@xopcai/xopc 0.0.115 → 0.0.117

package/dist/src/agent-manifest/schema.js

@@ -0,0 +1,267 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+import { z } from "zod";
+//#region src/agent-manifest/schema.ts
+var IdSchema, ManifestModelRoleSchema, ModelPolicySchema, ModelPolicyPatchSchema, ToolModeSchema, ToolScopeSchema, ToolPolicySchema, ToolPolicySetSchema, SkillPolicySchema, DreamingPhasePolicySchema, DreamingLightPolicySchema, DreamingDeepPolicySchema, DreamingRemPolicySchema, DreamingPolicySchema, MemoryPolicySchema, WorkflowPolicySchema, BoundaryPolicySchema, WorkspacePolicySchema, RuntimePolicySchema, PromptPolicySchema, AgentIdentitySchema, AgentResponsibilitiesSchema, AgentManifestSchema, CapabilityPresetSchema;
+var init_schema = __esmMin((() => {
+	IdSchema = z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/);
+	ManifestModelRoleSchema = z.object({
+		model: z.string().min(1),
+		description: z.string().max(500).optional()
+	}).strict().superRefine((entry, ctx) => {
+		const trimmed = entry.model.trim();
+		const idx = trimmed.indexOf("/");
+		if (idx <= 0 || idx === trimmed.length - 1) ctx.addIssue({
+			code: "custom",
+			message: `model must be provider/model format (got '${entry.model}')`,
+			path: ["model"]
+		});
+	});
+	ModelPolicySchema = z.object({
+		defaultRole: IdSchema,
+		roles: z.record(IdSchema, ManifestModelRoleSchema).default({}),
+		policy: z.object({
+			allowFallbacks: z.boolean().optional(),
+			maxCostTier: z.enum([
+				"low",
+				"medium",
+				"high"
+			]).optional()
+		}).strict().optional()
+	}).strict();
+	ModelPolicyPatchSchema = z.object({
+		defaultRole: IdSchema.optional(),
+		roles: z.record(IdSchema, ManifestModelRoleSchema).optional(),
+		policy: z.object({
+			allowFallbacks: z.boolean().optional(),
+			maxCostTier: z.enum([
+				"low",
+				"medium",
+				"high"
+			]).optional()
+		}).strict().optional()
+	}).strict();
+	ToolModeSchema = z.enum([
+		"allow",
+		"confirm",
+		"deny"
+	]);
+	ToolScopeSchema = z.enum([
+		"readonly",
+		"workspace",
+		"unrestricted"
+	]);
+	ToolPolicySchema = z.object({
+		mode: ToolModeSchema,
+		scope: ToolScopeSchema.optional(),
+		limits: z.object({
+			maxCallsPerTurn: z.number().int().positive().optional(),
+			timeoutMs: z.number().int().positive().optional()
+		}).strict().optional()
+	}).strict();
+	ToolPolicySetSchema = z.object({
+		builtin: z.record(z.string().min(1), ToolPolicySchema).default({}),
+		mcp: z.object({
+			servers: z.record(z.string().min(1), ToolPolicySchema).optional(),
+			tools: z.record(z.string().min(1), ToolPolicySchema).optional()
+		}).strict().optional()
+	}).strict().default({ builtin: {} });
+	SkillPolicySchema = z.object({
+		mode: z.enum([
+			"all",
+			"allowlist",
+			"denylist",
+			"off"
+		]).default("all"),
+		allow: z.array(z.string().min(1)).optional(),
+		deny: z.array(z.string().min(1)).optional()
+	}).strict().default({ mode: "all" });
+	DreamingPhasePolicySchema = z.object({
+		enabled: z.boolean().optional(),
+		cron: z.string().min(1).optional()
+	}).strict();
+	DreamingLightPolicySchema = DreamingPhasePolicySchema.extend({
+		lookbackDays: z.number().int().positive().optional(),
+		limit: z.number().int().nonnegative().optional(),
+		dedupeSimilarity: z.number().min(0).max(1).optional()
+	}).strict();
+	DreamingDeepPolicySchema = DreamingPhasePolicySchema.extend({
+		minScore: z.number().min(0).max(1).optional(),
+		minRecallCount: z.number().int().positive().optional(),
+		minUniqueQueries: z.number().int().positive().optional(),
+		limit: z.number().int().nonnegative().optional(),
+		recencyHalfLifeDays: z.number().positive().optional(),
+		maxAgeDays: z.number().positive().optional()
+	}).strict();
+	DreamingRemPolicySchema = DreamingPhasePolicySchema.extend({
+		lookbackDays: z.number().int().positive().optional(),
+		limit: z.number().int().nonnegative().optional(),
+		minPatternStrength: z.number().min(0).max(1).optional()
+	}).strict();
+	DreamingPolicySchema = z.object({
+		enabled: z.boolean().default(false),
+		frequency: z.string().min(1).optional(),
+		timezone: z.string().optional(),
+		phases: z.object({
+			light: DreamingLightPolicySchema.optional(),
+			deep: DreamingDeepPolicySchema.optional(),
+			rem: DreamingRemPolicySchema.optional()
+		}).strict().optional()
+	}).strict().optional();
+	MemoryPolicySchema = z.object({
+		mode: z.enum([
+			"off",
+			"readOnly",
+			"confirmWrite",
+			"auto"
+		]).default("off"),
+		sources: z.array(z.enum([
+			"session",
+			"userProfile",
+			"agentProfile",
+			"curated",
+			"workspace"
+		])).default(["session"]),
+		writePolicy: z.object({
+			userProfile: z.enum([
+				"deny",
+				"confirm",
+				"allow"
+			]).optional(),
+			agentProfile: z.enum([
+				"deny",
+				"confirm",
+				"allow"
+			]).optional(),
+			curated: z.enum([
+				"deny",
+				"confirm",
+				"allow"
+			]).optional(),
+			workspace: z.enum([
+				"deny",
+				"confirm",
+				"allow"
+			]).optional()
+		}).strict().optional(),
+		retention: z.object({
+			compaction: z.boolean().default(true),
+			maxAgeDays: z.number().int().positive().optional(),
+			maxItems: z.number().int().positive().optional()
+		}).strict().optional(),
+		privacy: z.object({
+			crossAgentSharing: z.enum([
+				"deny",
+				"readOnly",
+				"allow"
+			]).default("deny"),
+			sensitiveWritePolicy: z.enum([
+				"deny",
+				"confirm",
+				"allow"
+			]).default("confirm")
+		}).strict().optional(),
+		providerRouting: z.object({
+			searchStrategy: z.enum([
+				"local-first",
+				"external-first",
+				"fanout",
+				"local-only",
+				"external-only"
+			]).default("fanout"),
+			writeStrategy: z.enum([
+				"local-first",
+				"external-first",
+				"write-through",
+				"local-only",
+				"external-only"
+			]).default("local-first"),
+			allowExternalWrites: z.boolean().default(false),
+			allowedProviderIds: z.array(z.string().min(1)).optional(),
+			autoWriteKinds: z.array(z.enum([
+				"user_profile",
+				"agent_note",
+				"workspace_fact",
+				"daily_note",
+				"session_summary",
+				"derived_insight"
+			])).optional()
+		}).strict().optional(),
+		dreaming: DreamingPolicySchema
+	}).strict().default({
+		mode: "off",
+		sources: ["session"]
+	});
+	WorkflowPolicySchema = z.object({
+		default: z.string().min(1).optional(),
+		allowed: z.array(z.string().min(1)).optional(),
+		suggested: z.array(z.object({
+			intent: z.string().min(1),
+			workflow: z.string().min(1)
+		}).strict()).optional()
+	}).strict().default({});
+	BoundaryPolicySchema = z.object({
+		requiresConfirmation: z.array(z.string().min(1)).default([]),
+		forbidden: z.array(z.string().min(1)).default([]),
+		escalation: z.array(z.string().min(1)).default([])
+	}).strict().default({
+		requiresConfirmation: [],
+		forbidden: [],
+		escalation: []
+	});
+	WorkspacePolicySchema = z.object({ root: z.string().min(1) }).strict();
+	RuntimePolicySchema = z.object({
+		maxTurns: z.number().int().positive().optional(),
+		timeoutMs: z.number().int().positive().optional(),
+		maxToolFailuresPerTurn: z.number().int().positive().optional()
+	}).strict().optional();
+	PromptPolicySchema = z.object({ customInstructions: z.string().optional() }).strict().optional();
+	AgentIdentitySchema = z.object({
+		name: z.string().min(1),
+		description: z.string().optional(),
+		role: z.string().min(1),
+		language: z.string().min(1).default("en"),
+		tone: z.string().min(1).default("direct"),
+		avatar: z.string().optional()
+	}).strict();
+	AgentResponsibilitiesSchema = z.object({
+		primary: z.array(z.string().min(1)).min(1),
+		secondary: z.array(z.string().min(1)).optional(),
+		outOfScope: z.array(z.string().min(1)).optional()
+	}).strict();
+	AgentManifestSchema = z.object({
+		id: IdSchema,
+		enabled: z.boolean().default(true),
+		extends: z.array(IdSchema).optional(),
+		identity: AgentIdentitySchema,
+		responsibilities: AgentResponsibilitiesSchema,
+		workspace: WorkspacePolicySchema,
+		models: ModelPolicySchema,
+		tools: ToolPolicySetSchema,
+		skills: SkillPolicySchema,
+		memory: MemoryPolicySchema,
+		workflows: WorkflowPolicySchema,
+		boundaries: BoundaryPolicySchema,
+		runtime: RuntimePolicySchema,
+		prompt: PromptPolicySchema
+	}).strict();
+	CapabilityPresetSchema = z.object({
+		id: IdSchema,
+		name: z.string().min(1),
+		description: z.string().optional(),
+		version: z.number().int().positive().default(1),
+		extends: z.array(IdSchema).optional(),
+		models: ModelPolicyPatchSchema.optional(),
+		tools: ToolPolicySetSchema.optional(),
+		skills: SkillPolicySchema.optional(),
+		memory: MemoryPolicySchema.optional(),
+		workflows: WorkflowPolicySchema.optional(),
+		boundaries: BoundaryPolicySchema.optional(),
+		runtime: RuntimePolicySchema,
+		locks: z.array(z.string().min(1)).optional()
+	}).strict();
+}));
+//#endregion
+init_schema();
+export { AgentIdentitySchema, AgentManifestSchema, AgentResponsibilitiesSchema, BoundaryPolicySchema, CapabilityPresetSchema, DreamingDeepPolicySchema, DreamingLightPolicySchema, DreamingPhasePolicySchema, DreamingPolicySchema, DreamingRemPolicySchema, ManifestModelRoleSchema, MemoryPolicySchema, ModelPolicyPatchSchema, ModelPolicySchema, PromptPolicySchema, RuntimePolicySchema, SkillPolicySchema, ToolModeSchema, ToolPolicySchema, ToolPolicySetSchema, ToolScopeSchema, WorkflowPolicySchema, WorkspacePolicySchema, init_schema };
+
+//# sourceMappingURL=schema.js.map

package/dist/src/agent-manifest/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","names":[],"sources":["../../../src/agent-manifest/schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nconst IdSchema = z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/);\n\nexport const ManifestModelRoleSchema = z\n  .object({\n    model: z.string().min(1),\n    description: z.string().max(500).optional(),\n  })\n  .strict()\n  .superRefine((entry, ctx) => {\n    const trimmed = entry.model.trim();\n    const idx = trimmed.indexOf('/');\n    if (idx <= 0 || idx === trimmed.length - 1) {\n      ctx.addIssue({\n        code: 'custom',\n        message: `model must be provider/model format (got '${entry.model}')`,\n        path: ['model'],\n      });\n    }\n  });\n\nexport const ModelPolicySchema = z\n  .object({\n    defaultRole: IdSchema,\n    roles: z.record(IdSchema, ManifestModelRoleSchema).default({}),\n    policy: z\n      .object({\n        allowFallbacks: z.boolean().optional(),\n        maxCostTier: z.enum(['low', 'medium', 'high']).optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict();\n\nexport const ModelPolicyPatchSchema = z\n  .object({\n    defaultRole: IdSchema.optional(),\n    roles: z.record(IdSchema, ManifestModelRoleSchema).optional(),\n    policy: z\n      .object({\n        allowFallbacks: z.boolean().optional(),\n        maxCostTier: z.enum(['low', 'medium', 'high']).optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict();\n\nexport const ToolModeSchema = z.enum(['allow', 'confirm', 'deny']);\nexport const ToolScopeSchema = z.enum(['readonly', 'workspace', 'unrestricted']);\n\nexport const ToolPolicySchema = z\n  .object({\n    mode: ToolModeSchema,\n    scope: ToolScopeSchema.optional(),\n    limits: z\n      .object({\n        maxCallsPerTurn: z.number().int().positive().optional(),\n        timeoutMs: z.number().int().positive().optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict();\n\nexport const ToolPolicySetSchema = z\n  .object({\n    builtin: z.record(z.string().min(1), ToolPolicySchema).default({}),\n    mcp: z\n      .object({\n        servers: z.record(z.string().min(1), ToolPolicySchema).optional(),\n        tools: z.record(z.string().min(1), ToolPolicySchema).optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict()\n  .default({ builtin: {} });\n\nexport const SkillPolicySchema = z\n  .object({\n    mode: z.enum(['all', 'allowlist', 'denylist', 'off']).default('all'),\n    allow: z.array(z.string().min(1)).optional(),\n    deny: z.array(z.string().min(1)).optional(),\n  })\n  .strict()\n  .default({ mode: 'all' });\n\nexport const DreamingPhasePolicySchema = z\n  .object({\n    enabled: z.boolean().optional(),\n    cron: z.string().min(1).optional(),\n  })\n  .strict();\n\nexport const DreamingLightPolicySchema = DreamingPhasePolicySchema.extend({\n  lookbackDays: z.number().int().positive().optional(),\n  limit: z.number().int().nonnegative().optional(),\n  dedupeSimilarity: z.number().min(0).max(1).optional(),\n}).strict();\n\nexport const DreamingDeepPolicySchema = DreamingPhasePolicySchema.extend({\n  minScore: z.number().min(0).max(1).optional(),\n  minRecallCount: z.number().int().positive().optional(),\n  minUniqueQueries: z.number().int().positive().optional(),\n  limit: z.number().int().nonnegative().optional(),\n  recencyHalfLifeDays: z.number().positive().optional(),\n  maxAgeDays: z.number().positive().optional(),\n}).strict();\n\nexport const DreamingRemPolicySchema = DreamingPhasePolicySchema.extend({\n  lookbackDays: z.number().int().positive().optional(),\n  limit: z.number().int().nonnegative().optional(),\n  minPatternStrength: z.number().min(0).max(1).optional(),\n}).strict();\n\nexport const DreamingPolicySchema = z\n  .object({\n    enabled: z.boolean().default(false),\n    frequency: z.string().min(1).optional(),\n    timezone: z.string().optional(),\n    phases: z\n      .object({\n        light: DreamingLightPolicySchema.optional(),\n        deep: DreamingDeepPolicySchema.optional(),\n        rem: DreamingRemPolicySchema.optional(),\n      })\n      .strict()\n      .optional(),\n  })\n  .strict()\n  .optional();\n\nexport const MemoryPolicySchema = z\n  .object({\n    mode: z.enum(['off', 'readOnly', 'confirmWrite', 'auto']).default('off'),\n    sources: z\n      .array(z.enum(['session', 'userProfile', 'agentProfile', 'curated', 'workspace']))\n      .default(['session']),\n    writePolicy: z\n      .object({\n        userProfile: z.enum(['deny', 'confirm', 'allow']).optional(),\n        agentProfile: z.enum(['deny', 'confirm', 'allow']).optional(),\n        curated: z.enum(['deny', 'confirm', 'allow']).optional(),\n        workspace: z.enum(['deny', 'confirm', 'allow']).optional(),\n      })\n      .strict()\n      .optional(),\n    retention: z\n      .object({\n        compaction: z.boolean().default(true),\n        maxAgeDays: z.number().int().positive().optional(),\n        maxItems: z.number().int().positive().optional(),\n      })\n      .strict()\n      .optional(),\n    privacy: z\n      .object({\n        crossAgentSharing: z.enum(['deny', 'readOnly', 'allow']).default('deny'),\n        sensitiveWritePolicy: z.enum(['deny', 'confirm', 'allow']).default('confirm'),\n      })\n      .strict()\n      .optional(),\n    providerRouting: z\n      .object({\n        searchStrategy: z\n          .enum(['local-first', 'external-first', 'fanout', 'local-only', 'external-only'])\n          .default('fanout'),\n        writeStrategy: z\n          .enum(['local-first', 'external-first', 'write-through', 'local-only', 'external-only'])\n          .default('local-first'),\n        allowExternalWrites: z.boolean().default(false),\n        allowedProviderIds: z.array(z.string().min(1)).optional(),\n        autoWriteKinds: z\n          .array(\n            z.enum([\n              'user_profile',\n              'agent_note',\n              'workspace_fact',\n              'daily_note',\n              'session_summary',\n              'derived_insight',\n            ]),\n          )\n          .optional(),\n      })\n      .strict()\n      .optional(),\n    dreaming: DreamingPolicySchema,\n  })\n  .strict()\n  .default({ mode: 'off', sources: ['session'] });\n\nexport const WorkflowPolicySchema = z\n  .object({\n    default: z.string().min(1).optional(),\n    allowed: z.array(z.string().min(1)).optional(),\n    suggested: z\n      .array(\n        z\n          .object({\n            intent: z.string().min(1),\n            workflow: z.string().min(1),\n          })\n          .strict(),\n      )\n      .optional(),\n  })\n  .strict()\n  .default({});\n\nexport const BoundaryPolicySchema = z\n  .object({\n    requiresConfirmation: z.array(z.string().min(1)).default([]),\n    forbidden: z.array(z.string().min(1)).default([]),\n    escalation: z.array(z.string().min(1)).default([]),\n  })\n  .strict()\n  .default({ requiresConfirmation: [], forbidden: [], escalation: [] });\n\nexport const WorkspacePolicySchema = z\n  .object({\n    root: z.string().min(1),\n  })\n  .strict();\n\nexport const RuntimePolicySchema = z\n  .object({\n    maxTurns: z.number().int().positive().optional(),\n    timeoutMs: z.number().int().positive().optional(),\n    maxToolFailuresPerTurn: z.number().int().positive().optional(),\n  })\n  .strict()\n  .optional();\n\nexport const PromptPolicySchema = z\n  .object({\n    customInstructions: z.string().optional(),\n  })\n  .strict()\n  .optional();\n\nexport const AgentIdentitySchema = z\n  .object({\n    name: z.string().min(1),\n    description: z.string().optional(),\n    role: z.string().min(1),\n    language: z.string().min(1).default('en'),\n    tone: z.string().min(1).default('direct'),\n    avatar: z.string().optional(),\n  })\n  .strict();\n\nexport const AgentResponsibilitiesSchema = z\n  .object({\n    primary: z.array(z.string().min(1)).min(1),\n    secondary: z.array(z.string().min(1)).optional(),\n    outOfScope: z.array(z.string().min(1)).optional(),\n  })\n  .strict();\n\nexport const AgentManifestSchema = z\n  .object({\n    id: IdSchema,\n    enabled: z.boolean().default(true),\n    extends: z.array(IdSchema).optional(),\n    identity: AgentIdentitySchema,\n    responsibilities: AgentResponsibilitiesSchema,\n    workspace: WorkspacePolicySchema,\n    models: ModelPolicySchema,\n    tools: ToolPolicySetSchema,\n    skills: SkillPolicySchema,\n    memory: MemoryPolicySchema,\n    workflows: WorkflowPolicySchema,\n    boundaries: BoundaryPolicySchema,\n    runtime: RuntimePolicySchema,\n    prompt: PromptPolicySchema,\n  })\n  .strict();\n\nexport const CapabilityPresetSchema = z\n  .object({\n    id: IdSchema,\n    name: z.string().min(1),\n    description: z.string().optional(),\n    version: z.number().int().positive().default(1),\n    extends: z.array(IdSchema).optional(),\n    models: ModelPolicyPatchSchema.optional(),\n    tools: ToolPolicySetSchema.optional(),\n    skills: SkillPolicySchema.optional(),\n    memory: MemoryPolicySchema.optional(),\n    workflows: WorkflowPolicySchema.optional(),\n    boundaries: BoundaryPolicySchema.optional(),\n    runtime: RuntimePolicySchema,\n    locks: z.array(z.string().min(1)).optional(),\n  })\n  .strict();\n\nexport type AgentManifest = z.infer<typeof AgentManifestSchema>;\nexport type CapabilityPreset = z.infer<typeof CapabilityPresetSchema>;\nexport type EffectiveAgentManifest = AgentManifest;\nexport type ToolPolicy = z.infer<typeof ToolPolicySchema>;\n"],"mappings":";;;;;AAEM,YAAW,EAAE,QAAQ,CAAC,MAAM,0BAA0B;AAE/C,2BAA0B,EACpC,OAAO;EACN,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;EACxB,aAAa,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU;EAC5C,CAAC,CACD,QAAQ,CACR,aAAa,OAAO,QAAQ;EAC3B,MAAM,UAAU,MAAM,MAAM,MAAM;EAClC,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,MAAI,OAAO,KAAK,QAAQ,QAAQ,SAAS,EACvC,KAAI,SAAS;GACX,MAAM;GACN,SAAS,6CAA6C,MAAM,MAAM;GAClE,MAAM,CAAC,QAAQ;GAChB,CAAC;GAEJ;AAES,qBAAoB,EAC9B,OAAO;EACN,aAAa;EACb,OAAO,EAAE,OAAO,UAAU,wBAAwB,CAAC,QAAQ,EAAE,CAAC;EAC9D,QAAQ,EACL,OAAO;GACN,gBAAgB,EAAE,SAAS,CAAC,UAAU;GACtC,aAAa,EAAE,KAAK;IAAC;IAAO;IAAU;IAAO,CAAC,CAAC,UAAU;GAC1D,CAAC,CACD,QAAQ,CACR,UAAU;EACd,CAAC,CACD,QAAQ;AAEE,0BAAyB,EACnC,OAAO;EACN,aAAa,SAAS,UAAU;EAChC,OAAO,EAAE,OAAO,UAAU,wBAAwB,CAAC,UAAU;EAC7D,QAAQ,EACL,OAAO;GACN,gBAAgB,EAAE,SAAS,CAAC,UAAU;GACtC,aAAa,EAAE,KAAK;IAAC;IAAO;IAAU;IAAO,CAAC,CAAC,UAAU;GAC1D,CAAC,CACD,QAAQ,CACR,UAAU;EACd,CAAC,CACD,QAAQ;AAEE,kBAAiB,EAAE,KAAK;EAAC;EAAS;EAAW;EAAO,CAAC;AACrD,mBAAkB,EAAE,KAAK;EAAC;EAAY;EAAa;EAAe,CAAC;AAEnE,oBAAmB,EAC7B,OAAO;EACN,MAAM;EACN,OAAO,gBAAgB,UAAU;EACjC,QAAQ,EACL,OAAO;GACN,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACvD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GAClD,CAAC,CACD,QAAQ,CACR,UAAU;EACd,CAAC,CACD,QAAQ;AAEE,uBAAsB,EAChC,OAAO;EACN,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC;EAClE,KAAK,EACF,OAAO;GACN,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,CAAC,UAAU;GACjE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,CAAC,UAAU;GAChE,CAAC,CACD,QAAQ,CACR,UAAU;EACd,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC;AAEd,qBAAoB,EAC9B,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAO;GAAa;GAAY;GAAM,CAAC,CAAC,QAAQ,MAAM;EACpE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EAC5C,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EAC5C,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEd,6BAA4B,EACtC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,UAAU;EAC/B,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACnC,CAAC,CACD,QAAQ;AAEE,6BAA4B,0BAA0B,OAAO;EACxE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACpD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU;EAChD,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;EACtD,CAAC,CAAC,QAAQ;AAEE,4BAA2B,0BAA0B,OAAO;EACvE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;EAC7C,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACtD,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACxD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU;EAChD,qBAAqB,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EACrD,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC7C,CAAC,CAAC,QAAQ;AAEE,2BAA0B,0BAA0B,OAAO;EACtE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACpD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU;EAChD,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU;EACxD,CAAC,CAAC,QAAQ;AAEE,wBAAuB,EACjC,OAAO;EACN,SAAS,EAAE,SAAS,CAAC,QAAQ,MAAM;EACnC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;EAC/B,QAAQ,EACL,OAAO;GACN,OAAO,0BAA0B,UAAU;GAC3C,MAAM,yBAAyB,UAAU;GACzC,KAAK,wBAAwB,UAAU;GACxC,CAAC,CACD,QAAQ,CACR,UAAU;EACd,CAAC,CACD,QAAQ,CACR,UAAU;AAEA,sBAAqB,EAC/B,OAAO;EACN,MAAM,EAAE,KAAK;GAAC;GAAO;GAAY;GAAgB;GAAO,CAAC,CAAC,QAAQ,MAAM;EACxE,SAAS,EACN,MAAM,EAAE,KAAK;GAAC;GAAW;GAAe;GAAgB;GAAW;GAAY,CAAC,CAAC,CACjF,QAAQ,CAAC,UAAU,CAAC;EACvB,aAAa,EACV,OAAO;GACN,aAAa,EAAE,KAAK;IAAC;IAAQ;IAAW;IAAQ,CAAC,CAAC,UAAU;GAC5D,cAAc,EAAE,KAAK;IAAC;IAAQ;IAAW;IAAQ,CAAC,CAAC,UAAU;GAC7D,SAAS,EAAE,KAAK;IAAC;IAAQ;IAAW;IAAQ,CAAC,CAAC,UAAU;GACxD,WAAW,EAAE,KAAK;IAAC;IAAQ;IAAW;IAAQ,CAAC,CAAC,UAAU;GAC3D,CAAC,CACD,QAAQ,CACR,UAAU;EACb,WAAW,EACR,OAAO;GACN,YAAY,EAAE,SAAS,CAAC,QAAQ,KAAK;GACrC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GAClD,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;GACjD,CAAC,CACD,QAAQ,CACR,UAAU;EACb,SAAS,EACN,OAAO;GACN,mBAAmB,EAAE,KAAK;IAAC;IAAQ;IAAY;IAAQ,CAAC,CAAC,QAAQ,OAAO;GACxE,sBAAsB,EAAE,KAAK;IAAC;IAAQ;IAAW;IAAQ,CAAC,CAAC,QAAQ,UAAU;GAC9E,CAAC,CACD,QAAQ,CACR,UAAU;EACb,iBAAiB,EACd,OAAO;GACN,gBAAgB,EACb,KAAK;IAAC;IAAe;IAAkB;IAAU;IAAc;IAAgB,CAAC,CAChF,QAAQ,SAAS;GACpB,eAAe,EACZ,KAAK;IAAC;IAAe;IAAkB;IAAiB;IAAc;IAAgB,CAAC,CACvF,QAAQ,cAAc;GACzB,qBAAqB,EAAE,SAAS,CAAC,QAAQ,MAAM;GAC/C,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;GACzD,gBAAgB,EACb,MACC,EAAE,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACD,CAAC,CACH,CACA,UAAU;GACd,CAAC,CACD,QAAQ,CACR,UAAU;EACb,UAAU;EACX,CAAC,CACD,QAAQ,CACR,QAAQ;EAAE,MAAM;EAAO,SAAS,CAAC,UAAU;EAAE,CAAC;AAEpC,wBAAuB,EACjC,OAAO;EACN,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EACrC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EAC9C,WAAW,EACR,MACC,EACG,OAAO;GACN,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;GACzB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;GAC5B,CAAC,CACD,QAAQ,CACZ,CACA,UAAU;EACd,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAED,wBAAuB,EACjC,OAAO;EACN,sBAAsB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;EAC5D,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;EACjD,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;EACnD,CAAC,CACD,QAAQ,CACR,QAAQ;EAAE,sBAAsB,EAAE;EAAE,WAAW,EAAE;EAAE,YAAY,EAAE;EAAE,CAAC;AAE1D,yBAAwB,EAClC,OAAO,EACN,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,EACxB,CAAC,CACD,QAAQ;AAEE,uBAAsB,EAChC,OAAO;EACN,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAChD,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EACjD,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;EAC/D,CAAC,CACD,QAAQ,CACR,UAAU;AAEA,sBAAqB,EAC/B,OAAO,EACN,oBAAoB,EAAE,QAAQ,CAAC,UAAU,EAC1C,CAAC,CACD,QAAQ,CACR,UAAU;AAEA,uBAAsB,EAChC,OAAO;EACN,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;EACvB,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;EACvB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,KAAK;EACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,SAAS;EACzC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC,CACD,QAAQ;AAEE,+BAA8B,EACxC,OAAO;EACN,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;EAC1C,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EAChD,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EAClD,CAAC,CACD,QAAQ;AAEE,uBAAsB,EAChC,OAAO;EACN,IAAI;EACJ,SAAS,EAAE,SAAS,CAAC,QAAQ,KAAK;EAClC,SAAS,EAAE,MAAM,SAAS,CAAC,UAAU;EACrC,UAAU;EACV,kBAAkB;EAClB,WAAW;EACX,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,QAAQ;EACR,WAAW;EACX,YAAY;EACZ,SAAS;EACT,QAAQ;EACT,CAAC,CACD,QAAQ;AAEE,0BAAyB,EACnC,OAAO;EACN,IAAI;EACJ,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;EACvB,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;EAC/C,SAAS,EAAE,MAAM,SAAS,CAAC,UAAU;EACrC,QAAQ,uBAAuB,UAAU;EACzC,OAAO,oBAAoB,UAAU;EACrC,QAAQ,kBAAkB,UAAU;EACpC,QAAQ,mBAAmB,UAAU;EACrC,WAAW,qBAAqB,UAAU;EAC1C,YAAY,qBAAqB,UAAU;EAC3C,SAAS;EACT,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU;EAC7C,CAAC,CACD,QAAQ"}

package/dist/src/agent-manifest/validator.d.ts

@@ -0,0 +1,24 @@
+import type { AgentManifest, CapabilityPreset, EffectiveAgentManifest } from './schema.js';
+export type ManifestIssueSeverity = 'error' | 'warning';
+export interface ManifestIssue {
+    severity: ManifestIssueSeverity;
+    path: string;
+    message: string;
+}
+export interface ManifestCatalogs {
+    tools?: Iterable<string>;
+    skills?: Iterable<string>;
+    workflows?: Iterable<string>;
+    mcpServers?: Iterable<string>;
+}
+export interface ValidateManifestParams {
+    agent: AgentManifest;
+    presets?: Record<string, CapabilityPreset>;
+    catalogs?: ManifestCatalogs;
+}
+export interface ValidateManifestResult {
+    ok: boolean;
+    manifest?: EffectiveAgentManifest;
+    issues: ManifestIssue[];
+}
+export declare function validateAgentManifest(params: ValidateManifestParams): ValidateManifestResult;

package/dist/src/agent-manifest/validator.js

@@ -0,0 +1,87 @@
+import { resolveEffectiveAgentManifest } from "./resolver.js";
+//#region src/agent-manifest/validator.ts
+function toSet(values) {
+	if (!values) return void 0;
+	return new Set([...values].map((value) => value.toLowerCase()));
+}
+function hasValue(set, value) {
+	return set === void 0 || set.has(value.toLowerCase());
+}
+function addIssue(issues, severity, path, message) {
+	issues.push({
+		severity,
+		path,
+		message
+	});
+}
+function validateModels(manifest, issues) {
+	if (!manifest.models.roles[manifest.models.defaultRole]) addIssue(issues, "error", "models.defaultRole", `defaultRole "${manifest.models.defaultRole}" does not exist in models.roles`);
+}
+function validateTools(manifest, issues, catalogs) {
+	const tools = toSet(catalogs.tools);
+	for (const [name, policy] of Object.entries(manifest.tools.builtin)) {
+		if (!hasValue(tools, name)) addIssue(issues, "error", `tools.builtin.${name}`, `tool "${name}" is not in the tool catalog`);
+		if (policy.mode === "allow" && policy.scope === "unrestricted") addIssue(issues, "warning", `tools.builtin.${name}.scope`, `tool "${name}" is unrestricted; consider using confirm or a narrower scope`);
+	}
+	const mcpServers = toSet(catalogs.mcpServers);
+	for (const serverName of Object.keys(manifest.tools.mcp?.servers ?? {})) if (!hasValue(mcpServers, serverName)) addIssue(issues, "error", `tools.mcp.servers.${serverName}`, `MCP server "${serverName}" is not configured`);
+}
+function validateSkills(manifest, issues, catalogs) {
+	const skills = toSet(catalogs.skills);
+	for (const name of manifest.skills.allow ?? []) if (!hasValue(skills, name)) addIssue(issues, "error", `skills.allow`, `skill "${name}" is not installed`);
+	for (const name of manifest.skills.deny ?? []) if (!hasValue(skills, name)) addIssue(issues, "warning", `skills.deny`, `skill "${name}" is not installed`);
+	if (manifest.skills.mode === "allowlist" && (manifest.skills.allow?.length ?? 0) === 0) addIssue(issues, "warning", "skills.allow", "allowlist mode has no allowed skills");
+}
+function validateMemory(manifest, issues) {
+	if (manifest.memory.mode === "off" && manifest.memory.sources.some((source) => source !== "session")) addIssue(issues, "warning", "memory.sources", "memory sources are configured while memory mode is off");
+	if (manifest.memory.mode === "auto") {
+		const privacy = manifest.memory.privacy;
+		if (!privacy || privacy.sensitiveWritePolicy === "allow") addIssue(issues, "warning", "memory.privacy", "auto memory writes should configure sensitiveWritePolicy");
+	}
+	if (manifest.memory.mode !== "off") {
+		const policy = manifest.memory.writePolicy ?? {};
+		if (!Object.values(policy).some(Boolean) && manifest.memory.mode !== "readOnly") addIssue(issues, "warning", "memory.writePolicy", "write-capable memory mode has no write policy");
+	}
+}
+function validateWorkflows(manifest, issues, catalogs) {
+	const workflows = toSet(catalogs.workflows);
+	const check = (path, value) => {
+		if (value && !hasValue(workflows, value)) addIssue(issues, "error", path, `workflow "${value}" is not in the workflow catalog`);
+	};
+	check("workflows.default", manifest.workflows.default);
+	for (const [index, value] of (manifest.workflows.allowed ?? []).entries()) check(`workflows.allowed.${index}`, value);
+	for (const [index, entry] of (manifest.workflows.suggested ?? []).entries()) check(`workflows.suggested.${index}.workflow`, entry.workflow);
+}
+function validateAgentManifest(params) {
+	const issues = [];
+	let manifest;
+	try {
+		manifest = resolveEffectiveAgentManifest({
+			agent: params.agent,
+			presets: params.presets
+		}).manifest;
+	} catch (error) {
+		return {
+			ok: false,
+			issues: [{
+				severity: "error",
+				path: "manifest",
+				message: error instanceof Error ? error.message : String(error)
+			}]
+		};
+	}
+	validateModels(manifest, issues);
+	validateTools(manifest, issues, params.catalogs ?? {});
+	validateSkills(manifest, issues, params.catalogs ?? {});
+	validateMemory(manifest, issues);
+	validateWorkflows(manifest, issues, params.catalogs ?? {});
+	return {
+		ok: issues.every((issue) => issue.severity !== "error"),
+		manifest,
+		issues
+	};
+}
+//#endregion
+export { validateAgentManifest };
+
+//# sourceMappingURL=validator.js.map

package/dist/src/agent-manifest/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","names":[],"sources":["../../../src/agent-manifest/validator.ts"],"sourcesContent":["import type { AgentManifest, CapabilityPreset, EffectiveAgentManifest } from './schema.js';\nimport { resolveEffectiveAgentManifest } from './resolver.js';\n\nexport type ManifestIssueSeverity = 'error' | 'warning';\n\nexport interface ManifestIssue {\n  severity: ManifestIssueSeverity;\n  path: string;\n  message: string;\n}\n\nexport interface ManifestCatalogs {\n  tools?: Iterable<string>;\n  skills?: Iterable<string>;\n  workflows?: Iterable<string>;\n  mcpServers?: Iterable<string>;\n}\n\nexport interface ValidateManifestParams {\n  agent: AgentManifest;\n  presets?: Record<string, CapabilityPreset>;\n  catalogs?: ManifestCatalogs;\n}\n\nexport interface ValidateManifestResult {\n  ok: boolean;\n  manifest?: EffectiveAgentManifest;\n  issues: ManifestIssue[];\n}\n\nfunction toSet(values: Iterable<string> | undefined): Set<string> | undefined {\n  if (!values) return undefined;\n  return new Set([...values].map((value) => value.toLowerCase()));\n}\n\nfunction hasValue(set: Set<string> | undefined, value: string): boolean {\n  return set === undefined || set.has(value.toLowerCase());\n}\n\nfunction addIssue(issues: ManifestIssue[], severity: ManifestIssueSeverity, path: string, message: string): void {\n  issues.push({ severity, path, message });\n}\n\nfunction validateModels(manifest: EffectiveAgentManifest, issues: ManifestIssue[]): void {\n  if (!manifest.models.roles[manifest.models.defaultRole]) {\n    addIssue(\n      issues,\n      'error',\n      'models.defaultRole',\n      `defaultRole \"${manifest.models.defaultRole}\" does not exist in models.roles`,\n    );\n  }\n}\n\nfunction validateTools(manifest: EffectiveAgentManifest, issues: ManifestIssue[], catalogs: ManifestCatalogs): void {\n  const tools = toSet(catalogs.tools);\n  for (const [name, policy] of Object.entries(manifest.tools.builtin)) {\n    if (!hasValue(tools, name)) {\n      addIssue(issues, 'error', `tools.builtin.${name}`, `tool \"${name}\" is not in the tool catalog`);\n    }\n    if (policy.mode === 'allow' && policy.scope === 'unrestricted') {\n      addIssue(\n        issues,\n        'warning',\n        `tools.builtin.${name}.scope`,\n        `tool \"${name}\" is unrestricted; consider using confirm or a narrower scope`,\n      );\n    }\n  }\n\n  const mcpServers = toSet(catalogs.mcpServers);\n  for (const serverName of Object.keys(manifest.tools.mcp?.servers ?? {})) {\n    if (!hasValue(mcpServers, serverName)) {\n      addIssue(issues, 'error', `tools.mcp.servers.${serverName}`, `MCP server \"${serverName}\" is not configured`);\n    }\n  }\n}\n\nfunction validateSkills(manifest: EffectiveAgentManifest, issues: ManifestIssue[], catalogs: ManifestCatalogs): void {\n  const skills = toSet(catalogs.skills);\n  for (const name of manifest.skills.allow ?? []) {\n    if (!hasValue(skills, name)) {\n      addIssue(issues, 'error', `skills.allow`, `skill \"${name}\" is not installed`);\n    }\n  }\n  for (const name of manifest.skills.deny ?? []) {\n    if (!hasValue(skills, name)) {\n      addIssue(issues, 'warning', `skills.deny`, `skill \"${name}\" is not installed`);\n    }\n  }\n  if (manifest.skills.mode === 'allowlist' && (manifest.skills.allow?.length ?? 0) === 0) {\n    addIssue(issues, 'warning', 'skills.allow', 'allowlist mode has no allowed skills');\n  }\n}\n\nfunction validateMemory(manifest: EffectiveAgentManifest, issues: ManifestIssue[]): void {\n  if (manifest.memory.mode === 'off' && manifest.memory.sources.some((source) => source !== 'session')) {\n    addIssue(issues, 'warning', 'memory.sources', 'memory sources are configured while memory mode is off');\n  }\n  if (manifest.memory.mode === 'auto') {\n    const privacy = manifest.memory.privacy;\n    if (!privacy || privacy.sensitiveWritePolicy === 'allow') {\n      addIssue(issues, 'warning', 'memory.privacy', 'auto memory writes should configure sensitiveWritePolicy');\n    }\n  }\n  if (manifest.memory.mode !== 'off') {\n    const policy = manifest.memory.writePolicy ?? {};\n    const hasWritePolicy = Object.values(policy).some(Boolean);\n    if (!hasWritePolicy && manifest.memory.mode !== 'readOnly') {\n      addIssue(issues, 'warning', 'memory.writePolicy', 'write-capable memory mode has no write policy');\n    }\n  }\n}\n\nfunction validateWorkflows(manifest: EffectiveAgentManifest, issues: ManifestIssue[], catalogs: ManifestCatalogs): void {\n  const workflows = toSet(catalogs.workflows);\n  const check = (path: string, value: string | undefined) => {\n    if (value && !hasValue(workflows, value)) {\n      addIssue(issues, 'error', path, `workflow \"${value}\" is not in the workflow catalog`);\n    }\n  };\n  check('workflows.default', manifest.workflows.default);\n  for (const [index, value] of (manifest.workflows.allowed ?? []).entries()) {\n    check(`workflows.allowed.${index}`, value);\n  }\n  for (const [index, entry] of (manifest.workflows.suggested ?? []).entries()) {\n    check(`workflows.suggested.${index}.workflow`, entry.workflow);\n  }\n}\n\nexport function validateAgentManifest(params: ValidateManifestParams): ValidateManifestResult {\n  const issues: ManifestIssue[] = [];\n  let manifest: EffectiveAgentManifest;\n  try {\n    manifest = resolveEffectiveAgentManifest({\n      agent: params.agent,\n      presets: params.presets,\n    }).manifest;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      issues: [{ severity: 'error', path: 'manifest', message }],\n    };\n  }\n\n  validateModels(manifest, issues);\n  validateTools(manifest, issues, params.catalogs ?? {});\n  validateSkills(manifest, issues, params.catalogs ?? {});\n  validateMemory(manifest, issues);\n  validateWorkflows(manifest, issues, params.catalogs ?? {});\n\n  return {\n    ok: issues.every((issue) => issue.severity !== 'error'),\n    manifest,\n    issues,\n  };\n}\n"],"mappings":";;AA8BA,SAAS,MAAM,QAA+D;AAC5E,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,UAAU,MAAM,aAAa,CAAC,CAAC;;AAGjE,SAAS,SAAS,KAA8B,OAAwB;AACtE,QAAO,QAAQ,KAAA,KAAa,IAAI,IAAI,MAAM,aAAa,CAAC;;AAG1D,SAAS,SAAS,QAAyB,UAAiC,MAAc,SAAuB;AAC/G,QAAO,KAAK;EAAE;EAAU;EAAM;EAAS,CAAC;;AAG1C,SAAS,eAAe,UAAkC,QAA+B;AACvF,KAAI,CAAC,SAAS,OAAO,MAAM,SAAS,OAAO,aACzC,UACE,QACA,SACA,sBACA,gBAAgB,SAAS,OAAO,YAAY,kCAC7C;;AAIL,SAAS,cAAc,UAAkC,QAAyB,UAAkC;CAClH,MAAM,QAAQ,MAAM,SAAS,MAAM;AACnC,MAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,SAAS,MAAM,QAAQ,EAAE;AACnE,MAAI,CAAC,SAAS,OAAO,KAAK,CACxB,UAAS,QAAQ,SAAS,iBAAiB,QAAQ,SAAS,KAAK,8BAA8B;AAEjG,MAAI,OAAO,SAAS,WAAW,OAAO,UAAU,eAC9C,UACE,QACA,WACA,iBAAiB,KAAK,SACtB,SAAS,KAAK,+DACf;;CAIL,MAAM,aAAa,MAAM,SAAS,WAAW;AAC7C,MAAK,MAAM,cAAc,OAAO,KAAK,SAAS,MAAM,KAAK,WAAW,EAAE,CAAC,CACrE,KAAI,CAAC,SAAS,YAAY,WAAW,CACnC,UAAS,QAAQ,SAAS,qBAAqB,cAAc,eAAe,WAAW,qBAAqB;;AAKlH,SAAS,eAAe,UAAkC,QAAyB,UAAkC;CACnH,MAAM,SAAS,MAAM,SAAS,OAAO;AACrC,MAAK,MAAM,QAAQ,SAAS,OAAO,SAAS,EAAE,CAC5C,KAAI,CAAC,SAAS,QAAQ,KAAK,CACzB,UAAS,QAAQ,SAAS,gBAAgB,UAAU,KAAK,oBAAoB;AAGjF,MAAK,MAAM,QAAQ,SAAS,OAAO,QAAQ,EAAE,CAC3C,KAAI,CAAC,SAAS,QAAQ,KAAK,CACzB,UAAS,QAAQ,WAAW,eAAe,UAAU,KAAK,oBAAoB;AAGlF,KAAI,SAAS,OAAO,SAAS,gBAAgB,SAAS,OAAO,OAAO,UAAU,OAAO,EACnF,UAAS,QAAQ,WAAW,gBAAgB,uCAAuC;;AAIvF,SAAS,eAAe,UAAkC,QAA+B;AACvF,KAAI,SAAS,OAAO,SAAS,SAAS,SAAS,OAAO,QAAQ,MAAM,WAAW,WAAW,UAAU,CAClG,UAAS,QAAQ,WAAW,kBAAkB,yDAAyD;AAEzG,KAAI,SAAS,OAAO,SAAS,QAAQ;EACnC,MAAM,UAAU,SAAS,OAAO;AAChC,MAAI,CAAC,WAAW,QAAQ,yBAAyB,QAC/C,UAAS,QAAQ,WAAW,kBAAkB,2DAA2D;;AAG7G,KAAI,SAAS,OAAO,SAAS,OAAO;EAClC,MAAM,SAAS,SAAS,OAAO,eAAe,EAAE;AAEhD,MAAI,CADmB,OAAO,OAAO,OAAO,CAAC,KAAK,QAC/B,IAAI,SAAS,OAAO,SAAS,WAC9C,UAAS,QAAQ,WAAW,sBAAsB,gDAAgD;;;AAKxG,SAAS,kBAAkB,UAAkC,QAAyB,UAAkC;CACtH,MAAM,YAAY,MAAM,SAAS,UAAU;CAC3C,MAAM,SAAS,MAAc,UAA8B;AACzD,MAAI,SAAS,CAAC,SAAS,WAAW,MAAM,CACtC,UAAS,QAAQ,SAAS,MAAM,aAAa,MAAM,kCAAkC;;AAGzF,OAAM,qBAAqB,SAAS,UAAU,QAAQ;AACtD,MAAK,MAAM,CAAC,OAAO,WAAW,SAAS,UAAU,WAAW,EAAE,EAAE,SAAS,CACvE,OAAM,qBAAqB,SAAS,MAAM;AAE5C,MAAK,MAAM,CAAC,OAAO,WAAW,SAAS,UAAU,aAAa,EAAE,EAAE,SAAS,CACzE,OAAM,uBAAuB,MAAM,YAAY,MAAM,SAAS;;AAIlE,SAAgB,sBAAsB,QAAwD;CAC5F,MAAM,SAA0B,EAAE;CAClC,IAAI;AACJ,KAAI;AACF,aAAW,8BAA8B;GACvC,OAAO,OAAO;GACd,SAAS,OAAO;GACjB,CAAC,CAAC;UACI,OAAO;AAEd,SAAO;GACL,IAAI;GACJ,QAAQ,CAAC;IAAE,UAAU;IAAS,MAAM;IAAY,SAHlC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAGX,CAAC;GAC3D;;AAGH,gBAAe,UAAU,OAAO;AAChC,eAAc,UAAU,QAAQ,OAAO,YAAY,EAAE,CAAC;AACtD,gBAAe,UAAU,QAAQ,OAAO,YAAY,EAAE,CAAC;AACvD,gBAAe,UAAU,OAAO;AAChC,mBAAkB,UAAU,QAAQ,OAAO,YAAY,EAAE,CAAC;AAE1D,QAAO;EACL,IAAI,OAAO,OAAO,UAAU,MAAM,aAAa,QAAQ;EACvD;EACA;EACD"}

package/dist/src/agent-runtime/boundary-guard.d.ts

@@ -0,0 +1,12 @@
+import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';
+export type BoundaryDecision = 'allow' | 'confirm' | 'deny' | 'escalate';
+export interface BoundaryCheckParams {
+    manifest: EffectiveAgentManifest;
+    action: string;
+    detail?: string;
+}
+export interface BoundaryCheckResult {
+    decision: BoundaryDecision;
+    matchedRule?: string;
+}
+export declare function checkBoundary(params: BoundaryCheckParams): BoundaryCheckResult;

package/dist/src/agent-runtime/boundary-guard.js

@@ -0,0 +1,23 @@
+//#region src/agent-runtime/boundary-guard.ts
+function matchesRule(action, detail, rule) {
+	return `${action}\n${detail ?? ""}`.toLowerCase().includes(rule.toLowerCase());
+}
+function checkBoundary(params) {
+	for (const rule of params.manifest.boundaries.forbidden) if (matchesRule(params.action, params.detail, rule)) return {
+		decision: "deny",
+		matchedRule: rule
+	};
+	for (const rule of params.manifest.boundaries.escalation) if (matchesRule(params.action, params.detail, rule)) return {
+		decision: "escalate",
+		matchedRule: rule
+	};
+	for (const rule of params.manifest.boundaries.requiresConfirmation) if (matchesRule(params.action, params.detail, rule)) return {
+		decision: "confirm",
+		matchedRule: rule
+	};
+	return { decision: "allow" };
+}
+//#endregion
+export { checkBoundary };
+
+//# sourceMappingURL=boundary-guard.js.map

package/dist/src/agent-runtime/boundary-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary-guard.js","names":[],"sources":["../../../src/agent-runtime/boundary-guard.ts"],"sourcesContent":["import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';\n\nexport type BoundaryDecision = 'allow' | 'confirm' | 'deny' | 'escalate';\n\nexport interface BoundaryCheckParams {\n  manifest: EffectiveAgentManifest;\n  action: string;\n  detail?: string;\n}\n\nexport interface BoundaryCheckResult {\n  decision: BoundaryDecision;\n  matchedRule?: string;\n}\n\nfunction matchesRule(action: string, detail: string | undefined, rule: string): boolean {\n  const haystack = `${action}\\n${detail ?? ''}`.toLowerCase();\n  return haystack.includes(rule.toLowerCase());\n}\n\nexport function checkBoundary(params: BoundaryCheckParams): BoundaryCheckResult {\n  for (const rule of params.manifest.boundaries.forbidden) {\n    if (matchesRule(params.action, params.detail, rule)) {\n      return { decision: 'deny', matchedRule: rule };\n    }\n  }\n  for (const rule of params.manifest.boundaries.escalation) {\n    if (matchesRule(params.action, params.detail, rule)) {\n      return { decision: 'escalate', matchedRule: rule };\n    }\n  }\n  for (const rule of params.manifest.boundaries.requiresConfirmation) {\n    if (matchesRule(params.action, params.detail, rule)) {\n      return { decision: 'confirm', matchedRule: rule };\n    }\n  }\n  return { decision: 'allow' };\n}\n"],"mappings":";AAeA,SAAS,YAAY,QAAgB,QAA4B,MAAuB;AAEtF,QADiB,GAAG,OAAO,IAAI,UAAU,KAAK,aAC/B,CAAC,SAAS,KAAK,aAAa,CAAC;;AAG9C,SAAgB,cAAc,QAAkD;AAC9E,MAAK,MAAM,QAAQ,OAAO,SAAS,WAAW,UAC5C,KAAI,YAAY,OAAO,QAAQ,OAAO,QAAQ,KAAK,CACjD,QAAO;EAAE,UAAU;EAAQ,aAAa;EAAM;AAGlD,MAAK,MAAM,QAAQ,OAAO,SAAS,WAAW,WAC5C,KAAI,YAAY,OAAO,QAAQ,OAAO,QAAQ,KAAK,CACjD,QAAO;EAAE,UAAU;EAAY,aAAa;EAAM;AAGtD,MAAK,MAAM,QAAQ,OAAO,SAAS,WAAW,qBAC5C,KAAI,YAAY,OAAO,QAAQ,OAAO,QAAQ,KAAK,CACjD,QAAO;EAAE,UAAU;EAAW,aAAa;EAAM;AAGrD,QAAO,EAAE,UAAU,SAAS"}

package/dist/src/agent-runtime/index.d.ts

@@ -0,0 +1,7 @@
+export * from './model-router.js';
+export * from './tool-registry.js';
+export * from './boundary-guard.js';
+export * from './memory-runtime.js';
+export * from './runtime-profile.js';
+export * from './run-trace.js';
+export * from './workflow-runtime.js';

package/dist/src/agent-runtime/index.js

@@ -0,0 +1,8 @@
+import { checkBoundary } from "./boundary-guard.js";
+import { resolveModelRole } from "./model-router.js";
+import { buildRuntimeToolRegistry } from "./tool-registry.js";
+import { buildMemoryRuntime } from "./memory-runtime.js";
+import { resolveWorkflow, validateWorkflowForRuntime } from "./workflow-runtime.js";
+import { buildAgentRuntimeProfile } from "./runtime-profile.js";
+import { appendAgentRunEvent, createAgentRunTrace, finishAgentRunTrace, hashEffectiveManifest } from "./run-trace.js";
+export { appendAgentRunEvent, buildAgentRuntimeProfile, buildMemoryRuntime, buildRuntimeToolRegistry, checkBoundary, createAgentRunTrace, finishAgentRunTrace, hashEffectiveManifest, resolveModelRole, resolveWorkflow, validateWorkflowForRuntime };

package/dist/src/agent-runtime/memory-runtime.d.ts

@@ -0,0 +1,21 @@
+import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';
+export type MemorySource = 'session' | 'userProfile' | 'agentProfile' | 'curated' | 'workspace';
+export type MemoryWriteTarget = 'userProfile' | 'agentProfile' | 'curated' | 'workspace';
+export type MemoryWriteDecision = 'allow' | 'confirm' | 'deny';
+export interface MemoryCandidate {
+    target: MemoryWriteTarget;
+    content: string;
+    source: string;
+    confidence?: number;
+    sensitive?: boolean;
+}
+export interface MemoryWriteCheckResult {
+    decision: MemoryWriteDecision;
+    reason: string;
+}
+export interface MemoryRuntime {
+    readableSources: MemorySource[];
+    canRead: (source: MemorySource) => boolean;
+    checkWrite: (candidate: MemoryCandidate) => MemoryWriteCheckResult;
+}
+export declare function buildMemoryRuntime(manifest: EffectiveAgentManifest): MemoryRuntime;

package/dist/src/agent-runtime/memory-runtime.js

@@ -0,0 +1,50 @@
+//#region src/agent-runtime/memory-runtime.ts
+const READ_ONLY_MODES = new Set(["readOnly"]);
+function normalizeConfidence(value) {
+	if (typeof value !== "number" || !Number.isFinite(value)) return .5;
+	return Math.max(0, Math.min(1, value));
+}
+function buildMemoryRuntime(manifest) {
+	const readableSources = manifest.memory.mode === "off" ? [] : [...manifest.memory.sources];
+	const sourceSet = new Set(readableSources);
+	return {
+		readableSources,
+		canRead: (source) => sourceSet.has(source),
+		checkWrite: (candidate) => {
+			if (manifest.memory.mode === "off") return {
+				decision: "deny",
+				reason: "memory is disabled"
+			};
+			if (READ_ONLY_MODES.has(manifest.memory.mode)) return {
+				decision: "deny",
+				reason: "memory is read-only"
+			};
+			if (!candidate.content.trim()) return {
+				decision: "deny",
+				reason: "memory content is empty"
+			};
+			if (normalizeConfidence(candidate.confidence) < .3) return {
+				decision: "deny",
+				reason: "memory confidence is too low"
+			};
+			const sensitivePolicy = manifest.memory.privacy?.sensitiveWritePolicy ?? "confirm";
+			if (candidate.sensitive && sensitivePolicy !== "allow") return {
+				decision: sensitivePolicy,
+				reason: "memory candidate is sensitive"
+			};
+			const targetPolicy = manifest.memory.writePolicy?.[candidate.target] ?? "deny";
+			if (manifest.memory.mode === "confirmWrite" && targetPolicy === "allow") return {
+				decision: "confirm",
+				reason: "agent memory mode requires confirmation"
+			};
+			return {
+				decision: targetPolicy,
+				reason: `target policy is ${targetPolicy}`
+			};
+		}
+	};
+}
+//#endregion
+export { buildMemoryRuntime };
+
+//# sourceMappingURL=memory-runtime.js.map

package/dist/src/agent-runtime/memory-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-runtime.js","names":[],"sources":["../../../src/agent-runtime/memory-runtime.ts"],"sourcesContent":["import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';\n\nexport type MemorySource = 'session' | 'userProfile' | 'agentProfile' | 'curated' | 'workspace';\nexport type MemoryWriteTarget = 'userProfile' | 'agentProfile' | 'curated' | 'workspace';\nexport type MemoryWriteDecision = 'allow' | 'confirm' | 'deny';\n\nexport interface MemoryCandidate {\n  target: MemoryWriteTarget;\n  content: string;\n  source: string;\n  confidence?: number;\n  sensitive?: boolean;\n}\n\nexport interface MemoryWriteCheckResult {\n  decision: MemoryWriteDecision;\n  reason: string;\n}\n\nexport interface MemoryRuntime {\n  readableSources: MemorySource[];\n  canRead: (source: MemorySource) => boolean;\n  checkWrite: (candidate: MemoryCandidate) => MemoryWriteCheckResult;\n}\n\nconst READ_ONLY_MODES = new Set(['readOnly']);\n\nfunction normalizeConfidence(value: number | undefined): number {\n  if (typeof value !== 'number' || !Number.isFinite(value)) return 0.5;\n  return Math.max(0, Math.min(1, value));\n}\n\nexport function buildMemoryRuntime(manifest: EffectiveAgentManifest): MemoryRuntime {\n  const readableSources = manifest.memory.mode === 'off' ? [] : [...manifest.memory.sources];\n  const sourceSet = new Set<MemorySource>(readableSources);\n\n  return {\n    readableSources,\n    canRead: (source) => sourceSet.has(source),\n    checkWrite: (candidate) => {\n      if (manifest.memory.mode === 'off') {\n        return { decision: 'deny', reason: 'memory is disabled' };\n      }\n      if (READ_ONLY_MODES.has(manifest.memory.mode)) {\n        return { decision: 'deny', reason: 'memory is read-only' };\n      }\n      if (!candidate.content.trim()) {\n        return { decision: 'deny', reason: 'memory content is empty' };\n      }\n      const confidence = normalizeConfidence(candidate.confidence);\n      if (confidence < 0.3) {\n        return { decision: 'deny', reason: 'memory confidence is too low' };\n      }\n      const sensitivePolicy = manifest.memory.privacy?.sensitiveWritePolicy ?? 'confirm';\n      if (candidate.sensitive && sensitivePolicy !== 'allow') {\n        return {\n          decision: sensitivePolicy,\n          reason: 'memory candidate is sensitive',\n        };\n      }\n      const targetPolicy = manifest.memory.writePolicy?.[candidate.target] ?? 'deny';\n      if (manifest.memory.mode === 'confirmWrite' && targetPolicy === 'allow') {\n        return { decision: 'confirm', reason: 'agent memory mode requires confirmation' };\n      }\n      return {\n        decision: targetPolicy,\n        reason: `target policy is ${targetPolicy}`,\n      };\n    },\n  };\n}\n"],"mappings":";AAyBA,MAAM,kBAAkB,IAAI,IAAI,CAAC,WAAW,CAAC;AAE7C,SAAS,oBAAoB,OAAmC;AAC9D,KAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,MAAM,CAAE,QAAO;AACjE,QAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,MAAM,CAAC;;AAGxC,SAAgB,mBAAmB,UAAiD;CAClF,MAAM,kBAAkB,SAAS,OAAO,SAAS,QAAQ,EAAE,GAAG,CAAC,GAAG,SAAS,OAAO,QAAQ;CAC1F,MAAM,YAAY,IAAI,IAAkB,gBAAgB;AAExD,QAAO;EACL;EACA,UAAU,WAAW,UAAU,IAAI,OAAO;EAC1C,aAAa,cAAc;AACzB,OAAI,SAAS,OAAO,SAAS,MAC3B,QAAO;IAAE,UAAU;IAAQ,QAAQ;IAAsB;AAE3D,OAAI,gBAAgB,IAAI,SAAS,OAAO,KAAK,CAC3C,QAAO;IAAE,UAAU;IAAQ,QAAQ;IAAuB;AAE5D,OAAI,CAAC,UAAU,QAAQ,MAAM,CAC3B,QAAO;IAAE,UAAU;IAAQ,QAAQ;IAA2B;AAGhE,OADmB,oBAAoB,UAAU,WACnC,GAAG,GACf,QAAO;IAAE,UAAU;IAAQ,QAAQ;IAAgC;GAErE,MAAM,kBAAkB,SAAS,OAAO,SAAS,wBAAwB;AACzE,OAAI,UAAU,aAAa,oBAAoB,QAC7C,QAAO;IACL,UAAU;IACV,QAAQ;IACT;GAEH,MAAM,eAAe,SAAS,OAAO,cAAc,UAAU,WAAW;AACxE,OAAI,SAAS,OAAO,SAAS,kBAAkB,iBAAiB,QAC9D,QAAO;IAAE,UAAU;IAAW,QAAQ;IAA2C;AAEnF,UAAO;IACL,UAAU;IACV,QAAQ,oBAAoB;IAC7B;;EAEJ"}

package/dist/src/agent-runtime/model-router.d.ts

@@ -0,0 +1,11 @@
+import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';
+export interface ResolveModelRoleParams {
+    manifest: EffectiveAgentManifest;
+    role?: string;
+}
+export interface ResolvedModelRole {
+    role: string;
+    model: string;
+    description?: string;
+}
+export declare function resolveModelRole(params: ResolveModelRoleParams): ResolvedModelRole;

package/dist/src/agent-runtime/model-router.js

@@ -0,0 +1,16 @@
+//#region src/agent-runtime/model-router.ts
+function resolveModelRole(params) {
+	const requested = params.role?.trim() || params.manifest.models.defaultRole;
+	const role = params.manifest.models.roles[requested] ? requested : params.manifest.models.defaultRole;
+	const entry = params.manifest.models.roles[role];
+	if (!entry) throw new Error(`Model role "${role}" is not configured`);
+	return {
+		role,
+		model: entry.model,
+		...entry.description !== void 0 ? { description: entry.description } : {}
+	};
+}
+//#endregion
+export { resolveModelRole };
+
+//# sourceMappingURL=model-router.js.map

package/dist/src/agent-runtime/model-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-router.js","names":[],"sources":["../../../src/agent-runtime/model-router.ts"],"sourcesContent":["import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';\n\nexport interface ResolveModelRoleParams {\n  manifest: EffectiveAgentManifest;\n  role?: string;\n}\n\nexport interface ResolvedModelRole {\n  role: string;\n  model: string;\n  description?: string;\n}\n\nexport function resolveModelRole(params: ResolveModelRoleParams): ResolvedModelRole {\n  const requested = params.role?.trim() || params.manifest.models.defaultRole;\n  const role = params.manifest.models.roles[requested] ? requested : params.manifest.models.defaultRole;\n  const entry = params.manifest.models.roles[role];\n  if (!entry) {\n    throw new Error(`Model role \"${role}\" is not configured`);\n  }\n  return {\n    role,\n    model: entry.model,\n    ...(entry.description !== undefined ? { description: entry.description } : {}),\n  };\n}\n"],"mappings":";AAaA,SAAgB,iBAAiB,QAAmD;CAClF,MAAM,YAAY,OAAO,MAAM,MAAM,IAAI,OAAO,SAAS,OAAO;CAChE,MAAM,OAAO,OAAO,SAAS,OAAO,MAAM,aAAa,YAAY,OAAO,SAAS,OAAO;CAC1F,MAAM,QAAQ,OAAO,SAAS,OAAO,MAAM;AAC3C,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,eAAe,KAAK,qBAAqB;AAE3D,QAAO;EACL;EACA,OAAO,MAAM;EACb,GAAI,MAAM,gBAAgB,KAAA,IAAY,EAAE,aAAa,MAAM,aAAa,GAAG,EAAE;EAC9E"}

package/dist/src/agent-runtime/run-trace.d.ts

@@ -0,0 +1,27 @@
+import type { EffectiveAgentManifest } from '../agent-manifest/schema.js';
+export type AgentRunStatus = 'running' | 'completed' | 'failed' | 'cancelled';
+export type AgentRunEventType = 'run.started' | 'model.selected' | 'tool.called' | 'memory.read' | 'memory.write.checked' | 'workflow.selected' | 'boundary.checked' | 'run.completed' | 'run.failed';
+export interface AgentRunEvent {
+    id: string;
+    runId: string;
+    type: AgentRunEventType;
+    payload: Record<string, unknown>;
+    createdAt: string;
+}
+export interface AgentRunTrace {
+    id: string;
+    agentId: string;
+    status: AgentRunStatus;
+    effectiveManifestHash: string;
+    startedAt: string;
+    endedAt?: string;
+    events: AgentRunEvent[];
+}
+export declare function hashEffectiveManifest(manifest: EffectiveAgentManifest): string;
+export declare function createAgentRunTrace(params: {
+    agentId: string;
+    manifest: EffectiveAgentManifest;
+    now?: Date;
+}): AgentRunTrace;
+export declare function appendAgentRunEvent(trace: AgentRunTrace, type: AgentRunEventType, payload: Record<string, unknown>, now?: Date): AgentRunTrace;
+export declare function finishAgentRunTrace(trace: AgentRunTrace, status: Exclude<AgentRunStatus, 'running'>, payload?: Record<string, unknown>, now?: Date): AgentRunTrace;