@waratahlabs/canopy 0.5.0

package/dist/adapters/langfuse.js

@@ -0,0 +1,192 @@
+import * as fs from "node:fs";
+import yaml from "js-yaml";
+function normalizeLimit(limit) {
+    if (!limit || limit < 1)
+        return 50;
+    return Math.floor(limit);
+}
+function parseRegexPattern(pattern) {
+    const match = /^\/(.+)\/([a-z]*)$/.exec(pattern);
+    if (!match)
+        return pattern;
+    return new RegExp(match[1], match[2]);
+}
+function matchOverlay(traceName, overlays) {
+    return overlays.find(({ agentNamePattern }) => {
+        if (typeof agentNamePattern === "string") {
+            return traceName === agentNamePattern || traceName.includes(agentNamePattern);
+        }
+        return agentNamePattern.test(traceName);
+    });
+}
+function responseSnippet(body) {
+    return body.replace(/\s+/g, " ").trim().slice(0, 300);
+}
+async function fetchTracePage(config, page, limit) {
+    const url = new URL("/api/public/traces", config.host.endsWith("/") ? config.host : `${config.host}/`);
+    url.searchParams.set("limit", String(limit));
+    url.searchParams.set("page", String(page));
+    if (config.fromDate) {
+        url.searchParams.set("fromTimestamp", config.fromDate);
+    }
+    const credentials = Buffer.from(`${config.publicKey}:${config.secretKey}`).toString("base64");
+    const res = await fetch(url, {
+        headers: {
+            Authorization: `Basic ${credentials}`,
+        },
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Langfuse traces request failed with ${res.status} ${res.statusText}: ${responseSnippet(body)}`);
+    }
+    const payload = (await res.json());
+    if (!payload ||
+        typeof payload !== "object" ||
+        !Array.isArray(payload.data)) {
+        throw new Error(`Langfuse traces response missing data array: ${responseSnippet(JSON.stringify(payload))}`);
+    }
+    return payload;
+}
+function findFirstModel(traces) {
+    for (const trace of traces) {
+        for (const observation of trace.observations ?? []) {
+            if (observation.type === "GENERATION" && observation.model) {
+                return observation.model;
+            }
+        }
+    }
+    return "unknown";
+}
+function buildAgentDefinition(group) {
+    const { id, name, overlay, traces, } = group;
+    const agent = {
+        id,
+        name,
+        model: findFirstModel(traces),
+        systemPrompt: overlay.systemPrompt,
+        tools: overlay.tools,
+        permissions: overlay.permissions,
+        deploymentContext: overlay.deploymentContext,
+        modelComplexity: overlay.modelComplexity,
+        mitigationMultiplier: overlay.mitigationMultiplier,
+        finetuned: overlay.finetuned,
+        dependencies: overlay.dependencies,
+        secretManagement: overlay.secretManagement,
+        deployment: overlay.deployment,
+    };
+    if (overlay.dataSources) {
+        agent.dataSources = overlay.dataSources;
+    }
+    if (overlay.autonomyLevel) {
+        agent.autonomyLevel = overlay.autonomyLevel;
+    }
+    return agent;
+}
+function traceMetadataValue(metadata, key) {
+    const value = metadata?.[key];
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function resolveHandoff(fromName, toName, agentsByName) {
+    const fromAgent = agentsByName.get(fromName);
+    const toAgent = agentsByName.get(toName);
+    if (!fromAgent || !toAgent) {
+        console.warn(`Skipping handoff ${fromName} -> ${toName}: agent name not found in grouped overlays`);
+        return undefined;
+    }
+    return {
+        fromAgentId: fromAgent.id,
+        toAgentId: toAgent.id,
+        fromAgentName: fromAgent.name,
+        toAgentName: toAgent.name,
+    };
+}
+function buildHandoffs(groups, agents) {
+    const agentsByName = new Map(agents.map((agent) => [agent.name, agent]));
+    const handoffs = [];
+    const seen = new Set();
+    for (const group of groups) {
+        for (const trace of group.traces) {
+            const handoffTo = traceMetadataValue(trace.metadata, "handoff_to");
+            const calledBy = traceMetadataValue(trace.metadata, "calledBy");
+            const candidates = [
+                handoffTo ? resolveHandoff(group.name, handoffTo, agentsByName) : undefined,
+                calledBy ? resolveHandoff(calledBy, group.name, agentsByName) : undefined,
+            ];
+            for (const candidate of candidates) {
+                if (!candidate)
+                    continue;
+                const key = `${candidate.fromAgentId}->${candidate.toAgentId}`;
+                if (seen.has(key))
+                    continue;
+                seen.add(key);
+                handoffs.push(candidate);
+            }
+        }
+    }
+    return handoffs;
+}
+export async function parseLangfuseTraces(config, overlays) {
+    const limit = normalizeLimit(config.limit);
+    const maxPages = Math.max(1, limit);
+    const traces = [];
+    for (let page = 1; page <= maxPages && traces.length < limit; page += 1) {
+        const response = await fetchTracePage(config, page, limit);
+        if (response.data.length === 0)
+            break;
+        traces.push(...response.data);
+    }
+    const groupsByName = new Map();
+    const warnedUnmatchedNames = new Set();
+    for (const trace of traces.slice(0, limit)) {
+        const overlay = matchOverlay(trace.name, overlays);
+        if (!overlay) {
+            if (!warnedUnmatchedNames.has(trace.name)) {
+                warnedUnmatchedNames.add(trace.name);
+                console.warn(`Skipping Langfuse trace "${trace.name}": no matching overlay`);
+            }
+            continue;
+        }
+        const existing = groupsByName.get(trace.name);
+        if (existing) {
+            existing.traces.push(trace);
+            continue;
+        }
+        groupsByName.set(trace.name, {
+            id: trace.id,
+            name: trace.name,
+            overlay,
+            traces: [trace],
+        });
+    }
+    const groups = Array.from(groupsByName.values());
+    const agents = groups.map(buildAgentDefinition);
+    const handoffs = buildHandoffs(groups, agents);
+    return {
+        agents,
+        handoffs,
+        workflowName: config.projectId
+            ? `Langfuse Assessment - ${config.projectId}`
+            : "Langfuse Assessment",
+    };
+}
+export function loadOverlaysFromYaml(filePath) {
+    const text = fs.readFileSync(filePath, "utf8");
+    const parsed = yaml.load(text);
+    if (!Array.isArray(parsed)) {
+        throw new Error(`Overlay YAML at ${filePath} must contain an array`);
+    }
+    return parsed.map((entry, index) => {
+        if (!entry || typeof entry !== "object") {
+            throw new Error(`Overlay at index ${index} in ${filePath} must be an object`);
+        }
+        const overlay = entry;
+        if (typeof overlay.agentNamePattern !== "string") {
+            throw new Error(`Overlay at index ${index} in ${filePath} must define agentNamePattern`);
+        }
+        return {
+            ...overlay,
+            agentNamePattern: parseRegexPattern(overlay.agentNamePattern),
+        };
+    });
+}
+//# sourceMappingURL=langfuse.js.map

package/dist/adapters/langfuse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"langfuse.js","sourceRoot":"","sources":["../../src/adapters/langfuse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,SAAS,CAAC;AA8D3B,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAC3B,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,QAAwB;IAC/D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE;QAC5C,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,SAAS,KAAK,gBAAgB,IAAI,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAA6B,EAC7B,IAAY,EACZ,KAAa;IAEb,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACvG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,WAAW,EAAE;SACtC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;IAC9C,IACE,CAAC,OAAO;QACR,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,KAAK,CAAC,OAAO,CAAE,OAA8B,CAAC,IAAI,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gDAAgD,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,OAA4B,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,MAAuB;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC3D,OAAO,WAAW,CAAC,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAiB;IAC7C,MAAM,EACJ,EAAE,EACF,IAAI,EACJ,OAAO,EACP,MAAM,GACP,GAAG,KAAK,CAAC;IACV,MAAM,KAAK,GAAoB;QAC7B,EAAE;QACF,IAAI;QACJ,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC;QAC7B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;IAEF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,KAAK,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC9C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA6C,EAC7C,GAA8B;IAE9B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CACrB,QAAgB,EAChB,MAAc,EACd,YAA0C;IAE1C,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,oBAAoB,QAAQ,OAAO,MAAM,4CAA4C,CAAC,CAAC;QACpG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,EAAE;QACzB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE,SAAS,CAAC,IAAI;QAC7B,WAAW,EAAE,OAAO,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB,EAAE,MAAyB;IACpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG;gBACjB,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3E,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;aAC1E,CAAC;YAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS;oBAAE,SAAS;gBACzB,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;gBAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA6B,EAC7B,QAAwB;IAExB,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IACnD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,CAAC,IAAI,wBAAwB,CAAC,CAAC;YAC/E,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;YAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,MAAM,EAAE,CAAC,KAAK,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE/C,OAAO;QACL,MAAM;QACN,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,SAAS;YAC5B,CAAC,CAAC,yBAAyB,MAAM,CAAC,SAAS,EAAE;YAC7C,CAAC,CAAC,qBAAqB;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAY,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,wBAAwB,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,OAAO,QAAQ,oBAAoB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,KAAkC,CAAC;QACnD,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,OAAO,QAAQ,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO;YACL,GAAG,OAAO;YACV,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/n8n.d.ts

@@ -0,0 +1,4 @@
+import type { AgentDefinition } from "../aivss/types";
+import type { AdapterResult, N8NWorkflow } from "./types";
+export declare function parseN8NWorkflow(workflow: N8NWorkflow, defaults?: Partial<AgentDefinition>): AdapterResult;
+//# sourceMappingURL=n8n.d.ts.map

package/dist/adapters/n8n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"n8n.d.ts","sourceRoot":"","sources":["../../src/adapters/n8n.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EACV,aAAa,EAGb,WAAW,EACZ,MAAM,SAAS,CAAC;AA6CjB,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,WAAW,EACrB,QAAQ,GAAE,OAAO,CAAC,eAAe,CAAM,GACtC,aAAa,CAkDf"}

package/dist/adapters/n8n.js

@@ -0,0 +1,89 @@
+// Recognised AI Agent node type substrings (case-insensitive).
+// Anything matching these is treated as an agent surface for assessment.
+const AGENT_TYPE_HINTS = [
+    "agent",
+    "llm",
+    "lmchat",
+    "openaiassistant",
+    ".lm",
+];
+function isAgentNode(node) {
+    const t = node.type.toLowerCase();
+    return AGENT_TYPE_HINTS.some((hint) => t.includes(hint));
+}
+function readString(obj, key) {
+    const v = obj[key];
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+function extractSystemPrompt(params) {
+    const options = params["options"] ?? {};
+    return (readString(options, "systemMessage") ??
+        readString(params, "systemMessage") ??
+        readString(params, "prompt") ??
+        readString(params, "text") ??
+        "");
+}
+function extractModel(params) {
+    // N8N stores model in various shapes depending on node version.
+    const direct = readString(params, "model");
+    if (direct)
+        return direct;
+    const modelObj = params["model"];
+    if (modelObj && typeof modelObj === "object") {
+        const value = readString(modelObj, "value");
+        if (value)
+            return value;
+    }
+    return "unknown";
+}
+export function parseN8NWorkflow(workflow, defaults = {}) {
+    const agentNodes = workflow.nodes.filter(isAgentNode);
+    const agentNodeIds = new Set(agentNodes.map((n) => n.id));
+    const agentNodeByName = new Map(agentNodes.map((n) => [n.name, n]));
+    const agents = agentNodes.map((node) => ({
+        id: node.id,
+        name: node.name,
+        model: extractModel(node.parameters),
+        systemPrompt: extractSystemPrompt(node.parameters),
+        tools: defaults.tools ?? [],
+        permissions: defaults.permissions ?? [],
+        deploymentContext: defaults.deploymentContext ?? "General",
+        modelComplexity: defaults.modelComplexity ?? "Moderate",
+        mitigationMultiplier: defaults.mitigationMultiplier ?? 1.2,
+        finetuned: defaults.finetuned ?? false,
+        dependencies: defaults.dependencies ?? [],
+        secretManagement: defaults.secretManagement ?? "Not specified",
+        deployment: defaults.deployment ?? "N8N workflow",
+    }));
+    // Build handoff edges: connections are keyed by source NODE NAME, and each
+    // inner array element references the destination by NAME as well.
+    const handoffs = [];
+    for (const [fromName, conn] of Object.entries(workflow.connections)) {
+        const fromNode = agentNodeByName.get(fromName);
+        if (!fromNode)
+            continue; // non-agent source — skip
+        const mainGroups = conn.main ?? [];
+        for (const group of mainGroups) {
+            for (const target of group) {
+                const toNode = agentNodeByName.get(target.node);
+                if (!toNode)
+                    continue; // target is not an agent — skip
+                if (!agentNodeIds.has(fromNode.id) || !agentNodeIds.has(toNode.id)) {
+                    continue;
+                }
+                handoffs.push({
+                    fromAgentId: fromNode.id,
+                    toAgentId: toNode.id,
+                    fromAgentName: fromNode.name,
+                    toAgentName: toNode.name,
+                });
+            }
+        }
+    }
+    return {
+        agents,
+        handoffs,
+        workflowName: workflow.name ?? "N8N Workflow",
+    };
+}
+//# sourceMappingURL=n8n.js.map

package/dist/adapters/n8n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"n8n.js","sourceRoot":"","sources":["../../src/adapters/n8n.ts"],"names":[],"mappings":"AAQA,+DAA+D;AAC/D,yEAAyE;AACzE,MAAM,gBAAgB,GAAG;IACvB,OAAO;IACP,KAAK;IACL,QAAQ;IACR,iBAAiB;IACjB,KAAK;CACN,CAAC;AAEF,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,GAA4B,EAAE,GAAW;IAC3D,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA+B;IAC1D,MAAM,OAAO,GAAI,MAAM,CAAC,SAAS,CAAyC,IAAI,EAAE,CAAC;IACjF,OAAO,CACL,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC;QACpC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC;QACnC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC5B,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;QAC1B,EAAE,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,gEAAgE;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAmC,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAqB,EACrB,WAAqC,EAAE;IAEvC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QACpC,YAAY,EAAE,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QAClD,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,EAAE;QAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;QACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,SAAS;QAC1D,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,UAAU;QACvD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,IAAI,GAAG;QAC1D,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,KAAK;QACtC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,eAAe;QAC9D,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,cAAc;KAClD,CAAC,CAAC,CAAC;IAEJ,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,0BAA0B;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM;oBAAE,SAAS,CAAC,gCAAgC;gBACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBACnE,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,WAAW,EAAE,QAAQ,CAAC,EAAE;oBACxB,SAAS,EAAE,MAAM,CAAC,EAAE;oBACpB,aAAa,EAAE,QAAQ,CAAC,IAAI;oBAC5B,WAAW,EAAE,MAAM,CAAC,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ;QACR,YAAY,EAAE,QAAQ,CAAC,IAAI,IAAI,cAAc;KAC9C,CAAC;AACJ,CAAC"}

package/dist/adapters/openclaw.d.ts

@@ -0,0 +1,58 @@
+/**
+ * OpenClaw Adapter — Tier 3 (Capability Surface)
+ *
+ * Reads a live OpenClaw installation and produces AgentDefinition[] for
+ * Canopy threat assessment. No instrumentation or code changes required —
+ * the adapter reads `~/.openclaw/openclaw.json` and the skill workspace.
+ *
+ * Threat surface coverage:
+ *   - Skills → tools (each SKILL.md = one Tool; skills with apiKey marked dangerous)
+ *   - Channels → permissions (each enabled channel = read/write permission)
+ *   - Browser automation → dangerous tool if browser.enabled
+ *   - Cron → mandatory CRON_AUTONOMOUS_EXECUTION finding on AA metric
+ *   - MCP servers → supply-chain dependency (CS metric surface)
+ *   - Multi-agent bindings → HandoffEdge[] (AD metric surface)
+ *   - Plugins → additional dependencies
+ *
+ * Mandatory findings (injected as tool descriptions, flagged for assembler):
+ *   - UNDECLARED_CAPABILITY_RISK: skills without readable SKILL.md
+ *   - CRON_AUTONOMOUS_EXECUTION: cron.enabled = true
+ *   - MESSAGING_CHANNEL_ACCESS: one finding per enabled channel
+ *
+ * Config path resolution order:
+ *   1. Explicit `configPath` argument
+ *   2. OPENCLAW_CONFIG_PATH env var
+ *   3. OPENCLAW_STATE_DIR env var + "/openclaw.json"
+ *   4. ~/.openclaw/openclaw.json (default)
+ *   5. Legacy: ~/.clawdbot/clawdbot.json
+ *
+ * Reference: https://github.com/openclaw/openclaw
+ */
+import type { AgentDefinition, DeploymentContext } from "../aivss/types.js";
+import type { HandoffEdge } from "./types.js";
+export interface OpenClawAdapterOptions {
+    /** Path to openclaw.json. Defaults to ~/.openclaw/openclaw.json. */
+    configPath?: string;
+    /** Override deployment context. Default: "General". */
+    deploymentContext?: DeploymentContext;
+}
+export interface OpenClawAdapterResult {
+    agents: AgentDefinition[];
+    handoffs: HandoffEdge[];
+    /** Skills that had no SKILL.md — UNDECLARED_CAPABILITY_RISK */
+    undeclaredSkills: string[];
+    /** Resolved config path that was read */
+    resolvedConfigPath: string;
+}
+/**
+ * Parse a live OpenClaw installation into AgentDefinition[] for Canopy assessment.
+ *
+ * @example
+ * const { agents, handoffs } = await parseOpenClawConfig();
+ * const tcFormat = await assessWorkflow({
+ *   input: { type: "agents", agents, handoffs },
+ *   applicationName: "My OpenClaw Assistant",
+ * });
+ */
+export declare function parseOpenClawConfig(options?: OpenClawAdapterOptions): OpenClawAdapterResult;
+//# sourceMappingURL=openclaw.d.ts.map

package/dist/adapters/openclaw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../src/adapters/openclaw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAQ,MAAM,mBAAmB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA8L9C,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,sBAA2B,GACnC,qBAAqB,CAsGvB"}

package/dist/adapters/openclaw.js

@@ -0,0 +1,275 @@
+/**
+ * OpenClaw Adapter — Tier 3 (Capability Surface)
+ *
+ * Reads a live OpenClaw installation and produces AgentDefinition[] for
+ * Canopy threat assessment. No instrumentation or code changes required —
+ * the adapter reads `~/.openclaw/openclaw.json` and the skill workspace.
+ *
+ * Threat surface coverage:
+ *   - Skills → tools (each SKILL.md = one Tool; skills with apiKey marked dangerous)
+ *   - Channels → permissions (each enabled channel = read/write permission)
+ *   - Browser automation → dangerous tool if browser.enabled
+ *   - Cron → mandatory CRON_AUTONOMOUS_EXECUTION finding on AA metric
+ *   - MCP servers → supply-chain dependency (CS metric surface)
+ *   - Multi-agent bindings → HandoffEdge[] (AD metric surface)
+ *   - Plugins → additional dependencies
+ *
+ * Mandatory findings (injected as tool descriptions, flagged for assembler):
+ *   - UNDECLARED_CAPABILITY_RISK: skills without readable SKILL.md
+ *   - CRON_AUTONOMOUS_EXECUTION: cron.enabled = true
+ *   - MESSAGING_CHANNEL_ACCESS: one finding per enabled channel
+ *
+ * Config path resolution order:
+ *   1. Explicit `configPath` argument
+ *   2. OPENCLAW_CONFIG_PATH env var
+ *   3. OPENCLAW_STATE_DIR env var + "/openclaw.json"
+ *   4. ~/.openclaw/openclaw.json (default)
+ *   5. Legacy: ~/.clawdbot/clawdbot.json
+ *
+ * Reference: https://github.com/openclaw/openclaw
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import * as os from "node:os";
+// ── Path resolution ───────────────────────────────────────────────────────────
+function resolveConfigPath(explicit) {
+    if (explicit)
+        return explicit;
+    if (process.env["OPENCLAW_CONFIG_PATH"])
+        return process.env["OPENCLAW_CONFIG_PATH"];
+    const stateDir = process.env["OPENCLAW_STATE_DIR"]?.trim();
+    if (stateDir)
+        return path.join(stateDir, "openclaw.json");
+    const home = os.homedir();
+    const candidates = [
+        path.join(home, ".openclaw", "openclaw.json"),
+        path.join(home, ".clawdbot", "clawdbot.json"), // legacy
+    ];
+    for (const c of candidates) {
+        if (fs.existsSync(c))
+            return c;
+    }
+    return candidates[0]; // return default even if missing — caller handles
+}
+function resolveWorkspaceDir(configPath) {
+    return path.join(path.dirname(configPath), "workspace");
+}
+// ── Skills → Tools ────────────────────────────────────────────────────────────
+function readSkillMd(skillDir) {
+    const p = path.join(skillDir, "SKILL.md");
+    try {
+        return fs.readFileSync(p, "utf-8");
+    }
+    catch {
+        return null;
+    }
+}
+function extractSkillDescription(skillMd) {
+    // First non-empty line after the title, or first 200 chars
+    const lines = skillMd.split("\n").map((l) => l.trim()).filter(Boolean);
+    const descLine = lines.find((l) => !l.startsWith("#"));
+    return descLine?.slice(0, 200) ?? skillMd.slice(0, 200);
+}
+function loadSkillTools(workspaceDir, skillEntries, extraDirs) {
+    const tools = [];
+    const undeclaredSkills = [];
+    const skillDirs = [
+        path.join(workspaceDir, "skills"),
+        ...extraDirs,
+    ];
+    const seenSkills = new Set();
+    for (const skillsRoot of skillDirs) {
+        if (!fs.existsSync(skillsRoot))
+            continue;
+        let entries;
+        try {
+            entries = fs.readdirSync(skillsRoot);
+        }
+        catch {
+            continue;
+        }
+        for (const skillName of entries) {
+            if (seenSkills.has(skillName))
+                continue;
+            seenSkills.add(skillName);
+            const skillDir = path.join(skillsRoot, skillName);
+            const stat = fs.statSync(skillDir, { throwIfNoEntry: false });
+            if (!stat?.isDirectory())
+                continue;
+            const config = skillEntries[skillName] ?? {};
+            if (config.enabled === false)
+                continue;
+            const skillMd = readSkillMd(skillDir);
+            if (!skillMd) {
+                undeclaredSkills.push(skillName);
+                tools.push({
+                    name: skillName,
+                    description: `[UNDECLARED_CAPABILITY_RISK] Skill "${skillName}" has no SKILL.md — capabilities unknown. Canopy cannot assess what this skill does or what external services it accesses.`,
+                    dangerous: true,
+                });
+                continue;
+            }
+            const hasCreds = config.apiKey !== undefined && config.apiKey !== null;
+            tools.push({
+                name: skillName,
+                description: extractSkillDescription(skillMd),
+                dangerous: hasCreds, // skills with credentials have external service access
+            });
+        }
+    }
+    return { tools, undeclaredSkills };
+}
+// ── Channels → permissions ────────────────────────────────────────────────────
+// Channels with elevated risk — they reach into personal/corporate messaging
+const HIGH_RISK_CHANNELS = new Set([
+    "imessage",
+    "telegram",
+    "signal",
+    "whatsapp",
+    "slack",
+    "msteams",
+    "discord",
+]);
+function channelsToPermissions(channels) {
+    const perms = [];
+    for (const [channelId, config] of Object.entries(channels)) {
+        if (!config || typeof config !== "object")
+            continue;
+        const cfg = config;
+        // Skip clearly disabled channels
+        if (cfg["enabled"] === false)
+            continue;
+        const risk = HIGH_RISK_CHANNELS.has(channelId) ? "high-risk:" : "";
+        perms.push(`${risk}read:${channelId}`, `${risk}write:${channelId}`);
+    }
+    return perms;
+}
+// ── Model extraction ──────────────────────────────────────────────────────────
+function extractModel(models) {
+    if (!models)
+        return "unknown";
+    const d = models.default;
+    if (typeof d === "string")
+        return d;
+    if (typeof d === "object" && d !== null) {
+        const provider = d.provider ?? "unknown";
+        const model = d.model ?? "unknown";
+        return `${provider}/${model}`;
+    }
+    return "unknown";
+}
+// ── System prompt synthesis ───────────────────────────────────────────────────
+function buildSystemPromptSummary(config, channels, skillCount) {
+    const name = config.ui?.assistant?.name ?? "OpenClaw Assistant";
+    const channelList = channels.slice(0, 5).join(", ") + (channels.length > 5 ? " and more" : "");
+    const hasCron = config.cron?.enabled === true;
+    const hasBrowser = config.browser?.enabled === true;
+    const mcpCount = Object.keys(config.mcp?.servers ?? {}).length;
+    return [
+        `You are ${name}, a personal AI assistant running on the user's device.`,
+        `You respond to messages across ${channels.length} channels: ${channelList}.`,
+        `You have access to ${skillCount} installed skills that extend your capabilities.`,
+        hasCron ? "You run scheduled (cron) jobs autonomously without user confirmation." : "",
+        hasBrowser ? "You have browser automation capabilities." : "",
+        mcpCount > 0 ? `You are connected to ${mcpCount} MCP server(s) for extended tool access.` : "",
+    ].filter(Boolean).join(" ");
+}
+/**
+ * Parse a live OpenClaw installation into AgentDefinition[] for Canopy assessment.
+ *
+ * @example
+ * const { agents, handoffs } = await parseOpenClawConfig();
+ * const tcFormat = await assessWorkflow({
+ *   input: { type: "agents", agents, handoffs },
+ *   applicationName: "My OpenClaw Assistant",
+ * });
+ */
+export function parseOpenClawConfig(options = {}) {
+    const configPath = resolveConfigPath(options.configPath);
+    if (!fs.existsSync(configPath)) {
+        throw new Error(`OpenClaw config not found at ${configPath}. ` +
+            "Install OpenClaw first: https://docs.openclaw.ai/start/getting-started");
+    }
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+    }
+    catch (err) {
+        throw new Error(`Failed to parse OpenClaw config at ${configPath}: ${String(err)}`);
+    }
+    const workspaceDir = resolveWorkspaceDir(configPath);
+    const skillEntries = config.skills?.entries ?? {};
+    const extraDirs = config.skills?.load?.extraDirs ?? [];
+    // Skills → tools
+    const { tools, undeclaredSkills } = loadSkillTools(workspaceDir, skillEntries, extraDirs);
+    // Built-in dangerous tools
+    if (config.browser?.enabled) {
+        tools.push({
+            name: "browser",
+            description: "Browser automation — navigate pages, fill forms, extract content, execute JS in an active browser session.",
+            dangerous: true,
+        });
+    }
+    // MCP servers → tools (each MCP server = a tool surface)
+    for (const [serverName] of Object.entries(config.mcp?.servers ?? {})) {
+        tools.push({
+            name: `mcp:${serverName}`,
+            description: `MCP server "${serverName}" — provides additional tools via the Model Context Protocol. Capabilities depend on server implementation.`,
+            dangerous: true,
+        });
+    }
+    // Channels → permissions
+    const channels = config.channels ?? {};
+    const activeChannels = Object.keys(channels).filter((id) => {
+        const ch = channels[id];
+        return ch && typeof ch === "object" && ch["enabled"] !== false;
+    });
+    const permissions = channelsToPermissions(channels);
+    // Cron → adds CRON_AUTONOMOUS_EXECUTION tool finding
+    if (config.cron?.enabled) {
+        tools.push({
+            name: "cron-scheduler",
+            description: "[CRON_AUTONOMOUS_EXECUTION] OpenClaw runs scheduled jobs autonomously (cron.enabled=true). " +
+                "The assistant can execute arbitrary tool chains on a schedule without per-execution user confirmation. " +
+                "This represents an autonomous execution surface that increases AA (Agentic Autonomy) risk.",
+            dangerous: true,
+        });
+    }
+    // Dependencies
+    const dependencies = [
+        ...activeChannels.map((c) => `channel:${c}`),
+        ...Object.keys(config.mcp?.servers ?? {}).map((s) => `mcp:${s}`),
+        ...Object.keys(config.plugins ?? {}).map((p) => `plugin:${p}`),
+    ];
+    const model = extractModel(config.models);
+    const systemPrompt = buildSystemPromptSummary(config, activeChannels, tools.length);
+    const agent = {
+        id: "openclaw-gateway",
+        name: config.ui?.assistant?.name ?? "OpenClaw Gateway",
+        model,
+        systemPrompt,
+        tools,
+        permissions,
+        deploymentContext: options.deploymentContext ?? "General",
+        modelComplexity: tools.length > 10 ? "Complex" : tools.length > 4 ? "Moderate" : "Simple",
+        mitigationMultiplier: undeclaredSkills.length > 0 ? 1.3 : 1.0,
+        finetuned: false,
+        dependencies,
+        secretManagement: "OpenClaw Secrets Manager",
+        deployment: "Local (macOS/Linux personal device)",
+    };
+    // Multi-agent bindings → HandoffEdge[]
+    const handoffs = (config.agents?.bindings ?? []).map((binding) => ({
+        fromAgentId: binding.from ?? "openclaw-gateway",
+        toAgentId: binding.to ?? "unknown-agent",
+        fromAgentName: binding.from ?? "OpenClaw Gateway",
+        toAgentName: binding.name ?? binding.to ?? "Sub-agent",
+    }));
+    return {
+        agents: [agent],
+        handoffs,
+        undeclaredSkills,
+        resolvedConfigPath: configPath,
+    };
+}
+//# sourceMappingURL=openclaw.js.map