@some-useful-agents/core 0.1.0

package/dist/chain-resolver.test.js

@@ -0,0 +1,86 @@
+import { describe, it, expect } from 'vitest';
+import { resolveExecutionOrder, resolveTemplate, CycleError, MissingDependencyError } from './chain-resolver.js';
+function agent(name, deps) {
+    return { name, type: 'shell', command: `echo ${name}`, dependsOn: deps };
+}
+describe('resolveExecutionOrder', () => {
+    it('returns single agent with no dependencies', () => {
+        const agents = new Map([['a', agent('a')]]);
+        const order = resolveExecutionOrder(agents);
+        expect(order.map(a => a.name)).toEqual(['a']);
+    });
+    it('resolves linear dependency chain', () => {
+        const agents = new Map([
+            ['c', agent('c', ['b'])],
+            ['b', agent('b', ['a'])],
+            ['a', agent('a')],
+        ]);
+        const order = resolveExecutionOrder(agents);
+        const names = order.map(a => a.name);
+        expect(names.indexOf('a')).toBeLessThan(names.indexOf('b'));
+        expect(names.indexOf('b')).toBeLessThan(names.indexOf('c'));
+    });
+    it('resolves diamond dependency', () => {
+        const agents = new Map([
+            ['d', agent('d', ['b', 'c'])],
+            ['b', agent('b', ['a'])],
+            ['c', agent('c', ['a'])],
+            ['a', agent('a')],
+        ]);
+        const order = resolveExecutionOrder(agents);
+        const names = order.map(a => a.name);
+        expect(names.indexOf('a')).toBeLessThan(names.indexOf('b'));
+        expect(names.indexOf('a')).toBeLessThan(names.indexOf('c'));
+        expect(names.indexOf('b')).toBeLessThan(names.indexOf('d'));
+        expect(names.indexOf('c')).toBeLessThan(names.indexOf('d'));
+    });
+    it('throws CycleError on circular dependency', () => {
+        const agents = new Map([
+            ['a', agent('a', ['b'])],
+            ['b', agent('b', ['a'])],
+        ]);
+        expect(() => resolveExecutionOrder(agents)).toThrow(CycleError);
+    });
+    it('throws CycleError on self-reference', () => {
+        const agents = new Map([['a', agent('a', ['a'])]]);
+        expect(() => resolveExecutionOrder(agents)).toThrow(CycleError);
+    });
+    it('throws MissingDependencyError for nonexistent dependency', () => {
+        const agents = new Map([['a', agent('a', ['missing'])]]);
+        expect(() => resolveExecutionOrder(agents)).toThrow(MissingDependencyError);
+    });
+    it('handles agents with no dependsOn field', () => {
+        const agents = new Map([
+            ['a', { name: 'a', type: 'shell', command: 'echo a' }],
+            ['b', { name: 'b', type: 'shell', command: 'echo b' }],
+        ]);
+        const order = resolveExecutionOrder(agents);
+        expect(order.length).toBe(2);
+    });
+});
+describe('resolveTemplate', () => {
+    it('resolves result template', () => {
+        const outputs = new Map([['fetch', { result: 'hello', exitCode: 0 }]]);
+        expect(resolveTemplate('got: {{outputs.fetch.result}}', outputs)).toBe('got: hello');
+    });
+    it('resolves exitCode template', () => {
+        const outputs = new Map([['fetch', { result: '', exitCode: 42 }]]);
+        expect(resolveTemplate('code: {{outputs.fetch.exitCode}}', outputs)).toBe('code: 42');
+    });
+    it('resolves multiple templates', () => {
+        const outputs = new Map([
+            ['a', { result: 'foo', exitCode: 0 }],
+            ['b', { result: 'bar', exitCode: 0 }],
+        ]);
+        expect(resolveTemplate('{{outputs.a.result}} and {{outputs.b.result}}', outputs)).toBe('foo and bar');
+    });
+    it('returns empty string for missing agent output', () => {
+        const outputs = new Map();
+        expect(resolveTemplate('got: {{outputs.missing.result}}', outputs)).toBe('got: ');
+    });
+    it('passes through non-template text', () => {
+        const outputs = new Map();
+        expect(resolveTemplate('plain text', outputs)).toBe('plain text');
+    });
+});
+//# sourceMappingURL=chain-resolver.test.js.map

package/dist/chain-resolver.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-resolver.test.js","sourceRoot":"","sources":["../src/chain-resolver.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGjH,SAAS,KAAK,CAAC,IAAY,EAAE,IAAe;IAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;YACrB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;SAClB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;YACrB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;SAClB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;YACrB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;YACrB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC/D,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,eAAe,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,eAAe,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;YACtB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACrC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,+CAA+C,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;QACxE,MAAM,CAAC,eAAe,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;QACxE,MAAM,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/env-builder.d.ts

@@ -0,0 +1,16 @@
+import type { AgentDefinition } from './types.js';
+export type TrustLevel = 'local' | 'community';
+export interface BuildEnvOptions {
+    agent: AgentDefinition;
+    trustLevel: TrustLevel;
+    secrets?: Record<string, string>;
+    processEnv?: Record<string, string | undefined>;
+}
+export interface BuildEnvResult {
+    env: Record<string, string>;
+    missingSecrets: string[];
+    warnings: string[];
+}
+export declare function buildAgentEnv(options: BuildEnvOptions): BuildEnvResult;
+export declare function getTrustLevel(agent: AgentDefinition): TrustLevel;
+//# sourceMappingURL=env-builder.d.ts.map

package/dist/env-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-builder.d.ts","sourceRoot":"","sources":["../src/env-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAkBD,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,cAAc,CA+CtE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CAGhE"}

package/dist/env-builder.js

@@ -0,0 +1,59 @@
+// Env vars safe for all agents regardless of trust level
+const MINIMAL_ALLOWLIST = ['PATH', 'HOME', 'LANG', 'TERM', 'TMPDIR'];
+// Additional env vars for local/trusted agents
+const LOCAL_ALLOWLIST = [
+    ...MINIMAL_ALLOWLIST,
+    'USER', 'SHELL', 'NODE_ENV', 'TZ',
+];
+// Patterns to match for local trust (e.g. LC_ALL, LC_CTYPE)
+const LOCAL_PATTERNS = [/^LC_/];
+// Heuristic: keys that suggest the value is a secret
+const SECRET_KEY_PATTERNS = /KEY|SECRET|TOKEN|PASSWORD|CREDENTIAL|AUTH/i;
+const SECRET_VALUE_MIN_LENGTH = 20;
+export function buildAgentEnv(options) {
+    const { agent, trustLevel, secrets = {}, processEnv = process.env } = options;
+    const warnings = [];
+    const missingSecrets = [];
+    const env = {};
+    // Step 1: Filter process.env based on trust level
+    const baseAllowlist = trustLevel === 'community' ? MINIMAL_ALLOWLIST : LOCAL_ALLOWLIST;
+    const extraAllowlist = agent.envAllowlist ?? [];
+    const allowedKeys = new Set([...baseAllowlist, ...extraAllowlist]);
+    for (const [key, value] of Object.entries(processEnv)) {
+        if (value === undefined)
+            continue;
+        if (allowedKeys.has(key)) {
+            env[key] = value;
+            continue;
+        }
+        // For local trust, also match patterns like LC_*
+        if (trustLevel === 'local' && LOCAL_PATTERNS.some(p => p.test(key))) {
+            env[key] = value;
+        }
+    }
+    // Step 2: Resolve declared secrets
+    for (const secretName of agent.secrets ?? []) {
+        if (secretName in secrets) {
+            env[secretName] = secrets[secretName];
+        }
+        else {
+            missingSecrets.push(secretName);
+        }
+    }
+    // Step 3: Apply agent's env field (YAML-declared key-values)
+    for (const [key, value] of Object.entries(agent.env ?? {})) {
+        // Warn if value looks like a hardcoded secret
+        if (SECRET_KEY_PATTERNS.test(key) && value.length >= SECRET_VALUE_MIN_LENGTH) {
+            warnings.push(`Agent "${agent.name}" has env var "${key}" that looks like a hardcoded secret. ` +
+                `Use the "secrets" field instead: sua secrets set ${key}`);
+        }
+        env[key] = value;
+    }
+    return { env, missingSecrets, warnings };
+}
+export function getTrustLevel(agent) {
+    if (agent.source === 'community')
+        return 'community';
+    return 'local';
+}
+//# sourceMappingURL=env-builder.js.map

package/dist/env-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-builder.js","sourceRoot":"","sources":["../src/env-builder.ts"],"names":[],"mappings":"AAiBA,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAErE,+CAA+C;AAC/C,MAAM,eAAe,GAAG;IACtB,GAAG,iBAAiB;IACpB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI;CAClC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAC;AAEhC,qDAAqD;AACrD,MAAM,mBAAmB,GAAG,4CAA4C,CAAC;AACzE,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,GAAG,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC9E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,kDAAkD;IAClD,MAAM,aAAa,GAAG,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC;IACvF,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjB,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,IAAI,UAAU,KAAK,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAC1B,GAAG,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,8CAA8C;QAC9C,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC7E,QAAQ,CAAC,IAAI,CACX,UAAU,KAAK,CAAC,IAAI,kBAAkB,GAAG,wCAAwC;gBACjF,oDAAoD,GAAG,EAAE,CAC1D,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IACrD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/env-builder.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=env-builder.test.d.ts.map

package/dist/env-builder.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-builder.test.d.ts","sourceRoot":"","sources":["../src/env-builder.test.ts"],"names":[],"mappings":""}

package/dist/env-builder.test.js

@@ -0,0 +1,167 @@
+import { describe, it, expect } from 'vitest';
+import { buildAgentEnv } from './env-builder.js';
+const FAKE_PROCESS_ENV = {
+    PATH: '/usr/bin',
+    HOME: '/home/user',
+    USER: 'testuser',
+    SHELL: '/bin/bash',
+    LANG: 'en_US.UTF-8',
+    LC_ALL: 'en_US.UTF-8',
+    TERM: 'xterm',
+    TMPDIR: '/tmp',
+    NODE_ENV: 'development',
+    TZ: 'America/Los_Angeles',
+    // Dangerous vars that should NOT leak to community agents
+    AWS_SECRET_ACCESS_KEY: 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
+    GITHUB_TOKEN: 'ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
+    ANTHROPIC_API_KEY: 'sk-ant-api03-xxxxxxxxxxxx',
+    OPENAI_API_KEY: 'sk-xxxxxxxxxxxxxxxxxxxx',
+    DATABASE_URL: 'postgres://user:pass@localhost/db',
+    CUSTOM_VAR: 'custom-value',
+};
+function makeAgent(overrides = {}) {
+    return {
+        name: 'test-agent',
+        type: 'shell',
+        command: 'echo test',
+        ...overrides,
+    };
+}
+describe('buildAgentEnv — community trust', () => {
+    it('does NOT leak AWS_SECRET_ACCESS_KEY', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community' }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.AWS_SECRET_ACCESS_KEY).toBeUndefined();
+    });
+    it('does NOT leak GITHUB_TOKEN', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community' }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.GITHUB_TOKEN).toBeUndefined();
+    });
+    it('does NOT leak ANTHROPIC_API_KEY', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community' }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.ANTHROPIC_API_KEY).toBeUndefined();
+    });
+    it('does NOT leak DATABASE_URL', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community' }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.DATABASE_URL).toBeUndefined();
+    });
+    it('allows PATH and HOME', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community' }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.PATH).toBe('/usr/bin');
+        expect(env.HOME).toBe('/home/user');
+    });
+    it('does NOT allow USER or SHELL for community', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community' }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.USER).toBeUndefined();
+        expect(env.SHELL).toBeUndefined();
+    });
+    it('allows explicitly allowlisted vars', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'community', envAllowlist: ['CUSTOM_VAR'] }),
+            trustLevel: 'community',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.CUSTOM_VAR).toBe('custom-value');
+    });
+});
+describe('buildAgentEnv — local trust', () => {
+    it('allows PATH, HOME, USER, SHELL', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'local' }),
+            trustLevel: 'local',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.PATH).toBe('/usr/bin');
+        expect(env.HOME).toBe('/home/user');
+        expect(env.USER).toBe('testuser');
+        expect(env.SHELL).toBe('/bin/bash');
+    });
+    it('allows LC_* pattern vars', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'local' }),
+            trustLevel: 'local',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.LC_ALL).toBe('en_US.UTF-8');
+    });
+    it('still does NOT leak AWS_SECRET_ACCESS_KEY for local agents', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ source: 'local' }),
+            trustLevel: 'local',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.AWS_SECRET_ACCESS_KEY).toBeUndefined();
+    });
+});
+describe('buildAgentEnv — secrets', () => {
+    it('injects declared secrets', () => {
+        const { env, missingSecrets } = buildAgentEnv({
+            agent: makeAgent({ secrets: ['MY_API_KEY'] }),
+            trustLevel: 'local',
+            secrets: { MY_API_KEY: 'secret-value' },
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.MY_API_KEY).toBe('secret-value');
+        expect(missingSecrets).toEqual([]);
+    });
+    it('reports missing secrets', () => {
+        const { missingSecrets } = buildAgentEnv({
+            agent: makeAgent({ secrets: ['MISSING_KEY'] }),
+            trustLevel: 'local',
+            secrets: {},
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(missingSecrets).toEqual(['MISSING_KEY']);
+    });
+});
+describe('buildAgentEnv — agent env field', () => {
+    it('applies agent env values', () => {
+        const { env } = buildAgentEnv({
+            agent: makeAgent({ env: { FOO: 'bar' } }),
+            trustLevel: 'local',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(env.FOO).toBe('bar');
+    });
+    it('warns on hardcoded secret-looking values', () => {
+        const { warnings } = buildAgentEnv({
+            agent: makeAgent({ env: { API_KEY: 'sk-1234567890abcdefghij' } }),
+            trustLevel: 'local',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(warnings.length).toBe(1);
+        expect(warnings[0]).toContain('hardcoded secret');
+    });
+    it('does NOT warn on short values', () => {
+        const { warnings } = buildAgentEnv({
+            agent: makeAgent({ env: { API_KEY: 'short' } }),
+            trustLevel: 'local',
+            processEnv: FAKE_PROCESS_ENV,
+        });
+        expect(warnings.length).toBe(0);
+    });
+});
+//# sourceMappingURL=env-builder.test.js.map

package/dist/env-builder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-builder.test.js","sourceRoot":"","sources":["../src/env-builder.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,MAAM,gBAAgB,GAA2B;IAC/C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,aAAa;IACrB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,aAAa;IACvB,EAAE,EAAE,qBAAqB;IACzB,0DAA0D;IAC1D,qBAAqB,EAAE,0CAA0C;IACjE,YAAY,EAAE,0CAA0C;IACxD,iBAAiB,EAAE,2BAA2B;IAC9C,cAAc,EAAE,yBAAyB;IACzC,YAAY,EAAE,mCAAmC;IACjD,UAAU,EAAE,cAAc;CAC3B,CAAC;AAEF,SAAS,SAAS,CAAC,YAAsC,EAAE;IACzD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,WAAW;QACpB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACzC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACzC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACzC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACzC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACzC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACzC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACrC,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACrC,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACrC,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;YAC5C,KAAK,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;YACvC,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;YACvC,KAAK,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5B,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YACzC,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YACjC,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC;YACjE,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YACjC,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/C,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export * from './types.js';
+export * from './schema.js';
+export * from './agent-loader.js';
+export * from './run-store.js';
+export * from './agent-executor.js';
+export * from './local-provider.js';
+export * from './chain-resolver.js';
+export * from './chain-executor.js';
+export * from './env-builder.js';
+export * from './secrets-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export * from './types.js';
+export * from './schema.js';
+export * from './agent-loader.js';
+export * from './run-store.js';
+export * from './agent-executor.js';
+export * from './local-provider.js';
+export * from './chain-resolver.js';
+export * from './chain-executor.js';
+export * from './env-builder.js';
+export * from './secrets-store.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC"}

package/dist/local-provider.d.ts

@@ -0,0 +1,24 @@
+import type { Provider, AgentDefinition, Run, RunStatus } from './types.js';
+import type { SecretsStore } from './secrets-store.js';
+export declare class LocalProvider implements Provider {
+    name: string;
+    private store;
+    private secretsStore?;
+    private running;
+    constructor(dbPath: string, secretsStore?: SecretsStore);
+    initialize(): Promise<void>;
+    shutdown(): Promise<void>;
+    submitRun(request: {
+        agent: AgentDefinition;
+        triggeredBy: Run['triggeredBy'];
+    }): Promise<Run>;
+    getRun(runId: string): Promise<Run | null>;
+    listRuns(filter?: {
+        agentName?: string;
+        status?: RunStatus;
+        limit?: number;
+    }): Promise<Run[]>;
+    cancelRun(runId: string): Promise<void>;
+    getRunLogs(runId: string): Promise<string>;
+}
+//# sourceMappingURL=local-provider.d.ts.map

package/dist/local-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-provider.d.ts","sourceRoot":"","sources":["../src/local-provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAI5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,qBAAa,aAAc,YAAW,QAAQ;IAC5C,IAAI,SAAW;IACf,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,OAAO,CAAsC;gBAEzC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,YAAY;IAKjD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAazB,SAAS,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,eAAe,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAmD7F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAI1C,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAI7F,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAavC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAQjD"}

package/dist/local-provider.js

@@ -0,0 +1,101 @@
+import { randomUUID } from 'node:crypto';
+import { RunStore } from './run-store.js';
+import { executeAgent } from './agent-executor.js';
+import { buildAgentEnv, getTrustLevel } from './env-builder.js';
+export class LocalProvider {
+    name = 'local';
+    store;
+    secretsStore;
+    running = new Map();
+    constructor(dbPath, secretsStore) {
+        this.store = new RunStore(dbPath);
+        this.secretsStore = secretsStore;
+    }
+    async initialize() {
+        // No-op for local provider
+    }
+    async shutdown() {
+        for (const [id, handle] of this.running) {
+            handle.kill();
+            this.store.updateRun(id, {
+                status: 'cancelled',
+                completedAt: new Date().toISOString(),
+                error: 'Provider shutting down',
+            });
+        }
+        this.running.clear();
+        this.store.close();
+    }
+    async submitRun(request) {
+        const run = {
+            id: randomUUID(),
+            agentName: request.agent.name,
+            status: 'running',
+            startedAt: new Date().toISOString(),
+            triggeredBy: request.triggeredBy,
+        };
+        this.store.createRun(run);
+        const trustLevel = getTrustLevel(request.agent);
+        const secrets = this.secretsStore ? await this.secretsStore.getAll() : undefined;
+        const { env, missingSecrets, warnings } = buildAgentEnv({
+            agent: request.agent,
+            trustLevel,
+            secrets,
+        });
+        for (const w of warnings) {
+            console.warn(`[warning] ${w}`);
+        }
+        if (missingSecrets.length > 0) {
+            this.store.updateRun(run.id, {
+                status: 'failed',
+                completedAt: new Date().toISOString(),
+                error: `Missing secrets: ${missingSecrets.join(', ')}. Run: sua secrets set <name>`,
+            });
+            return this.store.getRun(run.id);
+        }
+        const handle = executeAgent(request.agent, env);
+        this.running.set(run.id, handle);
+        handle.promise.then((result) => {
+            this.running.delete(run.id);
+            const status = result.exitCode === 0 ? 'completed' : 'failed';
+            this.store.updateRun(run.id, {
+                status,
+                completedAt: new Date().toISOString(),
+                result: result.result,
+                exitCode: result.exitCode,
+                error: result.error,
+            });
+        });
+        return run;
+    }
+    async getRun(runId) {
+        return this.store.getRun(runId);
+    }
+    async listRuns(filter) {
+        return this.store.listRuns(filter);
+    }
+    async cancelRun(runId) {
+        const handle = this.running.get(runId);
+        if (handle) {
+            handle.kill();
+            this.running.delete(runId);
+            this.store.updateRun(runId, {
+                status: 'cancelled',
+                completedAt: new Date().toISOString(),
+                error: 'Cancelled by user',
+            });
+        }
+    }
+    async getRunLogs(runId) {
+        const run = this.store.getRun(runId);
+        if (!run)
+            return '';
+        const parts = [];
+        if (run.result)
+            parts.push(run.result);
+        if (run.error)
+            parts.push(`[ERROR] ${run.error}`);
+        return parts.join('\n') || '(no output)';
+    }
+}
+//# sourceMappingURL=local-provider.js.map

package/dist/local-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-provider.js","sourceRoot":"","sources":["../src/local-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAwB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGhE,MAAM,OAAO,aAAa;IACxB,IAAI,GAAG,OAAO,CAAC;IACP,KAAK,CAAW;IAChB,YAAY,CAAgB;IAC5B,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAErD,YAAY,MAAc,EAAE,YAA2B;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,2BAA2B;IAC7B,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE;gBACvB,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,wBAAwB;aAChC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAoE;QAClF,MAAM,GAAG,GAAQ;YACf,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;YAC7B,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAE1B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YACtD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU;YACV,OAAO;SACR,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC3B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B;aACpF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAQ,CAAC;QAC1C,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAEjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE5B,MAAM,MAAM,GAAc,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC3B,MAAM;gBACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAmE;QAChF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE;gBAC1B,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,mBAAmB;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;IAC3C,CAAC;CACF"}

package/dist/run-store.d.ts

@@ -0,0 +1,16 @@
+import type { Run, RunStatus } from './types.js';
+export declare class RunStore {
+    private db;
+    constructor(dbPath: string);
+    createRun(run: Run): void;
+    getRun(id: string): Run | null;
+    updateRun(id: string, updates: Partial<Pick<Run, 'status' | 'completedAt' | 'result' | 'exitCode' | 'error'>>): void;
+    listRuns(filter?: {
+        agentName?: string;
+        status?: RunStatus;
+        limit?: number;
+    }): Run[];
+    close(): void;
+    private rowToRun;
+}
+//# sourceMappingURL=run-store.d.ts.map

package/dist/run-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-store.d.ts","sourceRoot":"","sources":["../src/run-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEjD,qBAAa,QAAQ;IACnB,OAAO,CAAC,EAAE,CAAe;gBAEb,MAAM,EAAE,MAAM;IA2B1B,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI;IAUzB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAO9B,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI;IAiBpH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG,EAAE;IA8BpF,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,QAAQ;CAajB"}