claude-flow-novice 2.14.37 → 2.15.1

package/dist/cli/agent-prompt-builder.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/agent-prompt-builder.ts"],"sourcesContent":["/**\r\n * Agent Prompt Builder\r\n *\r\n * Builds comprehensive prompts for CLI-spawned agents by combining:\r\n * - Agent definition (YAML + markdown)\r\n * - Task context (taskId, iteration, mode)\r\n * - CFN Loop protocol (if applicable)\r\n * - Iteration history (Sprint 3 - Phase 2)\r\n * - Environment variables\r\n */\r\n\r\nimport { AgentDefinition, hasCFNLoopProtocol } from './agent-definition-parser.js';\r\nimport { loadIterationHistory, formatIterationHistory } from './iteration-history.js';\r\n\r\nexport interface TaskContext {\r\n  taskId?: string;\r\n  iteration?: number;\r\n  context?: string;\r\n  mode?: string;\r\n  priority?: number;\r\n  parentTaskId?: string;\r\n  agentId?: string;\r\n}\r\n\r\n/**\r\n * Build CFN Loop protocol instructions\r\n */\r\nfunction buildCFNLoopProtocol(taskId: string, agentId: string): string {\r\n  return `\r\n## CFN Loop Redis Completion Protocol\r\n\r\nYou are participating in a CFN Loop workflow. Follow this protocol EXACTLY:\r\n\r\n### Step 1: Complete Your Work\r\nExecute your assigned task (implementation, review, testing, etc.)\r\n\r\n### Step 2: Calculate Confidence Score\r\nAssess your work quality and assign a confidence score (0.0-1.0):\r\n- 0.90-1.0: Excellent, production-ready\r\n- 0.75-0.89: Good, minor issues possible\r\n- 0.50-0.74: Acceptable, needs review\r\n- 0.0-0.49: Poor, significant issues\r\n\r\n### Step 3: Report Completion to Redis\r\n\\`\\`\\`bash\r\n./.claude/skills/cfn-redis-coordination/report-completion.sh \\\\\r\n  --task-id \"${taskId}\" \\\\\r\n  --agent-id \"${agentId}\" \\\\\r\n  --confidence [YOUR_CONFIDENCE_SCORE] \\\\\r\n  --iteration \\${ITERATION:-1}\r\n\\`\\`\\`\r\n\r\nThis script automatically:\r\n- Signals completion via \\`swarm:${taskId}:${agentId}:done\\`\r\n- Stores confidence in \\`swarm:${taskId}:${agentId}:confidence\\`\r\n- Creates result hash in \\`swarm:${taskId}:${agentId}:result\\`\r\n- Updates SQLite persistence layer\r\n\r\n### Step 4: Exit Cleanly\r\nAfter reporting, exit immediately. DO NOT enter waiting mode.\r\n\r\nThe orchestrator will:\r\n- Collect confidence scores from all agents\r\n- Run gate check (≥0.75 threshold)\r\n- Spawn validators if gate passes\r\n- Spawn fresh agents for iteration N+1 if needed\r\n\r\n**Environment Variables Available:**\r\n- TASK_ID: ${taskId}\r\n- AGENT_ID: ${agentId}\r\n- ITERATION: Current iteration number (default: 1)\r\n- CONFIDENCE_SCORE: Your final confidence assessment\r\n\r\n**Why This Matters:**\r\n- Enables zero-token coordination (orchestrator uses Redis BLPOP)\r\n- Supports adaptive agent specialization (spawn different specialist for iteration N+1)\r\n- Prevents memory leaks (agents exit after reporting)\r\n- Confidence scores drive gate checks and consensus validation\r\n\r\n**CRITICAL:** Report completion before exiting. Orchestrator is waiting for your signal.\r\n`;\r\n}\r\n\r\n/**\r\n * Parse and enrich JSON context into natural language instructions\r\n */\r\nfunction enrichJSONContext(jsonObj: any): string {\r\n  const sections: string[] = [];\r\n\r\n  // Extract task description\r\n  if (jsonObj.task) {\r\n    sections.push(`**Task:** ${jsonObj.task}`);\r\n  }\r\n\r\n  // Parse files - convert comma-separated string to bullet list\r\n  if (jsonObj.files) {\r\n    const fileList = typeof jsonObj.files === 'string'\r\n      ? jsonObj.files.split(',').map(f => f.trim()).filter(f => f)\r\n      : Array.isArray(jsonObj.files) ? jsonObj.files : [];\r\n\r\n    if (fileList.length > 0) {\r\n      sections.push('\\n**Files to process:**');\r\n      fileList.forEach(file => sections.push(`- ${file}`));\r\n    }\r\n  }\r\n\r\n  // Add requirements/deliverables\r\n  if (jsonObj.requirements) {\r\n    const reqs = Array.isArray(jsonObj.requirements) ? jsonObj.requirements : [jsonObj.requirements];\r\n    sections.push('\\n**Requirements:**');\r\n    reqs.forEach((req, i) => sections.push(`${i + 1}. ${req}`));\r\n  }\r\n\r\n  if (jsonObj.deliverables) {\r\n    const delivs = Array.isArray(jsonObj.deliverables) ? jsonObj.deliverables : [jsonObj.deliverables];\r\n    sections.push('\\n**Deliverables:**');\r\n    delivs.forEach(deliv => sections.push(`- ${deliv}`));\r\n  }\r\n\r\n  // Add batch information\r\n  if (jsonObj.batch) {\r\n    sections.push(`\\n**Batch:** ${jsonObj.batch}`);\r\n  }\r\n\r\n  // Add directory context\r\n  if (jsonObj.directory) {\r\n    sections.push(`\\n**Working Directory:** ${jsonObj.directory}`);\r\n  }\r\n\r\n  // Add acceptance criteria\r\n  if (jsonObj.acceptanceCriteria) {\r\n    const criteria = Array.isArray(jsonObj.acceptanceCriteria)\r\n      ? jsonObj.acceptanceCriteria\r\n      : [jsonObj.acceptanceCriteria];\r\n    sections.push('\\n**Acceptance Criteria:**');\r\n    criteria.forEach(criterion => sections.push(`- ${criterion}`));\r\n  }\r\n\r\n  // Add explicit instructions if present\r\n  if (jsonObj.instructions) {\r\n    sections.push('\\n**Instructions:**');\r\n    const instrs = Array.isArray(jsonObj.instructions) ? jsonObj.instructions : [jsonObj.instructions];\r\n    instrs.forEach((instr, i) => sections.push(`${i + 1}. ${instr}`));\r\n  }\r\n\r\n  return sections.join('\\n');\r\n}\r\n\r\n/**\r\n * Build task description from context\r\n */\r\nfunction buildTaskDescription(agentType: string, context: TaskContext): string {\r\n  let desc = '';\r\n\r\n  if (context.context) {\r\n    // Try to parse as JSON first\r\n    let contextStr = context.context.trim();\r\n\r\n    // Check if context looks like JSON\r\n    if ((contextStr.startsWith('{') && contextStr.endsWith('}')) ||\r\n        (contextStr.startsWith('[') && contextStr.endsWith(']'))) {\r\n      try {\r\n        const jsonObj = JSON.parse(contextStr);\r\n        desc = enrichJSONContext(jsonObj);\r\n\r\n        // Add instruction footer for structured tasks\r\n        if (jsonObj.files || jsonObj.deliverables) {\r\n          desc += '\\n\\n**Process each item systematically and report confidence when complete.**';\r\n        }\r\n      } catch (e) {\r\n        // Not valid JSON, treat as plain text\r\n        desc = context.context;\r\n      }\r\n    } else {\r\n      // Plain text context\r\n      desc = context.context;\r\n    }\r\n  } else {\r\n    desc = `Execute task as ${agentType} agent`;\r\n  }\r\n\r\n  // Add metadata fields\r\n  if (context.taskId) {\r\n    desc += `\\n\\n**Task ID:** ${context.taskId}`;\r\n  }\r\n\r\n  if (context.iteration) {\r\n    desc += `\\n**Iteration:** ${context.iteration}`;\r\n  }\r\n\r\n  if (context.mode) {\r\n    desc += `\\n**Mode:** ${context.mode}`;\r\n  }\r\n\r\n  if (context.priority) {\r\n    desc += `\\n**Priority:** ${context.priority}`;\r\n  }\r\n\r\n  if (context.parentTaskId) {\r\n    desc += `\\n**Parent Task:** ${context.parentTaskId}`;\r\n  }\r\n\r\n  return desc;\r\n}\r\n\r\n/**\r\n * Build environment context section\r\n */\r\nfunction buildEnvironmentContext(context: TaskContext): string {\r\n  const env: string[] = [];\r\n\r\n  if (context.taskId) env.push(`TASK_ID=${context.taskId}`);\r\n  if (context.iteration) env.push(`ITERATION=${context.iteration}`);\r\n  if (context.mode) env.push(`MODE=${context.mode}`);\r\n  if (context.priority) env.push(`PRIORITY=${context.priority}`);\r\n  if (context.parentTaskId) env.push(`PARENT_TASK_ID=${context.parentTaskId}`);\r\n\r\n  if (env.length === 0) return '';\r\n\r\n  return `\r\n## Environment Variables\r\n\r\n\\`\\`\\`bash\r\n${env.join('\\n')}\r\n\\`\\`\\`\r\n`;\r\n}\r\n\r\n/**\r\n * Build complete prompt for agent execution (async for iteration history)\r\n */\r\nexport async function buildAgentPrompt(\r\n  definition: AgentDefinition,\r\n  context: TaskContext\r\n): Promise<string> {\r\n  // Use explicit agent ID if provided, otherwise generate from name + iteration\r\n  const agentId = context.agentId || `${definition.name}-${context.iteration || 1}`;\r\n\r\n  const sections: string[] = [];\r\n\r\n  // 1. Agent definition header\r\n  sections.push(`# Agent: ${definition.name}`);\r\n  sections.push('');\r\n  sections.push(definition.description);\r\n  sections.push('');\r\n\r\n  // 2. Task description\r\n  sections.push('## Task');\r\n  sections.push('');\r\n  sections.push(buildTaskDescription(definition.name, context));\r\n  sections.push('');\r\n\r\n  // 3. Iteration history (Sprint 3 - Phase 2)\r\n  // Load and format previous iterations if iteration > 1\r\n  if (context.taskId && context.iteration && context.iteration > 1) {\r\n    try {\r\n      const history = await loadIterationHistory(context.taskId, agentId, context.iteration);\r\n      const historyText = formatIterationHistory(history, context.iteration);\r\n      sections.push(historyText);\r\n      sections.push('');\r\n    } catch (err) {\r\n      console.warn(`[agent-prompt-builder] Failed to load iteration history:`, err);\r\n      // Continue without history\r\n    }\r\n  }\r\n\r\n  // 4. Agent definition content (from markdown file)\r\n  sections.push('## Agent Definition');\r\n  sections.push('');\r\n  sections.push(definition.content);\r\n  sections.push('');\r\n\r\n  // 5. CFN Loop protocol (ALWAYS inject when taskId present - enables Redis coordination)\r\n  if (context.taskId && agentId) {\r\n    sections.push(buildCFNLoopProtocol(context.taskId, agentId));\r\n    sections.push('');\r\n  }\r\n\r\n  // 6. Environment context\r\n  const envContext = buildEnvironmentContext(context);\r\n  if (envContext) {\r\n    sections.push(envContext);\r\n    sections.push('');\r\n  }\r\n\r\n  // 7. Execution instructions\r\n  sections.push('## Execution Instructions');\r\n  sections.push('');\r\n  sections.push('1. Read and understand the task requirements');\r\n  if (context.iteration && context.iteration > 1) {\r\n    sections.push('2. Review iteration history and feedback from validators');\r\n    sections.push('3. Address specific feedback points from previous iteration');\r\n    sections.push('4. Execute your core responsibilities as defined above');\r\n  } else {\r\n    sections.push('2. Execute your core responsibilities as defined above');\r\n    sections.push('3. Follow any protocol steps (CFN Loop, validation hooks, etc.)');\r\n  }\r\n  sections.push('4. Provide clear, concise output');\r\n  sections.push('5. Report confidence score if applicable');\r\n  sections.push('');\r\n\r\n  // 7a. Pre-edit backup requirement (MANDATORY)\r\n  sections.push('## Pre-Edit Backup Protocol (MANDATORY)');\r\n  sections.push('');\r\n  sections.push('**BEFORE ANY Edit/Write/MultiEdit operation, you MUST create a backup:**');\r\n  sections.push('');\r\n  sections.push('```bash');\r\n  sections.push(`BACKUP_PATH=$(./.claude/hooks/cfn-invoke-pre-edit.sh \"$FILE_TO_EDIT\" --agent-id \"${agentId}\")`);\r\n  sections.push('```');\r\n  sections.push('');\r\n  sections.push('**Why:** Enables safe file revert without git operations during parallel sessions.');\r\n  sections.push('**Location:** `.backups/[agent-id]/[timestamp]_[hash]/`');\r\n  sections.push('**Retention:** 24h TTL (configurable)');\r\n  sections.push('');\r\n  sections.push('**Complete Edit Workflow:**');\r\n  sections.push('```bash');\r\n  sections.push('# 1. Pre-Edit: Create backup');\r\n  sections.push(`BACKUP_PATH=$(./.claude/hooks/cfn-invoke-pre-edit.sh \"src/file.ts\" --agent-id \"${agentId}\")`);\r\n  sections.push('');\r\n  sections.push('# 2. Edit: Perform file modification');\r\n  sections.push('Edit: file_path=\"src/file.ts\" old_string=\"...\" new_string=\"...\"');\r\n  sections.push('');\r\n  sections.push('# 3. Post-Edit: Validate changes');\r\n  sections.push(`./.claude/hooks/cfn-invoke-post-edit.sh \"src/file.ts\" --agent-id \"${agentId}\"`);\r\n  sections.push('```');\r\n  sections.push('');\r\n\r\n  // 8. Tool reminder\r\n  if (definition.tools && definition.tools.length > 0) {\r\n    sections.push('## Available Tools');\r\n    sections.push('');\r\n    sections.push(`You have access to: ${definition.tools.join(', ')}`);\r\n    sections.push('');\r\n  }\r\n\r\n  return sections.join('\\n');\r\n}\r\n\r\n/**\r\n * Extract agent ID from context\r\n * If agentId is explicitly provided in context, use it; otherwise generate from name + iteration\r\n */\r\nexport function getAgentId(definition: AgentDefinition, context: TaskContext): string {\r\n  if (context.agentId) {\r\n    return context.agentId;\r\n  }\r\n  return `${definition.name}-${context.iteration || 1}`;\r\n}\r\n\r\n/**\r\n * Build system prompt for agent (optional, for structured agent behavior)\r\n */\r\nexport function buildSystemPrompt(definition: AgentDefinition): string {\r\n  return `You are ${definition.name}, a specialized AI agent.\r\n\r\nType: ${definition.type || 'specialist'}\r\nModel: ${definition.model}\r\nTools: ${definition.tools.join(', ')}\r\n\r\nFollow your agent definition exactly and complete assigned tasks with high quality.`;\r\n}\r\n"],"names":["loadIterationHistory","formatIterationHistory","buildCFNLoopProtocol","taskId","agentId","enrichJSONContext","jsonObj","sections","task","push","files","fileList","split","map","f","trim","filter","Array","isArray","length","forEach","file","requirements","reqs","req","i","deliverables","delivs","deliv","batch","directory","acceptanceCriteria","criteria","criterion","instructions","instrs","instr","join","buildTaskDescription","agentType","context","desc","contextStr","startsWith","endsWith","JSON","parse","e","iteration","mode","priority","parentTaskId","buildEnvironmentContext","env","buildAgentPrompt","definition","name","description","history","historyText","err","console","warn","content","envContext","tools","getAgentId","buildSystemPrompt","type","model"],"mappings":"AAAA;;;;;;;;;CASC,GAGD,SAASA,oBAAoB,EAAEC,sBAAsB,QAAQ,yBAAyB;AAYtF;;CAEC,GACD,SAASC,qBAAqBC,MAAc,EAAEC,OAAe;IAC3D,OAAO,CAAC;;;;;;;;;;;;;;;;;;aAkBG,EAAED,OAAO;cACR,EAAEC,QAAQ;;;;;;iCAMS,EAAED,OAAO,CAAC,EAAEC,QAAQ;+BACtB,EAAED,OAAO,CAAC,EAAEC,QAAQ;iCAClB,EAAED,OAAO,CAAC,EAAEC,QAAQ;;;;;;;;;;;;;WAa1C,EAAED,OAAO;YACR,EAAEC,QAAQ;;;;;;;;;;;AAWtB,CAAC;AACD;AAEA;;CAEC,GACD,SAASC,kBAAkBC,OAAY;IACrC,MAAMC,WAAqB,EAAE;IAE7B,2BAA2B;IAC3B,IAAID,QAAQE,IAAI,EAAE;QAChBD,SAASE,IAAI,CAAC,CAAC,UAAU,EAAEH,QAAQE,IAAI,EAAE;IAC3C;IAEA,8DAA8D;IAC9D,IAAIF,QAAQI,KAAK,EAAE;QACjB,MAAMC,WAAW,OAAOL,QAAQI,KAAK,KAAK,WACtCJ,QAAQI,KAAK,CAACE,KAAK,CAAC,KAAKC,GAAG,CAACC,CAAAA,IAAKA,EAAEC,IAAI,IAAIC,MAAM,CAACF,CAAAA,IAAKA,KACxDG,MAAMC,OAAO,CAACZ,QAAQI,KAAK,IAAIJ,QAAQI,KAAK,GAAG,EAAE;QAErD,IAAIC,SAASQ,MAAM,GAAG,GAAG;YACvBZ,SAASE,IAAI,CAAC;YACdE,SAASS,OAAO,CAACC,CAAAA,OAAQd,SAASE,IAAI,CAAC,CAAC,EAAE,EAAEY,MAAM;QACpD;IACF;IAEA,gCAAgC;IAChC,IAAIf,QAAQgB,YAAY,EAAE;QACxB,MAAMC,OAAON,MAAMC,OAAO,CAACZ,QAAQgB,YAAY,IAAIhB,QAAQgB,YAAY,GAAG;YAAChB,QAAQgB,YAAY;SAAC;QAChGf,SAASE,IAAI,CAAC;QACdc,KAAKH,OAAO,CAAC,CAACI,KAAKC,IAAMlB,SAASE,IAAI,CAAC,GAAGgB,IAAI,EAAE,EAAE,EAAED,KAAK;IAC3D;IAEA,IAAIlB,QAAQoB,YAAY,EAAE;QACxB,MAAMC,SAASV,MAAMC,OAAO,CAACZ,QAAQoB,YAAY,IAAIpB,QAAQoB,YAAY,GAAG;YAACpB,QAAQoB,YAAY;SAAC;QAClGnB,SAASE,IAAI,CAAC;QACdkB,OAAOP,OAAO,CAACQ,CAAAA,QAASrB,SAASE,IAAI,CAAC,CAAC,EAAE,EAAEmB,OAAO;IACpD;IAEA,wBAAwB;IACxB,IAAItB,QAAQuB,KAAK,EAAE;QACjBtB,SAASE,IAAI,CAAC,CAAC,aAAa,EAAEH,QAAQuB,KAAK,EAAE;IAC/C;IAEA,wBAAwB;IACxB,IAAIvB,QAAQwB,SAAS,EAAE;QACrBvB,SAASE,IAAI,CAAC,CAAC,yBAAyB,EAAEH,QAAQwB,SAAS,EAAE;IAC/D;IAEA,0BAA0B;IAC1B,IAAIxB,QAAQyB,kBAAkB,EAAE;QAC9B,MAAMC,WAAWf,MAAMC,OAAO,CAACZ,QAAQyB,kBAAkB,IACrDzB,QAAQyB,kBAAkB,GAC1B;YAACzB,QAAQyB,kBAAkB;SAAC;QAChCxB,SAASE,IAAI,CAAC;QACduB,SAASZ,OAAO,CAACa,CAAAA,YAAa1B,SAASE,IAAI,CAAC,CAAC,EAAE,EAAEwB,WAAW;IAC9D;IAEA,uCAAuC;IACvC,IAAI3B,QAAQ4B,YAAY,EAAE;QACxB3B,SAASE,IAAI,CAAC;QACd,MAAM0B,SAASlB,MAAMC,OAAO,CAACZ,QAAQ4B,YAAY,IAAI5B,QAAQ4B,YAAY,GAAG;YAAC5B,QAAQ4B,YAAY;SAAC;QAClGC,OAAOf,OAAO,CAAC,CAACgB,OAAOX,IAAMlB,SAASE,IAAI,CAAC,GAAGgB,IAAI,EAAE,EAAE,EAAEW,OAAO;IACjE;IAEA,OAAO7B,SAAS8B,IAAI,CAAC;AACvB;AAEA;;CAEC,GACD,SAASC,qBAAqBC,SAAiB,EAAEC,OAAoB;IACnE,IAAIC,OAAO;IAEX,IAAID,QAAQA,OAAO,EAAE;QACnB,6BAA6B;QAC7B,IAAIE,aAAaF,QAAQA,OAAO,CAACzB,IAAI;QAErC,mCAAmC;QACnC,IAAI,AAAC2B,WAAWC,UAAU,CAAC,QAAQD,WAAWE,QAAQ,CAAC,QAClDF,WAAWC,UAAU,CAAC,QAAQD,WAAWE,QAAQ,CAAC,MAAO;YAC5D,IAAI;gBACF,MAAMtC,UAAUuC,KAAKC,KAAK,CAACJ;gBAC3BD,OAAOpC,kBAAkBC;gBAEzB,8CAA8C;gBAC9C,IAAIA,QAAQI,KAAK,IAAIJ,QAAQoB,YAAY,EAAE;oBACzCe,QAAQ;gBACV;YACF,EAAE,OAAOM,GAAG;gBACV,sCAAsC;gBACtCN,OAAOD,QAAQA,OAAO;YACxB;QACF,OAAO;YACL,qBAAqB;YACrBC,OAAOD,QAAQA,OAAO;QACxB;IACF,OAAO;QACLC,OAAO,CAAC,gBAAgB,EAAEF,UAAU,MAAM,CAAC;IAC7C;IAEA,sBAAsB;IACtB,IAAIC,QAAQrC,MAAM,EAAE;QAClBsC,QAAQ,CAAC,iBAAiB,EAAED,QAAQrC,MAAM,EAAE;IAC9C;IAEA,IAAIqC,QAAQQ,SAAS,EAAE;QACrBP,QAAQ,CAAC,iBAAiB,EAAED,QAAQQ,SAAS,EAAE;IACjD;IAEA,IAAIR,QAAQS,IAAI,EAAE;QAChBR,QAAQ,CAAC,YAAY,EAAED,QAAQS,IAAI,EAAE;IACvC;IAEA,IAAIT,QAAQU,QAAQ,EAAE;QACpBT,QAAQ,CAAC,gBAAgB,EAAED,QAAQU,QAAQ,EAAE;IAC/C;IAEA,IAAIV,QAAQW,YAAY,EAAE;QACxBV,QAAQ,CAAC,mBAAmB,EAAED,QAAQW,YAAY,EAAE;IACtD;IAEA,OAAOV;AACT;AAEA;;CAEC,GACD,SAASW,wBAAwBZ,OAAoB;IACnD,MAAMa,MAAgB,EAAE;IAExB,IAAIb,QAAQrC,MAAM,EAAEkD,IAAI5C,IAAI,CAAC,CAAC,QAAQ,EAAE+B,QAAQrC,MAAM,EAAE;IACxD,IAAIqC,QAAQQ,SAAS,EAAEK,IAAI5C,IAAI,CAAC,CAAC,UAAU,EAAE+B,QAAQQ,SAAS,EAAE;IAChE,IAAIR,QAAQS,IAAI,EAAEI,IAAI5C,IAAI,CAAC,CAAC,KAAK,EAAE+B,QAAQS,IAAI,EAAE;IACjD,IAAIT,QAAQU,QAAQ,EAAEG,IAAI5C,IAAI,CAAC,CAAC,SAAS,EAAE+B,QAAQU,QAAQ,EAAE;IAC7D,IAAIV,QAAQW,YAAY,EAAEE,IAAI5C,IAAI,CAAC,CAAC,eAAe,EAAE+B,QAAQW,YAAY,EAAE;IAE3E,IAAIE,IAAIlC,MAAM,KAAK,GAAG,OAAO;IAE7B,OAAO,CAAC;;;;AAIV,EAAEkC,IAAIhB,IAAI,CAAC,MAAM;;AAEjB,CAAC;AACD;AAEA;;CAEC,GACD,OAAO,eAAeiB,iBACpBC,UAA2B,EAC3Bf,OAAoB;IAEpB,8EAA8E;IAC9E,MAAMpC,UAAUoC,QAAQpC,OAAO,IAAI,GAAGmD,WAAWC,IAAI,CAAC,CAAC,EAAEhB,QAAQQ,SAAS,IAAI,GAAG;IAEjF,MAAMzC,WAAqB,EAAE;IAE7B,6BAA6B;IAC7BA,SAASE,IAAI,CAAC,CAAC,SAAS,EAAE8C,WAAWC,IAAI,EAAE;IAC3CjD,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC8C,WAAWE,WAAW;IACpClD,SAASE,IAAI,CAAC;IAEd,sBAAsB;IACtBF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC6B,qBAAqBiB,WAAWC,IAAI,EAAEhB;IACpDjC,SAASE,IAAI,CAAC;IAEd,4CAA4C;IAC5C,uDAAuD;IACvD,IAAI+B,QAAQrC,MAAM,IAAIqC,QAAQQ,SAAS,IAAIR,QAAQQ,SAAS,GAAG,GAAG;QAChE,IAAI;YACF,MAAMU,UAAU,MAAM1D,qBAAqBwC,QAAQrC,MAAM,EAAEC,SAASoC,QAAQQ,SAAS;YACrF,MAAMW,cAAc1D,uBAAuByD,SAASlB,QAAQQ,SAAS;YACrEzC,SAASE,IAAI,CAACkD;YACdpD,SAASE,IAAI,CAAC;QAChB,EAAE,OAAOmD,KAAK;YACZC,QAAQC,IAAI,CAAC,CAAC,wDAAwD,CAAC,EAAEF;QACzE,2BAA2B;QAC7B;IACF;IAEA,mDAAmD;IACnDrD,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC8C,WAAWQ,OAAO;IAChCxD,SAASE,IAAI,CAAC;IAEd,wFAAwF;IACxF,IAAI+B,QAAQrC,MAAM,IAAIC,SAAS;QAC7BG,SAASE,IAAI,CAACP,qBAAqBsC,QAAQrC,MAAM,EAAEC;QACnDG,SAASE,IAAI,CAAC;IAChB;IAEA,yBAAyB;IACzB,MAAMuD,aAAaZ,wBAAwBZ;IAC3C,IAAIwB,YAAY;QACdzD,SAASE,IAAI,CAACuD;QACdzD,SAASE,IAAI,CAAC;IAChB;IAEA,4BAA4B;IAC5BF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACd,IAAI+B,QAAQQ,SAAS,IAAIR,QAAQQ,SAAS,GAAG,GAAG;QAC9CzC,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;IAChB,OAAO;QACLF,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;IAChB;IACAF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IAEd,8CAA8C;IAC9CF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC,CAAC,iFAAiF,EAAEL,QAAQ,EAAE,CAAC;IAC7GG,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC,CAAC,+EAA+E,EAAEL,QAAQ,EAAE,CAAC;IAC3GG,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC,CAAC,kEAAkE,EAAEL,QAAQ,CAAC,CAAC;IAC7FG,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IAEd,mBAAmB;IACnB,IAAI8C,WAAWU,KAAK,IAAIV,WAAWU,KAAK,CAAC9C,MAAM,GAAG,GAAG;QACnDZ,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC,CAAC,oBAAoB,EAAE8C,WAAWU,KAAK,CAAC5B,IAAI,CAAC,OAAO;QAClE9B,SAASE,IAAI,CAAC;IAChB;IAEA,OAAOF,SAAS8B,IAAI,CAAC;AACvB;AAEA;;;CAGC,GACD,OAAO,SAAS6B,WAAWX,UAA2B,EAAEf,OAAoB;IAC1E,IAAIA,QAAQpC,OAAO,EAAE;QACnB,OAAOoC,QAAQpC,OAAO;IACxB;IACA,OAAO,GAAGmD,WAAWC,IAAI,CAAC,CAAC,EAAEhB,QAAQQ,SAAS,IAAI,GAAG;AACvD;AAEA;;CAEC,GACD,OAAO,SAASmB,kBAAkBZ,UAA2B;IAC3D,OAAO,CAAC,QAAQ,EAAEA,WAAWC,IAAI,CAAC;;MAE9B,EAAED,WAAWa,IAAI,IAAI,aAAa;OACjC,EAAEb,WAAWc,KAAK,CAAC;OACnB,EAAEd,WAAWU,KAAK,CAAC5B,IAAI,CAAC,MAAM;;mFAE8C,CAAC;AACpF"}
+{"version":3,"sources":["../../src/cli/agent-prompt-builder.ts"],"sourcesContent":["/**\r\n * Agent Prompt Builder\r\n *\r\n * Builds comprehensive prompts for CLI-spawned agents by combining:\r\n * - Agent definition (YAML + markdown)\r\n * - Task context (taskId, iteration, mode)\r\n * - CFN Loop protocol (if applicable)\r\n * - Iteration history (Sprint 3 - Phase 2)\r\n * - Environment variables\r\n */\r\n\r\nimport { AgentDefinition, hasCFNLoopProtocol } from './agent-definition-parser.js';\r\nimport { loadIterationHistory, formatIterationHistory } from './iteration-history.js';\r\n\r\nexport interface TaskContext {\r\n  taskId?: string;\r\n  iteration?: number;\r\n  context?: string;\r\n  mode?: string;\r\n  priority?: number;\r\n  parentTaskId?: string;\r\n  agentId?: string;\r\n}\r\n\r\n/**\r\n * Build CFN Loop protocol instructions\r\n */\r\nfunction buildCFNLoopProtocol(taskId: string, agentId: string): string {\r\n  return `\r\n## CFN Loop Redis Completion Protocol\r\n\r\nYou are participating in a CFN Loop workflow. Follow this protocol EXACTLY:\r\n\r\n### Step 1: Complete Your Work\r\nExecute your assigned task (implementation, review, testing, etc.)\r\n\r\n### Step 2: Calculate Confidence Score\r\nAssess your work quality and assign a confidence score (0.0-1.0):\r\n- 0.90-1.0: Excellent, production-ready\r\n- 0.75-0.89: Good, minor issues possible\r\n- 0.50-0.74: Acceptable, needs review\r\n- 0.0-0.49: Poor, significant issues\r\n\r\n### Step 3: Report Completion to Redis\r\n\\`\\`\\`bash\r\n./.claude/skills/cfn-redis-coordination/report-completion.sh \\\\\r\n  --task-id \"${taskId}\" \\\\\r\n  --agent-id \"${agentId}\" \\\\\r\n  --confidence [YOUR_CONFIDENCE_SCORE] \\\\\r\n  --iteration \\${ITERATION:-1}\r\n\\`\\`\\`\r\n\r\nThis script automatically:\r\n- Signals completion via \\`swarm:${taskId}:${agentId}:done\\`\r\n- Stores confidence in \\`swarm:${taskId}:${agentId}:confidence\\`\r\n- Creates result hash in \\`swarm:${taskId}:${agentId}:result\\`\r\n- Updates SQLite persistence layer\r\n\r\n### Step 4: Exit Cleanly\r\nAfter reporting, exit immediately. DO NOT enter waiting mode.\r\n\r\nThe orchestrator will:\r\n- Collect confidence scores from all agents\r\n- Run gate check (≥0.75 threshold)\r\n- Spawn validators if gate passes\r\n- Spawn fresh agents for iteration N+1 if needed\r\n\r\n**Environment Variables Available:**\r\n- TASK_ID: ${taskId}\r\n- AGENT_ID: ${agentId}\r\n- ITERATION: Current iteration number (default: 1)\r\n- CONFIDENCE_SCORE: Your final confidence assessment\r\n\r\n**Why This Matters:**\r\n- Enables zero-token coordination (orchestrator uses Redis BLPOP)\r\n- Supports adaptive agent specialization (spawn different specialist for iteration N+1)\r\n- Prevents memory leaks (agents exit after reporting)\r\n- Confidence scores drive gate checks and consensus validation\r\n\r\n**CRITICAL:** Report completion before exiting. Orchestrator is waiting for your signal.\r\n`;\r\n}\r\n\r\n/**\r\n * Parse and enrich JSON context into natural language instructions\r\n */\r\nfunction enrichJSONContext(jsonObj: any): string {\r\n  const sections: string[] = [];\r\n\r\n  // Extract task description\r\n  if (jsonObj.task) {\r\n    sections.push(`**Task:** ${jsonObj.task}`);\r\n  }\r\n\r\n  // Parse files - convert comma-separated string to bullet list\r\n  if (jsonObj.files) {\r\n    const fileList = typeof jsonObj.files === 'string'\r\n      ? jsonObj.files.split(',').map(f => f.trim()).filter(f => f)\r\n      : Array.isArray(jsonObj.files) ? jsonObj.files : [];\r\n\r\n    if (fileList.length > 0) {\r\n      sections.push('\\n**Files to process:**');\r\n      fileList.forEach(file => sections.push(`- ${file}`));\r\n    }\r\n  }\r\n\r\n  // Add requirements/deliverables\r\n  if (jsonObj.requirements) {\r\n    const reqs = Array.isArray(jsonObj.requirements) ? jsonObj.requirements : [jsonObj.requirements];\r\n    sections.push('\\n**Requirements:**');\r\n    reqs.forEach((req, i) => sections.push(`${i + 1}. ${req}`));\r\n  }\r\n\r\n  if (jsonObj.deliverables) {\r\n    const delivs = Array.isArray(jsonObj.deliverables) ? jsonObj.deliverables : [jsonObj.deliverables];\r\n    sections.push('\\n**Deliverables:**');\r\n    delivs.forEach(deliv => sections.push(`- ${deliv}`));\r\n  }\r\n\r\n  // Add batch information\r\n  if (jsonObj.batch) {\r\n    sections.push(`\\n**Batch:** ${jsonObj.batch}`);\r\n  }\r\n\r\n  // Add directory context\r\n  if (jsonObj.directory) {\r\n    sections.push(`\\n**Working Directory:** ${jsonObj.directory}`);\r\n  }\r\n\r\n  // Add acceptance criteria\r\n  if (jsonObj.acceptanceCriteria) {\r\n    const criteria = Array.isArray(jsonObj.acceptanceCriteria)\r\n      ? jsonObj.acceptanceCriteria\r\n      : [jsonObj.acceptanceCriteria];\r\n    sections.push('\\n**Acceptance Criteria:**');\r\n    criteria.forEach(criterion => sections.push(`- ${criterion}`));\r\n  }\r\n\r\n  // Add explicit instructions if present\r\n  if (jsonObj.instructions) {\r\n    sections.push('\\n**Instructions:**');\r\n    const instrs = Array.isArray(jsonObj.instructions) ? jsonObj.instructions : [jsonObj.instructions];\r\n    instrs.forEach((instr, i) => sections.push(`${i + 1}. ${instr}`));\r\n  }\r\n\r\n  return sections.join('\\n');\r\n}\r\n\r\n/**\r\n * Build task description from context\r\n */\r\nfunction buildTaskDescription(agentType: string, context: TaskContext): string {\r\n  let desc = '';\r\n\r\n  if (context.context) {\r\n    // Try to parse as JSON first\r\n    let contextStr = context.context.trim();\r\n\r\n    // Check if context looks like JSON\r\n    if ((contextStr.startsWith('{') && contextStr.endsWith('}')) ||\r\n        (contextStr.startsWith('[') && contextStr.endsWith(']'))) {\r\n      try {\r\n        const jsonObj = JSON.parse(contextStr);\r\n        desc = enrichJSONContext(jsonObj);\r\n\r\n        // Add instruction footer for structured tasks\r\n        if (jsonObj.files || jsonObj.deliverables) {\r\n          desc += '\\n\\n**Process each item systematically and report confidence when complete.**';\r\n        }\r\n      } catch (e) {\r\n        // Not valid JSON, treat as plain text\r\n        desc = context.context;\r\n      }\r\n    } else {\r\n      // Plain text context\r\n      desc = context.context;\r\n    }\r\n  } else {\r\n    desc = `Execute task as ${agentType} agent`;\r\n  }\r\n\r\n  // Add metadata fields\r\n  if (context.taskId) {\r\n    desc += `\\n\\n**Task ID:** ${context.taskId}`;\r\n  }\r\n\r\n  if (context.iteration) {\r\n    desc += `\\n**Iteration:** ${context.iteration}`;\r\n  }\r\n\r\n  if (context.mode) {\r\n    desc += `\\n**Mode:** ${context.mode}`;\r\n  }\r\n\r\n  if (context.priority) {\r\n    desc += `\\n**Priority:** ${context.priority}`;\r\n  }\r\n\r\n  if (context.parentTaskId) {\r\n    desc += `\\n**Parent Task:** ${context.parentTaskId}`;\r\n  }\r\n\r\n  return desc;\r\n}\r\n\r\n/**\r\n * Build environment context section\r\n */\r\nfunction buildEnvironmentContext(context: TaskContext): string {\r\n  const env: string[] = [];\r\n\r\n  if (context.taskId) env.push(`TASK_ID=${context.taskId}`);\r\n  if (context.iteration) env.push(`ITERATION=${context.iteration}`);\r\n  if (context.mode) env.push(`MODE=${context.mode}`);\r\n  if (context.priority) env.push(`PRIORITY=${context.priority}`);\r\n  if (context.parentTaskId) env.push(`PARENT_TASK_ID=${context.parentTaskId}`);\r\n\r\n  // Docker workspace detection\r\n  const isDockerEnv = process.env.DOCKER_AGENT === 'true' || process.env.WORKSPACE_ROOT;\r\n  const workspaceRoot = process.env.WORKSPACE_ROOT || '/workspace';\r\n\r\n  if (isDockerEnv) {\r\n    env.push(`WORKSPACE_ROOT=${workspaceRoot}`);\r\n  }\r\n\r\n  // Always include Docker context if detected, even if env array is empty\r\n  if (isDockerEnv && env.length === 0) {\r\n    env.push(`WORKSPACE_ROOT=${workspaceRoot}`);\r\n  }\r\n\r\n  if (env.length === 0 && !isDockerEnv) return '';\r\n\r\n  let contextText = `\r\n## Environment Variables\r\n\r\n\\`\\`\\`bash\r\n${env.join('\\n')}\r\n\\`\\`\\`\r\n`;\r\n\r\n  // Add Docker workspace notice if detected\r\n  if (isDockerEnv) {\r\n    contextText += `\r\n\r\n## Docker Container Environment\r\n\r\n**CRITICAL:** You are running inside a Docker container.\r\n\r\n- **Working Directory:** \\`${workspaceRoot}\\`\r\n- **File Paths:** All file operations use \\`${workspaceRoot}/\\` prefix\r\n- **Example:** To read \\`src/file.ts\\`, use \\`${workspaceRoot}/src/file.ts\\`\r\n\r\n**DO NOT** use paths from your training data or Main Chat context. Use \\`${workspaceRoot}/\\` for all file operations.\r\n`;\r\n  }\r\n\r\n  return contextText;\r\n}\r\n\r\n/**\r\n * Build complete prompt for agent execution (async for iteration history)\r\n */\r\nexport async function buildAgentPrompt(\r\n  definition: AgentDefinition,\r\n  context: TaskContext\r\n): Promise<string> {\r\n  // Use explicit agent ID if provided, otherwise generate from name + iteration\r\n  const agentId = context.agentId || `${definition.name}-${context.iteration || 1}`;\r\n\r\n  const sections: string[] = [];\r\n\r\n  // 1. Agent definition header\r\n  sections.push(`# Agent: ${definition.name}`);\r\n  sections.push('');\r\n  sections.push(definition.description);\r\n  sections.push('');\r\n\r\n  // 2. Task description\r\n  sections.push('## Task');\r\n  sections.push('');\r\n  sections.push(buildTaskDescription(definition.name, context));\r\n  sections.push('');\r\n\r\n  // 3. Iteration history (Sprint 3 - Phase 2)\r\n  // Load and format previous iterations if iteration > 1\r\n  if (context.taskId && context.iteration && context.iteration > 1) {\r\n    try {\r\n      const history = await loadIterationHistory(context.taskId, agentId, context.iteration);\r\n      const historyText = formatIterationHistory(history, context.iteration);\r\n      sections.push(historyText);\r\n      sections.push('');\r\n    } catch (err) {\r\n      console.warn(`[agent-prompt-builder] Failed to load iteration history:`, err);\r\n      // Continue without history\r\n    }\r\n  }\r\n\r\n  // 4. Agent definition content (from markdown file)\r\n  sections.push('## Agent Definition');\r\n  sections.push('');\r\n  sections.push(definition.content);\r\n  sections.push('');\r\n\r\n  // 5. CFN Loop protocol (ALWAYS inject when taskId present - enables Redis coordination)\r\n  if (context.taskId && agentId) {\r\n    sections.push(buildCFNLoopProtocol(context.taskId, agentId));\r\n    sections.push('');\r\n  }\r\n\r\n  // 6. Environment context\r\n  const envContext = buildEnvironmentContext(context);\r\n  if (envContext) {\r\n    sections.push(envContext);\r\n    sections.push('');\r\n  }\r\n\r\n  // 7. Execution instructions\r\n  sections.push('## Execution Instructions');\r\n  sections.push('');\r\n  sections.push('1. Read and understand the task requirements');\r\n  if (context.iteration && context.iteration > 1) {\r\n    sections.push('2. Review iteration history and feedback from validators');\r\n    sections.push('3. Address specific feedback points from previous iteration');\r\n    sections.push('4. Execute your core responsibilities as defined above');\r\n  } else {\r\n    sections.push('2. Execute your core responsibilities as defined above');\r\n    sections.push('3. Follow any protocol steps (CFN Loop, validation hooks, etc.)');\r\n  }\r\n  sections.push('4. Provide clear, concise output');\r\n  sections.push('5. Report confidence score if applicable');\r\n  sections.push('');\r\n\r\n  // 7a. Pre-edit backup requirement (MANDATORY)\r\n  sections.push('## Pre-Edit Backup Protocol (MANDATORY)');\r\n  sections.push('');\r\n  sections.push('**BEFORE ANY Edit/Write/MultiEdit operation, you MUST create a backup:**');\r\n  sections.push('');\r\n  sections.push('```bash');\r\n  sections.push(`BACKUP_PATH=$(./.claude/hooks/cfn-invoke-pre-edit.sh \"$FILE_TO_EDIT\" --agent-id \"${agentId}\")`);\r\n  sections.push('```');\r\n  sections.push('');\r\n  sections.push('**Why:** Enables safe file revert without git operations during parallel sessions.');\r\n  sections.push('**Location:** `.backups/[agent-id]/[timestamp]_[hash]/`');\r\n  sections.push('**Retention:** 24h TTL (configurable)');\r\n  sections.push('');\r\n  sections.push('**Complete Edit Workflow:**');\r\n  sections.push('```bash');\r\n  sections.push('# 1. Pre-Edit: Create backup');\r\n  sections.push(`BACKUP_PATH=$(./.claude/hooks/cfn-invoke-pre-edit.sh \"src/file.ts\" --agent-id \"${agentId}\")`);\r\n  sections.push('');\r\n  sections.push('# 2. Edit: Perform file modification');\r\n  sections.push('Edit: file_path=\"src/file.ts\" old_string=\"...\" new_string=\"...\"');\r\n  sections.push('');\r\n  sections.push('# 3. Post-Edit: Validate changes');\r\n  sections.push(`./.claude/hooks/cfn-invoke-post-edit.sh \"src/file.ts\" --agent-id \"${agentId}\"`);\r\n  sections.push('```');\r\n  sections.push('');\r\n\r\n  // 8. Tool reminder\r\n  if (definition.tools && definition.tools.length > 0) {\r\n    sections.push('## Available Tools');\r\n    sections.push('');\r\n    sections.push(`You have access to: ${definition.tools.join(', ')}`);\r\n    sections.push('');\r\n  }\r\n\r\n  return sections.join('\\n');\r\n}\r\n\r\n/**\r\n * Extract agent ID from context\r\n * If agentId is explicitly provided in context, use it; otherwise generate from name + iteration\r\n */\r\nexport function getAgentId(definition: AgentDefinition, context: TaskContext): string {\r\n  if (context.agentId) {\r\n    return context.agentId;\r\n  }\r\n  return `${definition.name}-${context.iteration || 1}`;\r\n}\r\n\r\n/**\r\n * Build system prompt for agent (optional, for structured agent behavior)\r\n */\r\nexport function buildSystemPrompt(definition: AgentDefinition): string {\r\n  return `You are ${definition.name}, a specialized AI agent.\r\n\r\nType: ${definition.type || 'specialist'}\r\nModel: ${definition.model}\r\nTools: ${definition.tools.join(', ')}\r\n\r\nFollow your agent definition exactly and complete assigned tasks with high quality.`;\r\n}\r\n"],"names":["loadIterationHistory","formatIterationHistory","buildCFNLoopProtocol","taskId","agentId","enrichJSONContext","jsonObj","sections","task","push","files","fileList","split","map","f","trim","filter","Array","isArray","length","forEach","file","requirements","reqs","req","i","deliverables","delivs","deliv","batch","directory","acceptanceCriteria","criteria","criterion","instructions","instrs","instr","join","buildTaskDescription","agentType","context","desc","contextStr","startsWith","endsWith","JSON","parse","e","iteration","mode","priority","parentTaskId","buildEnvironmentContext","env","isDockerEnv","process","DOCKER_AGENT","WORKSPACE_ROOT","workspaceRoot","contextText","buildAgentPrompt","definition","name","description","history","historyText","err","console","warn","content","envContext","tools","getAgentId","buildSystemPrompt","type","model"],"mappings":"AAAA;;;;;;;;;CASC,GAGD,SAASA,oBAAoB,EAAEC,sBAAsB,QAAQ,yBAAyB;AAYtF;;CAEC,GACD,SAASC,qBAAqBC,MAAc,EAAEC,OAAe;IAC3D,OAAO,CAAC;;;;;;;;;;;;;;;;;;aAkBG,EAAED,OAAO;cACR,EAAEC,QAAQ;;;;;;iCAMS,EAAED,OAAO,CAAC,EAAEC,QAAQ;+BACtB,EAAED,OAAO,CAAC,EAAEC,QAAQ;iCAClB,EAAED,OAAO,CAAC,EAAEC,QAAQ;;;;;;;;;;;;;WAa1C,EAAED,OAAO;YACR,EAAEC,QAAQ;;;;;;;;;;;AAWtB,CAAC;AACD;AAEA;;CAEC,GACD,SAASC,kBAAkBC,OAAY;IACrC,MAAMC,WAAqB,EAAE;IAE7B,2BAA2B;IAC3B,IAAID,QAAQE,IAAI,EAAE;QAChBD,SAASE,IAAI,CAAC,CAAC,UAAU,EAAEH,QAAQE,IAAI,EAAE;IAC3C;IAEA,8DAA8D;IAC9D,IAAIF,QAAQI,KAAK,EAAE;QACjB,MAAMC,WAAW,OAAOL,QAAQI,KAAK,KAAK,WACtCJ,QAAQI,KAAK,CAACE,KAAK,CAAC,KAAKC,GAAG,CAACC,CAAAA,IAAKA,EAAEC,IAAI,IAAIC,MAAM,CAACF,CAAAA,IAAKA,KACxDG,MAAMC,OAAO,CAACZ,QAAQI,KAAK,IAAIJ,QAAQI,KAAK,GAAG,EAAE;QAErD,IAAIC,SAASQ,MAAM,GAAG,GAAG;YACvBZ,SAASE,IAAI,CAAC;YACdE,SAASS,OAAO,CAACC,CAAAA,OAAQd,SAASE,IAAI,CAAC,CAAC,EAAE,EAAEY,MAAM;QACpD;IACF;IAEA,gCAAgC;IAChC,IAAIf,QAAQgB,YAAY,EAAE;QACxB,MAAMC,OAAON,MAAMC,OAAO,CAACZ,QAAQgB,YAAY,IAAIhB,QAAQgB,YAAY,GAAG;YAAChB,QAAQgB,YAAY;SAAC;QAChGf,SAASE,IAAI,CAAC;QACdc,KAAKH,OAAO,CAAC,CAACI,KAAKC,IAAMlB,SAASE,IAAI,CAAC,GAAGgB,IAAI,EAAE,EAAE,EAAED,KAAK;IAC3D;IAEA,IAAIlB,QAAQoB,YAAY,EAAE;QACxB,MAAMC,SAASV,MAAMC,OAAO,CAACZ,QAAQoB,YAAY,IAAIpB,QAAQoB,YAAY,GAAG;YAACpB,QAAQoB,YAAY;SAAC;QAClGnB,SAASE,IAAI,CAAC;QACdkB,OAAOP,OAAO,CAACQ,CAAAA,QAASrB,SAASE,IAAI,CAAC,CAAC,EAAE,EAAEmB,OAAO;IACpD;IAEA,wBAAwB;IACxB,IAAItB,QAAQuB,KAAK,EAAE;QACjBtB,SAASE,IAAI,CAAC,CAAC,aAAa,EAAEH,QAAQuB,KAAK,EAAE;IAC/C;IAEA,wBAAwB;IACxB,IAAIvB,QAAQwB,SAAS,EAAE;QACrBvB,SAASE,IAAI,CAAC,CAAC,yBAAyB,EAAEH,QAAQwB,SAAS,EAAE;IAC/D;IAEA,0BAA0B;IAC1B,IAAIxB,QAAQyB,kBAAkB,EAAE;QAC9B,MAAMC,WAAWf,MAAMC,OAAO,CAACZ,QAAQyB,kBAAkB,IACrDzB,QAAQyB,kBAAkB,GAC1B;YAACzB,QAAQyB,kBAAkB;SAAC;QAChCxB,SAASE,IAAI,CAAC;QACduB,SAASZ,OAAO,CAACa,CAAAA,YAAa1B,SAASE,IAAI,CAAC,CAAC,EAAE,EAAEwB,WAAW;IAC9D;IAEA,uCAAuC;IACvC,IAAI3B,QAAQ4B,YAAY,EAAE;QACxB3B,SAASE,IAAI,CAAC;QACd,MAAM0B,SAASlB,MAAMC,OAAO,CAACZ,QAAQ4B,YAAY,IAAI5B,QAAQ4B,YAAY,GAAG;YAAC5B,QAAQ4B,YAAY;SAAC;QAClGC,OAAOf,OAAO,CAAC,CAACgB,OAAOX,IAAMlB,SAASE,IAAI,CAAC,GAAGgB,IAAI,EAAE,EAAE,EAAEW,OAAO;IACjE;IAEA,OAAO7B,SAAS8B,IAAI,CAAC;AACvB;AAEA;;CAEC,GACD,SAASC,qBAAqBC,SAAiB,EAAEC,OAAoB;IACnE,IAAIC,OAAO;IAEX,IAAID,QAAQA,OAAO,EAAE;QACnB,6BAA6B;QAC7B,IAAIE,aAAaF,QAAQA,OAAO,CAACzB,IAAI;QAErC,mCAAmC;QACnC,IAAI,AAAC2B,WAAWC,UAAU,CAAC,QAAQD,WAAWE,QAAQ,CAAC,QAClDF,WAAWC,UAAU,CAAC,QAAQD,WAAWE,QAAQ,CAAC,MAAO;YAC5D,IAAI;gBACF,MAAMtC,UAAUuC,KAAKC,KAAK,CAACJ;gBAC3BD,OAAOpC,kBAAkBC;gBAEzB,8CAA8C;gBAC9C,IAAIA,QAAQI,KAAK,IAAIJ,QAAQoB,YAAY,EAAE;oBACzCe,QAAQ;gBACV;YACF,EAAE,OAAOM,GAAG;gBACV,sCAAsC;gBACtCN,OAAOD,QAAQA,OAAO;YACxB;QACF,OAAO;YACL,qBAAqB;YACrBC,OAAOD,QAAQA,OAAO;QACxB;IACF,OAAO;QACLC,OAAO,CAAC,gBAAgB,EAAEF,UAAU,MAAM,CAAC;IAC7C;IAEA,sBAAsB;IACtB,IAAIC,QAAQrC,MAAM,EAAE;QAClBsC,QAAQ,CAAC,iBAAiB,EAAED,QAAQrC,MAAM,EAAE;IAC9C;IAEA,IAAIqC,QAAQQ,SAAS,EAAE;QACrBP,QAAQ,CAAC,iBAAiB,EAAED,QAAQQ,SAAS,EAAE;IACjD;IAEA,IAAIR,QAAQS,IAAI,EAAE;QAChBR,QAAQ,CAAC,YAAY,EAAED,QAAQS,IAAI,EAAE;IACvC;IAEA,IAAIT,QAAQU,QAAQ,EAAE;QACpBT,QAAQ,CAAC,gBAAgB,EAAED,QAAQU,QAAQ,EAAE;IAC/C;IAEA,IAAIV,QAAQW,YAAY,EAAE;QACxBV,QAAQ,CAAC,mBAAmB,EAAED,QAAQW,YAAY,EAAE;IACtD;IAEA,OAAOV;AACT;AAEA;;CAEC,GACD,SAASW,wBAAwBZ,OAAoB;IACnD,MAAMa,MAAgB,EAAE;IAExB,IAAIb,QAAQrC,MAAM,EAAEkD,IAAI5C,IAAI,CAAC,CAAC,QAAQ,EAAE+B,QAAQrC,MAAM,EAAE;IACxD,IAAIqC,QAAQQ,SAAS,EAAEK,IAAI5C,IAAI,CAAC,CAAC,UAAU,EAAE+B,QAAQQ,SAAS,EAAE;IAChE,IAAIR,QAAQS,IAAI,EAAEI,IAAI5C,IAAI,CAAC,CAAC,KAAK,EAAE+B,QAAQS,IAAI,EAAE;IACjD,IAAIT,QAAQU,QAAQ,EAAEG,IAAI5C,IAAI,CAAC,CAAC,SAAS,EAAE+B,QAAQU,QAAQ,EAAE;IAC7D,IAAIV,QAAQW,YAAY,EAAEE,IAAI5C,IAAI,CAAC,CAAC,eAAe,EAAE+B,QAAQW,YAAY,EAAE;IAE3E,6BAA6B;IAC7B,MAAMG,cAAcC,QAAQF,GAAG,CAACG,YAAY,KAAK,UAAUD,QAAQF,GAAG,CAACI,cAAc;IACrF,MAAMC,gBAAgBH,QAAQF,GAAG,CAACI,cAAc,IAAI;IAEpD,IAAIH,aAAa;QACfD,IAAI5C,IAAI,CAAC,CAAC,eAAe,EAAEiD,eAAe;IAC5C;IAEA,wEAAwE;IACxE,IAAIJ,eAAeD,IAAIlC,MAAM,KAAK,GAAG;QACnCkC,IAAI5C,IAAI,CAAC,CAAC,eAAe,EAAEiD,eAAe;IAC5C;IAEA,IAAIL,IAAIlC,MAAM,KAAK,KAAK,CAACmC,aAAa,OAAO;IAE7C,IAAIK,cAAc,CAAC;;;;AAIrB,EAAEN,IAAIhB,IAAI,CAAC,MAAM;;AAEjB,CAAC;IAEC,0CAA0C;IAC1C,IAAIiB,aAAa;QACfK,eAAe,CAAC;;;;;;2BAMO,EAAED,cAAc;4CACC,EAAEA,cAAc;8CACd,EAAEA,cAAc;;yEAEW,EAAEA,cAAc;AACzF,CAAC;IACC;IAEA,OAAOC;AACT;AAEA;;CAEC,GACD,OAAO,eAAeC,iBACpBC,UAA2B,EAC3BrB,OAAoB;IAEpB,8EAA8E;IAC9E,MAAMpC,UAAUoC,QAAQpC,OAAO,IAAI,GAAGyD,WAAWC,IAAI,CAAC,CAAC,EAAEtB,QAAQQ,SAAS,IAAI,GAAG;IAEjF,MAAMzC,WAAqB,EAAE;IAE7B,6BAA6B;IAC7BA,SAASE,IAAI,CAAC,CAAC,SAAS,EAAEoD,WAAWC,IAAI,EAAE;IAC3CvD,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAACoD,WAAWE,WAAW;IACpCxD,SAASE,IAAI,CAAC;IAEd,sBAAsB;IACtBF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC6B,qBAAqBuB,WAAWC,IAAI,EAAEtB;IACpDjC,SAASE,IAAI,CAAC;IAEd,4CAA4C;IAC5C,uDAAuD;IACvD,IAAI+B,QAAQrC,MAAM,IAAIqC,QAAQQ,SAAS,IAAIR,QAAQQ,SAAS,GAAG,GAAG;QAChE,IAAI;YACF,MAAMgB,UAAU,MAAMhE,qBAAqBwC,QAAQrC,MAAM,EAAEC,SAASoC,QAAQQ,SAAS;YACrF,MAAMiB,cAAchE,uBAAuB+D,SAASxB,QAAQQ,SAAS;YACrEzC,SAASE,IAAI,CAACwD;YACd1D,SAASE,IAAI,CAAC;QAChB,EAAE,OAAOyD,KAAK;YACZC,QAAQC,IAAI,CAAC,CAAC,wDAAwD,CAAC,EAAEF;QACzE,2BAA2B;QAC7B;IACF;IAEA,mDAAmD;IACnD3D,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAACoD,WAAWQ,OAAO;IAChC9D,SAASE,IAAI,CAAC;IAEd,wFAAwF;IACxF,IAAI+B,QAAQrC,MAAM,IAAIC,SAAS;QAC7BG,SAASE,IAAI,CAACP,qBAAqBsC,QAAQrC,MAAM,EAAEC;QACnDG,SAASE,IAAI,CAAC;IAChB;IAEA,yBAAyB;IACzB,MAAM6D,aAAalB,wBAAwBZ;IAC3C,IAAI8B,YAAY;QACd/D,SAASE,IAAI,CAAC6D;QACd/D,SAASE,IAAI,CAAC;IAChB;IAEA,4BAA4B;IAC5BF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACd,IAAI+B,QAAQQ,SAAS,IAAIR,QAAQQ,SAAS,GAAG,GAAG;QAC9CzC,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;IAChB,OAAO;QACLF,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;IAChB;IACAF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IAEd,8CAA8C;IAC9CF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC,CAAC,iFAAiF,EAAEL,QAAQ,EAAE,CAAC;IAC7GG,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC,CAAC,+EAA+E,EAAEL,QAAQ,EAAE,CAAC;IAC3GG,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC,CAAC,kEAAkE,EAAEL,QAAQ,CAAC,CAAC;IAC7FG,SAASE,IAAI,CAAC;IACdF,SAASE,IAAI,CAAC;IAEd,mBAAmB;IACnB,IAAIoD,WAAWU,KAAK,IAAIV,WAAWU,KAAK,CAACpD,MAAM,GAAG,GAAG;QACnDZ,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC;QACdF,SAASE,IAAI,CAAC,CAAC,oBAAoB,EAAEoD,WAAWU,KAAK,CAAClC,IAAI,CAAC,OAAO;QAClE9B,SAASE,IAAI,CAAC;IAChB;IAEA,OAAOF,SAAS8B,IAAI,CAAC;AACvB;AAEA;;;CAGC,GACD,OAAO,SAASmC,WAAWX,UAA2B,EAAErB,OAAoB;IAC1E,IAAIA,QAAQpC,OAAO,EAAE;QACnB,OAAOoC,QAAQpC,OAAO;IACxB;IACA,OAAO,GAAGyD,WAAWC,IAAI,CAAC,CAAC,EAAEtB,QAAQQ,SAAS,IAAI,GAAG;AACvD;AAEA;;CAEC,GACD,OAAO,SAASyB,kBAAkBZ,UAA2B;IAC3D,OAAO,CAAC,QAAQ,EAAEA,WAAWC,IAAI,CAAC;;MAE9B,EAAED,WAAWa,IAAI,IAAI,aAAa;OACjC,EAAEb,WAAWc,KAAK,CAAC;OACnB,EAAEd,WAAWU,KAAK,CAAClC,IAAI,CAAC,MAAM;;mFAE8C,CAAC;AACpF"}

package/dist/cli/agent-spawn.js

@@ -112,9 +112,12 @@
     if (taskId) {
         try {
             const { execSync } = await import('child_process');
+            // Bug #6 Fix: Read Redis connection parameters from process.env and interpolate in TypeScript
+            const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';
+            const redisPort = process.env.CFN_REDIS_PORT || '6379';
             // Try to read epic-level context from Redis
             try {
-                epicContext = execSync(`redis-cli get "swarm:${taskId}:epic-context"`, {
+                epicContext = execSync(`redis-cli -h ${redisHost} -p ${redisPort} get "swarm:${taskId}:epic-context"`, {
                     encoding: 'utf8'
                 }).trim();
                 if (epicContext === '(nil)') epicContext = '';
@@ -123,7 +126,7 @@
             }
             // Try to read phase-specific context
             try {
-                phaseContext = execSync(`redis-cli get "swarm:${taskId}:phase-context"`, {
+                phaseContext = execSync(`redis-cli -h ${redisHost} -p ${redisPort} get "swarm:${taskId}:phase-context"`, {
                     encoding: 'utf8'
                 }).trim();
                 if (phaseContext === '(nil)') phaseContext = '';
@@ -132,7 +135,7 @@
             }
             // Try to read success criteria
             try {
-                successCriteria = execSync(`redis-cli get "swarm:${taskId}:success-criteria"`, {
+                successCriteria = execSync(`redis-cli -h ${redisHost} -p ${redisPort} get "swarm:${taskId}:success-criteria"`, {
                     encoding: 'utf8'
                 }).trim();
                 if (successCriteria === '(nil)') successCriteria = '';
@@ -146,21 +149,57 @@
             console.warn(`[cfn-spawn]   Could not load epic context from Redis:`, err);
         }
     }
-    // Add environment variables for agent context
-    const env = {
-        ...process.env,
-        AGENT_TYPE: agentType,
-        TASK_ID: taskId || '',
-        ITERATION: iteration?.toString() || '1',
-        CONTEXT: context || '',
-        MODE: mode || 'cli',
-        PRIORITY: priority?.toString() || '5',
-        PARENT_TASK_ID: parentTaskId || '',
-        // Epic-level context from Redis
-        EPIC_CONTEXT: epicContext,
-        PHASE_CONTEXT: phaseContext,
-        SUCCESS_CRITERIA: successCriteria
-    };
+    // Add environment variables for agent context - WHITELIST ONLY APPROACH
+    // SECURITY FIX: Do not use ...process.env spread which exposes ALL variables including secrets
+    // Instead, explicitly whitelist safe variables to pass to spawned process
+    const safeEnvVars = [
+        'CFN_REDIS_HOST',
+        'CFN_REDIS_PORT',
+        'CFN_REDIS_URL',
+        'CFN_MEMORY_BUDGET',
+        'CFN_API_HOST',
+        'CFN_API_PORT',
+        'CFN_LOG_LEVEL',
+        'CFN_LOG_FORMAT',
+        'CFN_CONTAINER_MODE',
+        'CFN_DOCKER_SOCKET',
+        'CFN_NETWORK_NAME',
+        'CFN_CUSTOM_ROUTING',
+        'CFN_DEFAULT_PROVIDER',
+        'NODE_ENV',
+        'PATH',
+        'HOME'
+    ];
+    // Build whitelist-only env object
+    const env = {};
+    // Add whitelisted CFN variables
+    for (const key of safeEnvVars){
+        const value = process.env[key];
+        if (value !== undefined) {
+            env[key] = value;
+        }
+    }
+    // Add API key only when explicitly needed (with strict validation)
+    if (process.env.ANTHROPIC_API_KEY) {
+        // Validate format: should start with "sk-" or "sk-ant-"
+        if (process.env.ANTHROPIC_API_KEY.match(/^sk-[a-zA-Z0-9-]+$/)) {
+            env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
+        } else {
+            console.warn('[cfn-spawn] Warning: ANTHROPIC_API_KEY format invalid, not passing to agent');
+        }
+    }
+    // Add task and execution context variables
+    env.AGENT_TYPE = agentType;
+    env.TASK_ID = taskId || '';
+    env.ITERATION = iteration?.toString() || '1';
+    env.CONTEXT = context || '';
+    env.MODE = mode || 'cli';
+    env.PRIORITY = priority?.toString() || '5';
+    env.PARENT_TASK_ID = parentTaskId || '';
+    // Epic-level context from Redis (sanitized)
+    env.EPIC_CONTEXT = epicContext;
+    env.PHASE_CONTEXT = phaseContext;
+    env.SUCCESS_CRITERIA = successCriteria;
     console.log(`[cfn-spawn] Executing: npx ${claudeArgs.join(' ')}`);
     // Spawn the claude-flow-novice agent process
     const agentProcess = spawn('npx', claudeArgs, {

package/dist/cli/agent-spawn.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/agent-spawn.ts"],"sourcesContent":["#!/usr/bin/env node\r\n/**\r\n * Agent Spawning CLI - Direct agent process spawning\r\n *\r\n * Usage:\r\n *   npx cfn-spawn agent <type> [options]\r\n *   npx cfn-spawn <type> [options]  (agent is implied)\r\n *\r\n * Examples:\r\n *   npx cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n *   npx cfn-spawn researcher --task-id task-123 --iteration 1\r\n */\r\n\r\nimport { spawn } from 'child_process';\r\nimport { resolve } from 'path';\r\n\r\ninterface AgentSpawnOptions {\r\n  agentType: string;\r\n  agentId?: string;\r\n  taskId?: string;\r\n  iteration?: number;\r\n  context?: string;\r\n  mode?: string;\r\n  priority?: number;\r\n  parentTaskId?: string;\r\n}\r\n\r\n/**\r\n * Parse command line arguments for agent spawning\r\n */\r\nfunction parseAgentArgs(args: string[]): AgentSpawnOptions | null {\r\n  // Handle both \"agent <type>\" and \"<type>\" patterns\r\n  let agentType: string;\r\n  let optionArgs: string[];\r\n\r\n  if (args[0] === 'agent') {\r\n    agentType = args[1];\r\n    optionArgs = args.slice(2);\r\n  } else {\r\n    agentType = args[0];\r\n    optionArgs = args.slice(1);\r\n  }\r\n\r\n  if (!agentType) {\r\n    console.error('Error: Agent type is required');\r\n    console.error('Usage: cfn-spawn agent <type> [options]');\r\n    return null;\r\n  }\r\n\r\n  const options: AgentSpawnOptions = { agentType };\r\n\r\n  // Parse optional parameters\r\n  for (let i = 0; i < optionArgs.length; i += 2) {\r\n    const key = optionArgs[i];\r\n    const value = optionArgs[i + 1];\r\n\r\n    switch (key) {\r\n      case '--agent-id':\r\n        options.agentId = value;\r\n        break;\r\n      case '--task-id':\r\n        options.taskId = value;\r\n        break;\r\n      case '--iteration':\r\n        options.iteration = parseInt(value, 10);\r\n        break;\r\n      case '--context':\r\n        options.context = value;\r\n        break;\r\n      case '--mode':\r\n        options.mode = value;\r\n        break;\r\n      case '--priority':\r\n        options.priority = parseInt(value, 10);\r\n        break;\r\n      case '--parent-task':\r\n      case '--parent-task-id':\r\n        options.parentTaskId = value;\r\n        break;\r\n      default:\r\n        console.warn(`Unknown option: ${key}`);\r\n    }\r\n  }\r\n\r\n  return options;\r\n}\r\n\r\n/**\r\n * Spawn an agent process using npx claude-flow-novice agent\r\n *\r\n * This is a wrapper/alias for the existing claude-flow-novice agent spawning mechanism\r\n * Provides the cfn-spawn naming pattern while delegating to the working implementation\r\n */\r\nasync function spawnAgent(options: AgentSpawnOptions): Promise<void> {\r\n  const { agentType, agentId, taskId, iteration, context, mode, priority, parentTaskId } = options;\r\n\r\n  console.log(`[cfn-spawn] Spawning agent: ${agentType}`);\r\n  if (agentId) console.log(`[cfn-spawn]   Agent ID: ${agentId}`);\r\n  if (taskId) console.log(`[cfn-spawn]   Task ID: ${taskId}`);\r\n  if (iteration) console.log(`[cfn-spawn]   Iteration: ${iteration}`);\r\n  if (context) console.log(`[cfn-spawn]   Context: ${context}`);\r\n  if (mode) console.log(`[cfn-spawn]   Mode: ${mode}`);\r\n\r\n  // Build command arguments for npx claude-flow-novice agent\r\n  const claudeArgs = ['claude-flow-novice', 'agent', agentType];\r\n\r\n  // Add optional parameters\r\n  if (agentId) {\r\n    claudeArgs.push('--agent-id', agentId);\r\n  }\r\n  if (taskId) {\r\n    claudeArgs.push('--task-id', taskId);\r\n  }\r\n  if (iteration) {\r\n    claudeArgs.push('--iteration', iteration.toString());\r\n  }\r\n  if (context) {\r\n    claudeArgs.push('--context', context);\r\n  }\r\n  if (mode) {\r\n    claudeArgs.push('--mode', mode);\r\n  }\r\n  if (priority) {\r\n    claudeArgs.push('--priority', priority.toString());\r\n  }\r\n  if (parentTaskId) {\r\n    claudeArgs.push('--parent-task-id', parentTaskId);\r\n  }\r\n\r\n  // Fetch epic context from Redis if available\r\n  let epicContext = '';\r\n  let phaseContext = '';\r\n  let successCriteria = '';\r\n\r\n  if (taskId) {\r\n    try {\r\n      const { execSync } = await import('child_process');\r\n\r\n      // Try to read epic-level context from Redis\r\n      try {\r\n        epicContext = execSync(`redis-cli get \"swarm:${taskId}:epic-context\"`, { encoding: 'utf8' }).trim();\r\n        if (epicContext === '(nil)') epicContext = '';\r\n      } catch (e) {\r\n        // Redis not available or key doesn't exist\r\n      }\r\n\r\n      // Try to read phase-specific context\r\n      try {\r\n        phaseContext = execSync(`redis-cli get \"swarm:${taskId}:phase-context\"`, { encoding: 'utf8' }).trim();\r\n        if (phaseContext === '(nil)') phaseContext = '';\r\n      } catch (e) {\r\n        // Redis not available or key doesn't exist\r\n      }\r\n\r\n      // Try to read success criteria\r\n      try {\r\n        successCriteria = execSync(`redis-cli get \"swarm:${taskId}:success-criteria\"`, { encoding: 'utf8' }).trim();\r\n        if (successCriteria === '(nil)') successCriteria = '';\r\n      } catch (e) {\r\n        // Redis not available or key doesn't exist\r\n      }\r\n\r\n      if (epicContext) {\r\n        console.log(`[cfn-spawn]   Epic context loaded from Redis`);\r\n      }\r\n    } catch (err) {\r\n      console.warn(`[cfn-spawn]   Could not load epic context from Redis:`, err);\r\n    }\r\n  }\r\n\r\n  // Add environment variables for agent context\r\n  const env = {\r\n    ...process.env,\r\n    AGENT_TYPE: agentType,\r\n    TASK_ID: taskId || '',\r\n    ITERATION: iteration?.toString() || '1',\r\n    CONTEXT: context || '',\r\n    MODE: mode || 'cli',\r\n    PRIORITY: priority?.toString() || '5',\r\n    PARENT_TASK_ID: parentTaskId || '',\r\n    // Epic-level context from Redis\r\n    EPIC_CONTEXT: epicContext,\r\n    PHASE_CONTEXT: phaseContext,\r\n    SUCCESS_CRITERIA: successCriteria\r\n  };\r\n\r\n  console.log(`[cfn-spawn] Executing: npx ${claudeArgs.join(' ')}`);\r\n\r\n  // Spawn the claude-flow-novice agent process\r\n  const agentProcess = spawn('npx', claudeArgs, {\r\n    stdio: 'inherit',\r\n    env,\r\n    cwd: process.cwd()\r\n  });\r\n\r\n  // Handle process exit\r\n  agentProcess.on('exit', (code, signal) => {\r\n    if (code === 0) {\r\n      console.log(`[cfn-spawn] Agent ${agentType} completed successfully`);\r\n    } else {\r\n      console.error(`[cfn-spawn] Agent ${agentType} exited with code ${code}, signal ${signal}`);\r\n    }\r\n    process.exit(code || 0);\r\n  });\r\n\r\n  // Handle process errors\r\n  agentProcess.on('error', (err) => {\r\n    console.error(`[cfn-spawn] Failed to spawn agent ${agentType}:`, err.message);\r\n    process.exit(1);\r\n  });\r\n\r\n  // Cleanup on parent exit\r\n  process.on('SIGINT', () => {\r\n    console.log('\\n[cfn-spawn] Received SIGINT, terminating agent...');\r\n    agentProcess.kill('SIGINT');\r\n  });\r\n\r\n  process.on('SIGTERM', () => {\r\n    console.log('\\n[cfn-spawn] Received SIGTERM, terminating agent...');\r\n    agentProcess.kill('SIGTERM');\r\n  });\r\n}\r\n\r\n/**\r\n * Build task description for the agent\r\n */\r\nfunction buildTaskDescription(\r\n  agentType: string,\r\n  taskId?: string,\r\n  iteration?: number,\r\n  context?: string\r\n): string {\r\n  let desc = `Execute task as ${agentType} agent`;\r\n\r\n  if (taskId) desc += ` for task ${taskId}`;\r\n  if (iteration) desc += ` (iteration ${iteration})`;\r\n  if (context) desc += `: ${context}`;\r\n\r\n  return desc;\r\n}\r\n\r\n/**\r\n * Main CLI entry point\r\n */\r\nexport async function main(args: string[] = process.argv.slice(2)): Promise<void> {\r\n  // Show help if requested\r\n  if (args.includes('--help') || args.includes('-h')) {\r\n    console.log(`\r\ncfn-spawn - Claude Flow Novice Agent Spawner\r\n\r\nUsage:\r\n  cfn-spawn agent <type> [options]\r\n  cfn-spawn <type> [options]        (agent is implied)\r\n\r\nOptions:\r\n  --agent-id <id>        Explicit agent identifier (overrides auto-generation)\r\n  --task-id <id>         Task identifier\r\n  --iteration <n>        Iteration number\r\n  --context <text>       Context description\r\n  --mode <mode>          Execution mode (cli, api, hybrid)\r\n  --priority <1-10>      Task priority\r\n  --parent-task-id <id>  Parent task identifier\r\n\r\nExamples:\r\n  cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n  cfn-spawn coder --task-id auth-impl --context \"Implement JWT auth\"\r\n  cfn-spawn reviewer --task-id auth-impl --iteration 2 --mode cli\r\n  cfn-spawn tester --agent-id tester-1-1 --task-id test-phase --iteration 1\r\n    `);\r\n    return;\r\n  }\r\n\r\n  // Parse arguments\r\n  const options = parseAgentArgs(args);\r\n  if (!options) {\r\n    process.exit(1);\r\n  }\r\n\r\n  // Spawn the agent\r\n  await spawnAgent(options);\r\n}\r\n\r\n// Run if called directly\r\n// ES module check - compare import.meta.url with the executed file\r\nconst isMainModule = import.meta.url.endsWith(process.argv[1]?.replace(/\\\\/g, '/') || '');\r\nif (isMainModule) {\r\n  main().catch((err) => {\r\n    console.error('[cfn-spawn] Fatal error:', err);\r\n    process.exit(1);\r\n  });\r\n}\r\n"],"names":["spawn","parseAgentArgs","args","agentType","optionArgs","slice","console","error","options","i","length","key","value","agentId","taskId","iteration","parseInt","context","mode","priority","parentTaskId","warn","spawnAgent","log","claudeArgs","push","toString","epicContext","phaseContext","successCriteria","execSync","encoding","trim","e","err","env","process","AGENT_TYPE","TASK_ID","ITERATION","CONTEXT","MODE","PRIORITY","PARENT_TASK_ID","EPIC_CONTEXT","PHASE_CONTEXT","SUCCESS_CRITERIA","join","agentProcess","stdio","cwd","on","code","signal","exit","message","kill","buildTaskDescription","desc","main","argv","includes","isMainModule","url","endsWith","replace","catch"],"mappings":";AACA;;;;;;;;;;CAUC,GAED,SAASA,KAAK,QAAQ,gBAAgB;AActC;;CAEC,GACD,SAASC,eAAeC,IAAc;IACpC,mDAAmD;IACnD,IAAIC;IACJ,IAAIC;IAEJ,IAAIF,IAAI,CAAC,EAAE,KAAK,SAAS;QACvBC,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B,OAAO;QACLF,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B;IAEA,IAAI,CAACF,WAAW;QACdG,QAAQC,KAAK,CAAC;QACdD,QAAQC,KAAK,CAAC;QACd,OAAO;IACT;IAEA,MAAMC,UAA6B;QAAEL;IAAU;IAE/C,4BAA4B;IAC5B,IAAK,IAAIM,IAAI,GAAGA,IAAIL,WAAWM,MAAM,EAAED,KAAK,EAAG;QAC7C,MAAME,MAAMP,UAAU,CAACK,EAAE;QACzB,MAAMG,QAAQR,UAAU,CAACK,IAAI,EAAE;QAE/B,OAAQE;YACN,KAAK;gBACHH,QAAQK,OAAO,GAAGD;gBAClB;YACF,KAAK;gBACHJ,QAAQM,MAAM,GAAGF;gBACjB;YACF,KAAK;gBACHJ,QAAQO,SAAS,GAAGC,SAASJ,OAAO;gBACpC;YACF,KAAK;gBACHJ,QAAQS,OAAO,GAAGL;gBAClB;YACF,KAAK;gBACHJ,QAAQU,IAAI,GAAGN;gBACf;YACF,KAAK;gBACHJ,QAAQW,QAAQ,GAAGH,SAASJ,OAAO;gBACnC;YACF,KAAK;YACL,KAAK;gBACHJ,QAAQY,YAAY,GAAGR;gBACvB;YACF;gBACEN,QAAQe,IAAI,CAAC,CAAC,gBAAgB,EAAEV,KAAK;QACzC;IACF;IAEA,OAAOH;AACT;AAEA;;;;;CAKC,GACD,eAAec,WAAWd,OAA0B;IAClD,MAAM,EAAEL,SAAS,EAAEU,OAAO,EAAEC,MAAM,EAAEC,SAAS,EAAEE,OAAO,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,YAAY,EAAE,GAAGZ;IAEzFF,QAAQiB,GAAG,CAAC,CAAC,4BAA4B,EAAEpB,WAAW;IACtD,IAAIU,SAASP,QAAQiB,GAAG,CAAC,CAAC,wBAAwB,EAAEV,SAAS;IAC7D,IAAIC,QAAQR,QAAQiB,GAAG,CAAC,CAAC,uBAAuB,EAAET,QAAQ;IAC1D,IAAIC,WAAWT,QAAQiB,GAAG,CAAC,CAAC,yBAAyB,EAAER,WAAW;IAClE,IAAIE,SAASX,QAAQiB,GAAG,CAAC,CAAC,uBAAuB,EAAEN,SAAS;IAC5D,IAAIC,MAAMZ,QAAQiB,GAAG,CAAC,CAAC,oBAAoB,EAAEL,MAAM;IAEnD,2DAA2D;IAC3D,MAAMM,aAAa;QAAC;QAAsB;QAASrB;KAAU;IAE7D,0BAA0B;IAC1B,IAAIU,SAAS;QACXW,WAAWC,IAAI,CAAC,cAAcZ;IAChC;IACA,IAAIC,QAAQ;QACVU,WAAWC,IAAI,CAAC,aAAaX;IAC/B;IACA,IAAIC,WAAW;QACbS,WAAWC,IAAI,CAAC,eAAeV,UAAUW,QAAQ;IACnD;IACA,IAAIT,SAAS;QACXO,WAAWC,IAAI,CAAC,aAAaR;IAC/B;IACA,IAAIC,MAAM;QACRM,WAAWC,IAAI,CAAC,UAAUP;IAC5B;IACA,IAAIC,UAAU;QACZK,WAAWC,IAAI,CAAC,cAAcN,SAASO,QAAQ;IACjD;IACA,IAAIN,cAAc;QAChBI,WAAWC,IAAI,CAAC,oBAAoBL;IACtC;IAEA,6CAA6C;IAC7C,IAAIO,cAAc;IAClB,IAAIC,eAAe;IACnB,IAAIC,kBAAkB;IAEtB,IAAIf,QAAQ;QACV,IAAI;YACF,MAAM,EAAEgB,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC;YAElC,4CAA4C;YAC5C,IAAI;gBACFH,cAAcG,SAAS,CAAC,qBAAqB,EAAEhB,OAAO,cAAc,CAAC,EAAE;oBAAEiB,UAAU;gBAAO,GAAGC,IAAI;gBACjG,IAAIL,gBAAgB,SAASA,cAAc;YAC7C,EAAE,OAAOM,GAAG;YACV,2CAA2C;YAC7C;YAEA,qCAAqC;YACrC,IAAI;gBACFL,eAAeE,SAAS,CAAC,qBAAqB,EAAEhB,OAAO,eAAe,CAAC,EAAE;oBAAEiB,UAAU;gBAAO,GAAGC,IAAI;gBACnG,IAAIJ,iBAAiB,SAASA,eAAe;YAC/C,EAAE,OAAOK,GAAG;YACV,2CAA2C;YAC7C;YAEA,+BAA+B;YAC/B,IAAI;gBACFJ,kBAAkBC,SAAS,CAAC,qBAAqB,EAAEhB,OAAO,kBAAkB,CAAC,EAAE;oBAAEiB,UAAU;gBAAO,GAAGC,IAAI;gBACzG,IAAIH,oBAAoB,SAASA,kBAAkB;YACrD,EAAE,OAAOI,GAAG;YACV,2CAA2C;YAC7C;YAEA,IAAIN,aAAa;gBACfrB,QAAQiB,GAAG,CAAC,CAAC,4CAA4C,CAAC;YAC5D;QACF,EAAE,OAAOW,KAAK;YACZ5B,QAAQe,IAAI,CAAC,CAAC,qDAAqD,CAAC,EAAEa;QACxE;IACF;IAEA,8CAA8C;IAC9C,MAAMC,MAAM;QACV,GAAGC,QAAQD,GAAG;QACdE,YAAYlC;QACZmC,SAASxB,UAAU;QACnByB,WAAWxB,WAAWW,cAAc;QACpCc,SAASvB,WAAW;QACpBwB,MAAMvB,QAAQ;QACdwB,UAAUvB,UAAUO,cAAc;QAClCiB,gBAAgBvB,gBAAgB;QAChC,gCAAgC;QAChCwB,cAAcjB;QACdkB,eAAejB;QACfkB,kBAAkBjB;IACpB;IAEAvB,QAAQiB,GAAG,CAAC,CAAC,2BAA2B,EAAEC,WAAWuB,IAAI,CAAC,MAAM;IAEhE,6CAA6C;IAC7C,MAAMC,eAAehD,MAAM,OAAOwB,YAAY;QAC5CyB,OAAO;QACPd;QACAe,KAAKd,QAAQc,GAAG;IAClB;IAEA,sBAAsB;IACtBF,aAAaG,EAAE,CAAC,QAAQ,CAACC,MAAMC;QAC7B,IAAID,SAAS,GAAG;YACd9C,QAAQiB,GAAG,CAAC,CAAC,kBAAkB,EAAEpB,UAAU,uBAAuB,CAAC;QACrE,OAAO;YACLG,QAAQC,KAAK,CAAC,CAAC,kBAAkB,EAAEJ,UAAU,kBAAkB,EAAEiD,KAAK,SAAS,EAAEC,QAAQ;QAC3F;QACAjB,QAAQkB,IAAI,CAACF,QAAQ;IACvB;IAEA,wBAAwB;IACxBJ,aAAaG,EAAE,CAAC,SAAS,CAACjB;QACxB5B,QAAQC,KAAK,CAAC,CAAC,kCAAkC,EAAEJ,UAAU,CAAC,CAAC,EAAE+B,IAAIqB,OAAO;QAC5EnB,QAAQkB,IAAI,CAAC;IACf;IAEA,yBAAyB;IACzBlB,QAAQe,EAAE,CAAC,UAAU;QACnB7C,QAAQiB,GAAG,CAAC;QACZyB,aAAaQ,IAAI,CAAC;IACpB;IAEApB,QAAQe,EAAE,CAAC,WAAW;QACpB7C,QAAQiB,GAAG,CAAC;QACZyB,aAAaQ,IAAI,CAAC;IACpB;AACF;AAEA;;CAEC,GACD,SAASC,qBACPtD,SAAiB,EACjBW,MAAe,EACfC,SAAkB,EAClBE,OAAgB;IAEhB,IAAIyC,OAAO,CAAC,gBAAgB,EAAEvD,UAAU,MAAM,CAAC;IAE/C,IAAIW,QAAQ4C,QAAQ,CAAC,UAAU,EAAE5C,QAAQ;IACzC,IAAIC,WAAW2C,QAAQ,CAAC,YAAY,EAAE3C,UAAU,CAAC,CAAC;IAClD,IAAIE,SAASyC,QAAQ,CAAC,EAAE,EAAEzC,SAAS;IAEnC,OAAOyC;AACT;AAEA;;CAEC,GACD,OAAO,eAAeC,KAAKzD,OAAiBkC,QAAQwB,IAAI,CAACvD,KAAK,CAAC,EAAE;IAC/D,yBAAyB;IACzB,IAAIH,KAAK2D,QAAQ,CAAC,aAAa3D,KAAK2D,QAAQ,CAAC,OAAO;QAClDvD,QAAQiB,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;IAqBb,CAAC;QACD;IACF;IAEA,kBAAkB;IAClB,MAAMf,UAAUP,eAAeC;IAC/B,IAAI,CAACM,SAAS;QACZ4B,QAAQkB,IAAI,CAAC;IACf;IAEA,kBAAkB;IAClB,MAAMhC,WAAWd;AACnB;AAEA,yBAAyB;AACzB,mEAAmE;AACnE,MAAMsD,eAAe,YAAYC,GAAG,CAACC,QAAQ,CAAC5B,QAAQwB,IAAI,CAAC,EAAE,EAAEK,QAAQ,OAAO,QAAQ;AACtF,IAAIH,cAAc;IAChBH,OAAOO,KAAK,CAAC,CAAChC;QACZ5B,QAAQC,KAAK,CAAC,4BAA4B2B;QAC1CE,QAAQkB,IAAI,CAAC;IACf;AACF"}
+{"version":3,"sources":["../../src/cli/agent-spawn.ts"],"sourcesContent":["#!/usr/bin/env node\r\n/**\r\n * Agent Spawning CLI - Direct agent process spawning\r\n *\r\n * Usage:\r\n *   npx cfn-spawn agent <type> [options]\r\n *   npx cfn-spawn <type> [options]  (agent is implied)\r\n *\r\n * Examples:\r\n *   npx cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n *   npx cfn-spawn researcher --task-id task-123 --iteration 1\r\n */\r\n\r\nimport { spawn } from 'child_process';\r\nimport { resolve } from 'path';\r\n\r\ninterface AgentSpawnOptions {\r\n  agentType: string;\r\n  agentId?: string;\r\n  taskId?: string;\r\n  iteration?: number;\r\n  context?: string;\r\n  mode?: string;\r\n  priority?: number;\r\n  parentTaskId?: string;\r\n}\r\n\r\n/**\r\n * Parse command line arguments for agent spawning\r\n */\r\nfunction parseAgentArgs(args: string[]): AgentSpawnOptions | null {\r\n  // Handle both \"agent <type>\" and \"<type>\" patterns\r\n  let agentType: string;\r\n  let optionArgs: string[];\r\n\r\n  if (args[0] === 'agent') {\r\n    agentType = args[1];\r\n    optionArgs = args.slice(2);\r\n  } else {\r\n    agentType = args[0];\r\n    optionArgs = args.slice(1);\r\n  }\r\n\r\n  if (!agentType) {\r\n    console.error('Error: Agent type is required');\r\n    console.error('Usage: cfn-spawn agent <type> [options]');\r\n    return null;\r\n  }\r\n\r\n  const options: AgentSpawnOptions = { agentType };\r\n\r\n  // Parse optional parameters\r\n  for (let i = 0; i < optionArgs.length; i += 2) {\r\n    const key = optionArgs[i];\r\n    const value = optionArgs[i + 1];\r\n\r\n    switch (key) {\r\n      case '--agent-id':\r\n        options.agentId = value;\r\n        break;\r\n      case '--task-id':\r\n        options.taskId = value;\r\n        break;\r\n      case '--iteration':\r\n        options.iteration = parseInt(value, 10);\r\n        break;\r\n      case '--context':\r\n        options.context = value;\r\n        break;\r\n      case '--mode':\r\n        options.mode = value;\r\n        break;\r\n      case '--priority':\r\n        options.priority = parseInt(value, 10);\r\n        break;\r\n      case '--parent-task':\r\n      case '--parent-task-id':\r\n        options.parentTaskId = value;\r\n        break;\r\n      default:\r\n        console.warn(`Unknown option: ${key}`);\r\n    }\r\n  }\r\n\r\n  return options;\r\n}\r\n\r\n/**\r\n * Spawn an agent process using npx claude-flow-novice agent\r\n *\r\n * This is a wrapper/alias for the existing claude-flow-novice agent spawning mechanism\r\n * Provides the cfn-spawn naming pattern while delegating to the working implementation\r\n */\r\nasync function spawnAgent(options: AgentSpawnOptions): Promise<void> {\r\n  const { agentType, agentId, taskId, iteration, context, mode, priority, parentTaskId } = options;\r\n\r\n  console.log(`[cfn-spawn] Spawning agent: ${agentType}`);\r\n  if (agentId) console.log(`[cfn-spawn]   Agent ID: ${agentId}`);\r\n  if (taskId) console.log(`[cfn-spawn]   Task ID: ${taskId}`);\r\n  if (iteration) console.log(`[cfn-spawn]   Iteration: ${iteration}`);\r\n  if (context) console.log(`[cfn-spawn]   Context: ${context}`);\r\n  if (mode) console.log(`[cfn-spawn]   Mode: ${mode}`);\r\n\r\n  // Build command arguments for npx claude-flow-novice agent\r\n  const claudeArgs = ['claude-flow-novice', 'agent', agentType];\r\n\r\n  // Add optional parameters\r\n  if (agentId) {\r\n    claudeArgs.push('--agent-id', agentId);\r\n  }\r\n  if (taskId) {\r\n    claudeArgs.push('--task-id', taskId);\r\n  }\r\n  if (iteration) {\r\n    claudeArgs.push('--iteration', iteration.toString());\r\n  }\r\n  if (context) {\r\n    claudeArgs.push('--context', context);\r\n  }\r\n  if (mode) {\r\n    claudeArgs.push('--mode', mode);\r\n  }\r\n  if (priority) {\r\n    claudeArgs.push('--priority', priority.toString());\r\n  }\r\n  if (parentTaskId) {\r\n    claudeArgs.push('--parent-task-id', parentTaskId);\r\n  }\r\n\r\n  // Fetch epic context from Redis if available\r\n  let epicContext = '';\r\n  let phaseContext = '';\r\n  let successCriteria = '';\r\n\r\n  if (taskId) {\r\n    try {\r\n      const { execSync } = await import('child_process');\r\n\r\n      // Bug #6 Fix: Read Redis connection parameters from process.env and interpolate in TypeScript\r\n      const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';\r\n      const redisPort = process.env.CFN_REDIS_PORT || '6379';\r\n\r\n      // Try to read epic-level context from Redis\r\n      try {\r\n        epicContext = execSync(`redis-cli -h ${redisHost} -p ${redisPort} get \"swarm:${taskId}:epic-context\"`, { encoding: 'utf8' }).trim();\r\n        if (epicContext === '(nil)') epicContext = '';\r\n      } catch (e) {\r\n        // Redis not available or key doesn't exist\r\n      }\r\n\r\n      // Try to read phase-specific context\r\n      try {\r\n        phaseContext = execSync(`redis-cli -h ${redisHost} -p ${redisPort} get \"swarm:${taskId}:phase-context\"`, { encoding: 'utf8' }).trim();\r\n        if (phaseContext === '(nil)') phaseContext = '';\r\n      } catch (e) {\r\n        // Redis not available or key doesn't exist\r\n      }\r\n\r\n      // Try to read success criteria\r\n      try {\r\n        successCriteria = execSync(`redis-cli -h ${redisHost} -p ${redisPort} get \"swarm:${taskId}:success-criteria\"`, { encoding: 'utf8' }).trim();\r\n        if (successCriteria === '(nil)') successCriteria = '';\r\n      } catch (e) {\r\n        // Redis not available or key doesn't exist\r\n      }\r\n\r\n      if (epicContext) {\r\n        console.log(`[cfn-spawn]   Epic context loaded from Redis`);\r\n      }\r\n    } catch (err) {\r\n      console.warn(`[cfn-spawn]   Could not load epic context from Redis:`, err);\r\n    }\r\n  }\r\n\r\n  // Add environment variables for agent context - WHITELIST ONLY APPROACH\r\n  // SECURITY FIX: Do not use ...process.env spread which exposes ALL variables including secrets\r\n  // Instead, explicitly whitelist safe variables to pass to spawned process\r\n  const safeEnvVars = [\r\n    'CFN_REDIS_HOST',\r\n    'CFN_REDIS_PORT',\r\n    'CFN_REDIS_URL',\r\n    'CFN_MEMORY_BUDGET',\r\n    'CFN_API_HOST',\r\n    'CFN_API_PORT',\r\n    'CFN_LOG_LEVEL',\r\n    'CFN_LOG_FORMAT',\r\n    'CFN_CONTAINER_MODE',\r\n    'CFN_DOCKER_SOCKET',\r\n    'CFN_NETWORK_NAME',\r\n    'CFN_CUSTOM_ROUTING',\r\n    'CFN_DEFAULT_PROVIDER',\r\n    'NODE_ENV',\r\n    'PATH',\r\n    'HOME'\r\n  ];\r\n\r\n  // Build whitelist-only env object\r\n  const env: Record<string, string> = {};\r\n\r\n  // Add whitelisted CFN variables\r\n  for (const key of safeEnvVars) {\r\n    const value = process.env[key];\r\n    if (value !== undefined) {\r\n      env[key] = value;\r\n    }\r\n  }\r\n\r\n  // Add API key only when explicitly needed (with strict validation)\r\n  if (process.env.ANTHROPIC_API_KEY) {\r\n    // Validate format: should start with \"sk-\" or \"sk-ant-\"\r\n    if (process.env.ANTHROPIC_API_KEY.match(/^sk-[a-zA-Z0-9-]+$/)) {\r\n      env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n    } else {\r\n      console.warn('[cfn-spawn] Warning: ANTHROPIC_API_KEY format invalid, not passing to agent');\r\n    }\r\n  }\r\n\r\n  // Add task and execution context variables\r\n  env.AGENT_TYPE = agentType;\r\n  env.TASK_ID = taskId || '';\r\n  env.ITERATION = iteration?.toString() || '1';\r\n  env.CONTEXT = context || '';\r\n  env.MODE = mode || 'cli';\r\n  env.PRIORITY = priority?.toString() || '5';\r\n  env.PARENT_TASK_ID = parentTaskId || '';\r\n\r\n  // Epic-level context from Redis (sanitized)\r\n  env.EPIC_CONTEXT = epicContext;\r\n  env.PHASE_CONTEXT = phaseContext;\r\n  env.SUCCESS_CRITERIA = successCriteria;\r\n\r\n  console.log(`[cfn-spawn] Executing: npx ${claudeArgs.join(' ')}`);\r\n\r\n  // Spawn the claude-flow-novice agent process\r\n  const agentProcess = spawn('npx', claudeArgs, {\r\n    stdio: 'inherit',\r\n    env,\r\n    cwd: process.cwd()\r\n  });\r\n\r\n  // Handle process exit\r\n  agentProcess.on('exit', (code, signal) => {\r\n    if (code === 0) {\r\n      console.log(`[cfn-spawn] Agent ${agentType} completed successfully`);\r\n    } else {\r\n      console.error(`[cfn-spawn] Agent ${agentType} exited with code ${code}, signal ${signal}`);\r\n    }\r\n    process.exit(code || 0);\r\n  });\r\n\r\n  // Handle process errors\r\n  agentProcess.on('error', (err) => {\r\n    console.error(`[cfn-spawn] Failed to spawn agent ${agentType}:`, err.message);\r\n    process.exit(1);\r\n  });\r\n\r\n  // Cleanup on parent exit\r\n  process.on('SIGINT', () => {\r\n    console.log('\\n[cfn-spawn] Received SIGINT, terminating agent...');\r\n    agentProcess.kill('SIGINT');\r\n  });\r\n\r\n  process.on('SIGTERM', () => {\r\n    console.log('\\n[cfn-spawn] Received SIGTERM, terminating agent...');\r\n    agentProcess.kill('SIGTERM');\r\n  });\r\n}\r\n\r\n/**\r\n * Build task description for the agent\r\n */\r\nfunction buildTaskDescription(\r\n  agentType: string,\r\n  taskId?: string,\r\n  iteration?: number,\r\n  context?: string\r\n): string {\r\n  let desc = `Execute task as ${agentType} agent`;\r\n\r\n  if (taskId) desc += ` for task ${taskId}`;\r\n  if (iteration) desc += ` (iteration ${iteration})`;\r\n  if (context) desc += `: ${context}`;\r\n\r\n  return desc;\r\n}\r\n\r\n/**\r\n * Main CLI entry point\r\n */\r\nexport async function main(args: string[] = process.argv.slice(2)): Promise<void> {\r\n  // Show help if requested\r\n  if (args.includes('--help') || args.includes('-h')) {\r\n    console.log(`\r\ncfn-spawn - Claude Flow Novice Agent Spawner\r\n\r\nUsage:\r\n  cfn-spawn agent <type> [options]\r\n  cfn-spawn <type> [options]        (agent is implied)\r\n\r\nOptions:\r\n  --agent-id <id>        Explicit agent identifier (overrides auto-generation)\r\n  --task-id <id>         Task identifier\r\n  --iteration <n>        Iteration number\r\n  --context <text>       Context description\r\n  --mode <mode>          Execution mode (cli, api, hybrid)\r\n  --priority <1-10>      Task priority\r\n  --parent-task-id <id>  Parent task identifier\r\n\r\nExamples:\r\n  cfn-spawn agent researcher --task-id task-123 --iteration 1\r\n  cfn-spawn coder --task-id auth-impl --context \"Implement JWT auth\"\r\n  cfn-spawn reviewer --task-id auth-impl --iteration 2 --mode cli\r\n  cfn-spawn tester --agent-id tester-1-1 --task-id test-phase --iteration 1\r\n    `);\r\n    return;\r\n  }\r\n\r\n  // Parse arguments\r\n  const options = parseAgentArgs(args);\r\n  if (!options) {\r\n    process.exit(1);\r\n  }\r\n\r\n  // Spawn the agent\r\n  await spawnAgent(options);\r\n}\r\n\r\n// Run if called directly\r\n// ES module check - compare import.meta.url with the executed file\r\nconst isMainModule = import.meta.url.endsWith(process.argv[1]?.replace(/\\\\/g, '/') || '');\r\nif (isMainModule) {\r\n  main().catch((err) => {\r\n    console.error('[cfn-spawn] Fatal error:', err);\r\n    process.exit(1);\r\n  });\r\n}\r\n"],"names":["spawn","parseAgentArgs","args","agentType","optionArgs","slice","console","error","options","i","length","key","value","agentId","taskId","iteration","parseInt","context","mode","priority","parentTaskId","warn","spawnAgent","log","claudeArgs","push","toString","epicContext","phaseContext","successCriteria","execSync","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","encoding","trim","e","err","safeEnvVars","undefined","ANTHROPIC_API_KEY","match","AGENT_TYPE","TASK_ID","ITERATION","CONTEXT","MODE","PRIORITY","PARENT_TASK_ID","EPIC_CONTEXT","PHASE_CONTEXT","SUCCESS_CRITERIA","join","agentProcess","stdio","cwd","on","code","signal","exit","message","kill","buildTaskDescription","desc","main","argv","includes","isMainModule","url","endsWith","replace","catch"],"mappings":";AACA;;;;;;;;;;CAUC,GAED,SAASA,KAAK,QAAQ,gBAAgB;AActC;;CAEC,GACD,SAASC,eAAeC,IAAc;IACpC,mDAAmD;IACnD,IAAIC;IACJ,IAAIC;IAEJ,IAAIF,IAAI,CAAC,EAAE,KAAK,SAAS;QACvBC,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B,OAAO;QACLF,YAAYD,IAAI,CAAC,EAAE;QACnBE,aAAaF,KAAKG,KAAK,CAAC;IAC1B;IAEA,IAAI,CAACF,WAAW;QACdG,QAAQC,KAAK,CAAC;QACdD,QAAQC,KAAK,CAAC;QACd,OAAO;IACT;IAEA,MAAMC,UAA6B;QAAEL;IAAU;IAE/C,4BAA4B;IAC5B,IAAK,IAAIM,IAAI,GAAGA,IAAIL,WAAWM,MAAM,EAAED,KAAK,EAAG;QAC7C,MAAME,MAAMP,UAAU,CAACK,EAAE;QACzB,MAAMG,QAAQR,UAAU,CAACK,IAAI,EAAE;QAE/B,OAAQE;YACN,KAAK;gBACHH,QAAQK,OAAO,GAAGD;gBAClB;YACF,KAAK;gBACHJ,QAAQM,MAAM,GAAGF;gBACjB;YACF,KAAK;gBACHJ,QAAQO,SAAS,GAAGC,SAASJ,OAAO;gBACpC;YACF,KAAK;gBACHJ,QAAQS,OAAO,GAAGL;gBAClB;YACF,KAAK;gBACHJ,QAAQU,IAAI,GAAGN;gBACf;YACF,KAAK;gBACHJ,QAAQW,QAAQ,GAAGH,SAASJ,OAAO;gBACnC;YACF,KAAK;YACL,KAAK;gBACHJ,QAAQY,YAAY,GAAGR;gBACvB;YACF;gBACEN,QAAQe,IAAI,CAAC,CAAC,gBAAgB,EAAEV,KAAK;QACzC;IACF;IAEA,OAAOH;AACT;AAEA;;;;;CAKC,GACD,eAAec,WAAWd,OAA0B;IAClD,MAAM,EAAEL,SAAS,EAAEU,OAAO,EAAEC,MAAM,EAAEC,SAAS,EAAEE,OAAO,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,YAAY,EAAE,GAAGZ;IAEzFF,QAAQiB,GAAG,CAAC,CAAC,4BAA4B,EAAEpB,WAAW;IACtD,IAAIU,SAASP,QAAQiB,GAAG,CAAC,CAAC,wBAAwB,EAAEV,SAAS;IAC7D,IAAIC,QAAQR,QAAQiB,GAAG,CAAC,CAAC,uBAAuB,EAAET,QAAQ;IAC1D,IAAIC,WAAWT,QAAQiB,GAAG,CAAC,CAAC,yBAAyB,EAAER,WAAW;IAClE,IAAIE,SAASX,QAAQiB,GAAG,CAAC,CAAC,uBAAuB,EAAEN,SAAS;IAC5D,IAAIC,MAAMZ,QAAQiB,GAAG,CAAC,CAAC,oBAAoB,EAAEL,MAAM;IAEnD,2DAA2D;IAC3D,MAAMM,aAAa;QAAC;QAAsB;QAASrB;KAAU;IAE7D,0BAA0B;IAC1B,IAAIU,SAAS;QACXW,WAAWC,IAAI,CAAC,cAAcZ;IAChC;IACA,IAAIC,QAAQ;QACVU,WAAWC,IAAI,CAAC,aAAaX;IAC/B;IACA,IAAIC,WAAW;QACbS,WAAWC,IAAI,CAAC,eAAeV,UAAUW,QAAQ;IACnD;IACA,IAAIT,SAAS;QACXO,WAAWC,IAAI,CAAC,aAAaR;IAC/B;IACA,IAAIC,MAAM;QACRM,WAAWC,IAAI,CAAC,UAAUP;IAC5B;IACA,IAAIC,UAAU;QACZK,WAAWC,IAAI,CAAC,cAAcN,SAASO,QAAQ;IACjD;IACA,IAAIN,cAAc;QAChBI,WAAWC,IAAI,CAAC,oBAAoBL;IACtC;IAEA,6CAA6C;IAC7C,IAAIO,cAAc;IAClB,IAAIC,eAAe;IACnB,IAAIC,kBAAkB;IAEtB,IAAIf,QAAQ;QACV,IAAI;YACF,MAAM,EAAEgB,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC;YAElC,8FAA8F;YAC9F,MAAMC,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;YAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;YAEhD,4CAA4C;YAC5C,IAAI;gBACFT,cAAcG,SAAS,CAAC,aAAa,EAAEC,UAAU,IAAI,EAAEI,UAAU,YAAY,EAAErB,OAAO,cAAc,CAAC,EAAE;oBAAEuB,UAAU;gBAAO,GAAGC,IAAI;gBACjI,IAAIX,gBAAgB,SAASA,cAAc;YAC7C,EAAE,OAAOY,GAAG;YACV,2CAA2C;YAC7C;YAEA,qCAAqC;YACrC,IAAI;gBACFX,eAAeE,SAAS,CAAC,aAAa,EAAEC,UAAU,IAAI,EAAEI,UAAU,YAAY,EAAErB,OAAO,eAAe,CAAC,EAAE;oBAAEuB,UAAU;gBAAO,GAAGC,IAAI;gBACnI,IAAIV,iBAAiB,SAASA,eAAe;YAC/C,EAAE,OAAOW,GAAG;YACV,2CAA2C;YAC7C;YAEA,+BAA+B;YAC/B,IAAI;gBACFV,kBAAkBC,SAAS,CAAC,aAAa,EAAEC,UAAU,IAAI,EAAEI,UAAU,YAAY,EAAErB,OAAO,kBAAkB,CAAC,EAAE;oBAAEuB,UAAU;gBAAO,GAAGC,IAAI;gBACzI,IAAIT,oBAAoB,SAASA,kBAAkB;YACrD,EAAE,OAAOU,GAAG;YACV,2CAA2C;YAC7C;YAEA,IAAIZ,aAAa;gBACfrB,QAAQiB,GAAG,CAAC,CAAC,4CAA4C,CAAC;YAC5D;QACF,EAAE,OAAOiB,KAAK;YACZlC,QAAQe,IAAI,CAAC,CAAC,qDAAqD,CAAC,EAAEmB;QACxE;IACF;IAEA,wEAAwE;IACxE,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAMC,cAAc;QAClB;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;KACD;IAED,kCAAkC;IAClC,MAAMR,MAA8B,CAAC;IAErC,gCAAgC;IAChC,KAAK,MAAMtB,OAAO8B,YAAa;QAC7B,MAAM7B,QAAQoB,QAAQC,GAAG,CAACtB,IAAI;QAC9B,IAAIC,UAAU8B,WAAW;YACvBT,GAAG,CAACtB,IAAI,GAAGC;QACb;IACF;IAEA,mEAAmE;IACnE,IAAIoB,QAAQC,GAAG,CAACU,iBAAiB,EAAE;QACjC,wDAAwD;QACxD,IAAIX,QAAQC,GAAG,CAACU,iBAAiB,CAACC,KAAK,CAAC,uBAAuB;YAC7DX,IAAIU,iBAAiB,GAAGX,QAAQC,GAAG,CAACU,iBAAiB;QACvD,OAAO;YACLrC,QAAQe,IAAI,CAAC;QACf;IACF;IAEA,2CAA2C;IAC3CY,IAAIY,UAAU,GAAG1C;IACjB8B,IAAIa,OAAO,GAAGhC,UAAU;IACxBmB,IAAIc,SAAS,GAAGhC,WAAWW,cAAc;IACzCO,IAAIe,OAAO,GAAG/B,WAAW;IACzBgB,IAAIgB,IAAI,GAAG/B,QAAQ;IACnBe,IAAIiB,QAAQ,GAAG/B,UAAUO,cAAc;IACvCO,IAAIkB,cAAc,GAAG/B,gBAAgB;IAErC,4CAA4C;IAC5Ca,IAAImB,YAAY,GAAGzB;IACnBM,IAAIoB,aAAa,GAAGzB;IACpBK,IAAIqB,gBAAgB,GAAGzB;IAEvBvB,QAAQiB,GAAG,CAAC,CAAC,2BAA2B,EAAEC,WAAW+B,IAAI,CAAC,MAAM;IAEhE,6CAA6C;IAC7C,MAAMC,eAAexD,MAAM,OAAOwB,YAAY;QAC5CiC,OAAO;QACPxB;QACAyB,KAAK1B,QAAQ0B,GAAG;IAClB;IAEA,sBAAsB;IACtBF,aAAaG,EAAE,CAAC,QAAQ,CAACC,MAAMC;QAC7B,IAAID,SAAS,GAAG;YACdtD,QAAQiB,GAAG,CAAC,CAAC,kBAAkB,EAAEpB,UAAU,uBAAuB,CAAC;QACrE,OAAO;YACLG,QAAQC,KAAK,CAAC,CAAC,kBAAkB,EAAEJ,UAAU,kBAAkB,EAAEyD,KAAK,SAAS,EAAEC,QAAQ;QAC3F;QACA7B,QAAQ8B,IAAI,CAACF,QAAQ;IACvB;IAEA,wBAAwB;IACxBJ,aAAaG,EAAE,CAAC,SAAS,CAACnB;QACxBlC,QAAQC,KAAK,CAAC,CAAC,kCAAkC,EAAEJ,UAAU,CAAC,CAAC,EAAEqC,IAAIuB,OAAO;QAC5E/B,QAAQ8B,IAAI,CAAC;IACf;IAEA,yBAAyB;IACzB9B,QAAQ2B,EAAE,CAAC,UAAU;QACnBrD,QAAQiB,GAAG,CAAC;QACZiC,aAAaQ,IAAI,CAAC;IACpB;IAEAhC,QAAQ2B,EAAE,CAAC,WAAW;QACpBrD,QAAQiB,GAAG,CAAC;QACZiC,aAAaQ,IAAI,CAAC;IACpB;AACF;AAEA;;CAEC,GACD,SAASC,qBACP9D,SAAiB,EACjBW,MAAe,EACfC,SAAkB,EAClBE,OAAgB;IAEhB,IAAIiD,OAAO,CAAC,gBAAgB,EAAE/D,UAAU,MAAM,CAAC;IAE/C,IAAIW,QAAQoD,QAAQ,CAAC,UAAU,EAAEpD,QAAQ;IACzC,IAAIC,WAAWmD,QAAQ,CAAC,YAAY,EAAEnD,UAAU,CAAC,CAAC;IAClD,IAAIE,SAASiD,QAAQ,CAAC,EAAE,EAAEjD,SAAS;IAEnC,OAAOiD;AACT;AAEA;;CAEC,GACD,OAAO,eAAeC,KAAKjE,OAAiB8B,QAAQoC,IAAI,CAAC/D,KAAK,CAAC,EAAE;IAC/D,yBAAyB;IACzB,IAAIH,KAAKmE,QAAQ,CAAC,aAAanE,KAAKmE,QAAQ,CAAC,OAAO;QAClD/D,QAAQiB,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;IAqBb,CAAC;QACD;IACF;IAEA,kBAAkB;IAClB,MAAMf,UAAUP,eAAeC;IAC/B,IAAI,CAACM,SAAS;QACZwB,QAAQ8B,IAAI,CAAC;IACf;IAEA,kBAAkB;IAClB,MAAMxC,WAAWd;AACnB;AAEA,yBAAyB;AACzB,mEAAmE;AACnE,MAAM8D,eAAe,YAAYC,GAAG,CAACC,QAAQ,CAACxC,QAAQoC,IAAI,CAAC,EAAE,EAAEK,QAAQ,OAAO,QAAQ;AACtF,IAAIH,cAAc;IAChBH,OAAOO,KAAK,CAAC,CAAClC;QACZlC,QAAQC,KAAK,CAAC,4BAA4BiC;QAC1CR,QAAQ8B,IAAI,CAAC;IACf;AACF"}

package/dist/cli/agent-token-manager.js

@@ -8,7 +8,11 @@ const fs = require('fs').promises;
 const path = require('path');
 let AgentTokenManager = class AgentTokenManager {
     constructor(options = {}){
-        this.redisUrl = options.redisUrl || process.env.MCP_REDIS_URL || 'redis://localhost:6379';
+        // Support CFN standard variables with fallback to legacy MCP_REDIS_URL
+        const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';
+        const redisPort = process.env.CFN_REDIS_PORT || '6379';
+        const defaultUrl = `redis://${redisHost}:${redisPort}`;
+        this.redisUrl = options.redisUrl || process.env.CFN_REDIS_URL || process.env.MCP_REDIS_URL || defaultUrl;
         this.redis = null;
         this.agentConfigPath = options.agentConfigPath || './config/agent-whitelist.json';
         this.defaultExpiry = options.defaultExpiry || '24h';

package/dist/cli/agent-token-manager.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/agent-token-manager.js"],"sourcesContent":["#!/usr/bin/env node\r\n\r\n/**\r\n * Agent Token Management CLI\r\n * Generate, register, and manage agent tokens for MCP authentication\r\n */\r\n\r\nconst crypto = require('crypto');\r\nconst Redis = require('redis');\r\nconst fs = require('fs').promises;\r\nconst path = require('path');\r\n\r\nclass AgentTokenManager {\r\n  constructor(options = {}) {\r\n    this.redisUrl = options.redisUrl || process.env.MCP_REDIS_URL || 'redis://localhost:6379';\r\n    this.redis = null;\r\n    this.agentConfigPath = options.agentConfigPath || './config/agent-whitelist.json';\r\n    this.defaultExpiry = options.defaultExpiry || '24h';\r\n  }\r\n\r\n  async initialize() {\r\n    try {\r\n      this.redis = Redis.createClient({ url: this.redisUrl });\r\n      await this.redis.connect();\r\n      console.log('Connected to Redis for token management');\r\n    } catch (error) {\r\n      console.error('Failed to connect to Redis:', error);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async loadAgentConfig() {\r\n    try {\r\n      const configPath = path.resolve(this.agentConfigPath);\r\n      const config = await fs.readFile(configPath, 'utf8');\r\n      return JSON.parse(config);\r\n    } catch (error) {\r\n      console.error('Failed to load agent config:', error);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  generateToken() {\r\n    return crypto.randomBytes(32).toString('hex');\r\n  }\r\n\r\n  parseExpiry(expiry) {\r\n    if (typeof expiry === 'number') {\r\n      return expiry;\r\n    }\r\n\r\n    const match = expiry.match(/^(\\d+)([smhd])$/);\r\n    if (!match) {\r\n      return 86400; // Default to 24 hours\r\n    }\r\n\r\n    const value = parseInt(match[1]);\r\n    const unit = match[2];\r\n    const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };\r\n\r\n    return value * (multipliers[unit] || 86400);\r\n  }\r\n\r\n  async registerAgentToken(agentType, options = {}) {\r\n    try {\r\n      const config = await this.loadAgentConfig();\r\n      const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n      if (!agentConfig) {\r\n        throw new Error(`Unknown agent type: ${agentType}. Available types: ${config.agents.map(a => a.type).join(', ')}`);\r\n      }\r\n\r\n      const token = this.generateToken();\r\n      const expiresIn = options.expiresIn || this.defaultExpiry;\r\n      const expiresAt = Date.now() + (this.parseExpiry(expiresIn) * 1000);\r\n\r\n      const tokenData = {\r\n        token,\r\n        agentType,\r\n        displayName: agentConfig.displayName,\r\n        skills: agentConfig.skills,\r\n        allowedMcpServers: agentConfig.allowedMcpServers,\r\n        resourceLimits: agentConfig.resourceLimits,\r\n        expiresAt,\r\n        createdAt: Date.now(),\r\n        createdBy: options.createdBy || 'cli',\r\n        description: options.description || `Token for ${agentConfig.displayName}`\r\n      };\r\n\r\n      // Store in Redis\r\n      const key = `mcp:agent:${agentType}:${token}`;\r\n      const value = JSON.stringify(tokenData);\r\n      const ttlSeconds = this.parseExpiry(expiresIn);\r\n\r\n      await this.redis.setEx(key, ttlSeconds, value);\r\n\r\n      console.log(`✅ Token registered successfully!`);\r\n      console.log(`   Agent Type: ${agentConfig.displayName} (${agentType})`);\r\n      console.log(`   Token: ${token}`);\r\n      console.log(`   Skills: ${agentConfig.skills.join(', ')}`);\r\n      console.log(`   Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n      console.log(`   Expires: ${new Date(expiresAt).toISOString()}`);\r\n      console.log(`   Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n      console.log(`   Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n\r\n      return tokenData;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to register token:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async listActiveTokens(agentType = null) {\r\n    try {\r\n      const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n      const keys = await this.redis.keys(pattern);\r\n      const tokens = [];\r\n\r\n      for (const key of keys) {\r\n        const value = await this.redis.get(key);\r\n        if (value) {\r\n          const tokenData = JSON.parse(value);\r\n          tokens.push({\r\n            ...tokenData,\r\n            key,\r\n            status: tokenData.expiresAt > Date.now() ? 'active' : 'expired'\r\n          });\r\n        }\r\n      }\r\n\r\n      if (tokens.length === 0) {\r\n        console.log('No active tokens found');\r\n        return [];\r\n      }\r\n\r\n      console.log(`\\nActive Tokens (${tokens.length}):\\n`);\r\n      console.log('Agent Type          | Token                              | Expires At                    | Status');\r\n      console.log('-------------------|------------------------------------|------------------------------|--------');\r\n\r\n      for (const token of tokens) {\r\n        const expiresAt = new Date(token.expiresAt).toISOString();\r\n        const tokenShort = token.token.substring(0, 32);\r\n        console.log(`${token.agentType.padEnd(17)} | ${tokenShort} | ${expiresAt} | ${token.status}`);\r\n      }\r\n\r\n      return tokens;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to list tokens:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async revokeToken(agentType, token) {\r\n    try {\r\n      const key = `mcp:agent:${agentType}:${token}`;\r\n      const exists = await this.redis.exists(key);\r\n\r\n      if (!exists) {\r\n        throw new Error(`Token not found for agent ${agentType}`);\r\n      }\r\n\r\n      await this.redis.del(key);\r\n      console.log(`✅ Token revoked successfully for agent ${agentType}`);\r\n      console.log(`   Token: ${token}`);\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to revoke token:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async revokeAllTokens(agentType = null) {\r\n    try {\r\n      const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n      const keys = await this.redis.keys(pattern);\r\n\r\n      if (keys.length === 0) {\r\n        console.log('No tokens found to revoke');\r\n        return 0;\r\n      }\r\n\r\n      await this.redis.del(keys);\r\n      console.log(`✅ Revoked ${keys.length} tokens${agentType ? ` for agent ${agentType}` : ''}`);\r\n      return keys.length;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to revoke tokens:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async validateToken(agentType, token) {\r\n    try {\r\n      const key = `mcp:agent:${agentType}:${token}`;\r\n      const value = await this.redis.get(key);\r\n\r\n      if (!value) {\r\n        return { valid: false, reason: 'Token not found' };\r\n      }\r\n\r\n      const tokenData = JSON.parse(value);\r\n\r\n      if (Date.now() > tokenData.expiresAt) {\r\n        await this.redis.del(key);\r\n        return { valid: false, reason: 'Token expired' };\r\n      }\r\n\r\n      return {\r\n        valid: true,\r\n        tokenData\r\n      };\r\n\r\n    } catch (error) {\r\n      return { valid: false, reason: error.message };\r\n    }\r\n  }\r\n\r\n  async getAgentInfo(agentType) {\r\n    try {\r\n      const config = await this.loadAgentConfig();\r\n      const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n      if (!agentConfig) {\r\n        throw new Error(`Unknown agent type: ${agentType}`);\r\n      }\r\n\r\n      console.log(`\\nAgent Information: ${agentConfig.displayName}`);\r\n      console.log('='.repeat(50));\r\n      console.log(`Type: ${agentConfig.type}`);\r\n      console.log(`Skills: ${agentConfig.skills.join(', ')}`);\r\n      console.log(`Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n      console.log(`Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n      console.log(`Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n      console.log(`Max Concurrent: ${agentConfig.resourceLimits.maxConcurrentRequests}`);\r\n      console.log(`Description: ${agentConfig.description}`);\r\n\r\n      return agentConfig;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to get agent info:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async listAgentTypes() {\r\n    try {\r\n      const config = await this.loadAgentConfig();\r\n\r\n      console.log(`\\nAvailable Agent Types (${config.agents.length}):\\n`);\r\n      console.log('Agent Type              | Display Name                    | Skills Count');\r\n      console.log('------------------------|--------------------------------|-------------');\r\n\r\n      for (const agent of config.agents) {\r\n        const type = agent.type.padEnd(22);\r\n        const name = agent.displayName.padEnd(32);\r\n        const skills = agent.skills.length;\r\n        console.log(`${type} | ${name} | ${skills}`);\r\n      }\r\n\r\n      return config.agents.map(a => a.type);\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to list agent types:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async shutdown() {\r\n    if (this.redis) {\r\n      await this.redis.quit();\r\n    }\r\n  }\r\n}\r\n\r\n// CLI interface\r\nasync function main() {\r\n  const args = process.argv.slice(2);\r\n  const command = args[0];\r\n\r\n  if (!command) {\r\n    console.log(`\r\nAgent Token Management CLI\r\n\r\nUsage: node agent-token-manager.js <command> [options]\r\n\r\nCommands:\r\n  register <agent-type> [options]     Register a new token for an agent\r\n  list [agent-type]                    List active tokens\r\n  revoke <agent-type> <token>          Revoke a specific token\r\n  revoke-all [agent-type]              Revoke all tokens (optionally for specific agent)\r\n  validate <agent-type> <token>        Validate a token\r\n  info <agent-type>                    Show agent information\r\n  types                               List available agent types\r\n\r\nOptions for 'register' command:\r\n  --expires-in <duration>              Token expiry (e.g., 1h, 30m, 7d) [default: 24h]\r\n  --description <text>                 Token description\r\n  --created-by <identifier>            Creator identifier\r\n\r\nExamples:\r\n  # Register token for frontend engineer\r\n  node agent-token-manager.js register react-frontend-engineer\r\n\r\n  # Register token with custom expiry\r\n  node agent-token-manager.js register backend-developer --expires-in 2h\r\n\r\n  # List all active tokens\r\n  node agent-token-manager.js list\r\n\r\n  # List tokens for specific agent\r\n  node agent-token-manager.js list react-frontend-engineer\r\n\r\n  # Revoke a specific token\r\n  node agent-token-manager.js revoke react-frontend-engineer abc123...\r\n\r\n  # Get agent information\r\n  node agent-token-manager.js info security-specialist\r\n`);\r\n    process.exit(0);\r\n  }\r\n\r\n  const tokenManager = new AgentTokenManager();\r\n\r\n  try {\r\n    await tokenManager.initialize();\r\n\r\n    switch (command) {\r\n      case 'register': {\r\n        const agentType = args[1];\r\n        if (!agentType) {\r\n          throw new Error('Agent type is required for register command');\r\n        }\r\n\r\n        const options = {};\r\n        for (let i = 2; i < args.length; i++) {\r\n          if (args[i] === '--expires-in') {\r\n            options.expiresIn = args[++i];\r\n          } else if (args[i] === '--description') {\r\n            options.description = args[++i];\r\n          } else if (args[i] === '--created-by') {\r\n            options.createdBy = args[++i];\r\n          }\r\n        }\r\n\r\n        await tokenManager.registerAgentToken(agentType, options);\r\n        break;\r\n      }\r\n\r\n      case 'list': {\r\n        const agentType = args[1];\r\n        await tokenManager.listActiveTokens(agentType);\r\n        break;\r\n      }\r\n\r\n      case 'revoke': {\r\n        const agentType = args[1];\r\n        const token = args[2];\r\n        if (!agentType || !token) {\r\n          throw new Error('Agent type and token are required for revoke command');\r\n        }\r\n        await tokenManager.revokeToken(agentType, token);\r\n        break;\r\n      }\r\n\r\n      case 'revoke-all': {\r\n        const agentType = args[1];\r\n        const count = await tokenManager.revokeAllTokens(agentType);\r\n        console.log(`Revoked ${count} tokens`);\r\n        break;\r\n      }\r\n\r\n      case 'validate': {\r\n        const agentType = args[1];\r\n        const token = args[2];\r\n        if (!agentType || !token) {\r\n          throw new Error('Agent type and token are required for validate command');\r\n        }\r\n\r\n        const result = await tokenManager.validateToken(agentType, token);\r\n        if (result.valid) {\r\n          console.log('✅ Token is valid');\r\n          console.log(`   Agent Type: ${result.tokenData.agentType}`);\r\n          console.log(`   Skills: ${result.tokenData.skills.join(', ')}`);\r\n          console.log(`   Expires: ${new Date(result.tokenData.expiresAt).toISOString()}`);\r\n        } else {\r\n          console.log('❌ Token is invalid');\r\n          console.log(`   Reason: ${result.reason}`);\r\n        }\r\n        break;\r\n      }\r\n\r\n      case 'info': {\r\n        const agentType = args[1];\r\n        if (!agentType) {\r\n          throw new Error('Agent type is required for info command');\r\n        }\r\n        await tokenManager.getAgentInfo(agentType);\r\n        break;\r\n      }\r\n\r\n      case 'types': {\r\n        await tokenManager.listAgentTypes();\r\n        break;\r\n      }\r\n\r\n      default:\r\n        throw new Error(`Unknown command: ${command}`);\r\n    }\r\n\r\n  } catch (error) {\r\n    console.error('❌ Error:', error.message);\r\n    process.exit(1);\r\n  } finally {\r\n    await tokenManager.shutdown();\r\n  }\r\n}\r\n\r\nif (require.main === module) {\r\n  main().catch(error => {\r\n    console.error('Fatal error:', error);\r\n    process.exit(1);\r\n  });\r\n}\r\n\r\nmodule.exports = AgentTokenManager;"],"names":["crypto","require","Redis","fs","promises","path","AgentTokenManager","options","redisUrl","process","env","MCP_REDIS_URL","redis","agentConfigPath","defaultExpiry","initialize","createClient","url","connect","console","log","error","loadAgentConfig","configPath","resolve","config","readFile","JSON","parse","generateToken","randomBytes","toString","parseExpiry","expiry","match","value","parseInt","unit","multipliers","s","m","h","d","registerAgentToken","agentType","agentConfig","agents","find","a","type","Error","map","join","token","expiresIn","expiresAt","Date","now","tokenData","displayName","skills","allowedMcpServers","resourceLimits","createdAt","createdBy","description","key","stringify","ttlSeconds","setEx","toISOString","maxMemoryMB","maxRequestsPerMinute","message","listActiveTokens","pattern","keys","tokens","get","push","status","length","tokenShort","substring","padEnd","revokeToken","exists","del","revokeAllTokens","validateToken","valid","reason","getAgentInfo","repeat","maxConcurrentRequests","listAgentTypes","agent","name","shutdown","quit","main","args","argv","slice","command","exit","tokenManager","i","count","result","module","catch","exports"],"mappings":";AAEA;;;CAGC,GAED,MAAMA,SAASC,QAAQ;AACvB,MAAMC,QAAQD,QAAQ;AACtB,MAAME,KAAKF,QAAQ,MAAMG,QAAQ;AACjC,MAAMC,OAAOJ,QAAQ;AAErB,IAAA,AAAMK,oBAAN,MAAMA;IACJ,YAAYC,UAAU,CAAC,CAAC,CAAE;QACxB,IAAI,CAACC,QAAQ,GAAGD,QAAQC,QAAQ,IAAIC,QAAQC,GAAG,CAACC,aAAa,IAAI;QACjE,IAAI,CAACC,KAAK,GAAG;QACb,IAAI,CAACC,eAAe,GAAGN,QAAQM,eAAe,IAAI;QAClD,IAAI,CAACC,aAAa,GAAGP,QAAQO,aAAa,IAAI;IAChD;IAEA,MAAMC,aAAa;QACjB,IAAI;YACF,IAAI,CAACH,KAAK,GAAGV,MAAMc,YAAY,CAAC;gBAAEC,KAAK,IAAI,CAACT,QAAQ;YAAC;YACrD,MAAM,IAAI,CAACI,KAAK,CAACM,OAAO;YACxBC,QAAQC,GAAG,CAAC;QACd,EAAE,OAAOC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA;YAC7C,MAAMA;QACR;IACF;IAEA,MAAMC,kBAAkB;QACtB,IAAI;YACF,MAAMC,aAAalB,KAAKmB,OAAO,CAAC,IAAI,CAACX,eAAe;YACpD,MAAMY,SAAS,MAAMtB,GAAGuB,QAAQ,CAACH,YAAY;YAC7C,OAAOI,KAAKC,KAAK,CAACH;QACpB,EAAE,OAAOJ,OAAO;YACdF,QAAQE,KAAK,CAAC,gCAAgCA;YAC9C,MAAMA;QACR;IACF;IAEAQ,gBAAgB;QACd,OAAO7B,OAAO8B,WAAW,CAAC,IAAIC,QAAQ,CAAC;IACzC;IAEAC,YAAYC,MAAM,EAAE;QAClB,IAAI,OAAOA,WAAW,UAAU;YAC9B,OAAOA;QACT;QAEA,MAAMC,QAAQD,OAAOC,KAAK,CAAC;QAC3B,IAAI,CAACA,OAAO;YACV,OAAO,OAAO,sBAAsB;QACtC;QAEA,MAAMC,QAAQC,SAASF,KAAK,CAAC,EAAE;QAC/B,MAAMG,OAAOH,KAAK,CAAC,EAAE;QACrB,MAAMI,cAAc;YAAEC,GAAG;YAAGC,GAAG;YAAIC,GAAG;YAAMC,GAAG;QAAM;QAErD,OAAOP,QAASG,CAAAA,WAAW,CAACD,KAAK,IAAI,KAAI;IAC3C;IAEA,MAAMM,mBAAmBC,SAAS,EAAErC,UAAU,CAAC,CAAC,EAAE;QAChD,IAAI;YACF,MAAMkB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,UAAU,mBAAmB,EAAEnB,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI,EAAEG,IAAI,CAAC,OAAO;YACnH;YAEA,MAAMC,QAAQ,IAAI,CAACxB,aAAa;YAChC,MAAMyB,YAAY/C,QAAQ+C,SAAS,IAAI,IAAI,CAACxC,aAAa;YACzD,MAAMyC,YAAYC,KAAKC,GAAG,KAAM,IAAI,CAACzB,WAAW,CAACsB,aAAa;YAE9D,MAAMI,YAAY;gBAChBL;gBACAT;gBACAe,aAAad,YAAYc,WAAW;gBACpCC,QAAQf,YAAYe,MAAM;gBAC1BC,mBAAmBhB,YAAYgB,iBAAiB;gBAChDC,gBAAgBjB,YAAYiB,cAAc;gBAC1CP;gBACAQ,WAAWP,KAAKC,GAAG;gBACnBO,WAAWzD,QAAQyD,SAAS,IAAI;gBAChCC,aAAa1D,QAAQ0D,WAAW,IAAI,CAAC,UAAU,EAAEpB,YAAYc,WAAW,EAAE;YAC5E;YAEA,iBAAiB;YACjB,MAAMO,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQR,KAAKwC,SAAS,CAACT;YAC7B,MAAMU,aAAa,IAAI,CAACpC,WAAW,CAACsB;YAEpC,MAAM,IAAI,CAAC1C,KAAK,CAACyD,KAAK,CAACH,KAAKE,YAAYjC;YAExChB,QAAQC,GAAG,CAAC,CAAC,gCAAgC,CAAC;YAC9CD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYc,WAAW,CAAC,EAAE,EAAEf,UAAU,CAAC,CAAC;YACtEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;YAChClC,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACzDjC,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YACjFjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKD,WAAWe,WAAW,IAAI;YAC9DnD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YAC1EpD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAEnF,OAAOd;QAET,EAAE,OAAOrC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAMqD,iBAAiB9B,YAAY,IAAI,EAAE;QACvC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YACnC,MAAME,SAAS,EAAE;YAEjB,KAAK,MAAMX,OAAOU,KAAM;gBACtB,MAAMzC,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;gBACnC,IAAI/B,OAAO;oBACT,MAAMuB,YAAY/B,KAAKC,KAAK,CAACO;oBAC7B0C,OAAOE,IAAI,CAAC;wBACV,GAAGrB,SAAS;wBACZQ;wBACAc,QAAQtB,UAAUH,SAAS,GAAGC,KAAKC,GAAG,KAAK,WAAW;oBACxD;gBACF;YACF;YAEA,IAAIoB,OAAOI,MAAM,KAAK,GAAG;gBACvB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO,EAAE;YACX;YAEAD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyD,OAAOI,MAAM,CAAC,IAAI,CAAC;YACnD9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAMiC,SAASwB,OAAQ;gBAC1B,MAAMtB,YAAY,IAAIC,KAAKH,MAAME,SAAS,EAAEe,WAAW;gBACvD,MAAMY,aAAa7B,MAAMA,KAAK,CAAC8B,SAAS,CAAC,GAAG;gBAC5ChE,QAAQC,GAAG,CAAC,GAAGiC,MAAMT,SAAS,CAACwC,MAAM,CAAC,IAAI,GAAG,EAAEF,WAAW,GAAG,EAAE3B,UAAU,GAAG,EAAEF,MAAM2B,MAAM,EAAE;YAC9F;YAEA,OAAOH;QAET,EAAE,OAAOxD,OAAO;YACdF,QAAQE,KAAK,CAAC,4BAA4BA,MAAMoD,OAAO;YACvD,MAAMpD;QACR;IACF;IAEA,MAAMgE,YAAYzC,SAAS,EAAES,KAAK,EAAE;QAClC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMiC,SAAS,MAAM,IAAI,CAAC1E,KAAK,CAAC0E,MAAM,CAACpB;YAEvC,IAAI,CAACoB,QAAQ;gBACX,MAAM,IAAIpC,MAAM,CAAC,0BAA0B,EAAEN,WAAW;YAC1D;YAEA,MAAM,IAAI,CAAChC,KAAK,CAAC2E,GAAG,CAACrB;YACrB/C,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEwB,WAAW;YACjEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;QAElC,EAAE,OAAOhC,OAAO;YACdF,QAAQE,KAAK,CAAC,6BAA6BA,MAAMoD,OAAO;YACxD,MAAMpD;QACR;IACF;IAEA,MAAMmE,gBAAgB5C,YAAY,IAAI,EAAE;QACtC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YAEnC,IAAIC,KAAKK,MAAM,KAAK,GAAG;gBACrB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO;YACT;YAEA,MAAM,IAAI,CAACR,KAAK,CAAC2E,GAAG,CAACX;YACrBzD,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEwD,KAAKK,MAAM,CAAC,OAAO,EAAErC,YAAY,CAAC,WAAW,EAAEA,WAAW,GAAG,IAAI;YAC1F,OAAOgC,KAAKK,MAAM;QAEpB,EAAE,OAAO5D,OAAO;YACdF,QAAQE,KAAK,CAAC,8BAA8BA,MAAMoD,OAAO;YACzD,MAAMpD;QACR;IACF;IAEA,MAAMoE,cAAc7C,SAAS,EAAES,KAAK,EAAE;QACpC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;YAEnC,IAAI,CAAC/B,OAAO;gBACV,OAAO;oBAAEuD,OAAO;oBAAOC,QAAQ;gBAAkB;YACnD;YAEA,MAAMjC,YAAY/B,KAAKC,KAAK,CAACO;YAE7B,IAAIqB,KAAKC,GAAG,KAAKC,UAAUH,SAAS,EAAE;gBACpC,MAAM,IAAI,CAAC3C,KAAK,CAAC2E,GAAG,CAACrB;gBACrB,OAAO;oBAAEwB,OAAO;oBAAOC,QAAQ;gBAAgB;YACjD;YAEA,OAAO;gBACLD,OAAO;gBACPhC;YACF;QAEF,EAAE,OAAOrC,OAAO;YACd,OAAO;gBAAEqE,OAAO;gBAAOC,QAAQtE,MAAMoD,OAAO;YAAC;QAC/C;IACF;IAEA,MAAMmB,aAAahD,SAAS,EAAE;QAC5B,IAAI;YACF,MAAMnB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,WAAW;YACpD;YAEAzB,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYc,WAAW,EAAE;YAC7DxC,QAAQC,GAAG,CAAC,IAAIyE,MAAM,CAAC;YACvB1E,QAAQC,GAAG,CAAC,CAAC,MAAM,EAAEyB,YAAYI,IAAI,EAAE;YACvC9B,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACtDjC,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YAC9EjC,QAAQC,GAAG,CAAC,CAAC,cAAc,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YACvEpD,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAChFrD,QAAQC,GAAG,CAAC,CAAC,gBAAgB,EAAEyB,YAAYiB,cAAc,CAACgC,qBAAqB,EAAE;YACjF3E,QAAQC,GAAG,CAAC,CAAC,aAAa,EAAEyB,YAAYoB,WAAW,EAAE;YAErD,OAAOpB;QAET,EAAE,OAAOxB,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAM0E,iBAAiB;QACrB,IAAI;YACF,MAAMtE,SAAS,MAAM,IAAI,CAACH,eAAe;YAEzCH,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEK,OAAOqB,MAAM,CAACmC,MAAM,CAAC,IAAI,CAAC;YAClE9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAM4E,SAASvE,OAAOqB,MAAM,CAAE;gBACjC,MAAMG,OAAO+C,MAAM/C,IAAI,CAACmC,MAAM,CAAC;gBAC/B,MAAMa,OAAOD,MAAMrC,WAAW,CAACyB,MAAM,CAAC;gBACtC,MAAMxB,SAASoC,MAAMpC,MAAM,CAACqB,MAAM;gBAClC9D,QAAQC,GAAG,CAAC,GAAG6B,KAAK,GAAG,EAAEgD,KAAK,GAAG,EAAErC,QAAQ;YAC7C;YAEA,OAAOnC,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI;QAEtC,EAAE,OAAO5B,OAAO;YACdF,QAAQE,KAAK,CAAC,iCAAiCA,MAAMoD,OAAO;YAC5D,MAAMpD;QACR;IACF;IAEA,MAAM6E,WAAW;QACf,IAAI,IAAI,CAACtF,KAAK,EAAE;YACd,MAAM,IAAI,CAACA,KAAK,CAACuF,IAAI;QACvB;IACF;AACF;AAEA,gBAAgB;AAChB,eAAeC;IACb,MAAMC,OAAO5F,QAAQ6F,IAAI,CAACC,KAAK,CAAC;IAChC,MAAMC,UAAUH,IAAI,CAAC,EAAE;IAEvB,IAAI,CAACG,SAAS;QACZrF,QAAQC,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCjB,CAAC;QACGX,QAAQgG,IAAI,CAAC;IACf;IAEA,MAAMC,eAAe,IAAIpG;IAEzB,IAAI;QACF,MAAMoG,aAAa3F,UAAU;QAE7B,OAAQyF;YACN,KAAK;gBAAY;oBACf,MAAM5D,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBAEA,MAAM3C,UAAU,CAAC;oBACjB,IAAK,IAAIoG,IAAI,GAAGA,IAAIN,KAAKpB,MAAM,EAAE0B,IAAK;wBACpC,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BAC9BpG,QAAQ+C,SAAS,GAAG+C,IAAI,CAAC,EAAEM,EAAE;wBAC/B,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,iBAAiB;4BACtCpG,QAAQ0D,WAAW,GAAGoC,IAAI,CAAC,EAAEM,EAAE;wBACjC,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BACrCpG,QAAQyD,SAAS,GAAGqC,IAAI,CAAC,EAAEM,EAAE;wBAC/B;oBACF;oBAEA,MAAMD,aAAa/D,kBAAkB,CAACC,WAAWrC;oBACjD;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAMqC,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMK,aAAahC,gBAAgB,CAAC9B;oBACpC;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMA,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBACA,MAAMwD,aAAarB,WAAW,CAACzC,WAAWS;oBAC1C;gBACF;YAEA,KAAK;gBAAc;oBACjB,MAAMT,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMO,QAAQ,MAAMF,aAAalB,eAAe,CAAC5C;oBACjDzB,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEwF,MAAM,OAAO,CAAC;oBACrC;gBACF;YAEA,KAAK;gBAAY;oBACf,MAAMhE,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBAEA,MAAM2D,SAAS,MAAMH,aAAajB,aAAa,CAAC7C,WAAWS;oBAC3D,IAAIwD,OAAOnB,KAAK,EAAE;wBAChBvE,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyF,OAAOnD,SAAS,CAACd,SAAS,EAAE;wBAC1DzB,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOnD,SAAS,CAACE,MAAM,CAACR,IAAI,CAAC,OAAO;wBAC9DjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKqD,OAAOnD,SAAS,CAACH,SAAS,EAAEe,WAAW,IAAI;oBACjF,OAAO;wBACLnD,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOlB,MAAM,EAAE;oBAC3C;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM/C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBACA,MAAMwD,aAAad,YAAY,CAAChD;oBAChC;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAM8D,aAAaX,cAAc;oBACjC;gBACF;YAEA;gBACE,MAAM,IAAI7C,MAAM,CAAC,iBAAiB,EAAEsD,SAAS;QACjD;IAEF,EAAE,OAAOnF,OAAO;QACdF,QAAQE,KAAK,CAAC,YAAYA,MAAMoD,OAAO;QACvChE,QAAQgG,IAAI,CAAC;IACf,SAAU;QACR,MAAMC,aAAaR,QAAQ;IAC7B;AACF;AAEA,IAAIjG,QAAQmG,IAAI,KAAKU,QAAQ;IAC3BV,OAAOW,KAAK,CAAC1F,CAAAA;QACXF,QAAQE,KAAK,CAAC,gBAAgBA;QAC9BZ,QAAQgG,IAAI,CAAC;IACf;AACF;AAEAK,OAAOE,OAAO,GAAG1G"}
+{"version":3,"sources":["../../src/cli/agent-token-manager.js"],"sourcesContent":["#!/usr/bin/env node\r\n\r\n/**\r\n * Agent Token Management CLI\r\n * Generate, register, and manage agent tokens for MCP authentication\r\n */\r\n\r\nconst crypto = require('crypto');\r\nconst Redis = require('redis');\r\nconst fs = require('fs').promises;\r\nconst path = require('path');\r\n\r\nclass AgentTokenManager {\r\n  constructor(options = {}) {\r\n    // Support CFN standard variables with fallback to legacy MCP_REDIS_URL\r\n    const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';\r\n    const redisPort = process.env.CFN_REDIS_PORT || '6379';\r\n    const defaultUrl = `redis://${redisHost}:${redisPort}`;\r\n    this.redisUrl = options.redisUrl || process.env.CFN_REDIS_URL || process.env.MCP_REDIS_URL || defaultUrl;\r\n    this.redis = null;\r\n    this.agentConfigPath = options.agentConfigPath || './config/agent-whitelist.json';\r\n    this.defaultExpiry = options.defaultExpiry || '24h';\r\n  }\r\n\r\n  async initialize() {\r\n    try {\r\n      this.redis = Redis.createClient({ url: this.redisUrl });\r\n      await this.redis.connect();\r\n      console.log('Connected to Redis for token management');\r\n    } catch (error) {\r\n      console.error('Failed to connect to Redis:', error);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async loadAgentConfig() {\r\n    try {\r\n      const configPath = path.resolve(this.agentConfigPath);\r\n      const config = await fs.readFile(configPath, 'utf8');\r\n      return JSON.parse(config);\r\n    } catch (error) {\r\n      console.error('Failed to load agent config:', error);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  generateToken() {\r\n    return crypto.randomBytes(32).toString('hex');\r\n  }\r\n\r\n  parseExpiry(expiry) {\r\n    if (typeof expiry === 'number') {\r\n      return expiry;\r\n    }\r\n\r\n    const match = expiry.match(/^(\\d+)([smhd])$/);\r\n    if (!match) {\r\n      return 86400; // Default to 24 hours\r\n    }\r\n\r\n    const value = parseInt(match[1]);\r\n    const unit = match[2];\r\n    const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };\r\n\r\n    return value * (multipliers[unit] || 86400);\r\n  }\r\n\r\n  async registerAgentToken(agentType, options = {}) {\r\n    try {\r\n      const config = await this.loadAgentConfig();\r\n      const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n      if (!agentConfig) {\r\n        throw new Error(`Unknown agent type: ${agentType}. Available types: ${config.agents.map(a => a.type).join(', ')}`);\r\n      }\r\n\r\n      const token = this.generateToken();\r\n      const expiresIn = options.expiresIn || this.defaultExpiry;\r\n      const expiresAt = Date.now() + (this.parseExpiry(expiresIn) * 1000);\r\n\r\n      const tokenData = {\r\n        token,\r\n        agentType,\r\n        displayName: agentConfig.displayName,\r\n        skills: agentConfig.skills,\r\n        allowedMcpServers: agentConfig.allowedMcpServers,\r\n        resourceLimits: agentConfig.resourceLimits,\r\n        expiresAt,\r\n        createdAt: Date.now(),\r\n        createdBy: options.createdBy || 'cli',\r\n        description: options.description || `Token for ${agentConfig.displayName}`\r\n      };\r\n\r\n      // Store in Redis\r\n      const key = `mcp:agent:${agentType}:${token}`;\r\n      const value = JSON.stringify(tokenData);\r\n      const ttlSeconds = this.parseExpiry(expiresIn);\r\n\r\n      await this.redis.setEx(key, ttlSeconds, value);\r\n\r\n      console.log(`✅ Token registered successfully!`);\r\n      console.log(`   Agent Type: ${agentConfig.displayName} (${agentType})`);\r\n      console.log(`   Token: ${token}`);\r\n      console.log(`   Skills: ${agentConfig.skills.join(', ')}`);\r\n      console.log(`   Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n      console.log(`   Expires: ${new Date(expiresAt).toISOString()}`);\r\n      console.log(`   Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n      console.log(`   Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n\r\n      return tokenData;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to register token:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async listActiveTokens(agentType = null) {\r\n    try {\r\n      const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n      const keys = await this.redis.keys(pattern);\r\n      const tokens = [];\r\n\r\n      for (const key of keys) {\r\n        const value = await this.redis.get(key);\r\n        if (value) {\r\n          const tokenData = JSON.parse(value);\r\n          tokens.push({\r\n            ...tokenData,\r\n            key,\r\n            status: tokenData.expiresAt > Date.now() ? 'active' : 'expired'\r\n          });\r\n        }\r\n      }\r\n\r\n      if (tokens.length === 0) {\r\n        console.log('No active tokens found');\r\n        return [];\r\n      }\r\n\r\n      console.log(`\\nActive Tokens (${tokens.length}):\\n`);\r\n      console.log('Agent Type          | Token                              | Expires At                    | Status');\r\n      console.log('-------------------|------------------------------------|------------------------------|--------');\r\n\r\n      for (const token of tokens) {\r\n        const expiresAt = new Date(token.expiresAt).toISOString();\r\n        const tokenShort = token.token.substring(0, 32);\r\n        console.log(`${token.agentType.padEnd(17)} | ${tokenShort} | ${expiresAt} | ${token.status}`);\r\n      }\r\n\r\n      return tokens;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to list tokens:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async revokeToken(agentType, token) {\r\n    try {\r\n      const key = `mcp:agent:${agentType}:${token}`;\r\n      const exists = await this.redis.exists(key);\r\n\r\n      if (!exists) {\r\n        throw new Error(`Token not found for agent ${agentType}`);\r\n      }\r\n\r\n      await this.redis.del(key);\r\n      console.log(`✅ Token revoked successfully for agent ${agentType}`);\r\n      console.log(`   Token: ${token}`);\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to revoke token:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async revokeAllTokens(agentType = null) {\r\n    try {\r\n      const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n      const keys = await this.redis.keys(pattern);\r\n\r\n      if (keys.length === 0) {\r\n        console.log('No tokens found to revoke');\r\n        return 0;\r\n      }\r\n\r\n      await this.redis.del(keys);\r\n      console.log(`✅ Revoked ${keys.length} tokens${agentType ? ` for agent ${agentType}` : ''}`);\r\n      return keys.length;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to revoke tokens:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async validateToken(agentType, token) {\r\n    try {\r\n      const key = `mcp:agent:${agentType}:${token}`;\r\n      const value = await this.redis.get(key);\r\n\r\n      if (!value) {\r\n        return { valid: false, reason: 'Token not found' };\r\n      }\r\n\r\n      const tokenData = JSON.parse(value);\r\n\r\n      if (Date.now() > tokenData.expiresAt) {\r\n        await this.redis.del(key);\r\n        return { valid: false, reason: 'Token expired' };\r\n      }\r\n\r\n      return {\r\n        valid: true,\r\n        tokenData\r\n      };\r\n\r\n    } catch (error) {\r\n      return { valid: false, reason: error.message };\r\n    }\r\n  }\r\n\r\n  async getAgentInfo(agentType) {\r\n    try {\r\n      const config = await this.loadAgentConfig();\r\n      const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n      if (!agentConfig) {\r\n        throw new Error(`Unknown agent type: ${agentType}`);\r\n      }\r\n\r\n      console.log(`\\nAgent Information: ${agentConfig.displayName}`);\r\n      console.log('='.repeat(50));\r\n      console.log(`Type: ${agentConfig.type}`);\r\n      console.log(`Skills: ${agentConfig.skills.join(', ')}`);\r\n      console.log(`Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n      console.log(`Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n      console.log(`Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n      console.log(`Max Concurrent: ${agentConfig.resourceLimits.maxConcurrentRequests}`);\r\n      console.log(`Description: ${agentConfig.description}`);\r\n\r\n      return agentConfig;\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to get agent info:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async listAgentTypes() {\r\n    try {\r\n      const config = await this.loadAgentConfig();\r\n\r\n      console.log(`\\nAvailable Agent Types (${config.agents.length}):\\n`);\r\n      console.log('Agent Type              | Display Name                    | Skills Count');\r\n      console.log('------------------------|--------------------------------|-------------');\r\n\r\n      for (const agent of config.agents) {\r\n        const type = agent.type.padEnd(22);\r\n        const name = agent.displayName.padEnd(32);\r\n        const skills = agent.skills.length;\r\n        console.log(`${type} | ${name} | ${skills}`);\r\n      }\r\n\r\n      return config.agents.map(a => a.type);\r\n\r\n    } catch (error) {\r\n      console.error('❌ Failed to list agent types:', error.message);\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  async shutdown() {\r\n    if (this.redis) {\r\n      await this.redis.quit();\r\n    }\r\n  }\r\n}\r\n\r\n// CLI interface\r\nasync function main() {\r\n  const args = process.argv.slice(2);\r\n  const command = args[0];\r\n\r\n  if (!command) {\r\n    console.log(`\r\nAgent Token Management CLI\r\n\r\nUsage: node agent-token-manager.js <command> [options]\r\n\r\nCommands:\r\n  register <agent-type> [options]     Register a new token for an agent\r\n  list [agent-type]                    List active tokens\r\n  revoke <agent-type> <token>          Revoke a specific token\r\n  revoke-all [agent-type]              Revoke all tokens (optionally for specific agent)\r\n  validate <agent-type> <token>        Validate a token\r\n  info <agent-type>                    Show agent information\r\n  types                               List available agent types\r\n\r\nOptions for 'register' command:\r\n  --expires-in <duration>              Token expiry (e.g., 1h, 30m, 7d) [default: 24h]\r\n  --description <text>                 Token description\r\n  --created-by <identifier>            Creator identifier\r\n\r\nExamples:\r\n  # Register token for frontend engineer\r\n  node agent-token-manager.js register react-frontend-engineer\r\n\r\n  # Register token with custom expiry\r\n  node agent-token-manager.js register backend-developer --expires-in 2h\r\n\r\n  # List all active tokens\r\n  node agent-token-manager.js list\r\n\r\n  # List tokens for specific agent\r\n  node agent-token-manager.js list react-frontend-engineer\r\n\r\n  # Revoke a specific token\r\n  node agent-token-manager.js revoke react-frontend-engineer abc123...\r\n\r\n  # Get agent information\r\n  node agent-token-manager.js info security-specialist\r\n`);\r\n    process.exit(0);\r\n  }\r\n\r\n  const tokenManager = new AgentTokenManager();\r\n\r\n  try {\r\n    await tokenManager.initialize();\r\n\r\n    switch (command) {\r\n      case 'register': {\r\n        const agentType = args[1];\r\n        if (!agentType) {\r\n          throw new Error('Agent type is required for register command');\r\n        }\r\n\r\n        const options = {};\r\n        for (let i = 2; i < args.length; i++) {\r\n          if (args[i] === '--expires-in') {\r\n            options.expiresIn = args[++i];\r\n          } else if (args[i] === '--description') {\r\n            options.description = args[++i];\r\n          } else if (args[i] === '--created-by') {\r\n            options.createdBy = args[++i];\r\n          }\r\n        }\r\n\r\n        await tokenManager.registerAgentToken(agentType, options);\r\n        break;\r\n      }\r\n\r\n      case 'list': {\r\n        const agentType = args[1];\r\n        await tokenManager.listActiveTokens(agentType);\r\n        break;\r\n      }\r\n\r\n      case 'revoke': {\r\n        const agentType = args[1];\r\n        const token = args[2];\r\n        if (!agentType || !token) {\r\n          throw new Error('Agent type and token are required for revoke command');\r\n        }\r\n        await tokenManager.revokeToken(agentType, token);\r\n        break;\r\n      }\r\n\r\n      case 'revoke-all': {\r\n        const agentType = args[1];\r\n        const count = await tokenManager.revokeAllTokens(agentType);\r\n        console.log(`Revoked ${count} tokens`);\r\n        break;\r\n      }\r\n\r\n      case 'validate': {\r\n        const agentType = args[1];\r\n        const token = args[2];\r\n        if (!agentType || !token) {\r\n          throw new Error('Agent type and token are required for validate command');\r\n        }\r\n\r\n        const result = await tokenManager.validateToken(agentType, token);\r\n        if (result.valid) {\r\n          console.log('✅ Token is valid');\r\n          console.log(`   Agent Type: ${result.tokenData.agentType}`);\r\n          console.log(`   Skills: ${result.tokenData.skills.join(', ')}`);\r\n          console.log(`   Expires: ${new Date(result.tokenData.expiresAt).toISOString()}`);\r\n        } else {\r\n          console.log('❌ Token is invalid');\r\n          console.log(`   Reason: ${result.reason}`);\r\n        }\r\n        break;\r\n      }\r\n\r\n      case 'info': {\r\n        const agentType = args[1];\r\n        if (!agentType) {\r\n          throw new Error('Agent type is required for info command');\r\n        }\r\n        await tokenManager.getAgentInfo(agentType);\r\n        break;\r\n      }\r\n\r\n      case 'types': {\r\n        await tokenManager.listAgentTypes();\r\n        break;\r\n      }\r\n\r\n      default:\r\n        throw new Error(`Unknown command: ${command}`);\r\n    }\r\n\r\n  } catch (error) {\r\n    console.error('❌ Error:', error.message);\r\n    process.exit(1);\r\n  } finally {\r\n    await tokenManager.shutdown();\r\n  }\r\n}\r\n\r\nif (require.main === module) {\r\n  main().catch(error => {\r\n    console.error('Fatal error:', error);\r\n    process.exit(1);\r\n  });\r\n}\r\n\r\nmodule.exports = AgentTokenManager;"],"names":["crypto","require","Redis","fs","promises","path","AgentTokenManager","options","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","defaultUrl","redisUrl","CFN_REDIS_URL","MCP_REDIS_URL","redis","agentConfigPath","defaultExpiry","initialize","createClient","url","connect","console","log","error","loadAgentConfig","configPath","resolve","config","readFile","JSON","parse","generateToken","randomBytes","toString","parseExpiry","expiry","match","value","parseInt","unit","multipliers","s","m","h","d","registerAgentToken","agentType","agentConfig","agents","find","a","type","Error","map","join","token","expiresIn","expiresAt","Date","now","tokenData","displayName","skills","allowedMcpServers","resourceLimits","createdAt","createdBy","description","key","stringify","ttlSeconds","setEx","toISOString","maxMemoryMB","maxRequestsPerMinute","message","listActiveTokens","pattern","keys","tokens","get","push","status","length","tokenShort","substring","padEnd","revokeToken","exists","del","revokeAllTokens","validateToken","valid","reason","getAgentInfo","repeat","maxConcurrentRequests","listAgentTypes","agent","name","shutdown","quit","main","args","argv","slice","command","exit","tokenManager","i","count","result","module","catch","exports"],"mappings":";AAEA;;;CAGC,GAED,MAAMA,SAASC,QAAQ;AACvB,MAAMC,QAAQD,QAAQ;AACtB,MAAME,KAAKF,QAAQ,MAAMG,QAAQ;AACjC,MAAMC,OAAOJ,QAAQ;AAErB,IAAA,AAAMK,oBAAN,MAAMA;IACJ,YAAYC,UAAU,CAAC,CAAC,CAAE;QACxB,uEAAuE;QACvE,MAAMC,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;QAChD,MAAMC,aAAa,CAAC,QAAQ,EAAEN,UAAU,CAAC,EAAEI,WAAW;QACtD,IAAI,CAACG,QAAQ,GAAGR,QAAQQ,QAAQ,IAAIN,QAAQC,GAAG,CAACM,aAAa,IAAIP,QAAQC,GAAG,CAACO,aAAa,IAAIH;QAC9F,IAAI,CAACI,KAAK,GAAG;QACb,IAAI,CAACC,eAAe,GAAGZ,QAAQY,eAAe,IAAI;QAClD,IAAI,CAACC,aAAa,GAAGb,QAAQa,aAAa,IAAI;IAChD;IAEA,MAAMC,aAAa;QACjB,IAAI;YACF,IAAI,CAACH,KAAK,GAAGhB,MAAMoB,YAAY,CAAC;gBAAEC,KAAK,IAAI,CAACR,QAAQ;YAAC;YACrD,MAAM,IAAI,CAACG,KAAK,CAACM,OAAO;YACxBC,QAAQC,GAAG,CAAC;QACd,EAAE,OAAOC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA;YAC7C,MAAMA;QACR;IACF;IAEA,MAAMC,kBAAkB;QACtB,IAAI;YACF,MAAMC,aAAaxB,KAAKyB,OAAO,CAAC,IAAI,CAACX,eAAe;YACpD,MAAMY,SAAS,MAAM5B,GAAG6B,QAAQ,CAACH,YAAY;YAC7C,OAAOI,KAAKC,KAAK,CAACH;QACpB,EAAE,OAAOJ,OAAO;YACdF,QAAQE,KAAK,CAAC,gCAAgCA;YAC9C,MAAMA;QACR;IACF;IAEAQ,gBAAgB;QACd,OAAOnC,OAAOoC,WAAW,CAAC,IAAIC,QAAQ,CAAC;IACzC;IAEAC,YAAYC,MAAM,EAAE;QAClB,IAAI,OAAOA,WAAW,UAAU;YAC9B,OAAOA;QACT;QAEA,MAAMC,QAAQD,OAAOC,KAAK,CAAC;QAC3B,IAAI,CAACA,OAAO;YACV,OAAO,OAAO,sBAAsB;QACtC;QAEA,MAAMC,QAAQC,SAASF,KAAK,CAAC,EAAE;QAC/B,MAAMG,OAAOH,KAAK,CAAC,EAAE;QACrB,MAAMI,cAAc;YAAEC,GAAG;YAAGC,GAAG;YAAIC,GAAG;YAAMC,GAAG;QAAM;QAErD,OAAOP,QAASG,CAAAA,WAAW,CAACD,KAAK,IAAI,KAAI;IAC3C;IAEA,MAAMM,mBAAmBC,SAAS,EAAE3C,UAAU,CAAC,CAAC,EAAE;QAChD,IAAI;YACF,MAAMwB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,UAAU,mBAAmB,EAAEnB,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI,EAAEG,IAAI,CAAC,OAAO;YACnH;YAEA,MAAMC,QAAQ,IAAI,CAACxB,aAAa;YAChC,MAAMyB,YAAYrD,QAAQqD,SAAS,IAAI,IAAI,CAACxC,aAAa;YACzD,MAAMyC,YAAYC,KAAKC,GAAG,KAAM,IAAI,CAACzB,WAAW,CAACsB,aAAa;YAE9D,MAAMI,YAAY;gBAChBL;gBACAT;gBACAe,aAAad,YAAYc,WAAW;gBACpCC,QAAQf,YAAYe,MAAM;gBAC1BC,mBAAmBhB,YAAYgB,iBAAiB;gBAChDC,gBAAgBjB,YAAYiB,cAAc;gBAC1CP;gBACAQ,WAAWP,KAAKC,GAAG;gBACnBO,WAAW/D,QAAQ+D,SAAS,IAAI;gBAChCC,aAAahE,QAAQgE,WAAW,IAAI,CAAC,UAAU,EAAEpB,YAAYc,WAAW,EAAE;YAC5E;YAEA,iBAAiB;YACjB,MAAMO,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQR,KAAKwC,SAAS,CAACT;YAC7B,MAAMU,aAAa,IAAI,CAACpC,WAAW,CAACsB;YAEpC,MAAM,IAAI,CAAC1C,KAAK,CAACyD,KAAK,CAACH,KAAKE,YAAYjC;YAExChB,QAAQC,GAAG,CAAC,CAAC,gCAAgC,CAAC;YAC9CD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYc,WAAW,CAAC,EAAE,EAAEf,UAAU,CAAC,CAAC;YACtEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;YAChClC,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACzDjC,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YACjFjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKD,WAAWe,WAAW,IAAI;YAC9DnD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YAC1EpD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAEnF,OAAOd;QAET,EAAE,OAAOrC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAMqD,iBAAiB9B,YAAY,IAAI,EAAE;QACvC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YACnC,MAAME,SAAS,EAAE;YAEjB,KAAK,MAAMX,OAAOU,KAAM;gBACtB,MAAMzC,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;gBACnC,IAAI/B,OAAO;oBACT,MAAMuB,YAAY/B,KAAKC,KAAK,CAACO;oBAC7B0C,OAAOE,IAAI,CAAC;wBACV,GAAGrB,SAAS;wBACZQ;wBACAc,QAAQtB,UAAUH,SAAS,GAAGC,KAAKC,GAAG,KAAK,WAAW;oBACxD;gBACF;YACF;YAEA,IAAIoB,OAAOI,MAAM,KAAK,GAAG;gBACvB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO,EAAE;YACX;YAEAD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyD,OAAOI,MAAM,CAAC,IAAI,CAAC;YACnD9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAMiC,SAASwB,OAAQ;gBAC1B,MAAMtB,YAAY,IAAIC,KAAKH,MAAME,SAAS,EAAEe,WAAW;gBACvD,MAAMY,aAAa7B,MAAMA,KAAK,CAAC8B,SAAS,CAAC,GAAG;gBAC5ChE,QAAQC,GAAG,CAAC,GAAGiC,MAAMT,SAAS,CAACwC,MAAM,CAAC,IAAI,GAAG,EAAEF,WAAW,GAAG,EAAE3B,UAAU,GAAG,EAAEF,MAAM2B,MAAM,EAAE;YAC9F;YAEA,OAAOH;QAET,EAAE,OAAOxD,OAAO;YACdF,QAAQE,KAAK,CAAC,4BAA4BA,MAAMoD,OAAO;YACvD,MAAMpD;QACR;IACF;IAEA,MAAMgE,YAAYzC,SAAS,EAAES,KAAK,EAAE;QAClC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMiC,SAAS,MAAM,IAAI,CAAC1E,KAAK,CAAC0E,MAAM,CAACpB;YAEvC,IAAI,CAACoB,QAAQ;gBACX,MAAM,IAAIpC,MAAM,CAAC,0BAA0B,EAAEN,WAAW;YAC1D;YAEA,MAAM,IAAI,CAAChC,KAAK,CAAC2E,GAAG,CAACrB;YACrB/C,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEwB,WAAW;YACjEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;QAElC,EAAE,OAAOhC,OAAO;YACdF,QAAQE,KAAK,CAAC,6BAA6BA,MAAMoD,OAAO;YACxD,MAAMpD;QACR;IACF;IAEA,MAAMmE,gBAAgB5C,YAAY,IAAI,EAAE;QACtC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YAEnC,IAAIC,KAAKK,MAAM,KAAK,GAAG;gBACrB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO;YACT;YAEA,MAAM,IAAI,CAACR,KAAK,CAAC2E,GAAG,CAACX;YACrBzD,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEwD,KAAKK,MAAM,CAAC,OAAO,EAAErC,YAAY,CAAC,WAAW,EAAEA,WAAW,GAAG,IAAI;YAC1F,OAAOgC,KAAKK,MAAM;QAEpB,EAAE,OAAO5D,OAAO;YACdF,QAAQE,KAAK,CAAC,8BAA8BA,MAAMoD,OAAO;YACzD,MAAMpD;QACR;IACF;IAEA,MAAMoE,cAAc7C,SAAS,EAAES,KAAK,EAAE;QACpC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;YAEnC,IAAI,CAAC/B,OAAO;gBACV,OAAO;oBAAEuD,OAAO;oBAAOC,QAAQ;gBAAkB;YACnD;YAEA,MAAMjC,YAAY/B,KAAKC,KAAK,CAACO;YAE7B,IAAIqB,KAAKC,GAAG,KAAKC,UAAUH,SAAS,EAAE;gBACpC,MAAM,IAAI,CAAC3C,KAAK,CAAC2E,GAAG,CAACrB;gBACrB,OAAO;oBAAEwB,OAAO;oBAAOC,QAAQ;gBAAgB;YACjD;YAEA,OAAO;gBACLD,OAAO;gBACPhC;YACF;QAEF,EAAE,OAAOrC,OAAO;YACd,OAAO;gBAAEqE,OAAO;gBAAOC,QAAQtE,MAAMoD,OAAO;YAAC;QAC/C;IACF;IAEA,MAAMmB,aAAahD,SAAS,EAAE;QAC5B,IAAI;YACF,MAAMnB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,WAAW;YACpD;YAEAzB,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYc,WAAW,EAAE;YAC7DxC,QAAQC,GAAG,CAAC,IAAIyE,MAAM,CAAC;YACvB1E,QAAQC,GAAG,CAAC,CAAC,MAAM,EAAEyB,YAAYI,IAAI,EAAE;YACvC9B,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACtDjC,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YAC9EjC,QAAQC,GAAG,CAAC,CAAC,cAAc,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YACvEpD,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAChFrD,QAAQC,GAAG,CAAC,CAAC,gBAAgB,EAAEyB,YAAYiB,cAAc,CAACgC,qBAAqB,EAAE;YACjF3E,QAAQC,GAAG,CAAC,CAAC,aAAa,EAAEyB,YAAYoB,WAAW,EAAE;YAErD,OAAOpB;QAET,EAAE,OAAOxB,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAM0E,iBAAiB;QACrB,IAAI;YACF,MAAMtE,SAAS,MAAM,IAAI,CAACH,eAAe;YAEzCH,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEK,OAAOqB,MAAM,CAACmC,MAAM,CAAC,IAAI,CAAC;YAClE9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAM4E,SAASvE,OAAOqB,MAAM,CAAE;gBACjC,MAAMG,OAAO+C,MAAM/C,IAAI,CAACmC,MAAM,CAAC;gBAC/B,MAAMa,OAAOD,MAAMrC,WAAW,CAACyB,MAAM,CAAC;gBACtC,MAAMxB,SAASoC,MAAMpC,MAAM,CAACqB,MAAM;gBAClC9D,QAAQC,GAAG,CAAC,GAAG6B,KAAK,GAAG,EAAEgD,KAAK,GAAG,EAAErC,QAAQ;YAC7C;YAEA,OAAOnC,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI;QAEtC,EAAE,OAAO5B,OAAO;YACdF,QAAQE,KAAK,CAAC,iCAAiCA,MAAMoD,OAAO;YAC5D,MAAMpD;QACR;IACF;IAEA,MAAM6E,WAAW;QACf,IAAI,IAAI,CAACtF,KAAK,EAAE;YACd,MAAM,IAAI,CAACA,KAAK,CAACuF,IAAI;QACvB;IACF;AACF;AAEA,gBAAgB;AAChB,eAAeC;IACb,MAAMC,OAAOlG,QAAQmG,IAAI,CAACC,KAAK,CAAC;IAChC,MAAMC,UAAUH,IAAI,CAAC,EAAE;IAEvB,IAAI,CAACG,SAAS;QACZrF,QAAQC,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCjB,CAAC;QACGjB,QAAQsG,IAAI,CAAC;IACf;IAEA,MAAMC,eAAe,IAAI1G;IAEzB,IAAI;QACF,MAAM0G,aAAa3F,UAAU;QAE7B,OAAQyF;YACN,KAAK;gBAAY;oBACf,MAAM5D,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBAEA,MAAMjD,UAAU,CAAC;oBACjB,IAAK,IAAI0G,IAAI,GAAGA,IAAIN,KAAKpB,MAAM,EAAE0B,IAAK;wBACpC,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BAC9B1G,QAAQqD,SAAS,GAAG+C,IAAI,CAAC,EAAEM,EAAE;wBAC/B,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,iBAAiB;4BACtC1G,QAAQgE,WAAW,GAAGoC,IAAI,CAAC,EAAEM,EAAE;wBACjC,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BACrC1G,QAAQ+D,SAAS,GAAGqC,IAAI,CAAC,EAAEM,EAAE;wBAC/B;oBACF;oBAEA,MAAMD,aAAa/D,kBAAkB,CAACC,WAAW3C;oBACjD;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM2C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMK,aAAahC,gBAAgB,CAAC9B;oBACpC;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMA,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBACA,MAAMwD,aAAarB,WAAW,CAACzC,WAAWS;oBAC1C;gBACF;YAEA,KAAK;gBAAc;oBACjB,MAAMT,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMO,QAAQ,MAAMF,aAAalB,eAAe,CAAC5C;oBACjDzB,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEwF,MAAM,OAAO,CAAC;oBACrC;gBACF;YAEA,KAAK;gBAAY;oBACf,MAAMhE,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBAEA,MAAM2D,SAAS,MAAMH,aAAajB,aAAa,CAAC7C,WAAWS;oBAC3D,IAAIwD,OAAOnB,KAAK,EAAE;wBAChBvE,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyF,OAAOnD,SAAS,CAACd,SAAS,EAAE;wBAC1DzB,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOnD,SAAS,CAACE,MAAM,CAACR,IAAI,CAAC,OAAO;wBAC9DjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKqD,OAAOnD,SAAS,CAACH,SAAS,EAAEe,WAAW,IAAI;oBACjF,OAAO;wBACLnD,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOlB,MAAM,EAAE;oBAC3C;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM/C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBACA,MAAMwD,aAAad,YAAY,CAAChD;oBAChC;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAM8D,aAAaX,cAAc;oBACjC;gBACF;YAEA;gBACE,MAAM,IAAI7C,MAAM,CAAC,iBAAiB,EAAEsD,SAAS;QACjD;IAEF,EAAE,OAAOnF,OAAO;QACdF,QAAQE,KAAK,CAAC,YAAYA,MAAMoD,OAAO;QACvCtE,QAAQsG,IAAI,CAAC;IACf,SAAU;QACR,MAAMC,aAAaR,QAAQ;IAC7B;AACF;AAEA,IAAIvG,QAAQyG,IAAI,KAAKU,QAAQ;IAC3BV,OAAOW,KAAK,CAAC1F,CAAAA;QACXF,QAAQE,KAAK,CAAC,gBAAgBA;QAC9BlB,QAAQsG,IAAI,CAAC;IACf;AACF;AAEAK,OAAOE,OAAO,GAAGhH"}

package/dist/cli/anthropic-client.js

@@ -22,6 +22,20 @@ const execAsync = promisify(exec);
             baseURL: process.env.ZAI_BASE_URL || 'https://api.z.ai/api/anthropic'
         };
     }
+    if (envProvider === 'kimi') {
+        return {
+            provider: 'kimi',
+            apiKey: process.env.KIMI_API_KEY,
+            baseURL: process.env.KIMI_BASE_URL || 'https://api.moonshot.cn/v1'
+        };
+    }
+    if (envProvider === 'openrouter') {
+        return {
+            provider: 'openrouter',
+            apiKey: process.env.OPENROUTER_API_KEY,
+            baseURL: process.env.OPENROUTER_BASE_URL || 'https://openrouter.ai/api/v1'
+        };
+    }
     // Check config file
     try {
         const configPath = path.join('.claude', 'config', 'api-provider.json');
@@ -33,6 +47,20 @@ const execAsync = promisify(exec);
                 baseURL: config.baseURL || process.env.ZAI_BASE_URL || 'https://api.z.ai/api/anthropic'
             };
         }
+        if (config.provider === 'kimi') {
+            return {
+                provider: 'kimi',
+                apiKey: config.apiKey || process.env.KIMI_API_KEY,
+                baseURL: config.baseURL || process.env.KIMI_BASE_URL || 'https://api.moonshot.cn/v1'
+            };
+        }
+        if (config.provider === 'openrouter') {
+            return {
+                provider: 'openrouter',
+                apiKey: config.apiKey || process.env.OPENROUTER_API_KEY,
+                baseURL: config.baseURL || process.env.OPENROUTER_BASE_URL || 'https://openrouter.ai/api/v1'
+            };
+        }
     } catch  {
     // Config file doesn't exist, use defaults
     }
@@ -232,7 +260,7 @@ const execAsync = promisify(exec);
     let totalInputTokens = 0;
     let totalOutputTokens = 0;
     let fullTextContent = '';
-    const MAX_ITERATIONS = 10; // Prevent infinite loops
+    const MAX_ITERATIONS = 20; // Prevent infinite loops (increased for exploration phase)
     let iteration = 0;
     while(iteration < MAX_ITERATIONS){
         iteration++;
@@ -327,6 +355,9 @@ const execAsync = promisify(exec);
     // Start heartbeat monitoring (declare at function scope for error handling)
     let heartbeatInterval = null;
     const taskId = process.env.TASK_ID;
+    // Bug #6 Fix: Read Redis connection parameters from process.env and interpolate in TypeScript
+    const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';
+    const redisPort = process.env.CFN_REDIS_PORT || '6379';
     try {
         console.log(`[anthropic-client] Executing agent: ${agentType}`);
         console.log(`[anthropic-client] Agent ID: ${agentId}`);
@@ -337,7 +368,7 @@ const execAsync = promisify(exec);
         if (taskId) {
             heartbeatInterval = setInterval(async ()=>{
                 try {
-                    await execAsync(`redis-cli hset "swarm:${taskId}:agent:${agentId}" heartbeat "${Date.now()}" status "working"`);
+                    await execAsync(`redis-cli -h ${redisHost} -p ${redisPort} hset "swarm:${taskId}:agent:${agentId}" heartbeat "${Date.now()}" status "working"`);
                 } catch (err) {
                     console.error('[heartbeat] Error sending heartbeat:', err);
                 }
@@ -383,7 +414,7 @@ const execAsync = promisify(exec);
         if (heartbeatInterval) {
             clearInterval(heartbeatInterval);
             if (taskId) {
-                await execAsync(`redis-cli hset "swarm:${taskId}:agent:${agentId}" heartbeat "${Date.now()}" status "complete"`);
+                await execAsync(`redis-cli -h ${redisHost} -p ${redisPort} hset "swarm:${taskId}:agent:${agentId}" heartbeat "${Date.now()}" status "complete"`);
                 console.log(`[heartbeat] Monitoring stopped - agent ${agentId} complete`);
             }
         }
@@ -399,7 +430,7 @@ const execAsync = promisify(exec);
             clearInterval(heartbeatInterval);
             if (taskId) {
                 try {
-                    await execAsync(`redis-cli hset "swarm:${taskId}:agent:${agentId}" heartbeat "${Date.now()}" status "error"`);
+                    await execAsync(`redis-cli -h ${redisHost} -p ${redisPort} hset "swarm:${taskId}:agent:${agentId}" heartbeat "${Date.now()}" status "error"`);
                     console.log(`[heartbeat] Monitoring stopped - agent ${agentId} error`);
                 } catch (err) {
                 // Ignore heartbeat errors during error handling