npm - claude-flow-novice - Versions diffs - 2.15.11 → 2.16.1 - Mend

claude-flow-novice 2.15.11 → 2.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (741) hide show

package/dist/cli/agent-spawner.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"sources":["../../src/cli/agent-spawner.ts"],"sourcesContent":["/**\r\n * Agent Spawner Module\r\n *\r\n * High-level API for spawning agents with full type safety,\r\n * environment variable handling, provider configuration parsing,\r\n * and Redis coordination integration.\r\n *\r\n * Usage:\r\n * const spawner = new AgentSpawner();\r\n * const result = await spawner.spawnAgent({\r\n * agentType: 'backend-developer',\r\n * taskId: 'task-123',\r\n * iteration: 1,\r\n * mode: 'standard'\r\n * });\r\n */\r\n\r\nimport { existsSync, readFileSync } from 'fs';\r\nimport { resolve, join } from 'path';\r\nimport { execFileSync, spawn as childSpawn } from 'child_process';\r\nimport { v4 as uuidv4 } from 'uuid';\r\nimport { generateTaskId } from './spawn-agent-cli';\r\nimport { getEnvValue, getNetworkName } from '../lib/environment-contract';\r\n\r\n/**\r\n * Configuration for spawning an agent\r\n */\r\ninterface SpawnAgentConfig {\r\n agentType: string;\r\n taskId: string;\r\n iteration: number;\r\n mode: 'mvp' | 'standard' | 'enterprise';\r\n provider?: string;\r\n model?: string;\r\n prompt?: string;\r\n env?: Record<string, string>;\r\n background?: boolean;\r\n timeout?: number;\r\n}\r\n\r\n/**\r\n * Result of agent spawning operation\r\n */\r\ninterface SpawnResult {\r\n agentId: string;\r\n pid: number;\r\n status: 'spawned' | 'running' | 'failed';\r\n timestamp: string;\r\n error?: string;\r\n metadata?: Record<string, unknown>;\r\n}\r\n\r\n/**\r\n * Provider configuration parsed from agent profile\r\n */\r\ninterface ProviderConfig {\r\n provider: string;\r\n model: string;\r\n baseUrl?: string;\r\n}\r\n\r\n/**\r\n * Worker spawning configuration\r\n */\r\ninterface SpawnWorkerConfig {\r\n team: string;\r\n complexity: 'simple' | 'complex';\r\n providerMode: 'auto' | 'zai' | 'anthropic';\r\n agentType?: string;\r\n taskContext?: string;\r\n}\r\n\r\n/**\r\n * Validation result with optional error message\r\n */\r\ninterface ValidationResult {\r\n valid: boolean;\r\n error?: string;\r\n}\r\n\r\n/**\r\n * AgentSpawner class - Type-safe agent spawning with validation\r\n */\r\nexport class AgentSpawner {\r\n private projectRoot: string;\r\n private agentProfilesDir: string;\r\n private agentConfigFile: string;\r\n\r\n constructor(projectRoot?: string) {\r\n this.projectRoot = projectRoot || process.cwd();\r\n this.agentProfilesDir = resolve(this.projectRoot, '.claude/agents/cfn-dev-team');\r\n this.agentConfigFile = resolve(this.projectRoot, '.claude/cfn-config/team-providers.json');\r\n }\r\n\r\n /**\r\n * Spawn an agent with the given configuration\r\n */\r\n async spawnAgent(config: SpawnAgentConfig): Promise<SpawnResult> {\r\n const timestamp = new Date().toISOString();\r\n const agentId = this.generateAgentId(config.agentType);\r\n\r\n try {\r\n // Validate configuration\r\n this.validateSpawnConfig(config);\r\n\r\n // Check agent exists\r\n const agentExists = await this.validateAgentExists(config.agentType);\r\n if (!agentExists) {\r\n return {\r\n agentId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: `Agent type not found: ${config.agentType}`\r\n };\r\n }\r\n\r\n // Parse provider configuration if not explicitly provided\r\n let provider = config.provider;\r\n let model = config.model;\r\n\r\n if (!provider || !model) {\r\n const providerConfig = await this.parseAgentProvider(config.agentType);\r\n provider = provider || providerConfig.provider;\r\n model = model || providerConfig.model;\r\n }\r\n\r\n // Build environment variables\r\n const env = this.buildEnvironment(config, agentId, provider, model);\r\n\r\n // Spawn the process\r\n const pid = await this.spawnProcess(config.agentType, env, config.background);\r\n\r\n return {\r\n agentId,\r\n pid,\r\n status: 'spawned',\r\n timestamp,\r\n metadata: {\r\n agentType: config.agentType,\r\n taskId: config.taskId,\r\n iteration: config.iteration,\r\n mode: config.mode,\r\n provider,\r\n model\r\n }\r\n };\r\n } catch (error) {\r\n return {\r\n agentId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: error instanceof Error ? error.message : String(error)\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Spawn a worker with team configuration\r\n */\r\n async spawnWorker(config: SpawnWorkerConfig): Promise<SpawnResult> {\r\n const timestamp = new Date().toISOString();\r\n const workerId = this.generateWorkerId(config.team);\r\n\r\n try {\r\n // Validate worker configuration\r\n this.validateWorkerConfig(config);\r\n\r\n // Load team provider configuration\r\n const teamConfig = this.loadTeamConfig(config.team);\r\n\r\n // Select model based on complexity\r\n const model = this.selectModel(config.team, config.complexity);\r\n\r\n // Get API key from environment\r\n const apiKey = this.getApiKey(config.team, 'workers');\r\n\r\n // Build environment for worker\r\n const env = this.buildWorkerEnvironment(config, workerId, model, apiKey);\r\n\r\n // Provider routing\r\n this.routeWorkerProvider(config.providerMode, config.team, model, apiKey);\r\n\r\n return {\r\n agentId: workerId,\r\n pid: 0,\r\n status: 'spawned',\r\n timestamp,\r\n metadata: {\r\n team: config.team,\r\n complexity: config.complexity,\r\n model,\r\n provider: config.providerMode\r\n }\r\n };\r\n } catch (error) {\r\n return {\r\n agentId: workerId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: error instanceof Error ? error.message : String(error)\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Validate that an agent type exists in the profiles directory\r\n */\r\n async validateAgentExists(agentType: string): Promise<boolean> {\r\n // Normalize agent type (handle both underscore and hyphen variations)\r\n const normalized = agentType.replace(/_/g, '-').toLowerCase();\r\n\r\n // Check for agent profile in subdirectories\r\n const possiblePaths = [\r\n resolve(this.agentProfilesDir, `${normalized}.md`),\r\n // Check in subdirectories\r\n ...this.findAgentInSubdirs(normalized)\r\n ];\r\n\r\n return possiblePaths.some(path => existsSync(path));\r\n }\r\n\r\n /**\r\n * Parse provider configuration from agent profile frontmatter\r\n */\r\n async parseAgentProvider(agentType: string): Promise<ProviderConfig> {\r\n const agentPath = this.findAgentProfile(agentType);\r\n\r\n if (!agentPath) {\r\n return {\r\n provider: 'zai',\r\n model: 'glm-4.6'\r\n };\r\n }\r\n\r\n try {\r\n const content = readFileSync(agentPath, 'utf-8');\r\n const providerMatch = content.match(//);\r\n\r\n if (providerMatch) {\r\n const params = providerMatch[1];\r\n const providerMatch_ = params.match(/provider:\\s*(\\w+)/);\r\n const modelMatch = params.match(/model:\\s*([^\\n]+)/);\r\n\r\n return {\r\n provider: providerMatch_?.[1] || 'zai',\r\n model: modelMatch?.[1]?.trim() || 'glm-4.6'\r\n };\r\n }\r\n } catch (error) {\r\n // Silent fallback\r\n }\r\n\r\n return {\r\n provider: 'zai',\r\n model: 'glm-4.6'\r\n };\r\n }\r\n\r\n /**\r\n * Generate a unique agent ID\r\n */\r\n private generateAgentId(agentType: string): string {\r\n const timestamp = Date.now();\r\n const random = Math.random().toString(36).substring(2, 9);\r\n return `agent-${agentType}-${timestamp}-${random}`;\r\n }\r\n\r\n /**\r\n * Generate a unique worker ID\r\n */\r\n private generateWorkerId(team: string): string {\r\n const uuid = uuidv4().substring(0, 8);\r\n return `worker-${team}-${uuid}`;\r\n }\r\n\r\n /**\r\n * Validate spawn configuration\r\n */\r\n private validateSpawnConfig(config: SpawnAgentConfig): void {\r\n const errors: string[] = [];\r\n\r\n if (!config.agentType || typeof config.agentType !== 'string') {\r\n errors.push('agentType must be a non-empty string');\r\n }\r\n\r\n if (!config.taskId || typeof config.taskId !== 'string') {\r\n errors.push('taskId must be a non-empty string');\r\n } else {\r\n const taskIdValidation = this.validateTaskId(config.taskId);\r\n if (!taskIdValidation.valid) {\r\n errors.push(taskIdValidation.error || 'Invalid taskId format');\r\n }\r\n }\r\n\r\n if (config.iteration === undefined || typeof config.iteration !== 'number') {\r\n errors.push('iteration must be a number');\r\n }\r\n\r\n if (!['mvp', 'standard', 'enterprise'].includes(config.mode)) {\r\n errors.push('mode must be mvp, standard, or enterprise');\r\n }\r\n\r\n if (errors.length > 0) {\r\n throw new Error(`Configuration validation failed:\\n${errors.join('\\n')}`);\r\n }\r\n }\r\n\r\n /**\r\n * Validate worker configuration\r\n */\r\n private validateWorkerConfig(config: SpawnWorkerConfig): void {\r\n const errors: string[] = [];\r\n\r\n if (!config.team || typeof config.team !== 'string') {\r\n errors.push('team must be a non-empty string');\r\n }\r\n\r\n if (!['simple', 'complex'].includes(config.complexity)) {\r\n errors.push('complexity must be simple or complex');\r\n }\r\n\r\n if (!['auto', 'zai', 'anthropic'].includes(config.providerMode)) {\r\n errors.push('providerMode must be auto, zai, or anthropic');\r\n }\r\n\r\n if (errors.length > 0) {\r\n throw new Error(`Worker configuration validation failed:\\n${errors.join('\\n')}`);\r\n }\r\n }\r\n\r\n /**\r\n * Validate task ID format (CVSS 8.9 - command injection prevention)\r\n * Supports both raw IDs and Phase 1 prefixed IDs (cli:*, trigger:*)\r\n * Pattern: alphanumeric, underscore, hyphen, dot, and colon (for mode prefix) only, max 128 chars\r\n *\r\n * Accepted formats:\r\n * - Raw: task-123 (16 chars)\r\n * - Prefixed: cli:task-123 (20 chars)\r\n * - Prefixed: trigger:task-123 (24 chars)\r\n */\r\n private validateTaskId(taskId: string): ValidationResult {\r\n if (typeof taskId !== 'string' || taskId.length === 0) {\r\n return { valid: false, error: 'Task ID must be a non-empty string' };\r\n }\r\n\r\n // Updated pattern to support namespace prefixes (e.g., cli:, trigger:, task:, orchestrator:)\r\n const taskIdPattern = /^([a-z]+:)?[a-zA-Z0-9_.-]{1,64}$/;\r\n if (!taskIdPattern.test(taskId)) {\r\n return {\r\n valid: false,\r\n error: 'Invalid task ID format - must contain optional namespace prefix (e.g., \"cli:\") and alphanumeric characters, dot, underscore, hyphens (max 64 chars)'\r\n };\r\n }\r\n\r\n return { valid: true };\r\n }\r\n\r\n /**\r\n * Build environment variables for agent execution\r\n *\r\n * Provider routing: Sets both PROVIDER and CLAUDE_API_PROVIDER for compatibility.\r\n * - PROVIDER: New convention used by agent-spawner\r\n * - CLAUDE_API_PROVIDER: Legacy convention used by anthropic-client.ts getAPIConfig()\r\n *\r\n * BUG FIX: Previously only set PROVIDER, but anthropic-client.ts checked CLAUDE_API_PROVIDER\r\n */\r\n private buildEnvironment(\r\n config: SpawnAgentConfig,\r\n agentId: string,\r\n provider: string,\r\n model: string\r\n ): Record<string, string> {\r\n const env: Record<string, string> = {\r\n ...process.env as Record<string, string>,\r\n AGENT_ID: agentId,\r\n AGENT_TYPE: config.agentType,\r\n TASK_ID: config.taskId,\r\n ITERATION: String(config.iteration),\r\n MODE: config.mode,\r\n // Provider routing - set both for compatibility\r\n PROVIDER: provider,\r\n CLAUDE_API_PROVIDER: provider, // BUG FIX: anthropic-client.ts reads this\r\n MODEL: model,\r\n SPAWNED_AT: new Date().toISOString(),\r\n PROJECT_ROOT: this.projectRoot,\r\n // Redis coordination for CLI mode agents (resolved via environment contract)\r\n CFN_REDIS_HOST: getEnvValue('redis_host', 'cli'),\r\n CFN_REDIS_PORT: getEnvValue('redis_port', 'cli'),\r\n // FIX: Don't use REDIS_PASSWORD from parent env - only explicit CFN_REDIS_PASSWORD\r\n // This prevents CLI agents from inheriting the wrong password from shell environment\r\n CFN_REDIS_PASSWORD: process.env.CFN_REDIS_PASSWORD || '',\r\n CFN_NETWORK_NAME: getNetworkName('cli')\r\n };\r\n\r\n // Add provider-specific API keys if available\r\n // This ensures spawned agents have access to the correct API key for their provider\r\n if (provider === 'zai' && process.env.ZAI_API_KEY) {\r\n env.ZAI_API_KEY = process.env.ZAI_API_KEY;\r\n }\r\n if (provider === 'kimi' && process.env.KIMI_API_KEY) {\r\n env.KIMI_API_KEY = process.env.KIMI_API_KEY;\r\n }\r\n if (provider === 'openrouter' && process.env.OPENROUTER_API_KEY) {\r\n env.OPENROUTER_API_KEY = process.env.OPENROUTER_API_KEY;\r\n }\r\n if (provider === 'anthropic' && process.env.ANTHROPIC_API_KEY) {\r\n env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n }\r\n\r\n // Add optional prompt parameter if provided\r\n if (config.prompt) {\r\n env.PROMPT = config.prompt;\r\n }\r\n\r\n // Merge user-provided environment variables\r\n if (config.env) {\r\n Object.assign(env, config.env);\r\n }\r\n\r\n // Debug logging for provider routing\r\n console.error(`[agent-spawner] Building env for agent ${agentId}:`);\r\n console.error(`[agent-spawner] PROVIDER=${provider}, CLAUDE_API_PROVIDER=${provider}`);\r\n console.error(`[agent-spawner] Has ZAI_API_KEY: ${!!env.ZAI_API_KEY}`);\r\n console.error(`[agent-spawner] Has KIMI_API_KEY: ${!!env.KIMI_API_KEY}`);\r\n console.error(`[agent-spawner] Has ANTHROPIC_API_KEY: ${!!env.ANTHROPIC_API_KEY}`);\r\n\r\n return env;\r\n }\r\n\r\n /**\r\n * Build environment for worker process\r\n */\r\n private buildWorkerEnvironment(\r\n config: SpawnWorkerConfig,\r\n workerId: string,\r\n model: string,\r\n apiKey: string\r\n ): Record<string, string> {\r\n const env: Record<string, string> = {\r\n ...process.env as Record<string, string>,\r\n WORKER_ID: workerId,\r\n TEAM: config.team,\r\n COMPLEXITY: config.complexity,\r\n MODEL: model,\r\n API_KEY: apiKey,\r\n PROJECT_ROOT: this.projectRoot\r\n };\r\n\r\n if (config.agentType) {\r\n env.AGENT_TYPE = config.agentType;\r\n }\r\n\r\n if (config.taskContext) {\r\n env.TASK_CONTEXT = config.taskContext;\r\n }\r\n\r\n return env;\r\n }\r\n\r\n /**\r\n * Spawn the actual process\r\n */\r\n private async spawnProcess(\r\n agentType: string,\r\n env: Record<string, string>,\r\n background: boolean = true\r\n ): Promise<number> {\r\n const args = [\r\n 'src/cli/agent-executor.ts',\r\n '--agent-type', agentType\r\n ];\r\n\r\n const child = childSpawn('tsx', args, {\r\n env,\r\n stdio: background ? 'ignore' : 'inherit',\r\n detached: background\r\n });\r\n\r\n const pid = child.pid || 0;\r\n\r\n if (background) {\r\n child.unref();\r\n } else {\r\n await new Promise((resolve, reject) => {\r\n child.on('exit', (code) => {\r\n if (code !== 0) {\r\n reject(new Error(`Process exited with code ${code}`));\r\n } else {\r\n resolve(undefined);\r\n }\r\n });\r\n });\r\n }\r\n\r\n return pid;\r\n }\r\n\r\n /**\r\n * Find agent profile in directory structure\r\n */\r\n private findAgentProfile(agentType: string): string | null {\r\n const normalized = agentType.replace(/_/g, '-').toLowerCase();\r\n\r\n // Direct path\r\n const directPath = resolve(this.agentProfilesDir, `${normalized}.md`);\r\n if (existsSync(directPath)) {\r\n return directPath;\r\n }\r\n\r\n // Search in subdirectories\r\n const subdirs = [\r\n 'developers', 'testers', 'reviewers', 'architecture',\r\n 'dev-ops', 'product-owners', 'coordinators', 'analysts', 'utility'\r\n ];\r\n\r\n for (const subdir of subdirs) {\r\n const path = resolve(this.agentProfilesDir, subdir, `${normalized}.md`);\r\n if (existsSync(path)) {\r\n return path;\r\n }\r\n\r\n // Check nested subdirectories\r\n const nestedDirs = ['frontend', 'backend', 'database', 'quality', 'e2e', 'unit', 'validation', 'data'];\r\n for (const nested of nestedDirs) {\r\n const nestedPath = resolve(this.agentProfilesDir, subdir, nested, `${normalized}.md`);\r\n if (existsSync(nestedPath)) {\r\n return nestedPath;\r\n }\r\n }\r\n }\r\n\r\n return null;\r\n }\r\n\r\n /**\r\n * Find agent in subdirectories\r\n */\r\n private findAgentInSubdirs(normalized: string): string[] {\r\n const paths: string[] = [];\r\n const subdirs = [\r\n 'developers', 'testers', 'reviewers', 'architecture',\r\n 'dev-ops', 'product-owners', 'coordinators', 'analysts', 'utility'\r\n ];\r\n\r\n for (const subdir of subdirs) {\r\n const path = resolve(this.agentProfilesDir, subdir, `${normalized}.md`);\r\n paths.push(path);\r\n\r\n // Check nested directories\r\n const nestedDirs = ['frontend', 'backend', 'database', 'quality', 'e2e', 'unit', 'validation', 'data'];\r\n for (const nested of nestedDirs) {\r\n paths.push(resolve(this.agentProfilesDir, subdir, nested, `${normalized}.md`));\r\n }\r\n }\r\n\r\n return paths;\r\n }\r\n\r\n /**\r\n * Load team configuration from config file\r\n */\r\n private loadTeamConfig(team: string): Record<string, unknown> {\r\n if (!existsSync(this.agentConfigFile)) {\r\n throw new Error(`Team configuration not found at ${this.agentConfigFile}`);\r\n }\r\n\r\n const content = readFileSync(this.agentConfigFile, 'utf-8');\r\n const config = JSON.parse(content);\r\n\r\n if (!config.teams || !config.teams[team]) {\r\n throw new Error(`Invalid or missing provider configuration for team: ${team}`);\r\n }\r\n\r\n return config.teams[team] as Record<string, unknown>;\r\n }\r\n\r\n /**\r\n * Select model based on complexity\r\n */\r\n private selectModel(team: string, complexity: 'simple' | 'complex'): string {\r\n const config = this.loadTeamConfig(team);\r\n const workers = config.workers as Record<string, unknown>;\r\n const models = workers?.models as Record<string, unknown>;\r\n\r\n if (models && models[complexity]) {\r\n return models[complexity] as string;\r\n }\r\n\r\n // Fallback to default complexity\r\n const defaultComplexity = 'simple';\r\n if (models && models[defaultComplexity]) {\r\n return models[defaultComplexity] as string;\r\n }\r\n\r\n return 'gpt-4';\r\n }\r\n\r\n /**\r\n * Get API key from environment\r\n */\r\n private getApiKey(team: string, role: 'coordinator' | 'workers'): string {\r\n const config = this.loadTeamConfig(team);\r\n const roleConfig = config[role] as Record<string, unknown>;\r\n\r\n if (!roleConfig) {\r\n throw new Error(`No configuration found for team=${team}, role=${role}`);\r\n }\r\n\r\n const apiKeyEnvVar = roleConfig.apiKeyEnvVar as string;\r\n\r\n if (!apiKeyEnvVar) {\r\n throw new Error(`apiKeyEnvVar not configured for team=${team}, role=${role}`);\r\n }\r\n\r\n const apiKey = process.env[apiKeyEnvVar];\r\n\r\n if (!apiKey) {\r\n throw new Error(`API key not found in environment variable: ${apiKeyEnvVar}`);\r\n }\r\n\r\n return apiKey;\r\n }\r\n\r\n /**\r\n * Route worker to appropriate provider\r\n */\r\n private routeWorkerProvider(\r\n providerMode: string,\r\n team: string,\r\n model: string,\r\n apiKey: string\r\n ): void {\r\n const config = this.loadTeamConfig(team);\r\n const workers = config.workers as Record<string, unknown>;\r\n const provider = workers?.provider as string;\r\n const baseUrl = workers?.baseUrl as string;\r\n\r\n switch (providerMode) {\r\n case 'auto':\r\n this.routeAutoProvider(provider, baseUrl, model, apiKey);\r\n break;\r\n case 'zai':\r\n process.env.ZAI_API_KEY = apiKey;\r\n process.env.ZAI_BASE_URL = baseUrl;\r\n process.env.ZAI_MODEL = model;\r\n break;\r\n case 'anthropic':\r\n process.env.ANTHROPIC_API_KEY = apiKey;\r\n process.env.ANTHROPIC_BASE_URL = baseUrl;\r\n process.env.ANTHROPIC_MODEL = model;\r\n break;\r\n default:\r\n throw new Error(`Invalid provider mode: ${providerMode}`);\r\n }\r\n }\r\n\r\n /**\r\n * Route to appropriate provider based on configuration\r\n */\r\n private routeAutoProvider(provider: string, baseUrl: string, model: string, apiKey: string): void {\r\n switch (provider) {\r\n case 'zai':\r\n process.env.ZAI_API_KEY = apiKey;\r\n process.env.ZAI_BASE_URL = baseUrl;\r\n process.env.ZAI_MODEL = model;\r\n break;\r\n case 'anthropic':\r\n process.env.ANTHROPIC_API_KEY = apiKey;\r\n process.env.ANTHROPIC_BASE_URL = baseUrl;\r\n process.env.ANTHROPIC_MODEL = model;\r\n break;\r\n default:\r\n throw new Error(`Unsupported provider: ${provider}`);\r\n }\r\n }\r\n}\r\n\r\nexport type { SpawnAgentConfig, SpawnResult, ProviderConfig, SpawnWorkerConfig };\r\n"],"names":["existsSync","readFileSync","resolve","spawn","childSpawn","v4","uuidv4","getEnvValue","getNetworkName","AgentSpawner","projectRoot","agentProfilesDir","agentConfigFile","process","cwd","spawnAgent","config","timestamp","Date","toISOString","agentId","generateAgentId","agentType","validateSpawnConfig","agentExists","validateAgentExists","pid","status","error","provider","model","providerConfig","parseAgentProvider","env","buildEnvironment","spawnProcess","background","metadata","taskId","iteration","mode","Error","message","String","spawnWorker","workerId","generateWorkerId","team","validateWorkerConfig","teamConfig","loadTeamConfig","selectModel","complexity","apiKey","getApiKey","buildWorkerEnvironment","routeWorkerProvider","providerMode","normalized","replace","toLowerCase","possiblePaths","findAgentInSubdirs","some","path","agentPath","findAgentProfile","content","providerMatch","match","params","providerMatch_","modelMatch","trim","now","random","Math","toString","substring","uuid","errors","push","taskIdValidation","validateTaskId","valid","undefined","includes","length","join","taskIdPattern","test","AGENT_ID","AGENT_TYPE","TASK_ID","ITERATION","MODE","PROVIDER","CLAUDE_API_PROVIDER","MODEL","SPAWNED_AT","PROJECT_ROOT","CFN_REDIS_HOST","CFN_REDIS_PORT","CFN_REDIS_PASSWORD","CFN_NETWORK_NAME","ZAI_API_KEY","KIMI_API_KEY","OPENROUTER_API_KEY","ANTHROPIC_API_KEY","prompt","PROMPT","Object","assign","console","WORKER_ID","TEAM","COMPLEXITY","API_KEY","taskContext","TASK_CONTEXT","args","child","stdio","detached","unref","Promise","reject","on","code","directPath","subdirs","subdir","nestedDirs","nested","nestedPath","paths","JSON","parse","teams","workers","models","defaultComplexity","role","roleConfig","apiKeyEnvVar","baseUrl","routeAutoProvider","ZAI_BASE_URL","ZAI_MODEL","ANTHROPIC_BASE_URL","ANTHROPIC_MODEL"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,YAAY,QAAQ,KAAK;AAC9C,SAASC,OAAO,QAAc,OAAO;AACrC,SAAuBC,SAASC,UAAU,QAAQ,gBAAgB;AAClE,SAASC,MAAMC,MAAM,QAAQ,OAAO;AAEpC,SAASC,WAAW,EAAEC,cAAc,QAAQ,8BAA8B;AA0D1E;;CAEC,GACD,OAAO,MAAMC;IACHC,YAAoB;IACpBC,iBAAyB;IACzBC,gBAAwB;IAEhC,YAAYF,WAAoB,CAAE;QAChC,IAAI,CAACA,WAAW,GAAGA,eAAeG,QAAQC,GAAG;QAC7C,IAAI,CAACH,gBAAgB,GAAGT,QAAQ,IAAI,CAACQ,WAAW,EAAE;QAClD,IAAI,CAACE,eAAe,GAAGV,QAAQ,IAAI,CAACQ,WAAW,EAAE;IACnD;IAEA;;GAEC,GACD,MAAMK,WAAWC,MAAwB,EAAwB;QAC/D,MAAMC,YAAY,IAAIC,OAAOC,WAAW;QACxC,MAAMC,UAAU,IAAI,CAACC,eAAe,CAACL,OAAOM,SAAS;QAErD,IAAI;YACF,yBAAyB;YACzB,IAAI,CAACC,mBAAmB,CAACP;YAEzB,qBAAqB;YACrB,MAAMQ,cAAc,MAAM,IAAI,CAACC,mBAAmB,CAACT,OAAOM,SAAS;YACnE,IAAI,CAACE,aAAa;gBAChB,OAAO;oBACLJ;oBACAM,KAAK,CAAC;oBACNC,QAAQ;oBACRV;oBACAW,OAAO,CAAC,sBAAsB,EAAEZ,OAAOM,SAAS,EAAE;gBACpD;YACF;YAEA,0DAA0D;YAC1D,IAAIO,WAAWb,OAAOa,QAAQ;YAC9B,IAAIC,QAAQd,OAAOc,KAAK;YAExB,IAAI,CAACD,YAAY,CAACC,OAAO;gBACvB,MAAMC,iBAAiB,MAAM,IAAI,CAACC,kBAAkB,CAAChB,OAAOM,SAAS;gBACrEO,WAAWA,YAAYE,eAAeF,QAAQ;gBAC9CC,QAAQA,SAASC,eAAeD,KAAK;YACvC;YAEA,8BAA8B;YAC9B,MAAMG,MAAM,IAAI,CAACC,gBAAgB,CAAClB,QAAQI,SAASS,UAAUC;YAE7D,oBAAoB;YACpB,MAAMJ,MAAM,MAAM,IAAI,CAACS,YAAY,CAACnB,OAAOM,SAAS,EAAEW,KAAKjB,OAAOoB,UAAU;YAE5E,OAAO;gBACLhB;gBACAM;gBACAC,QAAQ;gBACRV;gBACAoB,UAAU;oBACRf,WAAWN,OAAOM,SAAS;oBAC3BgB,QAAQtB,OAAOsB,MAAM;oBACrBC,WAAWvB,OAAOuB,SAAS;oBAC3BC,MAAMxB,OAAOwB,IAAI;oBACjBX;oBACAC;gBACF;YACF;QACF,EAAE,OAAOF,OAAO;YACd,OAAO;gBACLR;gBACAM,KAAK,CAAC;gBACNC,QAAQ;gBACRV;gBACAW,OAAOA,iBAAiBa,QAAQb,MAAMc,OAAO,GAAGC,OAAOf;YACzD;QACF;IACF;IAEA;;GAEC,GACD,MAAMgB,YAAY5B,MAAyB,EAAwB;QACjE,MAAMC,YAAY,IAAIC,OAAOC,WAAW;QACxC,MAAM0B,WAAW,IAAI,CAACC,gBAAgB,CAAC9B,OAAO+B,IAAI;QAElD,IAAI;YACF,gCAAgC;YAChC,IAAI,CAACC,oBAAoB,CAAChC;YAE1B,mCAAmC;YACnC,MAAMiC,aAAa,IAAI,CAACC,cAAc,CAAClC,OAAO+B,IAAI;YAElD,mCAAmC;YACnC,MAAMjB,QAAQ,IAAI,CAACqB,WAAW,CAACnC,OAAO+B,IAAI,EAAE/B,OAAOoC,UAAU;YAE7D,+BAA+B;YAC/B,MAAMC,SAAS,IAAI,CAACC,SAAS,CAACtC,OAAO+B,IAAI,EAAE;YAE3C,+BAA+B;YAC/B,MAAMd,MAAM,IAAI,CAACsB,sBAAsB,CAACvC,QAAQ6B,UAAUf,OAAOuB;YAEjE,mBAAmB;YACnB,IAAI,CAACG,mBAAmB,CAACxC,OAAOyC,YAAY,EAAEzC,OAAO+B,IAAI,EAAEjB,OAAOuB;YAElE,OAAO;gBACLjC,SAASyB;gBACTnB,KAAK;gBACLC,QAAQ;gBACRV;gBACAoB,UAAU;oBACRU,MAAM/B,OAAO+B,IAAI;oBACjBK,YAAYpC,OAAOoC,UAAU;oBAC7BtB;oBACAD,UAAUb,OAAOyC,YAAY;gBAC/B;YACF;QACF,EAAE,OAAO7B,OAAO;YACd,OAAO;gBACLR,SAASyB;gBACTnB,KAAK,CAAC;gBACNC,QAAQ;gBACRV;gBACAW,OAAOA,iBAAiBa,QAAQb,MAAMc,OAAO,GAAGC,OAAOf;YACzD;QACF;IACF;IAEA;;GAEC,GACD,MAAMH,oBAAoBH,SAAiB,EAAoB;QAC7D,sEAAsE;QACtE,MAAMoC,aAAapC,UAAUqC,OAAO,CAAC,MAAM,KAAKC,WAAW;QAE3D,4CAA4C;QAC5C,MAAMC,gBAAgB;YACpB3D,QAAQ,IAAI,CAACS,gBAAgB,EAAE,GAAG+C,WAAW,GAAG,CAAC;YACjD,0BAA0B;eACvB,IAAI,CAACI,kBAAkB,CAACJ;SAC5B;QAED,OAAOG,cAAcE,IAAI,CAACC,CAAAA,OAAQhE,WAAWgE;IAC/C;IAEA;;GAEC,GACD,MAAMhC,mBAAmBV,SAAiB,EAA2B;QACnE,MAAM2C,YAAY,IAAI,CAACC,gBAAgB,CAAC5C;QAExC,IAAI,CAAC2C,WAAW;YACd,OAAO;gBACLpC,UAAU;gBACVC,OAAO;YACT;QACF;QAEA,IAAI;YACF,MAAMqC,UAAUlE,aAAagE,WAAW;YACxC,MAAMG,gBAAgBD,QAAQE,KAAK,CAAC;YAEpC,IAAID,eAAe;gBACjB,MAAME,SAASF,aAAa,CAAC,EAAE;gBAC/B,MAAMG,iBAAiBD,OAAOD,KAAK,CAAC;gBACpC,MAAMG,aAAaF,OAAOD,KAAK,CAAC;gBAEhC,OAAO;oBACLxC,UAAU0C,gBAAgB,CAAC,EAAE,IAAI;oBACjCzC,OAAO0C,YAAY,CAAC,EAAE,EAAEC,UAAU;gBACpC;YACF;QACF,EAAE,OAAO7C,OAAO;QACd,kBAAkB;QACpB;QAEA,OAAO;YACLC,UAAU;YACVC,OAAO;QACT;IACF;IAEA;;GAEC,GACD,AAAQT,gBAAgBC,SAAiB,EAAU;QACjD,MAAML,YAAYC,KAAKwD,GAAG;QAC1B,MAAMC,SAASC,KAAKD,MAAM,GAAGE,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG;QACvD,OAAO,CAAC,MAAM,EAAExD,UAAU,CAAC,EAAEL,UAAU,CAAC,EAAE0D,QAAQ;IACpD;IAEA;;GAEC,GACD,AAAQ7B,iBAAiBC,IAAY,EAAU;QAC7C,MAAMgC,OAAOzE,SAASwE,SAAS,CAAC,GAAG;QACnC,OAAO,CAAC,OAAO,EAAE/B,KAAK,CAAC,EAAEgC,MAAM;IACjC;IAEA;;GAEC,GACD,AAAQxD,oBAAoBP,MAAwB,EAAQ;QAC1D,MAAMgE,SAAmB,EAAE;QAE3B,IAAI,CAAChE,OAAOM,SAAS,IAAI,OAAON,OAAOM,SAAS,KAAK,UAAU;YAC7D0D,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAACjE,OAAOsB,MAAM,IAAI,OAAOtB,OAAOsB,MAAM,KAAK,UAAU;YACvD0C,OAAOC,IAAI,CAAC;QACd,OAAO;YACL,MAAMC,mBAAmB,IAAI,CAACC,cAAc,CAACnE,OAAOsB,MAAM;YAC1D,IAAI,CAAC4C,iBAAiBE,KAAK,EAAE;gBAC3BJ,OAAOC,IAAI,CAACC,iBAAiBtD,KAAK,IAAI;YACxC;QACF;QAEA,IAAIZ,OAAOuB,SAAS,KAAK8C,aAAa,OAAOrE,OAAOuB,SAAS,KAAK,UAAU;YAC1EyC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAO;YAAY;SAAa,CAACK,QAAQ,CAACtE,OAAOwB,IAAI,GAAG;YAC5DwC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAID,OAAOO,MAAM,GAAG,GAAG;YACrB,MAAM,IAAI9C,MAAM,CAAC,kCAAkC,EAAEuC,OAAOQ,IAAI,CAAC,OAAO;QAC1E;IACF;IAEA;;GAEC,GACD,AAAQxC,qBAAqBhC,MAAyB,EAAQ;QAC5D,MAAMgE,SAAmB,EAAE;QAE3B,IAAI,CAAChE,OAAO+B,IAAI,IAAI,OAAO/B,OAAO+B,IAAI,KAAK,UAAU;YACnDiC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAU;SAAU,CAACK,QAAQ,CAACtE,OAAOoC,UAAU,GAAG;YACtD4B,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAQ;YAAO;SAAY,CAACK,QAAQ,CAACtE,OAAOyC,YAAY,GAAG;YAC/DuB,OAAOC,IAAI,CAAC;QACd;QAEA,IAAID,OAAOO,MAAM,GAAG,GAAG;YACrB,MAAM,IAAI9C,MAAM,CAAC,yCAAyC,EAAEuC,OAAOQ,IAAI,CAAC,OAAO;QACjF;IACF;IAEA;;;;;;;;;GASC,GACD,AAAQL,eAAe7C,MAAc,EAAoB;QACvD,IAAI,OAAOA,WAAW,YAAYA,OAAOiD,MAAM,KAAK,GAAG;YACrD,OAAO;gBAAEH,OAAO;gBAAOxD,OAAO;YAAqC;QACrE;QAEA,6FAA6F;QAC7F,MAAM6D,gBAAgB;QACtB,IAAI,CAACA,cAAcC,IAAI,CAACpD,SAAS;YAC/B,OAAO;gBACL8C,OAAO;gBACPxD,OAAO;YACT;QACF;QAEA,OAAO;YAAEwD,OAAO;QAAK;IACvB;IAEA;;;;;;;;GAQC,GACD,AAAQlD,iBACNlB,MAAwB,EACxBI,OAAe,EACfS,QAAgB,EAChBC,KAAa,EACW;QACxB,MAAMG,MAA8B;YAClC,GAAGpB,QAAQoB,GAAG;YACd0D,UAAUvE;YACVwE,YAAY5E,OAAOM,SAAS;YAC5BuE,SAAS7E,OAAOsB,MAAM;YACtBwD,WAAWnD,OAAO3B,OAAOuB,SAAS;YAClCwD,MAAM/E,OAAOwB,IAAI;YACjB,gDAAgD;YAChDwD,UAAUnE;YACVoE,qBAAqBpE;YACrBqE,OAAOpE;YACPqE,YAAY,IAAIjF,OAAOC,WAAW;YAClCiF,cAAc,IAAI,CAAC1F,WAAW;YAC9B,6EAA6E;YAC7E2F,gBAAgB9F,YAAY,cAAc;YAC1C+F,gBAAgB/F,YAAY,cAAc;YAC1C,mFAAmF;YACnF,qFAAqF;YACrFgG,oBAAoB1F,QAAQoB,GAAG,CAACsE,kBAAkB,IAAI;YACtDC,kBAAkBhG,eAAe;QACnC;QAEA,8CAA8C;QAC9C,oFAAoF;QACpF,IAAIqB,aAAa,SAAShB,QAAQoB,GAAG,CAACwE,WAAW,EAAE;YACjDxE,IAAIwE,WAAW,GAAG5F,QAAQoB,GAAG,CAACwE,WAAW;QAC3C;QACA,IAAI5E,aAAa,UAAUhB,QAAQoB,GAAG,CAACyE,YAAY,EAAE;YACnDzE,IAAIyE,YAAY,GAAG7F,QAAQoB,GAAG,CAACyE,YAAY;QAC7C;QACA,IAAI7E,aAAa,gBAAgBhB,QAAQoB,GAAG,CAAC0E,kBAAkB,EAAE;YAC/D1E,IAAI0E,kBAAkB,GAAG9F,QAAQoB,GAAG,CAAC0E,kBAAkB;QACzD;QACA,IAAI9E,aAAa,eAAehB,QAAQoB,GAAG,CAAC2E,iBAAiB,EAAE;YAC7D3E,IAAI2E,iBAAiB,GAAG/F,QAAQoB,GAAG,CAAC2E,iBAAiB;QACvD;QAEA,4CAA4C;QAC5C,IAAI5F,OAAO6F,MAAM,EAAE;YACjB5E,IAAI6E,MAAM,GAAG9F,OAAO6F,MAAM;QAC5B;QAEA,4CAA4C;QAC5C,IAAI7F,OAAOiB,GAAG,EAAE;YACd8E,OAAOC,MAAM,CAAC/E,KAAKjB,OAAOiB,GAAG;QAC/B;QAEA,qCAAqC;QACrCgF,QAAQrF,KAAK,CAAC,CAAC,uCAAuC,EAAER,QAAQ,CAAC,CAAC;QAClE6F,QAAQrF,KAAK,CAAC,CAAC,2BAA2B,EAAEC,SAAS,sBAAsB,EAAEA,UAAU;QACvFoF,QAAQrF,KAAK,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAACK,IAAIwE,WAAW,EAAE;QACvEQ,QAAQrF,KAAK,CAAC,CAAC,oCAAoC,EAAE,CAAC,CAACK,IAAIyE,YAAY,EAAE;QACzEO,QAAQrF,KAAK,CAAC,CAAC,yCAAyC,EAAE,CAAC,CAACK,IAAI2E,iBAAiB,EAAE;QAEnF,OAAO3E;IACT;IAEA;;GAEC,GACD,AAAQsB,uBACNvC,MAAyB,EACzB6B,QAAgB,EAChBf,KAAa,EACbuB,MAAc,EACU;QACxB,MAAMpB,MAA8B;YAClC,GAAGpB,QAAQoB,GAAG;YACdiF,WAAWrE;YACXsE,MAAMnG,OAAO+B,IAAI;YACjBqE,YAAYpG,OAAOoC,UAAU;YAC7B8C,OAAOpE;YACPuF,SAAShE;YACT+C,cAAc,IAAI,CAAC1F,WAAW;QAChC;QAEA,IAAIM,OAAOM,SAAS,EAAE;YACpBW,IAAI2D,UAAU,GAAG5E,OAAOM,SAAS;QACnC;QAEA,IAAIN,OAAOsG,WAAW,EAAE;YACtBrF,IAAIsF,YAAY,GAAGvG,OAAOsG,WAAW;QACvC;QAEA,OAAOrF;IACT;IAEA;;GAEC,GACD,MAAcE,aACZb,SAAiB,EACjBW,GAA2B,EAC3BG,aAAsB,IAAI,EACT;QACjB,MAAMoF,OAAO;YACX;YACA;YAAgBlG;SACjB;QAED,MAAMmG,QAAQrH,WAAW,OAAOoH,MAAM;YACpCvF;YACAyF,OAAOtF,aAAa,WAAW;YAC/BuF,UAAUvF;QACZ;QAEA,MAAMV,MAAM+F,MAAM/F,GAAG,IAAI;QAEzB,IAAIU,YAAY;YACdqF,MAAMG,KAAK;QACb,OAAO;YACL,MAAM,IAAIC,QAAQ,CAAC3H,SAAS4H;gBAC1BL,MAAMM,EAAE,CAAC,QAAQ,CAACC;oBAChB,IAAIA,SAAS,GAAG;wBACdF,OAAO,IAAIrF,MAAM,CAAC,yBAAyB,EAAEuF,MAAM;oBACrD,OAAO;wBACL9H,QAAQmF;oBACV;gBACF;YACF;QACF;QAEA,OAAO3D;IACT;IAEA;;GAEC,GACD,AAAQwC,iBAAiB5C,SAAiB,EAAiB;QACzD,MAAMoC,aAAapC,UAAUqC,OAAO,CAAC,MAAM,KAAKC,WAAW;QAE3D,cAAc;QACd,MAAMqE,aAAa/H,QAAQ,IAAI,CAACS,gBAAgB,EAAE,GAAG+C,WAAW,GAAG,CAAC;QACpE,IAAI1D,WAAWiI,aAAa;YAC1B,OAAOA;QACT;QAEA,2BAA2B;QAC3B,MAAMC,UAAU;YACd;YAAc;YAAW;YAAa;YACtC;YAAW;YAAkB;YAAgB;YAAY;SAC1D;QAED,KAAK,MAAMC,UAAUD,QAAS;YAC5B,MAAMlE,OAAO9D,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQ,GAAGzE,WAAW,GAAG,CAAC;YACtE,IAAI1D,WAAWgE,OAAO;gBACpB,OAAOA;YACT;YAEA,8BAA8B;YAC9B,MAAMoE,aAAa;gBAAC;gBAAY;gBAAW;gBAAY;gBAAW;gBAAO;gBAAQ;gBAAc;aAAO;YACtG,KAAK,MAAMC,UAAUD,WAAY;gBAC/B,MAAME,aAAapI,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQE,QAAQ,GAAG3E,WAAW,GAAG,CAAC;gBACpF,IAAI1D,WAAWsI,aAAa;oBAC1B,OAAOA;gBACT;YACF;QACF;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQxE,mBAAmBJ,UAAkB,EAAY;QACvD,MAAM6E,QAAkB,EAAE;QAC1B,MAAML,UAAU;YACd;YAAc;YAAW;YAAa;YACtC;YAAW;YAAkB;YAAgB;YAAY;SAC1D;QAED,KAAK,MAAMC,UAAUD,QAAS;YAC5B,MAAMlE,OAAO9D,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQ,GAAGzE,WAAW,GAAG,CAAC;YACtE6E,MAAMtD,IAAI,CAACjB;YAEX,2BAA2B;YAC3B,MAAMoE,aAAa;gBAAC;gBAAY;gBAAW;gBAAY;gBAAW;gBAAO;gBAAQ;gBAAc;aAAO;YACtG,KAAK,MAAMC,UAAUD,WAAY;gBAC/BG,MAAMtD,IAAI,CAAC/E,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQE,QAAQ,GAAG3E,WAAW,GAAG,CAAC;YAC9E;QACF;QAEA,OAAO6E;IACT;IAEA;;GAEC,GACD,AAAQrF,eAAeH,IAAY,EAA2B;QAC5D,IAAI,CAAC/C,WAAW,IAAI,CAACY,eAAe,GAAG;YACrC,MAAM,IAAI6B,MAAM,CAAC,gCAAgC,EAAE,IAAI,CAAC7B,eAAe,EAAE;QAC3E;QAEA,MAAMuD,UAAUlE,aAAa,IAAI,CAACW,eAAe,EAAE;QACnD,MAAMI,SAASwH,KAAKC,KAAK,CAACtE;QAE1B,IAAI,CAACnD,OAAO0H,KAAK,IAAI,CAAC1H,OAAO0H,KAAK,CAAC3F,KAAK,EAAE;YACxC,MAAM,IAAIN,MAAM,CAAC,oDAAoD,EAAEM,MAAM;QAC/E;QAEA,OAAO/B,OAAO0H,KAAK,CAAC3F,KAAK;IAC3B;IAEA;;GAEC,GACD,AAAQI,YAAYJ,IAAY,EAAEK,UAAgC,EAAU;QAC1E,MAAMpC,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAM4F,UAAU3H,OAAO2H,OAAO;QAC9B,MAAMC,SAASD,SAASC;QAExB,IAAIA,UAAUA,MAAM,CAACxF,WAAW,EAAE;YAChC,OAAOwF,MAAM,CAACxF,WAAW;QAC3B;QAEA,iCAAiC;QACjC,MAAMyF,oBAAoB;QAC1B,IAAID,UAAUA,MAAM,CAACC,kBAAkB,EAAE;YACvC,OAAOD,MAAM,CAACC,kBAAkB;QAClC;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQvF,UAAUP,IAAY,EAAE+F,IAA+B,EAAU;QACvE,MAAM9H,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAMgG,aAAa/H,MAAM,CAAC8H,KAAK;QAE/B,IAAI,CAACC,YAAY;YACf,MAAM,IAAItG,MAAM,CAAC,gCAAgC,EAAEM,KAAK,OAAO,EAAE+F,MAAM;QACzE;QAEA,MAAME,eAAeD,WAAWC,YAAY;QAE5C,IAAI,CAACA,cAAc;YACjB,MAAM,IAAIvG,MAAM,CAAC,qCAAqC,EAAEM,KAAK,OAAO,EAAE+F,MAAM;QAC9E;QAEA,MAAMzF,SAASxC,QAAQoB,GAAG,CAAC+G,aAAa;QAExC,IAAI,CAAC3F,QAAQ;YACX,MAAM,IAAIZ,MAAM,CAAC,2CAA2C,EAAEuG,cAAc;QAC9E;QAEA,OAAO3F;IACT;IAEA;;GAEC,GACD,AAAQG,oBACNC,YAAoB,EACpBV,IAAY,EACZjB,KAAa,EACbuB,MAAc,EACR;QACN,MAAMrC,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAM4F,UAAU3H,OAAO2H,OAAO;QAC9B,MAAM9G,WAAW8G,SAAS9G;QAC1B,MAAMoH,UAAUN,SAASM;QAEzB,OAAQxF;YACN,KAAK;gBACH,IAAI,CAACyF,iBAAiB,CAACrH,UAAUoH,SAASnH,OAAOuB;gBACjD;YACF,KAAK;gBACHxC,QAAQoB,GAAG,CAACwE,WAAW,GAAGpD;gBAC1BxC,QAAQoB,GAAG,CAACkH,YAAY,GAAGF;gBAC3BpI,QAAQoB,GAAG,CAACmH,SAAS,GAAGtH;gBACxB;YACF,KAAK;gBACHjB,QAAQoB,GAAG,CAAC2E,iBAAiB,GAAGvD;gBAChCxC,QAAQoB,GAAG,CAACoH,kBAAkB,GAAGJ;gBACjCpI,QAAQoB,GAAG,CAACqH,eAAe,GAAGxH;gBAC9B;YACF;gBACE,MAAM,IAAIW,MAAM,CAAC,uBAAuB,EAAEgB,cAAc;QAC5D;IACF;IAEA;;GAEC,GACD,AAAQyF,kBAAkBrH,QAAgB,EAAEoH,OAAe,EAAEnH,KAAa,EAAEuB,MAAc,EAAQ;QAChG,OAAQxB;YACN,KAAK;gBACHhB,QAAQoB,GAAG,CAACwE,WAAW,GAAGpD;gBAC1BxC,QAAQoB,GAAG,CAACkH,YAAY,GAAGF;gBAC3BpI,QAAQoB,GAAG,CAACmH,SAAS,GAAGtH;gBACxB;YACF,KAAK;gBACHjB,QAAQoB,GAAG,CAAC2E,iBAAiB,GAAGvD;gBAChCxC,QAAQoB,GAAG,CAACoH,kBAAkB,GAAGJ;gBACjCpI,QAAQoB,GAAG,CAACqH,eAAe,GAAGxH;gBAC9B;YACF;gBACE,MAAM,IAAIW,MAAM,CAAC,sBAAsB,EAAEZ,UAAU;QACvD;IACF;AACF"}

package/dist/cli/agent-token-manager.js CHANGED Viewed

@@ -9,7 +9,8 @@ const path = require('path');
 let AgentTokenManager = class AgentTokenManager {
     constructor(options = {}){
         // Support CFN standard variables with fallback to legacy MCP_REDIS_URL
-        const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';
+        // FIX: Default to 'localhost' for CLI mode (host execution), not 'cfn-redis' (Docker)
+        const redisHost = process.env.CFN_REDIS_HOST || 'localhost';
         const redisPort = process.env.CFN_REDIS_PORT || '6379';
         const defaultUrl = `redis://${redisHost}:${redisPort}`;
         this.redisUrl = options.redisUrl || process.env.CFN_REDIS_URL || process.env.MCP_REDIS_URL || defaultUrl;

package/dist/cli/agent-token-manager.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/cli/agent-token-manager.js"],"sourcesContent":["#!/usr/bin/env node\r\n\r\n/*\r\n Agent Token Management CLI\r\n * Generate, register, and manage agent tokens for MCP authentication\r\n /\r\n\r\nconst crypto = require('crypto');\r\nconst Redis = require('redis');\r\nconst fs = require('fs').promises;\r\nconst path = require('path');\r\n\r\nclass AgentTokenManager {\r\n constructor(options = {}) {\r\n // Support CFN standard variables with fallback to legacy MCP_REDIS_URL\r\n const redisHost = process.env.CFN_REDIS_HOST \|\| 'cfn-redis';\r\n const redisPort = process.env.CFN_REDIS_PORT \|\| '6379';\r\n const defaultUrl = `redis://${redisHost}:${redisPort}`;\r\n this.redisUrl = options.redisUrl \|\| process.env.CFN_REDIS_URL \|\| process.env.MCP_REDIS_URL \|\| defaultUrl;\r\n this.redis = null;\r\n this.agentConfigPath = options.agentConfigPath \|\| './config/agent-whitelist.json';\r\n this.defaultExpiry = options.defaultExpiry \|\| '24h';\r\n }\r\n\r\n async initialize() {\r\n try {\r\n this.redis = Redis.createClient({ url: this.redisUrl });\r\n await this.redis.connect();\r\n console.log('Connected to Redis for token management');\r\n } catch (error) {\r\n console.error('Failed to connect to Redis:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n async loadAgentConfig() {\r\n try {\r\n const configPath = path.resolve(this.agentConfigPath);\r\n const config = await fs.readFile(configPath, 'utf8');\r\n return JSON.parse(config);\r\n } catch (error) {\r\n console.error('Failed to load agent config:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n generateToken() {\r\n return crypto.randomBytes(32).toString('hex');\r\n }\r\n\r\n parseExpiry(expiry) {\r\n if (typeof expiry === 'number') {\r\n return expiry;\r\n }\r\n\r\n const match = expiry.match(/^(\\d+)([smhd])$/);\r\n if (!match) {\r\n return 86400; // Default to 24 hours\r\n }\r\n\r\n const value = parseInt(match[1]);\r\n const unit = match[2];\r\n const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };\r\n\r\n return value (multipliers[unit] \|\| 86400);\r\n }\r\n\r\n async registerAgentToken(agentType, options = {}) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}. Available types: ${config.agents.map(a => a.type).join(', ')}`);\r\n }\r\n\r\n const token = this.generateToken();\r\n const expiresIn = options.expiresIn \|\| this.defaultExpiry;\r\n const expiresAt = Date.now() + (this.parseExpiry(expiresIn) * 1000);\r\n\r\n const tokenData = {\r\n token,\r\n agentType,\r\n displayName: agentConfig.displayName,\r\n skills: agentConfig.skills,\r\n allowedMcpServers: agentConfig.allowedMcpServers,\r\n resourceLimits: agentConfig.resourceLimits,\r\n expiresAt,\r\n createdAt: Date.now(),\r\n createdBy: options.createdBy \|\| 'cli',\r\n description: options.description \|\| `Token for ${agentConfig.displayName}`\r\n };\r\n\r\n // Store in Redis\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = JSON.stringify(tokenData);\r\n const ttlSeconds = this.parseExpiry(expiresIn);\r\n\r\n await this.redis.setEx(key, ttlSeconds, value);\r\n\r\n console.log(`✅ Token registered successfully!`);\r\n console.log(` Agent Type: ${agentConfig.displayName} (${agentType})`);\r\n console.log(` Token: ${token}`);\r\n console.log(` Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(` Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(` Expires: ${new Date(expiresAt).toISOString()}`);\r\n console.log(` Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(` Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n\r\n return tokenData;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to register token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listActiveTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:` : 'mcp:agent:';\r\n const keys = await this.redis.keys(pattern);\r\n const tokens = [];\r\n\r\n for (const key of keys) {\r\n const value = await this.redis.get(key);\r\n if (value) {\r\n const tokenData = JSON.parse(value);\r\n tokens.push({\r\n ...tokenData,\r\n key,\r\n status: tokenData.expiresAt > Date.now() ? 'active' : 'expired'\r\n });\r\n }\r\n }\r\n\r\n if (tokens.length === 0) {\r\n console.log('No active tokens found');\r\n return [];\r\n }\r\n\r\n console.log(`\\nActive Tokens (${tokens.length}):\\n`);\r\n console.log('Agent Type \| Token \| Expires At \| Status');\r\n console.log('-------------------\|------------------------------------\|------------------------------\|--------');\r\n\r\n for (const token of tokens) {\r\n const expiresAt = new Date(token.expiresAt).toISOString();\r\n const tokenShort = token.token.substring(0, 32);\r\n console.log(`${token.agentType.padEnd(17)} \| ${tokenShort} \| ${expiresAt} \| ${token.status}`);\r\n }\r\n\r\n return tokens;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const exists = await this.redis.exists(key);\r\n\r\n if (!exists) {\r\n throw new Error(`Token not found for agent ${agentType}`);\r\n }\r\n\r\n await this.redis.del(key);\r\n console.log(`✅ Token revoked successfully for agent ${agentType}`);\r\n console.log(` Token: ${token}`);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeAllTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:` : 'mcp:agent:';\r\n const keys = await this.redis.keys(pattern);\r\n\r\n if (keys.length === 0) {\r\n console.log('No tokens found to revoke');\r\n return 0;\r\n }\r\n\r\n await this.redis.del(keys);\r\n console.log(`✅ Revoked ${keys.length} tokens${agentType ? ` for agent ${agentType}` : ''}`);\r\n return keys.length;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async validateToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = await this.redis.get(key);\r\n\r\n if (!value) {\r\n return { valid: false, reason: 'Token not found' };\r\n }\r\n\r\n const tokenData = JSON.parse(value);\r\n\r\n if (Date.now() > tokenData.expiresAt) {\r\n await this.redis.del(key);\r\n return { valid: false, reason: 'Token expired' };\r\n }\r\n\r\n return {\r\n valid: true,\r\n tokenData\r\n };\r\n\r\n } catch (error) {\r\n return { valid: false, reason: error.message };\r\n }\r\n }\r\n\r\n async getAgentInfo(agentType) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}`);\r\n }\r\n\r\n console.log(`\\nAgent Information: ${agentConfig.displayName}`);\r\n console.log('='.repeat(50));\r\n console.log(`Type: ${agentConfig.type}`);\r\n console.log(`Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(`Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(`Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(`Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n console.log(`Max Concurrent: ${agentConfig.resourceLimits.maxConcurrentRequests}`);\r\n console.log(`Description: ${agentConfig.description}`);\r\n\r\n return agentConfig;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to get agent info:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listAgentTypes() {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n\r\n console.log(`\\nAvailable Agent Types (${config.agents.length}):\\n`);\r\n console.log('Agent Type \| Display Name \| Skills Count');\r\n console.log('------------------------\|--------------------------------\|-------------');\r\n\r\n for (const agent of config.agents) {\r\n const type = agent.type.padEnd(22);\r\n const name = agent.displayName.padEnd(32);\r\n const skills = agent.skills.length;\r\n console.log(`${type} \| ${name} \| ${skills}`);\r\n }\r\n\r\n return config.agents.map(a => a.type);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list agent types:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async shutdown() {\r\n if (this.redis) {\r\n await this.redis.quit();\r\n }\r\n }\r\n}\r\n\r\n// CLI interface\r\nasync function main() {\r\n const args = process.argv.slice(2);\r\n const command = args[0];\r\n\r\n if (!command) {\r\n console.log(`\r\nAgent Token Management CLI\r\n\r\nUsage: node agent-token-manager.js <command> [options]\r\n\r\nCommands:\r\n register <agent-type> [options] Register a new token for an agent\r\n list [agent-type] List active tokens\r\n revoke <agent-type> <token> Revoke a specific token\r\n revoke-all [agent-type] Revoke all tokens (optionally for specific agent)\r\n validate <agent-type> <token> Validate a token\r\n info <agent-type> Show agent information\r\n types List available agent types\r\n\r\nOptions for 'register' command:\r\n --expires-in <duration> Token expiry (e.g., 1h, 30m, 7d) [default: 24h]\r\n --description <text> Token description\r\n --created-by <identifier> Creator identifier\r\n\r\nExamples:\r\n # Register token for frontend engineer\r\n node agent-token-manager.js register react-frontend-engineer\r\n\r\n # Register token with custom expiry\r\n node agent-token-manager.js register backend-developer --expires-in 2h\r\n\r\n # List all active tokens\r\n node agent-token-manager.js list\r\n\r\n # List tokens for specific agent\r\n node agent-token-manager.js list react-frontend-engineer\r\n\r\n # Revoke a specific token\r\n node agent-token-manager.js revoke react-frontend-engineer abc123...\r\n\r\n # Get agent information\r\n node agent-token-manager.js info security-specialist\r\n`);\r\n process.exit(0);\r\n }\r\n\r\n const tokenManager = new AgentTokenManager();\r\n\r\n try {\r\n await tokenManager.initialize();\r\n\r\n switch (command) {\r\n case 'register': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for register command');\r\n }\r\n\r\n const options = {};\r\n for (let i = 2; i < args.length; i++) {\r\n if (args[i] === '--expires-in') {\r\n options.expiresIn = args[++i];\r\n } else if (args[i] === '--description') {\r\n options.description = args[++i];\r\n } else if (args[i] === '--created-by') {\r\n options.createdBy = args[++i];\r\n }\r\n }\r\n\r\n await tokenManager.registerAgentToken(agentType, options);\r\n break;\r\n }\r\n\r\n case 'list': {\r\n const agentType = args[1];\r\n await tokenManager.listActiveTokens(agentType);\r\n break;\r\n }\r\n\r\n case 'revoke': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType \|\| !token) {\r\n throw new Error('Agent type and token are required for revoke command');\r\n }\r\n await tokenManager.revokeToken(agentType, token);\r\n break;\r\n }\r\n\r\n case 'revoke-all': {\r\n const agentType = args[1];\r\n const count = await tokenManager.revokeAllTokens(agentType);\r\n console.log(`Revoked ${count} tokens`);\r\n break;\r\n }\r\n\r\n case 'validate': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType \|\| !token) {\r\n throw new Error('Agent type and token are required for validate command');\r\n }\r\n\r\n const result = await tokenManager.validateToken(agentType, token);\r\n if (result.valid) {\r\n console.log('✅ Token is valid');\r\n console.log(` Agent Type: ${result.tokenData.agentType}`);\r\n console.log(` Skills: ${result.tokenData.skills.join(', ')}`);\r\n console.log(` Expires: ${new Date(result.tokenData.expiresAt).toISOString()}`);\r\n } else {\r\n console.log('❌ Token is invalid');\r\n console.log(` Reason: ${result.reason}`);\r\n }\r\n break;\r\n }\r\n\r\n case 'info': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for info command');\r\n }\r\n await tokenManager.getAgentInfo(agentType);\r\n break;\r\n }\r\n\r\n case 'types': {\r\n await tokenManager.listAgentTypes();\r\n break;\r\n }\r\n\r\n default:\r\n throw new Error(`Unknown command: ${command}`);\r\n }\r\n\r\n } catch (error) {\r\n console.error('❌ Error:', error.message);\r\n process.exit(1);\r\n } finally {\r\n await tokenManager.shutdown();\r\n }\r\n}\r\n\r\nif (require.main === module) {\r\n main().catch(error => {\r\n console.error('Fatal error:', error);\r\n process.exit(1);\r\n });\r\n}\r\n\r\nmodule.exports = AgentTokenManager;"],"names":["crypto","require","Redis","fs","promises","path","AgentTokenManager","options","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","defaultUrl","redisUrl","CFN_REDIS_URL","MCP_REDIS_URL","redis","agentConfigPath","defaultExpiry","initialize","createClient","url","connect","console","log","error","loadAgentConfig","configPath","resolve","config","readFile","JSON","parse","generateToken","randomBytes","toString","parseExpiry","expiry","match","value","parseInt","unit","multipliers","s","m","h","d","registerAgentToken","agentType","agentConfig","agents","find","a","type","Error","map","join","token","expiresIn","expiresAt","Date","now","tokenData","displayName","skills","allowedMcpServers","resourceLimits","createdAt","createdBy","description","key","stringify","ttlSeconds","setEx","toISOString","maxMemoryMB","maxRequestsPerMinute","message","listActiveTokens","pattern","keys","tokens","get","push","status","length","tokenShort","substring","padEnd","revokeToken","exists","del","revokeAllTokens","validateToken","valid","reason","getAgentInfo","repeat","maxConcurrentRequests","listAgentTypes","agent","name","shutdown","quit","main","args","argv","slice","command","exit","tokenManager","i","count","result","module","catch","exports"],"mappings":";AAEA;;;CAGC,GAED,MAAMA,SAASC,QAAQ;AACvB,MAAMC,QAAQD,QAAQ;AACtB,MAAME,KAAKF,QAAQ,MAAMG,QAAQ;AACjC,MAAMC,OAAOJ,QAAQ;AAErB,IAAA,AAAMK,oBAAN,MAAMA;IACJ,YAAYC,UAAU,CAAC,CAAC,CAAE;QACxB,uEAAuE;QACvE,MAAMC,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;QAChD,MAAMC,aAAa,CAAC,QAAQ,EAAEN,UAAU,CAAC,EAAEI,WAAW;QACtD,IAAI,CAACG,QAAQ,GAAGR,QAAQQ,QAAQ,IAAIN,QAAQC,GAAG,CAACM,aAAa,IAAIP,QAAQC,GAAG,CAACO,aAAa,IAAIH;QAC9F,IAAI,CAACI,KAAK,GAAG;QACb,IAAI,CAACC,eAAe,GAAGZ,QAAQY,eAAe,IAAI;QAClD,IAAI,CAACC,aAAa,GAAGb,QAAQa,aAAa,IAAI;IAChD;IAEA,MAAMC,aAAa;QACjB,IAAI;YACF,IAAI,CAACH,KAAK,GAAGhB,MAAMoB,YAAY,CAAC;gBAAEC,KAAK,IAAI,CAACR,QAAQ;YAAC;YACrD,MAAM,IAAI,CAACG,KAAK,CAACM,OAAO;YACxBC,QAAQC,GAAG,CAAC;QACd,EAAE,OAAOC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA;YAC7C,MAAMA;QACR;IACF;IAEA,MAAMC,kBAAkB;QACtB,IAAI;YACF,MAAMC,aAAaxB,KAAKyB,OAAO,CAAC,IAAI,CAACX,eAAe;YACpD,MAAMY,SAAS,MAAM5B,GAAG6B,QAAQ,CAACH,YAAY;YAC7C,OAAOI,KAAKC,KAAK,CAACH;QACpB,EAAE,OAAOJ,OAAO;YACdF,QAAQE,KAAK,CAAC,gCAAgCA;YAC9C,MAAMA;QACR;IACF;IAEAQ,gBAAgB;QACd,OAAOnC,OAAOoC,WAAW,CAAC,IAAIC,QAAQ,CAAC;IACzC;IAEAC,YAAYC,MAAM,EAAE;QAClB,IAAI,OAAOA,WAAW,UAAU;YAC9B,OAAOA;QACT;QAEA,MAAMC,QAAQD,OAAOC,KAAK,CAAC;QAC3B,IAAI,CAACA,OAAO;YACV,OAAO,OAAO,sBAAsB;QACtC;QAEA,MAAMC,QAAQC,SAASF,KAAK,CAAC,EAAE;QAC/B,MAAMG,OAAOH,KAAK,CAAC,EAAE;QACrB,MAAMI,cAAc;YAAEC,GAAG;YAAGC,GAAG;YAAIC,GAAG;YAAMC,GAAG;QAAM;QAErD,OAAOP,QAASG,CAAAA,WAAW,CAACD,KAAK,IAAI,KAAI;IAC3C;IAEA,MAAMM,mBAAmBC,SAAS,EAAE3C,UAAU,CAAC,CAAC,EAAE;QAChD,IAAI;YACF,MAAMwB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,UAAU,mBAAmB,EAAEnB,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI,EAAEG,IAAI,CAAC,OAAO;YACnH;YAEA,MAAMC,QAAQ,IAAI,CAACxB,aAAa;YAChC,MAAMyB,YAAYrD,QAAQqD,SAAS,IAAI,IAAI,CAACxC,aAAa;YACzD,MAAMyC,YAAYC,KAAKC,GAAG,KAAM,IAAI,CAACzB,WAAW,CAACsB,aAAa;YAE9D,MAAMI,YAAY;gBAChBL;gBACAT;gBACAe,aAAad,YAAYc,WAAW;gBACpCC,QAAQf,YAAYe,MAAM;gBAC1BC,mBAAmBhB,YAAYgB,iBAAiB;gBAChDC,gBAAgBjB,YAAYiB,cAAc;gBAC1CP;gBACAQ,WAAWP,KAAKC,GAAG;gBACnBO,WAAW/D,QAAQ+D,SAAS,IAAI;gBAChCC,aAAahE,QAAQgE,WAAW,IAAI,CAAC,UAAU,EAAEpB,YAAYc,WAAW,EAAE;YAC5E;YAEA,iBAAiB;YACjB,MAAMO,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQR,KAAKwC,SAAS,CAACT;YAC7B,MAAMU,aAAa,IAAI,CAACpC,WAAW,CAACsB;YAEpC,MAAM,IAAI,CAAC1C,KAAK,CAACyD,KAAK,CAACH,KAAKE,YAAYjC;YAExChB,QAAQC,GAAG,CAAC,CAAC,gCAAgC,CAAC;YAC9CD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYc,WAAW,CAAC,EAAE,EAAEf,UAAU,CAAC,CAAC;YACtEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;YAChClC,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACzDjC,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YACjFjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKD,WAAWe,WAAW,IAAI;YAC9DnD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YAC1EpD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAEnF,OAAOd;QAET,EAAE,OAAOrC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAMqD,iBAAiB9B,YAAY,IAAI,EAAE;QACvC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YACnC,MAAME,SAAS,EAAE;YAEjB,KAAK,MAAMX,OAAOU,KAAM;gBACtB,MAAMzC,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;gBACnC,IAAI/B,OAAO;oBACT,MAAMuB,YAAY/B,KAAKC,KAAK,CAACO;oBAC7B0C,OAAOE,IAAI,CAAC;wBACV,GAAGrB,SAAS;wBACZQ;wBACAc,QAAQtB,UAAUH,SAAS,GAAGC,KAAKC,GAAG,KAAK,WAAW;oBACxD;gBACF;YACF;YAEA,IAAIoB,OAAOI,MAAM,KAAK,GAAG;gBACvB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO,EAAE;YACX;YAEAD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyD,OAAOI,MAAM,CAAC,IAAI,CAAC;YACnD9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAMiC,SAASwB,OAAQ;gBAC1B,MAAMtB,YAAY,IAAIC,KAAKH,MAAME,SAAS,EAAEe,WAAW;gBACvD,MAAMY,aAAa7B,MAAMA,KAAK,CAAC8B,SAAS,CAAC,GAAG;gBAC5ChE,QAAQC,GAAG,CAAC,GAAGiC,MAAMT,SAAS,CAACwC,MAAM,CAAC,IAAI,GAAG,EAAEF,WAAW,GAAG,EAAE3B,UAAU,GAAG,EAAEF,MAAM2B,MAAM,EAAE;YAC9F;YAEA,OAAOH;QAET,EAAE,OAAOxD,OAAO;YACdF,QAAQE,KAAK,CAAC,4BAA4BA,MAAMoD,OAAO;YACvD,MAAMpD;QACR;IACF;IAEA,MAAMgE,YAAYzC,SAAS,EAAES,KAAK,EAAE;QAClC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMiC,SAAS,MAAM,IAAI,CAAC1E,KAAK,CAAC0E,MAAM,CAACpB;YAEvC,IAAI,CAACoB,QAAQ;gBACX,MAAM,IAAIpC,MAAM,CAAC,0BAA0B,EAAEN,WAAW;YAC1D;YAEA,MAAM,IAAI,CAAChC,KAAK,CAAC2E,GAAG,CAACrB;YACrB/C,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEwB,WAAW;YACjEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;QAElC,EAAE,OAAOhC,OAAO;YACdF,QAAQE,KAAK,CAAC,6BAA6BA,MAAMoD,OAAO;YACxD,MAAMpD;QACR;IACF;IAEA,MAAMmE,gBAAgB5C,YAAY,IAAI,EAAE;QACtC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YAEnC,IAAIC,KAAKK,MAAM,KAAK,GAAG;gBACrB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO;YACT;YAEA,MAAM,IAAI,CAACR,KAAK,CAAC2E,GAAG,CAACX;YACrBzD,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEwD,KAAKK,MAAM,CAAC,OAAO,EAAErC,YAAY,CAAC,WAAW,EAAEA,WAAW,GAAG,IAAI;YAC1F,OAAOgC,KAAKK,MAAM;QAEpB,EAAE,OAAO5D,OAAO;YACdF,QAAQE,KAAK,CAAC,8BAA8BA,MAAMoD,OAAO;YACzD,MAAMpD;QACR;IACF;IAEA,MAAMoE,cAAc7C,SAAS,EAAES,KAAK,EAAE;QACpC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;YAEnC,IAAI,CAAC/B,OAAO;gBACV,OAAO;oBAAEuD,OAAO;oBAAOC,QAAQ;gBAAkB;YACnD;YAEA,MAAMjC,YAAY/B,KAAKC,KAAK,CAACO;YAE7B,IAAIqB,KAAKC,GAAG,KAAKC,UAAUH,SAAS,EAAE;gBACpC,MAAM,IAAI,CAAC3C,KAAK,CAAC2E,GAAG,CAACrB;gBACrB,OAAO;oBAAEwB,OAAO;oBAAOC,QAAQ;gBAAgB;YACjD;YAEA,OAAO;gBACLD,OAAO;gBACPhC;YACF;QAEF,EAAE,OAAOrC,OAAO;YACd,OAAO;gBAAEqE,OAAO;gBAAOC,QAAQtE,MAAMoD,OAAO;YAAC;QAC/C;IACF;IAEA,MAAMmB,aAAahD,SAAS,EAAE;QAC5B,IAAI;YACF,MAAMnB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,WAAW;YACpD;YAEAzB,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYc,WAAW,EAAE;YAC7DxC,QAAQC,GAAG,CAAC,IAAIyE,MAAM,CAAC;YACvB1E,QAAQC,GAAG,CAAC,CAAC,MAAM,EAAEyB,YAAYI,IAAI,EAAE;YACvC9B,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACtDjC,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YAC9EjC,QAAQC,GAAG,CAAC,CAAC,cAAc,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YACvEpD,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAChFrD,QAAQC,GAAG,CAAC,CAAC,gBAAgB,EAAEyB,YAAYiB,cAAc,CAACgC,qBAAqB,EAAE;YACjF3E,QAAQC,GAAG,CAAC,CAAC,aAAa,EAAEyB,YAAYoB,WAAW,EAAE;YAErD,OAAOpB;QAET,EAAE,OAAOxB,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAM0E,iBAAiB;QACrB,IAAI;YACF,MAAMtE,SAAS,MAAM,IAAI,CAACH,eAAe;YAEzCH,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEK,OAAOqB,MAAM,CAACmC,MAAM,CAAC,IAAI,CAAC;YAClE9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAM4E,SAASvE,OAAOqB,MAAM,CAAE;gBACjC,MAAMG,OAAO+C,MAAM/C,IAAI,CAACmC,MAAM,CAAC;gBAC/B,MAAMa,OAAOD,MAAMrC,WAAW,CAACyB,MAAM,CAAC;gBACtC,MAAMxB,SAASoC,MAAMpC,MAAM,CAACqB,MAAM;gBAClC9D,QAAQC,GAAG,CAAC,GAAG6B,KAAK,GAAG,EAAEgD,KAAK,GAAG,EAAErC,QAAQ;YAC7C;YAEA,OAAOnC,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI;QAEtC,EAAE,OAAO5B,OAAO;YACdF,QAAQE,KAAK,CAAC,iCAAiCA,MAAMoD,OAAO;YAC5D,MAAMpD;QACR;IACF;IAEA,MAAM6E,WAAW;QACf,IAAI,IAAI,CAACtF,KAAK,EAAE;YACd,MAAM,IAAI,CAACA,KAAK,CAACuF,IAAI;QACvB;IACF;AACF;AAEA,gBAAgB;AAChB,eAAeC;IACb,MAAMC,OAAOlG,QAAQmG,IAAI,CAACC,KAAK,CAAC;IAChC,MAAMC,UAAUH,IAAI,CAAC,EAAE;IAEvB,IAAI,CAACG,SAAS;QACZrF,QAAQC,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCjB,CAAC;QACGjB,QAAQsG,IAAI,CAAC;IACf;IAEA,MAAMC,eAAe,IAAI1G;IAEzB,IAAI;QACF,MAAM0G,aAAa3F,UAAU;QAE7B,OAAQyF;YACN,KAAK;gBAAY;oBACf,MAAM5D,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBAEA,MAAMjD,UAAU,CAAC;oBACjB,IAAK,IAAI0G,IAAI,GAAGA,IAAIN,KAAKpB,MAAM,EAAE0B,IAAK;wBACpC,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BAC9B1G,QAAQqD,SAAS,GAAG+C,IAAI,CAAC,EAAEM,EAAE;wBAC/B,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,iBAAiB;4BACtC1G,QAAQgE,WAAW,GAAGoC,IAAI,CAAC,EAAEM,EAAE;wBACjC,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BACrC1G,QAAQ+D,SAAS,GAAGqC,IAAI,CAAC,EAAEM,EAAE;wBAC/B;oBACF;oBAEA,MAAMD,aAAa/D,kBAAkB,CAACC,WAAW3C;oBACjD;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM2C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMK,aAAahC,gBAAgB,CAAC9B;oBACpC;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMA,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBACA,MAAMwD,aAAarB,WAAW,CAACzC,WAAWS;oBAC1C;gBACF;YAEA,KAAK;gBAAc;oBACjB,MAAMT,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMO,QAAQ,MAAMF,aAAalB,eAAe,CAAC5C;oBACjDzB,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEwF,MAAM,OAAO,CAAC;oBACrC;gBACF;YAEA,KAAK;gBAAY;oBACf,MAAMhE,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBAEA,MAAM2D,SAAS,MAAMH,aAAajB,aAAa,CAAC7C,WAAWS;oBAC3D,IAAIwD,OAAOnB,KAAK,EAAE;wBAChBvE,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyF,OAAOnD,SAAS,CAACd,SAAS,EAAE;wBAC1DzB,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOnD,SAAS,CAACE,MAAM,CAACR,IAAI,CAAC,OAAO;wBAC9DjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKqD,OAAOnD,SAAS,CAACH,SAAS,EAAEe,WAAW,IAAI;oBACjF,OAAO;wBACLnD,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOlB,MAAM,EAAE;oBAC3C;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM/C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBACA,MAAMwD,aAAad,YAAY,CAAChD;oBAChC;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAM8D,aAAaX,cAAc;oBACjC;gBACF;YAEA;gBACE,MAAM,IAAI7C,MAAM,CAAC,iBAAiB,EAAEsD,SAAS;QACjD;IAEF,EAAE,OAAOnF,OAAO;QACdF,QAAQE,KAAK,CAAC,YAAYA,MAAMoD,OAAO;QACvCtE,QAAQsG,IAAI,CAAC;IACf,SAAU;QACR,MAAMC,aAAaR,QAAQ;IAC7B;AACF;AAEA,IAAIvG,QAAQyG,IAAI,KAAKU,QAAQ;IAC3BV,OAAOW,KAAK,CAAC1F,CAAAA;QACXF,QAAQE,KAAK,CAAC,gBAAgBA;QAC9BlB,QAAQsG,IAAI,CAAC;IACf;AACF;AAEAK,OAAOE,OAAO,GAAGhH"}
1	+ {"version":3,"sources":["../../src/cli/agent-token-manager.js"],"sourcesContent":["#!/usr/bin/env node\r\n\r\n/*\r\n Agent Token Management CLI\r\n * Generate, register, and manage agent tokens for MCP authentication\r\n /\r\n\r\nconst crypto = require('crypto');\r\nconst Redis = require('redis');\r\nconst fs = require('fs').promises;\r\nconst path = require('path');\r\n\r\nclass AgentTokenManager {\r\n constructor(options = {}) {\r\n // Support CFN standard variables with fallback to legacy MCP_REDIS_URL\r\n // FIX: Default to 'localhost' for CLI mode (host execution), not 'cfn-redis' (Docker)\r\n const redisHost = process.env.CFN_REDIS_HOST \|\| 'localhost';\r\n const redisPort = process.env.CFN_REDIS_PORT \|\| '6379';\r\n const defaultUrl = `redis://${redisHost}:${redisPort}`;\r\n this.redisUrl = options.redisUrl \|\| process.env.CFN_REDIS_URL \|\| process.env.MCP_REDIS_URL \|\| defaultUrl;\r\n this.redis = null;\r\n this.agentConfigPath = options.agentConfigPath \|\| './config/agent-whitelist.json';\r\n this.defaultExpiry = options.defaultExpiry \|\| '24h';\r\n }\r\n\r\n async initialize() {\r\n try {\r\n this.redis = Redis.createClient({ url: this.redisUrl });\r\n await this.redis.connect();\r\n console.log('Connected to Redis for token management');\r\n } catch (error) {\r\n console.error('Failed to connect to Redis:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n async loadAgentConfig() {\r\n try {\r\n const configPath = path.resolve(this.agentConfigPath);\r\n const config = await fs.readFile(configPath, 'utf8');\r\n return JSON.parse(config);\r\n } catch (error) {\r\n console.error('Failed to load agent config:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n generateToken() {\r\n return crypto.randomBytes(32).toString('hex');\r\n }\r\n\r\n parseExpiry(expiry) {\r\n if (typeof expiry === 'number') {\r\n return expiry;\r\n }\r\n\r\n const match = expiry.match(/^(\\d+)([smhd])$/);\r\n if (!match) {\r\n return 86400; // Default to 24 hours\r\n }\r\n\r\n const value = parseInt(match[1]);\r\n const unit = match[2];\r\n const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };\r\n\r\n return value (multipliers[unit] \|\| 86400);\r\n }\r\n\r\n async registerAgentToken(agentType, options = {}) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}. Available types: ${config.agents.map(a => a.type).join(', ')}`);\r\n }\r\n\r\n const token = this.generateToken();\r\n const expiresIn = options.expiresIn \|\| this.defaultExpiry;\r\n const expiresAt = Date.now() + (this.parseExpiry(expiresIn) * 1000);\r\n\r\n const tokenData = {\r\n token,\r\n agentType,\r\n displayName: agentConfig.displayName,\r\n skills: agentConfig.skills,\r\n allowedMcpServers: agentConfig.allowedMcpServers,\r\n resourceLimits: agentConfig.resourceLimits,\r\n expiresAt,\r\n createdAt: Date.now(),\r\n createdBy: options.createdBy \|\| 'cli',\r\n description: options.description \|\| `Token for ${agentConfig.displayName}`\r\n };\r\n\r\n // Store in Redis\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = JSON.stringify(tokenData);\r\n const ttlSeconds = this.parseExpiry(expiresIn);\r\n\r\n await this.redis.setEx(key, ttlSeconds, value);\r\n\r\n console.log(`✅ Token registered successfully!`);\r\n console.log(` Agent Type: ${agentConfig.displayName} (${agentType})`);\r\n console.log(` Token: ${token}`);\r\n console.log(` Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(` Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(` Expires: ${new Date(expiresAt).toISOString()}`);\r\n console.log(` Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(` Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n\r\n return tokenData;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to register token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listActiveTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:` : 'mcp:agent:';\r\n const keys = await this.redis.keys(pattern);\r\n const tokens = [];\r\n\r\n for (const key of keys) {\r\n const value = await this.redis.get(key);\r\n if (value) {\r\n const tokenData = JSON.parse(value);\r\n tokens.push({\r\n ...tokenData,\r\n key,\r\n status: tokenData.expiresAt > Date.now() ? 'active' : 'expired'\r\n });\r\n }\r\n }\r\n\r\n if (tokens.length === 0) {\r\n console.log('No active tokens found');\r\n return [];\r\n }\r\n\r\n console.log(`\\nActive Tokens (${tokens.length}):\\n`);\r\n console.log('Agent Type \| Token \| Expires At \| Status');\r\n console.log('-------------------\|------------------------------------\|------------------------------\|--------');\r\n\r\n for (const token of tokens) {\r\n const expiresAt = new Date(token.expiresAt).toISOString();\r\n const tokenShort = token.token.substring(0, 32);\r\n console.log(`${token.agentType.padEnd(17)} \| ${tokenShort} \| ${expiresAt} \| ${token.status}`);\r\n }\r\n\r\n return tokens;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const exists = await this.redis.exists(key);\r\n\r\n if (!exists) {\r\n throw new Error(`Token not found for agent ${agentType}`);\r\n }\r\n\r\n await this.redis.del(key);\r\n console.log(`✅ Token revoked successfully for agent ${agentType}`);\r\n console.log(` Token: ${token}`);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeAllTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:` : 'mcp:agent:';\r\n const keys = await this.redis.keys(pattern);\r\n\r\n if (keys.length === 0) {\r\n console.log('No tokens found to revoke');\r\n return 0;\r\n }\r\n\r\n await this.redis.del(keys);\r\n console.log(`✅ Revoked ${keys.length} tokens${agentType ? ` for agent ${agentType}` : ''}`);\r\n return keys.length;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async validateToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = await this.redis.get(key);\r\n\r\n if (!value) {\r\n return { valid: false, reason: 'Token not found' };\r\n }\r\n\r\n const tokenData = JSON.parse(value);\r\n\r\n if (Date.now() > tokenData.expiresAt) {\r\n await this.redis.del(key);\r\n return { valid: false, reason: 'Token expired' };\r\n }\r\n\r\n return {\r\n valid: true,\r\n tokenData\r\n };\r\n\r\n } catch (error) {\r\n return { valid: false, reason: error.message };\r\n }\r\n }\r\n\r\n async getAgentInfo(agentType) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}`);\r\n }\r\n\r\n console.log(`\\nAgent Information: ${agentConfig.displayName}`);\r\n console.log('='.repeat(50));\r\n console.log(`Type: ${agentConfig.type}`);\r\n console.log(`Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(`Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(`Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(`Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n console.log(`Max Concurrent: ${agentConfig.resourceLimits.maxConcurrentRequests}`);\r\n console.log(`Description: ${agentConfig.description}`);\r\n\r\n return agentConfig;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to get agent info:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listAgentTypes() {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n\r\n console.log(`\\nAvailable Agent Types (${config.agents.length}):\\n`);\r\n console.log('Agent Type \| Display Name \| Skills Count');\r\n console.log('------------------------\|--------------------------------\|-------------');\r\n\r\n for (const agent of config.agents) {\r\n const type = agent.type.padEnd(22);\r\n const name = agent.displayName.padEnd(32);\r\n const skills = agent.skills.length;\r\n console.log(`${type} \| ${name} \| ${skills}`);\r\n }\r\n\r\n return config.agents.map(a => a.type);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list agent types:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async shutdown() {\r\n if (this.redis) {\r\n await this.redis.quit();\r\n }\r\n }\r\n}\r\n\r\n// CLI interface\r\nasync function main() {\r\n const args = process.argv.slice(2);\r\n const command = args[0];\r\n\r\n if (!command) {\r\n console.log(`\r\nAgent Token Management CLI\r\n\r\nUsage: node agent-token-manager.js <command> [options]\r\n\r\nCommands:\r\n register <agent-type> [options] Register a new token for an agent\r\n list [agent-type] List active tokens\r\n revoke <agent-type> <token> Revoke a specific token\r\n revoke-all [agent-type] Revoke all tokens (optionally for specific agent)\r\n validate <agent-type> <token> Validate a token\r\n info <agent-type> Show agent information\r\n types List available agent types\r\n\r\nOptions for 'register' command:\r\n --expires-in <duration> Token expiry (e.g., 1h, 30m, 7d) [default: 24h]\r\n --description <text> Token description\r\n --created-by <identifier> Creator identifier\r\n\r\nExamples:\r\n # Register token for frontend engineer\r\n node agent-token-manager.js register react-frontend-engineer\r\n\r\n # Register token with custom expiry\r\n node agent-token-manager.js register backend-developer --expires-in 2h\r\n\r\n # List all active tokens\r\n node agent-token-manager.js list\r\n\r\n # List tokens for specific agent\r\n node agent-token-manager.js list react-frontend-engineer\r\n\r\n # Revoke a specific token\r\n node agent-token-manager.js revoke react-frontend-engineer abc123...\r\n\r\n # Get agent information\r\n node agent-token-manager.js info security-specialist\r\n`);\r\n process.exit(0);\r\n }\r\n\r\n const tokenManager = new AgentTokenManager();\r\n\r\n try {\r\n await tokenManager.initialize();\r\n\r\n switch (command) {\r\n case 'register': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for register command');\r\n }\r\n\r\n const options = {};\r\n for (let i = 2; i < args.length; i++) {\r\n if (args[i] === '--expires-in') {\r\n options.expiresIn = args[++i];\r\n } else if (args[i] === '--description') {\r\n options.description = args[++i];\r\n } else if (args[i] === '--created-by') {\r\n options.createdBy = args[++i];\r\n }\r\n }\r\n\r\n await tokenManager.registerAgentToken(agentType, options);\r\n break;\r\n }\r\n\r\n case 'list': {\r\n const agentType = args[1];\r\n await tokenManager.listActiveTokens(agentType);\r\n break;\r\n }\r\n\r\n case 'revoke': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType \|\| !token) {\r\n throw new Error('Agent type and token are required for revoke command');\r\n }\r\n await tokenManager.revokeToken(agentType, token);\r\n break;\r\n }\r\n\r\n case 'revoke-all': {\r\n const agentType = args[1];\r\n const count = await tokenManager.revokeAllTokens(agentType);\r\n console.log(`Revoked ${count} tokens`);\r\n break;\r\n }\r\n\r\n case 'validate': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType \|\| !token) {\r\n throw new Error('Agent type and token are required for validate command');\r\n }\r\n\r\n const result = await tokenManager.validateToken(agentType, token);\r\n if (result.valid) {\r\n console.log('✅ Token is valid');\r\n console.log(` Agent Type: ${result.tokenData.agentType}`);\r\n console.log(` Skills: ${result.tokenData.skills.join(', ')}`);\r\n console.log(` Expires: ${new Date(result.tokenData.expiresAt).toISOString()}`);\r\n } else {\r\n console.log('❌ Token is invalid');\r\n console.log(` Reason: ${result.reason}`);\r\n }\r\n break;\r\n }\r\n\r\n case 'info': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for info command');\r\n }\r\n await tokenManager.getAgentInfo(agentType);\r\n break;\r\n }\r\n\r\n case 'types': {\r\n await tokenManager.listAgentTypes();\r\n break;\r\n }\r\n\r\n default:\r\n throw new Error(`Unknown command: ${command}`);\r\n }\r\n\r\n } catch (error) {\r\n console.error('❌ Error:', error.message);\r\n process.exit(1);\r\n } finally {\r\n await tokenManager.shutdown();\r\n }\r\n}\r\n\r\nif (require.main === module) {\r\n main().catch(error => {\r\n console.error('Fatal error:', error);\r\n process.exit(1);\r\n });\r\n}\r\n\r\nmodule.exports = AgentTokenManager;"],"names":["crypto","require","Redis","fs","promises","path","AgentTokenManager","options","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","defaultUrl","redisUrl","CFN_REDIS_URL","MCP_REDIS_URL","redis","agentConfigPath","defaultExpiry","initialize","createClient","url","connect","console","log","error","loadAgentConfig","configPath","resolve","config","readFile","JSON","parse","generateToken","randomBytes","toString","parseExpiry","expiry","match","value","parseInt","unit","multipliers","s","m","h","d","registerAgentToken","agentType","agentConfig","agents","find","a","type","Error","map","join","token","expiresIn","expiresAt","Date","now","tokenData","displayName","skills","allowedMcpServers","resourceLimits","createdAt","createdBy","description","key","stringify","ttlSeconds","setEx","toISOString","maxMemoryMB","maxRequestsPerMinute","message","listActiveTokens","pattern","keys","tokens","get","push","status","length","tokenShort","substring","padEnd","revokeToken","exists","del","revokeAllTokens","validateToken","valid","reason","getAgentInfo","repeat","maxConcurrentRequests","listAgentTypes","agent","name","shutdown","quit","main","args","argv","slice","command","exit","tokenManager","i","count","result","module","catch","exports"],"mappings":";AAEA;;;CAGC,GAED,MAAMA,SAASC,QAAQ;AACvB,MAAMC,QAAQD,QAAQ;AACtB,MAAME,KAAKF,QAAQ,MAAMG,QAAQ;AACjC,MAAMC,OAAOJ,QAAQ;AAErB,IAAA,AAAMK,oBAAN,MAAMA;IACJ,YAAYC,UAAU,CAAC,CAAC,CAAE;QACxB,uEAAuE;QACvE,sFAAsF;QACtF,MAAMC,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;QAChD,MAAMC,aAAa,CAAC,QAAQ,EAAEN,UAAU,CAAC,EAAEI,WAAW;QACtD,IAAI,CAACG,QAAQ,GAAGR,QAAQQ,QAAQ,IAAIN,QAAQC,GAAG,CAACM,aAAa,IAAIP,QAAQC,GAAG,CAACO,aAAa,IAAIH;QAC9F,IAAI,CAACI,KAAK,GAAG;QACb,IAAI,CAACC,eAAe,GAAGZ,QAAQY,eAAe,IAAI;QAClD,IAAI,CAACC,aAAa,GAAGb,QAAQa,aAAa,IAAI;IAChD;IAEA,MAAMC,aAAa;QACjB,IAAI;YACF,IAAI,CAACH,KAAK,GAAGhB,MAAMoB,YAAY,CAAC;gBAAEC,KAAK,IAAI,CAACR,QAAQ;YAAC;YACrD,MAAM,IAAI,CAACG,KAAK,CAACM,OAAO;YACxBC,QAAQC,GAAG,CAAC;QACd,EAAE,OAAOC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA;YAC7C,MAAMA;QACR;IACF;IAEA,MAAMC,kBAAkB;QACtB,IAAI;YACF,MAAMC,aAAaxB,KAAKyB,OAAO,CAAC,IAAI,CAACX,eAAe;YACpD,MAAMY,SAAS,MAAM5B,GAAG6B,QAAQ,CAACH,YAAY;YAC7C,OAAOI,KAAKC,KAAK,CAACH;QACpB,EAAE,OAAOJ,OAAO;YACdF,QAAQE,KAAK,CAAC,gCAAgCA;YAC9C,MAAMA;QACR;IACF;IAEAQ,gBAAgB;QACd,OAAOnC,OAAOoC,WAAW,CAAC,IAAIC,QAAQ,CAAC;IACzC;IAEAC,YAAYC,MAAM,EAAE;QAClB,IAAI,OAAOA,WAAW,UAAU;YAC9B,OAAOA;QACT;QAEA,MAAMC,QAAQD,OAAOC,KAAK,CAAC;QAC3B,IAAI,CAACA,OAAO;YACV,OAAO,OAAO,sBAAsB;QACtC;QAEA,MAAMC,QAAQC,SAASF,KAAK,CAAC,EAAE;QAC/B,MAAMG,OAAOH,KAAK,CAAC,EAAE;QACrB,MAAMI,cAAc;YAAEC,GAAG;YAAGC,GAAG;YAAIC,GAAG;YAAMC,GAAG;QAAM;QAErD,OAAOP,QAASG,CAAAA,WAAW,CAACD,KAAK,IAAI,KAAI;IAC3C;IAEA,MAAMM,mBAAmBC,SAAS,EAAE3C,UAAU,CAAC,CAAC,EAAE;QAChD,IAAI;YACF,MAAMwB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,UAAU,mBAAmB,EAAEnB,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI,EAAEG,IAAI,CAAC,OAAO;YACnH;YAEA,MAAMC,QAAQ,IAAI,CAACxB,aAAa;YAChC,MAAMyB,YAAYrD,QAAQqD,SAAS,IAAI,IAAI,CAACxC,aAAa;YACzD,MAAMyC,YAAYC,KAAKC,GAAG,KAAM,IAAI,CAACzB,WAAW,CAACsB,aAAa;YAE9D,MAAMI,YAAY;gBAChBL;gBACAT;gBACAe,aAAad,YAAYc,WAAW;gBACpCC,QAAQf,YAAYe,MAAM;gBAC1BC,mBAAmBhB,YAAYgB,iBAAiB;gBAChDC,gBAAgBjB,YAAYiB,cAAc;gBAC1CP;gBACAQ,WAAWP,KAAKC,GAAG;gBACnBO,WAAW/D,QAAQ+D,SAAS,IAAI;gBAChCC,aAAahE,QAAQgE,WAAW,IAAI,CAAC,UAAU,EAAEpB,YAAYc,WAAW,EAAE;YAC5E;YAEA,iBAAiB;YACjB,MAAMO,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQR,KAAKwC,SAAS,CAACT;YAC7B,MAAMU,aAAa,IAAI,CAACpC,WAAW,CAACsB;YAEpC,MAAM,IAAI,CAAC1C,KAAK,CAACyD,KAAK,CAACH,KAAKE,YAAYjC;YAExChB,QAAQC,GAAG,CAAC,CAAC,gCAAgC,CAAC;YAC9CD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYc,WAAW,CAAC,EAAE,EAAEf,UAAU,CAAC,CAAC;YACtEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;YAChClC,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACzDjC,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YACjFjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKD,WAAWe,WAAW,IAAI;YAC9DnD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YAC1EpD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAEnF,OAAOd;QAET,EAAE,OAAOrC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAMqD,iBAAiB9B,YAAY,IAAI,EAAE;QACvC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YACnC,MAAME,SAAS,EAAE;YAEjB,KAAK,MAAMX,OAAOU,KAAM;gBACtB,MAAMzC,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;gBACnC,IAAI/B,OAAO;oBACT,MAAMuB,YAAY/B,KAAKC,KAAK,CAACO;oBAC7B0C,OAAOE,IAAI,CAAC;wBACV,GAAGrB,SAAS;wBACZQ;wBACAc,QAAQtB,UAAUH,SAAS,GAAGC,KAAKC,GAAG,KAAK,WAAW;oBACxD;gBACF;YACF;YAEA,IAAIoB,OAAOI,MAAM,KAAK,GAAG;gBACvB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO,EAAE;YACX;YAEAD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyD,OAAOI,MAAM,CAAC,IAAI,CAAC;YACnD9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAMiC,SAASwB,OAAQ;gBAC1B,MAAMtB,YAAY,IAAIC,KAAKH,MAAME,SAAS,EAAEe,WAAW;gBACvD,MAAMY,aAAa7B,MAAMA,KAAK,CAAC8B,SAAS,CAAC,GAAG;gBAC5ChE,QAAQC,GAAG,CAAC,GAAGiC,MAAMT,SAAS,CAACwC,MAAM,CAAC,IAAI,GAAG,EAAEF,WAAW,GAAG,EAAE3B,UAAU,GAAG,EAAEF,MAAM2B,MAAM,EAAE;YAC9F;YAEA,OAAOH;QAET,EAAE,OAAOxD,OAAO;YACdF,QAAQE,KAAK,CAAC,4BAA4BA,MAAMoD,OAAO;YACvD,MAAMpD;QACR;IACF;IAEA,MAAMgE,YAAYzC,SAAS,EAAES,KAAK,EAAE;QAClC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMiC,SAAS,MAAM,IAAI,CAAC1E,KAAK,CAAC0E,MAAM,CAACpB;YAEvC,IAAI,CAACoB,QAAQ;gBACX,MAAM,IAAIpC,MAAM,CAAC,0BAA0B,EAAEN,WAAW;YAC1D;YAEA,MAAM,IAAI,CAAChC,KAAK,CAAC2E,GAAG,CAACrB;YACrB/C,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEwB,WAAW;YACjEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;QAElC,EAAE,OAAOhC,OAAO;YACdF,QAAQE,KAAK,CAAC,6BAA6BA,MAAMoD,OAAO;YACxD,MAAMpD;QACR;IACF;IAEA,MAAMmE,gBAAgB5C,YAAY,IAAI,EAAE;QACtC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YAEnC,IAAIC,KAAKK,MAAM,KAAK,GAAG;gBACrB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO;YACT;YAEA,MAAM,IAAI,CAACR,KAAK,CAAC2E,GAAG,CAACX;YACrBzD,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEwD,KAAKK,MAAM,CAAC,OAAO,EAAErC,YAAY,CAAC,WAAW,EAAEA,WAAW,GAAG,IAAI;YAC1F,OAAOgC,KAAKK,MAAM;QAEpB,EAAE,OAAO5D,OAAO;YACdF,QAAQE,KAAK,CAAC,8BAA8BA,MAAMoD,OAAO;YACzD,MAAMpD;QACR;IACF;IAEA,MAAMoE,cAAc7C,SAAS,EAAES,KAAK,EAAE;QACpC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;YAEnC,IAAI,CAAC/B,OAAO;gBACV,OAAO;oBAAEuD,OAAO;oBAAOC,QAAQ;gBAAkB;YACnD;YAEA,MAAMjC,YAAY/B,KAAKC,KAAK,CAACO;YAE7B,IAAIqB,KAAKC,GAAG,KAAKC,UAAUH,SAAS,EAAE;gBACpC,MAAM,IAAI,CAAC3C,KAAK,CAAC2E,GAAG,CAACrB;gBACrB,OAAO;oBAAEwB,OAAO;oBAAOC,QAAQ;gBAAgB;YACjD;YAEA,OAAO;gBACLD,OAAO;gBACPhC;YACF;QAEF,EAAE,OAAOrC,OAAO;YACd,OAAO;gBAAEqE,OAAO;gBAAOC,QAAQtE,MAAMoD,OAAO;YAAC;QAC/C;IACF;IAEA,MAAMmB,aAAahD,SAAS,EAAE;QAC5B,IAAI;YACF,MAAMnB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,WAAW;YACpD;YAEAzB,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYc,WAAW,EAAE;YAC7DxC,QAAQC,GAAG,CAAC,IAAIyE,MAAM,CAAC;YACvB1E,QAAQC,GAAG,CAAC,CAAC,MAAM,EAAEyB,YAAYI,IAAI,EAAE;YACvC9B,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACtDjC,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YAC9EjC,QAAQC,GAAG,CAAC,CAAC,cAAc,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YACvEpD,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAChFrD,QAAQC,GAAG,CAAC,CAAC,gBAAgB,EAAEyB,YAAYiB,cAAc,CAACgC,qBAAqB,EAAE;YACjF3E,QAAQC,GAAG,CAAC,CAAC,aAAa,EAAEyB,YAAYoB,WAAW,EAAE;YAErD,OAAOpB;QAET,EAAE,OAAOxB,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAM0E,iBAAiB;QACrB,IAAI;YACF,MAAMtE,SAAS,MAAM,IAAI,CAACH,eAAe;YAEzCH,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEK,OAAOqB,MAAM,CAACmC,MAAM,CAAC,IAAI,CAAC;YAClE9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAM4E,SAASvE,OAAOqB,MAAM,CAAE;gBACjC,MAAMG,OAAO+C,MAAM/C,IAAI,CAACmC,MAAM,CAAC;gBAC/B,MAAMa,OAAOD,MAAMrC,WAAW,CAACyB,MAAM,CAAC;gBACtC,MAAMxB,SAASoC,MAAMpC,MAAM,CAACqB,MAAM;gBAClC9D,QAAQC,GAAG,CAAC,GAAG6B,KAAK,GAAG,EAAEgD,KAAK,GAAG,EAAErC,QAAQ;YAC7C;YAEA,OAAOnC,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI;QAEtC,EAAE,OAAO5B,OAAO;YACdF,QAAQE,KAAK,CAAC,iCAAiCA,MAAMoD,OAAO;YAC5D,MAAMpD;QACR;IACF;IAEA,MAAM6E,WAAW;QACf,IAAI,IAAI,CAACtF,KAAK,EAAE;YACd,MAAM,IAAI,CAACA,KAAK,CAACuF,IAAI;QACvB;IACF;AACF;AAEA,gBAAgB;AAChB,eAAeC;IACb,MAAMC,OAAOlG,QAAQmG,IAAI,CAACC,KAAK,CAAC;IAChC,MAAMC,UAAUH,IAAI,CAAC,EAAE;IAEvB,IAAI,CAACG,SAAS;QACZrF,QAAQC,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCjB,CAAC;QACGjB,QAAQsG,IAAI,CAAC;IACf;IAEA,MAAMC,eAAe,IAAI1G;IAEzB,IAAI;QACF,MAAM0G,aAAa3F,UAAU;QAE7B,OAAQyF;YACN,KAAK;gBAAY;oBACf,MAAM5D,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBAEA,MAAMjD,UAAU,CAAC;oBACjB,IAAK,IAAI0G,IAAI,GAAGA,IAAIN,KAAKpB,MAAM,EAAE0B,IAAK;wBACpC,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BAC9B1G,QAAQqD,SAAS,GAAG+C,IAAI,CAAC,EAAEM,EAAE;wBAC/B,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,iBAAiB;4BACtC1G,QAAQgE,WAAW,GAAGoC,IAAI,CAAC,EAAEM,EAAE;wBACjC,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BACrC1G,QAAQ+D,SAAS,GAAGqC,IAAI,CAAC,EAAEM,EAAE;wBAC/B;oBACF;oBAEA,MAAMD,aAAa/D,kBAAkB,CAACC,WAAW3C;oBACjD;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM2C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMK,aAAahC,gBAAgB,CAAC9B;oBACpC;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMA,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBACA,MAAMwD,aAAarB,WAAW,CAACzC,WAAWS;oBAC1C;gBACF;YAEA,KAAK;gBAAc;oBACjB,MAAMT,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMO,QAAQ,MAAMF,aAAalB,eAAe,CAAC5C;oBACjDzB,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEwF,MAAM,OAAO,CAAC;oBACrC;gBACF;YAEA,KAAK;gBAAY;oBACf,MAAMhE,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBAEA,MAAM2D,SAAS,MAAMH,aAAajB,aAAa,CAAC7C,WAAWS;oBAC3D,IAAIwD,OAAOnB,KAAK,EAAE;wBAChBvE,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyF,OAAOnD,SAAS,CAACd,SAAS,EAAE;wBAC1DzB,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOnD,SAAS,CAACE,MAAM,CAACR,IAAI,CAAC,OAAO;wBAC9DjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKqD,OAAOnD,SAAS,CAACH,SAAS,EAAEe,WAAW,IAAI;oBACjF,OAAO;wBACLnD,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOlB,MAAM,EAAE;oBAC3C;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM/C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBACA,MAAMwD,aAAad,YAAY,CAAChD;oBAChC;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAM8D,aAAaX,cAAc;oBACjC;gBACF;YAEA;gBACE,MAAM,IAAI7C,MAAM,CAAC,iBAAiB,EAAEsD,SAAS;QACjD;IAEF,EAAE,OAAOnF,OAAO;QACdF,QAAQE,KAAK,CAAC,YAAYA,MAAMoD,OAAO;QACvCtE,QAAQsG,IAAI,CAAC;IACf,SAAU;QACR,MAAMC,aAAaR,QAAQ;IAC7B;AACF;AAEA,IAAIvG,QAAQyG,IAAI,KAAKU,QAAQ;IAC3BV,OAAOW,KAAK,CAAC1F,CAAAA;QACXF,QAAQE,KAAK,CAAC,gBAAgBA;QAC9BlB,QAAQsG,IAAI,CAAC;IACf;AACF;AAEAK,OAAOE,OAAO,GAAGhH"}

package/dist/cli/anthropic-client.js CHANGED Viewed

@@ -5,17 +5,47 @@
  * Supports streaming responses and tool execution.
  */ import Anthropic from '@anthropic-ai/sdk';
 import fs from 'fs/promises';
+import fsSync from 'fs';
 import path from 'path';
 import { exec } from 'child_process';
 import { promisify } from 'util';
 import { executeTool } from './tool-executor.js';
 const execAsync = promisify(exec);
+// File-based debug logging (for background agents)
+const AGENT_ID = process.env.AGENT_ID || 'unknown';
+const API_LOG_FILE = `/tmp/cfn-api-${AGENT_ID}.log`;
+function apiDebugLog(message, data) {
+    const timestamp = new Date().toISOString();
+    const logEntry = data ? `${timestamp} [${AGENT_ID}] ${message} ${JSON.stringify(data)}\n` : `${timestamp} [${AGENT_ID}] ${message}\n`;
+    try {
+        fsSync.appendFileSync(API_LOG_FILE, logEntry);
+    } catch (err) {
+    // Ignore logging errors
+    }
+}
 /**
  * Get API configuration from environment and config files
+ *
+ * Provider resolution order:
+ * 1. CLAUDE_API_PROVIDER env var (legacy)
+ * 2. PROVIDER env var (set by agent-spawner from --provider flag)
+ * 3. Config file (.claude/config/api-provider.json)
+ * 4. Default to Z.ai (cost-effective fallback per project requirements)
+ *
+ * BUG FIX: Previously only checked CLAUDE_API_PROVIDER, ignoring --provider flag
+ * which sets PROVIDER env var via agent-spawner.ts
  */ export async function getAPIConfig() {
-    // Check environment variable
-    const envProvider = process.env.CLAUDE_API_PROVIDER;
-    if (envProvider === 'zai') {
+    // Check environment variables - support both CLAUDE_API_PROVIDER (legacy) and PROVIDER (from CLI --provider flag)
+    const envProvider = process.env.CLAUDE_API_PROVIDER || process.env.PROVIDER;
+    // Debug logging for provider routing (helps diagnose auth errors)
+    apiDebugLog('getAPIConfig: Provider detection', {
+        CLAUDE_API_PROVIDER: process.env.CLAUDE_API_PROVIDER,
+        PROVIDER: process.env.PROVIDER,
+        resolved: envProvider
+    });
+    console.error(`[provider-routing] CLAUDE_API_PROVIDER=${process.env.CLAUDE_API_PROVIDER || 'unset'}, PROVIDER=${process.env.PROVIDER || 'unset'}, resolved=${envProvider || 'none'}`);
+    if (envProvider === 'zai' || envProvider === 'z.ai') {
+        console.error('[provider-routing] Using Z.ai provider');
         return {
             provider: 'zai',
             apiKey: process.env.ZAI_API_KEY || process.env.ANTHROPIC_API_KEY,
@@ -23,6 +53,7 @@ const execAsync = promisify(exec);
         };
     }
     if (envProvider === 'kimi') {
+        console.error('[provider-routing] Using Kimi provider');
         return {
             provider: 'kimi',
             apiKey: process.env.KIMI_API_KEY,
@@ -30,17 +61,26 @@ const execAsync = promisify(exec);
         };
     }
     if (envProvider === 'openrouter') {
+        console.error('[provider-routing] Using OpenRouter provider');
         return {
             provider: 'openrouter',
             apiKey: process.env.OPENROUTER_API_KEY,
             baseURL: process.env.OPENROUTER_BASE_URL || 'https://openrouter.ai/api/v1'
         };
     }
+    if (envProvider === 'anthropic') {
+        console.error('[provider-routing] Using Anthropic provider (explicit)');
+        return {
+            provider: 'anthropic',
+            apiKey: process.env.ANTHROPIC_API_KEY
+        };
+    }
     // Check config file
     try {
         const configPath = path.join('.claude', 'config', 'api-provider.json');
         const config = JSON.parse(await fs.readFile(configPath, 'utf-8'));
         if (config.provider === 'zai' || config.provider === 'z.ai') {
+            console.error('[provider-routing] Using Z.ai provider (from config file)');
             return {
                 provider: 'zai',
                 apiKey: config.apiKey || process.env.ZAI_API_KEY || process.env.ANTHROPIC_API_KEY,
@@ -48,6 +88,7 @@ const execAsync = promisify(exec);
             };
         }
         if (config.provider === 'kimi') {
+            console.error('[provider-routing] Using Kimi provider (from config file)');
             return {
                 provider: 'kimi',
                 apiKey: config.apiKey || process.env.KIMI_API_KEY,
@@ -55,36 +96,76 @@ const execAsync = promisify(exec);
             };
         }
         if (config.provider === 'openrouter') {
+            console.error('[provider-routing] Using OpenRouter provider (from config file)');
             return {
                 provider: 'openrouter',
                 apiKey: config.apiKey || process.env.OPENROUTER_API_KEY,
                 baseURL: config.baseURL || process.env.OPENROUTER_BASE_URL || 'https://openrouter.ai/api/v1'
             };
         }
+        if (config.provider === 'anthropic') {
+            console.error('[provider-routing] Using Anthropic provider (from config file)');
+            return {
+                provider: 'anthropic',
+                apiKey: config.apiKey || process.env.ANTHROPIC_API_KEY
+            };
+        }
     } catch  {
     // Config file doesn't exist, use defaults
     }
-    // Default to Anthropic
+    // Default to Z.ai (cost-effective fallback per project requirements)
+    // BUG FIX: Previously defaulted to Anthropic which caused auth errors when no provider specified
+    console.error('[provider-routing] Using Z.ai provider (default fallback)');
     return {
-        provider: 'anthropic',
-        apiKey: process.env.ANTHROPIC_API_KEY
+        provider: 'zai',
+        apiKey: process.env.ZAI_API_KEY || process.env.ANTHROPIC_API_KEY,
+        baseURL: process.env.ZAI_BASE_URL || 'https://api.z.ai/api/anthropic'
     };
 }
+/**
+ * Validate provider configuration before creating client
+ * Provides clear error messages for missing credentials
+ */ export function validateProviderConfig(config) {
+    if (!config.apiKey) {
+        const envVarMap = {
+            'zai': 'ZAI_API_KEY (or ANTHROPIC_API_KEY)',
+            'anthropic': 'ANTHROPIC_API_KEY',
+            'kimi': 'KIMI_API_KEY',
+            'openrouter': 'OPENROUTER_API_KEY'
+        };
+        const requiredVar = envVarMap[config.provider] || `${config.provider.toUpperCase()}_API_KEY`;
+        throw new Error(`[provider-validation] API key not found for provider '${config.provider}'. ` + `Set the ${requiredVar} environment variable.\n` + `Tip: If using --provider flag, ensure the corresponding API key is exported.`);
+    }
+    // Provider-specific validation
+    if (config.provider === 'kimi' || config.provider === 'openrouter') {
+        console.error(`[provider-validation] WARNING: Provider '${config.provider}' uses OpenAI-compatible API format.`);
+        console.error(`[provider-validation] The current implementation uses Anthropic SDK which may not be compatible.`);
+        console.error(`[provider-validation] Consider using provider 'zai' or 'anthropic' for now.`);
+    }
+}
 /**
  * Create Anthropic client with appropriate configuration
+ *
+ * Supports providers that use Anthropic-compatible API format:
+ * - anthropic: Direct Anthropic API
+ * - zai: Z.ai proxy (Anthropic-compatible)
+ *
+ * For OpenAI-compatible providers (kimi, openrouter), this client
+ * may not work correctly. Future enhancement: add OpenAI client support.
  */ export async function createClient() {
     const config = await getAPIConfig();
-    if (!config.apiKey) {
-        throw new Error(`API key not found. Set ${config.provider === 'zai' ? 'ZAI_API_KEY' : 'ANTHROPIC_API_KEY'} environment variable.`);
-    }
+    // Validate configuration before attempting API call
+    validateProviderConfig(config);
     const clientOptions = {
         apiKey: config.apiKey,
         timeout: 120000,
         maxRetries: 2
     };
-    if (config.provider === 'zai' && config.baseURL) {
+    // Z.ai uses Anthropic-compatible API format with custom base URL
+    if ((config.provider === 'zai' || config.provider === 'anthropic') && config.baseURL) {
         clientOptions.baseURL = config.baseURL;
     }
+    console.error(`[anthropic-client] Creating client for provider: ${config.provider}`);
     return new Anthropic(clientOptions);
 }
 /**
@@ -124,8 +205,8 @@ const execAsync = promisify(exec);
     let model = mapModelName(options.model, config.provider);
     const maxTokens = options.maxTokens || 16000; // Sprint 6: 16K hard limit for GLM-4.6 (agents target 10K for buffer)
     const temperature = options.temperature ?? 1.0;
-    // Disable streaming for Z.ai (compatibility issue)
-    const enableStreaming = options.stream && config.provider !== 'zai';
+    // Streaming supported for both providers; retry without streaming if a provider rejects it
+    let enableStreaming = !!options.stream;
     console.log(`[anthropic-client] Provider: ${config.provider}`);
     console.log(`[anthropic-client] Model: ${model}`);
     console.log(`[anthropic-client] Max tokens: ${maxTokens}`);
@@ -168,7 +249,7 @@ const execAsync = promisify(exec);
             requestParams.tools = options.tools;
         }
         try {
-            // Streaming response
+            // Streaming response (preferred)
             if (enableStreaming) {
                 let fullContent = '';
                 let inputTokens = 0;
@@ -220,6 +301,13 @@ const execAsync = promisify(exec);
                 stopReason: response.stop_reason || 'end_turn'
             };
         } catch (error) {
+            // If streaming fails on Z.ai, retry once without streaming before falling back to model fallback logic
+            if (enableStreaming && config.provider === 'zai') {
+                console.warn('[anthropic-client] Streaming failed on z.ai, retrying without streaming:', error);
+                enableStreaming = false;
+                attempts--; // do not consume a model attempt
+                continue;
+            }
             lastError = error instanceof Error ? error : new Error(String(error));
             console.error(`[anthropic-client] Error with model ${currentModel}:`, lastError.message);
             // If this was the last attempt, throw the error
@@ -279,11 +367,22 @@ const execAsync = promisify(exec);
         }
         // Make API request (non-streaming for now to handle tool_use)
         const response = await client.messages.create(requestParams);
+        apiDebugLog('executeWithTools: API response received', {
+            iteration,
+            contentBlockCount: response.content.length,
+            blockTypes: response.content.map((b)=>b.type),
+            stopReason: response.stop_reason
+        });
         totalInputTokens += response.usage.input_tokens;
         totalOutputTokens += response.usage.output_tokens;
         // Extract content blocks
         const textBlocks = response.content.filter((block)=>block.type === 'text');
         const toolUseBlocks = response.content.filter((block)=>block.type === 'tool_use');
+        apiDebugLog('executeWithTools: Blocks extracted', {
+            textBlockCount: textBlocks.length,
+            toolUseBlockCount: toolUseBlocks.length,
+            toolNames: toolUseBlocks.map((b)=>b.name)
+        });
         // Stream text output
         for (const block of textBlocks){
             if (block.type === 'text') {
@@ -356,11 +455,21 @@ const execAsync = promisify(exec);
     let heartbeatInterval = null;
     const taskId = process.env.TASK_ID;
     // Bug #6 Fix: Read Redis connection parameters from process.env and interpolate in TypeScript
-    const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';
+    // FIX: Default to 'localhost' for CLI mode (host execution), not 'cfn-redis' (Docker)
+    const redisHost = process.env.CFN_REDIS_HOST || 'localhost';
     const redisPort = process.env.CFN_REDIS_PORT || '6379';
     try {
+        apiDebugLog('executeAgentAPI: ENTRY', {
+            agentType,
+            agentId,
+            hasTools: !!tools,
+            toolsLength: tools?.length || 0,
+            toolNames: tools?.map((t)=>t.name) || []
+        });
         console.log(`[anthropic-client] Executing agent: ${agentType}`);
         console.log(`[anthropic-client] Agent ID: ${agentId}`);
+        console.error(`[TOOL DEBUG executeAgentAPI] tools parameter: ${tools ? `Array[${tools.length}]` : 'undefined'}`);
+        console.error(`[TOOL DEBUG executeAgentAPI] tools names: ${tools?.map((t)=>t.name).join(', ') || 'NONE'}`);
         if (messages && messages.length > 1) {
             console.log(`[anthropic-client] Continuing conversation (${messages.length} messages)`);
         }
@@ -380,6 +489,10 @@ const execAsync = promisify(exec);
         // Otherwise use simple streaming
         let response;
         if (tools && tools.length > 0) {
+            apiDebugLog('executeAgentAPI: Using tool execution path', {
+                toolCount: tools.length,
+                toolNames: tools.map((t)=>t.name)
+            });
             console.log(`[anthropic-client] Tools enabled: ${tools.map((t)=>t.name).join(', ')}`);
             response = await executeWithTools({
                 model,