@llm-dev-ops/agentics-cli 1.3.15 → 1.4.0

package/dist/agents/types.d.ts

@@ -0,0 +1,304 @@
+/**
+ * Agent Type Definitions for agentics-cli
+ *
+ * CONSTITUTION REFERENCE: PROMPT 0 (Agent Infrastructure Constitution)
+ *
+ * CLASSIFICATION: CLI UX ORCHESTRATION
+ *
+ * This module defines the complete type system for CLI UX Agents,
+ * including the DecisionEvent schema required by the constitution.
+ *
+ * KEY CONSTRAINTS:
+ * - All types import from agentics-contracts (schemas)
+ * - Agents are stateless - no persistent storage
+ * - DecisionEvents emit to ruvector-service only
+ * - No business logic in type definitions
+ */
+/**
+ * Agent classification as defined by the constitution.
+ * agentics-cli agents are EXCLUSIVELY CLI UX ORCHESTRATION type.
+ */
+export type AgentClassification = 'CLI_UX_ORCHESTRATION';
+/**
+ * Agent identifier with semantic versioning.
+ */
+export interface AgentIdentifier {
+    readonly agent_id: string;
+    readonly agent_version: string;
+    readonly agent_name: string;
+    readonly classification: AgentClassification;
+}
+/**
+ * Decision types for CLI UX Agents.
+ *
+ * As per constitution, agentics-cli agents handle UX orchestration only.
+ */
+export type DecisionType = 'cli_ux_orchestration' | 'command_validation' | 'service_routing' | 'output_formatting' | 'error_presentation' | 'workflow_guidance';
+/**
+ * Confidence level for CLI UX decisions.
+ *
+ * Represents certainty in:
+ * - Command interpretation
+ * - Input validation
+ * - Service routing
+ * - Output presentation
+ */
+export interface ConfidenceScore {
+    /** Overall confidence (0.0 - 1.0) */
+    readonly value: number;
+    /** What the confidence represents */
+    readonly basis: ConfidenceBasis;
+    /** Breakdown by component */
+    readonly components?: ConfidenceComponent[];
+}
+export type ConfidenceBasis = 'command_resolution' | 'input_validation' | 'service_match' | 'output_formatting';
+export interface ConfidenceComponent {
+    readonly name: string;
+    readonly value: number;
+    readonly weight: number;
+}
+/**
+ * Constraints applied during CLI UX decision.
+ */
+export interface ConstraintsApplied {
+    /** User permissions scope */
+    readonly permissions: string[];
+    /** Environment context */
+    readonly environment: EnvironmentContext;
+    /** Scope limitations */
+    readonly scope: ScopeLimitation[];
+}
+export interface EnvironmentContext {
+    readonly is_local: boolean;
+    readonly is_production: boolean;
+    readonly execution_gate_enabled: boolean;
+    readonly auth_present: boolean;
+}
+export interface ScopeLimitation {
+    readonly type: 'command' | 'service' | 'output';
+    readonly constraint: string;
+    readonly reason: string;
+}
+/**
+ * DecisionEvent schema as required by PROMPT 0.
+ *
+ * EMISSION RULES:
+ * - At most ONE DecisionEvent per agent invocation
+ * - MAY be emitted to ruvector-service (async, non-blocking)
+ * - MUST NOT be persisted locally
+ */
+export interface DecisionEvent {
+    /** Agent that made the decision */
+    readonly agent_id: string;
+    /** Version of the agent */
+    readonly agent_version: string;
+    /** Type of decision made */
+    readonly decision_type: DecisionType;
+    /** Hash of inputs for reproducibility (no raw data) */
+    readonly inputs_hash: string;
+    /** Decision outputs (reference only, no raw data) */
+    readonly outputs: DecisionOutputs;
+    /** Confidence in the decision */
+    readonly confidence: ConfidenceScore;
+    /** Constraints that affected the decision */
+    readonly constraints_applied: ConstraintsApplied;
+    /** Reference to downstream execution (if any) */
+    readonly execution_ref: ExecutionReference | null;
+    /** UTC timestamp of decision */
+    readonly timestamp: string;
+    /** Trace ID for correlation */
+    readonly trace_id: string;
+}
+/**
+ * Decision outputs - references only, no raw data.
+ */
+export interface DecisionOutputs {
+    /** Command that was executed */
+    readonly command: string;
+    /** Subcommand if applicable */
+    readonly subcommand?: string;
+    /** Result type */
+    readonly result_type: 'success' | 'error' | 'guidance';
+    /** Reference to any artifact produced */
+    readonly artifact_ref?: string;
+    /** Services invoked */
+    readonly services_invoked: string[];
+}
+/**
+ * Reference to downstream execution.
+ */
+export interface ExecutionReference {
+    /** Downstream service that was invoked */
+    readonly service: string;
+    /** Execution ID from downstream */
+    readonly execution_id: string;
+    /** Trace ID for correlation */
+    readonly trace_id: string;
+}
+/**
+ * CLI UX Agent input contract.
+ *
+ * Uses schemas from agentics-contracts for validation.
+ */
+export interface CLIUXAgentInput {
+    /** Raw command line arguments */
+    readonly args: string[];
+    /** Parsed command object */
+    readonly command: ParsedCommand;
+    /** Environment context */
+    readonly context: AgentContext;
+    /** Trace ID for correlation */
+    readonly trace_id: string;
+}
+export interface ParsedCommand {
+    readonly command: string;
+    readonly subcommand?: string;
+    readonly flags: Record<string, boolean>;
+    readonly options: Record<string, string>;
+    readonly positionalArgs: string[];
+}
+export interface AgentContext {
+    /** Current working directory */
+    readonly cwd: string;
+    /** Is authenticated */
+    readonly authenticated: boolean;
+    /** Is execution gate enabled */
+    readonly execution_gate_enabled: boolean;
+    /** Output format preference */
+    readonly output_format: OutputFormat;
+    /** Verbose mode */
+    readonly verbose: boolean;
+    /** Timeout in ms */
+    readonly timeout: number;
+}
+export type OutputFormat = 'json' | 'yaml' | 'table' | 'text' | 'csv';
+/**
+ * CLI UX Agent output contract.
+ */
+export interface CLIUXAgentOutput {
+    /** Success or failure */
+    readonly success: boolean;
+    /** Result to display to user */
+    readonly result: AgentResult;
+    /** Decision event (if emitting) */
+    readonly decision_event?: DecisionEvent;
+    /** Timing information */
+    readonly timing: TimingInfo;
+}
+export type AgentResult = SuccessResult | ErrorResult | GuidanceResult;
+export interface SuccessResult {
+    readonly type: 'success';
+    readonly data: unknown;
+    readonly artifact_ref?: string;
+    readonly services_invoked: string[];
+}
+export interface ErrorResult {
+    readonly type: 'error';
+    readonly code: string;
+    readonly message: string;
+    readonly details?: Record<string, unknown>;
+    readonly recoverable: boolean;
+}
+export interface GuidanceResult {
+    readonly type: 'guidance';
+    readonly message: string;
+    readonly options?: GuidanceOption[];
+    readonly next_steps?: string[];
+}
+export interface GuidanceOption {
+    readonly label: string;
+    readonly command: string;
+    readonly description: string;
+}
+export interface TimingInfo {
+    readonly total_ms: number;
+    readonly breakdown: Record<string, number>;
+    readonly started_at: string;
+    readonly completed_at: string;
+}
+/**
+ * Agent registration metadata.
+ */
+export interface AgentRegistration {
+    readonly identifier: AgentIdentifier;
+    readonly purpose: string;
+    readonly inputs_schema_ref: string;
+    readonly outputs_schema_ref: string;
+    readonly decision_event_schema_ref: string;
+    readonly invocable_services: string[];
+    readonly non_responsibilities: string[];
+    readonly failure_modes: FailureMode[];
+}
+export interface FailureMode {
+    readonly code: string;
+    readonly description: string;
+    readonly exit_code: number;
+    readonly recoverable: boolean;
+}
+/**
+ * Telemetry event for LLM-Observatory integration.
+ */
+export interface TelemetryEvent {
+    readonly event_type: TelemetryEventType;
+    readonly agent_id: string;
+    readonly timestamp: string;
+    readonly trace_id: string;
+    readonly data: TelemetryData;
+}
+export type TelemetryEventType = 'agent_invocation' | 'agent_completion' | 'service_call' | 'validation_event' | 'error_event';
+export type TelemetryData = InvocationTelemetry | CompletionTelemetry | ServiceCallTelemetry | ValidationTelemetry | ErrorTelemetry;
+export interface InvocationTelemetry {
+    readonly type: 'invocation';
+    readonly command: string;
+    readonly subcommand?: string;
+    readonly input_hash: string;
+}
+export interface CompletionTelemetry {
+    readonly type: 'completion';
+    readonly success: boolean;
+    readonly duration_ms: number;
+    readonly services_invoked: string[];
+}
+export interface ServiceCallTelemetry {
+    readonly type: 'service_call';
+    readonly service: string;
+    readonly method: string;
+    readonly duration_ms: number;
+    readonly status_code: number;
+}
+export interface ValidationTelemetry {
+    readonly type: 'validation';
+    readonly schema: string;
+    readonly valid: boolean;
+    readonly error_count?: number;
+}
+export interface ErrorTelemetry {
+    readonly type: 'error';
+    readonly code: string;
+    readonly category: string;
+    readonly recoverable: boolean;
+}
+export declare function isSuccessResult(result: AgentResult): result is SuccessResult;
+export declare function isErrorResult(result: AgentResult): result is ErrorResult;
+export declare function isGuidanceResult(result: AgentResult): result is GuidanceResult;
+/**
+ * Current CLI UX Agent version.
+ */
+export declare const CLI_UX_AGENT_VERSION = "1.0.0";
+/**
+ * CLI UX Agent identifier.
+ */
+export declare const CLI_UX_AGENT_ID = "cli-ux-agent";
+/**
+ * CLI UX Agent classification (always CLI_UX_ORCHESTRATION).
+ */
+export declare const CLI_UX_AGENT_CLASSIFICATION: AgentClassification;
+/**
+ * Services that CLI UX Agent MAY invoke (per constitution).
+ */
+export declare const INVOCABLE_SERVICES: readonly ["agentics-org-manifests", "agentics-simulation-planner", "agentics-simulation-runner", "agentics-simulation-engine", "agentics-results-index", "enterprise-roi-engine", "agentics-deployment-intent", "agentics-deployment-exporters", "diligence-artifacts", "ruvector-service"];
+/**
+ * Explicit non-responsibilities (per constitution).
+ */
+export declare const NON_RESPONSIBILITIES: readonly ["Execute inference", "Execute workflows", "Modify upstream state directly", "Apply optimizations", "Enforce governance or policy decisions", "Trigger retries or automation implicitly", "Persist business state", "Synthesize executive decisions", "Connect directly to databases", "Execute SQL"];
+//# sourceMappingURL=types.d.ts.map

package/dist/agents/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;CAC9C;AAMD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,6BAA6B;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,kBAAkB,GAClB,eAAe,GACf,mBAAmB,CAAC;AAExB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAC/B,0BAA0B;IAC1B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,wBAAwB;IACxB,QAAQ,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,2BAA2B;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,4BAA4B;IAC5B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IAErC,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAElC,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IAErC,6CAA6C;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;IAEjD,iDAAiD;IACjD,QAAQ,CAAC,aAAa,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAElD,gCAAgC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB;IAClB,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;IACvD,yCAAyC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,uBAAuB;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAMD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,gCAAgC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,+BAA+B;IAC/B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,mBAAmB;IACnB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oBAAoB;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,mCAAmC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;IACxC,yBAAyB;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,WAAW,GACX,cAAc,CAAC;AAEnB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAC1B,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,aAAa,CAAC;AAElB,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,cAAc,CAAC;AAEnB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,IAAI,aAAa,CAE5E;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,IAAI,WAAW,CAExE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,IAAI,cAAc,CAE9E;AAMD;;GAEG;AACH,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;GAEG;AACH,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAE9C;;GAEG;AACH,eAAO,MAAM,2BAA2B,EAAE,mBAA4C,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,kBAAkB,6RAWrB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,oBAAoB,gTAWvB,CAAC"}

package/dist/agents/types.js

@@ -0,0 +1,74 @@
+/**
+ * Agent Type Definitions for agentics-cli
+ *
+ * CONSTITUTION REFERENCE: PROMPT 0 (Agent Infrastructure Constitution)
+ *
+ * CLASSIFICATION: CLI UX ORCHESTRATION
+ *
+ * This module defines the complete type system for CLI UX Agents,
+ * including the DecisionEvent schema required by the constitution.
+ *
+ * KEY CONSTRAINTS:
+ * - All types import from agentics-contracts (schemas)
+ * - Agents are stateless - no persistent storage
+ * - DecisionEvents emit to ruvector-service only
+ * - No business logic in type definitions
+ */
+// ============================================================================
+// Type Guards
+// ============================================================================
+export function isSuccessResult(result) {
+    return result.type === 'success';
+}
+export function isErrorResult(result) {
+    return result.type === 'error';
+}
+export function isGuidanceResult(result) {
+    return result.type === 'guidance';
+}
+// ============================================================================
+// Constants
+// ============================================================================
+/**
+ * Current CLI UX Agent version.
+ */
+export const CLI_UX_AGENT_VERSION = '1.0.0';
+/**
+ * CLI UX Agent identifier.
+ */
+export const CLI_UX_AGENT_ID = 'cli-ux-agent';
+/**
+ * CLI UX Agent classification (always CLI_UX_ORCHESTRATION).
+ */
+export const CLI_UX_AGENT_CLASSIFICATION = 'CLI_UX_ORCHESTRATION';
+/**
+ * Services that CLI UX Agent MAY invoke (per constitution).
+ */
+export const INVOCABLE_SERVICES = [
+    'agentics-org-manifests',
+    'agentics-simulation-planner',
+    'agentics-simulation-runner',
+    'agentics-simulation-engine',
+    'agentics-results-index',
+    'enterprise-roi-engine',
+    'agentics-deployment-intent',
+    'agentics-deployment-exporters',
+    'diligence-artifacts',
+    'ruvector-service',
+];
+/**
+ * Explicit non-responsibilities (per constitution).
+ */
+export const NON_RESPONSIBILITIES = [
+    'Execute inference',
+    'Execute workflows',
+    'Modify upstream state directly',
+    'Apply optimizations',
+    'Enforce governance or policy decisions',
+    'Trigger retries or automation implicitly',
+    'Persist business state',
+    'Synthesize executive decisions',
+    'Connect directly to databases',
+    'Execute SQL',
+];
+//# sourceMappingURL=types.js.map

package/dist/agents/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA+VH,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAmB;IAC/C,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAE9C;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwB,sBAAsB,CAAC;AAEvF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,wBAAwB;IACxB,6BAA6B;IAC7B,4BAA4B;IAC5B,4BAA4B;IAC5B,wBAAwB;IACxB,uBAAuB;IACvB,4BAA4B;IAC5B,+BAA+B;IAC/B,qBAAqB;IACrB,kBAAkB;CACV,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,mBAAmB;IACnB,mBAAmB;IACnB,gCAAgC;IAChC,qBAAqB;IACrB,wCAAwC;IACxC,0CAA0C;IAC1C,wBAAwB;IACxB,gCAAgC;IAChC,+BAA+B;IAC/B,aAAa;CACL,CAAC"}

package/dist/auth/gcp-identity.d.ts

@@ -0,0 +1,61 @@
+/**
+ * GCP Identity Token Module
+ *
+ * PURPOSE: Acquire Google Cloud identity tokens for Cloud Run authentication
+ *
+ * CONSTRAINTS (NON-NEGOTIABLE):
+ * - NO JWTs
+ * - NO OAuth flows
+ * - NO API keys
+ * - NO long-lived tokens
+ * - NO token validation or decoding
+ *
+ * The CLI relies on:
+ * - Application Default Credentials (ADC)
+ * - Existing gcloud auth login
+ * - Cloud Run IAM for enforcement
+ *
+ * This module only acquires tokens; verification is done by Cloud Run.
+ */
+export interface IdentityTokenResult {
+    token: string;
+    audience: string;
+}
+export interface IdentityTokenError {
+    type: 'not_authenticated' | 'gcloud_not_found' | 'token_acquisition_failed';
+    message: string;
+    details?: string;
+}
+/**
+ * Acquire a Google Cloud identity token for the specified audience.
+ *
+ * This function:
+ * 1. Checks for a cached valid token
+ * 2. If not cached, invokes gcloud to get a new token
+ * 3. Caches the token for the process duration
+ *
+ * The CLI NEVER validates or decodes the token.
+ * Cloud Run IAM handles all verification.
+ *
+ * @param audience - The Cloud Run service URL (e.g., https://service-xxx.run.app)
+ * @returns The identity token
+ * @throws AuthError if token acquisition fails
+ */
+export declare function acquireIdentityToken(audience: string): string;
+/**
+ * Check if the user has valid GCP credentials.
+ * Returns true if gcloud auth is configured, false otherwise.
+ * Does NOT acquire or cache tokens.
+ */
+export declare function hasValidCredentials(): boolean;
+/**
+ * Get the currently active GCP account (if any).
+ * Returns null if not authenticated.
+ */
+export declare function getActiveAccount(): string | null;
+/**
+ * Clear the in-process token cache.
+ * Useful for testing or forcing re-authentication.
+ */
+export declare function clearTokenCache(): void;
+//# sourceMappingURL=gcp-identity.d.ts.map

package/dist/auth/gcp-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp-identity.d.ts","sourceRoot":"","sources":["../../src/auth/gcp-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAiCH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,0BAA0B,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAsB7D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAY7C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAehD;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/auth/gcp-identity.js

@@ -0,0 +1,228 @@
+/**
+ * GCP Identity Token Module
+ *
+ * PURPOSE: Acquire Google Cloud identity tokens for Cloud Run authentication
+ *
+ * CONSTRAINTS (NON-NEGOTIABLE):
+ * - NO JWTs
+ * - NO OAuth flows
+ * - NO API keys
+ * - NO long-lived tokens
+ * - NO token validation or decoding
+ *
+ * The CLI relies on:
+ * - Application Default Credentials (ADC)
+ * - Existing gcloud auth login
+ * - Cloud Run IAM for enforcement
+ *
+ * This module only acquires tokens; verification is done by Cloud Run.
+ */
+import { execSync } from 'node:child_process';
+import { AuthError } from '../errors/index.js';
+// ============================================================================
+// Configuration
+// ============================================================================
+/**
+ * Timeout for token acquisition (in milliseconds).
+ * gcloud should respond quickly if credentials are valid.
+ */
+const TOKEN_ACQUISITION_TIMEOUT_MS = 10000;
+/**
+ * Cache for identity tokens per audience.
+ * Tokens are cached for the duration of the CLI process only.
+ * This is NOT long-lived storage - it expires when the process exits.
+ */
+const tokenCache = new Map();
+/**
+ * Token expiry buffer (in milliseconds).
+ * Request a new token if it expires within this buffer.
+ * Identity tokens are typically valid for 1 hour.
+ */
+const TOKEN_EXPIRY_BUFFER_MS = 60000; // 1 minute buffer
+/**
+ * Acquire a Google Cloud identity token for the specified audience.
+ *
+ * This function:
+ * 1. Checks for a cached valid token
+ * 2. If not cached, invokes gcloud to get a new token
+ * 3. Caches the token for the process duration
+ *
+ * The CLI NEVER validates or decodes the token.
+ * Cloud Run IAM handles all verification.
+ *
+ * @param audience - The Cloud Run service URL (e.g., https://service-xxx.run.app)
+ * @returns The identity token
+ * @throws AuthError if token acquisition fails
+ */
+export function acquireIdentityToken(audience) {
+    // Normalize audience URL (strip trailing slashes, path components)
+    const normalizedAudience = normalizeAudience(audience);
+    // Check cache first
+    const cached = tokenCache.get(normalizedAudience);
+    if (cached && cached.expiresAt > Date.now() + TOKEN_EXPIRY_BUFFER_MS) {
+        return cached.token;
+    }
+    // Acquire new token via gcloud
+    const result = executeGcloudTokenCommand(normalizedAudience);
+    if ('error' in result) {
+        throw createAuthError(result.error);
+    }
+    // Cache the token (assume 1 hour validity, typical for identity tokens)
+    const expiresAt = Date.now() + 3600000; // 1 hour
+    tokenCache.set(normalizedAudience, { token: result.token, expiresAt });
+    return result.token;
+}
+/**
+ * Check if the user has valid GCP credentials.
+ * Returns true if gcloud auth is configured, false otherwise.
+ * Does NOT acquire or cache tokens.
+ */
+export function hasValidCredentials() {
+    try {
+        // Try to get account info - this doesn't require a specific audience
+        execSync('gcloud auth list --filter=status:ACTIVE --format="value(account)"', {
+            timeout: 5000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            encoding: 'utf-8',
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Get the currently active GCP account (if any).
+ * Returns null if not authenticated.
+ */
+export function getActiveAccount() {
+    try {
+        const result = execSync('gcloud auth list --filter=status:ACTIVE --format="value(account)"', {
+            timeout: 5000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            encoding: 'utf-8',
+        });
+        const account = result.trim();
+        return account || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Clear the in-process token cache.
+ * Useful for testing or forcing re-authentication.
+ */
+export function clearTokenCache() {
+    tokenCache.clear();
+}
+// ============================================================================
+// Internal Functions
+// ============================================================================
+/**
+ * Normalize the audience URL for consistent caching.
+ * Extracts just the origin (scheme + host).
+ */
+function normalizeAudience(audience) {
+    try {
+        const url = new URL(audience);
+        return `${url.protocol}//${url.host}`;
+    }
+    catch {
+        // If URL parsing fails, return as-is
+        return audience;
+    }
+}
+/**
+ * Service account for CLI to impersonate when acquiring identity tokens.
+ * This service account must have Cloud Run Invoker role on target services.
+ * Users must have Service Account Token Creator role on this service account.
+ */
+const CLI_SERVICE_ACCOUNT = process.env['AGENTICS_SERVICE_ACCOUNT']
+    ?? 'agentics-cli-invoker@agentics-dev.iam.gserviceaccount.com';
+/**
+ * Execute gcloud command to get an identity token.
+ * Uses service account impersonation to generate identity tokens with audiences.
+ * Returns either a token or an error descriptor.
+ */
+function executeGcloudTokenCommand(audience) {
+    try {
+        // Use gcloud to print an identity token for the specific audience
+        // Uses service account impersonation to support --audiences flag
+        const command = `gcloud auth print-identity-token --audiences="${audience}" --impersonate-service-account="${CLI_SERVICE_ACCOUNT}"`;
+        const result = execSync(command, {
+            timeout: TOKEN_ACQUISITION_TIMEOUT_MS,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            encoding: 'utf-8',
+        });
+        const token = result.trim();
+        if (!token) {
+            return {
+                error: {
+                    type: 'token_acquisition_failed',
+                    message: 'gcloud returned an empty token',
+                    details: 'The command succeeded but no token was returned',
+                },
+            };
+        }
+        return { token, audience };
+    }
+    catch (error) {
+        return { error: classifyGcloudError(error) };
+    }
+}
+/**
+ * Classify a gcloud execution error into a typed error descriptor.
+ */
+function classifyGcloudError(error) {
+    const errorMessage = error instanceof Error ? error.message : String(error);
+    const lowerMessage = errorMessage.toLowerCase();
+    // Check for gcloud not found
+    if (lowerMessage.includes('command not found') ||
+        lowerMessage.includes('not recognized') ||
+        lowerMessage.includes('enoent')) {
+        return {
+            type: 'gcloud_not_found',
+            message: 'Google Cloud CLI (gcloud) is not installed or not in PATH',
+            details: 'Install gcloud from https://cloud.google.com/sdk/docs/install and run `gcloud auth login`',
+        };
+    }
+    // Check for authentication issues
+    if (lowerMessage.includes('not logged in') ||
+        lowerMessage.includes('no credential') ||
+        lowerMessage.includes('could not load') ||
+        lowerMessage.includes('refresh token') ||
+        lowerMessage.includes('access token') ||
+        lowerMessage.includes('authentication')) {
+        return {
+            type: 'not_authenticated',
+            message: 'Not authenticated with Google Cloud',
+            details: 'Run `gcloud auth login` to authenticate',
+        };
+    }
+    // Generic failure
+    return {
+        type: 'token_acquisition_failed',
+        message: 'Failed to acquire identity token',
+        details: errorMessage,
+    };
+}
+/**
+ * Create an AuthError from an IdentityTokenError.
+ */
+function createAuthError(error) {
+    const typeMapping = {
+        not_authenticated: 'missing',
+        gcloud_not_found: 'missing',
+        token_acquisition_failed: 'invalid',
+    };
+    let fullMessage = error.message;
+    if (error.details) {
+        fullMessage += `\n\n${error.details}`;
+    }
+    return new AuthError({
+        type: typeMapping[error.type],
+        message: fullMessage,
+    });
+}
+//# sourceMappingURL=gcp-identity.js.map