agentic-flow 3.0.0-alpha.2 → 3.1.0

package/dist/agentic-flow/src/federation/FederationHubServer.d.ts

@@ -1,100 +0,0 @@
-/**
- * Federation Hub Server - WebSocket-based hub for agent synchronization
- *
- * This is a production-ready implementation using WebSocket (HTTP/2 upgrade)
- * as a fallback until native QUIC is implemented.
- */
-import { WebSocket } from 'ws';
-export interface HubConfig {
-    port?: number;
-    dbPath?: string;
-    maxAgents?: number;
-    syncInterval?: number;
-}
-export interface AgentConnection {
-    ws: WebSocket;
-    agentId: string;
-    tenantId: string;
-    connectedAt: number;
-    lastSyncAt: number;
-    vectorClock: Record<string, number>;
-}
-export interface SyncMessage {
-    type: 'auth' | 'pull' | 'push' | 'ack' | 'error';
-    agentId?: string;
-    tenantId?: string;
-    token?: string;
-    vectorClock?: Record<string, number>;
-    data?: any[];
-    error?: string;
-    timestamp: number;
-}
-export declare class FederationHubServer {
-    private config;
-    private wss?;
-    private server?;
-    private connections;
-    private db;
-    private agentDB;
-    private globalVectorClock;
-    constructor(config: HubConfig);
-    /**
-     * Initialize hub database schema
-     */
-    private initializeDatabase;
-    /**
-     * Start the hub server
-     */
-    start(): Promise<void>;
-    /**
-     * Handle new agent connection
-     */
-    private handleConnection;
-    /**
-     * Handle authentication
-     */
-    private handleAuth;
-    /**
-     * Handle pull request (agent wants updates from hub)
-     */
-    private handlePull;
-    /**
-     * Handle push request (agent sending updates to hub)
-     */
-    private handlePush;
-    /**
-     * Get changes since a given vector clock
-     * Returns memories from other agents in the same tenant
-     */
-    private getChangesSince;
-    /**
-     * Broadcast message to all agents in a tenant (except sender)
-     */
-    private broadcastToTenant;
-    /**
-     * Send message to WebSocket
-     */
-    private send;
-    /**
-     * Send error message
-     */
-    private sendError;
-    /**
-     * Get hub statistics
-     */
-    getStats(): {
-        connectedAgents: number;
-        totalEpisodes: number;
-        tenants: number;
-        uptime: number;
-    };
-    /**
-     * Stop the hub server
-     */
-    stop(): Promise<void>;
-    /**
-     * Query patterns from AgentDB with tenant isolation
-     */
-    queryPatterns(tenantId: string, task: string, k?: number): Promise<any[]>;
-}
-//# sourceMappingURL=FederationHubServer.d.ts.map

package/dist/agentic-flow/src/federation/FederationHubServer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"FederationHubServer.d.ts","sourceRoot":"","sources":["../../../../src/federation/FederationHubServer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAmB,SAAS,EAAE,MAAM,IAAI,CAAC;AAOhD,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,GAAG,CAAC,CAAkB;IAC9B,OAAO,CAAC,MAAM,CAAC,CAAkC;IACjD,OAAO,CAAC,WAAW,CAA2C;IAC9D,OAAO,CAAC,EAAE,CAAW;IACrB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,iBAAiB,CAA8B;gBAE3C,MAAM,EAAE,SAAS;IAkB7B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqD1B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqC5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA0ExB;;OAEG;YACW,UAAU;IAoCxB;;OAEG;YACW,UAAU;IAiCxB;;OAEG;YACW,UAAU;IAoHxB;;;OAGG;YACW,eAAe;IA6B7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsBzB;;OAEG;IACH,OAAO,CAAC,IAAI;IAMZ;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;OAEG;IACH,QAAQ,IAAI;QACV,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB;IAYD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B3B;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAE,MAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;CAiBnF"}

package/dist/agentic-flow/src/federation/FederationHubServer.js

@@ -1,437 +0,0 @@
-/**
- * Federation Hub Server - WebSocket-based hub for agent synchronization
- *
- * This is a production-ready implementation using WebSocket (HTTP/2 upgrade)
- * as a fallback until native QUIC is implemented.
- */
-import { WebSocketServer, WebSocket } from 'ws';
-import { createServer } from 'http';
-import { logger } from '../utils/logger.js';
-import Database from '../db/sql-adapter.js';
-export class FederationHubServer {
-    config;
-    wss;
-    server;
-    connections = new Map();
-    db;
-    agentDB;
-    globalVectorClock = {};
-    constructor(config) {
-        this.config = {
-            port: 8443,
-            dbPath: ':memory:',
-            maxAgents: 1000,
-            syncInterval: 5000,
-            ...config
-        };
-        // Initialize hub database (SQLite for metadata)
-        this.db = new Database(this.config.dbPath);
-        this.initializeDatabase();
-        // AgentDB integration optional - using SQLite for now
-        this.agentDB = null;
-        logger.info('Federation hub initialized with SQLite');
-    }
-    /**
-     * Initialize hub database schema
-     */
-    initializeDatabase() {
-        // Memory store: tenant-isolated episodes
-        this.db.exec(`
-      CREATE TABLE IF NOT EXISTS episodes (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        tenant_id TEXT NOT NULL,
-        agent_id TEXT NOT NULL,
-        session_id TEXT NOT NULL,
-        task TEXT NOT NULL,
-        input TEXT NOT NULL,
-        output TEXT NOT NULL,
-        reward REAL NOT NULL,
-        critique TEXT,
-        success INTEGER NOT NULL,
-        tokens_used INTEGER DEFAULT 0,
-        latency_ms INTEGER DEFAULT 0,
-        vector_clock TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        UNIQUE(tenant_id, agent_id, session_id, task)
-      );
-
-      CREATE INDEX IF NOT EXISTS idx_episodes_tenant ON episodes(tenant_id);
-      CREATE INDEX IF NOT EXISTS idx_episodes_task ON episodes(tenant_id, task);
-      CREATE INDEX IF NOT EXISTS idx_episodes_created ON episodes(created_at);
-
-      -- Change log for sync
-      CREATE TABLE IF NOT EXISTS change_log (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        tenant_id TEXT NOT NULL,
-        agent_id TEXT NOT NULL,
-        operation TEXT NOT NULL,
-        episode_id INTEGER,
-        vector_clock TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        FOREIGN KEY(episode_id) REFERENCES episodes(id)
-      );
-
-      CREATE INDEX IF NOT EXISTS idx_changes_tenant ON change_log(tenant_id);
-      CREATE INDEX IF NOT EXISTS idx_changes_created ON change_log(created_at);
-
-      -- Agent registry
-      CREATE TABLE IF NOT EXISTS agents (
-        agent_id TEXT PRIMARY KEY,
-        tenant_id TEXT NOT NULL,
-        connected_at INTEGER NOT NULL,
-        last_sync_at INTEGER NOT NULL,
-        vector_clock TEXT NOT NULL
-      );
-    `);
-        logger.info('Federation hub database initialized');
-    }
-    /**
-     * Start the hub server
-     */
-    async start() {
-        return new Promise((resolve, reject) => {
-            try {
-                // Create HTTP server
-                this.server = createServer();
-                // Create WebSocket server
-                this.wss = new WebSocketServer({ server: this.server });
-                // Handle connections
-                this.wss.on('connection', (ws) => {
-                    this.handleConnection(ws);
-                });
-                // Start listening
-                this.server.listen(this.config.port, () => {
-                    logger.info('Federation hub server started', {
-                        port: this.config.port,
-                        protocol: 'WebSocket',
-                        maxAgents: this.config.maxAgents
-                    });
-                    resolve();
-                });
-                // Error handling
-                this.server.on('error', (error) => {
-                    logger.error('Hub server error', { error: error.message });
-                    reject(error);
-                });
-            }
-            catch (error) {
-                logger.error('Failed to start hub server', { error: error.message });
-                reject(error);
-            }
-        });
-    }
-    /**
-     * Handle new agent connection
-     */
-    handleConnection(ws) {
-        let agentId;
-        let tenantId;
-        let authenticated = false;
-        logger.info('New connection attempt');
-        ws.on('message', async (data) => {
-            try {
-                const message = JSON.parse(data.toString());
-                // Authentication required first
-                if (!authenticated && message.type !== 'auth') {
-                    this.sendError(ws, 'Authentication required');
-                    ws.close();
-                    return;
-                }
-                switch (message.type) {
-                    case 'auth':
-                        const authResult = await this.handleAuth(ws, message);
-                        if (authResult) {
-                            agentId = authResult.agentId;
-                            tenantId = authResult.tenantId;
-                            authenticated = true;
-                            // Register connection
-                            this.connections.set(agentId, {
-                                ws,
-                                agentId,
-                                tenantId,
-                                connectedAt: Date.now(),
-                                lastSyncAt: Date.now(),
-                                vectorClock: message.vectorClock || {}
-                            });
-                            logger.info('Agent authenticated', { agentId, tenantId });
-                        }
-                        break;
-                    case 'pull':
-                        if (agentId && tenantId) {
-                            await this.handlePull(ws, agentId, tenantId, message);
-                        }
-                        break;
-                    case 'push':
-                        if (agentId && tenantId) {
-                            await this.handlePush(ws, agentId, tenantId, message);
-                        }
-                        break;
-                    default:
-                        this.sendError(ws, `Unknown message type: ${message.type}`);
-                }
-            }
-            catch (error) {
-                logger.error('Message handling error', { error: error.message });
-                this.sendError(ws, error.message);
-            }
-        });
-        ws.on('close', () => {
-            if (agentId) {
-                this.connections.delete(agentId);
-                logger.info('Agent disconnected', { agentId, tenantId });
-            }
-        });
-        ws.on('error', (error) => {
-            logger.error('WebSocket error', { error: error.message, agentId });
-        });
-    }
-    /**
-     * Handle authentication
-     */
-    async handleAuth(ws, message) {
-        if (!message.agentId || !message.tenantId || !message.token) {
-            this.sendError(ws, 'Missing authentication credentials');
-            return null;
-        }
-        // TODO: Verify JWT token (for now, accept all)
-        // In production, verify JWT signature and expiration
-        // Register agent
-        this.db.prepare(`
-      INSERT OR REPLACE INTO agents (agent_id, tenant_id, connected_at, last_sync_at, vector_clock)
-      VALUES (?, ?, ?, ?, ?)
-    `).run(message.agentId, message.tenantId, Date.now(), Date.now(), JSON.stringify(message.vectorClock || {}));
-        // Send acknowledgment
-        this.send(ws, {
-            type: 'ack',
-            timestamp: Date.now()
-        });
-        return {
-            agentId: message.agentId,
-            tenantId: message.tenantId
-        };
-    }
-    /**
-     * Handle pull request (agent wants updates from hub)
-     */
-    async handlePull(ws, agentId, tenantId, message) {
-        const conn = this.connections.get(agentId);
-        if (!conn) {
-            this.sendError(ws, 'Agent not connected');
-            return;
-        }
-        // Get changes since agent's last vector clock
-        const changes = await this.getChangesSince(tenantId, message.vectorClock || {});
-        // Update last sync time
-        conn.lastSyncAt = Date.now();
-        // Send changes to agent
-        this.send(ws, {
-            type: 'ack',
-            data: changes,
-            vectorClock: this.globalVectorClock,
-            timestamp: Date.now()
-        });
-        logger.info('Pull completed', {
-            agentId,
-            tenantId,
-            changeCount: changes.length
-        });
-    }
-    /**
-     * Handle push request (agent sending updates to hub)
-     */
-    async handlePush(ws, agentId, tenantId, message) {
-        const conn = this.connections.get(agentId);
-        if (!conn) {
-            this.sendError(ws, 'Agent not connected');
-            return;
-        }
-        if (!message.data || message.data.length === 0) {
-            this.send(ws, { type: 'ack', timestamp: Date.now() });
-            return;
-        }
-        // Store episodes in both SQLite (metadata) and AgentDB (vector memory)
-        const stmt = this.db.prepare(`
-      INSERT OR REPLACE INTO episodes
-      (tenant_id, agent_id, session_id, task, input, output, reward, critique, success, tokens_used, latency_ms, vector_clock, created_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `);
-        const changeStmt = this.db.prepare(`
-      INSERT INTO change_log (tenant_id, agent_id, operation, episode_id, vector_clock, created_at)
-      VALUES (?, ?, 'insert', last_insert_rowid(), ?, ?)
-    `);
-        let insertCount = 0;
-        for (const episode of message.data) {
-            try {
-                // Store in SQLite for metadata
-                stmt.run(tenantId, agentId, episode.sessionId || agentId, episode.task, episode.input, episode.output, episode.reward, episode.critique || '', episode.success ? 1 : 0, episode.tokensUsed || 0, episode.latencyMs || 0, JSON.stringify(message.vectorClock), Date.now());
-                changeStmt.run(tenantId, agentId, JSON.stringify(message.vectorClock), Date.now());
-                // Store in AgentDB for vector memory (with tenant isolation)
-                await this.agentDB.storePattern({
-                    sessionId: `${tenantId}/${episode.sessionId || agentId}`,
-                    task: episode.task,
-                    input: episode.input,
-                    output: episode.output,
-                    reward: episode.reward,
-                    critique: episode.critique || '',
-                    success: episode.success,
-                    tokensUsed: episode.tokensUsed || 0,
-                    latencyMs: episode.latencyMs || 0,
-                    metadata: {
-                        tenantId,
-                        agentId,
-                        vectorClock: message.vectorClock
-                    }
-                });
-                insertCount++;
-            }
-            catch (error) {
-                logger.error('Failed to insert episode', { error: error.message });
-            }
-        }
-        // Update global vector clock
-        if (message.vectorClock) {
-            for (const [agent, ts] of Object.entries(message.vectorClock)) {
-                this.globalVectorClock[agent] = Math.max(this.globalVectorClock[agent] || 0, ts);
-            }
-        }
-        // Update connection vector clock
-        conn.vectorClock = { ...this.globalVectorClock };
-        conn.lastSyncAt = Date.now();
-        // Send acknowledgment
-        this.send(ws, {
-            type: 'ack',
-            timestamp: Date.now()
-        });
-        logger.info('Push completed', {
-            agentId,
-            tenantId,
-            episodeCount: insertCount
-        });
-        // Broadcast to other agents in same tenant (optional real-time sync)
-        this.broadcastToTenant(tenantId, agentId, {
-            type: 'push',
-            agentId,
-            data: message.data,
-            timestamp: Date.now()
-        });
-    }
-    /**
-     * Get changes since a given vector clock
-     * Returns memories from other agents in the same tenant
-     */
-    async getChangesSince(tenantId, vectorClock) {
-        // Get all episodes for tenant from SQLite
-        const episodes = this.db.prepare(`
-      SELECT * FROM episodes
-      WHERE tenant_id = ?
-      ORDER BY created_at DESC
-      LIMIT 100
-    `).all(tenantId);
-        return episodes.map((row) => ({
-            id: row.id,
-            agentId: row.agent_id,
-            sessionId: row.session_id,
-            task: row.task,
-            input: row.input,
-            output: row.output,
-            reward: row.reward,
-            critique: row.critique,
-            success: row.success === 1,
-            tokensUsed: row.tokens_used,
-            latencyMs: row.latency_ms,
-            vectorClock: JSON.parse(row.vector_clock),
-            createdAt: row.created_at
-        }));
-    }
-    /**
-     * Broadcast message to all agents in a tenant (except sender)
-     */
-    broadcastToTenant(tenantId, senderAgentId, message) {
-        let broadcastCount = 0;
-        for (const [agentId, conn] of this.connections.entries()) {
-            if (conn.tenantId === tenantId && agentId !== senderAgentId) {
-                this.send(conn.ws, message);
-                broadcastCount++;
-            }
-        }
-        if (broadcastCount > 0) {
-            logger.debug('Broadcasted to tenant agents', {
-                tenantId,
-                recipientCount: broadcastCount
-            });
-        }
-    }
-    /**
-     * Send message to WebSocket
-     */
-    send(ws, message) {
-        if (ws.readyState === WebSocket.OPEN) {
-            ws.send(JSON.stringify(message));
-        }
-    }
-    /**
-     * Send error message
-     */
-    sendError(ws, error) {
-        this.send(ws, {
-            type: 'error',
-            error,
-            timestamp: Date.now()
-        });
-    }
-    /**
-     * Get hub statistics
-     */
-    getStats() {
-        const totalEpisodes = this.db.prepare('SELECT COUNT(*) as count FROM episodes').get();
-        const tenants = this.db.prepare('SELECT COUNT(DISTINCT tenant_id) as count FROM episodes').get();
-        return {
-            connectedAgents: this.connections.size,
-            totalEpisodes: totalEpisodes.count,
-            tenants: tenants.count,
-            uptime: process.uptime()
-        };
-    }
-    /**
-     * Stop the hub server
-     */
-    async stop() {
-        logger.info('Stopping federation hub server');
-        // Close all connections
-        for (const [agentId, conn] of this.connections.entries()) {
-            conn.ws.close();
-        }
-        this.connections.clear();
-        // Close WebSocket server
-        if (this.wss) {
-            this.wss.close();
-        }
-        // Close HTTP server
-        if (this.server) {
-            this.server.close();
-        }
-        // Close databases
-        this.db.close();
-        await this.agentDB.close();
-        logger.info('Federation hub server stopped');
-    }
-    /**
-     * Query patterns from AgentDB with tenant isolation
-     */
-    async queryPatterns(tenantId, task, k = 5) {
-        try {
-            const results = await this.agentDB.searchPatterns({
-                task,
-                k,
-                minReward: 0.0
-            });
-            // Filter by tenant (session ID contains tenant prefix)
-            return results.filter((r) => r.sessionId?.startsWith(`${tenantId}/`));
-        }
-        catch (error) {
-            logger.error('Pattern query failed', { error: error.message });
-            return [];
-        }
-    }
-}
-//# sourceMappingURL=FederationHubServer.js.map

package/dist/agentic-flow/src/federation/FederationHubServer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"FederationHubServer.js","sourceRoot":"","sources":["../../../../src/federation/FederationHubServer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AA+B5C,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAY;IAClB,GAAG,CAAmB;IACtB,MAAM,CAAmC;IACzC,WAAW,GAAiC,IAAI,GAAG,EAAE,CAAC;IACtD,EAAE,CAAW;IACb,OAAO,CAAU;IACjB,iBAAiB,GAA2B,EAAE,CAAC;IAEvD,YAAY,MAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,GAAG,MAAM;SACV,CAAC;QAEF,gDAAgD;QAChD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,sDAAsD;QACtD,IAAI,CAAC,OAAO,GAAG,IAAW,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,yCAAyC;QACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8CZ,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,qBAAqB;gBACrB,IAAI,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;gBAE7B,0BAA0B;gBAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAExD,qBAAqB;gBACrB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAa,EAAE,EAAE;oBAC1C,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBAC5B,CAAC,CAAC,CAAC;gBAEH,kBAAkB;gBAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;oBACxC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;wBAC3C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;wBACtB,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;qBACjC,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;gBAEH,iBAAiB;gBACjB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAChC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC3D,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;YAEL,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrE,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,EAAa;QACpC,IAAI,OAA2B,CAAC;QAChC,IAAI,QAA4B,CAAC;QACjC,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAEtC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAEzD,gCAAgC;gBAChC,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;oBAC9C,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBAED,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrB,KAAK,MAAM;wBACT,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;wBACtD,IAAI,UAAU,EAAE,CAAC;4BACf,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;4BAC7B,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;4BAC/B,aAAa,GAAG,IAAI,CAAC;4BAErB,sBAAsB;4BACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;gCAC5B,EAAE;gCACF,OAAO;gCACP,QAAQ;gCACR,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gCACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;gCACtB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;6BACvC,CAAC,CAAC;4BAEH,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;wBAC5D,CAAC;wBACD,MAAM;oBAER,KAAK,MAAM;wBACT,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;4BACxB,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;wBACxD,CAAC;wBACD,MAAM;oBAER,KAAK,MAAM;wBACT,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;4BACxB,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;wBACxD,CAAC;wBACD,MAAM;oBAER;wBACE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,yBAAyB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,CAAC;YAEH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CACtB,EAAa,EACb,OAAoB;QAEpB,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+CAA+C;QAC/C,qDAAqD;QAErD,iBAAiB;QACjB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CACJ,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,EAChB,IAAI,CAAC,GAAG,EAAE,EACV,IAAI,CAAC,GAAG,EAAE,EACV,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAC1C,CAAC;QAEF,sBAAsB;QACtB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACZ,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CACtB,EAAa,EACb,OAAe,EACf,QAAgB,EAChB,OAAoB;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAEhF,wBAAwB;QACxB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,wBAAwB;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACZ,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,IAAI,CAAC,iBAAiB;YACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC5B,OAAO;YACP,QAAQ;YACR,WAAW,EAAE,OAAO,CAAC,MAAM;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CACtB,EAAa,EACb,OAAe,EACf,QAAgB,EAChB,OAAoB;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI5B,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGlC,CAAC,CAAC;QAEH,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,+BAA+B;gBAC/B,IAAI,CAAC,GAAG,CACN,QAAQ,EACR,OAAO,EACP,OAAO,CAAC,SAAS,IAAI,OAAO,EAC5B,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,QAAQ,IAAI,EAAE,EACtB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACvB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,SAAS,IAAI,CAAC,EACtB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EACnC,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;gBAEF,UAAU,CAAC,GAAG,CACZ,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EACnC,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;gBAEF,6DAA6D;gBAC7D,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;oBAC9B,SAAS,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE;oBACxD,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;oBAChC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;oBACnC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC;oBACjC,QAAQ,EAAE;wBACR,QAAQ;wBACR,OAAO;wBACP,WAAW,EAAE,OAAO,CAAC,WAAW;qBACjC;iBACF,CAAC,CAAC;gBAEH,WAAW,EAAE,CAAC;YAChB,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CACtC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAClC,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,sBAAsB;QACtB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACZ,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC5B,OAAO;YACP,QAAQ;YACR,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QAEH,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE;YACxC,IAAI,EAAE,MAAM;YACZ,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAC3B,QAAgB,EAChB,WAAmC;QAEnC,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAKhC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEjB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;YAC1B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;YACzC,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,QAAgB,EAChB,aAAqB,EACrB,OAAoB;QAEpB,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;gBAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC5B,cAAc,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,QAAQ;gBACR,cAAc,EAAE,cAAc;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,EAAa,EAAE,OAAoB;QAC9C,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,EAAa,EAAE,KAAa;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACZ,IAAI,EAAE,OAAO;YACb,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAAS,CAAC;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,EAAS,CAAC;QAExG,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YACtC,aAAa,EAAE,aAAa,CAAC,KAAK;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAE9C,wBAAwB;QACxB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,yBAAyB;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QAED,oBAAoB;QACpB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAChD,IAAI;gBACJ,CAAC;gBACD,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,uDAAuD;YACvD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAC/B,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF","sourcesContent":["/**\n * Federation Hub Server - WebSocket-based hub for agent synchronization\n *\n * This is a production-ready implementation using WebSocket (HTTP/2 upgrade)\n * as a fallback until native QUIC is implemented.\n */\n\nimport { WebSocketServer, WebSocket } from 'ws';\nimport { createServer } from 'http';\nimport { logger } from '../utils/logger.js';\nimport Database from '../db/sql-adapter.js';\n// AgentDB is optional - federation works with SQLite only\ntype AgentDB = any;\n\nexport interface HubConfig {\n  port?: number;\n  dbPath?: string;\n  maxAgents?: number;\n  syncInterval?: number;\n}\n\nexport interface AgentConnection {\n  ws: WebSocket;\n  agentId: string;\n  tenantId: string;\n  connectedAt: number;\n  lastSyncAt: number;\n  vectorClock: Record<string, number>;\n}\n\nexport interface SyncMessage {\n  type: 'auth' | 'pull' | 'push' | 'ack' | 'error';\n  agentId?: string;\n  tenantId?: string;\n  token?: string;\n  vectorClock?: Record<string, number>;\n  data?: any[];\n  error?: string;\n  timestamp: number;\n}\n\nexport class FederationHubServer {\n  private config: HubConfig;\n  private wss?: WebSocketServer;\n  private server?: ReturnType<typeof createServer>;\n  private connections: Map<string, AgentConnection> = new Map();\n  private db: Database;\n  private agentDB: AgentDB;\n  private globalVectorClock: Record<string, number> = {};\n\n  constructor(config: HubConfig) {\n    this.config = {\n      port: 8443,\n      dbPath: ':memory:',\n      maxAgents: 1000,\n      syncInterval: 5000,\n      ...config\n    };\n\n    // Initialize hub database (SQLite for metadata)\n    this.db = new Database(this.config.dbPath!);\n    this.initializeDatabase();\n\n    // AgentDB integration optional - using SQLite for now\n    this.agentDB = null as any;\n    logger.info('Federation hub initialized with SQLite');\n  }\n\n  /**\n   * Initialize hub database schema\n   */\n  private initializeDatabase(): void {\n    // Memory store: tenant-isolated episodes\n    this.db.exec(`\n      CREATE TABLE IF NOT EXISTS episodes (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        tenant_id TEXT NOT NULL,\n        agent_id TEXT NOT NULL,\n        session_id TEXT NOT NULL,\n        task TEXT NOT NULL,\n        input TEXT NOT NULL,\n        output TEXT NOT NULL,\n        reward REAL NOT NULL,\n        critique TEXT,\n        success INTEGER NOT NULL,\n        tokens_used INTEGER DEFAULT 0,\n        latency_ms INTEGER DEFAULT 0,\n        vector_clock TEXT NOT NULL,\n        created_at INTEGER NOT NULL,\n        UNIQUE(tenant_id, agent_id, session_id, task)\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_episodes_tenant ON episodes(tenant_id);\n      CREATE INDEX IF NOT EXISTS idx_episodes_task ON episodes(tenant_id, task);\n      CREATE INDEX IF NOT EXISTS idx_episodes_created ON episodes(created_at);\n\n      -- Change log for sync\n      CREATE TABLE IF NOT EXISTS change_log (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        tenant_id TEXT NOT NULL,\n        agent_id TEXT NOT NULL,\n        operation TEXT NOT NULL,\n        episode_id INTEGER,\n        vector_clock TEXT NOT NULL,\n        created_at INTEGER NOT NULL,\n        FOREIGN KEY(episode_id) REFERENCES episodes(id)\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_changes_tenant ON change_log(tenant_id);\n      CREATE INDEX IF NOT EXISTS idx_changes_created ON change_log(created_at);\n\n      -- Agent registry\n      CREATE TABLE IF NOT EXISTS agents (\n        agent_id TEXT PRIMARY KEY,\n        tenant_id TEXT NOT NULL,\n        connected_at INTEGER NOT NULL,\n        last_sync_at INTEGER NOT NULL,\n        vector_clock TEXT NOT NULL\n      );\n    `);\n\n    logger.info('Federation hub database initialized');\n  }\n\n  /**\n   * Start the hub server\n   */\n  async start(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      try {\n        // Create HTTP server\n        this.server = createServer();\n\n        // Create WebSocket server\n        this.wss = new WebSocketServer({ server: this.server });\n\n        // Handle connections\n        this.wss.on('connection', (ws: WebSocket) => {\n          this.handleConnection(ws);\n        });\n\n        // Start listening\n        this.server.listen(this.config.port, () => {\n          logger.info('Federation hub server started', {\n            port: this.config.port,\n            protocol: 'WebSocket',\n            maxAgents: this.config.maxAgents\n          });\n          resolve();\n        });\n\n        // Error handling\n        this.server.on('error', (error) => {\n          logger.error('Hub server error', { error: error.message });\n          reject(error);\n        });\n\n      } catch (error: any) {\n        logger.error('Failed to start hub server', { error: error.message });\n        reject(error);\n      }\n    });\n  }\n\n  /**\n   * Handle new agent connection\n   */\n  private handleConnection(ws: WebSocket): void {\n    let agentId: string | undefined;\n    let tenantId: string | undefined;\n    let authenticated = false;\n\n    logger.info('New connection attempt');\n\n    ws.on('message', async (data: Buffer) => {\n      try {\n        const message: SyncMessage = JSON.parse(data.toString());\n\n        // Authentication required first\n        if (!authenticated && message.type !== 'auth') {\n          this.sendError(ws, 'Authentication required');\n          ws.close();\n          return;\n        }\n\n        switch (message.type) {\n          case 'auth':\n            const authResult = await this.handleAuth(ws, message);\n            if (authResult) {\n              agentId = authResult.agentId;\n              tenantId = authResult.tenantId;\n              authenticated = true;\n\n              // Register connection\n              this.connections.set(agentId, {\n                ws,\n                agentId,\n                tenantId,\n                connectedAt: Date.now(),\n                lastSyncAt: Date.now(),\n                vectorClock: message.vectorClock || {}\n              });\n\n              logger.info('Agent authenticated', { agentId, tenantId });\n            }\n            break;\n\n          case 'pull':\n            if (agentId && tenantId) {\n              await this.handlePull(ws, agentId, tenantId, message);\n            }\n            break;\n\n          case 'push':\n            if (agentId && tenantId) {\n              await this.handlePush(ws, agentId, tenantId, message);\n            }\n            break;\n\n          default:\n            this.sendError(ws, `Unknown message type: ${message.type}`);\n        }\n\n      } catch (error: any) {\n        logger.error('Message handling error', { error: error.message });\n        this.sendError(ws, error.message);\n      }\n    });\n\n    ws.on('close', () => {\n      if (agentId) {\n        this.connections.delete(agentId);\n        logger.info('Agent disconnected', { agentId, tenantId });\n      }\n    });\n\n    ws.on('error', (error) => {\n      logger.error('WebSocket error', { error: error.message, agentId });\n    });\n  }\n\n  /**\n   * Handle authentication\n   */\n  private async handleAuth(\n    ws: WebSocket,\n    message: SyncMessage\n  ): Promise<{ agentId: string; tenantId: string } | null> {\n    if (!message.agentId || !message.tenantId || !message.token) {\n      this.sendError(ws, 'Missing authentication credentials');\n      return null;\n    }\n\n    // TODO: Verify JWT token (for now, accept all)\n    // In production, verify JWT signature and expiration\n\n    // Register agent\n    this.db.prepare(`\n      INSERT OR REPLACE INTO agents (agent_id, tenant_id, connected_at, last_sync_at, vector_clock)\n      VALUES (?, ?, ?, ?, ?)\n    `).run(\n      message.agentId,\n      message.tenantId,\n      Date.now(),\n      Date.now(),\n      JSON.stringify(message.vectorClock || {})\n    );\n\n    // Send acknowledgment\n    this.send(ws, {\n      type: 'ack',\n      timestamp: Date.now()\n    });\n\n    return {\n      agentId: message.agentId,\n      tenantId: message.tenantId\n    };\n  }\n\n  /**\n   * Handle pull request (agent wants updates from hub)\n   */\n  private async handlePull(\n    ws: WebSocket,\n    agentId: string,\n    tenantId: string,\n    message: SyncMessage\n  ): Promise<void> {\n    const conn = this.connections.get(agentId);\n    if (!conn) {\n      this.sendError(ws, 'Agent not connected');\n      return;\n    }\n\n    // Get changes since agent's last vector clock\n    const changes = await this.getChangesSince(tenantId, message.vectorClock || {});\n\n    // Update last sync time\n    conn.lastSyncAt = Date.now();\n\n    // Send changes to agent\n    this.send(ws, {\n      type: 'ack',\n      data: changes,\n      vectorClock: this.globalVectorClock,\n      timestamp: Date.now()\n    });\n\n    logger.info('Pull completed', {\n      agentId,\n      tenantId,\n      changeCount: changes.length\n    });\n  }\n\n  /**\n   * Handle push request (agent sending updates to hub)\n   */\n  private async handlePush(\n    ws: WebSocket,\n    agentId: string,\n    tenantId: string,\n    message: SyncMessage\n  ): Promise<void> {\n    const conn = this.connections.get(agentId);\n    if (!conn) {\n      this.sendError(ws, 'Agent not connected');\n      return;\n    }\n\n    if (!message.data || message.data.length === 0) {\n      this.send(ws, { type: 'ack', timestamp: Date.now() });\n      return;\n    }\n\n    // Store episodes in both SQLite (metadata) and AgentDB (vector memory)\n    const stmt = this.db.prepare(`\n      INSERT OR REPLACE INTO episodes\n      (tenant_id, agent_id, session_id, task, input, output, reward, critique, success, tokens_used, latency_ms, vector_clock, created_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const changeStmt = this.db.prepare(`\n      INSERT INTO change_log (tenant_id, agent_id, operation, episode_id, vector_clock, created_at)\n      VALUES (?, ?, 'insert', last_insert_rowid(), ?, ?)\n    `);\n\n    let insertCount = 0;\n\n    for (const episode of message.data) {\n      try {\n        // Store in SQLite for metadata\n        stmt.run(\n          tenantId,\n          agentId,\n          episode.sessionId || agentId,\n          episode.task,\n          episode.input,\n          episode.output,\n          episode.reward,\n          episode.critique || '',\n          episode.success ? 1 : 0,\n          episode.tokensUsed || 0,\n          episode.latencyMs || 0,\n          JSON.stringify(message.vectorClock),\n          Date.now()\n        );\n\n        changeStmt.run(\n          tenantId,\n          agentId,\n          JSON.stringify(message.vectorClock),\n          Date.now()\n        );\n\n        // Store in AgentDB for vector memory (with tenant isolation)\n        await this.agentDB.storePattern({\n          sessionId: `${tenantId}/${episode.sessionId || agentId}`,\n          task: episode.task,\n          input: episode.input,\n          output: episode.output,\n          reward: episode.reward,\n          critique: episode.critique || '',\n          success: episode.success,\n          tokensUsed: episode.tokensUsed || 0,\n          latencyMs: episode.latencyMs || 0,\n          metadata: {\n            tenantId,\n            agentId,\n            vectorClock: message.vectorClock\n          }\n        });\n\n        insertCount++;\n      } catch (error: any) {\n        logger.error('Failed to insert episode', { error: error.message });\n      }\n    }\n\n    // Update global vector clock\n    if (message.vectorClock) {\n      for (const [agent, ts] of Object.entries(message.vectorClock)) {\n        this.globalVectorClock[agent] = Math.max(\n          this.globalVectorClock[agent] || 0,\n          ts\n        );\n      }\n    }\n\n    // Update connection vector clock\n    conn.vectorClock = { ...this.globalVectorClock };\n    conn.lastSyncAt = Date.now();\n\n    // Send acknowledgment\n    this.send(ws, {\n      type: 'ack',\n      timestamp: Date.now()\n    });\n\n    logger.info('Push completed', {\n      agentId,\n      tenantId,\n      episodeCount: insertCount\n    });\n\n    // Broadcast to other agents in same tenant (optional real-time sync)\n    this.broadcastToTenant(tenantId, agentId, {\n      type: 'push',\n      agentId,\n      data: message.data,\n      timestamp: Date.now()\n    });\n  }\n\n  /**\n   * Get changes since a given vector clock\n   * Returns memories from other agents in the same tenant\n   */\n  private async getChangesSince(\n    tenantId: string,\n    vectorClock: Record<string, number>\n  ): Promise<any[]> {\n    // Get all episodes for tenant from SQLite\n    const episodes = this.db.prepare(`\n      SELECT * FROM episodes\n      WHERE tenant_id = ?\n      ORDER BY created_at DESC\n      LIMIT 100\n    `).all(tenantId);\n\n    return episodes.map((row: any) => ({\n      id: row.id,\n      agentId: row.agent_id,\n      sessionId: row.session_id,\n      task: row.task,\n      input: row.input,\n      output: row.output,\n      reward: row.reward,\n      critique: row.critique,\n      success: row.success === 1,\n      tokensUsed: row.tokens_used,\n      latencyMs: row.latency_ms,\n      vectorClock: JSON.parse(row.vector_clock),\n      createdAt: row.created_at\n    }));\n  }\n\n  /**\n   * Broadcast message to all agents in a tenant (except sender)\n   */\n  private broadcastToTenant(\n    tenantId: string,\n    senderAgentId: string,\n    message: SyncMessage\n  ): void {\n    let broadcastCount = 0;\n\n    for (const [agentId, conn] of this.connections.entries()) {\n      if (conn.tenantId === tenantId && agentId !== senderAgentId) {\n        this.send(conn.ws, message);\n        broadcastCount++;\n      }\n    }\n\n    if (broadcastCount > 0) {\n      logger.debug('Broadcasted to tenant agents', {\n        tenantId,\n        recipientCount: broadcastCount\n      });\n    }\n  }\n\n  /**\n   * Send message to WebSocket\n   */\n  private send(ws: WebSocket, message: SyncMessage): void {\n    if (ws.readyState === WebSocket.OPEN) {\n      ws.send(JSON.stringify(message));\n    }\n  }\n\n  /**\n   * Send error message\n   */\n  private sendError(ws: WebSocket, error: string): void {\n    this.send(ws, {\n      type: 'error',\n      error,\n      timestamp: Date.now()\n    });\n  }\n\n  /**\n   * Get hub statistics\n   */\n  getStats(): {\n    connectedAgents: number;\n    totalEpisodes: number;\n    tenants: number;\n    uptime: number;\n  } {\n    const totalEpisodes = this.db.prepare('SELECT COUNT(*) as count FROM episodes').get() as any;\n    const tenants = this.db.prepare('SELECT COUNT(DISTINCT tenant_id) as count FROM episodes').get() as any;\n\n    return {\n      connectedAgents: this.connections.size,\n      totalEpisodes: totalEpisodes.count,\n      tenants: tenants.count,\n      uptime: process.uptime()\n    };\n  }\n\n  /**\n   * Stop the hub server\n   */\n  async stop(): Promise<void> {\n    logger.info('Stopping federation hub server');\n\n    // Close all connections\n    for (const [agentId, conn] of this.connections.entries()) {\n      conn.ws.close();\n    }\n    this.connections.clear();\n\n    // Close WebSocket server\n    if (this.wss) {\n      this.wss.close();\n    }\n\n    // Close HTTP server\n    if (this.server) {\n      this.server.close();\n    }\n\n    // Close databases\n    this.db.close();\n    await this.agentDB.close();\n\n    logger.info('Federation hub server stopped');\n  }\n\n  /**\n   * Query patterns from AgentDB with tenant isolation\n   */\n  async queryPatterns(tenantId: string, task: string, k: number = 5): Promise<any[]> {\n    try {\n      const results = await this.agentDB.searchPatterns({\n        task,\n        k,\n        minReward: 0.0\n      });\n\n      // Filter by tenant (session ID contains tenant prefix)\n      return results.filter((r: any) =>\n        r.sessionId?.startsWith(`${tenantId}/`)\n      );\n    } catch (error: any) {\n      logger.error('Pattern query failed', { error: error.message });\n      return [];\n    }\n  }\n}\n"]}

package/dist/agentic-flow/src/federation/SecurityManager.d.ts

@@ -1,80 +0,0 @@
-/**
- * Security Manager - Authentication, encryption, and access control
- *
- * Features:
- * - JWT token generation and validation
- * - AES-256 encryption for data at rest
- * - Tenant isolation
- * - mTLS certificate management
- */
-export interface AgentTokenPayload {
-    agentId: string;
-    tenantId: string;
-    expiresAt: number;
-}
-export interface EncryptionKeys {
-    encryptionKey: Buffer;
-    iv: Buffer;
-}
-export declare class SecurityManager {
-    private readonly algorithm;
-    private readonly jwtSecret;
-    private encryptionCache;
-    constructor();
-    /**
-     * Create JWT token for agent authentication
-     */
-    createAgentToken(payload: AgentTokenPayload): Promise<string>;
-    /**
-     * Verify JWT token
-     */
-    verifyAgentToken(token: string): Promise<AgentTokenPayload>;
-    /**
-     * Get or create encryption keys for a tenant
-     */
-    getEncryptionKeys(tenantId: string): Promise<EncryptionKeys>;
-    /**
-     * Encrypt data with AES-256-GCM
-     */
-    encrypt(data: string, tenantId: string): Promise<{
-        encrypted: string;
-        authTag: string;
-    }>;
-    /**
-     * Decrypt data with AES-256-GCM
-     */
-    decrypt(encrypted: string, authTag: string, tenantId: string): Promise<string>;
-    /**
-     * Generate mTLS certificates for agent-to-hub communication
-     */
-    generateMTLSCertificates(agentId: string): Promise<{
-        cert: string;
-        key: string;
-        ca: string;
-    }>;
-    /**
-     * Validate tenant access to data
-     */
-    validateTenantAccess(requestTenantId: string, dataTenantId: string): boolean;
-    /**
-     * Hash sensitive data for storage (one-way)
-     */
-    hashData(data: string): string;
-    /**
-     * Generate secure random ID
-     */
-    generateSecureId(): string;
-    /**
-     * Base64 URL-safe encoding
-     */
-    private base64UrlEncode;
-    /**
-     * Base64 URL-safe decoding
-     */
-    private base64UrlDecode;
-    /**
-     * Clear cached keys (for testing or security refresh)
-     */
-    clearCache(): void;
-}
-//# sourceMappingURL=SecurityManager.d.ts.map