anantham-v2 2.0.0-alpha.1

package/dist/agents/agent-security.d.ts

@@ -0,0 +1,17 @@
+import { AgentManifest } from "../domain/agent.js";
+/**
+ * Security guard for Agent definitions, privilege validation, and injection filtering.
+ * PRD Part 3 Section 94.
+ */
+export declare class AgentSecurityGuard {
+    private static readonly INJECTION_PATTERNS;
+    private static readonly DISALLOWED_PERMISSIONS;
+    /**
+     * Validate agent manifest for prompt injection, disallowed permissions, or privilege escalation.
+     */
+    static validateManifest(manifest: AgentManifest): {
+        isValid: boolean;
+        error?: string;
+    };
+}
+//# sourceMappingURL=agent-security.d.ts.map

package/dist/agents/agent-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-security.d.ts","sourceRoot":"","sources":["../../src/agents/agent-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAOxC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAK5C;IAEF;;OAEG;WACW,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;CAsB9F"}

package/dist/agents/agent-security.js

@@ -0,0 +1,44 @@
+/**
+ * Security guard for Agent definitions, privilege validation, and injection filtering.
+ * PRD Part 3 Section 94.
+ */
+export class AgentSecurityGuard {
+    static INJECTION_PATTERNS = [
+        /ignore\s+all\s+(previous|prior)\s+instructions/i,
+        /system\s+override/i,
+        /bypass\s+(all\s+)?(policy|policies|security|rules)/i,
+        /disable\s+(safety|guards|toolgateway|checks)/i,
+        /escalate\s+privileges/i,
+        /<script[\s\S]*?>[\s\S]*?<\/script>/i,
+    ];
+    static DISALLOWED_PERMISSIONS = [
+        "root",
+        "policy:bypass",
+        "security:admin",
+        "all:unrestricted",
+    ];
+    /**
+     * Validate agent manifest for prompt injection, disallowed permissions, or privilege escalation.
+     */
+    static validateManifest(manifest) {
+        // 1. Check prompt injection in objective and role
+        const textToCheck = `${manifest.role} ${manifest.objective}`;
+        for (const pattern of this.INJECTION_PATTERNS) {
+            if (pattern.test(textToCheck)) {
+                return {
+                    isValid: false,
+                    error: `Agent manifest contains disallowed adversarial prompt pattern matching: ${pattern}`,
+                };
+            }
+        }
+        // 2. Check disallowed permissions
+        if (this.DISALLOWED_PERMISSIONS.includes(manifest.permissionProfile.toLowerCase())) {
+            return {
+                isValid: false,
+                error: `Agent requested prohibited permission profile: "${manifest.permissionProfile}"`,
+            };
+        }
+        return { isValid: true };
+    }
+}
+//# sourceMappingURL=agent-security.js.map

package/dist/agents/agent-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-security.js","sourceRoot":"","sources":["../../src/agents/agent-security.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAU,kBAAkB,GAAG;QAC3C,iDAAiD;QACjD,oBAAoB;QACpB,qDAAqD;QACrD,+CAA+C;QAC/C,wBAAwB;QACxB,qCAAqC;KACtC,CAAC;IAEM,MAAM,CAAU,sBAAsB,GAAG;QAC/C,MAAM;QACN,eAAe;QACf,gBAAgB;QAChB,kBAAkB;KACnB,CAAC;IAEF;;OAEG;IACI,MAAM,CAAC,gBAAgB,CAAC,QAAuB;QACpD,kDAAkD;QAClD,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC7D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,2EAA2E,OAAO,EAAE;iBAC5F,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mDAAmD,QAAQ,CAAC,iBAAiB,GAAG;aACxF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC"}

package/dist/agents/agent-startup-resolver.d.ts

@@ -0,0 +1,38 @@
+import { AgentManifest, AgentStartupPlan } from "../domain/agent.js";
+import { ToolRegistry } from "../tools/tool-registry.js";
+import { SkillRegistry } from "../skills/skill-registry.js";
+import { PolicyEngine } from "../policy/policy-engine.js";
+import { ModelRouter } from "../models/model-router.js";
+export interface AgentResolutionContext {
+    projectId: string;
+    sessionId: string;
+    taskId?: string;
+}
+export interface AgentStartupResolverOptions {
+    toolRegistry?: ToolRegistry;
+    skillRegistry?: SkillRegistry;
+    policyEngine?: PolicyEngine;
+    modelRouter?: ModelRouter;
+}
+export interface ResolutionResult {
+    success: boolean;
+    startupPlan?: AgentStartupPlan;
+    errorCode?: string;
+    errorMessage?: string;
+}
+/**
+ * Deterministic 10-Step Agent Startup Resolution Pipeline.
+ * PRD Part 2 Section 278, 283.
+ */
+export declare class AgentStartupResolver {
+    private toolRegistry?;
+    private skillRegistry?;
+    private policyEngine?;
+    private modelRouter?;
+    constructor(options?: AgentStartupResolverOptions);
+    /**
+     * Resolve an agent manifest and context into an immutable AgentStartupPlan.
+     */
+    resolve(manifest: AgentManifest, context: AgentResolutionContext): ResolutionResult;
+}
+//# sourceMappingURL=agent-startup-resolver.d.ts.map

package/dist/agents/agent-startup-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-startup-resolver.d.ts","sourceRoot":"","sources":["../../src/agents/agent-startup-resolver.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,gBAAgB,EAEjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,WAAW,CAAC,CAAc;gBAEtB,OAAO,GAAE,2BAAgC;IAOrD;;OAEG;IACI,OAAO,CACZ,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,sBAAsB,GAC9B,gBAAgB;CAsLpB"}

package/dist/agents/agent-startup-resolver.js

@@ -0,0 +1,193 @@
+import { randomUUID } from "node:crypto";
+import { AgentStartupPlanSchema, } from "../domain/agent.js";
+import { AgentSecurityGuard } from "./agent-security.js";
+/**
+ * Deterministic 10-Step Agent Startup Resolution Pipeline.
+ * PRD Part 2 Section 278, 283.
+ */
+export class AgentStartupResolver {
+    toolRegistry;
+    skillRegistry;
+    policyEngine;
+    modelRouter;
+    constructor(options = {}) {
+        this.toolRegistry = options.toolRegistry;
+        this.skillRegistry = options.skillRegistry;
+        this.policyEngine = options.policyEngine;
+        this.modelRouter = options.modelRouter;
+    }
+    /**
+     * Resolve an agent manifest and context into an immutable AgentStartupPlan.
+     */
+    resolve(manifest, context) {
+        // 1. Security & Adversarial Validation
+        const secResult = AgentSecurityGuard.validateManifest(manifest);
+        if (!secResult.isValid) {
+            return {
+                success: false,
+                errorCode: "SECURITY_VIOLATION",
+                errorMessage: secResult.error,
+            };
+        }
+        // 2. Model & Capability Resolution
+        let modelId = manifest.modelProfile;
+        let provider = "system";
+        let contextLimit = 128000;
+        if (this.modelRouter) {
+            const requiredFeatures = [];
+            if (manifest.tools.length > 0 ||
+                manifest.requiredCapabilities.includes("toolCalling") ||
+                manifest.requiredCapabilities.includes("tool_calling")) {
+                requiredFeatures.push("toolCalling");
+            }
+            if (manifest.requiredCapabilities.includes("reasoning")) {
+                requiredFeatures.push("reasoning");
+            }
+            const decision = this.modelRouter.route({
+                requirements: {
+                    requiredInputs: ["text"],
+                    requiredFeatures: requiredFeatures.length > 0 ? requiredFeatures : undefined,
+                },
+                preferredModelId: manifest.modelProfile !== "default" ? manifest.modelProfile : undefined,
+                sensitivity: "normal",
+                maxAttempts: 1,
+            });
+            if (!decision.selectedCandidate) {
+                return {
+                    success: false,
+                    errorCode: "MODEL_UNRESOLVABLE",
+                    errorMessage: `Failed to resolve compatible model for profile "${manifest.modelProfile}" and capabilities: ${manifest.requiredCapabilities.join(", ")}`,
+                };
+            }
+            modelId = decision.selectedCandidate.modelId;
+            provider = decision.selectedCandidate.providerId;
+            contextLimit =
+                decision.selectedCandidate.profile.limits?.contextWindow || 128000;
+        }
+        else {
+            if (manifest.modelProfile === "unsupported_profile") {
+                return {
+                    success: false,
+                    errorCode: "MODEL_UNRESOLVABLE",
+                    errorMessage: `Model profile "${manifest.modelProfile}" is not available`,
+                };
+            }
+            if (manifest.modelProfile === "reasoning") {
+                modelId = "claude-3-5-sonnet-20241022";
+                provider = "anthropic";
+                contextLimit = 200000;
+            }
+            else if (manifest.modelProfile === "fast") {
+                modelId = "claude-3-5-haiku-20241022";
+                provider = "anthropic";
+                contextLimit = 128000;
+            }
+            else {
+                modelId = "claude-3-7-sonnet";
+                provider = "anthropic";
+                contextLimit = 200000;
+            }
+        }
+        // 3. Tool Resolution
+        if (this.toolRegistry && manifest.tools.length > 0) {
+            for (const toolName of manifest.tools) {
+                if (!this.toolRegistry.has(toolName)) {
+                    return {
+                        success: false,
+                        errorCode: "TOOL_UNRESOLVABLE",
+                        errorMessage: `Required tool "${toolName}" is not registered in ToolRegistry`,
+                    };
+                }
+            }
+        }
+        // 4. Skill Resolution
+        if (this.skillRegistry && manifest.skills.length > 0) {
+            for (const skillName of manifest.skills) {
+                // Skill name can be "skillId" or "skillId@version"
+                const skillId = skillName.split("@")[0] || skillName;
+                const skill = this.skillRegistry.get(skillId);
+                if (!skill || skill.lifecycleState !== "enabled") {
+                    return {
+                        success: false,
+                        errorCode: "SKILL_UNRESOLVABLE",
+                        errorMessage: `Required skill "${skillName}" is not registered or enabled in SkillRegistry`,
+                    };
+                }
+            }
+        }
+        // 5. Permission & Policy Resolution
+        const grantedPermissions = [];
+        if (manifest.permissionProfile === "developer") {
+            grantedPermissions.push("filesystem.read", "filesystem.write", "shell.execute", "tool.invoke");
+        }
+        else if (manifest.permissionProfile === "readonly") {
+            grantedPermissions.push("filesystem.read", "tool.invoke");
+        }
+        else if (manifest.permissionProfile === "admin") {
+            grantedPermissions.push("filesystem.read", "filesystem.write", "shell.execute", "network.access", "tool.invoke");
+        }
+        else {
+            grantedPermissions.push("filesystem.read");
+        }
+        if (this.policyEngine) {
+            // Policy integration
+        }
+        // 6. Executor Resolution
+        const isSandboxed = manifest.executorProfile !== "local";
+        const executor = {
+            type: manifest.executorProfile,
+            isSandboxed,
+        };
+        // 7. Budget & Resource Resolution
+        const budget = {
+            maxTokens: manifest.budget.maxTokens ?? 100000,
+            maxCostUsd: manifest.budget.maxCostUsd ?? 5.0,
+            maxToolCalls: manifest.budget.maxToolCalls ?? 100,
+            maxDurationSeconds: manifest.budget.maxDurationSeconds ?? 3600,
+        };
+        // 8. Context Scope Resolution
+        const contextScope = {
+            maxTokens: manifest.contextScope.maxTokens ?? 64000,
+            allowedPaths: manifest.contextScope.allowedPaths ?? ["**/*"],
+            includeMemory: manifest.contextScope.includeMemory ?? true,
+            allowedRepresentations: manifest.contextScope.allowedRepresentations ?? ["text", "code", "structured"],
+        };
+        // 9. Memory Scope Resolution
+        const memoryScope = manifest.memoryScope || {
+            namespace: `agent:${manifest.id}`,
+            readonly: false,
+            crossProjectAccess: false,
+        };
+        // 10. Construct Immutable AgentStartupPlan
+        const startupPlan = {
+            planId: `plan_${randomUUID()}`,
+            agentId: manifest.id,
+            version: manifest.version,
+            role: manifest.role,
+            objective: manifest.objective,
+            resolvedModel: {
+                modelId,
+                provider,
+                contextLimit,
+            },
+            resolvedCapabilities: manifest.requiredCapabilities,
+            resolvedTools: manifest.tools,
+            resolvedSkills: manifest.skills,
+            grantedPermissions,
+            executor,
+            contextScope,
+            memoryScope,
+            budget,
+            projectId: context.projectId,
+            sessionId: context.sessionId,
+            taskId: context.taskId,
+            resolvedAt: new Date().toISOString(),
+        };
+        AgentStartupPlanSchema.parse(startupPlan);
+        return {
+            success: true,
+            startupPlan,
+        };
+    }
+}
+//# sourceMappingURL=agent-startup-resolver.js.map

package/dist/agents/agent-startup-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-startup-resolver.js","sourceRoot":"","sources":["../../src/agents/agent-startup-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAGL,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AA0BzD;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACvB,YAAY,CAAgB;IAC5B,aAAa,CAAiB;IAC9B,YAAY,CAAgB;IAC5B,WAAW,CAAe;IAElC,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,CAAC;IAED;;OAEG;IACI,OAAO,CACZ,QAAuB,EACvB,OAA+B;QAE/B,uCAAuC;QACvC,MAAM,SAAS,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,oBAAoB;gBAC/B,YAAY,EAAE,SAAS,CAAC,KAAK;aAC9B,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC;QACpC,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,YAAY,GAAG,MAAM,CAAC;QAE1B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,gBAAgB,GAA8K,EAAE,CAAC;YACvM,IACE,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACzB,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACrD,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,EACtD,CAAC;gBACD,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxD,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBACtC,YAAY,EAAE;oBACZ,cAAc,EAAE,CAAC,MAAM,CAAC;oBACxB,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;iBAC7E;gBACD,gBAAgB,EACd,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBACzE,WAAW,EAAE,QAAQ;gBACrB,WAAW,EAAE,CAAC;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAChC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,oBAAoB;oBAC/B,YAAY,EAAE,mDAAmD,QAAQ,CAAC,YAAY,uBAAuB,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACxJ,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAC7C,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC;YACjD,YAAY;gBACV,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,IAAI,MAAM,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,CAAC,YAAY,KAAK,qBAAqB,EAAE,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,oBAAoB;oBAC/B,YAAY,EAAE,kBAAkB,QAAQ,CAAC,YAAY,oBAAoB;iBAC1E,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBAC1C,OAAO,GAAG,4BAA4B,CAAC;gBACvC,QAAQ,GAAG,WAAW,CAAC;gBACvB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;iBAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC5C,OAAO,GAAG,2BAA2B,CAAC;gBACtC,QAAQ,GAAG,WAAW,CAAC;gBACvB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,QAAQ,GAAG,WAAW,CAAC;gBACvB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrC,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,SAAS,EAAE,mBAAmB;wBAC9B,YAAY,EAAE,kBAAkB,QAAQ,qCAAqC;qBAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACxC,mDAAmD;gBACnD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;gBACrD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjD,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,SAAS,EAAE,oBAAoB;wBAC/B,YAAY,EAAE,mBAAmB,SAAS,iDAAiD;qBAC5F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,kBAAkB,GAAa,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,iBAAiB,KAAK,WAAW,EAAE,CAAC;YAC/C,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QACjG,CAAC;aAAM,IAAI,QAAQ,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACrD,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,QAAQ,CAAC,iBAAiB,KAAK,OAAO,EAAE,CAAC;YAClD,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACnH,CAAC;aAAM,CAAC;YACN,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,qBAAqB;QACvB,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,KAAK,OAAO,CAAC;QACzD,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,QAAQ,CAAC,eAAe;YAC9B,WAAW;SACZ,CAAC;QAEF,kCAAkC;QAClC,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM;YAC9C,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG;YAC7C,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,IAAI,GAAG;YACjD,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI;SAC/D,CAAC;QAEF,8BAA8B;QAC9B,MAAM,YAAY,GAAG;YACnB,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS,IAAI,KAAK;YACnD,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC;YAC5D,aAAa,EAAE,QAAQ,CAAC,YAAY,CAAC,aAAa,IAAI,IAAI;YAC1D,sBAAsB,EAAE,QAAQ,CAAC,YAAY,CAAC,sBAAsB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;SACvG,CAAC;QAEF,6BAA6B;QAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI;YAC1C,SAAS,EAAE,SAAS,QAAQ,CAAC,EAAE,EAAE;YACjC,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,KAAK;SAC1B,CAAC;QAEF,2CAA2C;QAC3C,MAAM,WAAW,GAAqB;YACpC,MAAM,EAAE,QAAQ,UAAU,EAAE,EAAE;YAC9B,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,aAAa,EAAE;gBACb,OAAO;gBACP,QAAQ;gBACR,YAAY;aACb;YACD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,kBAAkB;YAClB,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QAEF,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW;SACZ,CAAC;IACJ,CAAC;CACF"}

package/dist/agents/delegation-guard.d.ts

@@ -0,0 +1,23 @@
+import { AgentRuntimeState, AgentStartupPlan } from "../domain/agent.js";
+import { DelegationRequest } from "../domain/team.js";
+export interface DelegationValidationResult {
+    valid: boolean;
+    errorCode?: string;
+    errorMessage?: string;
+}
+export interface DelegationGuardOptions {
+    maxDepth?: number;
+    maxChildren?: number;
+}
+/**
+ * Delegation Guard enforcing hierarchy depth bounds, fan-out limits,
+ * anti-privilege escalation, and budget containment.
+ * PRD Part 2 Section 38, Section 39.
+ */
+export declare class DelegationGuard {
+    private readonly maxDepth;
+    private readonly maxChildren;
+    constructor(options?: DelegationGuardOptions);
+    validateDelegation(parentInstance: AgentRuntimeState, parentPlan: AgentStartupPlan, request: DelegationRequest, currentChildCount: number): DelegationValidationResult;
+}
+//# sourceMappingURL=delegation-guard.d.ts.map

package/dist/agents/delegation-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-guard.d.ts","sourceRoot":"","sources":["../../src/agents/delegation-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,OAAO,CAAC,EAAE,sBAAsB;IAKrC,kBAAkB,CACvB,cAAc,EAAE,iBAAiB,EACjC,UAAU,EAAE,gBAAgB,EAC5B,OAAO,EAAE,iBAAiB,EAC1B,iBAAiB,EAAE,MAAM,GACxB,0BAA0B;CA+D9B"}

package/dist/agents/delegation-guard.js

@@ -0,0 +1,70 @@
+/**
+ * Delegation Guard enforcing hierarchy depth bounds, fan-out limits,
+ * anti-privilege escalation, and budget containment.
+ * PRD Part 2 Section 38, Section 39.
+ */
+export class DelegationGuard {
+    maxDepth;
+    maxChildren;
+    constructor(options) {
+        this.maxDepth = options?.maxDepth ?? 4;
+        this.maxChildren = options?.maxChildren ?? 8;
+    }
+    validateDelegation(parentInstance, parentPlan, request, currentChildCount) {
+        // 1. Parent status check
+        if (parentInstance.status !== "running" && parentInstance.status !== "ready") {
+            return {
+                valid: false,
+                errorCode: "PARENT_NOT_RUNNING",
+                errorMessage: `Parent agent instance "${parentInstance.instanceId}" is in state "${parentInstance.status}" and cannot delegate`,
+            };
+        }
+        // 2. Delegation Depth Check
+        const currentDepth = parentPlan.metadata?.delegationDepth ?? 0;
+        if (currentDepth >= this.maxDepth) {
+            return {
+                valid: false,
+                errorCode: "MAX_DELEGATION_DEPTH_EXCEEDED",
+                errorMessage: `Cannot delegate. Current depth is ${currentDepth}, max allowed depth is ${this.maxDepth}`,
+            };
+        }
+        // 3. Active Children Fan-Out Check
+        if (currentChildCount >= this.maxChildren) {
+            return {
+                valid: false,
+                errorCode: "MAX_CHILDREN_EXCEEDED",
+                errorMessage: `Parent instance "${parentInstance.instanceId}" has reached maximum children limit of ${this.maxChildren}`,
+            };
+        }
+        // 4. Anti-Privilege Escalation Check (Child permissions must be subset of parent granted permissions)
+        const parentPermissions = new Set(parentPlan.grantedPermissions);
+        for (const perm of request.requestedPermissions) {
+            if (!parentPermissions.has(perm)) {
+                return {
+                    valid: false,
+                    errorCode: "PRIVILEGE_ESCALATION_BLOCKED",
+                    errorMessage: `Privilege escalation blocked. Child requested permission "${perm}" which is not granted to parent`,
+                };
+            }
+        }
+        // 5. Budget Containment Check
+        const parentTokens = parentPlan.budget.maxTokens ?? 100000;
+        const parentCost = parentPlan.budget.maxCostUsd ?? 5.0;
+        if (request.allocatedBudget.maxTokens && request.allocatedBudget.maxTokens > parentTokens) {
+            return {
+                valid: false,
+                errorCode: "BUDGET_EXCEEDED_PARENT_LIMIT",
+                errorMessage: `Child token budget (${request.allocatedBudget.maxTokens}) exceeds parent budget limit (${parentTokens})`,
+            };
+        }
+        if (request.allocatedBudget.maxCostUsd && request.allocatedBudget.maxCostUsd > parentCost) {
+            return {
+                valid: false,
+                errorCode: "BUDGET_EXCEEDED_PARENT_LIMIT",
+                errorMessage: `Child cost budget ($${request.allocatedBudget.maxCostUsd}) exceeds parent budget limit ($${parentCost})`,
+            };
+        }
+        return { valid: true };
+    }
+}
+//# sourceMappingURL=delegation-guard.js.map

package/dist/agents/delegation-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-guard.js","sourceRoot":"","sources":["../../src/agents/delegation-guard.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACT,QAAQ,CAAS;IACjB,WAAW,CAAS;IAErC,YAAY,OAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC;IAC/C,CAAC;IAEM,kBAAkB,CACvB,cAAiC,EACjC,UAA4B,EAC5B,OAA0B,EAC1B,iBAAyB;QAEzB,yBAAyB;QACzB,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,oBAAoB;gBAC/B,YAAY,EAAE,0BAA0B,cAAc,CAAC,UAAU,kBAAkB,cAAc,CAAC,MAAM,uBAAuB;aAChI,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAI,UAAU,CAAC,QAAQ,EAAE,eAA0B,IAAI,CAAC,CAAC;QAC3E,IAAI,YAAY,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,+BAA+B;gBAC1C,YAAY,EAAE,qCAAqC,YAAY,0BAA0B,IAAI,CAAC,QAAQ,EAAE;aACzG,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,IAAI,iBAAiB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,uBAAuB;gBAClC,YAAY,EAAE,oBAAoB,cAAc,CAAC,UAAU,2CAA2C,IAAI,CAAC,WAAW,EAAE;aACzH,CAAC;QACJ,CAAC;QAED,sGAAsG;QACtG,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACjE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAChD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,SAAS,EAAE,8BAA8B;oBACzC,YAAY,EAAE,6DAA6D,IAAI,kCAAkC;iBAClH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;QAEvD,IAAI,OAAO,CAAC,eAAe,CAAC,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;YAC1F,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,8BAA8B;gBACzC,YAAY,EAAE,uBAAuB,OAAO,CAAC,eAAe,CAAC,SAAS,kCAAkC,YAAY,GAAG;aACxH,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;YAC1F,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,8BAA8B;gBACzC,YAAY,EAAE,uBAAuB,OAAO,CAAC,eAAe,CAAC,UAAU,mCAAmC,UAAU,GAAG;aACxH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/agents/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./agent-registry.js";
+export * from "./agent-security.js";
+export * from "./agent-startup-resolver.js";
+export * from "./agent-manager.js";
+export * from "./delegation-guard.js";
+export * from "./subagent-manager.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC"}

package/dist/agents/index.js

@@ -0,0 +1,7 @@
+export * from "./agent-registry.js";
+export * from "./agent-security.js";
+export * from "./agent-startup-resolver.js";
+export * from "./agent-manager.js";
+export * from "./delegation-guard.js";
+export * from "./subagent-manager.js";
+//# sourceMappingURL=index.js.map

package/dist/agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC"}

package/dist/agents/subagent-manager.d.ts

@@ -0,0 +1,48 @@
+import { AgentRuntimeState } from "../domain/agent.js";
+import { DelegationRequest, DelegationResult } from "../domain/team.js";
+import { EventStore } from "../event-state/event-store.js";
+import { AgentManager } from "./agent-manager.js";
+import { AgentRegistry } from "./agent-registry.js";
+import { DelegationGuard } from "./delegation-guard.js";
+import { LeaseRepository } from "../persistence/repositories/lease-repository.js";
+export interface SubagentManagerOptions {
+    agentManager: AgentManager;
+    agentRegistry: AgentRegistry;
+    delegationGuard?: DelegationGuard;
+    eventStore?: EventStore;
+    leaseRepo?: LeaseRepository;
+}
+/**
+ * Subagent Manager coordinating bounded hierarchical delegation,
+ * parent/child lifecycles, and cancellation propagation.
+ * PRD Part 2 Section 38, Section 40.
+ */
+export declare class SubagentManager {
+    private readonly agentManager;
+    private readonly agentRegistry?;
+    private readonly delegationGuard;
+    private readonly eventStore?;
+    private readonly leaseRepo?;
+    private readonly parentToChildren;
+    private readonly childToParent;
+    constructor(options: SubagentManagerOptions);
+    getRegistry(): AgentRegistry | undefined;
+    getLeaseRepo(): LeaseRepository | undefined;
+    /**
+     * Delegate task/objective to a bounded subagent.
+     * PRD Part 2 Section 38.
+     */
+    delegate(request: DelegationRequest): DelegationResult;
+    /**
+     * Recursively cancel an agent instance and all its active descendant subagents.
+     * PRD Part 2 Section 40.
+     */
+    propagateCancellation(parentInstanceId: string): string[];
+    /**
+     * Get all direct child instances for a parent.
+     */
+    getChildInstances(parentInstanceId: string): AgentRuntimeState[];
+    private getActiveChildCount;
+    private emitEvent;
+}
+//# sourceMappingURL=subagent-manager.d.ts.map

package/dist/agents/subagent-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-manager.d.ts","sourceRoot":"","sources":["../../src/agents/subagent-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAA4C,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAElF,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAkB;IAG7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkC;IAEnE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;gBAE/C,OAAO,EAAE,sBAAsB;IAQpC,WAAW,IAAI,aAAa,GAAG,SAAS;IAIxC,YAAY,IAAI,eAAe,GAAG,SAAS;IAIlD;;;OAGG;IACI,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB;IAsI7D;;;OAGG;IACI,qBAAqB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,EAAE;IAuBhE;;OAEG;IACI,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAYvE,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,SAAS;CAmBlB"}