@inneranimalmedia/agentsam-sdk 2.6.3 → 2.6.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (608) hide show
  1. package/AGENTSAM.md +17 -0
  2. package/README.md +31 -10
  3. package/apps/client-cms-editor/AGENTS.md +12 -0
  4. package/apps/client-cms-editor/IMPORT_PROVENANCE.json +8 -0
  5. package/apps/client-cms-editor/README.md +72 -0
  6. package/apps/client-cms-editor/agentsam.app.json +57 -0
  7. package/apps/client-cms-editor/backend/README.md +5 -0
  8. package/apps/client-cms-editor/backend/package.json +22 -0
  9. package/apps/client-cms-editor/backend/src/api/client.ts +200 -0
  10. package/apps/client-cms-editor/backend/src/demo-bootstrap.ts +145 -0
  11. package/apps/client-cms-editor/backend/src/index.ts +6 -0
  12. package/apps/client-cms-editor/backend/src/model.ts +115 -0
  13. package/apps/client-cms-editor/backend/src/preview/bridge.ts +79 -0
  14. package/apps/client-cms-editor/backend/src/preview/urls.ts +55 -0
  15. package/apps/client-cms-editor/backend/src/routing/cms-route.js +293 -0
  16. package/apps/client-cms-editor/backend/src/routing/index.js +10 -0
  17. package/apps/client-cms-editor/backend/src/storefront.ts +52 -0
  18. package/apps/client-cms-editor/backend/tsconfig.json +15 -0
  19. package/apps/client-cms-editor/backend/worker/index.js +34 -0
  20. package/apps/client-cms-editor/backend/wrangler.jsonc +11 -0
  21. package/apps/client-cms-editor/bin/agentsam-cms.mjs +229 -0
  22. package/apps/client-cms-editor/frontend/index.html +12 -0
  23. package/apps/client-cms-editor/frontend/package.json +33 -0
  24. package/apps/client-cms-editor/frontend/src/AgentSamDrawer.tsx +188 -0
  25. package/apps/client-cms-editor/frontend/src/CmsAgentSurface.tsx +191 -0
  26. package/apps/client-cms-editor/frontend/src/CmsEditor.tsx +1345 -0
  27. package/apps/client-cms-editor/frontend/src/env.d.ts +14 -0
  28. package/apps/client-cms-editor/frontend/src/index.ts +8 -0
  29. package/apps/client-cms-editor/frontend/src/lib/content-safety.ts +63 -0
  30. package/apps/client-cms-editor/frontend/src/main.tsx +17 -0
  31. package/apps/client-cms-editor/frontend/src/mount.tsx +51 -0
  32. package/apps/client-cms-editor/frontend/src/styles/agentsam-drawer.css +214 -0
  33. package/apps/client-cms-editor/frontend/src/styles/cmsShell.css +1739 -0
  34. package/apps/client-cms-editor/frontend/src/styles/studio.css +106 -0
  35. package/apps/client-cms-editor/frontend/src/surfaces/CmsDashboard.tsx +313 -0
  36. package/apps/client-cms-editor/frontend/src/surfaces/CmsGuidedChatHero.tsx +121 -0
  37. package/apps/client-cms-editor/frontend/src/surfaces/CmsHubPage.tsx +132 -0
  38. package/apps/client-cms-editor/frontend/src/surfaces/CmsSiteSwitcher.tsx +176 -0
  39. package/apps/client-cms-editor/frontend/src/surfaces/index.ts +5 -0
  40. package/apps/client-cms-editor/frontend/src/surfaces/types.ts +48 -0
  41. package/apps/client-cms-editor/frontend/tsconfig.json +25 -0
  42. package/apps/client-cms-editor/frontend/vite.config.ts +13 -0
  43. package/apps/client-cms-editor/package-lock.json +3832 -0
  44. package/apps/client-cms-editor/package.json +23 -0
  45. package/apps/client-cms-editor/reference/DONOR_README.md +52 -0
  46. package/apps/client-cms-editor/reference/DONOR_package-lock.json +1253 -0
  47. package/apps/client-cms-editor/reference/DONOR_tsconfig.json +15 -0
  48. package/apps/client-cms-editor/shared/cms/package.json +21 -0
  49. package/apps/client-cms-editor/shared/cms/src/agent-context.ts +35 -0
  50. package/apps/client-cms-editor/shared/cms/src/cloudflare-bindings.ts +51 -0
  51. package/apps/client-cms-editor/shared/cms/src/editor-types.ts +58 -0
  52. package/apps/client-cms-editor/shared/cms/src/index.ts +5 -0
  53. package/apps/client-cms-editor/shared/cms/src/publication.ts +24 -0
  54. package/apps/client-cms-editor/shared/cms/src/routes.ts +11 -0
  55. package/apps/client-cms-editor/shared/cms/tsconfig.json +12 -0
  56. package/bin/agentsam +16 -1
  57. package/bin/agentsam-rapid-rust +36 -0
  58. package/docs/AUTH_IDENTITY_CONTRACT.md +2 -0
  59. package/docs/BRAND_INTELLIGENCE.md +1 -1
  60. package/docs/MACHINE_INTELLIGENCE.md +120 -0
  61. package/docs/WINDOWS_RUNTIME_INSTALL.md +30 -0
  62. package/docs/architecture/AGENTSAM_APPLICATION_CONTRACT.md +188 -0
  63. package/docs/architecture/AGENTSAM_DISTRIBUTION_OWNERSHIP.md +176 -0
  64. package/docs/architecture/AGENTSAM_GO_RUNTIME.md +282 -0
  65. package/docs/architecture/AGENTSAM_RUNTIME_PROTOCOL.md +151 -0
  66. package/docs/architecture/CODEBASEINDEX_GUIDED_PATH.md +202 -0
  67. package/docs/architecture/FS_E2E_CLOSURE_RECEIPT.md +59 -0
  68. package/docs/architecture/LOCAL_FS_AUTHORITY.md +38 -0
  69. package/docs/architecture/LOCAL_STUDIO_CLOUDFLARE_OAUTH.md +36 -0
  70. package/docs/architecture/PLAN_CLI_AND_LOCAL_STUDIO_DESKTOP.md +96 -0
  71. package/docs/architecture/R2_SLUG_NAMESPACE.md +20 -0
  72. package/docs/architecture/SAM_ACTIVITY_RECOVERY_RECEIPT.md +39 -0
  73. package/docs/architecture/SAM_DECISION_WORK_RECEIPT.md +54 -0
  74. package/docs/architecture/SAM_KERNEL.md +181 -0
  75. package/docs/architecture/SAM_MACHINE_NORMALIZATION_PRECOMMIT_REPORT.md +208 -0
  76. package/docs/architecture/SLASH_SKILLS_PORTABLE.md +116 -0
  77. package/docs/architecture/WORK_PRODUCT_EXTRACTION.md +97 -0
  78. package/docs/architecture/fs-e2e-receipt.latest.json +42 -0
  79. package/docs/architecture/previews/codebaseindex-guided-path/CODEBASEINDEX_GUIDED_PATH.md +202 -0
  80. package/docs/architecture/previews/codebaseindex-guided-path/index.html +321 -0
  81. package/docs/brand/AGENT_SAM_ICON_GRAMMAR.md +70 -0
  82. package/docs/content-studio/HOST_MOUNT_CHECKLIST.md +71 -0
  83. package/docs/content-studio/REVISION_GATE_2026-09-27.md +501 -0
  84. package/docs/contracts/capability-install-planner.md +67 -0
  85. package/docs/contracts/environment-vocabulary.md +195 -0
  86. package/docs/contracts/google-cloud-oauth-setup.md +199 -0
  87. package/docs/local-studio/WORKMODE_DONOR_NOTES.md +1 -1
  88. package/docs/plans/LOCAL-STUDIO-GRADUATION-2026-09-26.md +290 -0
  89. package/docs/plans/LOCAL-STUDIO-REAL-APP-CONTRACT-ADDENDUM-2026-09-27.md +394 -0
  90. package/docs/plans/MACHINE-FIRST-APPS-TUI-2026-09-24.md +227 -0
  91. package/docs/plans/TOMORROW-EXTENSIVE-TODO-2026-09-26.md +221 -0
  92. package/docs/plans/TOMORROW-MACHINE-FIRST-BRIEFING.md +145 -0
  93. package/docs/plans/UNIVERSAL-INGEST-MACHINE-FIRST-2026-09-24.md +215 -0
  94. package/docs/plugins.md +2 -2
  95. package/docs/product/AGENTSAM_PRODUCT_EXPERIENCE_STANDARD.md +280 -0
  96. package/docs/product/LOCAL_STUDIO_DESKTOP_EXPERIENCE.md +139 -0
  97. package/docs/product/README.md +8 -0
  98. package/docs/rapid-rust-wasm.md +35 -0
  99. package/migrations/d1/0010_portable_tickets_memory.sql +140 -0
  100. package/migrations/d1/0011_agentsam_skill_v2.sql +185 -0
  101. package/migrations/d1/0011b_agentsam_skill_v2_cutover.sql +22 -0
  102. package/migrations/d1/0011c_agentsam_skill_v2_backfill.sql +76 -0
  103. package/migrations/d1/0011d_agentsam_skill_v2_retrieval_revisions.sql +50 -0
  104. package/migrations/d1/0012_agentsam_tools_required_seed.sql +67 -0
  105. package/migrations/d1/0013_identity_oauth_states.sql +15 -0
  106. package/migrations/d1/0014_auth_event_log.sql +20 -0
  107. package/migrations/d1/0015_identity_oauth_state_app_id.sql +3 -0
  108. package/migrations/d1/0016_cloudflare_oauth_user_oauth_tokens_ssot.sql +14 -0
  109. package/migrations/d1/README_PORTABLE_CONTROL_PLANE.md +16 -0
  110. package/migrations/sqlite/agentsam_skill_retrieval.portable.sql +42 -0
  111. package/package.json +88 -14
  112. package/packages/agentsam-brand/README.md +106 -11
  113. package/packages/agentsam-brand/bin/agentsam-brand.mjs +9 -0
  114. package/packages/agentsam-brand/package.json +39 -7
  115. package/packages/agentsam-brand/src/adapters/cloudflare-images.js +453 -0
  116. package/packages/agentsam-brand/src/adapters/cloudflare-r2.js +74 -0
  117. package/packages/agentsam-brand/src/adapters/d1-registry.js +26 -0
  118. package/packages/agentsam-brand/src/adapters/filesystem.js +59 -0
  119. package/packages/agentsam-brand/src/adapters/memory.js +31 -0
  120. package/packages/agentsam-brand/src/cli/controller.js +503 -0
  121. package/packages/agentsam-brand/src/cli/wizard.js +526 -0
  122. package/packages/agentsam-brand/src/core/capabilities.js +201 -0
  123. package/packages/agentsam-brand/src/core/derivatives.js +211 -0
  124. package/packages/agentsam-brand/src/core/errors.js +12 -0
  125. package/packages/agentsam-brand/src/core/ingest.js +195 -0
  126. package/packages/agentsam-brand/src/core/inspect.js +109 -0
  127. package/packages/agentsam-brand/src/core/keys.js +83 -0
  128. package/packages/agentsam-brand/src/core/naming.js +142 -0
  129. package/packages/agentsam-brand/src/core/optimize.js +316 -0
  130. package/packages/agentsam-brand/src/core/pack.js +305 -0
  131. package/packages/agentsam-brand/src/core/plan.js +276 -0
  132. package/packages/agentsam-brand/src/core/preview.js +159 -0
  133. package/packages/agentsam-brand/src/core/processors/cloudflare.js +68 -0
  134. package/packages/agentsam-brand/src/core/processors/contract.js +203 -0
  135. package/packages/agentsam-brand/src/core/processors/index.js +148 -0
  136. package/packages/agentsam-brand/src/core/processors/native.js +82 -0
  137. package/packages/agentsam-brand/src/core/processors/sharp.js +113 -0
  138. package/packages/agentsam-brand/src/core/processors/squoosh-binary.js +195 -0
  139. package/packages/agentsam-brand/src/core/promote.js +288 -0
  140. package/packages/agentsam-brand/src/core/receipts.js +155 -0
  141. package/packages/agentsam-brand/src/core/v2/compile.js +280 -0
  142. package/packages/agentsam-brand/src/core/v2/derivatives-semantic.js +207 -0
  143. package/packages/agentsam-brand/src/core/v2/ingest-graph.js +387 -0
  144. package/packages/agentsam-brand/src/core/v2/roles.js +180 -0
  145. package/packages/agentsam-brand/src/core/v2/schema.js +209 -0
  146. package/packages/agentsam-brand/src/core/v2/templates.js +114 -0
  147. package/packages/agentsam-brand/src/index.js +193 -36
  148. package/packages/agentsam-brand/src/presets/app-icon.json +16 -0
  149. package/packages/agentsam-brand/src/presets/favicon.json +17 -0
  150. package/packages/agentsam-brand/src/presets/hero.json +12 -0
  151. package/packages/agentsam-brand/src/presets/index.js +40 -0
  152. package/packages/agentsam-brand/src/presets/logo.json +12 -0
  153. package/packages/agentsam-brand/src/presets/model.json +8 -0
  154. package/packages/agentsam-brand/src/presets/og-image.json +10 -0
  155. package/packages/agentsam-brand/src/presets/product-shot.json +11 -0
  156. package/packages/agentsam-brand/src/presets/social-image.json +10 -0
  157. package/packages/agentsam-brand/src/presets/web-image.json +10 -0
  158. package/packages/agentsam-contracts/src/artifacts.ts +41 -0
  159. package/packages/agentsam-contracts/src/errors.ts +16 -0
  160. package/packages/agentsam-errors/src/envelope.js +53 -0
  161. package/packages/agentsam-errors/src/index.js +1 -0
  162. package/packages/agentsam-errors/src/recovery.js +301 -0
  163. package/packages/agentsam-knowledge/src/autorag/index.js +1 -1
  164. package/packages/agentsam-knowledge/src/providers/index.js +20 -6
  165. package/packages/agentsam-knowledge/src/providers/ollama-endpoint.js +31 -0
  166. package/packages/agentsam-knowledge/test/autorag.test.mjs +22 -1
  167. package/packages/agentsam-nav/package.json +2 -2
  168. package/packages/agentsam-rapid-rust/Cargo.lock +344 -0
  169. package/packages/agentsam-rapid-rust/Cargo.toml +18 -0
  170. package/packages/agentsam-rapid-rust/README.md +5 -0
  171. package/packages/agentsam-rapid-rust/src/main.rs +718 -0
  172. package/packages/agentsam-rapid-rust/templates/api/Cargo.toml.tmpl +18 -0
  173. package/packages/agentsam-rapid-rust/templates/api/src/lib.rs.tmpl +17 -0
  174. package/packages/agentsam-rapid-rust/templates/common/README.md.tmpl +22 -0
  175. package/packages/agentsam-rapid-rust/templates/common/package.json.tmpl +12 -0
  176. package/packages/agentsam-rapid-rust/templates/common/wrangler.toml.tmpl +6 -0
  177. package/packages/agentsam-rapid-rust/templates/crypto-auth/Cargo.toml.tmpl +21 -0
  178. package/packages/agentsam-rapid-rust/templates/crypto-auth/src/lib.rs.tmpl +32 -0
  179. package/packages/agentsam-rapid-rust/templates/data-processor/Cargo.toml.tmpl +18 -0
  180. package/packages/agentsam-rapid-rust/templates/data-processor/src/lib.rs.tmpl +41 -0
  181. package/packages/agentsam-rapid-rust/templates/shared-core/Cargo.toml.tmpl +9 -0
  182. package/packages/agentsam-rapid-rust/templates/shared-core/core/Cargo.toml.tmpl +7 -0
  183. package/packages/agentsam-rapid-rust/templates/shared-core/core/src/lib.rs.tmpl +23 -0
  184. package/packages/agentsam-rapid-rust/templates/shared-core/worker/Cargo.toml.tmpl +12 -0
  185. package/packages/agentsam-rapid-rust/templates/shared-core/worker/src/lib.rs.tmpl +16 -0
  186. package/packages/agentsam-rapid-rust/templates/shared-core/wrangler.toml.tmpl +6 -0
  187. package/packages/agentsam-repository/src/index.js +1 -0
  188. package/packages/agentsam-repository/src/merkle/semantic.js +3 -10
  189. package/packages/agentsam-repository/src/source-types.js +85 -0
  190. package/packages/agentsam-vault/README.md +96 -0
  191. package/packages/agentsam-vault/package.json +32 -0
  192. package/packages/agentsam-vault/src/contracts/credential.d.ts +78 -0
  193. package/packages/agentsam-vault/src/contracts/credential.js +132 -0
  194. package/packages/agentsam-vault/src/crypto/aes-gcm.d.ts +30 -0
  195. package/packages/agentsam-vault/src/crypto/aes-gcm.js +107 -0
  196. package/packages/agentsam-vault/src/crypto/oauth-envelope.js +150 -0
  197. package/packages/agentsam-vault/src/index.d.ts +9 -0
  198. package/packages/agentsam-vault/src/index.js +27 -0
  199. package/packages/agentsam-vault/src/providers/registry.js +90 -0
  200. package/packages/agentsam-vault/src/runtime/resolver.js +77 -0
  201. package/packages/agentsam-workbench/README.md +24 -0
  202. package/packages/agentsam-workbench/package.json +38 -0
  203. package/packages/agentsam-workbench/src/agent/AgentPanel.tsx +41 -0
  204. package/packages/agentsam-workbench/src/agent/ArtifactCard.tsx +9 -0
  205. package/packages/agentsam-workbench/src/agent/Composer.tsx +102 -0
  206. package/packages/agentsam-workbench/src/agent/ConnectedAgentPanel.tsx +194 -0
  207. package/packages/agentsam-workbench/src/agent/ContextualComposer.tsx +788 -0
  208. package/packages/agentsam-workbench/src/agent/GoalStatusStrip.tsx +38 -0
  209. package/packages/agentsam-workbench/src/agent/MiniAgentSam.tsx +86 -0
  210. package/packages/agentsam-workbench/src/agent/ModelSelect.tsx +19 -0
  211. package/packages/agentsam-workbench/src/agent/Thread.tsx +56 -0
  212. package/packages/agentsam-workbench/src/agent/ToolReceipt.tsx +11 -0
  213. package/packages/agentsam-workbench/src/agent/contextual-composer.css +611 -0
  214. package/packages/agentsam-workbench/src/agent/index.ts +10 -0
  215. package/packages/agentsam-workbench/src/agent/mini-agentsam.css +12 -0
  216. package/packages/agentsam-workbench/src/browser/BrowserFrame.tsx +37 -0
  217. package/packages/agentsam-workbench/src/browser/index.ts +1 -0
  218. package/packages/agentsam-workbench/src/index.ts +6 -0
  219. package/packages/agentsam-workbench/src/project-control.css +160 -0
  220. package/packages/agentsam-workbench/src/projects/ProjectsSurface.tsx +131 -0
  221. package/packages/agentsam-workbench/src/projects/index.ts +1 -0
  222. package/packages/agentsam-workbench/src/shell/Breadcrumb.tsx +35 -0
  223. package/packages/agentsam-workbench/src/shell/ResizableStage.tsx +99 -0
  224. package/packages/agentsam-workbench/src/shell/SidePanel.tsx +5 -0
  225. package/packages/agentsam-workbench/src/shell/index.ts +4 -0
  226. package/packages/agentsam-workbench/src/shell/surfaceRegistry.ts +29 -0
  227. package/packages/agentsam-workbench/src/terminal/TerminalSurface.tsx +5 -0
  228. package/packages/agentsam-workbench/src/terminal/index.ts +1 -0
  229. package/packages/agentsam-workbench/src/timeline/GanttBoard.tsx +258 -0
  230. package/packages/agentsam-workbench/src/timeline/index.ts +1 -0
  231. package/packages/agentsam-workbench/tsconfig.json +13 -0
  232. package/packages/connectors/cloudflare/OAUTH_STORAGE_AUDIT.md +53 -0
  233. package/packages/connectors/cloudflare/package.json +3 -1
  234. package/packages/connectors/cloudflare/src/api-client.js +279 -0
  235. package/packages/connectors/cloudflare/src/capabilities.js +585 -0
  236. package/packages/connectors/cloudflare/src/credential.js +318 -0
  237. package/packages/connectors/cloudflare/src/families/brand-protection.js +123 -0
  238. package/packages/connectors/cloudflare/src/families/keyless.js +114 -0
  239. package/packages/connectors/cloudflare/src/families/pages.js +151 -0
  240. package/packages/connectors/cloudflare/src/families/scanner.js +123 -0
  241. package/packages/connectors/cloudflare/src/families/snippets.js +207 -0
  242. package/packages/connectors/cloudflare/src/families/tag-gateway.js +46 -0
  243. package/packages/connectors/cloudflare/src/families/tags.js +124 -0
  244. package/packages/connectors/cloudflare/src/families/token-validation.js +95 -0
  245. package/packages/connectors/cloudflare/src/families/workflows.js +156 -0
  246. package/packages/connectors/cloudflare/src/index.js +102 -265
  247. package/packages/connectors/cloudflare/src/oauth-persist.js +336 -0
  248. package/packages/connectors/cloudflare/src/owner.js +42 -12
  249. package/packages/connectors/cloudflare/src/permission-options.js +1064 -0
  250. package/packages/connectors/cloudflare/src/routes.js +318 -144
  251. package/packages/connectors/cloudflare/src/scope-catalog.js +345 -0
  252. package/packages/connectors/cloudflare/src/vault.js +2 -2
  253. package/packages/connectors/cloudflare/tests/capabilities.test.mjs +276 -0
  254. package/packages/connectors/cloudflare/tests/connector.test.mjs +51 -30
  255. package/packages/connectors/cloudflare/tests/oauth-persist.test.mjs +125 -0
  256. package/packages/identity/.agentsam/features/oauth-login-portal/agentsam.feature.json +1 -1
  257. package/packages/identity/.agentsam/features/oauth-login-portal/providers.json +22 -2
  258. package/packages/identity/.agentsam/features/oauth-login-portal/resources.json +10 -4
  259. package/packages/identity/.agentsam/features/oauth-login-portal/routes.json +31 -2
  260. package/packages/identity/README.md +1 -1
  261. package/packages/identity/backend/README.md +1 -1
  262. package/packages/identity/docs/PORTABLE_IDENTITY_ARCHITECTURE.md +50 -0
  263. package/packages/identity/migrations/D1_SCHEMA_MAPPING.md +32 -0
  264. package/packages/identity/migrations/sqlite/001_identity_core.sql +99 -0
  265. package/packages/identity/migrations/sqlite/002_identity_oauth_client.sql +38 -0
  266. package/packages/identity/migrations/sqlite/003_identity_oauth_server.sql +64 -0
  267. package/packages/identity/migrations/sqlite/004_identity_oauth_consent_catalog.sql +48 -0
  268. package/packages/identity/package.json +3 -2
  269. package/packages/identity/scripts/local-identity-bridge.mjs +184 -0
  270. package/packages/identity/scripts/preview-auth-portal.mjs +7 -7
  271. package/packages/identity/src/adapters/cloudflare-d1/index.js +153 -24
  272. package/packages/identity/src/adapters/sqlite/index.js +322 -0
  273. package/packages/identity/src/app/verify-app.js +95 -0
  274. package/packages/identity/src/contracts/auth-config.js +28 -8
  275. package/packages/identity/src/contracts/external-identity.js +1 -1
  276. package/packages/identity/src/contracts/identity-store.js +115 -0
  277. package/packages/identity/src/contracts/provider.js +1 -0
  278. package/packages/identity/src/contracts/route-ids.js +30 -0
  279. package/packages/identity/src/contracts/route-projection.js +218 -0
  280. package/packages/identity/src/contracts/routes.js +11 -0
  281. package/packages/identity/src/core/browser-paths.js +4 -5
  282. package/packages/identity/src/core/constants.js +13 -8
  283. package/packages/identity/src/core/session-policy.js +32 -0
  284. package/packages/identity/src/frontend/auth-portal/README.md +2 -1
  285. package/packages/identity/src/frontend/auth-portal/pages/login.html +16 -15
  286. package/packages/identity/src/frontend/auth-portal/pages/reset.html +9 -8
  287. package/packages/identity/src/frontend/auth-portal/pages/signup.html +9 -8
  288. package/packages/identity/src/frontend/auth-portal/preview/dashboard-stub.html +1 -1
  289. package/packages/identity/src/frontend/auth-portal/shared/company-branding.js +1 -1
  290. package/packages/identity/src/frontend/auth-portal/shared/desktop-identity-bridge.js +207 -0
  291. package/packages/identity/src/index.js +41 -0
  292. package/packages/identity/src/migrations/0001_identity_core.sql +19 -2
  293. package/packages/identity/src/migrations/0003_accounts_ssot.sql +20 -0
  294. package/packages/identity/src/migrations/README.md +5 -2
  295. package/packages/identity/src/oauth/README.md +19 -8
  296. package/packages/identity/src/oauth/consent-view.js +388 -0
  297. package/packages/identity/src/oauth/credentials.js +46 -19
  298. package/packages/identity/src/oauth/finalize-inbound.js +1 -1
  299. package/packages/identity/src/oauth/google-desktop-exchange.js +173 -0
  300. package/packages/identity/src/oauth/iam-platform.js +8 -7
  301. package/packages/identity/src/oauth/redirect-paths.js +27 -36
  302. package/packages/identity/src/providers/cloudflare/oauth.js +3 -4
  303. package/packages/identity/src/providers/cloudflare/profile.js +49 -14
  304. package/packages/identity/src/providers/iam/index.js +27 -5
  305. package/packages/identity/src/server/identity-service.js +61 -15
  306. package/packages/identity/src/server/mount-policy.js +30 -0
  307. package/packages/identity/src/server/post-auth.js +79 -0
  308. package/packages/identity/src/server/worker-router.js +208 -146
  309. package/packages/identity/tests/auth-config.test.mjs +3 -2
  310. package/packages/identity/tests/finalize-inbound-oauth.test.mjs +6 -6
  311. package/packages/identity/tests/iam-provider.test.mjs +1 -1
  312. package/packages/identity/tests/identity-init-scaffold.test.mjs +3 -0
  313. package/packages/identity/tests/identity-service.test.mjs +52 -5
  314. package/packages/identity/tests/native-session-worker.test.mjs +64 -0
  315. package/packages/identity/tests/oauth-consent-view.test.mjs +106 -0
  316. package/packages/identity/tests/oauth-credentials.test.mjs +20 -5
  317. package/packages/identity/tests/oauth-presets-accounts-ssot.test.mjs +58 -0
  318. package/packages/identity/tests/portable-identity-architecture.test.mjs +157 -0
  319. package/packages/identity/tests/preview-auth-portal.test.mjs +3 -3
  320. package/packages/identity/tests/session-routes-policy.test.mjs +21 -0
  321. package/packages/runtime-protocol/src/index.js +154 -0
  322. package/packages/theme-church-site/package.json +2 -1
  323. package/packages/theme-church-site/src/index.js +1 -0
  324. package/packages/theme-companions-site/package.json +2 -1
  325. package/packages/theme-companions-site/src/index.js +1 -0
  326. package/packages/theme-floors-site/package.json +2 -1
  327. package/packages/theme-floors-site/src/index.js +1 -0
  328. package/packages/theme-fuelnfree-site/package.json +2 -1
  329. package/packages/theme-fuelnfree-site/src/index.js +1 -0
  330. package/packages/theme-handyman-site/package.json +2 -1
  331. package/packages/theme-handyman-site/src/index.js +1 -0
  332. package/packages/theme-insurance-site/package.json +2 -1
  333. package/packages/theme-insurance-site/src/index.js +1 -0
  334. package/packages/theme-scenes/README.md +164 -0
  335. package/packages/theme-scenes/package.json +53 -0
  336. package/packages/theme-scenes/src/blocks/index.js +30 -0
  337. package/packages/theme-scenes/src/contracts/index.js +286 -0
  338. package/packages/theme-scenes/src/demos/index.js +65 -0
  339. package/packages/theme-scenes/src/index.js +75 -0
  340. package/packages/theme-scenes/src/presets/index.js +263 -0
  341. package/packages/theme-scenes/src/runtime/compile.js +119 -0
  342. package/packages/theme-scenes/src/scenes/index.js +146 -0
  343. package/packages/theme-scenes/src/shell/index.js +47 -0
  344. package/packages/theme-scenes/src/themes/index.js +129 -0
  345. package/packages/theme-scenes/src/visuals/index.js +41 -0
  346. package/packages/theme-scenes/test/theme-scenes.test.mjs +179 -0
  347. package/packages/theme-shinshu-site/package.json +2 -1
  348. package/packages/theme-shinshu-site/src/index.js +1 -0
  349. package/packages/work-graph/src/index.js +34 -1
  350. package/packages/work-graph/src/renderers/gantt-model.js +24 -0
  351. package/packages/work-graph/test/work-graph.test.mjs +27 -7
  352. package/protocol/README.md +15 -7
  353. package/protocol/apps/agentsam.app.v1.schema.json +133 -0
  354. package/protocol/apps/agentsam.host-install.v1.schema.json +36 -0
  355. package/protocol/assets/README.md +9 -0
  356. package/protocol/assets/asset-record.v1.schema.json +64 -0
  357. package/protocol/brand/brandpack.v1.schema.json +43 -0
  358. package/protocol/credentials/issue.v1.schema.json +38 -0
  359. package/protocol/database/connection.v1.schema.json +41 -0
  360. package/protocol/embeddings/embedding-profile.v1.schema.json +20 -0
  361. package/protocol/errors/error-envelope.schema.json +135 -1
  362. package/protocol/errors/recovery.v1.schema.json +50 -0
  363. package/protocol/runtime/agentsam.runtime.v1.schema.json +75 -0
  364. package/protocol/runtime/workspace-fs.v1.schema.json +71 -0
  365. package/protocol/sam/activity.v1.schema.json +48 -0
  366. package/protocol/sam/answer.v1.schema.json +35 -0
  367. package/protocol/sam/calibration.v1.schema.json +21 -0
  368. package/protocol/sam/decision-receipt.v1.schema.json +29 -0
  369. package/protocol/sam/evaluation.v1.schema.json +19 -0
  370. package/protocol/sam/operation.schema.json +66 -0
  371. package/protocol/sam/outcome.v1.schema.json +36 -0
  372. package/protocol/sam/question.v1.schema.json +26 -0
  373. package/protocol/sam/registry.seed.json +153 -0
  374. package/protocol/sam/result.schema.json +53 -0
  375. package/protocol/sam/state.v1.schema.json +23 -0
  376. package/protocol/scoring/README.md +10 -0
  377. package/protocol/scoring/scorecard.v1.schema.json +65 -0
  378. package/protocol/skills/agentsam.interaction.v1.schema.json +50 -0
  379. package/protocol/skills/agentsam.skill.v1.schema.json +57 -0
  380. package/protocol/ui/icon-registry.mjs +227 -0
  381. package/protocol/ui/icon.v1.schema.json +51 -0
  382. package/registry/cms-rust-machine-20260928/installable-products.json +31 -0
  383. package/registry/cms-rust-machine-20260928/manifest.json +22 -0
  384. package/registry/cms-rust-machine-20260928/migration.sql +237 -0
  385. package/registry/cms-rust-machine-20260928/receipt.json +21 -0
  386. package/registry/cms-rust-machine-20260928/receipt.sql +27 -0
  387. package/scripts/build_rapid_rust_cli.py +83 -0
  388. package/skills/README.md +22 -9
  389. package/skills/agentsam-codebaseindex/SKILL.md +225 -0
  390. package/skills/catalog.json +14 -0
  391. package/src/attachments/index.js +6 -0
  392. package/src/attachments/intake.js +235 -0
  393. package/src/capabilities/repository-snapshot.js +19 -2
  394. package/src/cli/command-catalog.js +138 -0
  395. package/src/cli/dispatch.js +48 -0
  396. package/src/cli.js +225 -27
  397. package/src/commands/account-auth.js +94 -8
  398. package/src/commands/api-key.js +244 -0
  399. package/src/commands/app.js +365 -29
  400. package/src/commands/billing.js +127 -0
  401. package/src/commands/brand.js +86 -74
  402. package/src/commands/cheat-sheet.js +154 -0
  403. package/src/commands/cloudflare-login.js +222 -0
  404. package/src/commands/cloudflare.js +453 -23
  405. package/src/commands/codebaseindex.js +693 -0
  406. package/src/commands/compute.js +4 -0
  407. package/src/commands/connections.js +11 -5
  408. package/src/commands/credentials.js +116 -0
  409. package/src/commands/env.js +152 -25
  410. package/src/commands/gcloud-auth.js +427 -0
  411. package/src/commands/go.js +366 -53
  412. package/src/commands/google-cloud.js +375 -0
  413. package/src/commands/identity-init.js +2 -2
  414. package/src/commands/interaction-clack.js +115 -0
  415. package/src/commands/mcp.js +226 -33
  416. package/src/commands/models.js +1 -1
  417. package/src/commands/ollama.js +3 -2
  418. package/src/commands/plugins.js +7 -2
  419. package/src/commands/product.js +36 -0
  420. package/src/commands/providers.js +62 -14
  421. package/src/commands/runtime-status.js +28 -9
  422. package/src/commands/runtime.js +313 -0
  423. package/src/commands/rust.js +24 -0
  424. package/src/commands/setup.js +279 -0
  425. package/src/commands/shell.js +59 -5
  426. package/src/commands/skill.js +248 -0
  427. package/src/commands/skills.js +1 -1
  428. package/src/commands/start-local.js +6 -2
  429. package/src/commands/terminal.js +171 -0
  430. package/src/commands/update.js +140 -0
  431. package/src/commands/whoami.js +392 -56
  432. package/src/features/resolve.js +1 -0
  433. package/src/go/build.js +229 -39
  434. package/src/go/cloudflare.js +506 -105
  435. package/src/go/container.js +120 -0
  436. package/src/go/contract.js +9 -4
  437. package/src/go/discover.js +149 -33
  438. package/src/go/index.js +15 -3
  439. package/src/go/native-probe-runner.mjs +119 -0
  440. package/src/go/{registry.js → official-registry.js} +64 -7
  441. package/src/go/official-release.js +10 -0
  442. package/src/go/receipts.js +77 -10
  443. package/src/go/verify.js +9 -2
  444. package/src/index.js +31 -0
  445. package/src/indexing/ingest/discover-models.js +298 -0
  446. package/src/indexing/ingest/inventory.js +478 -0
  447. package/src/indexing/ingest/job-graph.js +181 -0
  448. package/src/indexing/ingest/materials.js +204 -0
  449. package/src/indexing/ingest/style-evidence.js +181 -0
  450. package/src/knowledge/source.js +3 -3
  451. package/src/lib/account-session.js +11 -4
  452. package/src/lib/app-authority.js +172 -0
  453. package/src/lib/auth.js +94 -21
  454. package/src/lib/core-client.js +5 -6
  455. package/src/lib/credentials-audit.js +451 -0
  456. package/src/lib/deploy/health.js +24 -6
  457. package/src/lib/detect-context.js +7 -1
  458. package/src/lib/google-cloud-connection.js +270 -0
  459. package/src/lib/google-cloud-inventory.js +385 -0
  460. package/src/lib/google-desktop-oauth.js +372 -0
  461. package/src/lib/google-studio-brokered-oauth.js +158 -0
  462. package/src/lib/identity-scaffold.js +24 -6
  463. package/src/lib/init-options.js +192 -0
  464. package/src/lib/local-scaffold.js +48 -16
  465. package/src/lib/provider-command-remediation.js +308 -0
  466. package/src/lib/provider-credentials.js +71 -21
  467. package/src/lib/scaffold/index.js +8 -2
  468. package/src/lib/scaffold/mcp-server.js +43 -0
  469. package/src/lib/scaffold/templates/mcp-server/index.js +397 -0
  470. package/src/lib/scaffold/templates/mcp-server/presets.js +39 -0
  471. package/src/lib/scaffold/wizards/cms.js +93 -0
  472. package/src/lib/scaffold/wizards/mcp-server.js +61 -0
  473. package/src/lib/setup/contract.js +26 -0
  474. package/src/lib/setup/discover.js +116 -0
  475. package/src/lib/setup/execute.js +205 -0
  476. package/src/lib/setup/planner.js +134 -0
  477. package/src/lib/setup/recipes.js +235 -0
  478. package/src/lib/setup/runtime-persist.js +197 -0
  479. package/src/lib/setup/runtime.js +394 -0
  480. package/src/lib/slash-commands.js +3 -0
  481. package/src/lib/terminal/machine-identity.js +95 -0
  482. package/src/lib/terminal-local.js +164 -0
  483. package/src/lib/terminal-scopes.js +52 -0
  484. package/src/lib/whoami-capabilities.js +184 -0
  485. package/src/local-fs/capability.js +121 -0
  486. package/src/local-fs/freshness.js +75 -0
  487. package/src/local-fs/index.js +385 -0
  488. package/src/local-fs/paths.js +100 -0
  489. package/src/local-pty/server.js +326 -21
  490. package/src/mcp/authority.js +58 -108
  491. package/src/mcp/client-adapters.js +68 -144
  492. package/src/mcp/client.js +142 -122
  493. package/src/mcp/cloudflare-bundles.js +225 -0
  494. package/src/mcp/index.js +12 -0
  495. package/src/models/ai-access-onboarding.js +112 -0
  496. package/src/models/discovery.js +10 -2
  497. package/src/models/inventory-core.js +9 -1
  498. package/src/plugins/cloudflare.js +1 -1
  499. package/src/providers/ollama-chat.js +2 -1
  500. package/src/sam/activity/index.js +183 -0
  501. package/src/sam/client.js +252 -0
  502. package/src/sam/decision/calibration.js +109 -0
  503. package/src/sam/decision/confidence.js +126 -0
  504. package/src/sam/decision/evaluate.js +157 -0
  505. package/src/sam/decision/evaluators/deterministic.js +341 -0
  506. package/src/sam/decision/evaluators/heuristic.js +61 -0
  507. package/src/sam/decision/evaluators/select.js +50 -0
  508. package/src/sam/decision/evaluators/semantic.js +149 -0
  509. package/src/sam/decision/hierarchical.js +61 -0
  510. package/src/sam/decision/index.js +53 -0
  511. package/src/sam/decision/policy.js +86 -0
  512. package/src/sam/decision/questions.js +120 -0
  513. package/src/sam/decision/receipt.js +148 -0
  514. package/src/sam/decision/state.js +117 -0
  515. package/src/sam/decision/types.js +22 -0
  516. package/src/sam/decision/validate.js +200 -0
  517. package/src/sam/define.js +51 -0
  518. package/src/sam/index.js +65 -0
  519. package/src/sam/operations/brand-scan.js +62 -0
  520. package/src/sam/operations/cad-blender-inspect.js +36 -0
  521. package/src/sam/operations/codebaseindex-ingest.js +49 -0
  522. package/src/sam/operations/decision-evaluate.js +59 -0
  523. package/src/sam/operations/planning-astar.js +77 -0
  524. package/src/sam/operations/planning-goap.js +60 -0
  525. package/src/sam/operations/repository-inspect.js +72 -0
  526. package/src/sam/operations/security-scan.js +33 -0
  527. package/src/sam/operations/terminal-exec.js +29 -0
  528. package/src/sam/planning/astar.js +311 -0
  529. package/src/sam/planning/goap.js +177 -0
  530. package/src/sam/planning/index.js +21 -0
  531. package/src/sam/planning/state.js +84 -0
  532. package/src/sam/registry.js +48 -0
  533. package/src/sam/result.js +77 -0
  534. package/src/sam/seed.js +44 -0
  535. package/src/sam/types.js +116 -0
  536. package/src/security/inventory.js +12 -2
  537. package/src/security/local-vault.js +2 -0
  538. package/src/security/scan.js +1 -1
  539. package/src/skills/catalog.js +64 -0
  540. package/src/skills/content-resolver.js +124 -0
  541. package/src/skills/hosted-store.js +37 -0
  542. package/src/skills/index.js +29 -64
  543. package/src/skills/interaction.js +102 -0
  544. package/src/skills/local-store.js +228 -0
  545. package/src/skills/manifest.js +104 -0
  546. package/src/skills/metrics.js +31 -0
  547. package/src/skills/registry.js +184 -0
  548. package/src/skills/runtime.js +287 -0
  549. package/src/skills/slash.js +44 -0
  550. package/src/ui/cli/help.js +94 -101
  551. package/test/account-session.test.mjs +3 -3
  552. package/test/app-authority-context.test.mjs +32 -0
  553. package/test/cli/api-key-env-whoami.test.mjs +129 -0
  554. package/test/cli/codebaseindex-plan-ux.test.mjs +37 -0
  555. package/test/cli/go.test.mjs +62 -5
  556. package/test/cli/mcp-client.test.mjs +21 -10
  557. package/test/cli/runtime-persist.test.mjs +56 -0
  558. package/test/cli/rust-command.test.mjs +21 -0
  559. package/test/cli/skill-npm-and-env.test.mjs +52 -0
  560. package/test/cli/wireframes-go-registry.test.mjs +87 -2
  561. package/test/credentials-audit.test.mjs +113 -0
  562. package/test/deploy-health-scan.test.mjs +29 -1
  563. package/test/gcloud-auth.test.mjs +111 -0
  564. package/test/go/build-source-identity.test.mjs +31 -0
  565. package/test/go/cloudflare-probe.test.mjs +274 -10
  566. package/test/go/distribution.test.mjs +28 -0
  567. package/test/google-cloud-connection.test.mjs +83 -0
  568. package/test/google-cloud-inventory.test.mjs +64 -0
  569. package/test/init-options.test.mjs +35 -0
  570. package/test/integration/ai-access-onboarding.test.mjs +47 -0
  571. package/test/integration/app-command.test.mjs +30 -0
  572. package/test/integration/cad-project.test.mjs +4 -1
  573. package/test/integration/cli-help.test.mjs +1 -1
  574. package/test/integration/cms-app-scaffold.test.mjs +71 -0
  575. package/test/integration/cms-site-tenancy-contract.test.mjs +9 -8
  576. package/test/integration/codebaseindex-ingest.test.mjs +214 -0
  577. package/test/integration/features-resolve.test.mjs +30 -11
  578. package/test/integration/icon-registry.test.mjs +67 -0
  579. package/test/integration/ingest-discover-models.test.mjs +30 -0
  580. package/test/integration/inspect-path-cli.test.mjs +46 -0
  581. package/test/integration/install-script.test.mjs +12 -9
  582. package/test/integration/inventory-evidence.test.mjs +125 -0
  583. package/test/integration/local-fs.test.mjs +113 -0
  584. package/test/integration/provider-env-cli.test.mjs +2 -1
  585. package/test/integration/runtime-status.integration.test.mjs +2 -1
  586. package/test/integration/sam-activity-recovery.test.mjs +147 -0
  587. package/test/integration/sam-decision.test.mjs +584 -0
  588. package/test/integration/sam-kernel.test.mjs +99 -0
  589. package/test/integration/sam-planning-astar.test.mjs +279 -0
  590. package/test/integration/skill-runtime.test.mjs +240 -0
  591. package/test/integration/studio-fs-pty-e2e.test.mjs +294 -0
  592. package/test/knowledge.test.mjs +35 -1
  593. package/test/loopback-oauth.test.mjs +53 -0
  594. package/test/models.test.mjs +14 -7
  595. package/test/ollama.test.mjs +22 -0
  596. package/test/security.test.mjs +23 -0
  597. package/test/setup-planner.test.mjs +74 -0
  598. package/test/setup-runtime.test.mjs +51 -0
  599. package/test/shell.test.mjs +4 -4
  600. package/test/terminal/local-pty.mock.test.mjs +3 -1
  601. package/test/terminal-machine-identity.test.mjs +88 -0
  602. package/test/whoami-resume.test.mjs +27 -6
  603. package/packages/agentsam-brand/test/brand-scan.test.mjs +0 -106
  604. package/packages/work-graph/prototype/README.md +0 -32
  605. package/packages/work-graph/prototype/data/demo-workgraph.js +0 -47
  606. package/packages/work-graph/prototype/renderers/timeline-model.js +0 -21
  607. package/packages/work-graph/prototype/renderers/workgraph-runtime.js +0 -38
  608. package/packages/work-graph/prototype-gnantt.html +0 -655
@@ -0,0 +1,341 @@
1
+ /**
2
+ * Deterministic evaluator — exact facts / policy / registry lookups.
3
+ * Never invents semantic judgments.
4
+ */
5
+
6
+ import { buildAnswer, concentrationFromScores, clamp01 } from '../confidence.js';
7
+
8
+ export const DETERMINISTIC_EVALUATOR = Object.freeze({
9
+ kind: 'deterministic',
10
+ version: '1',
11
+
12
+ /**
13
+ * @param {object} question
14
+ */
15
+ supports(question) {
16
+ if (!question) return false;
17
+ if ([
18
+ 'terminal_lane',
19
+ 'requires_approval',
20
+ 'security_review_required',
21
+ 'verification_scope',
22
+ 'retrieval_mode',
23
+ 'change_risk',
24
+ 'skill_candidate',
25
+ ].includes(question.id)) {
26
+ return true;
27
+ }
28
+ // Fact-backed generic choose/check — selection still requires state facts at evaluate time.
29
+ if (question.evaluator_hint === 'deterministic' && (question.type === 'choose' || question.type === 'check')) {
30
+ return true;
31
+ }
32
+ return false;
33
+ },
34
+
35
+ /**
36
+ * @param {object} state
37
+ * @param {object[]} questions
38
+ */
39
+ async evaluate(state, questions) {
40
+ /** @type {Record<string, object>} */
41
+ const answers = {};
42
+ for (const q of questions) {
43
+ answers[q.id] = evaluateOne(state, q);
44
+ }
45
+ return {
46
+ ok: true,
47
+ evaluator: { kind: 'deterministic', version: '1' },
48
+ answers,
49
+ model_used: false,
50
+ deterministic: true,
51
+ };
52
+ },
53
+ });
54
+
55
+ function evaluateOne(state, question) {
56
+ switch (question.id) {
57
+ case 'terminal_lane':
58
+ return chooseTerminalLane(state, question);
59
+ case 'retrieval_mode':
60
+ return chooseRetrievalMode(state, question);
61
+ case 'verification_scope':
62
+ return chooseVerificationScope(state, question);
63
+ case 'change_risk':
64
+ return scoreChangeRisk(state, question);
65
+ case 'requires_approval':
66
+ return checkRequiresApproval(state, question);
67
+ case 'security_review_required':
68
+ return checkSecurityReview(state, question);
69
+ case 'skill_candidate':
70
+ return chooseSkillCandidate(state, question);
71
+ default:
72
+ if (question.type === 'choose' && state.facts?.[`choose.${question.id}`]) {
73
+ return fromFactChoose(state, question);
74
+ }
75
+ if (question.type === 'check' && state.facts?.[`check.${question.id}`] != null) {
76
+ return fromFactCheck(state, question);
77
+ }
78
+ {
79
+ const err = new Error(`deterministic_unsupported:${question.id}`);
80
+ err.code = 'evaluator_unsupported';
81
+ throw err;
82
+ }
83
+ }
84
+ }
85
+
86
+ function chooseTerminalLane(state, question) {
87
+ const lanes = state.runtime?.terminal_lanes || {};
88
+ const localOk = lanes.local !== false && lanes.local !== 'unavailable';
89
+ const remoteOk = lanes.remote !== false && lanes.remote !== 'unavailable';
90
+ const sandboxOk = lanes.sandbox !== false && lanes.sandbox !== 'unavailable';
91
+ const isolation = Boolean(state.constraints?.isolation_required || state.facts?.untrusted_code);
92
+ const needsLocal = Boolean(state.constraints?.requires_local_files || state.facts?.requires_local_files);
93
+
94
+ /** @type {Record<string, number>} */
95
+ const scores = { local: 0.1, remote: 0.1, sandbox: 0.1 };
96
+ if (isolation && sandboxOk) scores.sandbox += 5;
97
+ if (needsLocal && localOk) scores.local += 5;
98
+ if (!needsLocal && !isolation && localOk) scores.local += 2;
99
+ if (!needsLocal && remoteOk) scores.remote += 1.5;
100
+ if (!localOk) scores.local = 0;
101
+ if (!remoteOk) scores.remote = 0;
102
+ if (!sandboxOk) scores.sandbox = 0;
103
+
104
+ const value = argmax(scores);
105
+ return buildAnswer({
106
+ type: 'choose',
107
+ question_id: question.id,
108
+ value,
109
+ scores,
110
+ confidence_estimate: concentrationFromScores(scores),
111
+ // No probabilities — heuristic weights, not a probabilistic model
112
+ evaluator: { kind: 'deterministic', version: '1', rule: 'terminal_lane_v1' },
113
+ evidence: [
114
+ `isolation_required=${isolation}`,
115
+ `requires_local_files=${needsLocal}`,
116
+ `local_ok=${localOk}`,
117
+ `remote_ok=${remoteOk}`,
118
+ `sandbox_ok=${sandboxOk}`,
119
+ ],
120
+ });
121
+ }
122
+
123
+ function chooseRetrievalMode(state, question) {
124
+ const intent = String(state.intent?.type || state.intent || state.facts?.query_kind || '');
125
+ /** @type {Record<string, number>} */
126
+ const scores = {
127
+ ast: 0.2,
128
+ lexical: 0.2,
129
+ semantic: 0.2,
130
+ memory: 0.1,
131
+ web: 0.1,
132
+ none: 0.05,
133
+ };
134
+ if (/symbol|import|definition|call.?graph/i.test(intent)) scores.ast += 4;
135
+ if (/where|file|path|string/i.test(intent)) scores.lexical += 2;
136
+ if (/concept|architecture|why|design/i.test(intent)) scores.semantic += 3;
137
+ if (/last week|history|decision|remember/i.test(intent)) scores.memory += 4;
138
+ if (/cloudflare|provider docs|current support/i.test(intent)) scores.web += 4;
139
+ if (state.facts?.no_retrieval) {
140
+ scores.none += 10;
141
+ }
142
+ const value = argmax(scores);
143
+ return buildAnswer({
144
+ type: 'choose',
145
+ question_id: question.id,
146
+ value,
147
+ scores,
148
+ confidence_estimate: concentrationFromScores(scores),
149
+ evaluator: { kind: 'deterministic', version: '1', rule: 'retrieval_mode_v1' },
150
+ evidence: [`intent=${intent || 'unknown'}`],
151
+ });
152
+ }
153
+
154
+ function chooseVerificationScope(state, question) {
155
+ const packages = state.code?.affected_packages?.length || Number(state.facts?.affected_packages) || 0;
156
+ const risk = Number(state.facts?.change_risk_hint ?? 0);
157
+ /** @type {Record<string, number>} */
158
+ const scores = { focused: 1, package: 1, workspace: 0.5, repository: 0.2 };
159
+ if (packages <= 1 && risk < 2) scores.focused += 3;
160
+ else if (packages <= 3 && risk < 3) scores.package += 3;
161
+ else if (packages <= 8) scores.workspace += 3;
162
+ else scores.repository += 3;
163
+ const value = argmax(scores);
164
+ return buildAnswer({
165
+ type: 'choose',
166
+ question_id: question.id,
167
+ value,
168
+ scores,
169
+ confidence_estimate: concentrationFromScores(scores),
170
+ evaluator: { kind: 'deterministic', version: '1', rule: 'verification_scope_v1' },
171
+ evidence: [`affected_packages=${packages}`, `risk_hint=${risk}`],
172
+ });
173
+ }
174
+
175
+ function scoreChangeRisk(state, question) {
176
+ const levels = question.levels;
177
+ let index = 0;
178
+ const packages = state.code?.affected_packages?.length || 0;
179
+ if (state.facts?.security_boundary || state.facts?.schema_change) index = Math.max(index, 3);
180
+ if (state.facts?.production_sensitive) index = Math.max(index, 4);
181
+ if (packages > 5) index = Math.max(index, 2);
182
+ else if (packages > 1) index = Math.max(index, 1);
183
+ if (state.facts?.runtime_change) index = Math.max(index, 3);
184
+ index = Math.min(index, levels[levels.length - 1].index);
185
+
186
+ /** @type {Record<string, number>} */
187
+ const scores = {};
188
+ for (const level of levels) {
189
+ const dist = Math.abs(level.index - index);
190
+ scores[String(level.index)] = Math.max(0.05, 1 / (1 + dist * dist));
191
+ }
192
+ return buildAnswer({
193
+ type: 'score',
194
+ question_id: question.id,
195
+ value: index,
196
+ levels: Object.fromEntries(levels.map((l) => [String(l.index), l.label])),
197
+ scores,
198
+ confidence_estimate: concentrationFromScores(scores),
199
+ evaluator: { kind: 'deterministic', version: '1', rule: 'change_risk_v1' },
200
+ evidence: [
201
+ `packages=${packages}`,
202
+ `security_boundary=${Boolean(state.facts?.security_boundary)}`,
203
+ `schema_change=${Boolean(state.facts?.schema_change)}`,
204
+ `production_sensitive=${Boolean(state.facts?.production_sensitive)}`,
205
+ ],
206
+ });
207
+ }
208
+
209
+ function checkRequiresApproval(state, question) {
210
+ const production = Boolean(
211
+ state.constraints?.production_write
212
+ || state.facts?.production_write
213
+ || state.constraints?.approval === 'always',
214
+ );
215
+ const irreversible = Boolean(state.facts?.irreversible);
216
+ const highRisk = Number(state.facts?.change_risk_hint ?? 0) >= 3;
217
+ const value = production || irreversible || highRisk;
218
+ const support = value ? 0.95 : 0.08;
219
+ return buildAnswer({
220
+ type: 'check',
221
+ question_id: question.id,
222
+ value,
223
+ support: clamp01(support),
224
+ // Explicitly NOT calibrated_probability
225
+ evaluator: { kind: 'deterministic', version: '1', rule: 'requires_approval_v1' },
226
+ evidence: [
227
+ `production_write=${production}`,
228
+ `irreversible=${irreversible}`,
229
+ `high_risk=${highRisk}`,
230
+ ],
231
+ });
232
+ }
233
+
234
+ function checkSecurityReview(state, question) {
235
+ const value = Boolean(
236
+ state.facts?.security_boundary
237
+ || state.facts?.auth_change
238
+ || state.facts?.secret_handling
239
+ || state.constraints?.security === 'review',
240
+ );
241
+ return buildAnswer({
242
+ type: 'check',
243
+ question_id: question.id,
244
+ value,
245
+ support: value ? 0.9 : 0.12,
246
+ evaluator: { kind: 'deterministic', version: '1', rule: 'security_review_v1' },
247
+ evidence: [
248
+ `security_boundary=${Boolean(state.facts?.security_boundary)}`,
249
+ `auth_change=${Boolean(state.facts?.auth_change)}`,
250
+ ],
251
+ });
252
+ }
253
+
254
+ function chooseSkillCandidate(state, question) {
255
+ const options = Array.isArray(question.options) ? question.options : [];
256
+ if (!options.length) {
257
+ const err = new Error('skill_candidate_requires_options');
258
+ err.code = 'invalid_question';
259
+ throw err;
260
+ }
261
+ const intent = String(state.intent?.text || state.intent?.type || state.intent || '').toLowerCase();
262
+ const tags = Array.isArray(state.facts?.intent_tags)
263
+ ? state.facts.intent_tags.map((t) => String(t).toLowerCase())
264
+ : intent.split(/\W+/).filter(Boolean);
265
+ const criteria = question.criteria && typeof question.criteria === 'object' ? question.criteria : {};
266
+ const skills = state.skills && typeof state.skills === 'object' ? state.skills : {};
267
+
268
+ /** @type {Record<string, number>} */
269
+ const scores = {};
270
+ for (const opt of options) {
271
+ let score = 0.1;
272
+ const def = criteria[opt] || skills[opt] || {};
273
+ const hay = [
274
+ opt,
275
+ def.label,
276
+ def.description,
277
+ ...(Array.isArray(def.tags) ? def.tags : []),
278
+ ...(Array.isArray(def.use_when) ? def.use_when : []),
279
+ ]
280
+ .filter(Boolean)
281
+ .join(' ')
282
+ .toLowerCase();
283
+ for (const tag of tags) {
284
+ if (tag.length >= 3 && hay.includes(tag)) score += 1.5;
285
+ }
286
+ if (intent && hay && intent.split(/\s+/).some((w) => w.length >= 4 && hay.includes(w))) {
287
+ score += 2;
288
+ }
289
+ scores[opt] = score;
290
+ }
291
+ const value = argmax(scores);
292
+ return buildAnswer({
293
+ type: 'choose',
294
+ question_id: question.id,
295
+ value,
296
+ scores,
297
+ confidence_estimate: concentrationFromScores(scores),
298
+ evaluator: { kind: 'deterministic', version: '1', rule: 'skill_candidate_v1' },
299
+ evidence: [`intent=${intent || 'unknown'}`, `candidates=${options.join(',')}`],
300
+ });
301
+ }
302
+
303
+ function fromFactChoose(state, question) {
304
+ const value = state.facts[`choose.${question.id}`];
305
+ /** @type {Record<string, number>} */
306
+ const scores = {};
307
+ for (const opt of question.options) scores[opt] = opt === value ? 1 : 0;
308
+ return buildAnswer({
309
+ type: 'choose',
310
+ question_id: question.id,
311
+ value,
312
+ scores,
313
+ confidence_estimate: 1,
314
+ evaluator: { kind: 'deterministic', version: '1', rule: 'fact_choose' },
315
+ evidence: [`fact=choose.${question.id}`],
316
+ });
317
+ }
318
+
319
+ function fromFactCheck(state, question) {
320
+ const value = Boolean(state.facts[`check.${question.id}`]);
321
+ return buildAnswer({
322
+ type: 'check',
323
+ question_id: question.id,
324
+ value,
325
+ support: value ? 1 : 0,
326
+ evaluator: { kind: 'deterministic', version: '1', rule: 'fact_check' },
327
+ evidence: [`fact=check.${question.id}`],
328
+ });
329
+ }
330
+
331
+ function argmax(scores) {
332
+ let best = null;
333
+ let bestV = -Infinity;
334
+ for (const [k, v] of Object.entries(scores)) {
335
+ if (v > bestV || (v === bestV && (best == null || k < best))) {
336
+ best = k;
337
+ bestV = v;
338
+ }
339
+ }
340
+ return best;
341
+ }
@@ -0,0 +1,61 @@
1
+ /**
2
+ * Heuristic evaluator — explicit utility formulas over state facts.
3
+ */
4
+
5
+ import { buildAnswer, concentrationFromScores, clamp01 } from '../confidence.js';
6
+
7
+ export const HEURISTIC_EVALUATOR = Object.freeze({
8
+ kind: 'heuristic',
9
+ version: '1',
10
+
11
+ supports(question) {
12
+ return question?.evaluator_hint === 'heuristic';
13
+ },
14
+
15
+ async evaluate(state, questions) {
16
+ /** @type {Record<string, object>} */
17
+ const answers = {};
18
+ for (const q of questions) {
19
+ if (q.type === 'score' && typeof state.facts?.[`score.${q.id}`] === 'number') {
20
+ const value = Number(state.facts[`score.${q.id}`]);
21
+ /** @type {Record<string, number>} */
22
+ const scores = {};
23
+ for (const level of q.levels) {
24
+ const dist = Math.abs(level.index - value);
25
+ scores[String(level.index)] = Math.max(0.01, 1 / (1 + dist));
26
+ }
27
+ answers[q.id] = buildAnswer({
28
+ type: 'score',
29
+ question_id: q.id,
30
+ value,
31
+ levels: Object.fromEntries(q.levels.map((l) => [String(l.index), l.label])),
32
+ scores,
33
+ confidence_estimate: concentrationFromScores(scores),
34
+ evaluator: { kind: 'heuristic', version: '1' },
35
+ });
36
+ continue;
37
+ }
38
+ if (q.type === 'check' && typeof state.facts?.[`support.${q.id}`] === 'number') {
39
+ const support = clamp01(Number(state.facts[`support.${q.id}`]));
40
+ answers[q.id] = buildAnswer({
41
+ type: 'check',
42
+ question_id: q.id,
43
+ value: support >= 0.5,
44
+ support,
45
+ evaluator: { kind: 'heuristic', version: '1' },
46
+ });
47
+ continue;
48
+ }
49
+ const err = new Error(`heuristic_unsupported:${q.id}`);
50
+ err.code = 'evaluator_unsupported';
51
+ throw err;
52
+ }
53
+ return {
54
+ ok: true,
55
+ evaluator: { kind: 'heuristic', version: '1' },
56
+ answers,
57
+ model_used: false,
58
+ deterministic: true,
59
+ };
60
+ },
61
+ });
@@ -0,0 +1,50 @@
1
+ /**
2
+ * Evaluator selection — cheapest reliable evaluator first.
3
+ * Deterministic facts MUST NOT silently fall through to semantic.
4
+ */
5
+
6
+ import { DETERMINISTIC_EVALUATOR } from './deterministic.js';
7
+ import { HEURISTIC_EVALUATOR } from './heuristic.js';
8
+ import { SEMANTIC_EVALUATOR } from './semantic.js';
9
+
10
+ const DEFAULT_CHAIN = [DETERMINISTIC_EVALUATOR, HEURISTIC_EVALUATOR, SEMANTIC_EVALUATOR];
11
+
12
+ /**
13
+ * @param {object} question
14
+ * @param {object[]} [evaluators]
15
+ */
16
+ export function selectEvaluator(question, evaluators = DEFAULT_CHAIN) {
17
+ if (question.evaluator_hint === 'semantic') {
18
+ const semantic = evaluators.find((e) => e.kind === 'semantic');
19
+ if (!semantic?.supports(question)) {
20
+ const err = new Error('semantic_evaluator_required_but_unavailable');
21
+ err.code = 'evaluator_unavailable';
22
+ throw err;
23
+ }
24
+ return semantic;
25
+ }
26
+ if (question.evaluator_hint === 'heuristic') {
27
+ const heuristic = evaluators.find((e) => e.kind === 'heuristic');
28
+ if (!heuristic?.supports(question)) {
29
+ const err = new Error('heuristic_evaluator_required_but_unavailable');
30
+ err.code = 'evaluator_unavailable';
31
+ throw err;
32
+ }
33
+ return heuristic;
34
+ }
35
+ if (question.evaluator_hint === 'deterministic' || !question.evaluator_hint) {
36
+ for (const ev of evaluators) {
37
+ if (ev.kind === 'semantic') continue; // never silent semantic fallback
38
+ if (ev.supports(question)) return ev;
39
+ }
40
+ }
41
+ for (const ev of evaluators) {
42
+ if (ev.kind === 'semantic') continue;
43
+ if (ev.supports(question)) return ev;
44
+ }
45
+ const err = new Error(`no_evaluator_for:${question.id}`);
46
+ err.code = 'evaluator_unsupported';
47
+ throw err;
48
+ }
49
+
50
+ export { DETERMINISTIC_EVALUATOR, HEURISTIC_EVALUATOR, SEMANTIC_EVALUATOR, DEFAULT_CHAIN };
@@ -0,0 +1,149 @@
1
+ /**
2
+ * Semantic evaluator — optional LLM path via existing AgentSam model routing.
3
+ * Numbers from this evaluator are confidence_estimate / support only —
4
+ * NEVER labeled calibrated_probability without calibration_id.
5
+ */
6
+
7
+ import { buildAnswer, concentrationFromScores, clamp01, softmax } from '../confidence.js';
8
+
9
+ export function createSemanticEvaluator(options = {}) {
10
+ const complete = options.complete;
11
+
12
+ return Object.freeze({
13
+ kind: 'semantic',
14
+ version: '1',
15
+
16
+ supports(question) {
17
+ return question?.evaluator_hint === 'semantic';
18
+ },
19
+
20
+ async evaluate(state, questions) {
21
+ if (typeof complete !== 'function') {
22
+ const err = new Error('semantic_evaluator_unconfigured');
23
+ err.code = 'evaluator_unavailable';
24
+ throw err;
25
+ }
26
+
27
+ /** @type {Record<string, object>} */
28
+ const answers = {};
29
+ for (const q of questions) {
30
+ const prompt = buildPrompt(state, q);
31
+ const raw = await complete({ prompt, question: q, state });
32
+ answers[q.id] = normalizeSemanticAnswer(q, raw);
33
+ }
34
+ return {
35
+ ok: true,
36
+ evaluator: { kind: 'semantic', version: '1' },
37
+ answers,
38
+ model_used: true,
39
+ deterministic: false,
40
+ };
41
+ },
42
+ });
43
+ }
44
+
45
+ function buildPrompt(state, question) {
46
+ return {
47
+ question_id: question.id,
48
+ type: question.type,
49
+ instructions: question.instructions,
50
+ criteria: question.criteria,
51
+ options: question.options,
52
+ levels: question.levels,
53
+ state_facts: state.facts || {},
54
+ intent: state.intent,
55
+ };
56
+ }
57
+
58
+ function normalizeSemanticAnswer(question, raw) {
59
+ const warnings = ['semantic_values_are_estimates_not_calibrated_probabilities'];
60
+ if (!raw || typeof raw !== 'object') {
61
+ const err = new Error('semantic_answer_invalid');
62
+ err.code = 'evaluator_failed';
63
+ throw err;
64
+ }
65
+
66
+ if (question.type === 'choose') {
67
+ const value = String(raw.value ?? raw.choice ?? '');
68
+ if (!question.options.includes(value)) {
69
+ const err = new Error(`semantic_choice_not_in_options:${value}`);
70
+ err.code = 'evaluator_failed';
71
+ throw err;
72
+ }
73
+ const scores = raw.scores && typeof raw.scores === 'object'
74
+ ? Object.fromEntries(question.options.map((o) => [o, Number(raw.scores[o]) || 0]))
75
+ : Object.fromEntries(question.options.map((o) => [o, o === value ? 1 : 0]));
76
+ return buildAnswer({
77
+ type: 'choose',
78
+ question_id: question.id,
79
+ value,
80
+ scores,
81
+ confidence_estimate: Number.isFinite(Number(raw.confidence_estimate))
82
+ ? clamp01(Number(raw.confidence_estimate))
83
+ : concentrationFromScores(scores),
84
+ // Explicitly omit probabilities unless caller marks probabilistic=true AND supplies dist
85
+ probabilities: raw.probabilistic === true && raw.probabilities
86
+ ? raw.probabilities
87
+ : null,
88
+ evaluator: { kind: 'semantic', version: '1' },
89
+ warnings,
90
+ evidence: Array.isArray(raw.evidence) ? raw.evidence : [],
91
+ });
92
+ }
93
+
94
+ if (question.type === 'score') {
95
+ let value = Number(raw.value);
96
+ const scores = raw.scores && typeof raw.scores === 'object'
97
+ ? Object.fromEntries(question.levels.map((l) => [String(l.index), Number(raw.scores[l.index] ?? raw.scores[String(l.index)]) || 0]))
98
+ : null;
99
+ if (raw.probabilistic === true && raw.probabilities) {
100
+ const probs = Object.fromEntries(
101
+ question.levels.map((l) => [String(l.index), Number(raw.probabilities[l.index] ?? raw.probabilities[String(l.index)]) || 0]),
102
+ );
103
+ value = question.levels.reduce((n, l) => n + l.index * (probs[String(l.index)] || 0), 0);
104
+ return buildAnswer({
105
+ type: 'score',
106
+ question_id: question.id,
107
+ value,
108
+ levels: Object.fromEntries(question.levels.map((l) => [String(l.index), l.label])),
109
+ scores: scores || probs,
110
+ probabilities: probs,
111
+ confidence_estimate: concentrationFromScores(probs),
112
+ evaluator: { kind: 'semantic', version: '1' },
113
+ warnings,
114
+ });
115
+ }
116
+ if (!Number.isFinite(value)) {
117
+ const err = new Error('semantic_score_invalid');
118
+ err.code = 'evaluator_failed';
119
+ throw err;
120
+ }
121
+ return buildAnswer({
122
+ type: 'score',
123
+ question_id: question.id,
124
+ value,
125
+ levels: Object.fromEntries(question.levels.map((l) => [String(l.index), l.label])),
126
+ scores: scores || softmax(Object.fromEntries(question.levels.map((l) => [String(l.index), -Math.abs(l.index - value)]))),
127
+ confidence_estimate: Number.isFinite(Number(raw.confidence_estimate))
128
+ ? clamp01(Number(raw.confidence_estimate))
129
+ : 0.5,
130
+ evaluator: { kind: 'semantic', version: '1' },
131
+ warnings,
132
+ });
133
+ }
134
+
135
+ // check
136
+ const support = clamp01(Number(raw.support ?? raw.confidence_estimate ?? (raw.value ? 0.8 : 0.2)));
137
+ return buildAnswer({
138
+ type: 'check',
139
+ question_id: question.id,
140
+ value: Boolean(raw.value ?? support >= 0.5),
141
+ support,
142
+ evaluator: { kind: 'semantic', version: '1' },
143
+ warnings,
144
+ evidence: Array.isArray(raw.evidence) ? raw.evidence : [],
145
+ });
146
+ }
147
+
148
+ /** Default unconfigured instance — fails closed. */
149
+ export const SEMANTIC_EVALUATOR = createSemanticEvaluator();
@@ -0,0 +1,61 @@
1
+ /**
2
+ * Hierarchical choose + beam retention for large taxonomies (skills, tools, errors).
3
+ * When top options are close, keep multiple paths alive instead of greedy commit.
4
+ */
5
+
6
+ /**
7
+ * @param {Array<{ id: string, score: number, parent?: string|null }>} candidates
8
+ * @param {object} [opts]
9
+ * @param {number} [opts.beamWidth]
10
+ * @param {number} [opts.closeMargin] keep peers within this absolute score of the best
11
+ */
12
+ export function beamRetain(candidates, opts = {}) {
13
+ const beamWidth = opts.beamWidth ?? 3;
14
+ const closeMargin = opts.closeMargin ?? 0.08;
15
+ const sorted = [...candidates].sort((a, b) => b.score - a.score || a.id.localeCompare(b.id));
16
+ if (!sorted.length) return [];
17
+ const best = sorted[0].score;
18
+ const close = sorted.filter((c) => best - c.score <= closeMargin);
19
+ const beam = (close.length > 1 ? close : sorted).slice(0, beamWidth);
20
+ return beam;
21
+ }
22
+
23
+ /**
24
+ * Walk a taxonomy level-by-level with beam retention.
25
+ * @param {object} opts
26
+ * @param {Array<{ id: string, parent: string|null, score: number }>} opts.nodes
27
+ * @param {number} [opts.beamWidth]
28
+ * @param {number} [opts.closeMargin]
29
+ */
30
+ export function hierarchicalChoose(opts = {}) {
31
+ const nodes = Array.isArray(opts.nodes) ? opts.nodes : [];
32
+ const roots = nodes.filter((n) => n.parent == null || n.parent === '');
33
+ let beam = beamRetain(roots, opts);
34
+ const path = [];
35
+ while (beam.length) {
36
+ // If multiple remain close, surface beam instead of committing.
37
+ if (beam.length > 1) {
38
+ return {
39
+ ok: true,
40
+ committed: false,
41
+ beam: beam.map((b) => b.id),
42
+ path: path.map((p) => p.id),
43
+ reason: 'close_candidates_retained',
44
+ };
45
+ }
46
+ const chosen = beam[0];
47
+ path.push(chosen);
48
+ const children = nodes.filter((n) => n.parent === chosen.id);
49
+ if (!children.length) {
50
+ return {
51
+ ok: true,
52
+ committed: true,
53
+ value: chosen.id,
54
+ path: path.map((p) => p.id),
55
+ beam: [chosen.id],
56
+ };
57
+ }
58
+ beam = beamRetain(children, opts);
59
+ }
60
+ return { ok: false, committed: false, beam: [], path: [], reason: 'empty_taxonomy' };
61
+ }