@t4h/agent-runtime 0.0.0-stage → 0.1.1

package/README.md

@@ -1,3 +1,24 @@
-# Temporary Holding Version
+# @t4h/agent-runtime
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Runtime dos **colaboradores digitais** da Tech for Humans. Um agente é uma pasta
+(`agent.yaml`, `persona.md`, `skills/`, `evals/`); este pacote faz o resto:
+
+- valida o `agent.yaml` (schema v1 em `schema/agent.schema.json` + regras entre campos);
+- caixa de entrada no Postgres: junta eventos por assunto, descarta repetido, ordena por prioridade;
+- rodadas com lock, teto de itens e de tempo, backoff e exceção para o DRI;
+- portão de política em toda chamada de ferramenta: nível por rotina (shadow, copilot,
+  agent, autonomous), proibidas, motivo obrigatório, idempotência, janela e teto por hora;
+- disjuntor que desce o nível da rotina quando erros e correções passam do limite;
+- memória curta (SQLite, uma execução) e longa (Postgres);
+- acesso aos sistemas só pelo Enterprise MCP Gateway, com a identidade própria do agente
+  (client do Keycloak com service account);
+- cérebro: Claude Agent SDK isolado (sem ferramentas built-in, sem config do disco).
+
+O template de repositório de agentes e o agente de referência vivem em
+[`t4h-agents`](https://github.com/tech4humans-brasil/t4h-agents).
+
+```bash
+pnpm --filter @t4h/agent-runtime build
+pnpm --filter @t4h/agent-runtime test     # sem modelo: ScriptedBrain + PGlite
+t4h-agent validate agents/                 # valida os agent.yaml de um repositório
+```

package/bin/t4h-agent.mjs

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+await import('../dist/cli.js');

package/dist/brain.d.ts

@@ -0,0 +1,48 @@
+/**
+ * O "cérebro" de uma execução: recebe o prompt, as ferramentas e o portão de política, e
+ * trabalha até fechar o item ou responder a conversa.
+ *
+ * `ClaudeBrain` usa o Claude Agent SDK (o harness do Claude Code como biblioteca), isolado:
+ *   - sem ferramentas built-in (nada de Bash, Read, Edit): só MCP do gateway, as do runtime
+ *     e o carregamento de skill;
+ *   - sem configuração do disco (`settingSources: []`) e sem MCP de plugin
+ *     (`skipMcpDiscovery`, `strictMcpConfig`): quem decide conexões é o runtime;
+ *   - toda chamada passa pelo PolicyGate, no hook PreToolUse e de novo no canUseTool;
+ *   - sem transcrição em disco (`persistSession: false`): o histórico que vale é o Postgres.
+ *
+ * Os testes usam um Brain roteirizado que chama o mesmo portão, sem modelo.
+ */
+import { type McpServerConfig } from '@anthropic-ai/claude-agent-sdk';
+import type { LoadedAgent } from './manifest.js';
+import type { PolicyGate } from './policy.js';
+import type { ResolvedSkills } from './plugins.js';
+import type { RuntimeTools } from './runtime-tools.js';
+export interface BrainTask {
+    agent: LoadedAgent;
+    systemPrompt: string;
+    prompt: string;
+    gate: PolicyGate;
+    tools: RuntimeTools;
+    /** Conectores do gateway (ou stubs locais), sem o `runtime`. */
+    mcpServers: Record<string, McpServerConfig>;
+    skills: ResolvedSkills;
+    maxTurns: number;
+    budgetUsd?: number;
+    signal: AbortSignal;
+}
+export interface BrainResult {
+    text: string;
+    costUsd: number;
+    turns: number;
+    error?: string;
+}
+export interface Brain {
+    run(task: BrainTask): Promise<BrainResult>;
+}
+export declare class ClaudeBrain implements Brain {
+    private readonly opts;
+    constructor(opts?: {
+        debug?: boolean;
+    });
+    run(task: BrainTask): Promise<BrainResult>;
+}

package/dist/brain.js

@@ -0,0 +1,99 @@
+/**
+ * O "cérebro" de uma execução: recebe o prompt, as ferramentas e o portão de política, e
+ * trabalha até fechar o item ou responder a conversa.
+ *
+ * `ClaudeBrain` usa o Claude Agent SDK (o harness do Claude Code como biblioteca), isolado:
+ *   - sem ferramentas built-in (nada de Bash, Read, Edit): só MCP do gateway, as do runtime
+ *     e o carregamento de skill;
+ *   - sem configuração do disco (`settingSources: []`) e sem MCP de plugin
+ *     (`skipMcpDiscovery`, `strictMcpConfig`): quem decide conexões é o runtime;
+ *   - toda chamada passa pelo PolicyGate, no hook PreToolUse e de novo no canUseTool;
+ *   - sem transcrição em disco (`persistSession: false`): o histórico que vale é o Postgres.
+ *
+ * Os testes usam um Brain roteirizado que chama o mesmo portão, sem modelo.
+ */
+import { query } from '@anthropic-ai/claude-agent-sdk';
+function isErrorResponse(r) {
+    return typeof r === 'object' && r !== null && r.isError === true;
+}
+export class ClaudeBrain {
+    opts;
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    async run(task) {
+        const { gate } = task;
+        const abortController = new AbortController();
+        task.signal.addEventListener('abort', () => abortController.abort(), { once: true });
+        const preToolUse = async (input, toolUseID) => {
+            if (input.hook_event_name !== 'PreToolUse')
+                return {};
+            const id = toolUseID ?? input.tool_use_id;
+            const d = await gate.check(input.tool_name, (input.tool_input ?? {}), id);
+            return {
+                hookSpecificOutput: {
+                    hookEventName: 'PreToolUse',
+                    permissionDecision: d.allow ? 'allow' : 'deny',
+                    ...(d.allow ? {} : { permissionDecisionReason: d.message }),
+                },
+            };
+        };
+        const postToolUse = async (input) => {
+            if (input.hook_event_name === 'PostToolUse') {
+                await gate.after(input.tool_use_id, !isErrorResponse(input.tool_response), input.tool_response);
+            }
+            else if (input.hook_event_name === 'PostToolUseFailure') {
+                await gate.after(input.tool_use_id, false, { error: input.error });
+            }
+            return {};
+        };
+        // Segunda trava: se algo chegar à checagem de permissão, vale a decisão do portão.
+        const canUseTool = async (toolName, input, o) => {
+            const d = gate.decided(o.toolUseID) ?? (await gate.check(toolName, input, o.toolUseID));
+            return d.allow ? { behavior: 'allow', updatedInput: input } : { behavior: 'deny', message: d.message };
+        };
+        const m = task.agent.manifest;
+        let text = '';
+        let costUsd = 0;
+        let turns = 0;
+        let error;
+        const q = query({
+            prompt: task.prompt,
+            options: {
+                model: m.model,
+                effort: m.effort,
+                systemPrompt: task.systemPrompt,
+                tools: task.skills.skills.length ? ['Skill'] : [],
+                ...(task.skills.skills.length ? { skills: task.skills.skills } : {}),
+                plugins: task.skills.pluginPaths.map((path) => ({ type: 'local', path, skipMcpDiscovery: true })),
+                mcpServers: { ...task.mcpServers, runtime: task.tools.sdkServer() },
+                strictMcpConfig: true,
+                settingSources: [],
+                permissionMode: 'default',
+                canUseTool,
+                hooks: {
+                    PreToolUse: [{ hooks: [preToolUse] }],
+                    PostToolUse: [{ hooks: [postToolUse] }],
+                    PostToolUseFailure: [{ hooks: [postToolUse] }],
+                },
+                maxTurns: task.maxTurns,
+                ...(task.budgetUsd ? { maxBudgetUsd: task.budgetUsd } : {}),
+                persistSession: false,
+                abortController,
+                ...(this.opts.debug ? { stderr: (s) => process.stderr.write(s) } : {}),
+            },
+        });
+        for await (const msg of q) {
+            if (msg.type === 'result') {
+                costUsd = msg.total_cost_usd;
+                turns = msg.num_turns;
+                if (msg.subtype === 'success')
+                    text = msg.result;
+                else
+                    error = `${msg.subtype}`;
+            }
+        }
+        return { text, costUsd, turns, ...(error ? { error } : {}) };
+    }
+}
+//# sourceMappingURL=brain.js.map

package/dist/brain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain.js","sourceRoot":"","sources":["../src/brain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,KAAK,EAAkE,MAAM,gCAAgC,CAAC;AA+BvH,SAAS,eAAe,CAAC,CAAU;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAA2B,CAAC,OAAO,KAAK,IAAI,CAAC;AAC9F,CAAC;AAED,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,OAA4B,EAAE;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAE/D,KAAK,CAAC,GAAG,CAAC,IAAe;QACvB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAErF,MAAM,UAAU,GAAiB,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC1D,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC;YAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAA4B,EAAE,EAAE,CAAC,CAAC;YACrG,OAAO;gBACL,kBAAkB,EAAE;oBAClB,aAAa,EAAE,YAAY;oBAC3B,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;oBAC9C,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC5D;aACF,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,WAAW,GAAiB,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAClG,CAAC;iBAAM,IAAI,KAAK,CAAC,eAAe,KAAK,oBAAoB,EAAE,CAAC;gBAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,mFAAmF;QACnF,MAAM,UAAU,GAAG,KAAK,EACtB,QAAgB,EAChB,KAA8B,EAC9B,CAAwB,EACG,EAAE;YAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzG,CAAC,CAAC;QAEF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC9B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAyB,CAAC;QAE9B,MAAM,CAAC,GAAG,KAAK,CAAC;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE;gBACP,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1G,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE;gBACnE,eAAe,EAAE,IAAI;gBACrB,cAAc,EAAE,EAAE;gBAClB,cAAc,EAAE,SAAS;gBACzB,UAAU;gBACV,KAAK,EAAE;oBACL,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;oBACvC,kBAAkB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;iBAC/C;gBACD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,cAAc,EAAE,KAAK;gBACrB,eAAe;gBACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC;gBAC7B,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;gBACtB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;oBAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;;oBAC5C,KAAK,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/D,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli.js

@@ -0,0 +1,27 @@
+/**
+ * t4h-agent validate <pasta agents/>   valida todos os agent.yaml (schema + regras)
+ */
+import { loadAgents } from './manifest.js';
+import { effectiveLevel } from './levels.js';
+const [cmd, dir = 'agents'] = process.argv.slice(2);
+if (cmd !== 'validate') {
+    console.error('uso: t4h-agent validate [pasta]');
+    process.exit(2);
+}
+try {
+    const agents = loadAgents(dir);
+    for (const a of agents) {
+        const m = a.manifest;
+        console.info(`✓ ${m.id} · ${m.name} · estágio ${m.stage} · DRI ${m.owner.dri}`);
+        for (const [name, r] of Object.entries(m.routines)) {
+            const now = effectiveLevel({ stage: m.stage, manifestLevel: r.level });
+            console.info(`    ${name.padEnd(18)} ${now.padEnd(10)}${r.target ? ` → ${r.target}` : ''}  ${r.actions.join(', ')}`);
+        }
+    }
+    console.info(`\n${agents.length} agente(s) válido(s).`);
+}
+catch (e) {
+    console.error(e.message);
+    process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEpD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;IACvB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,uBAAuB,CAAC,CAAC;AAC1D,CAAC;AAAC,OAAO,CAAC,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/evals.d.ts

@@ -0,0 +1,38 @@
+import type { McpServerConfig } from '@anthropic-ai/claude-agent-sdk';
+import type { Brain } from './brain.js';
+import { type ToolExecutor } from './host.js';
+import type { IncomingEvent } from './inbox.js';
+import type { LoadedAgent } from './manifest.js';
+export interface EvalCase {
+    name: string;
+    events: IncomingEvent[];
+    expect: {
+        calls?: Array<string | {
+            tool: string;
+            input?: Record<string, unknown>;
+        }>;
+        notCalls?: string[];
+        escalates?: boolean;
+        finish?: 'done' | 'waiting';
+    };
+}
+export interface EvalResult {
+    name: string;
+    passed: boolean;
+    problems: string[];
+    costUsd: number;
+}
+export declare function loadEvalCases(agent: LoadedAgent): EvalCase[];
+/** O valor esperado está contido no recebido (objetos por chave, o resto por igualdade). */
+export declare function subsetMatch(expected: unknown, actual: unknown): boolean;
+export declare function runEvalCase(agent: LoadedAgent, c: EvalCase, deps: {
+    brain: Brain;
+    servers: (a: LoadedAgent) => Promise<Record<string, McpServerConfig>>;
+    executor: ToolExecutor;
+    pluginsDir?: string;
+}): Promise<EvalResult>;
+export declare function runEvals(agent: LoadedAgent, deps: Parameters<typeof runEvalCase>[2], filter?: (c: EvalCase) => boolean): Promise<{
+    results: EvalResult[];
+    passRate: number;
+    costUsd: number;
+}>;

package/dist/evals.js

@@ -0,0 +1,95 @@
+/**
+ * Evals do agente: cada caso entra como eventos numa caixa de entrada limpa, roda uma
+ * rodada de verdade (modelo, portão, rotinas) e confere o que ele tentou fazer.
+ *
+ * "Tentou" vale em qualquer nível: executada, proposta ou registrada em shadow. Assim o
+ * mesmo caso mede acerto no shadow e continua valendo depois que a rotina sobe.
+ *
+ * Formato (agents/<id>/evals/*.yaml):
+ *
+ *   - name: chamado de custo vai para FinOps
+ *     events:
+ *       - { type: exemplo.item.opened, subject: "item:42", payload: { titulo: "..." } }
+ *     expect:
+ *       calls: [{ tool: exemplo.item_route, input: { team: financeiro } }]
+ *       notCalls: [exemplo.item_close]
+ *       escalates: false
+ *       finish: done
+ */
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { AgentHost } from './host.js';
+import { MemoryNotifier } from './notifier.js';
+import { LongTermStore } from './store/long-term.js';
+import { pgliteSql } from './store/sql.js';
+export function loadEvalCases(agent) {
+    const dir = join(agent.dir, 'evals');
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((f) => /\.ya?ml$/.test(f))
+        .sort()
+        .flatMap((f) => {
+        const doc = parseYaml(readFileSync(join(dir, f), 'utf8'));
+        return Array.isArray(doc) ? doc : doc.cases;
+    });
+}
+/** O valor esperado está contido no recebido (objetos por chave, o resto por igualdade). */
+export function subsetMatch(expected, actual) {
+    if (expected === null || typeof expected !== 'object') {
+        if (typeof expected === 'string' && typeof actual === 'string')
+            return actual.toLowerCase().includes(expected.toLowerCase());
+        return expected === actual;
+    }
+    if (typeof actual !== 'object' || actual === null)
+        return false;
+    return Object.entries(expected).every(([k, v]) => subsetMatch(v, actual[k]));
+}
+export async function runEvalCase(agent, c, deps) {
+    const store = new LongTermStore(await pgliteSql());
+    await store.migrate();
+    const notifier = new MemoryNotifier();
+    const host = new AgentHost({ agents: [agent], store, notifier, ...deps });
+    const problems = [];
+    try {
+        for (const ev of c.events)
+            await host.enqueue(agent.manifest.id, ev);
+        const report = await host.runRound(agent.manifest.id);
+        const attempted = (await store.history(agent.manifest.id, { limit: 200 })).filter((a) => a.mode !== 'denied');
+        for (const exp of c.expect.calls ?? []) {
+            const e = typeof exp === 'string' ? { tool: exp } : exp;
+            const hit = attempted.find((a) => a.tool === e.tool && (!e.input || subsetMatch(e.input, a.input)));
+            if (!hit) {
+                const same = attempted.filter((a) => a.tool === e.tool).map((a) => JSON.stringify(a.input));
+                problems.push(`esperava ${e.tool}${e.input ? ` com ${JSON.stringify(e.input)}` : ''}${same.length ? `; veio ${same.join(' | ')}` : '; não chamou'}`);
+            }
+        }
+        for (const t of c.expect.notCalls ?? []) {
+            if (attempted.some((a) => a.tool === t))
+                problems.push(`não devia chamar ${t}`);
+        }
+        if (c.expect.escalates !== undefined) {
+            const escalated = attempted.some((a) => a.tool === 'runtime.escalate');
+            if (escalated !== c.expect.escalates)
+                problems.push(c.expect.escalates ? 'esperava escalar' : 'não devia escalar');
+        }
+        if (c.expect.finish) {
+            const results = report.items.map((i) => i.result);
+            if (!results.includes(c.expect.finish))
+                problems.push(`esperava fechar como ${c.expect.finish}; veio ${results.join(', ') || 'nada'}`);
+        }
+        return { name: c.name, passed: problems.length === 0, problems, costUsd: report.costUsd };
+    }
+    finally {
+        await store.close();
+    }
+}
+export async function runEvals(agent, deps, filter) {
+    const results = [];
+    for (const c of loadEvalCases(agent).filter(filter ?? (() => true)))
+        results.push(await runEvalCase(agent, c, deps));
+    const passRate = results.length ? results.filter((r) => r.passed).length / results.length : 0;
+    return { results, passRate, costUsd: results.reduce((s, r) => s + r.costUsd, 0) };
+}
+//# sourceMappingURL=evals.js.map

package/dist/evals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evals.js","sourceRoot":"","sources":["../src/evals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,OAAO,EAAE,SAAS,EAAqB,MAAM,WAAW,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAoB3C,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACjC,IAAI,EAAE;SACN,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAuC,CAAC;QAChG,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,QAAiB,EAAE,MAAe;IAC5D,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7H,OAAO,QAAQ,KAAK,MAAM,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAG,MAAkC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAkB,EAClB,CAAW,EACX,IAA0I;IAE1I,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAE9G,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACxD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5F,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACvJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;YACvE,IAAI,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,MAAM,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QACzI,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC5F,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAkB,EAClB,IAAuC,EACvC,MAAiC;IAEjC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,61 @@
+/**
+ * O agente usa os sistemas da T4H só pelo MCP Gateway, com a própria identidade.
+ *
+ * O agente é um colaborador virtual: identidade e permissões próprias. Para os sistemas, é
+ * mais um e-mail: um client do Keycloak com service account (client_credentials) cujo
+ * usuário tem o e-mail de agente, criado por Segurança. O gateway já decide tudo pelo
+ * e-mail e pelos papéis do token; os grants do agente são pedidos e liberados como os de
+ * uma pessoa. Nada disso é configurado aqui.
+ */
+import type { McpHttpServerConfig } from '@anthropic-ai/claude-agent-sdk';
+export interface TokenSource {
+    token(): Promise<string>;
+}
+/** Fallback de desenvolvimento: o gateway em modo dev aceita HS256 com DEV_JWT_SECRET. */
+export declare class StaticTokenSource implements TokenSource {
+    private readonly value;
+    constructor(value: string);
+    token(): Promise<string>;
+}
+/** Token curto do Keycloak, renovado um minuto antes de vencer. */
+export declare class ClientCredentialsTokenSource implements TokenSource {
+    private readonly cfg;
+    private readonly fetchImpl;
+    private cached?;
+    constructor(cfg: {
+        issuer: string;
+        clientId: string;
+        clientSecret: string;
+        scope?: string;
+    }, fetchImpl?: typeof fetch);
+    token(): Promise<string>;
+}
+export interface GatewayTool {
+    name: string;
+    description?: string;
+    inputSchema?: unknown;
+}
+export declare class GatewayError extends Error {
+    readonly code?: number | undefined;
+    constructor(message: string, code?: number | undefined);
+}
+/** Cliente JSON-RPC do `POST /mcp/:subservice` (o gateway é stateless, sem sessão). */
+export declare class GatewayClient {
+    private readonly cfg;
+    private readonly fetchImpl;
+    private seq;
+    constructor(cfg: {
+        url: string;
+        tokens: TokenSource;
+    }, fetchImpl?: typeof fetch);
+    endpoint(subservice: string): string;
+    /** Config de MCP remoto para o Claude Agent SDK, um por conector, com o token do agente. */
+    mcpServers(subservices: string[], tokens?: TokenSource): Promise<Record<string, McpHttpServerConfig>>;
+    rpc<T>(subservice: string, method: string, params: unknown, tokens?: TokenSource): Promise<T>;
+    listTools(subservice: string, tokens?: TokenSource): Promise<GatewayTool[]>;
+    /** Executa uma ação já aprovada (proposta do copilot), sem passar pelo modelo. */
+    callTool(subservice: string, name: string, args: Record<string, unknown>): Promise<{
+        ok: boolean;
+        content: unknown;
+    }>;
+}

package/dist/gateway.js

@@ -0,0 +1,93 @@
+/** Fallback de desenvolvimento: o gateway em modo dev aceita HS256 com DEV_JWT_SECRET. */
+export class StaticTokenSource {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    async token() {
+        return this.value;
+    }
+}
+/** Token curto do Keycloak, renovado um minuto antes de vencer. */
+export class ClientCredentialsTokenSource {
+    cfg;
+    fetchImpl;
+    cached;
+    constructor(cfg, fetchImpl = fetch) {
+        this.cfg = cfg;
+        this.fetchImpl = fetchImpl;
+    }
+    async token() {
+        const now = Date.now();
+        if (this.cached && this.cached.exp - 60_000 > now)
+            return this.cached.value;
+        const body = new URLSearchParams({
+            grant_type: 'client_credentials',
+            client_id: this.cfg.clientId,
+            client_secret: this.cfg.clientSecret,
+            ...(this.cfg.scope ? { scope: this.cfg.scope } : {}),
+        });
+        const res = await this.fetchImpl(`${this.cfg.issuer.replace(/\/$/, '')}/protocol/openid-connect/token`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body,
+        });
+        if (!res.ok)
+            throw new Error(`Keycloak recusou o client_credentials de ${this.cfg.clientId}: HTTP ${res.status}`);
+        const json = (await res.json());
+        this.cached = { value: json.access_token, exp: now + json.expires_in * 1000 };
+        return json.access_token;
+    }
+}
+export class GatewayError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'GatewayError';
+    }
+}
+/** Cliente JSON-RPC do `POST /mcp/:subservice` (o gateway é stateless, sem sessão). */
+export class GatewayClient {
+    cfg;
+    fetchImpl;
+    seq = 0;
+    constructor(cfg, fetchImpl = fetch) {
+        this.cfg = cfg;
+        this.fetchImpl = fetchImpl;
+    }
+    endpoint(subservice) {
+        return `${this.cfg.url.replace(/\/$/, '')}/mcp/${subservice}`;
+    }
+    /** Config de MCP remoto para o Claude Agent SDK, um por conector, com o token do agente. */
+    async mcpServers(subservices, tokens = this.cfg.tokens) {
+        const token = await tokens.token();
+        return Object.fromEntries(subservices.map((s) => [s, { type: 'http', url: this.endpoint(s), headers: { authorization: `Bearer ${token}` }, alwaysLoad: true }]));
+    }
+    async rpc(subservice, method, params, tokens = this.cfg.tokens) {
+        const res = await this.fetchImpl(this.endpoint(subservice), {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', authorization: `Bearer ${await tokens.token()}` },
+            body: JSON.stringify({ jsonrpc: '2.0', id: ++this.seq, method, params }),
+        });
+        if (res.status === 401 || res.status === 403)
+            throw new GatewayError(`gateway recusou a identidade em ${subservice}`, res.status);
+        const json = (await res.json());
+        if (json.error)
+            throw new GatewayError(json.error.message, json.error.code);
+        return json.result;
+    }
+    async listTools(subservice, tokens) {
+        const r = await this.rpc(subservice, 'tools/list', {}, tokens);
+        return r.tools ?? [];
+    }
+    /** Executa uma ação já aprovada (proposta do copilot), sem passar pelo modelo. */
+    async callTool(subservice, name, args) {
+        const r = await this.rpc(subservice, 'tools/call', {
+            name,
+            arguments: args,
+        });
+        return { ok: !r.isError, content: r.structuredContent ?? r.content };
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAeA,0FAA0F;AAC1F,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAC9C,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,OAAO,4BAA4B;IAIpB;IACA;IAJX,MAAM,CAAkC;IAEhD,YACmB,GAA+E,EAC/E,YAA0B,KAAK;QAD/B,QAAG,GAAH,GAAG,CAA4E;QAC/E,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;YAC5B,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,EAAE;YACtG,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,GAAG,CAAC,QAAQ,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiD,CAAC;QAChF,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAQD,MAAM,OAAO,YAAa,SAAQ,KAAK;IAGnB;IAFlB,YACE,OAAe,EACC,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,uFAAuF;AACvF,MAAM,OAAO,aAAa;IAIL;IACA;IAJX,GAAG,GAAG,CAAC,CAAC;IAEhB,YACmB,GAAyC,EACzC,YAA0B,KAAK;QAD/B,QAAG,GAAH,GAAG,CAAsC;QACzC,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,QAAQ,CAAC,UAAkB;QACzB,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,UAAU,EAAE,CAAC;IAChE,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,UAAU,CAAC,WAAqB,EAAE,SAAsB,IAAI,CAAC,GAAG,CAAC,MAAM;QAC3E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,WAAW,CACvB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CACtI,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,UAAkB,EAAE,MAAc,EAAE,MAAe,EAAE,SAAsB,IAAI,CAAC,GAAG,CAAC,MAAM;QACrG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE;YAChG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,mCAAmC,UAAU,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAClI,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8D,CAAC;QAC7F,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,MAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,MAAoB;QACtD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAA2B,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,IAAY,EAAE,IAA6B;QAC5E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAwE,UAAU,EAAE,YAAY,EAAE;YACxH,IAAI;YACJ,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;CACF"}

package/dist/host.d.ts

@@ -0,0 +1,76 @@
+import type { McpServerConfig } from '@anthropic-ai/claude-agent-sdk';
+import type { Brain } from './brain.js';
+import type { GatewayClient } from './gateway.js';
+import { type IncomingEvent } from './inbox.js';
+import type { LoadedAgent } from './manifest.js';
+import { type Notifier } from './notifier.js';
+import { type RoundReport } from './round.js';
+import type { ActionRow, LongTermStore } from './store/long-term.js';
+/** Executa uma ação aprovada, sem o modelo. Em produção, o gateway com a identidade do agente. */
+export interface ToolExecutor {
+    call(agent: LoadedAgent, qualifiedTool: string, input: Record<string, unknown>): Promise<{
+        ok: boolean;
+        content: unknown;
+    }>;
+}
+export declare function gatewayExecutor(gateway: GatewayClient): ToolExecutor;
+export interface AgentHostOptions {
+    agents: LoadedAgent[];
+    store: LongTermStore;
+    brain: Brain;
+    /** Conectores para o modelo. Em produção: `gateway.mcpServers(...)` com o token do agente. */
+    servers: (agent: LoadedAgent) => Promise<Record<string, McpServerConfig>>;
+    executor: ToolExecutor;
+    notifier?: Notifier;
+    pluginsDir?: string;
+    now?: () => Date;
+}
+export interface Asker {
+    email: string;
+    kind: 'person' | 'agent';
+}
+export declare class AgentHost {
+    private readonly o;
+    readonly agents: Map<string, LoadedAgent>;
+    private readonly skills;
+    private readonly crons;
+    private readonly notifier;
+    private http?;
+    constructor(o: AgentHostOptions);
+    get store(): LongTermStore;
+    agent(id: string): LoadedAgent;
+    private skillsOf;
+    enqueue(agentId: string, ev: IncomingEvent): Promise<{
+        itemId: number | null;
+        duplicate: boolean;
+    }>;
+    runRound(agentId: string, hops?: number): Promise<RoundReport>;
+    /**
+     * Conversa direta (pelo Claude, via conector do círculo, ou de outro agente). Corre à
+     * parte da fila. Só lê, com o acesso do próprio agente: ele é um colaborador virtual, e
+     * quem pode conversar com ele é decidido pelo grant do conector `agents_<círculo>`.
+     */
+    converse(agentId: string, asker: Asker, message: string, conversationId: string, hops?: number): Promise<{
+        answer: string;
+        costUsd: number;
+    }>;
+    pendingProposals(agentId: string): Promise<ActionRow[]>;
+    /** Uma pessoa aprova ou recusa a proposta. Aprovada, roda pelo gateway com a identidade do agente. */
+    decideProposal(actionId: number, decision: 'approved' | 'rejected', by: string, note?: string): Promise<ActionRow>;
+    /** Uma pessoa corrige o que ele fez. Vira aprendizado no próximo prompt e conta no disjuntor. */
+    correctAction(actionId: number, by: string, note: string): Promise<ActionRow>;
+    /** Incidente: a rotina desce na hora, por decisão de pessoa. */
+    demote(agentId: string, routine: string, to: 'shadow' | 'copilot' | 'agent', by: string, reason: string): Promise<void>;
+    /** Bloqueio de emergência: para tudo na hora, sem deploy. */
+    kill(agentId: string, by: string, reason: string): Promise<void>;
+    /** Liga o despertar de cada agente e a agenda das rotinas. */
+    startSchedules(onRound?: (agentId: string, r: RoundReport) => void): void;
+    /**
+     * Entrada de eventos por webhook: POST /agents/:id/events, assinado com HMAC-SHA256
+     * (`x-t4h-signature: sha256=<hex>`). GET /healthz para o Container App.
+     */
+    listen(port: number, hmacSecret: string | undefined): Promise<number>;
+    stop(): Promise<void>;
+}
+/** Sem segredo configurado, só aceita fora de produção. */
+export declare function verifySignature(raw: string, header: string | string[] | undefined, secret: string | undefined): boolean;