@kognai/orchestrator-core 0.1.3 → 0.2.0

package/dist/lib/sovereign-agent-factory.js

@@ -22,11 +22,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.analyzeSpawnRequest = analyzeSpawnRequest;
 exports.issueSpawnDecision = issueSpawnDecision;
 exports.sovereignSpawn = sovereignSpawn;
+exports.deriveOwner = deriveOwner;
+exports.spawnCitizen = spawnCitizen;
 exports.founderEmergencySpawn = founderEmergencySpawn;
 exports.getSpawnRegistry = getSpawnRegistry;
 exports.batchSpawn = batchSpawn;
 const engine_paths_1 = require("./engine-paths");
 const event_bus_publisher_1 = require("./event-bus-publisher");
+const citizenship_1 = require("./citizenship");
 // ─── Constitutional health zones ──────────────────────────────────────────────
 /** Thresholds from Founding Charter Article V. */
 const HEALTH_ORANGE = 60;
@@ -53,13 +56,16 @@ function classifyRequest(req) {
         return 'UTILITY';
     return 'SPECIALIST';
 }
+/** Initial ACP on the **0–100 scale** — reconciled with the ACP routing gate
+ *  (safety_hard_floor 70, minimum_route 50) and the registry reputation baseline.
+ *  EXTERNAL = 30 sits below the safety floor by design → probationary/supervised. */
 function initialAcp(cls) {
     switch (cls) {
-        case 'PRIME': return 0.85;
-        case 'CITIZEN': return 0.70;
-        case 'SPECIALIST': return 0.70;
-        case 'UTILITY': return 0.65;
-        case 'EXTERNAL': return 0.30;
+        case 'PRIME': return 85;
+        case 'CITIZEN': return 70;
+        case 'SPECIALIST': return 70;
+        case 'UTILITY': return 65;
+        case 'EXTERNAL': return 30;
     }
 }
 function governanceFor(cls, risk, override) {
@@ -151,6 +157,40 @@ function emitVoxight(signal) {
     }
     catch { /* Voxight feed is non-blocking */ }
 }
+/**
+ * Seed a new citizen's initial ACP into acp/trust-scores.json (0–100 scale) so
+ * the routing gate has a profile from birth — closing the "born scoreless"
+ * gap. Never clobbers an existing/earned score. Best-effort (never blocks spawn).
+ */
+function writeInitialAcp(agent_name, score) {
+    try {
+        const { readFileSync, writeFileSync, renameSync, mkdirSync } = require('fs');
+        const { join } = require('path');
+        const acpDir = join((0, engine_paths_1.resolveEnginePaths)().root, 'acp');
+        const acpPath = join(acpDir, 'trust-scores.json');
+        let data = {};
+        try {
+            data = JSON.parse(readFileSync(acpPath, 'utf-8'));
+        }
+        catch { /* fresh */ }
+        if (!data.scores)
+            data.scores = {};
+        if (data.scores[agent_name])
+            return; // respect an existing/earned score
+        const dims = Object.keys(data.dimensions ?? {});
+        const known = dims.length ? dims
+            : ['safety', 'accuracy', 'brand_alignment', 'cultural_sensitivity', 'legal_compliance', 'psychological_resilience'];
+        const entry = { composite: score, last_updated: new Date().toISOString().slice(0, 10) };
+        for (const d of known)
+            entry[d] = score;
+        data.scores[agent_name] = entry;
+        mkdirSync(acpDir, { recursive: true });
+        const tmp = `${acpPath}.tmp.${process.pid}`;
+        writeFileSync(tmp, JSON.stringify(data, null, 2));
+        renameSync(tmp, acpPath);
+    }
+    catch { /* ACP seeding is best-effort */ }
+}
 // ─── Factory ──────────────────────────────────────────────────────────────────
 const _registry = [];
 /**
@@ -249,6 +289,64 @@ function sovereignSpawn(req) {
     const analysis = analyzeSpawnRequest(req);
     return issueSpawnDecision(req, analysis);
 }
+/**
+ * Derive a new citizen's lineage owner from the spawn requester's DID, so the
+ * spawned citizen inherits the requester's identity:
+ *   - `did:external:{org}:…`        → external org  (AMD-23 airlock)
+ *   - `did:kognai:citizen:{wallet}` → the requester is a user's citizen forming
+ *                                     a swarm → sub-agents belong to that SCS
+ *                                     (scs id = the founder wallet)
+ *   - `did:kognai:scs:{scsId}:…`    → same SCS (a swarm growing itself)
+ *   - `did:kognai:{company}:…`      → that company (invoica/voxight/kreativ/…)
+ *   - anything else (founder / legacy `did:kognai:{agent}`) → kognai company.
+ *
+ * NB: the FIRST agent of a wallet (the citizen-journey 1-per-wallet citizen) is
+ * minted with `owner: { kind:'user', id: wallet }` by the join flow, not here —
+ * deriveOwner is for spawns *requested by* an existing citizen.
+ */
+function deriveOwner(requester_did) {
+    const did = requester_did || '';
+    if (did.startsWith('did:external:')) {
+        return { kind: 'external', id: did.split(':')[2] || 'unknown' };
+    }
+    const citizenMatch = did.match(/^did:kognai:citizen:(.+)$/);
+    if (citizenMatch)
+        return { kind: 'scs', id: citizenMatch[1] };
+    const scsMatch = did.match(/^did:kognai:scs:([^:]+):/);
+    if (scsMatch)
+        return { kind: 'scs', id: scsMatch[1] };
+    const companyMatch = did.match(/^did:kognai:([^:]+):/);
+    if (companyMatch && citizenship_1.COMPANY_PREFIXES[companyMatch[1]]) {
+        return { kind: 'company', id: companyMatch[1] };
+    }
+    return { kind: 'company', id: 'kognai' };
+}
+/**
+ * The single canonical citizen-spawn entry point: governance gate (SAF) →
+ * identity issuance (mintCitizen with the requester-derived owner). Every new
+ * citizen — product, external, user, or SCS sub-agent — should be born here.
+ *
+ * Returns the governance decision plus the minted citizen (when approved). The
+ * caller still writes citizen.yaml via renderCitizenYaml(citizen). The initial
+ * ACP (`decision.initial_acp_score`) should be persisted to the score registry
+ * by the caller/wiring step (see TICKET-335).
+ */
+function spawnCitizen(req, opts = {}) {
+    const decision = sovereignSpawn(req);
+    if (!decision.approved)
+        return { decision };
+    const owner = deriveOwner(req.requester_did);
+    const citizen = (0, citizenship_1.mintCitizen)(opts.agent_name ?? req.requested_role, {
+        owner,
+        citizen_type: 'spawned',
+        proposing_agent: req.requester_did,
+        now: opts.now,
+    });
+    decision.citizen_did = citizen.agent_did;
+    // Seed the initial ACP at birth (0–100) so the citizen has a routing profile.
+    writeInitialAcp(citizen.agent_name, decision.initial_acp_score);
+    return { decision, citizen };
+}
 /**
  * Emergency bypass — Founder only. Overrides all gates including health and
  * constitutional conditional findings. Logs prominently to KSL.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kognai/orchestrator-core",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "Kognai sovereign orchestrator — core engine (template-agnostic). Shared by all products (Kognai/coding, Voxight/market-intel, Invoica/fin-compliance); each supplies only its template. Replaces per-repo forks of orchestrate-agents-v2 / sprint-runner / lib.",
   "license": "MIT",
   "author": "SkinGem",