@t4h/agent-runtime 0.0.0-stage → 0.1.1

package/dist/manifest.js

@@ -0,0 +1,172 @@
+/**
+ * Manifesto do agente: lê `agents/<id>/agent.yaml`, valida contra o schema v1 e aplica
+ * as regras que o JSON Schema sozinho não expressa (as que dependem de mais de um campo).
+ *
+ * Um agente é uma pasta: agent.yaml, persona.md, skills/ (opcional) e evals/. Tudo que
+ * faz dele quem ele é passa por PR; o código é comum a todos.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { basename, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Ajv } from 'ajv';
+import { parse as parseYaml } from 'yaml';
+import { LEVELS } from './levels.js';
+import { inferEventKind } from './inbox.js';
+export class ManifestError extends Error {
+    agentDir;
+    problems;
+    constructor(agentDir, problems) {
+        super(`agent.yaml inválido em ${agentDir}:\n  - ${problems.join('\n  - ')}`);
+        this.agentDir = agentDir;
+        this.problems = problems;
+        this.name = 'ManifestError';
+    }
+}
+export const SCHEMA_PATH = fileURLToPath(new URL('../schema/agent.schema.json', import.meta.url));
+const ajv = new Ajv({ allErrors: true, useDefaults: true, strict: false });
+const validateSchema = ajv.compile(JSON.parse(readFileSync(SCHEMA_PATH, 'utf8')));
+function formatAjvError(e) {
+    const where = e.instancePath || '(raiz)';
+    if (e.keyword === 'additionalProperties') {
+        return `${where}: campo desconhecido "${e.params.additionalProperty}"`;
+    }
+    return `${where}: ${e.message ?? e.keyword}`;
+}
+/** Regras entre campos. Devolve a lista de problemas (vazia = ok). */
+export function semanticProblems(m, folderName) {
+    const problems = [];
+    const subservices = new Set(m.gateway.subservices);
+    const subOf = (tool) => tool.split('.')[0];
+    if (folderName !== undefined && folderName !== m.id) {
+        problems.push(`id "${m.id}" precisa ser igual ao nome da pasta "${folderName}"`);
+    }
+    const declaredEvents = new Set(m.triggers.events.map((e) => (typeof e === 'string' ? e : e.type)));
+    const owner = new Map();
+    const reads = new Set(m.reads);
+    const forbidden = new Set(m.guardrails.forbiddenTools);
+    for (const tool of m.reads) {
+        if (!subservices.has(subOf(tool)))
+            problems.push(`reads: "${tool}" usa um conector fora de gateway.subservices`);
+        if (forbidden.has(tool))
+            problems.push(`reads: "${tool}" também está em guardrails.forbiddenTools`);
+    }
+    const reachesAutonomous = Object.values(m.routines).some((r) => r.level === 'autonomous' || r.target === 'autonomous');
+    if (reachesAutonomous && !m.owner.securityCoOwner) {
+        problems.push('owner.securityCoOwner precisa ser true: há rotina que chega a autonomous');
+    }
+    for (const [name, r] of Object.entries(m.routines)) {
+        if (r.target && LEVELS.indexOf(r.target) < LEVELS.indexOf(r.level)) {
+            problems.push(`routines.${name}: target (${r.target}) abaixo do level (${r.level})`);
+        }
+        if (r.on.length === 0 && !r.schedule) {
+            problems.push(`routines.${name}: sem gatilho (declare "on" ou "schedule")`);
+        }
+        for (const ev of r.on) {
+            if (!declaredEvents.has(ev))
+                problems.push(`routines.${name}.on: evento "${ev}" não está em triggers.events`);
+        }
+        for (const tool of r.actions) {
+            if (!subservices.has(subOf(tool)))
+                problems.push(`routines.${name}.actions: "${tool}" usa um conector fora de gateway.subservices`);
+            if (reads.has(tool))
+                problems.push(`routines.${name}.actions: "${tool}" está também em reads (ou lê, ou age)`);
+            if (forbidden.has(tool))
+                problems.push(`routines.${name}.actions: "${tool}" está em guardrails.forbiddenTools`);
+            const prev = owner.get(tool);
+            if (prev)
+                problems.push(`"${tool}" aparece nas rotinas ${prev} e ${name}: cada ferramenta pertence a uma rotina só`);
+            owner.set(tool, name);
+        }
+        // Os quatro requisitos do Autônomo que dá para conferir no manifesto. Os outros dois
+        // (tudo auditado e Segurança junto) são do runtime e do securityCoOwner acima.
+        if (r.level === 'autonomous') {
+            if (!r.scope)
+                problems.push(`routines.${name}: autonomous exige scope (onde pode agir)`);
+            if (!r.limits?.perHour)
+                problems.push(`routines.${name}: autonomous exige limits.perHour`);
+            if (!r.undo)
+                problems.push(`routines.${name}: autonomous exige undo (como desfazer)`);
+        }
+    }
+    for (const peer of m.handoffTo) {
+        if (peer === m.id)
+            problems.push('handoffTo: o agente não conversa consigo mesmo');
+    }
+    return problems;
+}
+/** Valida um objeto já lido do YAML. Aplica os defaults do schema no próprio objeto. */
+export function validateManifest(raw, folderName) {
+    const data = structuredClone(raw);
+    // O ajv só preenche defaults dentro de objetos que existem: cria os blocos opcionais
+    // vazios para os defaults de dentro deles valerem.
+    if (data && typeof data === 'object' && !Array.isArray(data)) {
+        const obj = data;
+        for (const k of ['triggers', 'limits', 'breaker', 'guardrails', 'conversation', 'memory'])
+            obj[k] ??= {};
+    }
+    if (!validateSchema(data)) {
+        return { problems: (validateSchema.errors ?? []).map(formatAjvError) };
+    }
+    const manifest = data;
+    const problems = semanticProblems(manifest, folderName);
+    return problems.length ? { problems } : { manifest, problems };
+}
+export function loadAgent(agentDir) {
+    const dir = resolve(agentDir);
+    const yamlPath = join(dir, 'agent.yaml');
+    if (!existsSync(yamlPath))
+        throw new ManifestError(dir, ['agent.yaml não encontrado']);
+    const { manifest, problems } = validateManifest(parseYaml(readFileSync(yamlPath, 'utf8')), basename(dir));
+    if (!manifest)
+        throw new ManifestError(dir, problems);
+    const personaPath = join(dir, 'persona.md');
+    if (!existsSync(personaPath))
+        throw new ManifestError(dir, ['persona.md não encontrado']);
+    const skillsDir = join(dir, 'skills');
+    const actionOwner = new Map();
+    for (const [name, r] of Object.entries(manifest.routines))
+        for (const t of r.actions)
+            actionOwner.set(t, name);
+    const eventKinds = new Map();
+    for (const e of manifest.triggers.events) {
+        if (typeof e === 'string')
+            eventKinds.set(e, inferEventKind(e));
+        else
+            eventKinds.set(e.type, e.kind);
+    }
+    return {
+        manifest,
+        dir,
+        persona: readFileSync(personaPath, 'utf8'),
+        ...(existsSync(skillsDir) && statSync(skillsDir).isDirectory() ? { localSkillsDir: skillsDir } : {}),
+        actionOwner,
+        eventKinds,
+    };
+}
+/** Carrega todas as pastas de agents/. Junta os erros de todos antes de falhar. */
+export function loadAgents(agentsRoot) {
+    const root = resolve(agentsRoot);
+    const agents = [];
+    const errors = [];
+    for (const entry of readdirSync(root, { withFileTypes: true })) {
+        if (!entry.isDirectory() || entry.name.startsWith('.') || entry.name.startsWith('_'))
+            continue;
+        try {
+            agents.push(loadAgent(join(root, entry.name)));
+        }
+        catch (e) {
+            if (e instanceof ManifestError)
+                errors.push(e);
+            else
+                throw e;
+        }
+    }
+    if (errors.length)
+        throw new AggregateError(errors, errors.map((e) => e.message).join('\n\n'));
+    const ids = new Set(agents.map((a) => a.manifest.id));
+    const dangling = agents.flatMap((a) => a.manifest.handoffTo.filter((p) => !ids.has(p)).map((p) => `${a.manifest.id}.handoffTo: agente "${p}" não existe neste repositório`));
+    if (dangling.length)
+        throw new Error(dangling.join('\n'));
+    return agents;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,GAAG,EAAoB,MAAM,KAAK,CAAC;AAC5C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAc,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AA8D5D,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEpB;IACA;IAFlB,YACkB,QAAgB,EAChB,QAAkB;QAElC,KAAK,CAAC,0BAA0B,QAAQ,UAAU,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAH7D,aAAQ,GAAR,QAAQ,CAAQ;QAChB,aAAQ,GAAR,QAAQ,CAAU;QAGlC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAElG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAElF,SAAS,cAAc,CAAC,CAAc;IACpC,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB,EAAE,CAAC;QACzC,OAAO,GAAG,KAAK,yBAA0B,CAAC,CAAC,MAAyC,CAAC,kBAAkB,GAAG,CAAC;IAC7G,CAAC;IACD,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,CAAgB,EAAE,UAAmB;IACpE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAEpD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,yCAAyC,UAAU,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,+CAA+C,CAAC,CAAC;QACjH,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,4CAA4C,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,CAC7D,CAAC;IACF,IAAI,iBAAiB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC,MAAM,sBAAsB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,4CAA4C,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;QAChH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,IAAI,+CAA+C,CAAC,CAAC;YACpI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,IAAI,wCAAwC,CAAC,CAAC;YAC/G,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,cAAc,IAAI,qCAAqC,CAAC,CAAC;YAChH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,yBAAyB,IAAI,MAAM,IAAI,4CAA4C,CAAC,CAAC;YACrH,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,qFAAqF;QACrF,+EAA+E;QAC/E,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,CAAC,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,2CAA2C,CAAC,CAAC;YACzF,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,mCAAmC,CAAC,CAAC;YAC3F,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,yCAAyC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,UAAmB;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,qFAAqF;IACrF,mDAAmD;IACnD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAgC,CAAC;IAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAEvF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEtD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAE1F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAE/G,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;;YAC3D,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,QAAQ;QACR,GAAG;QACH,OAAO,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC;QAC1C,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/F,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,aAAa;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAC1C,MAAM,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC,gCAAgC,CAAC,CACrI,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/notifier.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Para onde vão exceções, propostas, quedas de nível e escalações. Em produção, uma
+ * implementação que posta no canal do time pelo gateway (conector de chat) e avisa o
+ * DRI; aqui só a interface e a versão de console.
+ */
+export type NoticeKind = 'proposal' | 'escalation' | 'exception' | 'demotion' | 'kill-switch';
+export interface Notice {
+    agentId: string;
+    kind: NoticeKind;
+    /** Quem precisa ler: o DRI, o líder do time, Segurança. */
+    to: string[];
+    text: string;
+    ref?: {
+        itemId?: number | null;
+        actionId?: number | null;
+    };
+}
+export interface Notifier {
+    notify(n: Notice): Promise<void>;
+}
+export declare const consoleNotifier: Notifier;
+/** Guarda os avisos em memória. Útil em teste e no demo. */
+export declare class MemoryNotifier implements Notifier {
+    readonly notices: Notice[];
+    notify(n: Notice): Promise<void>;
+}

package/dist/notifier.js

@@ -0,0 +1,13 @@
+export const consoleNotifier = {
+    async notify(n) {
+        console.info(JSON.stringify({ notice: n }));
+    },
+};
+/** Guarda os avisos em memória. Útil em teste e no demo. */
+export class MemoryNotifier {
+    notices = [];
+    async notify(n) {
+        this.notices.push(n);
+    }
+}
+//# sourceMappingURL=notifier.js.map

package/dist/notifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifier.js","sourceRoot":"","sources":["../src/notifier.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,KAAK,CAAC,MAAM,CAAC,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,OAAO,cAAc;IAChB,OAAO,GAAa,EAAE,CAAC;IAChC,KAAK,CAAC,MAAM,CAAC,CAAS;QACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/plugins.d.ts

@@ -0,0 +1,8 @@
+import type { LoadedAgent } from './manifest.js';
+export interface ResolvedSkills {
+    /** Pastas de plugin para `options.plugins`. */
+    pluginPaths: string[];
+    /** Nomes qualificados (`plugin:skill`) para `options.skills`. */
+    skills: string[];
+}
+export declare function resolveSkills(agent: LoadedAgent, pluginsDir: string | undefined): ResolvedSkills;

package/dist/plugins.js

@@ -0,0 +1,73 @@
+/**
+ * Skills do agente.
+ *
+ * - Plugins do marketplace de skills da organização, na versão do manifesto. O Agent SDK só
+ *   carrega plugin local, então o build baixa cada um para PLUGINS_DIR/<nome> (ver
+ *   scripts/fetch-plugins.mjs) e aqui só conferimos que a versão bate.
+ * - A pasta skills/ do agente vira um plugin local só dele (`agent-<id>`), sempre ligado.
+ */
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, symlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+function skillNames(pluginDir) {
+    const dir = join(pluginDir, 'skills');
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir, { withFileTypes: true })
+        .filter((e) => e.isDirectory() && existsSync(join(dir, e.name, 'SKILL.md')))
+        .map((e) => e.name);
+}
+/** Cria (uma vez por processo) o plugin local com as skills exclusivas do agente. */
+function materializeAgentPlugin(agent) {
+    const name = `agent-${agent.manifest.id}`;
+    const dir = mkdtempSync(join(tmpdir(), `${name}-`));
+    mkdirSync(join(dir, '.claude-plugin'));
+    writeFileSync(join(dir, '.claude-plugin', 'plugin.json'), JSON.stringify({ name, version: '0.0.0', description: `Skills exclusivas de ${agent.manifest.name}` }, null, 2));
+    symlinkSync(resolve(agent.localSkillsDir), join(dir, 'skills'), 'dir');
+    return dir;
+}
+export function resolveSkills(agent, pluginsDir) {
+    const m = agent.manifest;
+    const pluginPaths = [];
+    const skills = [];
+    const problems = [];
+    const available = new Map();
+    for (const p of m.plugins) {
+        if (!pluginsDir) {
+            problems.push(`plugin ${p.name}@${p.version}: PLUGINS_DIR não definido (rode pnpm fetch-plugins)`);
+            continue;
+        }
+        const dir = join(pluginsDir, p.name);
+        const manifestPath = join(dir, '.claude-plugin', 'plugin.json');
+        if (!existsSync(manifestPath)) {
+            problems.push(`plugin ${p.name}: não encontrado em ${dir}`);
+            continue;
+        }
+        const version = JSON.parse(readFileSync(manifestPath, 'utf8')).version;
+        if (version !== p.version) {
+            problems.push(`plugin ${p.name}: manifesto pede ${p.version}, baixado é ${version ?? 'sem versão'}`);
+            continue;
+        }
+        pluginPaths.push(dir);
+        available.set(p.name, skillNames(dir));
+    }
+    for (const s of m.skills) {
+        const owners = [...available].filter(([, names]) => names.includes(s)).map(([plugin]) => plugin);
+        if (owners.length === 1)
+            skills.push(`${owners[0]}:${s}`);
+        else if (owners.length > 1)
+            problems.push(`skill ${s} existe em mais de um plugin (${owners.join(', ')})`);
+        else if (available.size)
+            problems.push(`skill ${s} não existe nos plugins declarados`);
+    }
+    if (agent.localSkillsDir) {
+        const dir = materializeAgentPlugin(agent);
+        pluginPaths.push(dir);
+        for (const s of skillNames(dir))
+            skills.push(`agent-${m.id}:${s}`);
+    }
+    if (problems.length)
+        throw new Error(`skills de ${m.id}:\n  - ${problems.join('\n  - ')}`);
+    return { pluginPaths, skills };
+}
+//# sourceMappingURL=plugins.js.map

package/dist/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../src/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAU1C,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,qFAAqF;AACrF,SAAS,sBAAsB,CAAC,KAAkB;IAChD,MAAM,IAAI,GAAG,SAAS,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvC,aAAa,CACX,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAChH,CAAC;IACF,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,cAAe,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,UAA8B;IAC9E,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,sDAAsD,CAAC,CAAC;YACnG,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA0B,CAAC,OAAO,CAAC;QACjG,IAAI,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC,OAAO,eAAe,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;YACrG,SAAS;QACX,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACjG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACrD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACtG,IAAI,SAAS,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,71 @@
+import type { LoadedAgent } from './manifest.js';
+import { type EffectiveLevel } from './levels.js';
+import type { Notifier } from './notifier.js';
+import type { LongTermStore } from './store/long-term.js';
+export declare const RUNTIME_SERVER = "runtime";
+export type GateDecision = {
+    allow: true;
+} | {
+    allow: false;
+    message: string;
+};
+export interface GateOptions {
+    agent: LoadedAgent;
+    store: LongTermStore;
+    notifier: Notifier;
+    mode: 'round' | 'conversation';
+    /** Na rodada: o item em trabalho e as rotinas que os eventos dele acionaram. */
+    item?: {
+        id: number;
+        subject: string;
+        routines: string[];
+    };
+    caps: Map<string, {
+        cap: EffectiveLevel;
+        reason: string;
+    }>;
+    now?: () => Date;
+}
+/** `mcp__<subservice>__<tool>` → `<subservice>.<tool>`, o nome usado no manifesto. */
+export declare function qualifiedToolName(sdkName: string): {
+    server: string;
+    tool: string;
+    qualified: string;
+} | undefined;
+export declare function sdkToolName(qualified: string): string;
+export declare function idempotencyKey(parts: {
+    agentId: string;
+    itemId: number | null;
+    routine: string;
+    tool: string;
+    input: unknown;
+}): string;
+export declare class PolicyGate {
+    private readonly o;
+    /** Motivo declarado pelo modelo para a próxima chamada de cada ferramenta. */
+    private readonly reasons;
+    /** tool_use_id → id da ação registrada como "executando". */
+    private readonly running;
+    /** Decisões já tomadas por tool_use_id (o hook e o canUseTool consultam a mesma). */
+    private readonly decisions;
+    constructor(o: GateOptions);
+    /** Chamado pela ferramenta `runtime.justify` antes de uma ação com efeito. */
+    justify(tool: string, reason: string): string;
+    levelOf(routine: string): EffectiveLevel;
+    /** Decisão já tomada para este tool_use_id (usada pelo canUseTool como segunda trava). */
+    decided(toolUseId: string): GateDecision | undefined;
+    check(sdkName: string, input: Record<string, unknown>, toolUseId: string): Promise<GateDecision>;
+    private deny;
+    private decide;
+    /** Depois que a ferramenta rodou: grava o desfecho e confere o disjuntor. */
+    after(toolUseId: string, ok: boolean, result: unknown): Promise<void>;
+    private audit;
+}
+/**
+ * Disjuntor: se os erros e correções passam do limite, a rotina desce um nível na hora e
+ * avisa o DRI e Segurança. O nível alto é seguro porque a descida é automática.
+ */
+export declare function evaluateBreaker(agent: LoadedAgent, routine: string, store: LongTermStore, notifier: Notifier, caps?: Map<string, {
+    cap: EffectiveLevel;
+    reason: string;
+}>): Promise<EffectiveLevel | undefined>;

package/dist/policy.js

@@ -0,0 +1,210 @@
+/**
+ * Portão de política: toda chamada de ferramenta do modelo passa por aqui antes de rodar.
+ *
+ * É o que transforma o manifesto em regra de verdade. Decide, chamada a chamada:
+ *   - se a ferramenta está no escopo do agente (reads, actions de uma rotina acionada);
+ *   - se é proibida (segregação de funções), em qualquer nível;
+ *   - se o motivo foi dado antes (tudo auditado, com o motivo);
+ *   - se já foi feita (nada se repete);
+ *   - o que o nível da rotina permite: registrar (shadow), propor (copilot) ou executar
+ *     (agent, autonomous), com janela e teto por hora;
+ *   - na conversa, só leitura (com o acesso do próprio agente).
+ *
+ * O modelo nunca recebe "permissão" para nada fora disso: o runtime liga as ferramentas
+ * built-in do Claude Code desligadas e nega o resto aqui.
+ */
+import { createHash } from 'node:crypto';
+import { breakerTrips, effectiveLevel, insideWindow, oneBelow, rank } from './levels.js';
+import { stableStringify } from './short-term.js';
+export const RUNTIME_SERVER = 'runtime';
+/** `mcp__<subservice>__<tool>` → `<subservice>.<tool>`, o nome usado no manifesto. */
+export function qualifiedToolName(sdkName) {
+    const m = /^mcp__([a-z][a-z0-9_]*?)__([a-zA-Z0-9_]+)$/.exec(sdkName);
+    if (!m)
+        return undefined;
+    return { server: m[1], tool: m[2], qualified: `${m[1]}.${m[2]}` };
+}
+export function sdkToolName(qualified) {
+    const [sub, tool] = qualified.split('.');
+    return `mcp__${sub}__${tool}`;
+}
+export function idempotencyKey(parts) {
+    return createHash('sha256')
+        .update(`${parts.agentId}|${parts.itemId ?? '-'}|${parts.routine}|${parts.tool}|${stableStringify(parts.input)}`)
+        .digest('hex');
+}
+export class PolicyGate {
+    o;
+    /** Motivo declarado pelo modelo para a próxima chamada de cada ferramenta. */
+    reasons = new Map();
+    /** tool_use_id → id da ação registrada como "executando". */
+    running = new Map();
+    /** Decisões já tomadas por tool_use_id (o hook e o canUseTool consultam a mesma). */
+    decisions = new Map();
+    constructor(o) {
+        this.o = o;
+    }
+    /** Chamado pela ferramenta `runtime.justify` antes de uma ação com efeito. */
+    justify(tool, reason) {
+        const routine = this.o.agent.actionOwner.get(tool);
+        if (!routine)
+            return `"${tool}" não é uma ação de nenhuma rotina deste agente.`;
+        this.reasons.set(tool, reason);
+        const level = this.levelOf(routine);
+        return `Motivo registrado para ${tool} (rotina ${routine}, nível ${level}). Pode chamar a ferramenta.`;
+    }
+    levelOf(routine) {
+        const spec = this.o.agent.manifest.routines[routine];
+        return effectiveLevel({ stage: this.o.agent.manifest.stage, manifestLevel: spec.level, cap: this.o.caps.get(routine)?.cap ?? null });
+    }
+    /** Decisão já tomada para este tool_use_id (usada pelo canUseTool como segunda trava). */
+    decided(toolUseId) {
+        return this.decisions.get(toolUseId);
+    }
+    async check(sdkName, input, toolUseId) {
+        const d = await this.decide(sdkName, input, toolUseId);
+        this.decisions.set(toolUseId, d);
+        return d;
+    }
+    deny(message) {
+        return { allow: false, message };
+    }
+    async decide(sdkName, input, toolUseId) {
+        const { agent, store, mode, item } = this.o;
+        const m = agent.manifest;
+        // Ferramentas do próprio runtime (justify, finish_item, note...) e o carregamento de skill.
+        if (sdkName === 'Skill')
+            return { allow: true };
+        const parsed = qualifiedToolName(sdkName);
+        if (!parsed)
+            return this.deny(`Ferramenta "${sdkName}" não está disponível para agentes.`);
+        if (parsed.server === RUNTIME_SERVER)
+            return { allow: true };
+        const tool = parsed.qualified;
+        if (m.guardrails.forbiddenTools.includes(tool)) {
+            await this.audit(tool, input, 'denied', 'proibida (segregação de funções)', toolUseId);
+            return this.deny(`"${tool}" é proibida para agentes em qualquer nível. Se for preciso, escale para uma pessoa.`);
+        }
+        if (!m.gateway.subservices.includes(parsed.server)) {
+            return this.deny(`O conector "${parsed.server}" não está no escopo deste agente.`);
+        }
+        // Leitura: liberada em qualquer nível, inclusive na conversa (o acesso é o do agente).
+        if (m.reads.includes(tool))
+            return { allow: true };
+        const routine = agent.actionOwner.get(tool);
+        if (!routine)
+            return this.deny(`"${tool}" não está em reads nem nas actions de nenhuma rotina.`);
+        if (mode === 'conversation') {
+            return this.deny('Na conversa você só lê. Para agir, a demanda precisa entrar como item de uma rotina.');
+        }
+        if (!item || !item.routines.includes(routine)) {
+            return this.deny(`A rotina "${routine}" não foi acionada por este item; "${tool}" não vale aqui.`);
+        }
+        const reason = this.reasons.get(tool);
+        if (!reason) {
+            return this.deny(`Antes de "${tool}", chame ${RUNTIME_SERVER}.justify com o motivo. Toda ação fica registrada com o motivo.`);
+        }
+        this.reasons.delete(tool);
+        let level = this.levelOf(routine);
+        let note;
+        const spec = m.routines[routine];
+        const now = this.o.now?.() ?? new Date();
+        // Escopo fechado no tempo e na quantidade: fora da janela ou acima do teto, vira proposta.
+        if (rank(level) >= rank('agent')) {
+            if (spec.limits?.window && !insideWindow(spec.limits.window, now, m.triggers.timezone)) {
+                level = 'copilot';
+                note = `fora da janela ${spec.limits.window}: virou proposta`;
+            }
+            else if (spec.limits?.perHour) {
+                const done = await store.executedSince(m.id, routine, new Date(now.getTime() - 3600_000));
+                if (done >= spec.limits.perHour) {
+                    level = 'copilot';
+                    note = `teto de ${spec.limits.perHour}/hora atingido: virou proposta`;
+                }
+            }
+        }
+        const key = idempotencyKey({ agentId: m.id, itemId: item.id, routine, tool, input });
+        const base = { agentId: m.id, itemId: item.id, routine, tool, input, reason, level, idempotencyKey: key, toolUseId, ...(note ? { note } : {}) };
+        if (level === 'shadow') {
+            const r = await store.recordAction({ ...base, mode: 'shadow', status: 'pending' });
+            return this.deny(`Estágio shadow: "${tool}" NÃO foi executada. Registrei como o que você faria (#${r.id}). Não tente de novo; siga.`);
+        }
+        if (level === 'copilot') {
+            const r = await store.recordAction({ ...base, mode: 'proposed', status: 'pending' });
+            if (r.duplicate)
+                return this.deny(`Já existe uma proposta igual para este item. Nada se repete; siga.`);
+            await this.o.notifier.notify({
+                agentId: m.id,
+                kind: 'proposal',
+                to: [m.team.leader ?? m.owner.dri],
+                text: `${m.name} propõe ${tool} em ${item.subject}. Motivo: ${reason}${note ? ` (${note})` : ''}`,
+                ref: { itemId: item.id, actionId: r.id },
+            });
+            return this.deny(`Proposta #${r.id} registrada; uma pessoa aprova antes de "${tool}" rodar${note ? ` (${note})` : ''}. Não tente executar de outro jeito.`);
+        }
+        const r = await store.recordAction({ ...base, mode: 'executed', status: 'pending' });
+        if (r.duplicate)
+            return this.deny(`"${tool}" com esses mesmos dados já foi feita neste item. Nada se repete; siga.`);
+        this.running.set(toolUseId, r.id);
+        return { allow: true };
+    }
+    /** Depois que a ferramenta rodou: grava o desfecho e confere o disjuntor. */
+    async after(toolUseId, ok, result) {
+        const actionId = this.running.get(toolUseId);
+        if (actionId === undefined)
+            return;
+        this.running.delete(toolUseId);
+        await this.o.store.completeAction(actionId, ok ? 'ok' : 'error', result);
+        if (!ok) {
+            const action = await this.o.store.getAction(actionId);
+            if (action)
+                await evaluateBreaker(this.o.agent, action.routine, this.o.store, this.o.notifier, this.o.caps);
+        }
+    }
+    async audit(tool, input, mode, note, toolUseId) {
+        const { agent, store, item } = this.o;
+        await store.recordAction({
+            agentId: agent.manifest.id,
+            itemId: item?.id ?? null,
+            routine: agent.actionOwner.get(tool) ?? '-',
+            tool,
+            input,
+            reason: null,
+            mode,
+            status: 'rejected',
+            level: 'shadow',
+            idempotencyKey: `denied:${toolUseId}`,
+            toolUseId,
+            note,
+        });
+    }
+}
+/**
+ * Disjuntor: se os erros e correções passam do limite, a rotina desce um nível na hora e
+ * avisa o DRI e Segurança. O nível alto é seguro porque a descida é automática.
+ */
+export async function evaluateBreaker(agent, routine, store, notifier, caps) {
+    const m = agent.manifest;
+    const spec = m.routines[routine];
+    if (!spec)
+        return undefined;
+    const outcomes = await store.recentOutcomes(m.id, routine, m.breaker.window);
+    const { trip, rate, sample } = breakerTrips(outcomes, m.breaker);
+    if (!trip)
+        return undefined;
+    const current = effectiveLevel({ stage: m.stage, manifestLevel: spec.level, cap: (await store.levelCaps(m.id)).get(routine)?.cap ?? null });
+    const next = oneBelow(current);
+    if (next === current)
+        return undefined;
+    const reason = `disjuntor: ${(rate * 100).toFixed(0)}% de erro ou correção nas últimas ${sample} execuções (limite ${(m.breaker.maxErrorRate * 100).toFixed(0)}%)`;
+    await store.setLevelCap(m.id, routine, next, reason);
+    caps?.set(routine, { cap: next, reason });
+    await notifier.notify({
+        agentId: m.id,
+        kind: 'demotion',
+        to: [m.owner.dri, ...(m.owner.securityCoOwner ? ['seguranca'] : [])],
+        text: `${m.name}: rotina ${routine} desceu de ${current} para ${next}. ${reason}.`,
+    });
+    return next;
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAuB,MAAM,aAAa,CAAC;AAE9G,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAexC,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,CAAC,GAAG,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IAC7D,OAAO,QAAQ,GAAG,KAAK,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAgG;IAC7H,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;SAChH,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,UAAU;IAQQ;IAP7B,8EAA8E;IAC7D,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,6DAA6D;IAC5C,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,qFAAqF;IACpE,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE7D,YAA6B,CAAc;QAAd,MAAC,GAAD,CAAC,CAAa;IAAG,CAAC;IAE/C,8EAA8E;IAC9E,OAAO,CAAC,IAAY,EAAE,MAAc;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,IAAI,kDAAkD,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,0BAA0B,IAAI,YAAY,OAAO,WAAW,KAAK,8BAA8B,CAAC;IACzG,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAE,CAAC;QACtD,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IACvI,CAAC;IAED,0FAA0F;IAC1F,OAAO,CAAC,SAAiB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,KAA8B,EAAE,SAAiB;QAC5E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,KAA8B,EAAE,SAAiB;QACrF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QAEzB,4FAA4F;QAC5F,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,OAAO,qCAAqC,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAE7D,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC;QAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kCAAkC,EAAE,SAAS,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,sFAAsF,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,oCAAoC,CAAC,CAAC;QACrF,CAAC;QAED,uFAAuF;QACvF,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEnD,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,wDAAwD,CAAC,CAAC;QACjG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,sCAAsC,IAAI,kBAAkB,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,YAAY,cAAc,gEAAgE,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE1B,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAwB,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAEzC,2FAA2F;QAC3F,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvF,KAAK,GAAG,SAAS,CAAC;gBAClB,IAAI,GAAG,kBAAkB,IAAI,CAAC,MAAM,CAAC,MAAM,kBAAkB,CAAC;YAChE,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;gBAC1F,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,KAAK,GAAG,SAAS,CAAC;oBAClB,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,OAAO,gCAAgC,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAEhJ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC,IAAI,CACd,oBAAoB,IAAI,0DAA0D,CAAC,CAAC,EAAE,6BAA6B,CACpH,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;YACxG,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3B,OAAO,EAAE,CAAC,CAAC,EAAE;gBACb,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;gBAClC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,WAAW,IAAI,OAAO,IAAI,CAAC,OAAO,aAAa,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjG,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;aACzC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CACd,aAAa,CAAC,CAAC,EAAE,4CAA4C,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,sCAAsC,CAC1I,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,yEAAyE,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAG,CAAC,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,EAAW,EAAE,MAAe;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,MAAM;gBAAE,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,KAA8B,EAAE,IAAc,EAAE,IAAY,EAAE,SAAiB;QAC/G,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,YAAY,CAAC;YACvB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC1B,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;YACxB,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG;YAC3C,IAAI;YACJ,KAAK;YACL,MAAM,EAAE,IAAI;YACZ,IAAI;YACJ,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,QAAQ;YACf,cAAc,EAAE,UAAU,SAAS,EAAE;YACrC,SAAS;YACT,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkB,EAClB,OAAe,EACf,KAAoB,EACpB,QAAkB,EAClB,IAA2D;IAE3D,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5I,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,MAAM,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACnK,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,CAAC,EAAE;QACb,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,YAAY,OAAO,cAAc,OAAO,SAAS,IAAI,KAAK,MAAM,GAAG;KACnF,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Montagem do prompt. O system prompt é estável por agente (persona + regras do runtime),
+ * para aproveitar o cache; o que muda a cada item vai na mensagem.
+ */
+import type { LoadedAgent } from './manifest.js';
+import type { EffectiveLevel } from './levels.js';
+import type { ActionRow, EventRow, ItemRow } from './store/long-term.js';
+/** Dado vindo de fora (chamado, mensagem) nunca vira instrução. */
+export declare function untrusted(origin: string, data: unknown): string;
+export declare function systemPrompt(agent: LoadedAgent, levelOf: (routine: string) => EffectiveLevel): string;
+export declare function itemPrompt(opts: {
+    item: ItemRow & {
+        events: EventRow[];
+    };
+    routines: string[];
+    history: ActionRow[];
+    corrections: ActionRow[];
+}): string;
+export declare function conversationPrompt(opts: {
+    asker: string;
+    askerKind: 'person' | 'agent';
+    message: string;
+    conversationId: string;
+}): string;