ ...config, sessionId })\n\t\t: undefined;\n}\n"]}

package/dist/agent/oracle-policy-rollout.d.ts

@@ -0,0 +1,42 @@
+export type OraclePolicyRolloutStatus = "hold" | "promote" | "rollback";
+export interface OraclePolicyVerifiedAggregate {
+    policyVersion: string;
+    verifiedSamples: number;
+    successes: number;
+    averageCostUsd: number;
+    averageLatencyMs: number;
+    safetyViolations: number;
+}
+export interface OraclePolicyRolloutInput {
+    experimentId: string;
+    expectedControlVersion: string;
+    expectedTreatmentVersion: string;
+    control: OraclePolicyVerifiedAggregate;
+    treatment: OraclePolicyVerifiedAggregate;
+    minVerifiedSamples?: number;
+    maxSuccessRateRegression?: number;
+    maxCostRatio?: number;
+    maxLatencyRatio?: number;
+}
+export interface OraclePolicyRolloutMetrics {
+    controlSuccessRate: number;
+    treatmentSuccessRate: number;
+    successRateDelta: number;
+    costRatio: number;
+    latencyRatio: number;
+}
+export interface OraclePolicyRolloutDecision {
+    readonly experimentId: string;
+    readonly status: OraclePolicyRolloutStatus;
+    readonly sufficient: boolean;
+    readonly reasons: readonly string[];
+    readonly metrics: Readonly<OraclePolicyRolloutMetrics>;
+}
+export declare const DEFAULT_ORACLE_ROLLOUT_MIN_VERIFIED_SAMPLES = 20;
+export declare const DEFAULT_ORACLE_ROLLOUT_MAX_SUCCESS_RATE_REGRESSION = 0.05;
+/**
+ * Evaluate an Oracle policy experiment from verified outcome aggregates.
+ * This function is advisory: it never mutates or activates a production policy.
+ */
+export declare function evaluateOraclePolicyRollout(input: OraclePolicyRolloutInput): OraclePolicyRolloutDecision;
+//# sourceMappingURL=oracle-policy-rollout.d.ts.map

package/dist/agent/oracle-policy-rollout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-policy-rollout.d.ts","sourceRoot":"","sources":["../../src/agent/oracle-policy-rollout.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAExE,MAAM,WAAW,6BAA6B;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,6BAA6B,CAAC;IACvC,SAAS,EAAE,6BAA6B,CAAC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;CACvD;AAED,eAAO,MAAM,2CAA2C,KAAK,CAAC;AAC9D,eAAO,MAAM,kDAAkD,OAAO,CAAC;AAWvE;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,KAAK,EAAE,wBAAwB,GAC7B,2BAA2B,CAiG7B"}

package/dist/agent/oracle-policy-rollout.js

@@ -0,0 +1,80 @@
+export const DEFAULT_ORACLE_ROLLOUT_MIN_VERIFIED_SAMPLES = 20;
+export const DEFAULT_ORACLE_ROLLOUT_MAX_SUCCESS_RATE_REGRESSION = 0.05;
+function rate(numerator, denominator) {
+    return denominator > 0 ? numerator / denominator : 0;
+}
+function ratio(treatment, control) {
+    if (control > 0)
+        return treatment / control;
+    return treatment > 0 ? Number.POSITIVE_INFINITY : 1;
+}
+/**
+ * Evaluate an Oracle policy experiment from verified outcome aggregates.
+ * This function is advisory: it never mutates or activates a production policy.
+ */
+export function evaluateOraclePolicyRollout(input) {
+    const minVerifiedSamples = input.minVerifiedSamples ?? DEFAULT_ORACLE_ROLLOUT_MIN_VERIFIED_SAMPLES;
+    const maxSuccessRateRegression = input.maxSuccessRateRegression ??
+        DEFAULT_ORACLE_ROLLOUT_MAX_SUCCESS_RATE_REGRESSION;
+    const controlSuccessRate = rate(input.control.successes, input.control.verifiedSamples);
+    const treatmentSuccessRate = rate(input.treatment.successes, input.treatment.verifiedSamples);
+    const metrics = Object.freeze({
+        controlSuccessRate,
+        treatmentSuccessRate,
+        successRateDelta: treatmentSuccessRate - controlSuccessRate,
+        costRatio: ratio(input.treatment.averageCostUsd, input.control.averageCostUsd),
+        latencyRatio: ratio(input.treatment.averageLatencyMs, input.control.averageLatencyMs),
+    });
+    const finish = (status, sufficient, reasons) => Object.freeze({
+        experimentId: input.experimentId,
+        status,
+        sufficient,
+        reasons: Object.freeze(reasons),
+        metrics,
+    });
+    const hasInvalidThreshold = !Number.isInteger(minVerifiedSamples) ||
+        minVerifiedSamples < 1 ||
+        !Number.isFinite(maxSuccessRateRegression) ||
+        maxSuccessRateRegression < 0 ||
+        maxSuccessRateRegression > 1 ||
+        (input.maxCostRatio !== undefined &&
+            (!Number.isFinite(input.maxCostRatio) || input.maxCostRatio <= 0)) ||
+        (input.maxLatencyRatio !== undefined &&
+            (!Number.isFinite(input.maxLatencyRatio) || input.maxLatencyRatio <= 0));
+    if (hasInvalidThreshold) {
+        return finish("hold", false, ["invalid_thresholds"]);
+    }
+    if (input.control.policyVersion !== input.expectedControlVersion ||
+        input.treatment.policyVersion !== input.expectedTreatmentVersion) {
+        return finish("hold", false, ["mixed_policy_versions"]);
+    }
+    const safetyReasons = [];
+    if (input.control.safetyViolations > 0) {
+        safetyReasons.push("control_safety_violation");
+    }
+    if (input.treatment.safetyViolations > 0) {
+        safetyReasons.push("treatment_safety_violation");
+    }
+    if (safetyReasons.length > 0)
+        return finish("rollback", true, safetyReasons);
+    if (input.control.verifiedSamples < minVerifiedSamples ||
+        input.treatment.verifiedSamples < minVerifiedSamples) {
+        return finish("hold", false, ["insufficient_verified_samples"]);
+    }
+    const gateReasons = [];
+    if (metrics.successRateDelta < -maxSuccessRateRegression) {
+        gateReasons.push("success_rate_regression");
+    }
+    if (input.maxCostRatio !== undefined &&
+        metrics.costRatio > input.maxCostRatio) {
+        gateReasons.push("cost_ratio_exceeded");
+    }
+    if (input.maxLatencyRatio !== undefined &&
+        metrics.latencyRatio > input.maxLatencyRatio) {
+        gateReasons.push("latency_ratio_exceeded");
+    }
+    return gateReasons.length > 0
+        ? finish("hold", true, gateReasons)
+        : finish("promote", true, ["all_rollout_gates_passed"]);
+}
+//# sourceMappingURL=oracle-policy-rollout.js.map

package/dist/agent/oracle-policy-rollout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oracle-policy-rollout.js","sourceRoot":"","sources":["../../src/agent/oracle-policy-rollout.ts"],"names":[],"mappings":"AAuCA,MAAM,CAAC,MAAM,2CAA2C,GAAG,EAAE,CAAC;AAC9D,MAAM,CAAC,MAAM,kDAAkD,GAAG,IAAI,CAAC;AAEvE,SAAS,IAAI,CAAC,SAAiB,EAAE,WAAmB;IACnD,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB,EAAE,OAAe;IAChD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,GAAG,OAAO,CAAC;IAC5C,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAC1C,KAA+B;IAE/B,MAAM,kBAAkB,GACvB,KAAK,CAAC,kBAAkB,IAAI,2CAA2C,CAAC;IACzE,MAAM,wBAAwB,GAC7B,KAAK,CAAC,wBAAwB;QAC9B,kDAAkD,CAAC;IACpD,MAAM,kBAAkB,GAAG,IAAI,CAC9B,KAAK,CAAC,OAAO,CAAC,SAAS,EACvB,KAAK,CAAC,OAAO,CAAC,eAAe,CAC7B,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,CAChC,KAAK,CAAC,SAAS,CAAC,SAAS,EACzB,KAAK,CAAC,SAAS,CAAC,eAAe,CAC/B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB,EAAE,oBAAoB,GAAG,kBAAkB;QAC3D,SAAS,EAAE,KAAK,CACf,KAAK,CAAC,SAAS,CAAC,cAAc,EAC9B,KAAK,CAAC,OAAO,CAAC,cAAc,CAC5B;QACD,YAAY,EAAE,KAAK,CAClB,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAChC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAC9B;KACD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CACd,MAAiC,EACjC,UAAmB,EACnB,OAAiB,EACa,EAAE,CAChC,MAAM,CAAC,MAAM,CAAC;QACb,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM;QACN,UAAU;QACV,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO;KACP,CAAC,CAAC;IACJ,MAAM,mBAAmB,GACxB,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC;QACrC,kBAAkB,GAAG,CAAC;QACtB,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC1C,wBAAwB,GAAG,CAAC;QAC5B,wBAAwB,GAAG,CAAC;QAC5B,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;YACnC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,mBAAmB,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,IACC,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,sBAAsB;QAC5D,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,wBAAwB,EAC/D,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACxC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAC1C,aAAa,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAE7E,IACC,KAAK,CAAC,OAAO,CAAC,eAAe,GAAG,kBAAkB;QAClD,KAAK,CAAC,SAAS,CAAC,eAAe,GAAG,kBAAkB,EACnD,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,+BAA+B,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,gBAAgB,GAAG,CAAC,wBAAwB,EAAE,CAAC;QAC1D,WAAW,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IACC,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,EACrC,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IACC,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,eAAe,EAC3C,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["export type OraclePolicyRolloutStatus = \"hold\" | \"promote\" | \"rollback\";\n\nexport interface OraclePolicyVerifiedAggregate {\n\tpolicyVersion: string;\n\tverifiedSamples: number;\n\tsuccesses: number;\n\taverageCostUsd: number;\n\taverageLatencyMs: number;\n\tsafetyViolations: number;\n}\n\nexport interface OraclePolicyRolloutInput {\n\texperimentId: string;\n\texpectedControlVersion: string;\n\texpectedTreatmentVersion: string;\n\tcontrol: OraclePolicyVerifiedAggregate;\n\ttreatment: OraclePolicyVerifiedAggregate;\n\tminVerifiedSamples?: number;\n\tmaxSuccessRateRegression?: number;\n\tmaxCostRatio?: number;\n\tmaxLatencyRatio?: number;\n}\n\nexport interface OraclePolicyRolloutMetrics {\n\tcontrolSuccessRate: number;\n\ttreatmentSuccessRate: number;\n\tsuccessRateDelta: number;\n\tcostRatio: number;\n\tlatencyRatio: number;\n}\n\nexport interface OraclePolicyRolloutDecision {\n\treadonly experimentId: string;\n\treadonly status: OraclePolicyRolloutStatus;\n\treadonly sufficient: boolean;\n\treadonly reasons: readonly string[];\n\treadonly metrics: Readonly<OraclePolicyRolloutMetrics>;\n}\n\nexport const DEFAULT_ORACLE_ROLLOUT_MIN_VERIFIED_SAMPLES = 20;\nexport const DEFAULT_ORACLE_ROLLOUT_MAX_SUCCESS_RATE_REGRESSION = 0.05;\n\nfunction rate(numerator: number, denominator: number): number {\n\treturn denominator > 0 ? numerator / denominator : 0;\n}\n\nfunction ratio(treatment: number, control: number): number {\n\tif (control > 0) return treatment / control;\n\treturn treatment > 0 ? Number.POSITIVE_INFINITY : 1;\n}\n\n/**\n * Evaluate an Oracle policy experiment from verified outcome aggregates.\n * This function is advisory: it never mutates or activates a production policy.\n */\nexport function evaluateOraclePolicyRollout(\n\tinput: OraclePolicyRolloutInput,\n): OraclePolicyRolloutDecision {\n\tconst minVerifiedSamples =\n\t\tinput.minVerifiedSamples ?? DEFAULT_ORACLE_ROLLOUT_MIN_VERIFIED_SAMPLES;\n\tconst maxSuccessRateRegression =\n\t\tinput.maxSuccessRateRegression ??\n\t\tDEFAULT_ORACLE_ROLLOUT_MAX_SUCCESS_RATE_REGRESSION;\n\tconst controlSuccessRate = rate(\n\t\tinput.control.successes,\n\t\tinput.control.verifiedSamples,\n\t);\n\tconst treatmentSuccessRate = rate(\n\t\tinput.treatment.successes,\n\t\tinput.treatment.verifiedSamples,\n\t);\n\tconst metrics = Object.freeze({\n\t\tcontrolSuccessRate,\n\t\ttreatmentSuccessRate,\n\t\tsuccessRateDelta: treatmentSuccessRate - controlSuccessRate,\n\t\tcostRatio: ratio(\n\t\t\tinput.treatment.averageCostUsd,\n\t\t\tinput.control.averageCostUsd,\n\t\t),\n\t\tlatencyRatio: ratio(\n\t\t\tinput.treatment.averageLatencyMs,\n\t\t\tinput.control.averageLatencyMs,\n\t\t),\n\t});\n\n\tconst finish = (\n\t\tstatus: OraclePolicyRolloutStatus,\n\t\tsufficient: boolean,\n\t\treasons: string[],\n\t): OraclePolicyRolloutDecision =>\n\t\tObject.freeze({\n\t\t\texperimentId: input.experimentId,\n\t\t\tstatus,\n\t\t\tsufficient,\n\t\t\treasons: Object.freeze(reasons),\n\t\t\tmetrics,\n\t\t});\n\tconst hasInvalidThreshold =\n\t\t!Number.isInteger(minVerifiedSamples) ||\n\t\tminVerifiedSamples < 1 ||\n\t\t!Number.isFinite(maxSuccessRateRegression) ||\n\t\tmaxSuccessRateRegression < 0 ||\n\t\tmaxSuccessRateRegression > 1 ||\n\t\t(input.maxCostRatio !== undefined &&\n\t\t\t(!Number.isFinite(input.maxCostRatio) || input.maxCostRatio <= 0)) ||\n\t\t(input.maxLatencyRatio !== undefined &&\n\t\t\t(!Number.isFinite(input.maxLatencyRatio) || input.maxLatencyRatio <= 0));\n\tif (hasInvalidThreshold) {\n\t\treturn finish(\"hold\", false, [\"invalid_thresholds\"]);\n\t}\n\n\tif (\n\t\tinput.control.policyVersion !== input.expectedControlVersion ||\n\t\tinput.treatment.policyVersion !== input.expectedTreatmentVersion\n\t) {\n\t\treturn finish(\"hold\", false, [\"mixed_policy_versions\"]);\n\t}\n\n\tconst safetyReasons: string[] = [];\n\tif (input.control.safetyViolations > 0) {\n\t\tsafetyReasons.push(\"control_safety_violation\");\n\t}\n\tif (input.treatment.safetyViolations > 0) {\n\t\tsafetyReasons.push(\"treatment_safety_violation\");\n\t}\n\tif (safetyReasons.length > 0) return finish(\"rollback\", true, safetyReasons);\n\n\tif (\n\t\tinput.control.verifiedSamples < minVerifiedSamples ||\n\t\tinput.treatment.verifiedSamples < minVerifiedSamples\n\t) {\n\t\treturn finish(\"hold\", false, [\"insufficient_verified_samples\"]);\n\t}\n\n\tconst gateReasons: string[] = [];\n\tif (metrics.successRateDelta < -maxSuccessRateRegression) {\n\t\tgateReasons.push(\"success_rate_regression\");\n\t}\n\tif (\n\t\tinput.maxCostRatio !== undefined &&\n\t\tmetrics.costRatio > input.maxCostRatio\n\t) {\n\t\tgateReasons.push(\"cost_ratio_exceeded\");\n\t}\n\tif (\n\t\tinput.maxLatencyRatio !== undefined &&\n\t\tmetrics.latencyRatio > input.maxLatencyRatio\n\t) {\n\t\tgateReasons.push(\"latency_ratio_exceeded\");\n\t}\n\n\treturn gateReasons.length > 0\n\t\t? finish(\"hold\", true, gateReasons)\n\t\t: finish(\"promote\", true, [\"all_rollout_gates_passed\"]);\n}\n"]}

package/dist/agent/plugin-agent-api.d.ts

@@ -0,0 +1,13 @@
+import { type PluginAgentConfig, type PluginAgentHandle, type PluginAgentModeMetadata, type PluginAgentModeRegistration, type PluginAgentPolicy, type RegisteredPluginAgentMode } from "./plugin-agent-registry.js";
+export interface PluginAgentApi {
+    createAgent(config: PluginAgentConfig): PluginAgentHandle;
+    registerAgentMode(registration: PluginAgentModeRegistration): void;
+    getAgentMode(key: string): RegisteredPluginAgentMode | undefined;
+    listAgentModes(): readonly RegisteredPluginAgentMode[];
+}
+export declare function createPluginAgentApi(input: {
+    policy: PluginAgentPolicy;
+    metadata: readonly PluginAgentModeMetadata[];
+}): PluginAgentApi;
+export type { PluginAgentBudgets, PluginAgentConfig, PluginAgentHandle, PluginAgentModeMetadata, PluginAgentModeRegistration, PluginAgentPolicy, PluginAgentSandboxMode, RegisteredPluginAgentMode, } from "./plugin-agent-registry.js";
+//# sourceMappingURL=plugin-agent-api.d.ts.map

package/dist/agent/plugin-agent-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-agent-api.d.ts","sourceRoot":"","sources":["../../src/agent/plugin-agent-api.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EAEtB,KAAK,yBAAyB,EAC9B,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC9B,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;IAC1D,iBAAiB,CAAC,YAAY,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACnE,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAAC;IACjE,cAAc,IAAI,SAAS,yBAAyB,EAAE,CAAC;CACvD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC3C,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC7C,GAAG,cAAc,CAQjB;AAED,YAAY,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,GACzB,MAAM,4BAA4B,CAAC"}

package/dist/agent/plugin-agent-api.js

@@ -0,0 +1,11 @@
+import { PluginAgentRegistry, } from "./plugin-agent-registry.js";
+export function createPluginAgentApi(input) {
+    const registry = new PluginAgentRegistry(input.policy, input.metadata);
+    return Object.freeze({
+        createAgent: registry.createAgent.bind(registry),
+        registerAgentMode: registry.registerAgentMode.bind(registry),
+        getAgentMode: registry.getAgentMode.bind(registry),
+        listAgentModes: registry.listAgentModes.bind(registry),
+    });
+}
+//# sourceMappingURL=plugin-agent-api.js.map

package/dist/agent/plugin-agent-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-agent-api.js","sourceRoot":"","sources":["../../src/agent/plugin-agent-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,mBAAmB,GAEnB,MAAM,4BAA4B,CAAC;AASpC,MAAM,UAAU,oBAAoB,CAAC,KAGpC;IACA,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5D,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClD,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n\ttype PluginAgentConfig,\n\ttype PluginAgentHandle,\n\ttype PluginAgentModeMetadata,\n\ttype PluginAgentModeRegistration,\n\ttype PluginAgentPolicy,\n\tPluginAgentRegistry,\n\ttype RegisteredPluginAgentMode,\n} from \"./plugin-agent-registry.js\";\n\nexport interface PluginAgentApi {\n\tcreateAgent(config: PluginAgentConfig): PluginAgentHandle;\n\tregisterAgentMode(registration: PluginAgentModeRegistration): void;\n\tgetAgentMode(key: string): RegisteredPluginAgentMode | undefined;\n\tlistAgentModes(): readonly RegisteredPluginAgentMode[];\n}\n\nexport function createPluginAgentApi(input: {\n\tpolicy: PluginAgentPolicy;\n\tmetadata: readonly PluginAgentModeMetadata[];\n}): PluginAgentApi {\n\tconst registry = new PluginAgentRegistry(input.policy, input.metadata);\n\treturn Object.freeze({\n\t\tcreateAgent: registry.createAgent.bind(registry),\n\t\tregisterAgentMode: registry.registerAgentMode.bind(registry),\n\t\tgetAgentMode: registry.getAgentMode.bind(registry),\n\t\tlistAgentModes: registry.listAgentModes.bind(registry),\n\t});\n}\n\nexport type {\n\tPluginAgentBudgets,\n\tPluginAgentConfig,\n\tPluginAgentHandle,\n\tPluginAgentModeMetadata,\n\tPluginAgentModeRegistration,\n\tPluginAgentPolicy,\n\tPluginAgentSandboxMode,\n\tRegisteredPluginAgentMode,\n} from \"./plugin-agent-registry.js\";\n"]}

package/dist/agent/plugin-agent-loader.d.ts

@@ -0,0 +1,17 @@
+import type { ConfiguredPackageRuntimeOptions } from "../packages/runtime.js";
+import type { PluginAgentModeMetadata } from "./plugin-agent-registry.js";
+export interface LoadedPluginAgentModeMetadata extends PluginAgentModeMetadata {
+    readonly directory: string;
+    readonly scope: "user" | "project";
+}
+export interface PluginAgentMetadataLoadResult {
+    metadata: readonly LoadedPluginAgentModeMetadata[];
+    errors: readonly string[];
+}
+export declare function loadPluginAgentMetadataFromDirectories(input: {
+    user?: readonly string[];
+    project?: readonly string[];
+    initialErrors?: readonly string[];
+}): PluginAgentMetadataLoadResult;
+export declare function loadConfiguredPluginAgentMetadata(workspaceDir: string, options?: ConfiguredPackageRuntimeOptions): PluginAgentMetadataLoadResult;
+//# sourceMappingURL=plugin-agent-loader.d.ts.map

package/dist/agent/plugin-agent-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-agent-loader.d.ts","sourceRoot":"","sources":["../../src/agent/plugin-agent-loader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAM1E,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACnD,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAqDD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC7D,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,GAAG,6BAA6B,CAwBhC;AAED,wBAAgB,iCAAiC,CAChD,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,+BAAoC,GAC3C,6BAA6B,CAO/B"}

package/dist/agent/plugin-agent-loader.js

@@ -0,0 +1,81 @@
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { basename, isAbsolute, relative, resolve } from "node:path";
+import { loadConfiguredPackageResources } from "../packages/runtime.js";
+const AGENT_METADATA_FILE = "agent.json";
+const MAX_AGENT_METADATA_BYTES = 64 * 1024;
+const KEY_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function isContainedPath(parent, child) {
+    const path = relative(parent, child);
+    return path === "" || (!path.startsWith("..") && !isAbsolute(path));
+}
+function loadMetadataDirectory(directory, scope) {
+    const metadataPath = resolve(directory, AGENT_METADATA_FILE);
+    if (!existsSync(metadataPath) || !statSync(metadataPath).isFile()) {
+        throw new Error(`Missing ${AGENT_METADATA_FILE}`);
+    }
+    if (statSync(metadataPath).size > MAX_AGENT_METADATA_BYTES) {
+        throw new Error(`${AGENT_METADATA_FILE} exceeds 64 KiB`);
+    }
+    const value = JSON.parse(readFileSync(metadataPath, "utf8"));
+    if (typeof value.key !== "string" || !KEY_PATTERN.test(value.key)) {
+        throw new Error("Agent key must be lowercase kebab-case");
+    }
+    if (value.key !== basename(directory)) {
+        throw new Error("Agent key must match its directory name");
+    }
+    if (typeof value.label !== "string" || !value.label.trim()) {
+        throw new Error("Agent label must be non-empty");
+    }
+    if (typeof value.entry !== "string" || !value.entry.trim()) {
+        throw new Error("Agent entry must be non-empty");
+    }
+    const realDirectory = realpathSync(directory);
+    const entryPath = resolve(realDirectory, value.entry);
+    if (!existsSync(entryPath) || !statSync(entryPath).isFile()) {
+        throw new Error(`Agent entry does not exist: ${value.entry}`);
+    }
+    const realEntry = realpathSync(entryPath);
+    if (!isContainedPath(realDirectory, realEntry)) {
+        throw new Error("Agent entry must remain inside its resource directory");
+    }
+    return Object.freeze({
+        key: value.key,
+        label: value.label.trim(),
+        entry: realEntry,
+        directory: realDirectory,
+        scope,
+    });
+}
+export function loadPluginAgentMetadataFromDirectories(input) {
+    const metadata = [];
+    const errors = [...(input.initialErrors ?? [])];
+    const seen = new Set();
+    for (const scope of ["user", "project"]) {
+        for (const directory of input[scope] ?? []) {
+            try {
+                const loaded = loadMetadataDirectory(directory, scope);
+                if (seen.has(loaded.key)) {
+                    throw new Error(`Duplicate plugin agent key: ${loaded.key}`);
+                }
+                seen.add(loaded.key);
+                metadata.push(loaded);
+            }
+            catch (error) {
+                errors.push(`${directory}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    return Object.freeze({
+        metadata: Object.freeze(metadata),
+        errors: Object.freeze(errors),
+    });
+}
+export function loadConfiguredPluginAgentMetadata(workspaceDir, options = {}) {
+    const resources = loadConfiguredPackageResources(workspaceDir, options);
+    return loadPluginAgentMetadataFromDirectories({
+        user: resources.agents.user,
+        project: resources.agents.project,
+        initialErrors: resources.errors,
+    });
+}
+//# sourceMappingURL=plugin-agent-loader.js.map

package/dist/agent/plugin-agent-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-agent-loader.js","sourceRoot":"","sources":["../../src/agent/plugin-agent-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAGxE,MAAM,mBAAmB,GAAG,YAAY,CAAC;AACzC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAYjD,SAAS,eAAe,CAAC,MAAc,EAAE,KAAa;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,qBAAqB,CAC7B,SAAiB,EACjB,KAAyB;IAEzB,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,WAAW,mBAAmB,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,mBAAmB,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAI1D,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,aAAa;QACxB,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAItD;IACA,MAAM,QAAQ,GAAoC,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,SAAS,CAAU,EAAE,CAAC;QAClD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBACvD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CACV,GAAG,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzE,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAChD,YAAoB,EACpB,UAA2C,EAAE;IAE7C,MAAM,SAAS,GAAG,8BAA8B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,sCAAsC,CAAC;QAC7C,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;QAC3B,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO;QACjC,aAAa,EAAE,SAAS,CAAC,MAAM;KAC/B,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { existsSync, readFileSync, realpathSync, statSync } from \"node:fs\";\nimport { basename, isAbsolute, relative, resolve } from \"node:path\";\nimport type { ConfiguredPackageRuntimeOptions } from \"../packages/runtime.js\";\nimport { loadConfiguredPackageResources } from \"../packages/runtime.js\";\nimport type { PluginAgentModeMetadata } from \"./plugin-agent-registry.js\";\n\nconst AGENT_METADATA_FILE = \"agent.json\";\nconst MAX_AGENT_METADATA_BYTES = 64 * 1024;\nconst KEY_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n\nexport interface LoadedPluginAgentModeMetadata extends PluginAgentModeMetadata {\n\treadonly directory: string;\n\treadonly scope: \"user\" | \"project\";\n}\n\nexport interface PluginAgentMetadataLoadResult {\n\tmetadata: readonly LoadedPluginAgentModeMetadata[];\n\terrors: readonly string[];\n}\n\nfunction isContainedPath(parent: string, child: string): boolean {\n\tconst path = relative(parent, child);\n\treturn path === \"\" || (!path.startsWith(\"..\") && !isAbsolute(path));\n}\n\nfunction loadMetadataDirectory(\n\tdirectory: string,\n\tscope: \"user\" | \"project\",\n): LoadedPluginAgentModeMetadata {\n\tconst metadataPath = resolve(directory, AGENT_METADATA_FILE);\n\tif (!existsSync(metadataPath) || !statSync(metadataPath).isFile()) {\n\t\tthrow new Error(`Missing ${AGENT_METADATA_FILE}`);\n\t}\n\tif (statSync(metadataPath).size > MAX_AGENT_METADATA_BYTES) {\n\t\tthrow new Error(`${AGENT_METADATA_FILE} exceeds 64 KiB`);\n\t}\n\tconst value = JSON.parse(readFileSync(metadataPath, \"utf8\")) as {\n\t\tkey?: unknown;\n\t\tlabel?: unknown;\n\t\tentry?: unknown;\n\t};\n\tif (typeof value.key !== \"string\" || !KEY_PATTERN.test(value.key)) {\n\t\tthrow new Error(\"Agent key must be lowercase kebab-case\");\n\t}\n\tif (value.key !== basename(directory)) {\n\t\tthrow new Error(\"Agent key must match its directory name\");\n\t}\n\tif (typeof value.label !== \"string\" || !value.label.trim()) {\n\t\tthrow new Error(\"Agent label must be non-empty\");\n\t}\n\tif (typeof value.entry !== \"string\" || !value.entry.trim()) {\n\t\tthrow new Error(\"Agent entry must be non-empty\");\n\t}\n\tconst realDirectory = realpathSync(directory);\n\tconst entryPath = resolve(realDirectory, value.entry);\n\tif (!existsSync(entryPath) || !statSync(entryPath).isFile()) {\n\t\tthrow new Error(`Agent entry does not exist: ${value.entry}`);\n\t}\n\tconst realEntry = realpathSync(entryPath);\n\tif (!isContainedPath(realDirectory, realEntry)) {\n\t\tthrow new Error(\"Agent entry must remain inside its resource directory\");\n\t}\n\treturn Object.freeze({\n\t\tkey: value.key,\n\t\tlabel: value.label.trim(),\n\t\tentry: realEntry,\n\t\tdirectory: realDirectory,\n\t\tscope,\n\t});\n}\n\nexport function loadPluginAgentMetadataFromDirectories(input: {\n\tuser?: readonly string[];\n\tproject?: readonly string[];\n\tinitialErrors?: readonly string[];\n}): PluginAgentMetadataLoadResult {\n\tconst metadata: LoadedPluginAgentModeMetadata[] = [];\n\tconst errors = [...(input.initialErrors ?? [])];\n\tconst seen = new Set<string>();\n\tfor (const scope of [\"user\", \"project\"] as const) {\n\t\tfor (const directory of input[scope] ?? []) {\n\t\t\ttry {\n\t\t\t\tconst loaded = loadMetadataDirectory(directory, scope);\n\t\t\t\tif (seen.has(loaded.key)) {\n\t\t\t\t\tthrow new Error(`Duplicate plugin agent key: ${loaded.key}`);\n\t\t\t\t}\n\t\t\t\tseen.add(loaded.key);\n\t\t\t\tmetadata.push(loaded);\n\t\t\t} catch (error) {\n\t\t\t\terrors.push(\n\t\t\t\t\t`${directory}: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\treturn Object.freeze({\n\t\tmetadata: Object.freeze(metadata),\n\t\terrors: Object.freeze(errors),\n\t});\n}\n\nexport function loadConfiguredPluginAgentMetadata(\n\tworkspaceDir: string,\n\toptions: ConfiguredPackageRuntimeOptions = {},\n): PluginAgentMetadataLoadResult {\n\tconst resources = loadConfiguredPackageResources(workspaceDir, options);\n\treturn loadPluginAgentMetadataFromDirectories({\n\t\tuser: resources.agents.user,\n\t\tproject: resources.agents.project,\n\t\tinitialErrors: resources.errors,\n\t});\n}\n"]}

package/dist/agent/plugin-agent-registry.d.ts

@@ -0,0 +1,62 @@
+import type { ApprovalMode } from "./action-approval.js";
+export type PluginAgentSandboxMode = "danger-full-access" | "workspace-write" | "read-only";
+export interface PluginAgentBudgets {
+    maxTurns: number;
+    maxToolCalls: number;
+    maxCostUsd: number;
+}
+export interface PluginAgentPolicy {
+    allowedModels: readonly string[];
+    allowedTools: readonly string[];
+    maxBudgets: PluginAgentBudgets;
+    approvalMode: ApprovalMode;
+    sandboxMode: PluginAgentSandboxMode;
+}
+export interface PluginAgentModeMetadata {
+    key: string;
+    label: string;
+    entry: string;
+}
+export interface PluginAgentConfig {
+    key: string;
+    label: string;
+    description: string;
+    systemPrompt: string;
+    model: string;
+    tools: "all" | readonly string[];
+    budgets: PluginAgentBudgets;
+    approvalMode: ApprovalMode;
+    sandboxMode: PluginAgentSandboxMode;
+}
+export interface PluginAgentHandle {
+    readonly key: string;
+    readonly label: string;
+    readonly description: string;
+    readonly systemPrompt: string;
+    readonly model: string;
+    readonly tools: readonly string[];
+    readonly budgets: Readonly<PluginAgentBudgets>;
+    readonly approvalMode: ApprovalMode;
+    readonly sandboxMode: PluginAgentSandboxMode;
+}
+export interface PluginAgentModeRegistration {
+    key: string;
+    label: string;
+    agent: PluginAgentHandle;
+    primary: boolean;
+}
+export interface RegisteredPluginAgentMode extends PluginAgentModeRegistration {
+    readonly metadata: Readonly<PluginAgentModeMetadata>;
+}
+export declare class PluginAgentRegistry {
+    private readonly policy;
+    private readonly metadata;
+    private readonly registrations;
+    private readonly issuedHandles;
+    constructor(policy: PluginAgentPolicy, metadata: readonly PluginAgentModeMetadata[]);
+    createAgent(config: PluginAgentConfig): PluginAgentHandle;
+    registerAgentMode(registration: PluginAgentModeRegistration): void;
+    getAgentMode(key: string): RegisteredPluginAgentMode | undefined;
+    listAgentModes(): readonly RegisteredPluginAgentMode[];
+}
+//# sourceMappingURL=plugin-agent-registry.d.ts.map

package/dist/agent/plugin-agent-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-agent-registry.d.ts","sourceRoot":"","sources":["../../src/agent/plugin-agent-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,MAAM,sBAAsB,GAC/B,oBAAoB,GACpB,iBAAiB,GACjB,WAAW,CAAC;AAEf,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,yBAA0B,SAAQ,2BAA2B;IAC7E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CACrD;AA8CD,qBAAa,mBAAmB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAGrB;IACJ,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgD;IAC9E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;gBAGjE,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,SAAS,uBAAuB,EAAE;IAmB7C,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB;IAwDzD,iBAAiB,CAAC,YAAY,EAAE,2BAA2B,GAAG,IAAI;IAyBlE,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS;IAIhE,cAAc,IAAI,SAAS,yBAAyB,EAAE;CAGtD"}

package/dist/agent/plugin-agent-registry.js

@@ -0,0 +1,109 @@
+const KEY_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const APPROVAL_RESTRICTIVENESS = {
+    auto: 0,
+    prompt: 1,
+    fail: 2,
+};
+const SANDBOX_RESTRICTIVENESS = {
+    "danger-full-access": 0,
+    "workspace-write": 1,
+    "read-only": 2,
+};
+function validatePositiveBudget(name, requested, maximum) {
+    if (requested === undefined ||
+        !Number.isFinite(requested) ||
+        requested <= 0 ||
+        (maximum !== undefined && requested > maximum)) {
+        throw new Error(`Plugin agent budget ${name} is invalid or exceeds policy`);
+    }
+}
+function freezeHandle(config, tools) {
+    return Object.freeze({
+        key: config.key,
+        label: config.label,
+        description: config.description,
+        systemPrompt: config.systemPrompt,
+        model: config.model,
+        tools: Object.freeze([...tools]),
+        budgets: Object.freeze({ ...config.budgets }),
+        approvalMode: config.approvalMode,
+        sandboxMode: config.sandboxMode,
+    });
+}
+export class PluginAgentRegistry {
+    constructor(policy, metadata) {
+        this.metadata = new Map();
+        this.registrations = new Map();
+        this.issuedHandles = new WeakSet();
+        this.policy = Object.freeze({
+            ...policy,
+            allowedModels: Object.freeze([...policy.allowedModels]),
+            allowedTools: Object.freeze([...policy.allowedTools]),
+            maxBudgets: Object.freeze({ ...policy.maxBudgets }),
+        });
+        for (const declaration of metadata) {
+            if (!KEY_PATTERN.test(declaration.key) || !declaration.entry.trim()) {
+                throw new Error(`Invalid plugin agent metadata for ${declaration.key}`);
+            }
+            if (this.metadata.has(declaration.key)) {
+                throw new Error(`Duplicate plugin agent metadata: ${declaration.key}`);
+            }
+            this.metadata.set(declaration.key, Object.freeze({ ...declaration }));
+        }
+    }
+    createAgent(config) {
+        if (!KEY_PATTERN.test(config.key)) {
+            throw new Error("Plugin agent key must be lowercase kebab-case");
+        }
+        if (!config.label.trim() ||
+            !config.description.trim() ||
+            !config.systemPrompt.trim()) {
+            throw new Error("Plugin agent text fields must be non-empty");
+        }
+        if (!this.policy.allowedModels.includes(config.model)) {
+            throw new Error(`Plugin agent model is not allowed: ${config.model}`);
+        }
+        const tools = config.tools === "all" ? this.policy.allowedTools : config.tools;
+        const unknownTool = tools.find((tool) => !this.policy.allowedTools.includes(tool));
+        if (unknownTool) {
+            throw new Error(`Plugin agent tool is not allowed: ${unknownTool}`);
+        }
+        validatePositiveBudget("maxTurns", config.budgets.maxTurns, this.policy.maxBudgets.maxTurns);
+        validatePositiveBudget("maxToolCalls", config.budgets.maxToolCalls, this.policy.maxBudgets.maxToolCalls);
+        validatePositiveBudget("maxCostUsd", config.budgets.maxCostUsd, this.policy.maxBudgets.maxCostUsd);
+        if (APPROVAL_RESTRICTIVENESS[config.approvalMode] <
+            APPROVAL_RESTRICTIVENESS[this.policy.approvalMode]) {
+            throw new Error("Plugin agent approval mode would escalate permission");
+        }
+        if (SANDBOX_RESTRICTIVENESS[config.sandboxMode] <
+            SANDBOX_RESTRICTIVENESS[this.policy.sandboxMode]) {
+            throw new Error("Plugin agent sandbox mode would escalate permission");
+        }
+        const handle = freezeHandle(config, tools);
+        this.issuedHandles.add(handle);
+        return handle;
+    }
+    registerAgentMode(registration) {
+        if (this.registrations.has(registration.key)) {
+            throw new Error(`Duplicate plugin agent mode: ${registration.key}`);
+        }
+        const metadata = this.metadata.get(registration.key);
+        if (!metadata ||
+            metadata.label !== registration.label ||
+            registration.agent.key !== registration.key ||
+            registration.agent.label !== registration.label) {
+            throw new Error(`Plugin agent registration metadata mismatch: ${registration.key}`);
+        }
+        if (!this.issuedHandles.has(registration.agent)) {
+            throw new Error("Plugin agent handle was not issued by this registry");
+        }
+        this.registrations.set(registration.key, Object.freeze({ ...registration, metadata }));
+    }
+    getAgentMode(key) {
+        return this.registrations.get(key);
+    }
+    listAgentModes() {
+        return Object.freeze([...this.registrations.values()]);
+    }
+}
+//# sourceMappingURL=plugin-agent-registry.js.map

package/dist/agent/plugin-agent-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-agent-registry.js","sourceRoot":"","sources":["../../src/agent/plugin-agent-registry.ts"],"names":[],"mappings":"AA8DA,MAAM,WAAW,GAAG,4BAA4B,CAAC;AACjD,MAAM,wBAAwB,GAAiC;IAC9D,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;CACP,CAAC;AACF,MAAM,uBAAuB,GAA2C;IACvE,oBAAoB,EAAE,CAAC;IACvB,iBAAiB,EAAE,CAAC;IACpB,WAAW,EAAE,CAAC;CACd,CAAC;AAEF,SAAS,sBAAsB,CAC9B,IAA8B,EAC9B,SAA6B,EAC7B,OAA2B;IAE3B,IACC,SAAS,KAAK,SAAS;QACvB,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,CAAC;QACd,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,GAAG,OAAO,CAAC,EAC7C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,+BAA+B,CAAC,CAAC;IAC7E,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CACpB,MAAyB,EACzB,KAAwB;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAC7C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAmB;IAS/B,YACC,MAAyB,EACzB,QAA4C;QAT5B,aAAQ,GAAG,IAAI,GAAG,EAGhC,CAAC;QACa,kBAAa,GAAG,IAAI,GAAG,EAAqC,CAAC;QAC7D,kBAAa,GAAG,IAAI,OAAO,EAAqB,CAAC;QAMjE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;YACrD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IAED,WAAW,CAAC,MAAyB;QACpC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;QACD,IACC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YACpB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE;YAC1B,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAC1B,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,KAAK,GACV,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAClD,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,sBAAsB,CACrB,UAAU,EACV,MAAM,CAAC,OAAO,CAAC,QAAQ,EACvB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAC/B,CAAC;QACF,sBAAsB,CACrB,cAAc,EACd,MAAM,CAAC,OAAO,CAAC,YAAY,EAC3B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CACnC,CAAC;QACF,sBAAsB,CACrB,YAAY,EACZ,MAAM,CAAC,OAAO,CAAC,UAAU,EACzB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CACjC,CAAC;QACF,IACC,wBAAwB,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7C,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EACjD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACzE,CAAC;QACD,IACC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC;YAC3C,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAC/C,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IACf,CAAC;IAED,iBAAiB,CAAC,YAAyC;QAC1D,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACrD,IACC,CAAC,QAAQ;YACT,QAAQ,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK;YACrC,YAAY,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG;YAC3C,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,EAC9C,CAAC;YACF,MAAM,IAAI,KAAK,CACd,gDAAgD,YAAY,CAAC,GAAG,EAAE,CAClE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CACrB,YAAY,CAAC,GAAG,EAChB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,CAAC,CAC5C,CAAC;IACH,CAAC;IAED,YAAY,CAAC,GAAW;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,cAAc;QACb,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;CACD","sourcesContent":["import type { ApprovalMode } from \"./action-approval.js\";\n\nexport type PluginAgentSandboxMode =\n\t| \"danger-full-access\"\n\t| \"workspace-write\"\n\t| \"read-only\";\n\nexport interface PluginAgentBudgets {\n\tmaxTurns: number;\n\tmaxToolCalls: number;\n\tmaxCostUsd: number;\n}\n\nexport interface PluginAgentPolicy {\n\tallowedModels: readonly string[];\n\tallowedTools: readonly string[];\n\tmaxBudgets: PluginAgentBudgets;\n\tapprovalMode: ApprovalMode;\n\tsandboxMode: PluginAgentSandboxMode;\n}\n\nexport interface PluginAgentModeMetadata {\n\tkey: string;\n\tlabel: string;\n\tentry: string;\n}\n\nexport interface PluginAgentConfig {\n\tkey: string;\n\tlabel: string;\n\tdescription: string;\n\tsystemPrompt: string;\n\tmodel: string;\n\ttools: \"all\" | readonly string[];\n\tbudgets: PluginAgentBudgets;\n\tapprovalMode: ApprovalMode;\n\tsandboxMode: PluginAgentSandboxMode;\n}\n\nexport interface PluginAgentHandle {\n\treadonly key: string;\n\treadonly label: string;\n\treadonly description: string;\n\treadonly systemPrompt: string;\n\treadonly model: string;\n\treadonly tools: readonly string[];\n\treadonly budgets: Readonly<PluginAgentBudgets>;\n\treadonly approvalMode: ApprovalMode;\n\treadonly sandboxMode: PluginAgentSandboxMode;\n}\n\nexport interface PluginAgentModeRegistration {\n\tkey: string;\n\tlabel: string;\n\tagent: PluginAgentHandle;\n\tprimary: boolean;\n}\n\nexport interface RegisteredPluginAgentMode extends PluginAgentModeRegistration {\n\treadonly metadata: Readonly<PluginAgentModeMetadata>;\n}\n\nconst KEY_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst APPROVAL_RESTRICTIVENESS: Record<ApprovalMode, number> = {\n\tauto: 0,\n\tprompt: 1,\n\tfail: 2,\n};\nconst SANDBOX_RESTRICTIVENESS: Record<PluginAgentSandboxMode, number> = {\n\t\"danger-full-access\": 0,\n\t\"workspace-write\": 1,\n\t\"read-only\": 2,\n};\n\nfunction validatePositiveBudget(\n\tname: keyof PluginAgentBudgets,\n\trequested: number | undefined,\n\tmaximum: number | undefined,\n): void {\n\tif (\n\t\trequested === undefined ||\n\t\t!Number.isFinite(requested) ||\n\t\trequested <= 0 ||\n\t\t(maximum !== undefined && requested > maximum)\n\t) {\n\t\tthrow new Error(`Plugin agent budget ${name} is invalid or exceeds policy`);\n\t}\n}\n\nfunction freezeHandle(\n\tconfig: PluginAgentConfig,\n\ttools: readonly string[],\n): PluginAgentHandle {\n\treturn Object.freeze({\n\t\tkey: config.key,\n\t\tlabel: config.label,\n\t\tdescription: config.description,\n\t\tsystemPrompt: config.systemPrompt,\n\t\tmodel: config.model,\n\t\ttools: Object.freeze([...tools]),\n\t\tbudgets: Object.freeze({ ...config.budgets }),\n\t\tapprovalMode: config.approvalMode,\n\t\tsandboxMode: config.sandboxMode,\n\t});\n}\n\nexport class PluginAgentRegistry {\n\tprivate readonly policy: PluginAgentPolicy;\n\tprivate readonly metadata = new Map<\n\t\tstring,\n\t\tReadonly<PluginAgentModeMetadata>\n\t>();\n\tprivate readonly registrations = new Map<string, RegisteredPluginAgentMode>();\n\tprivate readonly issuedHandles = new WeakSet<PluginAgentHandle>();\n\n\tconstructor(\n\t\tpolicy: PluginAgentPolicy,\n\t\tmetadata: readonly PluginAgentModeMetadata[],\n\t) {\n\t\tthis.policy = Object.freeze({\n\t\t\t...policy,\n\t\t\tallowedModels: Object.freeze([...policy.allowedModels]),\n\t\t\tallowedTools: Object.freeze([...policy.allowedTools]),\n\t\t\tmaxBudgets: Object.freeze({ ...policy.maxBudgets }),\n\t\t});\n\t\tfor (const declaration of metadata) {\n\t\t\tif (!KEY_PATTERN.test(declaration.key) || !declaration.entry.trim()) {\n\t\t\t\tthrow new Error(`Invalid plugin agent metadata for ${declaration.key}`);\n\t\t\t}\n\t\t\tif (this.metadata.has(declaration.key)) {\n\t\t\t\tthrow new Error(`Duplicate plugin agent metadata: ${declaration.key}`);\n\t\t\t}\n\t\t\tthis.metadata.set(declaration.key, Object.freeze({ ...declaration }));\n\t\t}\n\t}\n\n\tcreateAgent(config: PluginAgentConfig): PluginAgentHandle {\n\t\tif (!KEY_PATTERN.test(config.key)) {\n\t\t\tthrow new Error(\"Plugin agent key must be lowercase kebab-case\");\n\t\t}\n\t\tif (\n\t\t\t!config.label.trim() ||\n\t\t\t!config.description.trim() ||\n\t\t\t!config.systemPrompt.trim()\n\t\t) {\n\t\t\tthrow new Error(\"Plugin agent text fields must be non-empty\");\n\t\t}\n\t\tif (!this.policy.allowedModels.includes(config.model)) {\n\t\t\tthrow new Error(`Plugin agent model is not allowed: ${config.model}`);\n\t\t}\n\n\t\tconst tools =\n\t\t\tconfig.tools === \"all\" ? this.policy.allowedTools : config.tools;\n\t\tconst unknownTool = tools.find(\n\t\t\t(tool) => !this.policy.allowedTools.includes(tool),\n\t\t);\n\t\tif (unknownTool) {\n\t\t\tthrow new Error(`Plugin agent tool is not allowed: ${unknownTool}`);\n\t\t}\n\t\tvalidatePositiveBudget(\n\t\t\t\"maxTurns\",\n\t\t\tconfig.budgets.maxTurns,\n\t\t\tthis.policy.maxBudgets.maxTurns,\n\t\t);\n\t\tvalidatePositiveBudget(\n\t\t\t\"maxToolCalls\",\n\t\t\tconfig.budgets.maxToolCalls,\n\t\t\tthis.policy.maxBudgets.maxToolCalls,\n\t\t);\n\t\tvalidatePositiveBudget(\n\t\t\t\"maxCostUsd\",\n\t\t\tconfig.budgets.maxCostUsd,\n\t\t\tthis.policy.maxBudgets.maxCostUsd,\n\t\t);\n\t\tif (\n\t\t\tAPPROVAL_RESTRICTIVENESS[config.approvalMode] <\n\t\t\tAPPROVAL_RESTRICTIVENESS[this.policy.approvalMode]\n\t\t) {\n\t\t\tthrow new Error(\"Plugin agent approval mode would escalate permission\");\n\t\t}\n\t\tif (\n\t\t\tSANDBOX_RESTRICTIVENESS[config.sandboxMode] <\n\t\t\tSANDBOX_RESTRICTIVENESS[this.policy.sandboxMode]\n\t\t) {\n\t\t\tthrow new Error(\"Plugin agent sandbox mode would escalate permission\");\n\t\t}\n\n\t\tconst handle = freezeHandle(config, tools);\n\t\tthis.issuedHandles.add(handle);\n\t\treturn handle;\n\t}\n\n\tregisterAgentMode(registration: PluginAgentModeRegistration): void {\n\t\tif (this.registrations.has(registration.key)) {\n\t\t\tthrow new Error(`Duplicate plugin agent mode: ${registration.key}`);\n\t\t}\n\t\tconst metadata = this.metadata.get(registration.key);\n\t\tif (\n\t\t\t!metadata ||\n\t\t\tmetadata.label !== registration.label ||\n\t\t\tregistration.agent.key !== registration.key ||\n\t\t\tregistration.agent.label !== registration.label\n\t\t) {\n\t\t\tthrow new Error(\n\t\t\t\t`Plugin agent registration metadata mismatch: ${registration.key}`,\n\t\t\t);\n\t\t}\n\t\tif (!this.issuedHandles.has(registration.agent)) {\n\t\t\tthrow new Error(\"Plugin agent handle was not issued by this registry\");\n\t\t}\n\n\t\tthis.registrations.set(\n\t\t\tregistration.key,\n\t\t\tObject.freeze({ ...registration, metadata }),\n\t\t);\n\t}\n\n\tgetAgentMode(key: string): RegisteredPluginAgentMode | undefined {\n\t\treturn this.registrations.get(key);\n\t}\n\n\tlistAgentModes(): readonly RegisteredPluginAgentMode[] {\n\t\treturn Object.freeze([...this.registrations.values()]);\n\t}\n}\n"]}

package/dist/agent/profile-loader.d.ts

@@ -0,0 +1,7 @@
+import { type AgentProfile } from "./profiles.js";
+export declare function loadAgentProfilesFromDirectory(directory: string): AgentProfile[];
+export declare function loadAgentProfiles(options?: {
+    workspaceDir?: string;
+    homeDir?: string;
+}): AgentProfile[];
+//# sourceMappingURL=profile-loader.d.ts.map

package/dist/agent/profile-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-loader.d.ts","sourceRoot":"","sources":["../../src/agent/profile-loader.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,KAAK,YAAY,EAKjB,MAAM,eAAe,CAAC;AA4GvB,wBAAgB,8BAA8B,CAC7C,SAAS,EAAE,MAAM,GACf,YAAY,EAAE,CAShB;AAED,wBAAgB,iBAAiB,CAChC,OAAO,GAAE;IACR,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CACZ,GACJ,YAAY,EAAE,CAehB"}