@vorim/sdk 1.0.2 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -10,6 +10,10 @@ Register agents with cryptographic Ed25519 identities, enforce scoped permission
10
10
  [![Node](https://img.shields.io/badge/Node.js-18%2B-green.svg)](https://nodejs.org/)
11
11
  [![Zero Dependencies](https://img.shields.io/badge/Dependencies-0-brightgreen.svg)]()
12
12
 
13
+ > **[vorim.ai](https://vorim.ai)** — Create a free account and get your API key in 30 seconds.
14
+ > **[Documentation](https://vorim.ai/docs)** — Full API reference, framework integrations, and examples.
15
+ > **[Quick Start](https://vorim.ai/quickstart)** — Set up in under 5 minutes.
16
+
13
17
  ---
14
18
 
15
19
  ## Why Vorim?
@@ -0,0 +1,141 @@
1
+ "use strict";
2
+ var __defProp = Object.defineProperty;
3
+ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
4
+ var __getOwnPropNames = Object.getOwnPropertyNames;
5
+ var __hasOwnProp = Object.prototype.hasOwnProperty;
6
+ var __export = (target, all) => {
7
+ for (var name in all)
8
+ __defProp(target, name, { get: all[name], enumerable: true });
9
+ };
10
+ var __copyProps = (to, from, except, desc) => {
11
+ if (from && typeof from === "object" || typeof from === "function") {
12
+ for (let key of __getOwnPropNames(from))
13
+ if (!__hasOwnProp.call(to, key) && key !== except)
14
+ __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
15
+ }
16
+ return to;
17
+ };
18
+ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
19
+
20
+ // src/integrations/crewai.ts
21
+ var crewai_exports = {};
22
+ __export(crewai_exports, {
23
+ checkCrewPermission: () => checkCrewPermission,
24
+ checkDelegationPermission: () => checkDelegationPermission,
25
+ emitCrewRunEvents: () => emitCrewRunEvents,
26
+ emitCrewTaskEvent: () => emitCrewTaskEvent,
27
+ registerCrew: () => registerCrew,
28
+ verifyCrewTrust: () => verifyCrewTrust
29
+ });
30
+ module.exports = __toCommonJS(crewai_exports);
31
+ async function registerCrew(vorim, manifest) {
32
+ const members = [];
33
+ for (const member of manifest.members) {
34
+ const scopes = [...member.scopes];
35
+ if (member.allowDelegation && !scopes.includes("agent:delegate")) {
36
+ scopes.push("agent:delegate");
37
+ }
38
+ const registration = await vorim.register({
39
+ name: member.name,
40
+ description: member.description ?? `CrewAI ${member.role} \u2014 ${manifest.crewName}`,
41
+ capabilities: member.capabilities,
42
+ scopes
43
+ });
44
+ members.push({
45
+ role: member.role,
46
+ agentId: registration.agent.agent_id,
47
+ registration,
48
+ privateKey: registration.private_key
49
+ });
50
+ }
51
+ return {
52
+ crewName: manifest.crewName,
53
+ members,
54
+ getMember(role) {
55
+ return members.find((m) => m.role === role);
56
+ },
57
+ agentIds() {
58
+ return members.map((m) => m.agentId);
59
+ }
60
+ };
61
+ }
62
+ async function emitCrewTaskEvent(vorim, event) {
63
+ const auditEvent = {
64
+ agent_id: event.agentId,
65
+ event_type: event.tool ? "tool_call" : "api_request",
66
+ action: event.task,
67
+ resource: event.tool,
68
+ result: event.result,
69
+ latency_ms: event.latencyMs,
70
+ error_code: event.error ? "CREW_TASK_ERROR" : void 0,
71
+ metadata: {
72
+ framework: "crewai",
73
+ role: event.role,
74
+ ...event.delegatedTo ? { delegated_to: event.delegatedTo } : {},
75
+ ...event.error ? { error: event.error } : {},
76
+ ...event.metadata
77
+ }
78
+ };
79
+ await vorim.emit(auditEvent);
80
+ }
81
+ async function emitCrewRunEvents(vorim, events) {
82
+ const auditEvents = events.map((event) => ({
83
+ agent_id: event.agentId,
84
+ event_type: event.tool ? "tool_call" : "api_request",
85
+ action: event.task,
86
+ resource: event.tool,
87
+ result: event.result,
88
+ latency_ms: event.latencyMs,
89
+ error_code: event.error ? "CREW_TASK_ERROR" : void 0,
90
+ metadata: {
91
+ framework: "crewai",
92
+ role: event.role,
93
+ ...event.delegatedTo ? { delegated_to: event.delegatedTo } : {},
94
+ ...event.error ? { error: event.error } : {},
95
+ ...event.metadata
96
+ }
97
+ }));
98
+ return vorim.emitBatch(auditEvents);
99
+ }
100
+ async function checkCrewPermission(vorim, crew, role, scope) {
101
+ const member = crew.getMember(role);
102
+ if (!member) {
103
+ return { allowed: false, reason: `Unknown crew member: ${role}` };
104
+ }
105
+ return vorim.check(member.agentId, scope);
106
+ }
107
+ async function checkDelegationPermission(vorim, crew, fromRole, toRole) {
108
+ const from = crew.getMember(fromRole);
109
+ const to = crew.getMember(toRole);
110
+ if (!from) return { allowed: false, reason: `Unknown crew member: ${fromRole}` };
111
+ if (!to) return { allowed: false, reason: `Unknown crew member: ${toRole}` };
112
+ const result = await vorim.check(from.agentId, "agent:delegate");
113
+ if (!result.allowed) {
114
+ return { allowed: false, reason: `${fromRole} lacks agent:delegate permission` };
115
+ }
116
+ return { allowed: true };
117
+ }
118
+ async function verifyCrewTrust(vorim, crew) {
119
+ const results = await Promise.all(
120
+ crew.members.map(async (member) => {
121
+ const trust = await vorim.verify(member.agentId);
122
+ return {
123
+ role: member.role,
124
+ agentId: member.agentId,
125
+ trustScore: trust.trust_score,
126
+ status: trust.status
127
+ };
128
+ })
129
+ );
130
+ return results;
131
+ }
132
+ // Annotate the CommonJS export names for ESM import in node:
133
+ 0 && (module.exports = {
134
+ checkCrewPermission,
135
+ checkDelegationPermission,
136
+ emitCrewRunEvents,
137
+ emitCrewTaskEvent,
138
+ registerCrew,
139
+ verifyCrewTrust
140
+ });
141
+ //# sourceMappingURL=crewai.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/integrations/crewai.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — CrewAI Integration\n// CrewAI is Python-only, so this module provides:\n// 1. A TypeScript helper for managing CrewAI agent identities via Vorim\n// 2. Audit utilities for logging crew task execution\n// 3. A \"crew manifest\" pattern for registering entire crews at once\n//\n// Use this from a TypeScript orchestration layer that triggers CrewAI\n// runs via REST, CLI, or subprocess. For native Python integration,\n// use the Vorim REST API directly (see docs).\n//\n// No peer dependencies required — uses @vorim/sdk only.\n// ============================================================================\n\nimport type { VorimSDK } from '../index.js';\nimport type {\n PermissionScope, AuditEventInput, AgentRegistrationResult,\n} from '../types.js';\n\n// ─── Crew Configuration ──────────────────────────────────────────────────\n\nexport interface CrewMemberConfig {\n /** Unique role name within the crew (e.g. \"researcher\", \"writer\"). */\n role: string;\n /** Display name for the Vorim agent. */\n name: string;\n /** Description of this crew member's responsibilities. */\n description?: string;\n /** Tools this agent can use (e.g. [\"web_search\", \"file_read\"]). */\n capabilities: string[];\n /** Permission scopes to grant. */\n scopes: PermissionScope[];\n /** Whether this agent can delegate to other crew members. */\n allowDelegation?: boolean;\n}\n\nexport interface CrewManifest {\n /** Name for the overall crew. */\n crewName: string;\n /** Members of the crew. */\n members: CrewMemberConfig[];\n /** Optional metadata for the crew. */\n metadata?: Record<string, unknown>;\n}\n\nexport interface RegisteredCrewMember {\n role: string;\n agentId: string;\n registration: AgentRegistrationResult;\n privateKey: string;\n}\n\nexport interface RegisteredCrew {\n crewName: string;\n members: RegisteredCrewMember[];\n /** Lookup a member by role. */\n getMember(role: string): RegisteredCrewMember | undefined;\n /** Get all agent IDs in the crew. */\n agentIds(): string[];\n}\n\n// ─── Crew Registration ──────────────────────────────────────────────────\n\n/**\n * Registers an entire CrewAI crew with Vorim. Each crew member gets a\n * unique Vorim agent identity with Ed25519 keypair and scoped permissions.\n *\n * @example\n * ```ts\n * import createVorim from \"@vorim/sdk\";\n * import { registerCrew } from \"@vorim/sdk/integrations/crewai\";\n *\n * const vorim = createVorim({ apiKey: \"agid_sk_live_...\" });\n *\n * const crew = await registerCrew(vorim, {\n * crewName: \"content-pipeline\",\n * members: [\n * {\n * role: \"researcher\",\n * name: \"crew-researcher\",\n * capabilities: [\"web_search\", \"summarization\"],\n * scopes: [\"agent:read\", \"agent:execute\"],\n * },\n * {\n * role: \"writer\",\n * name: \"crew-writer\",\n * capabilities: [\"file_write\", \"formatting\"],\n * scopes: [\"agent:read\", \"agent:write\"],\n * },\n * {\n * role: \"editor\",\n * name: \"crew-editor\",\n * capabilities: [\"review\", \"approval\"],\n * scopes: [\"agent:read\", \"agent:write\"],\n * allowDelegation: true,\n * },\n * ],\n * });\n *\n * // Access individual members\n * const researcher = crew.getMember(\"researcher\");\n * console.log(researcher.agentId); // agid_acme_...\n *\n * // Grant delegation permission to editor\n * // (done automatically if allowDelegation is true)\n * ```\n */\nexport async function registerCrew(\n vorim: VorimSDK,\n manifest: CrewManifest,\n): Promise<RegisteredCrew> {\n const members: RegisteredCrewMember[] = [];\n\n for (const member of manifest.members) {\n const scopes = [...member.scopes];\n\n // Auto-add delegate scope if delegation is allowed\n if (member.allowDelegation && !scopes.includes('agent:delegate')) {\n scopes.push('agent:delegate');\n }\n\n const registration = await vorim.register({\n name: member.name,\n description: member.description ?? `CrewAI ${member.role} — ${manifest.crewName}`,\n capabilities: member.capabilities,\n scopes,\n });\n\n members.push({\n role: member.role,\n agentId: registration.agent.agent_id,\n registration,\n privateKey: registration.private_key,\n });\n }\n\n return {\n crewName: manifest.crewName,\n members,\n getMember(role: string) {\n return members.find(m => m.role === role);\n },\n agentIds() {\n return members.map(m => m.agentId);\n },\n };\n}\n\n// ─── Task Audit ──────────────────────────────────────────────────────────\n\nexport interface CrewTaskEvent {\n /** The role of the crew member performing the task. */\n role: string;\n /** The Vorim agent_id (looked up from the crew). */\n agentId: string;\n /** Task description or name. */\n task: string;\n /** Tool used (if any). */\n tool?: string;\n /** Result of the action. */\n result: 'success' | 'denied' | 'error';\n /** Duration in milliseconds. */\n latencyMs?: number;\n /** Error details if result is 'error'. */\n error?: string;\n /** Whether this was a delegation to another crew member. */\n delegatedTo?: string;\n /** Additional context. */\n metadata?: Record<string, unknown>;\n}\n\n/**\n * Emits a Vorim audit event for a CrewAI task execution.\n * Call this from your orchestration layer after each CrewAI step completes.\n *\n * @example\n * ```ts\n * import { emitCrewTaskEvent } from \"@vorim/sdk/integrations/crewai\";\n *\n * // After a CrewAI task completes\n * await emitCrewTaskEvent(vorim, {\n * role: \"researcher\",\n * agentId: crew.getMember(\"researcher\").agentId,\n * task: \"research_competitors\",\n * tool: \"web_search\",\n * result: \"success\",\n * latencyMs: 3200,\n * });\n * ```\n */\nexport async function emitCrewTaskEvent(\n vorim: VorimSDK,\n event: CrewTaskEvent,\n): Promise<void> {\n const auditEvent: AuditEventInput = {\n agent_id: event.agentId,\n event_type: event.tool ? 'tool_call' : 'api_request',\n action: event.task,\n resource: event.tool,\n result: event.result,\n latency_ms: event.latencyMs,\n error_code: event.error ? 'CREW_TASK_ERROR' : undefined,\n metadata: {\n framework: 'crewai',\n role: event.role,\n ...(event.delegatedTo ? { delegated_to: event.delegatedTo } : {}),\n ...(event.error ? { error: event.error } : {}),\n ...event.metadata,\n },\n };\n\n await vorim.emit(auditEvent);\n}\n\n/**\n * Emits audit events for an entire crew run (batch of task results).\n *\n * @example\n * ```ts\n * await emitCrewRunEvents(vorim, [\n * { role: \"researcher\", agentId: \"...\", task: \"research\", result: \"success\" },\n * { role: \"writer\", agentId: \"...\", task: \"draft_article\", result: \"success\" },\n * { role: \"editor\", agentId: \"...\", task: \"review\", result: \"success\" },\n * ]);\n * ```\n */\nexport async function emitCrewRunEvents(\n vorim: VorimSDK,\n events: CrewTaskEvent[],\n): Promise<{ ingested: number }> {\n const auditEvents: AuditEventInput[] = events.map(event => ({\n agent_id: event.agentId,\n event_type: event.tool ? 'tool_call' : 'api_request',\n action: event.task,\n resource: event.tool,\n result: event.result,\n latency_ms: event.latencyMs,\n error_code: event.error ? 'CREW_TASK_ERROR' : undefined,\n metadata: {\n framework: 'crewai',\n role: event.role,\n ...(event.delegatedTo ? { delegated_to: event.delegatedTo } : {}),\n ...(event.error ? { error: event.error } : {}),\n ...event.metadata,\n },\n }));\n\n return vorim.emitBatch(auditEvents);\n}\n\n// ─── Permission Helpers ──────────────────────────────────────────────────\n\n/**\n * Check if a crew member has permission before executing a task.\n * Returns the check result — does not throw.\n *\n * @example\n * ```ts\n * const { allowed } = await checkCrewPermission(vorim, crew, \"writer\", \"agent:write\");\n * if (!allowed) {\n * console.log(\"Writer lacks write permission\");\n * }\n * ```\n */\nexport async function checkCrewPermission(\n vorim: VorimSDK,\n crew: RegisteredCrew,\n role: string,\n scope: PermissionScope,\n): Promise<{ allowed: boolean; reason?: string }> {\n const member = crew.getMember(role);\n if (!member) {\n return { allowed: false, reason: `Unknown crew member: ${role}` };\n }\n return vorim.check(member.agentId, scope);\n}\n\n/**\n * Check if delegation between two crew members is permitted.\n * The delegating agent must have the `agent:delegate` scope.\n */\nexport async function checkDelegationPermission(\n vorim: VorimSDK,\n crew: RegisteredCrew,\n fromRole: string,\n toRole: string,\n): Promise<{ allowed: boolean; reason?: string }> {\n const from = crew.getMember(fromRole);\n const to = crew.getMember(toRole);\n if (!from) return { allowed: false, reason: `Unknown crew member: ${fromRole}` };\n if (!to) return { allowed: false, reason: `Unknown crew member: ${toRole}` };\n\n const result = await vorim.check(from.agentId, 'agent:delegate');\n if (!result.allowed) {\n return { allowed: false, reason: `${fromRole} lacks agent:delegate permission` };\n }\n return { allowed: true };\n}\n\n// ─── Trust Verification ──────────────────────────────────────────────────\n\n/**\n * Verify trust scores for all members of a crew.\n * Useful before starting a crew run to ensure all agents are active and trusted.\n */\nexport async function verifyCrewTrust(\n vorim: VorimSDK,\n crew: RegisteredCrew,\n): Promise<{ role: string; agentId: string; trustScore: number; status: string }[]> {\n const results = await Promise.all(\n crew.members.map(async (member) => {\n const trust = await vorim.verify(member.agentId);\n return {\n role: member.role,\n agentId: member.agentId,\n trustScore: trust.trust_score,\n status: trust.status,\n };\n }),\n );\n return results;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA2GA,eAAsB,aACpB,OACA,UACyB;AACzB,QAAM,UAAkC,CAAC;AAEzC,aAAW,UAAU,SAAS,SAAS;AACrC,UAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAGhC,QAAI,OAAO,mBAAmB,CAAC,OAAO,SAAS,gBAAgB,GAAG;AAChE,aAAO,KAAK,gBAAgB;AAAA,IAC9B;AAEA,UAAM,eAAe,MAAM,MAAM,SAAS;AAAA,MACxC,MAAM,OAAO;AAAA,MACb,aAAa,OAAO,eAAe,UAAU,OAAO,IAAI,WAAM,SAAS,QAAQ;AAAA,MAC/E,cAAc,OAAO;AAAA,MACrB;AAAA,IACF,CAAC;AAED,YAAQ,KAAK;AAAA,MACX,MAAM,OAAO;AAAA,MACb,SAAS,aAAa,MAAM;AAAA,MAC5B;AAAA,MACA,YAAY,aAAa;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA,UAAU,MAAc;AACtB,aAAO,QAAQ,KAAK,OAAK,EAAE,SAAS,IAAI;AAAA,IAC1C;AAAA,IACA,WAAW;AACT,aAAO,QAAQ,IAAI,OAAK,EAAE,OAAO;AAAA,IACnC;AAAA,EACF;AACF;AA4CA,eAAsB,kBACpB,OACA,OACe;AACf,QAAM,aAA8B;AAAA,IAClC,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,OAAO,cAAc;AAAA,IACvC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM,QAAQ,oBAAoB;AAAA,IAC9C,UAAU;AAAA,MACR,WAAW;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,cAAc,EAAE,cAAc,MAAM,YAAY,IAAI,CAAC;AAAA,MAC/D,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAG,MAAM;AAAA,IACX;AAAA,EACF;AAEA,QAAM,MAAM,KAAK,UAAU;AAC7B;AAcA,eAAsB,kBACpB,OACA,QAC+B;AAC/B,QAAM,cAAiC,OAAO,IAAI,YAAU;AAAA,IAC1D,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,OAAO,cAAc;AAAA,IACvC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM,QAAQ,oBAAoB;AAAA,IAC9C,UAAU;AAAA,MACR,WAAW;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,cAAc,EAAE,cAAc,MAAM,YAAY,IAAI,CAAC;AAAA,MAC/D,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAG,MAAM;AAAA,IACX;AAAA,EACF,EAAE;AAEF,SAAO,MAAM,UAAU,WAAW;AACpC;AAgBA,eAAsB,oBACpB,OACA,MACA,MACA,OACgD;AAChD,QAAM,SAAS,KAAK,UAAU,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,IAAI,GAAG;AAAA,EAClE;AACA,SAAO,MAAM,MAAM,OAAO,SAAS,KAAK;AAC1C;AAMA,eAAsB,0BACpB,OACA,MACA,UACA,QACgD;AAChD,QAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,QAAM,KAAK,KAAK,UAAU,MAAM;AAChC,MAAI,CAAC,KAAM,QAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,QAAQ,GAAG;AAC/E,MAAI,CAAC,GAAI,QAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,MAAM,GAAG;AAE3E,QAAM,SAAS,MAAM,MAAM,MAAM,KAAK,SAAS,gBAAgB;AAC/D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,SAAS,OAAO,QAAQ,GAAG,QAAQ,mCAAmC;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAQA,eAAsB,gBACpB,OACA,MACkF;AAClF,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,KAAK,QAAQ,IAAI,OAAO,WAAW;AACjC,YAAM,QAAQ,MAAM,MAAM,OAAO,OAAO,OAAO;AAC/C,aAAO;AAAA,QACL,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,YAAY,MAAM;AAAA,QAClB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;","names":[]}
@@ -0,0 +1,174 @@
1
+ import { PermissionScope, AgentRegistrationResult, VorimSDK } from '../index.cjs';
2
+
3
+ interface CrewMemberConfig {
4
+ /** Unique role name within the crew (e.g. "researcher", "writer"). */
5
+ role: string;
6
+ /** Display name for the Vorim agent. */
7
+ name: string;
8
+ /** Description of this crew member's responsibilities. */
9
+ description?: string;
10
+ /** Tools this agent can use (e.g. ["web_search", "file_read"]). */
11
+ capabilities: string[];
12
+ /** Permission scopes to grant. */
13
+ scopes: PermissionScope[];
14
+ /** Whether this agent can delegate to other crew members. */
15
+ allowDelegation?: boolean;
16
+ }
17
+ interface CrewManifest {
18
+ /** Name for the overall crew. */
19
+ crewName: string;
20
+ /** Members of the crew. */
21
+ members: CrewMemberConfig[];
22
+ /** Optional metadata for the crew. */
23
+ metadata?: Record<string, unknown>;
24
+ }
25
+ interface RegisteredCrewMember {
26
+ role: string;
27
+ agentId: string;
28
+ registration: AgentRegistrationResult;
29
+ privateKey: string;
30
+ }
31
+ interface RegisteredCrew {
32
+ crewName: string;
33
+ members: RegisteredCrewMember[];
34
+ /** Lookup a member by role. */
35
+ getMember(role: string): RegisteredCrewMember | undefined;
36
+ /** Get all agent IDs in the crew. */
37
+ agentIds(): string[];
38
+ }
39
+ /**
40
+ * Registers an entire CrewAI crew with Vorim. Each crew member gets a
41
+ * unique Vorim agent identity with Ed25519 keypair and scoped permissions.
42
+ *
43
+ * @example
44
+ * ```ts
45
+ * import createVorim from "@vorim/sdk";
46
+ * import { registerCrew } from "@vorim/sdk/integrations/crewai";
47
+ *
48
+ * const vorim = createVorim({ apiKey: "agid_sk_live_..." });
49
+ *
50
+ * const crew = await registerCrew(vorim, {
51
+ * crewName: "content-pipeline",
52
+ * members: [
53
+ * {
54
+ * role: "researcher",
55
+ * name: "crew-researcher",
56
+ * capabilities: ["web_search", "summarization"],
57
+ * scopes: ["agent:read", "agent:execute"],
58
+ * },
59
+ * {
60
+ * role: "writer",
61
+ * name: "crew-writer",
62
+ * capabilities: ["file_write", "formatting"],
63
+ * scopes: ["agent:read", "agent:write"],
64
+ * },
65
+ * {
66
+ * role: "editor",
67
+ * name: "crew-editor",
68
+ * capabilities: ["review", "approval"],
69
+ * scopes: ["agent:read", "agent:write"],
70
+ * allowDelegation: true,
71
+ * },
72
+ * ],
73
+ * });
74
+ *
75
+ * // Access individual members
76
+ * const researcher = crew.getMember("researcher");
77
+ * console.log(researcher.agentId); // agid_acme_...
78
+ *
79
+ * // Grant delegation permission to editor
80
+ * // (done automatically if allowDelegation is true)
81
+ * ```
82
+ */
83
+ declare function registerCrew(vorim: VorimSDK, manifest: CrewManifest): Promise<RegisteredCrew>;
84
+ interface CrewTaskEvent {
85
+ /** The role of the crew member performing the task. */
86
+ role: string;
87
+ /** The Vorim agent_id (looked up from the crew). */
88
+ agentId: string;
89
+ /** Task description or name. */
90
+ task: string;
91
+ /** Tool used (if any). */
92
+ tool?: string;
93
+ /** Result of the action. */
94
+ result: 'success' | 'denied' | 'error';
95
+ /** Duration in milliseconds. */
96
+ latencyMs?: number;
97
+ /** Error details if result is 'error'. */
98
+ error?: string;
99
+ /** Whether this was a delegation to another crew member. */
100
+ delegatedTo?: string;
101
+ /** Additional context. */
102
+ metadata?: Record<string, unknown>;
103
+ }
104
+ /**
105
+ * Emits a Vorim audit event for a CrewAI task execution.
106
+ * Call this from your orchestration layer after each CrewAI step completes.
107
+ *
108
+ * @example
109
+ * ```ts
110
+ * import { emitCrewTaskEvent } from "@vorim/sdk/integrations/crewai";
111
+ *
112
+ * // After a CrewAI task completes
113
+ * await emitCrewTaskEvent(vorim, {
114
+ * role: "researcher",
115
+ * agentId: crew.getMember("researcher").agentId,
116
+ * task: "research_competitors",
117
+ * tool: "web_search",
118
+ * result: "success",
119
+ * latencyMs: 3200,
120
+ * });
121
+ * ```
122
+ */
123
+ declare function emitCrewTaskEvent(vorim: VorimSDK, event: CrewTaskEvent): Promise<void>;
124
+ /**
125
+ * Emits audit events for an entire crew run (batch of task results).
126
+ *
127
+ * @example
128
+ * ```ts
129
+ * await emitCrewRunEvents(vorim, [
130
+ * { role: "researcher", agentId: "...", task: "research", result: "success" },
131
+ * { role: "writer", agentId: "...", task: "draft_article", result: "success" },
132
+ * { role: "editor", agentId: "...", task: "review", result: "success" },
133
+ * ]);
134
+ * ```
135
+ */
136
+ declare function emitCrewRunEvents(vorim: VorimSDK, events: CrewTaskEvent[]): Promise<{
137
+ ingested: number;
138
+ }>;
139
+ /**
140
+ * Check if a crew member has permission before executing a task.
141
+ * Returns the check result — does not throw.
142
+ *
143
+ * @example
144
+ * ```ts
145
+ * const { allowed } = await checkCrewPermission(vorim, crew, "writer", "agent:write");
146
+ * if (!allowed) {
147
+ * console.log("Writer lacks write permission");
148
+ * }
149
+ * ```
150
+ */
151
+ declare function checkCrewPermission(vorim: VorimSDK, crew: RegisteredCrew, role: string, scope: PermissionScope): Promise<{
152
+ allowed: boolean;
153
+ reason?: string;
154
+ }>;
155
+ /**
156
+ * Check if delegation between two crew members is permitted.
157
+ * The delegating agent must have the `agent:delegate` scope.
158
+ */
159
+ declare function checkDelegationPermission(vorim: VorimSDK, crew: RegisteredCrew, fromRole: string, toRole: string): Promise<{
160
+ allowed: boolean;
161
+ reason?: string;
162
+ }>;
163
+ /**
164
+ * Verify trust scores for all members of a crew.
165
+ * Useful before starting a crew run to ensure all agents are active and trusted.
166
+ */
167
+ declare function verifyCrewTrust(vorim: VorimSDK, crew: RegisteredCrew): Promise<{
168
+ role: string;
169
+ agentId: string;
170
+ trustScore: number;
171
+ status: string;
172
+ }[]>;
173
+
174
+ export { type CrewManifest, type CrewMemberConfig, type CrewTaskEvent, type RegisteredCrew, type RegisteredCrewMember, checkCrewPermission, checkDelegationPermission, emitCrewRunEvents, emitCrewTaskEvent, registerCrew, verifyCrewTrust };
@@ -0,0 +1,174 @@
1
+ import { PermissionScope, AgentRegistrationResult, VorimSDK } from '../index.js';
2
+
3
+ interface CrewMemberConfig {
4
+ /** Unique role name within the crew (e.g. "researcher", "writer"). */
5
+ role: string;
6
+ /** Display name for the Vorim agent. */
7
+ name: string;
8
+ /** Description of this crew member's responsibilities. */
9
+ description?: string;
10
+ /** Tools this agent can use (e.g. ["web_search", "file_read"]). */
11
+ capabilities: string[];
12
+ /** Permission scopes to grant. */
13
+ scopes: PermissionScope[];
14
+ /** Whether this agent can delegate to other crew members. */
15
+ allowDelegation?: boolean;
16
+ }
17
+ interface CrewManifest {
18
+ /** Name for the overall crew. */
19
+ crewName: string;
20
+ /** Members of the crew. */
21
+ members: CrewMemberConfig[];
22
+ /** Optional metadata for the crew. */
23
+ metadata?: Record<string, unknown>;
24
+ }
25
+ interface RegisteredCrewMember {
26
+ role: string;
27
+ agentId: string;
28
+ registration: AgentRegistrationResult;
29
+ privateKey: string;
30
+ }
31
+ interface RegisteredCrew {
32
+ crewName: string;
33
+ members: RegisteredCrewMember[];
34
+ /** Lookup a member by role. */
35
+ getMember(role: string): RegisteredCrewMember | undefined;
36
+ /** Get all agent IDs in the crew. */
37
+ agentIds(): string[];
38
+ }
39
+ /**
40
+ * Registers an entire CrewAI crew with Vorim. Each crew member gets a
41
+ * unique Vorim agent identity with Ed25519 keypair and scoped permissions.
42
+ *
43
+ * @example
44
+ * ```ts
45
+ * import createVorim from "@vorim/sdk";
46
+ * import { registerCrew } from "@vorim/sdk/integrations/crewai";
47
+ *
48
+ * const vorim = createVorim({ apiKey: "agid_sk_live_..." });
49
+ *
50
+ * const crew = await registerCrew(vorim, {
51
+ * crewName: "content-pipeline",
52
+ * members: [
53
+ * {
54
+ * role: "researcher",
55
+ * name: "crew-researcher",
56
+ * capabilities: ["web_search", "summarization"],
57
+ * scopes: ["agent:read", "agent:execute"],
58
+ * },
59
+ * {
60
+ * role: "writer",
61
+ * name: "crew-writer",
62
+ * capabilities: ["file_write", "formatting"],
63
+ * scopes: ["agent:read", "agent:write"],
64
+ * },
65
+ * {
66
+ * role: "editor",
67
+ * name: "crew-editor",
68
+ * capabilities: ["review", "approval"],
69
+ * scopes: ["agent:read", "agent:write"],
70
+ * allowDelegation: true,
71
+ * },
72
+ * ],
73
+ * });
74
+ *
75
+ * // Access individual members
76
+ * const researcher = crew.getMember("researcher");
77
+ * console.log(researcher.agentId); // agid_acme_...
78
+ *
79
+ * // Grant delegation permission to editor
80
+ * // (done automatically if allowDelegation is true)
81
+ * ```
82
+ */
83
+ declare function registerCrew(vorim: VorimSDK, manifest: CrewManifest): Promise<RegisteredCrew>;
84
+ interface CrewTaskEvent {
85
+ /** The role of the crew member performing the task. */
86
+ role: string;
87
+ /** The Vorim agent_id (looked up from the crew). */
88
+ agentId: string;
89
+ /** Task description or name. */
90
+ task: string;
91
+ /** Tool used (if any). */
92
+ tool?: string;
93
+ /** Result of the action. */
94
+ result: 'success' | 'denied' | 'error';
95
+ /** Duration in milliseconds. */
96
+ latencyMs?: number;
97
+ /** Error details if result is 'error'. */
98
+ error?: string;
99
+ /** Whether this was a delegation to another crew member. */
100
+ delegatedTo?: string;
101
+ /** Additional context. */
102
+ metadata?: Record<string, unknown>;
103
+ }
104
+ /**
105
+ * Emits a Vorim audit event for a CrewAI task execution.
106
+ * Call this from your orchestration layer after each CrewAI step completes.
107
+ *
108
+ * @example
109
+ * ```ts
110
+ * import { emitCrewTaskEvent } from "@vorim/sdk/integrations/crewai";
111
+ *
112
+ * // After a CrewAI task completes
113
+ * await emitCrewTaskEvent(vorim, {
114
+ * role: "researcher",
115
+ * agentId: crew.getMember("researcher").agentId,
116
+ * task: "research_competitors",
117
+ * tool: "web_search",
118
+ * result: "success",
119
+ * latencyMs: 3200,
120
+ * });
121
+ * ```
122
+ */
123
+ declare function emitCrewTaskEvent(vorim: VorimSDK, event: CrewTaskEvent): Promise<void>;
124
+ /**
125
+ * Emits audit events for an entire crew run (batch of task results).
126
+ *
127
+ * @example
128
+ * ```ts
129
+ * await emitCrewRunEvents(vorim, [
130
+ * { role: "researcher", agentId: "...", task: "research", result: "success" },
131
+ * { role: "writer", agentId: "...", task: "draft_article", result: "success" },
132
+ * { role: "editor", agentId: "...", task: "review", result: "success" },
133
+ * ]);
134
+ * ```
135
+ */
136
+ declare function emitCrewRunEvents(vorim: VorimSDK, events: CrewTaskEvent[]): Promise<{
137
+ ingested: number;
138
+ }>;
139
+ /**
140
+ * Check if a crew member has permission before executing a task.
141
+ * Returns the check result — does not throw.
142
+ *
143
+ * @example
144
+ * ```ts
145
+ * const { allowed } = await checkCrewPermission(vorim, crew, "writer", "agent:write");
146
+ * if (!allowed) {
147
+ * console.log("Writer lacks write permission");
148
+ * }
149
+ * ```
150
+ */
151
+ declare function checkCrewPermission(vorim: VorimSDK, crew: RegisteredCrew, role: string, scope: PermissionScope): Promise<{
152
+ allowed: boolean;
153
+ reason?: string;
154
+ }>;
155
+ /**
156
+ * Check if delegation between two crew members is permitted.
157
+ * The delegating agent must have the `agent:delegate` scope.
158
+ */
159
+ declare function checkDelegationPermission(vorim: VorimSDK, crew: RegisteredCrew, fromRole: string, toRole: string): Promise<{
160
+ allowed: boolean;
161
+ reason?: string;
162
+ }>;
163
+ /**
164
+ * Verify trust scores for all members of a crew.
165
+ * Useful before starting a crew run to ensure all agents are active and trusted.
166
+ */
167
+ declare function verifyCrewTrust(vorim: VorimSDK, crew: RegisteredCrew): Promise<{
168
+ role: string;
169
+ agentId: string;
170
+ trustScore: number;
171
+ status: string;
172
+ }[]>;
173
+
174
+ export { type CrewManifest, type CrewMemberConfig, type CrewTaskEvent, type RegisteredCrew, type RegisteredCrewMember, checkCrewPermission, checkDelegationPermission, emitCrewRunEvents, emitCrewTaskEvent, registerCrew, verifyCrewTrust };
@@ -0,0 +1,111 @@
1
+ // src/integrations/crewai.ts
2
+ async function registerCrew(vorim, manifest) {
3
+ const members = [];
4
+ for (const member of manifest.members) {
5
+ const scopes = [...member.scopes];
6
+ if (member.allowDelegation && !scopes.includes("agent:delegate")) {
7
+ scopes.push("agent:delegate");
8
+ }
9
+ const registration = await vorim.register({
10
+ name: member.name,
11
+ description: member.description ?? `CrewAI ${member.role} \u2014 ${manifest.crewName}`,
12
+ capabilities: member.capabilities,
13
+ scopes
14
+ });
15
+ members.push({
16
+ role: member.role,
17
+ agentId: registration.agent.agent_id,
18
+ registration,
19
+ privateKey: registration.private_key
20
+ });
21
+ }
22
+ return {
23
+ crewName: manifest.crewName,
24
+ members,
25
+ getMember(role) {
26
+ return members.find((m) => m.role === role);
27
+ },
28
+ agentIds() {
29
+ return members.map((m) => m.agentId);
30
+ }
31
+ };
32
+ }
33
+ async function emitCrewTaskEvent(vorim, event) {
34
+ const auditEvent = {
35
+ agent_id: event.agentId,
36
+ event_type: event.tool ? "tool_call" : "api_request",
37
+ action: event.task,
38
+ resource: event.tool,
39
+ result: event.result,
40
+ latency_ms: event.latencyMs,
41
+ error_code: event.error ? "CREW_TASK_ERROR" : void 0,
42
+ metadata: {
43
+ framework: "crewai",
44
+ role: event.role,
45
+ ...event.delegatedTo ? { delegated_to: event.delegatedTo } : {},
46
+ ...event.error ? { error: event.error } : {},
47
+ ...event.metadata
48
+ }
49
+ };
50
+ await vorim.emit(auditEvent);
51
+ }
52
+ async function emitCrewRunEvents(vorim, events) {
53
+ const auditEvents = events.map((event) => ({
54
+ agent_id: event.agentId,
55
+ event_type: event.tool ? "tool_call" : "api_request",
56
+ action: event.task,
57
+ resource: event.tool,
58
+ result: event.result,
59
+ latency_ms: event.latencyMs,
60
+ error_code: event.error ? "CREW_TASK_ERROR" : void 0,
61
+ metadata: {
62
+ framework: "crewai",
63
+ role: event.role,
64
+ ...event.delegatedTo ? { delegated_to: event.delegatedTo } : {},
65
+ ...event.error ? { error: event.error } : {},
66
+ ...event.metadata
67
+ }
68
+ }));
69
+ return vorim.emitBatch(auditEvents);
70
+ }
71
+ async function checkCrewPermission(vorim, crew, role, scope) {
72
+ const member = crew.getMember(role);
73
+ if (!member) {
74
+ return { allowed: false, reason: `Unknown crew member: ${role}` };
75
+ }
76
+ return vorim.check(member.agentId, scope);
77
+ }
78
+ async function checkDelegationPermission(vorim, crew, fromRole, toRole) {
79
+ const from = crew.getMember(fromRole);
80
+ const to = crew.getMember(toRole);
81
+ if (!from) return { allowed: false, reason: `Unknown crew member: ${fromRole}` };
82
+ if (!to) return { allowed: false, reason: `Unknown crew member: ${toRole}` };
83
+ const result = await vorim.check(from.agentId, "agent:delegate");
84
+ if (!result.allowed) {
85
+ return { allowed: false, reason: `${fromRole} lacks agent:delegate permission` };
86
+ }
87
+ return { allowed: true };
88
+ }
89
+ async function verifyCrewTrust(vorim, crew) {
90
+ const results = await Promise.all(
91
+ crew.members.map(async (member) => {
92
+ const trust = await vorim.verify(member.agentId);
93
+ return {
94
+ role: member.role,
95
+ agentId: member.agentId,
96
+ trustScore: trust.trust_score,
97
+ status: trust.status
98
+ };
99
+ })
100
+ );
101
+ return results;
102
+ }
103
+ export {
104
+ checkCrewPermission,
105
+ checkDelegationPermission,
106
+ emitCrewRunEvents,
107
+ emitCrewTaskEvent,
108
+ registerCrew,
109
+ verifyCrewTrust
110
+ };
111
+ //# sourceMappingURL=crewai.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/integrations/crewai.ts"],"sourcesContent":["// ============================================================================\n// VORIM SDK — CrewAI Integration\n// CrewAI is Python-only, so this module provides:\n// 1. A TypeScript helper for managing CrewAI agent identities via Vorim\n// 2. Audit utilities for logging crew task execution\n// 3. A \"crew manifest\" pattern for registering entire crews at once\n//\n// Use this from a TypeScript orchestration layer that triggers CrewAI\n// runs via REST, CLI, or subprocess. For native Python integration,\n// use the Vorim REST API directly (see docs).\n//\n// No peer dependencies required — uses @vorim/sdk only.\n// ============================================================================\n\nimport type { VorimSDK } from '../index.js';\nimport type {\n PermissionScope, AuditEventInput, AgentRegistrationResult,\n} from '../types.js';\n\n// ─── Crew Configuration ──────────────────────────────────────────────────\n\nexport interface CrewMemberConfig {\n /** Unique role name within the crew (e.g. \"researcher\", \"writer\"). */\n role: string;\n /** Display name for the Vorim agent. */\n name: string;\n /** Description of this crew member's responsibilities. */\n description?: string;\n /** Tools this agent can use (e.g. [\"web_search\", \"file_read\"]). */\n capabilities: string[];\n /** Permission scopes to grant. */\n scopes: PermissionScope[];\n /** Whether this agent can delegate to other crew members. */\n allowDelegation?: boolean;\n}\n\nexport interface CrewManifest {\n /** Name for the overall crew. */\n crewName: string;\n /** Members of the crew. */\n members: CrewMemberConfig[];\n /** Optional metadata for the crew. */\n metadata?: Record<string, unknown>;\n}\n\nexport interface RegisteredCrewMember {\n role: string;\n agentId: string;\n registration: AgentRegistrationResult;\n privateKey: string;\n}\n\nexport interface RegisteredCrew {\n crewName: string;\n members: RegisteredCrewMember[];\n /** Lookup a member by role. */\n getMember(role: string): RegisteredCrewMember | undefined;\n /** Get all agent IDs in the crew. */\n agentIds(): string[];\n}\n\n// ─── Crew Registration ──────────────────────────────────────────────────\n\n/**\n * Registers an entire CrewAI crew with Vorim. Each crew member gets a\n * unique Vorim agent identity with Ed25519 keypair and scoped permissions.\n *\n * @example\n * ```ts\n * import createVorim from \"@vorim/sdk\";\n * import { registerCrew } from \"@vorim/sdk/integrations/crewai\";\n *\n * const vorim = createVorim({ apiKey: \"agid_sk_live_...\" });\n *\n * const crew = await registerCrew(vorim, {\n * crewName: \"content-pipeline\",\n * members: [\n * {\n * role: \"researcher\",\n * name: \"crew-researcher\",\n * capabilities: [\"web_search\", \"summarization\"],\n * scopes: [\"agent:read\", \"agent:execute\"],\n * },\n * {\n * role: \"writer\",\n * name: \"crew-writer\",\n * capabilities: [\"file_write\", \"formatting\"],\n * scopes: [\"agent:read\", \"agent:write\"],\n * },\n * {\n * role: \"editor\",\n * name: \"crew-editor\",\n * capabilities: [\"review\", \"approval\"],\n * scopes: [\"agent:read\", \"agent:write\"],\n * allowDelegation: true,\n * },\n * ],\n * });\n *\n * // Access individual members\n * const researcher = crew.getMember(\"researcher\");\n * console.log(researcher.agentId); // agid_acme_...\n *\n * // Grant delegation permission to editor\n * // (done automatically if allowDelegation is true)\n * ```\n */\nexport async function registerCrew(\n vorim: VorimSDK,\n manifest: CrewManifest,\n): Promise<RegisteredCrew> {\n const members: RegisteredCrewMember[] = [];\n\n for (const member of manifest.members) {\n const scopes = [...member.scopes];\n\n // Auto-add delegate scope if delegation is allowed\n if (member.allowDelegation && !scopes.includes('agent:delegate')) {\n scopes.push('agent:delegate');\n }\n\n const registration = await vorim.register({\n name: member.name,\n description: member.description ?? `CrewAI ${member.role} — ${manifest.crewName}`,\n capabilities: member.capabilities,\n scopes,\n });\n\n members.push({\n role: member.role,\n agentId: registration.agent.agent_id,\n registration,\n privateKey: registration.private_key,\n });\n }\n\n return {\n crewName: manifest.crewName,\n members,\n getMember(role: string) {\n return members.find(m => m.role === role);\n },\n agentIds() {\n return members.map(m => m.agentId);\n },\n };\n}\n\n// ─── Task Audit ──────────────────────────────────────────────────────────\n\nexport interface CrewTaskEvent {\n /** The role of the crew member performing the task. */\n role: string;\n /** The Vorim agent_id (looked up from the crew). */\n agentId: string;\n /** Task description or name. */\n task: string;\n /** Tool used (if any). */\n tool?: string;\n /** Result of the action. */\n result: 'success' | 'denied' | 'error';\n /** Duration in milliseconds. */\n latencyMs?: number;\n /** Error details if result is 'error'. */\n error?: string;\n /** Whether this was a delegation to another crew member. */\n delegatedTo?: string;\n /** Additional context. */\n metadata?: Record<string, unknown>;\n}\n\n/**\n * Emits a Vorim audit event for a CrewAI task execution.\n * Call this from your orchestration layer after each CrewAI step completes.\n *\n * @example\n * ```ts\n * import { emitCrewTaskEvent } from \"@vorim/sdk/integrations/crewai\";\n *\n * // After a CrewAI task completes\n * await emitCrewTaskEvent(vorim, {\n * role: \"researcher\",\n * agentId: crew.getMember(\"researcher\").agentId,\n * task: \"research_competitors\",\n * tool: \"web_search\",\n * result: \"success\",\n * latencyMs: 3200,\n * });\n * ```\n */\nexport async function emitCrewTaskEvent(\n vorim: VorimSDK,\n event: CrewTaskEvent,\n): Promise<void> {\n const auditEvent: AuditEventInput = {\n agent_id: event.agentId,\n event_type: event.tool ? 'tool_call' : 'api_request',\n action: event.task,\n resource: event.tool,\n result: event.result,\n latency_ms: event.latencyMs,\n error_code: event.error ? 'CREW_TASK_ERROR' : undefined,\n metadata: {\n framework: 'crewai',\n role: event.role,\n ...(event.delegatedTo ? { delegated_to: event.delegatedTo } : {}),\n ...(event.error ? { error: event.error } : {}),\n ...event.metadata,\n },\n };\n\n await vorim.emit(auditEvent);\n}\n\n/**\n * Emits audit events for an entire crew run (batch of task results).\n *\n * @example\n * ```ts\n * await emitCrewRunEvents(vorim, [\n * { role: \"researcher\", agentId: \"...\", task: \"research\", result: \"success\" },\n * { role: \"writer\", agentId: \"...\", task: \"draft_article\", result: \"success\" },\n * { role: \"editor\", agentId: \"...\", task: \"review\", result: \"success\" },\n * ]);\n * ```\n */\nexport async function emitCrewRunEvents(\n vorim: VorimSDK,\n events: CrewTaskEvent[],\n): Promise<{ ingested: number }> {\n const auditEvents: AuditEventInput[] = events.map(event => ({\n agent_id: event.agentId,\n event_type: event.tool ? 'tool_call' : 'api_request',\n action: event.task,\n resource: event.tool,\n result: event.result,\n latency_ms: event.latencyMs,\n error_code: event.error ? 'CREW_TASK_ERROR' : undefined,\n metadata: {\n framework: 'crewai',\n role: event.role,\n ...(event.delegatedTo ? { delegated_to: event.delegatedTo } : {}),\n ...(event.error ? { error: event.error } : {}),\n ...event.metadata,\n },\n }));\n\n return vorim.emitBatch(auditEvents);\n}\n\n// ─── Permission Helpers ──────────────────────────────────────────────────\n\n/**\n * Check if a crew member has permission before executing a task.\n * Returns the check result — does not throw.\n *\n * @example\n * ```ts\n * const { allowed } = await checkCrewPermission(vorim, crew, \"writer\", \"agent:write\");\n * if (!allowed) {\n * console.log(\"Writer lacks write permission\");\n * }\n * ```\n */\nexport async function checkCrewPermission(\n vorim: VorimSDK,\n crew: RegisteredCrew,\n role: string,\n scope: PermissionScope,\n): Promise<{ allowed: boolean; reason?: string }> {\n const member = crew.getMember(role);\n if (!member) {\n return { allowed: false, reason: `Unknown crew member: ${role}` };\n }\n return vorim.check(member.agentId, scope);\n}\n\n/**\n * Check if delegation between two crew members is permitted.\n * The delegating agent must have the `agent:delegate` scope.\n */\nexport async function checkDelegationPermission(\n vorim: VorimSDK,\n crew: RegisteredCrew,\n fromRole: string,\n toRole: string,\n): Promise<{ allowed: boolean; reason?: string }> {\n const from = crew.getMember(fromRole);\n const to = crew.getMember(toRole);\n if (!from) return { allowed: false, reason: `Unknown crew member: ${fromRole}` };\n if (!to) return { allowed: false, reason: `Unknown crew member: ${toRole}` };\n\n const result = await vorim.check(from.agentId, 'agent:delegate');\n if (!result.allowed) {\n return { allowed: false, reason: `${fromRole} lacks agent:delegate permission` };\n }\n return { allowed: true };\n}\n\n// ─── Trust Verification ──────────────────────────────────────────────────\n\n/**\n * Verify trust scores for all members of a crew.\n * Useful before starting a crew run to ensure all agents are active and trusted.\n */\nexport async function verifyCrewTrust(\n vorim: VorimSDK,\n crew: RegisteredCrew,\n): Promise<{ role: string; agentId: string; trustScore: number; status: string }[]> {\n const results = await Promise.all(\n crew.members.map(async (member) => {\n const trust = await vorim.verify(member.agentId);\n return {\n role: member.role,\n agentId: member.agentId,\n trustScore: trust.trust_score,\n status: trust.status,\n };\n }),\n );\n return results;\n}\n"],"mappings":";AA2GA,eAAsB,aACpB,OACA,UACyB;AACzB,QAAM,UAAkC,CAAC;AAEzC,aAAW,UAAU,SAAS,SAAS;AACrC,UAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAGhC,QAAI,OAAO,mBAAmB,CAAC,OAAO,SAAS,gBAAgB,GAAG;AAChE,aAAO,KAAK,gBAAgB;AAAA,IAC9B;AAEA,UAAM,eAAe,MAAM,MAAM,SAAS;AAAA,MACxC,MAAM,OAAO;AAAA,MACb,aAAa,OAAO,eAAe,UAAU,OAAO,IAAI,WAAM,SAAS,QAAQ;AAAA,MAC/E,cAAc,OAAO;AAAA,MACrB;AAAA,IACF,CAAC;AAED,YAAQ,KAAK;AAAA,MACX,MAAM,OAAO;AAAA,MACb,SAAS,aAAa,MAAM;AAAA,MAC5B;AAAA,MACA,YAAY,aAAa;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA,UAAU,MAAc;AACtB,aAAO,QAAQ,KAAK,OAAK,EAAE,SAAS,IAAI;AAAA,IAC1C;AAAA,IACA,WAAW;AACT,aAAO,QAAQ,IAAI,OAAK,EAAE,OAAO;AAAA,IACnC;AAAA,EACF;AACF;AA4CA,eAAsB,kBACpB,OACA,OACe;AACf,QAAM,aAA8B;AAAA,IAClC,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,OAAO,cAAc;AAAA,IACvC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM,QAAQ,oBAAoB;AAAA,IAC9C,UAAU;AAAA,MACR,WAAW;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,cAAc,EAAE,cAAc,MAAM,YAAY,IAAI,CAAC;AAAA,MAC/D,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAG,MAAM;AAAA,IACX;AAAA,EACF;AAEA,QAAM,MAAM,KAAK,UAAU;AAC7B;AAcA,eAAsB,kBACpB,OACA,QAC+B;AAC/B,QAAM,cAAiC,OAAO,IAAI,YAAU;AAAA,IAC1D,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,OAAO,cAAc;AAAA,IACvC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM,QAAQ,oBAAoB;AAAA,IAC9C,UAAU;AAAA,MACR,WAAW;AAAA,MACX,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,cAAc,EAAE,cAAc,MAAM,YAAY,IAAI,CAAC;AAAA,MAC/D,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAG,MAAM;AAAA,IACX;AAAA,EACF,EAAE;AAEF,SAAO,MAAM,UAAU,WAAW;AACpC;AAgBA,eAAsB,oBACpB,OACA,MACA,MACA,OACgD;AAChD,QAAM,SAAS,KAAK,UAAU,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,IAAI,GAAG;AAAA,EAClE;AACA,SAAO,MAAM,MAAM,OAAO,SAAS,KAAK;AAC1C;AAMA,eAAsB,0BACpB,OACA,MACA,UACA,QACgD;AAChD,QAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,QAAM,KAAK,KAAK,UAAU,MAAM;AAChC,MAAI,CAAC,KAAM,QAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,QAAQ,GAAG;AAC/E,MAAI,CAAC,GAAI,QAAO,EAAE,SAAS,OAAO,QAAQ,wBAAwB,MAAM,GAAG;AAE3E,QAAM,SAAS,MAAM,MAAM,MAAM,KAAK,SAAS,gBAAgB;AAC/D,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,SAAS,OAAO,QAAQ,GAAG,QAAQ,mCAAmC;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAQA,eAAsB,gBACpB,OACA,MACkF;AAClF,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,KAAK,QAAQ,IAAI,OAAO,WAAW;AACjC,YAAM,QAAQ,MAAM,MAAM,OAAO,OAAO,OAAO;AAC/C,aAAO;AAAA,QACL,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,YAAY,MAAM;AAAA,QAClB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;","names":[]}