agentic-flow 2.0.1 → 2.0.2-alpha

package/dist/federation/SecurityManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SecurityManager.js","sourceRoot":"","sources":["../../src/federation/SecurityManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAa5C,MAAM,OAAO,eAAe;IACT,SAAS,GAAG,aAAa,CAAC;IAC1B,SAAS,CAAS;IAC3B,eAAe,GAAgC,IAAI,GAAG,EAAE,CAAC;IAEjE;QACE,qFAAqF;QACrF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAA0B;QAC/C,MAAM,MAAM,GAAG;YACb,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG;YACnB,GAAG,OAAO;YACV,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,OAAO,CAAC,SAAS;YACtB,GAAG,EAAE,yBAAyB;SAC/B,CAAC;QAEF,4BAA4B;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAE1E,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;aACpC,MAAM,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;aAC5C,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,MAAM,KAAK,GAAG,GAAG,aAAa,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;QAEhE,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SACrD,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAEzD,mBAAmB;QACnB,MAAM,iBAAiB,GAAG,MAAM;aAC7B,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;aACpC,MAAM,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;aAC5C,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC;QAEjE,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,aAAa,CAAC;QAC9B,CAAC;QAED,8BAA8B;QAC9B,0EAA0E;QAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc;QAE5D,0DAA0D;QAC1D,yEAAyE;QACzE,MAAM,IAAI,GAAmB,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjE,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC5D,yDAAyD;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,QAAgB;QAC1C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE5D,4DAA4D;QAC5D,iEAAiE;QACjE,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvD,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC7B,QAAQ;YACR,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,OAAe,EACf,QAAgB,EAChB,EAAW;QAEX,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE5D,sDAAsD;QACtD,gEAAgE;QAChE,IAAI,QAAgB,CAAC;QACrB,IAAI,EAAE,EAAE,CAAC;YACP,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,MAAM,CAAC,IAAI,CAAC,oEAAoE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChG,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAClF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEpD,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC7B,QAAQ;YACR,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,OAAe;QAK5C,kEAAkE;QAClE,sDAAsD;QAEtD,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzD,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,GAAG,EAAE,iBAAiB;YACtB,EAAE,EAAE,gBAAgB;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,eAAuB,EAAE,YAAoB;QAChE,IAAI,eAAe,KAAK,YAAY,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,eAAe;gBACf,YAAY;aACb,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAY;QACnB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,GAAW;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACpB,QAAQ,CAAC,QAAQ,CAAC;aAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,GAAW;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;CACF","sourcesContent":["/**\n * Security Manager - Authentication, encryption, and access control\n *\n * Features:\n * - JWT token generation and validation\n * - AES-256 encryption for data at rest\n * - Tenant isolation\n * - mTLS certificate management\n */\n\nimport crypto from 'crypto';\nimport { logger } from '../utils/logger.js';\n\nexport interface AgentTokenPayload {\n  agentId: string;\n  tenantId: string;\n  expiresAt: number;\n}\n\nexport interface EncryptionKeys {\n  encryptionKey: Buffer;\n  iv: Buffer;\n}\n\nexport class SecurityManager {\n  private readonly algorithm = 'aes-256-gcm';\n  private readonly jwtSecret: string;\n  private encryptionCache: Map<string, EncryptionKeys> = new Map();\n\n  constructor() {\n    // In production, load from secure vault (AWS Secrets Manager, HashiCorp Vault, etc.)\n    this.jwtSecret = process.env.JWT_SECRET || crypto.randomBytes(32).toString('hex');\n  }\n\n  /**\n   * Create JWT token for agent authentication\n   */\n  async createAgentToken(payload: AgentTokenPayload): Promise<string> {\n    const header = {\n      alg: 'HS256',\n      typ: 'JWT'\n    };\n\n    const now = Date.now();\n    const tokenPayload = {\n      ...payload,\n      iat: now,\n      exp: payload.expiresAt,\n      iss: 'agentic-flow-federation'\n    };\n\n    // Encode header and payload\n    const encodedHeader = this.base64UrlEncode(JSON.stringify(header));\n    const encodedPayload = this.base64UrlEncode(JSON.stringify(tokenPayload));\n\n    // Create signature\n    const signature = crypto\n      .createHmac('sha256', this.jwtSecret)\n      .update(`${encodedHeader}.${encodedPayload}`)\n      .digest('base64url');\n\n    const token = `${encodedHeader}.${encodedPayload}.${signature}`;\n\n    logger.info('Created agent token', {\n      agentId: payload.agentId,\n      tenantId: payload.tenantId,\n      expiresAt: new Date(payload.expiresAt).toISOString()\n    });\n\n    return token;\n  }\n\n  /**\n   * Verify JWT token\n   */\n  async verifyAgentToken(token: string): Promise<AgentTokenPayload> {\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      throw new Error('Invalid token format');\n    }\n\n    const [encodedHeader, encodedPayload, signature] = parts;\n\n    // Verify signature\n    const expectedSignature = crypto\n      .createHmac('sha256', this.jwtSecret)\n      .update(`${encodedHeader}.${encodedPayload}`)\n      .digest('base64url');\n\n    if (signature !== expectedSignature) {\n      throw new Error('Invalid token signature');\n    }\n\n    // Decode payload\n    const payload = JSON.parse(this.base64UrlDecode(encodedPayload));\n\n    // Check expiration\n    if (Date.now() >= payload.exp) {\n      throw new Error('Token expired');\n    }\n\n    logger.debug('Token verified', {\n      agentId: payload.agentId,\n      tenantId: payload.tenantId\n    });\n\n    return payload;\n  }\n\n  /**\n   * Get or create encryption key for a tenant (key only, IV generated per operation)\n   * SECURITY FIX: IV is now generated fresh for each encryption operation\n   */\n  async getEncryptionKey(tenantId: string): Promise<Buffer> {\n    // Check cache for encryption key only\n    const cached = this.encryptionCache.get(tenantId);\n    if (cached) {\n      return cached.encryptionKey;\n    }\n\n    // Generate new key for tenant\n    // In production, these would be stored in a secure key management service\n    const encryptionKey = crypto.randomBytes(32); // 256-bit key\n\n    // Cache only the key (IV will be generated per-operation)\n    // We store a dummy IV in the cache structure for backwards compatibility\n    const keys: EncryptionKeys = { encryptionKey, iv: Buffer.alloc(16) };\n    this.encryptionCache.set(tenantId, keys);\n\n    logger.info('Generated encryption key for tenant', { tenantId });\n\n    return encryptionKey;\n  }\n\n  /**\n   * Legacy method for backwards compatibility - prefer getEncryptionKey\n   * @deprecated Use getEncryptionKey instead and generate IV per-operation\n   */\n  async getEncryptionKeys(tenantId: string): Promise<EncryptionKeys> {\n    const encryptionKey = await this.getEncryptionKey(tenantId);\n    // SECURITY: Generate fresh IV for each call (not cached)\n    const iv = crypto.randomBytes(16);\n    return { encryptionKey, iv };\n  }\n\n  /**\n   * Encrypt data with AES-256-GCM\n   * SECURITY FIX: Now generates a fresh IV for each encryption and returns it\n   */\n  async encrypt(data: string, tenantId: string): Promise<{ encrypted: string; authTag: string; iv: string }> {\n    const encryptionKey = await this.getEncryptionKey(tenantId);\n\n    // SECURITY: Generate fresh IV for EACH encryption operation\n    // IV reuse with AES-GCM is catastrophic - this fix prevents that\n    const iv = crypto.randomBytes(16);\n\n    const cipher = crypto.createCipheriv(this.algorithm, encryptionKey, iv);\n\n    let encrypted = cipher.update(data, 'utf8', 'base64');\n    encrypted += cipher.final('base64');\n\n    const authTag = cipher.getAuthTag().toString('base64');\n\n    logger.debug('Data encrypted', {\n      tenantId,\n      originalLength: data.length,\n      encryptedLength: encrypted.length\n    });\n\n    // SECURITY: Return IV with encrypted data so it can be used for decryption\n    return { encrypted, authTag, iv: iv.toString('base64') };\n  }\n\n  /**\n   * Decrypt data with AES-256-GCM\n   * SECURITY FIX: Now accepts IV as parameter (required for proper decryption)\n   */\n  async decrypt(\n    encrypted: string,\n    authTag: string,\n    tenantId: string,\n    iv?: string\n  ): Promise<string> {\n    const encryptionKey = await this.getEncryptionKey(tenantId);\n\n    // SECURITY: IV must be provided for proper decryption\n    // For backwards compatibility, generate warning if not provided\n    let ivBuffer: Buffer;\n    if (iv) {\n      ivBuffer = Buffer.from(iv, 'base64');\n    } else {\n      // Legacy fallback - try to use cached IV (will fail for new encryptions)\n      logger.warn('Decrypt called without IV - this may fail for newly encrypted data', { tenantId });\n      const cached = this.encryptionCache.get(tenantId);\n      if (!cached) {\n        throw new Error('No IV provided and no cached keys available');\n      }\n      ivBuffer = cached.iv;\n    }\n\n    const decipher = crypto.createDecipheriv(this.algorithm, encryptionKey, ivBuffer);\n    decipher.setAuthTag(Buffer.from(authTag, 'base64'));\n\n    let decrypted = decipher.update(encrypted, 'base64', 'utf8');\n    decrypted += decipher.final('utf8');\n\n    logger.debug('Data decrypted', {\n      tenantId,\n      decryptedLength: decrypted.length\n    });\n\n    return decrypted;\n  }\n\n  /**\n   * Generate mTLS certificates for agent-to-hub communication\n   */\n  async generateMTLSCertificates(agentId: string): Promise<{\n    cert: string;\n    key: string;\n    ca: string;\n  }> {\n    // Placeholder: Actual implementation would use OpenSSL or similar\n    // to generate X.509 certificates with proper CA chain\n\n    logger.info('Generating mTLS certificates', { agentId });\n\n    return {\n      cert: 'PLACEHOLDER_CERT',\n      key: 'PLACEHOLDER_KEY',\n      ca: 'PLACEHOLDER_CA'\n    };\n  }\n\n  /**\n   * Validate tenant access to data\n   */\n  validateTenantAccess(requestTenantId: string, dataTenantId: string): boolean {\n    if (requestTenantId !== dataTenantId) {\n      logger.warn('Tenant access violation detected', {\n        requestTenantId,\n        dataTenantId\n      });\n      return false;\n    }\n    return true;\n  }\n\n  /**\n   * Hash sensitive data for storage (one-way)\n   */\n  hashData(data: string): string {\n    return crypto.createHash('sha256').update(data).digest('hex');\n  }\n\n  /**\n   * Generate secure random ID\n   */\n  generateSecureId(): string {\n    return crypto.randomBytes(16).toString('hex');\n  }\n\n  /**\n   * Base64 URL-safe encoding\n   */\n  private base64UrlEncode(str: string): string {\n    return Buffer.from(str)\n      .toString('base64')\n      .replace(/\\+/g, '-')\n      .replace(/\\//g, '_')\n      .replace(/=/g, '');\n  }\n\n  /**\n   * Base64 URL-safe decoding\n   */\n  private base64UrlDecode(str: string): string {\n    const base64 = str.replace(/-/g, '+').replace(/_/g, '/');\n    return Buffer.from(base64, 'base64').toString('utf8');\n  }\n\n  /**\n   * Clear cached keys (for testing or security refresh)\n   */\n  clearCache(): void {\n    this.encryptionCache.clear();\n    logger.info('Encryption cache cleared');\n  }\n}\n"]}

package/dist/federation/debug/agent-debug-stream.d.ts

@@ -1,171 +0,0 @@
-/**
- * Single Agent Debug Streaming
- *
- * Provides detailed visibility into a single agent's operations,
- * lifecycle, and internal state changes.
- *
- * Features:
- * - Agent lifecycle tracking (spawn → work → shutdown)
- * - Task execution tracing
- * - Memory operations
- * - Communication events
- * - Decision logging
- * - State transitions
- * - Performance metrics
- * - Timeline visualization
- */
-import { EventEmitter } from 'events';
-import { DebugLevel } from './debug-stream.js';
-export { DebugLevel } from './debug-stream.js';
-export interface AgentDebugConfig {
-    agentId: string;
-    tenantId?: string;
-    level?: DebugLevel;
-    format?: 'human' | 'json' | 'compact' | 'timeline';
-    output?: 'console' | 'file' | 'both';
-    outputFile?: string;
-    colorize?: boolean;
-    trackState?: boolean;
-    trackDecisions?: boolean;
-    trackCommunication?: boolean;
-    timeline?: boolean;
-}
-export interface AgentState {
-    phase: 'spawning' | 'initializing' | 'ready' | 'working' | 'idle' | 'shutting_down' | 'dead';
-    task?: string;
-    taskId?: string;
-    startTime: string;
-    lastActivity?: string;
-    metadata?: Record<string, any>;
-}
-export interface AgentDecision {
-    timestamp: string;
-    context: string;
-    options: any[];
-    selected: any;
-    reasoning?: string;
-    confidence?: number;
-}
-export interface AgentTask {
-    taskId: string;
-    description: string;
-    startTime: string;
-    endTime?: string;
-    status: 'pending' | 'running' | 'completed' | 'failed';
-    steps: AgentTaskStep[];
-    result?: any;
-    error?: Error;
-}
-export interface AgentTaskStep {
-    step: number;
-    operation: string;
-    startTime: string;
-    endTime?: string;
-    duration?: number;
-    data?: any;
-    error?: Error;
-}
-export declare class AgentDebugStream extends EventEmitter {
-    private config;
-    private debug;
-    private state;
-    private decisions;
-    private tasks;
-    private communications;
-    private timeline;
-    private performanceMetrics;
-    constructor(config: AgentDebugConfig);
-    /**
-     * Log agent lifecycle phase change
-     */
-    logAgentPhase(phase: AgentState['phase'], data?: any): void;
-    /**
-     * Log agent initialization
-     */
-    logInitialization(config: any): void;
-    /**
-     * Log agent ready
-     */
-    logReady(capabilities?: any): void;
-    /**
-     * Start tracking a task
-     */
-    startTask(taskId: string, description: string, data?: any): void;
-    /**
-     * Log task step
-     */
-    logTaskStep(taskId: string, step: number, operation: string, data?: any): void;
-    /**
-     * Complete task step
-     */
-    completeTaskStep(taskId: string, step: number, duration: number, data?: any): void;
-    /**
-     * Complete task
-     */
-    completeTask(taskId: string, result?: any): void;
-    /**
-     * Fail task
-     */
-    failTask(taskId: string, error: Error): void;
-    /**
-     * Log a decision
-     */
-    logDecision(context: string, options: any[], selected: any, reasoning?: string, confidence?: number): void;
-    /**
-     * Log communication
-     */
-    logCommunication(type: 'send' | 'receive', target: string, message: any): void;
-    /**
-     * Log memory operation
-     */
-    logMemoryOperation(operation: 'store' | 'retrieve' | 'search', data: any, duration?: number): void;
-    /**
-     * Log thought/reasoning
-     */
-    logThought(thought: string, context?: any): void;
-    /**
-     * Log agent shutdown
-     */
-    logShutdown(reason?: string): void;
-    /**
-     * Track performance metric
-     */
-    private trackPerformance;
-    /**
-     * Print agent summary
-     */
-    printSummary(): void;
-    /**
-     * Print timeline
-     */
-    printTimeline(): void;
-    /**
-     * Get current state
-     */
-    getState(): AgentState;
-    /**
-     * Get task history
-     */
-    getTasks(): AgentTask[];
-    /**
-     * Get decisions
-     */
-    getDecisions(): AgentDecision[];
-    /**
-     * Get communications
-     */
-    getCommunications(): any[];
-    /**
-     * Close debug stream
-     */
-    close(): void;
-}
-/**
- * Create agent debug stream
- */
-export declare function createAgentDebugStream(config: AgentDebugConfig): AgentDebugStream;
-/**
- * Create from environment variables
- */
-export declare function createAgentDebugStreamFromEnv(agentId: string, tenantId?: string): AgentDebugStream;
-//# sourceMappingURL=agent-debug-stream.d.ts.map

package/dist/federation/debug/debug-stream.d.ts

@@ -1,157 +0,0 @@
-/**
- * Debug Streaming System for Federation
- *
- * Provides detailed, real-time visibility into agent operations
- * with multiple verbosity levels and customizable output formats.
- *
- * Features:
- * - Multiple debug levels (SILENT, BASIC, DETAILED, VERBOSE, TRACE)
- * - Real-time event streaming
- * - Performance metrics and timing
- * - Stack traces and context
- * - Customizable formatters
- * - File and console output
- * - JSON and human-readable formats
- */
-import { EventEmitter } from 'events';
-import { WriteStream } from 'fs';
-export declare enum DebugLevel {
-    SILENT = 0,// No output
-    BASIC = 1,// Major events only (init, shutdown, errors)
-    DETAILED = 2,// Include operations (queries, inserts, updates)
-    VERBOSE = 3,// Include all events (presence, messages, tasks)
-    TRACE = 4
-}
-export interface DebugEvent {
-    timestamp: string;
-    level: DebugLevel;
-    category: string;
-    operation: string;
-    agentId?: string;
-    tenantId?: string;
-    duration?: number;
-    data?: any;
-    error?: Error;
-    stackTrace?: string;
-    metadata?: Record<string, any>;
-}
-export interface DebugStreamConfig {
-    level: DebugLevel;
-    output: 'console' | 'file' | 'both' | 'stream';
-    format: 'human' | 'json' | 'compact';
-    outputFile?: string;
-    includeTimestamps?: boolean;
-    includeStackTraces?: boolean;
-    includeMetadata?: boolean;
-    colorize?: boolean;
-    filterCategories?: string[];
-    filterAgents?: string[];
-    customStream?: WriteStream;
-}
-export declare class DebugStream extends EventEmitter {
-    private config;
-    private fileStream?;
-    private eventBuffer;
-    private metrics;
-    constructor(config?: Partial<DebugStreamConfig>);
-    /**
-     * Log a debug event
-     */
-    log(event: Omit<DebugEvent, 'timestamp'>): void;
-    /**
-     * Log connection events
-     */
-    logConnection(operation: string, data?: any, error?: Error): void;
-    /**
-     * Log database operations
-     */
-    logDatabase(operation: string, data?: any, duration?: number, error?: Error): void;
-    /**
-     * Log realtime events
-     */
-    logRealtime(operation: string, agentId?: string, data?: any, duration?: number): void;
-    /**
-     * Log memory operations
-     */
-    logMemory(operation: string, agentId?: string, tenantId?: string, data?: any, duration?: number): void;
-    /**
-     * Log task operations
-     */
-    logTask(operation: string, agentId?: string, tenantId?: string, data?: any, duration?: number): void;
-    /**
-     * Log internal state changes
-     */
-    logTrace(operation: string, data?: any): void;
-    /**
-     * Output event to configured destinations
-     */
-    private outputEvent;
-    /**
-     * Format event for output
-     */
-    private formatEvent;
-    /**
-     * Format event in human-readable format
-     */
-    private formatHuman;
-    /**
-     * Format event in compact format
-     */
-    private formatCompact;
-    /**
-     * Get level string
-     */
-    private getLevelString;
-    /**
-     * Get color for level
-     */
-    private getLevelColor;
-    /**
-     * Colorize text
-     */
-    private colorize;
-    /**
-     * Capture stack trace
-     */
-    private captureStackTrace;
-    /**
-     * Get metrics summary
-     */
-    getMetrics(): Record<string, {
-        count: number;
-        avgDuration: number;
-    }>;
-    /**
-     * Print metrics summary
-     */
-    printMetrics(): void;
-    /**
-     * Get event buffer
-     */
-    getEvents(filter?: {
-        category?: string;
-        agentId?: string;
-        since?: Date;
-    }): DebugEvent[];
-    /**
-     * Clear event buffer
-     */
-    clearEvents(): void;
-    /**
-     * Clear metrics
-     */
-    clearMetrics(): void;
-    /**
-     * Close file stream
-     */
-    close(): void;
-}
-/**
- * Create debug stream with sensible defaults
- */
-export declare function createDebugStream(config?: Partial<DebugStreamConfig>): DebugStream;
-/**
- * Get debug level from environment variable
- */
-export declare function getDebugLevelFromEnv(): DebugLevel;
-//# sourceMappingURL=debug-stream.d.ts.map

package/dist/federation/index.d.ts

@@ -1,13 +0,0 @@
-/**
- * Federated AgentDB - Main exports
- *
- * Provides secure federated memory for ephemeral agents with:
- * - QUIC-based synchronization
- * - Zero-trust security (mTLS + JWT + AES-256)
- * - Tenant isolation
- * - Vector clock conflict resolution
- */
-export { EphemeralAgent, type EphemeralAgentConfig, type AgentContext } from './EphemeralAgent.js';
-export { FederationHub, type FederationHubConfig, type SyncMessage } from './FederationHub.js';
-export { SecurityManager, type AgentTokenPayload, type EncryptionKeys } from './SecurityManager.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/federation/integrations/realtime-federation.d.ts

@@ -1,144 +0,0 @@
-/**
- * Real-Time Federation System using Supabase
- *
- * Leverages Supabase Real-Time for:
- * - Live agent coordination
- * - Instant memory synchronization
- * - Real-time presence tracking
- * - Collaborative multi-agent workflows
- * - Event-driven agent communication
- */
-export interface RealtimeConfig {
-    url: string;
-    anonKey: string;
-    serviceRoleKey?: string;
-    presenceHeartbeat?: number;
-    memorySync?: boolean;
-    broadcastLatency?: 'low' | 'high';
-}
-export interface AgentPresence {
-    agent_id: string;
-    tenant_id: string;
-    status: 'online' | 'busy' | 'offline';
-    task?: string;
-    started_at: string;
-    last_heartbeat: string;
-    metadata?: Record<string, any>;
-}
-export interface MemoryEvent {
-    type: 'memory_added' | 'memory_updated' | 'memory_retrieved';
-    tenant_id: string;
-    agent_id: string;
-    session_id: string;
-    content: string;
-    embedding?: number[];
-    metadata?: Record<string, any>;
-    timestamp: string;
-}
-export interface CoordinationMessage {
-    from_agent: string;
-    to_agent?: string;
-    type: 'task_assignment' | 'task_complete' | 'request_help' | 'share_knowledge' | 'status_update';
-    payload: any;
-    timestamp: string;
-}
-export interface TaskAssignment {
-    task_id: string;
-    assigned_to: string;
-    description: string;
-    priority: 'low' | 'medium' | 'high' | 'critical';
-    deadline?: string;
-    dependencies?: string[];
-}
-export declare class RealtimeFederationHub {
-    private client;
-    private config;
-    private channels;
-    private presenceChannel?;
-    private agentId;
-    private tenantId;
-    private heartbeatInterval?;
-    private eventHandlers;
-    constructor(config: RealtimeConfig, agentId: string, tenantId?: string);
-    /**
-     * Initialize real-time federation
-     */
-    initialize(): Promise<void>;
-    /**
-     * Set up presence tracking for all agents in tenant
-     */
-    private setupPresence;
-    /**
-     * Set up real-time memory synchronization
-     */
-    private setupMemorySync;
-    /**
-     * Set up coordination channel for agent-to-agent communication
-     */
-    private setupCoordination;
-    /**
-     * Broadcast message to all agents in tenant
-     */
-    broadcast(type: CoordinationMessage['type'], payload: any): Promise<void>;
-    /**
-     * Send direct message to specific agent
-     */
-    sendMessage(toAgent: string, type: CoordinationMessage['type'], payload: any): Promise<void>;
-    /**
-     * Assign task to another agent
-     */
-    assignTask(task: TaskAssignment): Promise<void>;
-    /**
-     * Report task completion
-     */
-    reportTaskComplete(taskId: string, result: any): Promise<void>;
-    /**
-     * Request help from other agents
-     */
-    requestHelp(problem: string, context?: any): Promise<void>;
-    /**
-     * Share knowledge with other agents
-     */
-    shareKnowledge(knowledge: string, metadata?: any): Promise<void>;
-    /**
-     * Update agent status
-     */
-    updateStatus(status: 'online' | 'busy' | 'offline', task?: string): Promise<void>;
-    /**
-     * Get list of active agents
-     */
-    getActiveAgents(presenceState?: any): AgentPresence[];
-    /**
-     * Start heartbeat to maintain presence
-     */
-    private startHeartbeat;
-    /**
-     * Stop heartbeat
-     */
-    private stopHeartbeat;
-    /**
-     * Subscribe to events
-     */
-    on(event: string, handler: Function): void;
-    /**
-     * Unsubscribe from events
-     */
-    off(event: string, handler: Function): void;
-    /**
-     * Emit event to handlers
-     */
-    private emit;
-    /**
-     * Get real-time statistics
-     */
-    getStats(): Promise<any>;
-    /**
-     * Shutdown and cleanup
-     */
-    shutdown(): Promise<void>;
-}
-/**
- * Create real-time federation hub from environment
- */
-export declare function createRealtimeHub(agentId: string, tenantId?: string): RealtimeFederationHub;
-//# sourceMappingURL=realtime-federation.d.ts.map

package/dist/federation/integrations/supabase-adapter-debug.d.ts

@@ -1,91 +0,0 @@
-/**
- * Supabase Database Adapter with Debug Streaming
- *
- * Enhanced version of SupabaseFederationAdapter with comprehensive
- * debug logging and performance tracking.
- */
-import { DebugStream, DebugLevel } from '../debug/debug-stream.js';
-export interface SupabaseConfigDebug {
-    url: string;
-    anonKey: string;
-    serviceRoleKey?: string;
-    vectorBackend?: 'pgvector' | 'agentdb' | 'hybrid';
-    syncInterval?: number;
-    debug?: {
-        enabled?: boolean;
-        level?: DebugLevel;
-        output?: 'console' | 'file' | 'both';
-        format?: 'human' | 'json' | 'compact';
-        outputFile?: string;
-    };
-}
-export interface AgentMemory {
-    id: string;
-    tenant_id: string;
-    agent_id: string;
-    session_id: string;
-    content: string;
-    embedding?: number[];
-    metadata?: Record<string, any>;
-    created_at?: string;
-    expires_at?: string;
-}
-export declare class SupabaseFederationAdapterDebug {
-    private client;
-    private config;
-    private debug;
-    constructor(config: SupabaseConfigDebug);
-    /**
-     * Initialize Supabase schema for federation
-     */
-    initialize(): Promise<void>;
-    /**
-     * Ensure required tables exist
-     */
-    private ensureTables;
-    /**
-     * Ensure pgvector extension is enabled
-     */
-    private ensureVectorExtension;
-    /**
-     * Store agent memory in Supabase
-     */
-    storeMemory(memory: AgentMemory): Promise<void>;
-    /**
-     * Query memories by tenant and agent
-     */
-    queryMemories(tenantId: string, agentId?: string, limit?: number): Promise<AgentMemory[]>;
-    /**
-     * Semantic search using pgvector
-     */
-    semanticSearch(embedding: number[], tenantId: string, limit?: number): Promise<AgentMemory[]>;
-    /**
-     * Register agent session
-     */
-    registerSession(sessionId: string, tenantId: string, agentId: string, metadata?: Record<string, any>): Promise<void>;
-    /**
-     * Update session status
-     */
-    updateSessionStatus(sessionId: string, status: 'active' | 'completed' | 'failed'): Promise<void>;
-    /**
-     * Get hub statistics
-     */
-    getStats(tenantId?: string): Promise<any>;
-    /**
-     * Get debug stream for external use
-     */
-    getDebugStream(): DebugStream;
-    /**
-     * Print performance metrics
-     */
-    printMetrics(): void;
-    /**
-     * Close connection
-     */
-    close(): Promise<void>;
-}
-/**
- * Create Supabase adapter from environment variables with debug support
- */
-export declare function createSupabaseAdapterDebug(): SupabaseFederationAdapterDebug;
-//# sourceMappingURL=supabase-adapter-debug.d.ts.map