agentcorp-broker 0.1.0-alpha.1

package/dist/mcp.js

@@ -0,0 +1,215 @@
+import { McpServer } from "@modelcontextprotocol/server";
+import * as z from "zod/v4";
+import { AgentCorpError } from "./errors.js";
+import { MessageTypeSchema, TaskStatusSchema } from "./types.js";
+function result(value) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(value, null, 2) }],
+    };
+}
+function failure(error) {
+    const known = error instanceof AgentCorpError;
+    const message = error instanceof Error ? error.message : String(error);
+    return {
+        isError: true,
+        content: [{
+                type: "text",
+                text: JSON.stringify({ error: known ? error.code : "INTERNAL_ERROR", message }),
+            }],
+    };
+}
+function guarded(operation) {
+    try {
+        return result(operation());
+    }
+    catch (error) {
+        return failure(error);
+    }
+}
+export function createMcpServer(broker, callerRole, agentId) {
+    const role = broker.getRole(callerRole);
+    const maxPageSize = broker.database.maxPageSize;
+    const server = new McpServer({ name: "agentcorp", version: "0.1.0" });
+    server.registerTool("register_role", {
+        title: "Register this agent connection",
+        description: "Bind this role-scoped MCP connection to an agent instance. Capabilities may only be reduced, never escalated.",
+        inputSchema: z.object({
+            capabilities: z.array(z.string()).optional(),
+        }),
+    }, ({ capabilities }) => guarded(() => broker.registerRole(callerRole, agentId, capabilities ?? role.capabilities)));
+    server.registerTool("whoami", {
+        title: "Inspect the bound AgentCorp role",
+        description: "Return the immutable role identity and permissions for this MCP connection.",
+        inputSchema: z.object({}),
+    }, () => guarded(() => {
+        broker.touchPresence(callerRole);
+        return { role, agentId, company: broker.config.company.name };
+    }));
+    server.registerTool("create_task", {
+        title: "Create a coordinated task",
+        description: "Create a task, optionally assigning it to an allowed peer role.",
+        inputSchema: z.object({
+            title: z.string().min(1),
+            description: z.string().optional(),
+            assigned_to: z.string().optional(),
+            idempotency_key: z.string().optional(),
+        }),
+    }, (input) => guarded(() => broker.createTask(callerRole, {
+        title: input.title,
+        ...(input.description === undefined ? {} : { description: input.description }),
+        ...(input.assigned_to === undefined ? {} : { assignedTo: input.assigned_to }),
+        ...(input.idempotency_key === undefined ? {} : { idempotencyKey: input.idempotency_key }),
+    })));
+    server.registerTool("list_tasks", {
+        title: "List visible tasks",
+        description: "List tasks in which the bound role participates.",
+        inputSchema: z.object({
+            limit: z.number().int().positive().max(maxPageSize).optional(),
+            cursor: z.string().optional(),
+            envelope: z.boolean().optional(),
+        }),
+    }, (input) => guarded(() => {
+        if (input?.envelope)
+            return broker.listTasksPaginated(callerRole, input);
+        return broker.listTasks(callerRole, input);
+    }));
+    server.registerTool("get_work_queue", {
+        title: "Get the role's prioritized work queue",
+        description: "Return unread messages, active tasks, and ordered next actions in one call. Use this at session start and after every handoff or status change.",
+        inputSchema: z.object({}),
+    }, () => guarded(() => broker.getWorkQueue(callerRole)));
+    server.registerTool("send_message", {
+        title: "Send a typed agent message",
+        description: "Submit a typed message through route validation and the approval policy engine.",
+        inputSchema: z.object({
+            to_role: z.string().min(1),
+            type: MessageTypeSchema,
+            payload: z.unknown(),
+            task_id: z.string().optional(),
+            references: z.array(z.string()).default([]),
+            risk_tags: z.array(z.string()).default([]),
+            in_reply_to: z.string().optional(),
+            idempotency_key: z.string().optional(),
+        }),
+    }, (input) => guarded(() => broker.sendMessage(callerRole, {
+        toRole: input.to_role,
+        type: input.type,
+        payload: input.payload,
+        references: input.references,
+        riskTags: input.risk_tags,
+        ...(input.task_id === undefined ? {} : { taskId: input.task_id }),
+        ...(input.in_reply_to === undefined ? {} : { inReplyTo: input.in_reply_to }),
+        ...(input.idempotency_key === undefined ? {} : { idempotencyKey: input.idempotency_key }),
+    })));
+    server.registerTool("get_inbox", {
+        title: "Read delivered messages",
+        description: "Return only approved or delivered messages addressed to the bound role.",
+        inputSchema: z.object({
+            limit: z.number().int().positive().max(maxPageSize).optional(),
+            cursor: z.string().optional(),
+            envelope: z.boolean().optional(),
+        }),
+    }, (input) => guarded(() => {
+        if (input?.envelope)
+            return broker.getInboxPaginated(callerRole, input);
+        return broker.getInbox(callerRole, input);
+    }));
+    server.registerTool("acknowledge_message", {
+        title: "Acknowledge a message",
+        description: "Mark a delivered message as acknowledged by its recipient.",
+        inputSchema: z.object({ message_id: z.string().min(1) }),
+    }, ({ message_id }) => guarded(() => broker.acknowledgeMessage(callerRole, message_id)));
+    server.registerTool("accept_handoff", {
+        title: "Accept an approved task handoff",
+        description: "Idempotently acknowledge a delivered proposal and start its assigned task. If starting work is policy-gated, one task approval is requested and retries do not duplicate it.",
+        inputSchema: z.object({
+            message_id: z.string().min(1),
+            idempotency_key: z.string().optional(),
+        }),
+    }, ({ message_id, idempotency_key }) => guarded(() => broker.acceptHandoff(callerRole, message_id, idempotency_key)));
+    server.registerTool("get_thread", {
+        title: "Read a task thread",
+        description: "Return the task message history visible to the bound role.",
+        inputSchema: z.object({
+            task_id: z.string().min(1),
+            limit: z.number().int().positive().max(maxPageSize).optional(),
+            cursor: z.string().optional(),
+            envelope: z.boolean().optional(),
+        }),
+    }, (input) => guarded(() => {
+        if (input.envelope)
+            return broker.getThreadPaginated(callerRole, input.task_id, input);
+        return broker.getThread(callerRole, input.task_id, input);
+    }));
+    server.registerTool("create_artifact", {
+        title: "Create an access-controlled artifact",
+        description: "Store content or a content URI with role-scoped visibility.",
+        inputSchema: z.object({
+            type: z.string().min(1),
+            name: z.string().min(1),
+            content: z.string().optional(),
+            content_uri: z.string().optional(),
+            visible_to_roles: z.union([z.literal("all"), z.array(z.string())]).optional(),
+            related_task_id: z.string().optional(),
+            idempotency_key: z.string().optional(),
+        }),
+    }, (input) => guarded(() => broker.createArtifact(callerRole, {
+        type: input.type,
+        name: input.name,
+        ...(input.content === undefined ? {} : { content: input.content }),
+        ...(input.content_uri === undefined ? {} : { contentUri: input.content_uri }),
+        ...(input.visible_to_roles === undefined ? {} : { visibleToRoles: input.visible_to_roles }),
+        ...(input.related_task_id === undefined ? {} : { relatedTaskId: input.related_task_id }),
+        ...(input.idempotency_key === undefined ? {} : { idempotencyKey: input.idempotency_key }),
+    })));
+    server.registerTool("list_artifacts", {
+        title: "List visible artifacts",
+        description: "List artifact metadata after applying the bound role's visibility rules.",
+        inputSchema: z.object({
+            task_id: z.string().optional(),
+            limit: z.number().int().positive().max(maxPageSize).optional(),
+            cursor: z.string().optional(),
+            envelope: z.boolean().optional(),
+        }),
+    }, (input) => guarded(() => {
+        if (input?.envelope)
+            return broker.listArtifactsPaginated(callerRole, input?.task_id, input);
+        return broker.listArtifacts(callerRole, input?.task_id, input);
+    }));
+    server.registerTool("get_artifact", {
+        title: "Read a visible artifact",
+        description: "Retrieve artifact content after a server-side role visibility check.",
+        inputSchema: z.object({ artifact_id: z.string().min(1) }),
+    }, ({ artifact_id }) => guarded(() => broker.getArtifact(callerRole, artifact_id)));
+    server.registerTool("update_task_status", {
+        title: "Request a task state transition",
+        description: "Validate a lifecycle transition and route it through the approval policy engine.",
+        inputSchema: z.object({
+            task_id: z.string().min(1),
+            new_status: TaskStatusSchema.optional(),
+            status: TaskStatusSchema.optional(),
+            risk_tags: z.array(z.string()).default([]),
+            idempotency_key: z.string().optional(),
+        }).refine((data) => Boolean(data.new_status || data.status), {
+            message: "Provide new_status or status",
+        }),
+    }, (input) => guarded(() => {
+        const targetStatus = (input.new_status ?? input.status);
+        return broker.updateTaskStatus(callerRole, input.task_id, targetStatus, input.risk_tags, input.idempotency_key);
+    }));
+    server.registerTool("get_operation", {
+        title: "Get operation by idempotency key",
+        description: "Lookup a previously executed idempotent operation result by its idempotency key.",
+        inputSchema: z.object({
+            idempotency_key: z.string().min(1),
+        }),
+    }, ({ idempotency_key }) => guarded(() => {
+        const record = broker.getOperation(callerRole, idempotency_key);
+        if (!record) {
+            return { found: false, message: `Operation for key '${idempotency_key}' not found.` };
+        }
+        return { found: true, operation: record };
+    }));
+    return server;
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,KAAK,GAAG,KAAK,YAAY,cAAc,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC;aAChF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAI,SAAkB;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAuB,EACvB,UAAkB,EAClB,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAEtE,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,+GAA+G;QAC5H,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC7C,CAAC;KACH,EACD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CACrD,UAAU,EACV,OAAO,EACP,YAAY,IAAI,IAAI,CAAC,YAAY,CAClC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,6EAA6E;QAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1B,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACjB,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACvC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE;QACrD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7E,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;KAC1F,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;YAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACjC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtB,IAAI,KAAK,EAAE,QAAQ;YAAE,OAAO,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,iJAAiJ;QAC9J,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1B,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CACrD,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACvC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE;QACtD,MAAM,EAAE,KAAK,CAAC,OAAO;QACrB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,SAAS;QACzB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5E,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;KAC1F,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;YAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACjC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtB,IAAI,KAAK,EAAE,QAAQ;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,EACD,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CACrF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,8KAA8K;QAC3L,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACvC,CAAC;KACH,EACD,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAClH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;YAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACjC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtB,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC7E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACvC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7E,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3F,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;QACxF,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;KAC1F,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,0EAA0E;QACvF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;YAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACjC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtB,IAAI,KAAK,EAAE,QAAQ;YAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,sEAAsE;QACnF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,EACD,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAChF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;YACvC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;YACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACvC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE;YAC3D,OAAO,EAAE,8BAA8B;SACxC,CAAC;KACH,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACtB,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAE,CAAC;QACzD,OAAO,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAClH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACnC,CAAC;KACH,EACD,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,eAAe,cAAc,EAAE,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/migrations.d.ts

@@ -0,0 +1,13 @@
+import { DatabaseSync } from "node:sqlite";
+export interface Migration {
+    version: number;
+    name: string;
+    up: (db: DatabaseSync) => void;
+}
+export declare const MIGRATIONS: Migration[];
+export declare function ensureMigrationTable(db: DatabaseSync): void;
+export declare function getCurrentSchemaVersion(db: DatabaseSync): number;
+export declare function runMigrations(db: DatabaseSync): {
+    applied: number[];
+    currentVersion: number;
+};

package/dist/migrations.js

@@ -0,0 +1,266 @@
+import { AgentCorpError } from "./errors.js";
+export const MIGRATIONS = [
+    {
+        version: 1,
+        name: "initial_schema",
+        up: (db) => {
+            db.exec(`
+        CREATE TABLE IF NOT EXISTS role_bindings (
+          role_id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          capabilities TEXT NOT NULL,
+          connected_at TEXT NOT NULL
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS tasks (
+          task_id TEXT PRIMARY KEY,
+          title TEXT NOT NULL,
+          description TEXT,
+          created_by TEXT NOT NULL,
+          assigned_to TEXT,
+          status TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS messages (
+          message_id TEXT PRIMARY KEY,
+          task_id TEXT REFERENCES tasks(task_id),
+          from_role TEXT NOT NULL,
+          to_role TEXT NOT NULL,
+          type TEXT NOT NULL,
+          payload TEXT NOT NULL,
+          references_json TEXT NOT NULL,
+          in_reply_to TEXT REFERENCES messages(message_id),
+          status TEXT NOT NULL,
+          risk_tags TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          resolved_at TEXT
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS message_events (
+          event_id TEXT PRIMARY KEY,
+          message_id TEXT NOT NULL REFERENCES messages(message_id),
+          status TEXT NOT NULL,
+          actor TEXT NOT NULL,
+          note TEXT,
+          created_at TEXT NOT NULL
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS artifacts (
+          artifact_id TEXT PRIMARY KEY,
+          type TEXT NOT NULL,
+          name TEXT NOT NULL,
+          produced_by TEXT NOT NULL,
+          content TEXT,
+          content_uri TEXT,
+          content_hash TEXT NOT NULL,
+          visible_to_roles TEXT NOT NULL,
+          related_task_id TEXT REFERENCES tasks(task_id),
+          created_at TEXT NOT NULL
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS policies (
+          policy_id TEXT PRIMARY KEY,
+          subject TEXT NOT NULL,
+          priority INTEGER NOT NULL,
+          from_role TEXT,
+          to_role TEXT,
+          message_type TEXT,
+          risk_tags TEXT,
+          from_status TEXT,
+          to_status TEXT,
+          action TEXT NOT NULL,
+          delegate_role TEXT,
+          enabled INTEGER NOT NULL,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS approvals (
+          approval_id TEXT PRIMARY KEY,
+          subject TEXT NOT NULL,
+          subject_id TEXT NOT NULL,
+          requested_by TEXT NOT NULL,
+          status TEXT NOT NULL,
+          context TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          decided_at TEXT,
+          decision_note TEXT,
+          edited_payload TEXT
+        ) STRICT;
+
+        CREATE TABLE IF NOT EXISTS task_transitions (
+          transition_id TEXT PRIMARY KEY,
+          task_id TEXT NOT NULL REFERENCES tasks(task_id),
+          from_status TEXT NOT NULL,
+          to_status TEXT NOT NULL,
+          requested_by TEXT NOT NULL,
+          status TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          resolved_at TEXT
+        ) STRICT;
+
+        CREATE INDEX IF NOT EXISTS idx_messages_inbox ON messages(to_role, status, created_at);
+        CREATE INDEX IF NOT EXISTS idx_messages_task ON messages(task_id, created_at);
+        CREATE INDEX IF NOT EXISTS idx_artifacts_task ON artifacts(related_task_id, created_at);
+        CREATE INDEX IF NOT EXISTS idx_approvals_status ON approvals(status, created_at);
+      `);
+        },
+    },
+    {
+        version: 2,
+        name: "tighten_default_policies",
+        up: (db) => {
+            const legacy = db.prepare("SELECT * FROM policies WHERE policy_id = 'allow-read-only-messages' AND message_type IS NULL").get();
+            if (legacy) {
+                db.prepare("DELETE FROM policies WHERE policy_id = 'allow-read-only-messages' AND message_type IS NULL").run();
+                const now = new Date().toISOString();
+                const insert = db.prepare(`
+          INSERT OR IGNORE INTO policies (policy_id, subject, priority, message_type, risk_tags, action, enabled, created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `);
+                insert.run("gate-critical-proposals", "message", 200, "proposal", null, "require_human", 1, now, now);
+                insert.run("allow-read-only-status-updates", "message", 100, "status_update", JSON.stringify(["read_only"]), "auto_approve", 1, now, now);
+                insert.run("allow-read-only-reports", "message", 100, "report", JSON.stringify(["read_only"]), "auto_approve", 1, now, now);
+            }
+        },
+    },
+    {
+        version: 3,
+        name: "add_pagination_indexes",
+        up: (db) => {
+            db.exec(`
+        CREATE INDEX IF NOT EXISTS idx_tasks_updated_at ON tasks(updated_at, task_id);
+        CREATE INDEX IF NOT EXISTS idx_tasks_created_at ON tasks(created_at, task_id);
+        CREATE INDEX IF NOT EXISTS idx_messages_created_at ON messages(created_at, message_id);
+        CREATE INDEX IF NOT EXISTS idx_artifacts_created_at ON artifacts(created_at, artifact_id);
+      `);
+        },
+    },
+    {
+        version: 4,
+        name: "add_maintenance_log",
+        up: (db) => {
+            db.exec(`
+        CREATE TABLE IF NOT EXISTS maintenance_log (
+          id TEXT PRIMARY KEY,
+          action TEXT NOT NULL,
+          details_json TEXT NOT NULL,
+          created_at TEXT NOT NULL
+        ) STRICT;
+        CREATE INDEX IF NOT EXISTS idx_maintenance_log_created_at ON maintenance_log(created_at, id);
+      `);
+        },
+    },
+    {
+        version: 5,
+        name: "add_submission_auto_approve_policy",
+        up: (db) => {
+            const now = new Date().toISOString();
+            db.prepare(`
+        INSERT OR IGNORE INTO policies (
+          policy_id, subject, priority, from_status, to_status, action, enabled, created_at, updated_at
+        ) VALUES (
+          'auto-approve-review-submission', 'task', 150, 'in_progress', 'awaiting_review', 'auto_approve', 1, ?, ?
+        )
+      `).run(now, now);
+        },
+    },
+    {
+        version: 6,
+        name: "add_idempotency_and_presence",
+        up: (db) => {
+            db.exec(`
+        CREATE TABLE IF NOT EXISTS idempotency_keys (
+          key TEXT PRIMARY KEY,
+          role_id TEXT NOT NULL,
+          operation TEXT NOT NULL,
+          request_hash TEXT,
+          response_json TEXT NOT NULL,
+          created_at TEXT NOT NULL
+        ) STRICT;
+
+        CREATE INDEX IF NOT EXISTS idx_idempotency_role ON idempotency_keys(role_id, created_at);
+      `);
+            const cols = db.prepare("PRAGMA table_info(role_bindings)").all();
+            const hasLastSeen = cols.some((col) => col.name === "last_seen_at");
+            if (!hasLastSeen) {
+                db.exec("ALTER TABLE role_bindings ADD COLUMN last_seen_at TEXT");
+            }
+        },
+    },
+    {
+        version: 7,
+        name: "fix_idempotency_composite_key",
+        up: (db) => {
+            db.exec(`
+        CREATE TABLE IF NOT EXISTS idempotency_keys_new (
+          role_id TEXT NOT NULL,
+          key TEXT NOT NULL,
+          operation TEXT NOT NULL,
+          request_hash TEXT,
+          response_json TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          PRIMARY KEY (role_id, key)
+        ) STRICT;
+
+        INSERT OR IGNORE INTO idempotency_keys_new (role_id, key, operation, request_hash, response_json, created_at)
+        SELECT role_id, key, operation, request_hash, response_json, created_at FROM idempotency_keys;
+
+        DROP TABLE idempotency_keys;
+
+        ALTER TABLE idempotency_keys_new RENAME TO idempotency_keys;
+
+        CREATE INDEX IF NOT EXISTS idx_idempotency_role ON idempotency_keys(role_id, created_at);
+      `);
+        },
+    },
+];
+export function ensureMigrationTable(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      version INTEGER PRIMARY KEY,
+      name TEXT NOT NULL DEFAULT 'legacy',
+      applied_at TEXT NOT NULL
+    ) STRICT;
+  `);
+    // Handle legacy v0.1 databases where schema_migrations was created without the 'name' column
+    const cols = db.prepare("PRAGMA table_info(schema_migrations)").all();
+    const hasName = cols.some((col) => col.name === "name");
+    if (!hasName) {
+        db.exec("ALTER TABLE schema_migrations ADD COLUMN name TEXT NOT NULL DEFAULT 'legacy'");
+    }
+}
+export function getCurrentSchemaVersion(db) {
+    ensureMigrationTable(db);
+    const row = db.prepare("SELECT MAX(version) AS max_version FROM schema_migrations").get();
+    return row?.max_version ?? 0;
+}
+export function runMigrations(db) {
+    ensureMigrationTable(db);
+    const current = getCurrentSchemaVersion(db);
+    const maxAvailable = MIGRATIONS.length > 0 ? Math.max(...MIGRATIONS.map((m) => m.version)) : 0;
+    if (current > maxAvailable) {
+        throw new AgentCorpError("UNSUPPORTED_SCHEMA_VERSION", `Database schema version ${current} is higher than maximum supported version ${maxAvailable}`);
+    }
+    const applied = [];
+    for (const migration of MIGRATIONS) {
+        if (migration.version > current) {
+            db.exec("BEGIN IMMEDIATE");
+            try {
+                migration.up(db);
+                db.prepare("INSERT INTO schema_migrations (version, name, applied_at) VALUES (?, ?, ?)")
+                    .run(migration.version, migration.name, new Date().toISOString());
+                db.exec("COMMIT");
+                applied.push(migration.version);
+            }
+            catch (err) {
+                db.exec("ROLLBACK");
+                throw err;
+            }
+        }
+    }
+    return { applied, currentVersion: getCurrentSchemaVersion(db) };
+}
+//# sourceMappingURL=migrations.js.map

package/dist/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAQ7C,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqGP,CAAC,CAAC;QACL,CAAC;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,0BAA0B;QAChC,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,8FAA8F,CAAC,CAAC,GAAG,EAAE,CAAC;YAChI,IAAI,MAAM,EAAE,CAAC;gBACX,EAAE,CAAC,OAAO,CAAC,4FAA4F,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC/G,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;SAGzB,CAAC,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACtG,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC1I,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,wBAAwB;QAC9B,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,EAAE,CAAC,IAAI,CAAC;;;;;OAKP,CAAC,CAAC;QACL,CAAC;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,qBAAqB;QAC3B,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,EAAE,CAAC,IAAI,CAAC;;;;;;;;OAQP,CAAC,CAAC;QACL,CAAC;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,oCAAoC;QAC1C,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,EAAE,CAAC,OAAO,CAAC;;;;;;OAMV,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnB,CAAC;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,8BAA8B;QACpC,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;OAWP,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAA6B,CAAC;YAC7F,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACpE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,+BAA+B;QACrC,EAAE,EAAE,CAAC,EAAgB,EAAE,EAAE;YACvB,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;OAmBP,CAAC,CAAC;QACL,CAAC;KACF;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,EAAgB;IACnD,EAAE,CAAC,IAAI,CAAC;;;;;;GAMP,CAAC,CAAC;IAEH,6FAA6F;IAC7F,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,EAA6B,CAAC;IACjG,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,EAAE,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAgB;IACtD,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAE1E,CAAC;IACd,OAAO,GAAG,EAAE,WAAW,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,IAAI,OAAO,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,IAAI,cAAc,CACtB,4BAA4B,EAC5B,2BAA2B,OAAO,6CAA6C,YAAY,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;YAChC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjB,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC;qBACrF,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBACpE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACpB,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,uBAAuB,CAAC,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,22 @@
+import type { MessageType, PolicyAction, PolicyRule, TaskStatus } from "./types.js";
+export interface MessagePolicyContext {
+    subject: "message";
+    fromRole: string;
+    toRole: string;
+    messageType: MessageType;
+    riskTags: string[];
+}
+export interface TaskPolicyContext {
+    subject: "task";
+    fromRole: string;
+    toRole?: string;
+    fromStatus: TaskStatus;
+    toStatus: TaskStatus;
+    riskTags: string[];
+}
+export interface PolicyDecision {
+    action: PolicyAction;
+    matchedRuleId: string | null;
+    delegateRole?: string;
+}
+export declare function evaluatePolicy(rules: PolicyRule[], context: MessagePolicyContext | TaskPolicyContext): PolicyDecision;

package/dist/policy.js

@@ -0,0 +1,33 @@
+export function evaluatePolicy(rules, context) {
+    for (const rule of rules) {
+        if (!rule.enabled || rule.subject !== context.subject)
+            continue;
+        if (rule.from_role && rule.from_role !== context.fromRole)
+            continue;
+        if (rule.to_role && rule.to_role !== context.toRole)
+            continue;
+        if (rule.risk_tags?.some((tag) => !context.riskTags.includes(tag)))
+            continue;
+        if (context.subject === "message") {
+            if (rule.message_type && rule.message_type !== context.messageType)
+                continue;
+            if (rule.from_status || rule.to_status)
+                continue;
+        }
+        else {
+            if (rule.from_status && rule.from_status !== context.fromStatus)
+                continue;
+            if (rule.to_status && rule.to_status !== context.toStatus)
+                continue;
+            if (rule.message_type)
+                continue;
+        }
+        return {
+            action: rule.action,
+            matchedRuleId: rule.id,
+            ...(rule.delegate_role ? { delegateRole: rule.delegate_role } : {}),
+        };
+    }
+    return { action: "require_human", matchedRuleId: null };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAyBA,MAAM,UAAU,cAAc,CAC5B,KAAmB,EACnB,OAAiD;IAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,SAAS;QAChE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ;YAAE,SAAS;QACpE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9D,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAE7E,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,WAAW;gBAAE,SAAS;YAC7E,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS;gBAAE,SAAS;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU;gBAAE,SAAS;YAC1E,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ;gBAAE,SAAS;YACpE,IAAI,IAAI,CAAC,YAAY;gBAAE,SAAS;QAClC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,EAAE;YACtB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,49 @@
+import { AgentCorpBroker } from "./broker.js";
+import { type CredentialsFile } from "./credentials.js";
+import { AgentCorpDatabase } from "./database.js";
+import type { OrgConfig } from "./types.js";
+export interface DaemonInfo {
+    pid: number;
+    port: number;
+    host: string;
+    url: string;
+    startedAt: string;
+}
+export declare const DEFAULT_MAX_BODY_SIZE_BYTES: number;
+export interface ServerOptions {
+    port?: number;
+    host?: string;
+    daemonFilePath?: string;
+    auditOnShutdown?: boolean;
+    maxBodySizeBytes?: number;
+}
+export declare function readDaemonInfo(filePath?: string): DaemonInfo | null;
+export declare class AgentCorpServer {
+    readonly broker: AgentCorpBroker;
+    readonly database: AgentCorpDatabase;
+    readonly config: OrgConfig;
+    readonly credentials: CredentialsFile;
+    readonly daemonFilePath: string | null;
+    readonly maxBodySizeBytes: number;
+    private server;
+    private readonly roleHandlers;
+    private readonly sseClients;
+    private readonly eventListener;
+    private sseHeartbeatInterval;
+    private port;
+    private host;
+    private startedAt;
+    private auditOnShutdown;
+    constructor(broker: AgentCorpBroker, credentials?: CredentialsFile, options?: ServerOptions);
+    private broadcastSse;
+    getPort(): number;
+    getUrl(): string;
+    start(): Promise<DaemonInfo>;
+    stop(): Promise<void>;
+    private getRoleHandler;
+    private handleHttpRequest;
+    private handleAdminApi;
+    private extractToken;
+    private readJsonBody;
+    private sendJson;
+}