@vauban-org/agent-sdk 0.16.0

package/dist/orchestration/ooda/debate.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Multi-Agent Debate — Dual LLM in orient/decide phases.
+ *
+ * Pattern: Strategist (thesis) + Skeptic (antithesis) → Synthesizer → synthesis.
+ *
+ * The debate engine runs two adversarial LLM stances against each other
+ * and produces a consensus score + plan. Used for high-stakes decisions
+ * where a single LLM's blind spots are unacceptable (legal review,
+ * financial allocation, security decisions).
+ *
+ * Reference: command-center/docs/specs/debate-engine-spec.md
+ *
+ * @public
+ */
+export interface DebateStance {
+    /** The argument / position. */
+    content: string;
+    /** Confidence score (0.0 - 1.0). */
+    confidence: number;
+    /** Key points supporting this stance. */
+    keyPoints: string[];
+    /** Identified risks or weaknesses. */
+    risks: string[];
+}
+export interface DebateSynthesis {
+    /** Synthesized conclusion. */
+    conclusion: string;
+    /** Consensus score (0.0 = total disagreement, 1.0 = full agreement). */
+    consensusScore: number;
+    /** Recommended action. */
+    recommendation: string;
+    /** Key trade-offs identified. */
+    tradeoffs: string[];
+    /** Whether HITL escalation is recommended. */
+    hitlRecommended: boolean;
+}
+export interface DebateResult {
+    thesis: DebateStance;
+    antithesis: DebateStance;
+    synthesis: DebateSynthesis;
+    /** Number of debate rounds. */
+    rounds: number;
+}
+export interface DebateConfig {
+    /** The question or decision to debate. */
+    question: string;
+    /** Context / background information. */
+    context?: string;
+    /** Max debate rounds (default: 1). */
+    maxRounds?: number;
+    /** LLM function for the strategist (thesis). */
+    strategist: (question: string, context?: string) => Promise<DebateStance>;
+    /** LLM function for the skeptic (antithesis). */
+    skeptic: (question: string, thesis: DebateStance, context?: string) => Promise<DebateStance>;
+    /** LLM function for the synthesizer. */
+    synthesizer: (question: string, thesis: DebateStance, antithesis: DebateStance, context?: string) => Promise<DebateSynthesis>;
+}
+/**
+ * Run a multi-agent debate.
+ *
+ * 1. Strategist proposes thesis
+ * 2. Skeptic challenges with antithesis
+ * 3. Synthesizer merges into consensus + recommendation
+ *
+ * If `maxRounds > 1`, the thesis and antithesis are fed back for refinement.
+ */
+export declare function runDebate(config: DebateConfig): Promise<DebateResult>;
+//# sourceMappingURL=debate.d.ts.map

package/dist/orchestration/ooda/debate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debate.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/debate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sCAAsC;IACtC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,8CAA8C;IAC9C,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,eAAe,CAAC;IAC3B,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E,iDAAiD;IACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7F,wCAAwC;IACxC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CAC/H;AAID;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAwB3E"}

package/dist/orchestration/ooda/debate.js

@@ -0,0 +1,39 @@
+/**
+ * Multi-Agent Debate — Dual LLM in orient/decide phases.
+ *
+ * Pattern: Strategist (thesis) + Skeptic (antithesis) → Synthesizer → synthesis.
+ *
+ * The debate engine runs two adversarial LLM stances against each other
+ * and produces a consensus score + plan. Used for high-stakes decisions
+ * where a single LLM's blind spots are unacceptable (legal review,
+ * financial allocation, security decisions).
+ *
+ * Reference: command-center/docs/specs/debate-engine-spec.md
+ *
+ * @public
+ */
+// ─── Engine ─────────────────────────────────────────────────────────────────────
+/**
+ * Run a multi-agent debate.
+ *
+ * 1. Strategist proposes thesis
+ * 2. Skeptic challenges with antithesis
+ * 3. Synthesizer merges into consensus + recommendation
+ *
+ * If `maxRounds > 1`, the thesis and antithesis are fed back for refinement.
+ */
+export async function runDebate(config) {
+    const maxRounds = config.maxRounds ?? 1;
+    let thesis = await config.strategist(config.question, config.context);
+    let antithesis = await config.skeptic(config.question, thesis, config.context);
+    // Multi-round refinement
+    for (let round = 1; round < maxRounds; round++) {
+        // Refine thesis against antithesis
+        thesis = await config.strategist(`${config.question}\n\nCounterarguments to address:\n${antithesis.content}`, config.context);
+        // Refine antithesis against refined thesis
+        antithesis = await config.skeptic(`${config.question}\n\nUpdated thesis to challenge:\n${thesis.content}`, thesis, config.context);
+    }
+    const synthesis = await config.synthesizer(config.question, thesis, antithesis, config.context);
+    return { thesis, antithesis, synthesis, rounds: maxRounds };
+}
+//# sourceMappingURL=debate.js.map

package/dist/orchestration/ooda/debate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debate.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/debate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAmDH,mFAAmF;AAEnF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAoB;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE/E,yBAAyB;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,mCAAmC;QACnC,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAC9B,GAAG,MAAM,CAAC,QAAQ,qCAAqC,UAAU,CAAC,OAAO,EAAE,EAC3E,MAAM,CAAC,OAAO,CACf,CAAC;QACF,2CAA2C;QAC3C,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAC/B,GAAG,MAAM,CAAC,QAAQ,qCAAqC,MAAM,CAAC,OAAO,EAAE,EACvE,MAAM,EACN,MAAM,CAAC,OAAO,CACf,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEhG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC9D,CAAC"}

package/dist/orchestration/ooda/economic-observer.d.ts

@@ -0,0 +1,50 @@
+/**
+ * EconomicObserver — Cost/value guard for autonomous agents.
+ *
+ * Tracks per-agent token costs vs. outcome value over a 7-day rolling window.
+ * Agents with negative ROI get throttled (cycle skipped with reason
+ * `economic_observer:negative_roi`).
+ *
+ * The SDK defines ONLY the interface + guard factory — pure, no DB.
+ * Forge implements `PostgresEconomicObserver` backed by TimescaleDB.
+ *
+ * Throttle logic:
+ *   if cost_7d > value_7d * 0.5 AND cycles > 20 → throttle (skip cycle).
+ *   Cycles under 20 always run (cold-start grace period).
+ *
+ * @public
+ */
+import type { RiskGuard } from "./types.js";
+export interface EconomicObserver {
+    /**
+     * Record a completed cycle's cost and value.
+     *
+     * Called after the feedback phase produces an OutcomeRecord.
+     * `confidence` weights the outcome value: effective_value = valueCents * confidence.
+     */
+    recordCycle(agentId: string, tokenCostUsd: number, outcomeValueCents: number, confidence: number): Promise<void>;
+    /**
+     * Check whether this agent should be throttled (skipped).
+     *
+     * Returns true if the agent's 7-day rolling cost exceeds 50% of its
+     * 7-day rolling value AND it has completed more than 20 cycles.
+     */
+    shouldThrottle(agentId: string): Promise<boolean>;
+    /**
+     * Get statistics for the 7-day rolling window.
+     */
+    getStats(agentId: string): Promise<{
+        cost7d: number;
+        value7d: number;
+        roi: number;
+        cycles: number;
+    }>;
+}
+/**
+ * Create a RiskGuard from an EconomicObserver.
+ *
+ * Returns a guard compatible with `OODAAgentConfig.riskGuards` —
+ * zero boilerplate wiring into the OODA loop.
+ */
+export declare function economicObserverGuard(observer: EconomicObserver, agentId: string): RiskGuard;
+//# sourceMappingURL=economic-observer.d.ts.map

package/dist/orchestration/ooda/economic-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"economic-observer.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/economic-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,YAAY,CAAC;AAIzD,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,GACd,SAAS,CAWX"}

package/dist/orchestration/ooda/economic-observer.js

@@ -0,0 +1,36 @@
+/**
+ * EconomicObserver — Cost/value guard for autonomous agents.
+ *
+ * Tracks per-agent token costs vs. outcome value over a 7-day rolling window.
+ * Agents with negative ROI get throttled (cycle skipped with reason
+ * `economic_observer:negative_roi`).
+ *
+ * The SDK defines ONLY the interface + guard factory — pure, no DB.
+ * Forge implements `PostgresEconomicObserver` backed by TimescaleDB.
+ *
+ * Throttle logic:
+ *   if cost_7d > value_7d * 0.5 AND cycles > 20 → throttle (skip cycle).
+ *   Cycles under 20 always run (cold-start grace period).
+ *
+ * @public
+ */
+// ─── Guard Factory ──────────────────────────────────────────────────────────────
+/**
+ * Create a RiskGuard from an EconomicObserver.
+ *
+ * Returns a guard compatible with `OODAAgentConfig.riskGuards` —
+ * zero boilerplate wiring into the OODA loop.
+ */
+export function economicObserverGuard(observer, agentId) {
+    return {
+        name: "economic_observer",
+        check: async (_ctx) => {
+            const throttled = await observer.shouldThrottle(agentId);
+            return {
+                proceed: !throttled,
+                reason: throttled ? "economic_observer:negative_roi" : undefined,
+            };
+        },
+    };
+}
+//# sourceMappingURL=economic-observer.js.map

package/dist/orchestration/ooda/economic-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"economic-observer.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/economic-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAuCH,mFAAmF;AAEnF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA0B,EAC1B,OAAe;IAEf,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,KAAK,EAAE,IAAiB,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO;gBACL,OAAO,EAAE,CAAC,SAAS;gBACnB,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/orchestration/ooda/errors.d.ts

@@ -0,0 +1,21 @@
+/**
+ * OODA boot errors — dependency validation (plan v6 §3.7).
+ *
+ * @public
+ */
+/**
+ * Thrown at boot when a required dependency (e.g. `deps.llm`) is missing
+ * and `SDK_STRICT_DEPS` mode is enabled (default: true).
+ */
+export declare class MissingDependencyError extends Error {
+    readonly port: string;
+    constructor(port: string);
+}
+/**
+ * Thrown when the `deps` object is structurally invalid (e.g. wrong type
+ * for a known port, conflicting constraints).
+ */
+export declare class DepsValidationError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/orchestration/ooda/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM;CAMzB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAK5B"}

package/dist/orchestration/ooda/errors.js

@@ -0,0 +1,30 @@
+/**
+ * OODA boot errors — dependency validation (plan v6 §3.7).
+ *
+ * @public
+ */
+/**
+ * Thrown at boot when a required dependency (e.g. `deps.llm`) is missing
+ * and `SDK_STRICT_DEPS` mode is enabled (default: true).
+ */
+export class MissingDependencyError extends Error {
+    port;
+    constructor(port) {
+        super(`OODAAgent requires deps.${port}. BYOM is mandatory in strict mode.`);
+        this.name = "MissingDependencyError";
+        this.port = port;
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/**
+ * Thrown when the `deps` object is structurally invalid (e.g. wrong type
+ * for a known port, conflicting constraints).
+ */
+export class DepsValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DepsValidationError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/orchestration/ooda/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAS;IAEtB,YAAY,IAAY;QACtB,KAAK,CAAC,2BAA2B,IAAI,qCAAqC,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/orchestration/ooda/execution-mode-guard.d.ts

@@ -0,0 +1,24 @@
+/**
+ * EXECUTION_MODE guard — sprint-525:quick-2 (anti-pattern #6).
+ *
+ * Refuses to boot an OODA agent without an explicit execution mode.
+ * Forces the operator to make a deliberate choice between safe
+ * simulation (`dry-run`) and on-line action (`live`) — no implicit
+ * default that could leak side-effects in test environments.
+ *
+ * @public
+ */
+import type { ExecutionMode } from "./types.js";
+/**
+ * Assert that `mode` is a valid `ExecutionMode`. Throws an Error with
+ * an actionable message otherwise — typically caught and logged by
+ * the agent boot path so the operator immediately sees what to set.
+ */
+export declare function assertExecutionMode(mode: unknown): asserts mode is ExecutionMode;
+/**
+ * Convenience reader: pull EXECUTION_MODE from a process-like env bag
+ * and assert it. Centralises the "fail fast at boot" pattern for
+ * downstream agents that read from `process.env`.
+ */
+export declare function readExecutionModeFromEnv(env: Record<string, string | undefined>, varName?: string): ExecutionMode;
+//# sourceMappingURL=execution-mode-guard.d.ts.map

package/dist/orchestration/ooda/execution-mode-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-mode-guard.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/execution-mode-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,CAIhF;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,OAAO,SAAmB,GACzB,aAAa,CAIf"}

package/dist/orchestration/ooda/execution-mode-guard.js

@@ -0,0 +1,31 @@
+/**
+ * EXECUTION_MODE guard — sprint-525:quick-2 (anti-pattern #6).
+ *
+ * Refuses to boot an OODA agent without an explicit execution mode.
+ * Forces the operator to make a deliberate choice between safe
+ * simulation (`dry-run`) and on-line action (`live`) — no implicit
+ * default that could leak side-effects in test environments.
+ *
+ * @public
+ */
+/**
+ * Assert that `mode` is a valid `ExecutionMode`. Throws an Error with
+ * an actionable message otherwise — typically caught and logged by
+ * the agent boot path so the operator immediately sees what to set.
+ */
+export function assertExecutionMode(mode) {
+    if (mode !== "dry-run" && mode !== "live") {
+        throw new Error(`OODA agent requires EXECUTION_MODE: 'dry-run' | 'live'. Got: ${String(mode)}`);
+    }
+}
+/**
+ * Convenience reader: pull EXECUTION_MODE from a process-like env bag
+ * and assert it. Centralises the "fail fast at boot" pattern for
+ * downstream agents that read from `process.env`.
+ */
+export function readExecutionModeFromEnv(env, varName = "EXECUTION_MODE") {
+    const raw = env[varName];
+    assertExecutionMode(raw);
+    return raw;
+}
+//# sourceMappingURL=execution-mode-guard.js.map

package/dist/orchestration/ooda/execution-mode-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-mode-guard.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/execution-mode-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,gEAAgE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAuC,EACvC,OAAO,GAAG,gBAAgB;IAE1B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/orchestration/ooda/factory.d.ts

@@ -0,0 +1,12 @@
+/**
+ * createOODAAgent — public factory with boot-time dependency validation.
+ *
+ * Plan v6 §3.7: strict deps validation at construction.
+ * - `SDK_STRICT_DEPS=false`: legacy mode — warn only, do not throw.
+ * - `SDK_STRICT_DEPS` absent or any other value: strict mode — throw `MissingDependencyError`.
+ *
+ * @public
+ */
+import type { OODAAgent, OODAAgentConfig } from "./types.js";
+export declare function createOODAAgent<TConfig = unknown, TObs = unknown, TOrient = unknown, TDecision = unknown, TAction = unknown, TFeedback = unknown>(config: OODAAgentConfig<TConfig, TObs, TOrient, TDecision, TAction, TFeedback>): OODAAgent;
+//# sourceMappingURL=factory.d.ts.map

package/dist/orchestration/ooda/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7D,wBAAgB,eAAe,CAC7B,OAAO,GAAG,OAAO,EACjB,IAAI,GAAG,OAAO,EACd,OAAO,GAAG,OAAO,EACjB,SAAS,GAAG,OAAO,EACnB,OAAO,GAAG,OAAO,EACjB,SAAS,GAAG,OAAO,EAEnB,MAAM,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,GAC7E,SAAS,CAwBX"}

package/dist/orchestration/ooda/factory.js

@@ -0,0 +1,27 @@
+/**
+ * createOODAAgent — public factory with boot-time dependency validation.
+ *
+ * Plan v6 §3.7: strict deps validation at construction.
+ * - `SDK_STRICT_DEPS=false`: legacy mode — warn only, do not throw.
+ * - `SDK_STRICT_DEPS` absent or any other value: strict mode — throw `MissingDependencyError`.
+ *
+ * @public
+ */
+import { OODAAgentImpl } from "./agent.js";
+import { MissingDependencyError } from "./errors.js";
+export function createOODAAgent(config) {
+    // 0.17: default=legacy (opt-in via SDK_STRICT_DEPS=true). 1.0: default=strict.
+    const strict = process.env["SDK_STRICT_DEPS"] === "true";
+    if (!config.deps) {
+        if (strict) {
+            throw new MissingDependencyError("llm");
+        }
+        // Legacy mode: warn only — will throw in SDK 1.0
+        console.warn("[agent-sdk] OODAAgentConfig.deps missing — legacy mode. Will throw in 1.0.");
+    }
+    else if (strict && !config.deps.llm) {
+        throw new MissingDependencyError("llm");
+    }
+    return new OODAAgentImpl(config);
+}
+//# sourceMappingURL=factory.js.map

package/dist/orchestration/ooda/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD,MAAM,UAAU,eAAe,CAQ7B,MAA8E;IAE9E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC;IAEzD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,iDAAiD;QACjD,OAAO,CAAC,IAAI,CACV,4EAA4E,CAC7E,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,aAAa,CAOtB,MAAM,CAAC,CAAC;AACZ,CAAC"}

package/dist/orchestration/ooda/guardrails.d.ts

@@ -0,0 +1,65 @@
+/**
+ * LLM Guardrails — pre/post phase enforcement with Poseidon-provable violations.
+ *
+ * Sprint-563: B1 — LLM Guardrails pre/post + violations Vauban Proof Stack.
+ *
+ * Guards run before (pre-phase) or after (post-phase) each OODA phase.
+ * Pre-guards are BLOCKING — phase.fn does NOT execute if guard trips.
+ * Post-guards inspect output — reject phase result if violation detected.
+ *
+ * Violations produce a Poseidon hash via proofPort → anchorable on L3.
+ * CycleEventV011 'guardrail_violated' is emitted with proofHash + timing.
+ */
+import type { OODAContext, CycleEventV011 } from "./types.js";
+export type GuardrailTiming = "pre-phase" | "post-phase";
+export interface GuardrailDef<TInput = unknown, TOutput = unknown> {
+    /** Guard name (e.g. "no-pii-in-output"). */
+    readonly name: string;
+    /** When the guard executes. */
+    readonly timing: GuardrailTiming;
+    /**
+     * Check function. Returns { pass: false, reason, proofHash? } on violation.
+     * `input` is the phase input (pre-phase) or output (post-phase).
+     */
+    check(input: TInput | TOutput, ctx: OODAContext): Promise<GuardrailResult>;
+}
+export interface GuardrailResult {
+    pass: boolean;
+    reason?: string;
+    /** Poseidon hash of the violation payload for L3 anchoring. */
+    proofHash?: string;
+}
+export interface GuardrailViolation {
+    name: string;
+    timing: GuardrailTiming;
+    phase: string;
+    reason: string;
+    proofHash?: string;
+}
+/**
+ * Run pre-guards. Returns the first violation, or null if all pass.
+ * Pre-guard violations are BLOCKING — the phase does not execute.
+ */
+export declare function runPreGuards<TInput>(guards: readonly GuardrailDef<TInput, unknown>[], input: TInput, ctx: OODAContext): Promise<GuardrailViolation | null>;
+/**
+ * Run post-guards. Returns the first violation, or null if all pass.
+ * Post-guard violations REJECT the phase output.
+ */
+export declare function runPostGuards<TOutput>(guards: readonly GuardrailDef<unknown, TOutput>[], output: TOutput, ctx: OODAContext): Promise<GuardrailViolation | null>;
+/**
+ * Build a CycleEventV011 'guardrail_violated' event from a violation.
+ */
+export declare function guardrailViolationToEvent(violation: GuardrailViolation, runId: string, cycleIndex: number): Extract<CycleEventV011, {
+    type: "guardrail_violated";
+}>;
+/**
+ * PII guard — detects credit card numbers in output.
+ * Post-phase only, runs after LLM calls.
+ */
+export declare const PII_GUARD: GuardrailDef<string>;
+/**
+ * Max output length guard — prevents runaway LLM responses.
+ * Pre-phase only (applied to input size before LLM call).
+ */
+export declare function createMaxInputLengthGuard(maxChars: number): GuardrailDef<string>;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/orchestration/ooda/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;AAEzD,MAAM,WAAW,YAAY,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAC/D,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EACvC,MAAM,EAAE,SAAS,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAChD,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAepC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EACzC,MAAM,EAAE,SAAS,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EACjD,MAAM,EAAE,OAAO,EACf,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAepC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,kBAAkB,EAC7B,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAWzD;AAID;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,YAAY,CAAC,MAAM,CA+B1C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAchF"}

package/dist/orchestration/ooda/guardrails.js

@@ -0,0 +1,127 @@
+/**
+ * LLM Guardrails — pre/post phase enforcement with Poseidon-provable violations.
+ *
+ * Sprint-563: B1 — LLM Guardrails pre/post + violations Vauban Proof Stack.
+ *
+ * Guards run before (pre-phase) or after (post-phase) each OODA phase.
+ * Pre-guards are BLOCKING — phase.fn does NOT execute if guard trips.
+ * Post-guards inspect output — reject phase result if violation detected.
+ *
+ * Violations produce a Poseidon hash via proofPort → anchorable on L3.
+ * CycleEventV011 'guardrail_violated' is emitted with proofHash + timing.
+ */
+/**
+ * Run pre-guards. Returns the first violation, or null if all pass.
+ * Pre-guard violations are BLOCKING — the phase does not execute.
+ */
+export async function runPreGuards(guards, input, ctx) {
+    for (const guard of guards) {
+        if (guard.timing !== "pre-phase")
+            continue;
+        const result = await guard.check(input, ctx);
+        if (!result.pass) {
+            return {
+                name: guard.name,
+                timing: guard.timing,
+                phase: "(pre-phase)",
+                reason: result.reason ?? "Guard tripped",
+                proofHash: result.proofHash,
+            };
+        }
+    }
+    return null;
+}
+/**
+ * Run post-guards. Returns the first violation, or null if all pass.
+ * Post-guard violations REJECT the phase output.
+ */
+export async function runPostGuards(guards, output, ctx) {
+    for (const guard of guards) {
+        if (guard.timing !== "post-phase")
+            continue;
+        const result = await guard.check(output, ctx);
+        if (!result.pass) {
+            return {
+                name: guard.name,
+                timing: guard.timing,
+                phase: "(post-phase)",
+                reason: result.reason ?? "Guard tripped",
+                proofHash: result.proofHash,
+            };
+        }
+    }
+    return null;
+}
+/**
+ * Build a CycleEventV011 'guardrail_violated' event from a violation.
+ */
+export function guardrailViolationToEvent(violation, runId, cycleIndex) {
+    return {
+        type: "guardrail_violated",
+        runId,
+        cycleIndex,
+        phase: violation.phase,
+        timing: violation.timing,
+        proofHash: violation.proofHash ?? "",
+        reason: violation.reason,
+        ts: Date.now(),
+    };
+}
+// ─── Built-in guardrails ─────────────────────────────────────────────────────
+/**
+ * PII guard — detects credit card numbers in output.
+ * Post-phase only, runs after LLM calls.
+ */
+export const PII_GUARD = {
+    name: "no-pii-in-output",
+    timing: "post-phase",
+    async check(output) {
+        // Luhn-like detection: 13-19 digit sequences (credit card PAN range)
+        const ccPattern = /\b[0-9]{13,19}\b/g;
+        const matches = output.match(ccPattern);
+        if (matches) {
+            const hasLuhn = matches.some((m) => {
+                let sum = 0;
+                let alt = false;
+                for (let i = m.length - 1; i >= 0; i--) {
+                    let n = parseInt(m[i], 10);
+                    if (alt) {
+                        n *= 2;
+                        if (n > 9)
+                            n -= 9;
+                    }
+                    sum += n;
+                    alt = !alt;
+                }
+                return sum % 10 === 0;
+            });
+            if (hasLuhn) {
+                return {
+                    pass: false,
+                    reason: "Potential credit card number detected in LLM output",
+                };
+            }
+        }
+        return { pass: true };
+    },
+};
+/**
+ * Max output length guard — prevents runaway LLM responses.
+ * Pre-phase only (applied to input size before LLM call).
+ */
+export function createMaxInputLengthGuard(maxChars) {
+    return {
+        name: `max-input-${maxChars}`,
+        timing: "pre-phase",
+        async check(input) {
+            if (input.length > maxChars) {
+                return {
+                    pass: false,
+                    reason: `Input length ${input.length} exceeds maximum ${maxChars} characters`,
+                };
+            }
+            return { pass: true };
+        },
+    };
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/orchestration/ooda/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiCH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAgD,EAChD,KAAa,EACb,GAAgB;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,SAAS;QAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe;gBACxC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAiD,EACjD,MAAe,EACf,GAAgB;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe;gBACxC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAA6B,EAC7B,KAAa,EACb,UAAkB;IAElB,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK;QACL,UAAU;QACV,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE;QACpC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;KACf,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAyB;IAC7C,IAAI,EAAE,kBAAkB;IACxB,MAAM,EAAE,YAAY;IACpB,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,qEAAqE;QACrE,MAAM,SAAS,GAAG,mBAAmB,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjC,IAAI,GAAG,GAAG,CAAC,CAAC;gBACZ,IAAI,GAAG,GAAG,KAAK,CAAC;gBAChB,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACvC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;oBAC5B,IAAI,GAAG,EAAE,CAAC;wBACR,CAAC,IAAI,CAAC,CAAC;wBACP,IAAI,CAAC,GAAG,CAAC;4BAAE,CAAC,IAAI,CAAC,CAAC;oBACpB,CAAC;oBACD,GAAG,IAAI,CAAC,CAAC;oBACT,GAAG,GAAG,CAAC,GAAG,CAAC;gBACb,CAAC;gBACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,qDAAqD;iBAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,OAAO;QACL,IAAI,EAAE,aAAa,QAAQ,EAAE;QAC7B,MAAM,EAAE,WAAW;QACnB,KAAK,CAAC,KAAK,CAAC,KAAa;YACvB,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC5B,OAAO;oBACL,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,gBAAgB,KAAK,CAAC,MAAM,oBAAoB,QAAQ,aAAa;iBAC9E,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/orchestration/ooda/guards/always-on.d.ts

@@ -0,0 +1,15 @@
+/**
+ * always-on session guard — 24/7 no-op.
+ *
+ * For cron-style agents that run unconditionally (e.g. daily-digest, heartbeat).
+ * Satisfies the SessionGuard interface without gating anything.
+ *
+ * @public
+ */
+import type { SessionGuard } from "../types.js";
+/**
+ * Returns a SessionGuard that is always active.
+ * Use for agents that must run regardless of time-of-day or calendar.
+ */
+export declare function alwaysOn(): SessionGuard;
+//# sourceMappingURL=always-on.d.ts.map

package/dist/orchestration/ooda/guards/always-on.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"always-on.d.ts","sourceRoot":"","sources":["../../../../src/orchestration/ooda/guards/always-on.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,YAAY,CAKvC"}

package/dist/orchestration/ooda/guards/always-on.js

@@ -0,0 +1,19 @@
+/**
+ * always-on session guard — 24/7 no-op.
+ *
+ * For cron-style agents that run unconditionally (e.g. daily-digest, heartbeat).
+ * Satisfies the SessionGuard interface without gating anything.
+ *
+ * @public
+ */
+/**
+ * Returns a SessionGuard that is always active.
+ * Use for agents that must run regardless of time-of-day or calendar.
+ */
+export function alwaysOn() {
+    return {
+        name: "always-on",
+        isActive: async (_at) => true,
+    };
+}
+//# sourceMappingURL=always-on.js.map

package/dist/orchestration/ooda/guards/always-on.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"always-on.js","sourceRoot":"","sources":["../../../../src/orchestration/ooda/guards/always-on.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,KAAK,EAAE,GAAS,EAAoB,EAAE,CAAC,IAAI;KACtD,CAAC;AACJ,CAAC"}