@spinabot/brigade 0.1.1 → 1.0.0

package/dist/agents/org/audit-log.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Brigade virtual-office layer — append-only derivation audit log (Stage A).
+ *
+ * Writes one JSONL record per successful `deriveOrgGraph` call when
+ * `cfg.org` is present. The 30-day GC is reserved for later; Stage-A
+ * only appends.
+ *
+ * Path: `<stateDir>/workspace/logs/org-derive.jsonl`
+ *
+ * Notes:
+ *
+ *   - Writes are best-effort: filesystem failures are swallowed so a
+ *     read-only workspace never crashes the derivation path.
+ *   - The path lives under workspace/logs so backup + redact tooling
+ *     that already scans that directory picks the file up for free.
+ *   - Stage-A consumers: tests + future CLI `org doctor`. NO existing
+ *     runtime calls this.
+ */
+import type { OrgDeriveAuditEntry } from "./types.js";
+export declare function appendOrgDeriveAudit(entry: OrgDeriveAuditEntry): void;
+export declare function resolveOrgDeriveAuditPath(): string;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/agents/org/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../src/agents/org/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAUrE;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}

package/dist/agents/org/audit-log.js

@@ -0,0 +1,37 @@
+/**
+ * Brigade virtual-office layer — append-only derivation audit log (Stage A).
+ *
+ * Writes one JSONL record per successful `deriveOrgGraph` call when
+ * `cfg.org` is present. The 30-day GC is reserved for later; Stage-A
+ * only appends.
+ *
+ * Path: `<stateDir>/workspace/logs/org-derive.jsonl`
+ *
+ * Notes:
+ *
+ *   - Writes are best-effort: filesystem failures are swallowed so a
+ *     read-only workspace never crashes the derivation path.
+ *   - The path lives under workspace/logs so backup + redact tooling
+ *     that already scans that directory picks the file up for free.
+ *   - Stage-A consumers: tests + future CLI `org doctor`. NO existing
+ *     runtime calls this.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { resolveStateDir } from "../../config/paths.js";
+export function appendOrgDeriveAudit(entry) {
+    try {
+        const file = resolveOrgDeriveAuditPath();
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.appendFileSync(file, JSON.stringify(entry) + "\n", "utf8");
+    }
+    catch {
+        // Best-effort: never let an audit-write failure abort the
+        // derivation path. The audit log is observability, not a
+        // contract.
+    }
+}
+export function resolveOrgDeriveAuditPath() {
+    return path.join(resolveStateDir(), "workspace", "logs", "org-derive.jsonl");
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/agents/org/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../../src/agents/org/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,oBAAoB,CAAC,KAA0B;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;QACzC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;QAC1D,yDAAyD;QACzD,YAAY;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAC/E,CAAC"}

package/dist/agents/org/auto-derive.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Brigade virtual-office layer — single-agent auto-derive (Stage A).
+ *
+ * Locked design default #1: solo installs synthesize an org graph
+ * IN-MEMORY ONLY. No file write happens until the operator runs
+ * `brigade org init` (Stage D). This module is the single source of
+ * the in-memory synthesis.
+ *
+ * Locked design default #2: the solo agent's role string is the
+ * literal `"Chief of Staff"`. Department name defaults to
+ * `"office"` so the lint-pass doesn't flag a single-member dept
+ * for the auto-derived case (the lint reads `source === "auto"`
+ * and skips).
+ *
+ * Returns `undefined` for multi-agent installs (the operator must
+ * opt in by authoring `cfg.org`). Returns `undefined` when no agents
+ * exist at all (empty config).
+ */
+import type { BrigadeConfig } from "../../config/io.js";
+import type { OrgGraph } from "./types.js";
+export declare function autoDeriveSoloGraph(cfg: BrigadeConfig): OrgGraph | undefined;
+//# sourceMappingURL=auto-derive.d.ts.map

package/dist/agents/org/auto-derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-derive.d.ts","sourceRoot":"","sources":["../../../src/agents/org/auto-derive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CA+B5E"}

package/dist/agents/org/auto-derive.js

@@ -0,0 +1,66 @@
+/**
+ * Brigade virtual-office layer — single-agent auto-derive (Stage A).
+ *
+ * Locked design default #1: solo installs synthesize an org graph
+ * IN-MEMORY ONLY. No file write happens until the operator runs
+ * `brigade org init` (Stage D). This module is the single source of
+ * the in-memory synthesis.
+ *
+ * Locked design default #2: the solo agent's role string is the
+ * literal `"Chief of Staff"`. Department name defaults to
+ * `"office"` so the lint-pass doesn't flag a single-member dept
+ * for the auto-derived case (the lint reads `source === "auto"`
+ * and skips).
+ *
+ * Returns `undefined` for multi-agent installs (the operator must
+ * opt in by authoring `cfg.org`). Returns `undefined` when no agents
+ * exist at all (empty config).
+ */
+const SOLO_DEPARTMENT = "office";
+const SOLO_ROLE = "Chief of Staff";
+export function autoDeriveSoloGraph(cfg) {
+    // `cfg.org` MUST be absent — this is the legacy-mode auto-derive path.
+    if (cfg.org)
+        return undefined;
+    const realAgents = collectRealAgents(cfg);
+    if (realAgents.length === 0)
+        return undefined;
+    if (realAgents.length > 1) {
+        // Multi-agent install with no `cfg.org` opt-in. Stay silent
+        // (locked design default #7).
+        return undefined;
+    }
+    const solo = realAgents[0];
+    // `realAgents.length === 1` is verified above, so this assert is
+    // a type-narrowing guard for `noUncheckedIndexedAccess`.
+    if (!solo)
+        return undefined;
+    return {
+        topOrder: solo,
+        members: {
+            [solo]: {
+                department: SOLO_DEPARTMENT,
+                reportsTo: null,
+                role: SOLO_ROLE,
+                source: "auto",
+            },
+        },
+        departments: { [SOLO_DEPARTMENT]: [solo] },
+        // No edges: a single-member graph has no peers / managers.
+        edges: [],
+        mode: "derived",
+    };
+}
+function collectRealAgents(cfg) {
+    const out = [];
+    const agents = cfg.agents ?? {};
+    for (const [id, value] of Object.entries(agents)) {
+        if (id === "defaults")
+            continue;
+        if (!value || typeof value !== "object")
+            continue;
+        out.push(id);
+    }
+    return out.sort();
+}
+//# sourceMappingURL=auto-derive.js.map

package/dist/agents/org/auto-derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-derive.js","sourceRoot":"","sources":["../../../src/agents/org/auto-derive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,MAAM,eAAe,GAAG,QAAQ,CAAC;AACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAM,UAAU,mBAAmB,CAAC,GAAkB;IACpD,uEAAuE;IACvE,IAAI,GAAG,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,4DAA4D;QAC5D,8BAA8B;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,iEAAiE;IACjE,yDAAyD;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE;YACP,CAAC,IAAI,CAAC,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,MAAM;aACf;SACF;QACD,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAC1C,2DAA2D;QAC3D,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAkB;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,IAAI,EAAE,KAAK,UAAU;YAAE,SAAS;QAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}

package/dist/agents/org/delivery-kind.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Brigade virtual-office layer — delivery kind (Stage D).
+ *
+ * Cross-agent A2A messages can carry a "kind" tag that explains WHY the
+ * inbound landed in the receiver's inbox:
+ *
+ *   - "delegation"  — a peer is handing a task off (the canonical
+ *                     `delegate_to_department` verb).
+ *   - "escalation"  — a downstream member is bubbling something up to
+ *                     their manager / the top-of-org.
+ *   - "review"      — a peer wants feedback / sign-off, NOT execution.
+ *
+ * The kind metadata rides on the session-inbox event's `contextKey` so
+ * that:
+ *   1. No new field is added to `SystemEvent` (additive-conditional —
+ *      the existing shape is preserved bit-for-bit when cfg.org is
+ *      absent).
+ *   2. Legacy events (no kind tag) decode to `undefined`; the receiver
+ *      hint renderer returns `undefined` for them; the assembler emits
+ *      nothing extra; the legacy code path stays identical.
+ *
+ * Encoding shape (rendered as a single contextKey string):
+ *
+ *   brigade-org-kind:<kind>:from:<senderAgentId>[:role:<role>][:dept:<dept>]
+ *
+ * The encoder lowercases the kind + agent id; the decoder is permissive
+ * about field order but strict about the leading sentinel prefix so the
+ * legacy `a2a:from:<sender>` contextKey (Stage C and earlier) is never
+ * mistaken for a kind-tagged event.
+ *
+ * STAGE-D CONTRACT
+ * ----------------
+ *   - This module never touches the inbox queue itself. Producers
+ *     (the `delegate_to_department` tool) call `encodeDeliveryKindContextKey`
+ *     and pass the result through to `enqueueSystemEvent`. Consumers
+ *     (the receiver-hint / escalation-inbox renderers) call
+ *     `decodeDeliveryKindContextKey` on `event.contextKey`. No other
+ *     wiring needed.
+ *
+ * No external agent-codebase identifiers
+ * are referenced from this file.
+ */
+/** The three delivery kinds Stage D ships. */
+export type DeliveryKind = "delegation" | "escalation" | "review";
+/**
+ * Result of decoding a contextKey carrying delivery-kind metadata. All
+ * fields except `kind` are best-effort — when absent the renderer falls
+ * back to the agent id alone.
+ */
+export interface DeliveryKindMetadata {
+    kind: DeliveryKind;
+    /** Sender agent id (lowercased canonical form). */
+    fromAgentId: string;
+    /** Optional human role of the sender (e.g. "Head of Logistics"). */
+    fromRole?: string;
+    /** Optional sender's department slug. */
+    fromDepartment?: string;
+}
+/**
+ * Type guard for the `DeliveryKind` union. Centralised so consumers
+ * downstream (renderer, tests, validation) share one source of truth.
+ */
+export declare function isDeliveryKind(value: unknown): value is DeliveryKind;
+/**
+ * Build the contextKey string a producer passes to `enqueueSystemEvent`
+ * so the receiver-hint renderer can pick up the kind on the next turn.
+ *
+ * Fields beyond `kind` + `fromAgentId` are encoded only when supplied.
+ * The encoder never throws; invalid kinds short-circuit to `undefined`
+ * so a malformed caller doesn't poison the inbox with a half-tagged
+ * contextKey (the legacy `a2a:from:<sender>` path takes over instead).
+ */
+export declare function encodeDeliveryKindContextKey(params: {
+    kind: DeliveryKind;
+    fromAgentId: string;
+    fromRole?: string;
+    fromDepartment?: string;
+}): string | undefined;
+/**
+ * Decode a contextKey produced by `encodeDeliveryKindContextKey`.
+ * Returns `undefined` for legacy / non-kind-tagged contextKeys so the
+ * receiver-hint renderer can short-circuit to "no hint" without
+ * additional branching at the call site.
+ *
+ * Permissive about ordering of the optional `role` / `dept` fields,
+ * strict about the sentinel prefix.
+ */
+export declare function decodeDeliveryKindContextKey(contextKey: string | null | undefined): DeliveryKindMetadata | undefined;
+//# sourceMappingURL=delivery-kind.d.ts.map

package/dist/agents/org/delivery-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-kind.d.ts","sourceRoot":"","sources":["../../../src/agents/org/delivery-kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,8CAA8C;AAC9C,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;AAYlE;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,YAAY,CAAC;IACnB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,GAAG,SAAS,CAarB;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACpC,oBAAoB,GAAG,SAAS,CA8ClC"}

package/dist/agents/org/delivery-kind.js

@@ -0,0 +1,149 @@
+/**
+ * Brigade virtual-office layer — delivery kind (Stage D).
+ *
+ * Cross-agent A2A messages can carry a "kind" tag that explains WHY the
+ * inbound landed in the receiver's inbox:
+ *
+ *   - "delegation"  — a peer is handing a task off (the canonical
+ *                     `delegate_to_department` verb).
+ *   - "escalation"  — a downstream member is bubbling something up to
+ *                     their manager / the top-of-org.
+ *   - "review"      — a peer wants feedback / sign-off, NOT execution.
+ *
+ * The kind metadata rides on the session-inbox event's `contextKey` so
+ * that:
+ *   1. No new field is added to `SystemEvent` (additive-conditional —
+ *      the existing shape is preserved bit-for-bit when cfg.org is
+ *      absent).
+ *   2. Legacy events (no kind tag) decode to `undefined`; the receiver
+ *      hint renderer returns `undefined` for them; the assembler emits
+ *      nothing extra; the legacy code path stays identical.
+ *
+ * Encoding shape (rendered as a single contextKey string):
+ *
+ *   brigade-org-kind:<kind>:from:<senderAgentId>[:role:<role>][:dept:<dept>]
+ *
+ * The encoder lowercases the kind + agent id; the decoder is permissive
+ * about field order but strict about the leading sentinel prefix so the
+ * legacy `a2a:from:<sender>` contextKey (Stage C and earlier) is never
+ * mistaken for a kind-tagged event.
+ *
+ * STAGE-D CONTRACT
+ * ----------------
+ *   - This module never touches the inbox queue itself. Producers
+ *     (the `delegate_to_department` tool) call `encodeDeliveryKindContextKey`
+ *     and pass the result through to `enqueueSystemEvent`. Consumers
+ *     (the receiver-hint / escalation-inbox renderers) call
+ *     `decodeDeliveryKindContextKey` on `event.contextKey`. No other
+ *     wiring needed.
+ *
+ * No external agent-codebase identifiers
+ * are referenced from this file.
+ */
+/** Allow-list of kinds for runtime validation. */
+const DELIVERY_KINDS = new Set([
+    "delegation",
+    "escalation",
+    "review",
+]);
+/** Sentinel prefix every kind-tagged contextKey starts with. */
+const CONTEXT_KEY_PREFIX = "brigade-org-kind:";
+/**
+ * Type guard for the `DeliveryKind` union. Centralised so consumers
+ * downstream (renderer, tests, validation) share one source of truth.
+ */
+export function isDeliveryKind(value) {
+    return typeof value === "string" && DELIVERY_KINDS.has(value);
+}
+/**
+ * Build the contextKey string a producer passes to `enqueueSystemEvent`
+ * so the receiver-hint renderer can pick up the kind on the next turn.
+ *
+ * Fields beyond `kind` + `fromAgentId` are encoded only when supplied.
+ * The encoder never throws; invalid kinds short-circuit to `undefined`
+ * so a malformed caller doesn't poison the inbox with a half-tagged
+ * contextKey (the legacy `a2a:from:<sender>` path takes over instead).
+ */
+export function encodeDeliveryKindContextKey(params) {
+    if (!isDeliveryKind(params.kind))
+        return undefined;
+    const from = (params.fromAgentId ?? "").trim().toLowerCase();
+    if (!from)
+        return undefined;
+    const parts = [
+        CONTEXT_KEY_PREFIX + params.kind,
+        `from:${from}`,
+    ];
+    const role = (params.fromRole ?? "").trim();
+    if (role)
+        parts.push(`role:${encodeURIComponent(role)}`);
+    const dept = (params.fromDepartment ?? "").trim().toLowerCase();
+    if (dept)
+        parts.push(`dept:${encodeURIComponent(dept)}`);
+    return parts.join(":");
+}
+/**
+ * Decode a contextKey produced by `encodeDeliveryKindContextKey`.
+ * Returns `undefined` for legacy / non-kind-tagged contextKeys so the
+ * receiver-hint renderer can short-circuit to "no hint" without
+ * additional branching at the call site.
+ *
+ * Permissive about ordering of the optional `role` / `dept` fields,
+ * strict about the sentinel prefix.
+ */
+export function decodeDeliveryKindContextKey(contextKey) {
+    if (typeof contextKey !== "string")
+        return undefined;
+    if (!contextKey.startsWith(CONTEXT_KEY_PREFIX))
+        return undefined;
+    const tail = contextKey.slice(CONTEXT_KEY_PREFIX.length);
+    if (!tail)
+        return undefined;
+    // The kind is the FIRST segment after the prefix; subsequent segments
+    // are `key:value` pairs. We tolerate the contextKey itself containing
+    // colons inside encoded role/dept values (they were URI-encoded), so
+    // splitting by `:` and walking left-to-right is safe.
+    const segments = tail.split(":");
+    const kindRaw = segments.shift();
+    if (!isDeliveryKind(kindRaw))
+        return undefined;
+    let fromAgentId;
+    let fromRole;
+    let fromDepartment;
+    for (let i = 0; i < segments.length; i += 2) {
+        const key = segments[i];
+        const value = segments[i + 1];
+        if (!key || value === undefined)
+            break;
+        if (key === "from")
+            fromAgentId = value;
+        else if (key === "role") {
+            try {
+                fromRole = decodeURIComponent(value);
+            }
+            catch {
+                fromRole = value;
+            }
+        }
+        else if (key === "dept") {
+            try {
+                fromDepartment = decodeURIComponent(value);
+            }
+            catch {
+                fromDepartment = value;
+            }
+        }
+    }
+    if (!fromAgentId)
+        return undefined;
+    const out = {
+        kind: kindRaw,
+        fromAgentId,
+    };
+    if (fromRole)
+        out.fromRole = fromRole;
+    if (fromDepartment)
+        out.fromDepartment = fromDepartment;
+    return out;
+}
+//# sourceMappingURL=delivery-kind.js.map

package/dist/agents/org/delivery-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-kind.js","sourceRoot":"","sources":["../../../src/agents/org/delivery-kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAKH,kDAAkD;AAClD,MAAM,cAAc,GAA8B,IAAI,GAAG,CAAC;IACxD,YAAY;IACZ,YAAY;IACZ,QAAQ;CACT,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAiB/C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,KAAqB,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAK5C;IACC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,KAAK,GAAa;QACtB,kBAAkB,GAAG,MAAM,CAAC,IAAI;QAChC,QAAQ,IAAI,EAAE;KACf,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAqC;IAErC,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,IAAI,WAA+B,CAAC;IACpC,IAAI,QAA4B,CAAC;IACjC,IAAI,cAAkC,CAAC;IAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM;QACvC,IAAI,GAAG,KAAK,MAAM;YAAE,WAAW,GAAG,KAAK,CAAC;aACnC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,GAAG,GAAyB;QAChC,IAAI,EAAE,OAAO;QACb,WAAW;KACZ,CAAC;IACF,IAAI,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtC,IAAI,cAAc;QAAE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agents/org/derive-graph.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Brigade virtual-office layer — graph derivation (Stage A).
+ *
+ * `deriveOrgGraph(cfg)` is the SINGLE entry point Stages B/C/D will
+ * use to read the org topology. It returns:
+ *
+ *   - `undefined` when `cfg.org` is absent (legacy mode).
+ *   - `undefined` when `cfg.org.a2a.mode === "explicit"` (operator
+ *     wants the legacy `cfg.session.agentToAgent.allow` matrix; the
+ *     org block is purely cosmetic in that mode at Stage A).
+ *   - `undefined` when no agents are members AND auto-derive cannot
+ *     synthesize a solo graph (defensive — shouldn't happen in practice).
+ *   - An `OrgGraph` otherwise.
+ *
+ * STAGE-A CONTRACT: This function is referenced ONLY by Stage-A tests
+ * and by the audit helper. NO existing runtime path calls it.
+ */
+import type { BrigadeConfig } from "../../config/io.js";
+import type { OrgGraph } from "./types.js";
+export declare function deriveOrgGraph(cfg: BrigadeConfig): OrgGraph | undefined;
+/**
+ * Display-surface variant: identical derivation, but `a2a.mode: "explicit"`
+ * does NOT blank the graph. Explicit mode is an A2A POLICY choice (use the
+ * flat allow matrix instead of graph edges) — it was never meant to make
+ * the org chart / connect banner / agents_list metadata / prompt org blocks
+ * claim "your crew is flat" while a full hierarchy sits in config.
+ *
+ * Use THIS from anything that renders or describes the org. POLICY
+ * consumers (the A2A adapter in agent-loop, org.delegate, sessions_send
+ * remedies) must keep `deriveOrgGraph` — they self-gate on the mode and
+ * fall back to the legacy allow matrix when it's "explicit".
+ */
+export declare function deriveOrgDisplayGraph(cfg: BrigadeConfig): OrgGraph | undefined;
+//# sourceMappingURL=derive-graph.d.ts.map

package/dist/agents/org/derive-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-graph.d.ts","sourceRoot":"","sources":["../../../src/agents/org/derive-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,KAAK,EAGV,QAAQ,EACT,MAAM,YAAY,CAAC;AAYpB,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAUvE;AAKD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAO9E"}