claude-flow-novice 2.16.0 → 2.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (154) hide show
  1. package/.claude/cfn-extras/skills/GOOGLE_SHEETS_SKILLS_README.md +1 -1
  2. package/.claude/cfn-extras/skills/google-sheets-api-coordinator/SKILL.md +1 -1
  3. package/.claude/cfn-extras/skills/google-sheets-formula-builder/SKILL.md +1 -1
  4. package/.claude/cfn-extras/skills/google-sheets-progress/SKILL.md +1 -1
  5. package/.claude/commands/CFN_LOOP_FRONTEND.md +1 -1
  6. package/.claude/commands/cfn-loop-cli.md +124 -46
  7. package/.claude/commands/cfn-loop-frontend.md +1 -1
  8. package/.claude/commands/cfn-loop-task.md +2 -2
  9. package/.claude/commands/deprecated/cfn-loop.md +2 -2
  10. package/.claude/hooks/cfn-invoke-post-edit.sh +31 -5
  11. package/.claude/hooks/cfn-post-edit.config.json +9 -2
  12. package/.claude/root-claude-distribute/CFN-CLAUDE.md +1 -1
  13. package/.claude/skills/cfn-backlog-management/SKILL.md +1 -1
  14. package/.claude/skills/cfn-loop-orchestration/NORTH_STAR_INDEX.md +1 -1
  15. package/claude-assets/agents/cfn-dev-team/analysts/root-cause-analyst.md +2 -2
  16. package/claude-assets/agents/cfn-dev-team/architecture/base-template-generator.md +1 -1
  17. package/claude-assets/agents/cfn-dev-team/coordinators/cfn-frontend-coordinator.md +2 -2
  18. package/claude-assets/agents/cfn-dev-team/coordinators/handoff-coordinator.md +1 -1
  19. package/claude-assets/agents/cfn-dev-team/dev-ops/devops-engineer.md +1 -1
  20. package/claude-assets/agents/cfn-dev-team/dev-ops/docker-specialist.md +2 -2
  21. package/claude-assets/agents/cfn-dev-team/dev-ops/github-commit-agent.md +2 -2
  22. package/claude-assets/agents/cfn-dev-team/dev-ops/kubernetes-specialist.md +1 -1
  23. package/claude-assets/agents/cfn-dev-team/developers/api-gateway-specialist.md +1 -1
  24. package/claude-assets/agents/cfn-dev-team/developers/data/data-engineer.md +1 -1
  25. package/claude-assets/agents/cfn-dev-team/developers/database/database-architect.md +1 -1
  26. package/claude-assets/agents/cfn-dev-team/developers/frontend/typescript-specialist.md +1 -1
  27. package/claude-assets/agents/cfn-dev-team/developers/frontend/ui-designer.md +1 -1
  28. package/claude-assets/agents/cfn-dev-team/developers/graphql-specialist.md +1 -1
  29. package/claude-assets/agents/cfn-dev-team/documentation/pseudocode.md +1 -1
  30. package/claude-assets/agents/cfn-dev-team/product-owners/accessibility-advocate-persona.md +1 -1
  31. package/claude-assets/agents/cfn-dev-team/product-owners/cto-agent.md +1 -1
  32. package/claude-assets/agents/cfn-dev-team/product-owners/power-user-persona.md +1 -1
  33. package/claude-assets/agents/cfn-dev-team/reviewers/quality/security-specialist.md +1 -1
  34. package/claude-assets/agents/cfn-dev-team/testers/api-testing-specialist.md +1 -1
  35. package/claude-assets/agents/cfn-dev-team/testers/chaos-engineering-specialist.md +1 -1
  36. package/claude-assets/agents/cfn-dev-team/testers/contract-tester.md +1 -1
  37. package/claude-assets/agents/cfn-dev-team/testers/e2e/playwright-tester.md +1 -1
  38. package/claude-assets/agents/cfn-dev-team/testers/integration-tester.md +1 -1
  39. package/claude-assets/agents/cfn-dev-team/testers/load-testing-specialist.md +1 -1
  40. package/claude-assets/agents/cfn-dev-team/testers/mutation-testing-specialist.md +1 -1
  41. package/claude-assets/agents/cfn-dev-team/testers/unit/tdd-london-unit-swarm.md +1 -1
  42. package/claude-assets/agents/cfn-dev-team/utility/agent-builder.md +11 -0
  43. package/claude-assets/agents/cfn-dev-team/utility/analyst.md +1 -1
  44. package/claude-assets/agents/cfn-dev-team/utility/claude-code-expert.md +1 -1
  45. package/claude-assets/agents/cfn-dev-team/utility/epic-creator.md +1 -1
  46. package/claude-assets/agents/cfn-dev-team/utility/memory-leak-specialist.md +1 -1
  47. package/claude-assets/agents/cfn-dev-team/utility/researcher.md +1 -1
  48. package/claude-assets/agents/cfn-dev-team/utility/z-ai-specialist.md +1 -1
  49. package/claude-assets/agents/custom/cfn-docker-expert.md +1 -0
  50. package/claude-assets/agents/custom/cfn-loops-cli-expert.md +326 -17
  51. package/claude-assets/agents/custom/cfn-redis-operations.md +529 -529
  52. package/claude-assets/agents/custom/cfn-system-expert.md +1 -1
  53. package/claude-assets/agents/custom/trigger-dev-expert.md +369 -0
  54. package/claude-assets/agents/docker-team/micro-sprint-planner.md +747 -747
  55. package/claude-assets/agents/project-only-agents/npm-package-specialist.md +1 -1
  56. package/claude-assets/cfn-extras/skills/GOOGLE_SHEETS_SKILLS_README.md +1 -1
  57. package/claude-assets/cfn-extras/skills/google-sheets-api-coordinator/SKILL.md +1 -1
  58. package/claude-assets/cfn-extras/skills/google-sheets-formula-builder/SKILL.md +1 -1
  59. package/claude-assets/cfn-extras/skills/google-sheets-progress/SKILL.md +1 -1
  60. package/claude-assets/commands/CFN_LOOP_FRONTEND.md +1 -1
  61. package/claude-assets/commands/cfn-loop-cli.md +124 -46
  62. package/claude-assets/commands/cfn-loop-frontend.md +1 -1
  63. package/claude-assets/commands/cfn-loop-task.md +2 -2
  64. package/claude-assets/commands/deprecated/cfn-loop.md +2 -2
  65. package/claude-assets/hooks/GIT-HOOKS-USAGE-EXAMPLES.md +116 -0
  66. package/claude-assets/hooks/README-GIT-HOOKS.md +443 -0
  67. package/claude-assets/hooks/cfn-invoke-post-edit.sh +31 -5
  68. package/claude-assets/hooks/cfn-post-edit.config.json +9 -2
  69. package/claude-assets/hooks/install-git-hooks.sh +243 -0
  70. package/claude-assets/hooks/subagent-start.sh +98 -0
  71. package/claude-assets/hooks/subagent-stop.sh +93 -0
  72. package/claude-assets/hooks/validators/credential-scanner.sh +172 -0
  73. package/claude-assets/root-claude-distribute/CFN-CLAUDE.md +1 -1
  74. package/claude-assets/skills/cfn-backlog-management/SKILL.md +1 -1
  75. package/claude-assets/skills/cfn-dependency-ingestion/SKILL.md +41 -13
  76. package/claude-assets/skills/cfn-dependency-ingestion/ingest.sh +237 -0
  77. package/claude-assets/skills/cfn-dependency-ingestion/manifests/cli-mode-dependencies.txt +73 -0
  78. package/claude-assets/skills/cfn-dependency-ingestion/manifests/shared-dependencies.txt +57 -0
  79. package/claude-assets/skills/cfn-dependency-ingestion/manifests/trigger-dev-dependencies.txt +82 -0
  80. package/claude-assets/skills/cfn-dependency-ingestion/manifests/trigger-mode-dependencies.txt +80 -0
  81. package/claude-assets/skills/cfn-environment-sanitization/sanitize-environment.sh +14 -4
  82. package/claude-assets/skills/cfn-loop-orchestration/NORTH_STAR_INDEX.md +1 -1
  83. package/claude-assets/skills/cfn-provider-routing/SKILL.md +23 -0
  84. package/claude-assets/skills/docker-build/build.sh +1 -1
  85. package/dist/agent/skill-mcp-selector.js +2 -1
  86. package/dist/agent/skill-mcp-selector.js.map +1 -1
  87. package/dist/agents/agent-loader.js +165 -146
  88. package/dist/agents/agent-loader.js.map +1 -1
  89. package/dist/cli/agent-executor.js +470 -26
  90. package/dist/cli/agent-executor.js.map +1 -1
  91. package/dist/cli/agent-prompt-builder.js +2 -2
  92. package/dist/cli/agent-prompt-builder.js.map +1 -1
  93. package/dist/cli/agent-spawn.js +7 -4
  94. package/dist/cli/agent-spawn.js.map +1 -1
  95. package/dist/cli/agent-spawner.js +51 -4
  96. package/dist/cli/agent-spawner.js.map +1 -1
  97. package/dist/cli/agent-token-manager.js +2 -1
  98. package/dist/cli/agent-token-manager.js.map +1 -1
  99. package/dist/cli/anthropic-client.js +117 -11
  100. package/dist/cli/anthropic-client.js.map +1 -1
  101. package/dist/cli/cfn-context.js +2 -1
  102. package/dist/cli/cfn-context.js.map +1 -1
  103. package/dist/cli/cfn-metrics.js +2 -1
  104. package/dist/cli/cfn-metrics.js.map +1 -1
  105. package/dist/cli/cfn-redis.js +2 -1
  106. package/dist/cli/cfn-redis.js.map +1 -1
  107. package/dist/cli/cli-agent-context.js +2 -0
  108. package/dist/cli/cli-agent-context.js.map +1 -1
  109. package/dist/cli/config-manager.js +4 -252
  110. package/dist/cli/config-manager.js.map +1 -1
  111. package/dist/cli/conversation-fork-cleanup.js +2 -1
  112. package/dist/cli/conversation-fork-cleanup.js.map +1 -1
  113. package/dist/cli/conversation-fork.js +2 -1
  114. package/dist/cli/conversation-fork.js.map +1 -1
  115. package/dist/cli/coordination/agent-messaging.js +415 -0
  116. package/dist/cli/coordination/agent-messaging.js.map +1 -0
  117. package/dist/cli/coordination/wait-for-threshold.js +232 -0
  118. package/dist/cli/coordination/wait-for-threshold.js.map +1 -0
  119. package/dist/cli/iteration-history.js +2 -1
  120. package/dist/cli/iteration-history.js.map +1 -1
  121. package/dist/cli/process-lifecycle.js +5 -1
  122. package/dist/cli/process-lifecycle.js.map +1 -1
  123. package/dist/cli/spawn-agent-cli.js +41 -6
  124. package/dist/cli/spawn-agent-cli.js.map +1 -1
  125. package/dist/coordination/redis-waiting-mode.js +4 -0
  126. package/dist/coordination/redis-waiting-mode.js.map +1 -1
  127. package/dist/lib/artifact-registry.js +4 -0
  128. package/dist/lib/artifact-registry.js.map +1 -1
  129. package/dist/lib/connection-pool.js +390 -0
  130. package/dist/lib/connection-pool.js.map +1 -0
  131. package/dist/lib/environment-contract.js +258 -0
  132. package/dist/lib/environment-contract.js.map +1 -0
  133. package/dist/lib/query-optimizer.js +388 -0
  134. package/dist/lib/query-optimizer.js.map +1 -0
  135. package/dist/lib/result-cache.js +285 -0
  136. package/dist/lib/result-cache.js.map +1 -0
  137. package/dist/mcp/auth-middleware.js +2 -1
  138. package/dist/mcp/auth-middleware.js.map +1 -1
  139. package/dist/mcp/playwright-mcp-server-auth.js +2 -1
  140. package/dist/mcp/playwright-mcp-server-auth.js.map +1 -1
  141. package/package.json +3 -1
  142. package/scripts/build-agent-image.sh +1 -1
  143. package/scripts/cost-allocation-tracker.sh +632 -0
  144. package/scripts/docker-rebuild-all-agents.sh +2 -2
  145. package/scripts/reorganize-tests.sh +280 -0
  146. package/scripts/trigger-dev-setup.sh +12 -0
  147. package/tests/README.md +45 -0
  148. package/.claude/commands/cost-savings-status.md +0 -34
  149. package/.claude/commands/metrics-summary.md +0 -58
  150. package/claude-assets/agents/cfn-dev-team/dev-ops/monitoring-specialist.md +0 -768
  151. package/claude-assets/agents/custom/test-mcp-access.md +0 -24
  152. package/claude-assets/commands/cost-savings-status.md +0 -34
  153. package/claude-assets/commands/metrics-summary.md +0 -58
  154. package/tests/test-memory-leak-task-mode.sh +0 -435
@@ -17,6 +17,7 @@
17
17
  import { resolve } from 'path';
18
18
  import { spawn as childSpawn } from 'child_process';
19
19
  import { v4 as uuidv4 } from 'uuid';
20
+ import { getEnvValue, getNetworkName } from '../lib/environment-contract';
20
21
  /**
21
22
  * AgentSpawner class - Type-safe agent spawning with validation
22
23
  */ export class AgentSpawner {
@@ -234,7 +235,13 @@ import { v4 as uuidv4 } from 'uuid';
234
235
  }
235
236
  /**
236
237
  * Validate task ID format (CVSS 8.9 - command injection prevention)
237
- * Pattern: alphanumeric, underscore, hyphen, dot only, max 64 chars
238
+ * Supports both raw IDs and Phase 1 prefixed IDs (cli:*, trigger:*)
239
+ * Pattern: alphanumeric, underscore, hyphen, dot, and colon (for mode prefix) only, max 128 chars
240
+ *
241
+ * Accepted formats:
242
+ * - Raw: task-123 (16 chars)
243
+ * - Prefixed: cli:task-123 (20 chars)
244
+ * - Prefixed: trigger:task-123 (24 chars)
238
245
  */ validateTaskId(taskId) {
239
246
  if (typeof taskId !== 'string' || taskId.length === 0) {
240
247
  return {
@@ -242,11 +249,12 @@ import { v4 as uuidv4 } from 'uuid';
242
249
  error: 'Task ID must be a non-empty string'
243
250
  };
244
251
  }
245
- const taskIdPattern = /^[a-zA-Z0-9_.-]{1,64}$/;
252
+ // Updated pattern to support namespace prefixes (e.g., cli:, trigger:, task:, orchestrator:)
253
+ const taskIdPattern = /^([a-z]+:)?[a-zA-Z0-9_.-]{1,64}$/;
246
254
  if (!taskIdPattern.test(taskId)) {
247
255
  return {
248
256
  valid: false,
249
- error: 'Invalid task ID format - must contain only alphanumeric characters, dot, underscore, and hyphens (max 64 chars)'
257
+ error: 'Invalid task ID format - must contain optional namespace prefix (e.g., "cli:") and alphanumeric characters, dot, underscore, hyphens (max 64 chars)'
250
258
  };
251
259
  }
252
260
  return {
@@ -255,6 +263,12 @@ import { v4 as uuidv4 } from 'uuid';
255
263
  }
256
264
  /**
257
265
  * Build environment variables for agent execution
266
+ *
267
+ * Provider routing: Sets both PROVIDER and CLAUDE_API_PROVIDER for compatibility.
268
+ * - PROVIDER: New convention used by agent-spawner
269
+ * - CLAUDE_API_PROVIDER: Legacy convention used by anthropic-client.ts getAPIConfig()
270
+ *
271
+ * BUG FIX: Previously only set PROVIDER, but anthropic-client.ts checked CLAUDE_API_PROVIDER
258
272
  */ buildEnvironment(config, agentId, provider, model) {
259
273
  const env = {
260
274
  ...process.env,
@@ -263,15 +277,48 @@ import { v4 as uuidv4 } from 'uuid';
263
277
  TASK_ID: config.taskId,
264
278
  ITERATION: String(config.iteration),
265
279
  MODE: config.mode,
280
+ // Provider routing - set both for compatibility
266
281
  PROVIDER: provider,
282
+ CLAUDE_API_PROVIDER: provider,
267
283
  MODEL: model,
268
284
  SPAWNED_AT: new Date().toISOString(),
269
- PROJECT_ROOT: this.projectRoot
285
+ PROJECT_ROOT: this.projectRoot,
286
+ // Redis coordination for CLI mode agents (resolved via environment contract)
287
+ CFN_REDIS_HOST: getEnvValue('redis_host', 'cli'),
288
+ CFN_REDIS_PORT: getEnvValue('redis_port', 'cli'),
289
+ // FIX: Don't use REDIS_PASSWORD from parent env - only explicit CFN_REDIS_PASSWORD
290
+ // This prevents CLI agents from inheriting the wrong password from shell environment
291
+ CFN_REDIS_PASSWORD: process.env.CFN_REDIS_PASSWORD || '',
292
+ CFN_NETWORK_NAME: getNetworkName('cli')
270
293
  };
294
+ // Add provider-specific API keys if available
295
+ // This ensures spawned agents have access to the correct API key for their provider
296
+ if (provider === 'zai' && process.env.ZAI_API_KEY) {
297
+ env.ZAI_API_KEY = process.env.ZAI_API_KEY;
298
+ }
299
+ if (provider === 'kimi' && process.env.KIMI_API_KEY) {
300
+ env.KIMI_API_KEY = process.env.KIMI_API_KEY;
301
+ }
302
+ if (provider === 'openrouter' && process.env.OPENROUTER_API_KEY) {
303
+ env.OPENROUTER_API_KEY = process.env.OPENROUTER_API_KEY;
304
+ }
305
+ if (provider === 'anthropic' && process.env.ANTHROPIC_API_KEY) {
306
+ env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
307
+ }
308
+ // Add optional prompt parameter if provided
309
+ if (config.prompt) {
310
+ env.PROMPT = config.prompt;
311
+ }
271
312
  // Merge user-provided environment variables
272
313
  if (config.env) {
273
314
  Object.assign(env, config.env);
274
315
  }
316
+ // Debug logging for provider routing
317
+ console.error(`[agent-spawner] Building env for agent ${agentId}:`);
318
+ console.error(`[agent-spawner] PROVIDER=${provider}, CLAUDE_API_PROVIDER=${provider}`);
319
+ console.error(`[agent-spawner] Has ZAI_API_KEY: ${!!env.ZAI_API_KEY}`);
320
+ console.error(`[agent-spawner] Has KIMI_API_KEY: ${!!env.KIMI_API_KEY}`);
321
+ console.error(`[agent-spawner] Has ANTHROPIC_API_KEY: ${!!env.ANTHROPIC_API_KEY}`);
275
322
  return env;
276
323
  }
277
324
  /**
@@ -1 +1 @@
1
- {"version":3,"sources":["../../src/cli/agent-spawner.ts"],"sourcesContent":["/**\r\n * Agent Spawner Module\r\n *\r\n * High-level API for spawning agents with full type safety,\r\n * environment variable handling, provider configuration parsing,\r\n * and Redis coordination integration.\r\n *\r\n * Usage:\r\n * const spawner = new AgentSpawner();\r\n * const result = await spawner.spawnAgent({\r\n * agentType: 'backend-developer',\r\n * taskId: 'task-123',\r\n * iteration: 1,\r\n * mode: 'standard'\r\n * });\r\n */\r\n\r\nimport { existsSync, readFileSync } from 'fs';\r\nimport { resolve, join } from 'path';\r\nimport { execFileSync, spawn as childSpawn } from 'child_process';\r\nimport { v4 as uuidv4 } from 'uuid';\r\n\r\n/**\r\n * Configuration for spawning an agent\r\n */\r\ninterface SpawnAgentConfig {\r\n agentType: string;\r\n taskId: string;\r\n iteration: number;\r\n mode: 'mvp' | 'standard' | 'enterprise';\r\n provider?: string;\r\n model?: string;\r\n env?: Record<string, string>;\r\n background?: boolean;\r\n timeout?: number;\r\n}\r\n\r\n/**\r\n * Result of agent spawning operation\r\n */\r\ninterface SpawnResult {\r\n agentId: string;\r\n pid: number;\r\n status: 'spawned' | 'running' | 'failed';\r\n timestamp: string;\r\n error?: string;\r\n metadata?: Record<string, unknown>;\r\n}\r\n\r\n/**\r\n * Provider configuration parsed from agent profile\r\n */\r\ninterface ProviderConfig {\r\n provider: string;\r\n model: string;\r\n baseUrl?: string;\r\n}\r\n\r\n/**\r\n * Worker spawning configuration\r\n */\r\ninterface SpawnWorkerConfig {\r\n team: string;\r\n complexity: 'simple' | 'complex';\r\n providerMode: 'auto' | 'zai' | 'anthropic';\r\n agentType?: string;\r\n taskContext?: string;\r\n}\r\n\r\n/**\r\n * Validation result with optional error message\r\n */\r\ninterface ValidationResult {\r\n valid: boolean;\r\n error?: string;\r\n}\r\n\r\n/**\r\n * AgentSpawner class - Type-safe agent spawning with validation\r\n */\r\nexport class AgentSpawner {\r\n private projectRoot: string;\r\n private agentProfilesDir: string;\r\n private agentConfigFile: string;\r\n\r\n constructor(projectRoot?: string) {\r\n this.projectRoot = projectRoot || process.cwd();\r\n this.agentProfilesDir = resolve(this.projectRoot, '.claude/agents/cfn-dev-team');\r\n this.agentConfigFile = resolve(this.projectRoot, '.claude/cfn-config/team-providers.json');\r\n }\r\n\r\n /**\r\n * Spawn an agent with the given configuration\r\n */\r\n async spawnAgent(config: SpawnAgentConfig): Promise<SpawnResult> {\r\n const timestamp = new Date().toISOString();\r\n const agentId = this.generateAgentId(config.agentType);\r\n\r\n try {\r\n // Validate configuration\r\n this.validateSpawnConfig(config);\r\n\r\n // Check agent exists\r\n const agentExists = await this.validateAgentExists(config.agentType);\r\n if (!agentExists) {\r\n return {\r\n agentId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: `Agent type not found: ${config.agentType}`\r\n };\r\n }\r\n\r\n // Parse provider configuration if not explicitly provided\r\n let provider = config.provider;\r\n let model = config.model;\r\n\r\n if (!provider || !model) {\r\n const providerConfig = await this.parseAgentProvider(config.agentType);\r\n provider = provider || providerConfig.provider;\r\n model = model || providerConfig.model;\r\n }\r\n\r\n // Build environment variables\r\n const env = this.buildEnvironment(config, agentId, provider, model);\r\n\r\n // Spawn the process\r\n const pid = await this.spawnProcess(config.agentType, env, config.background);\r\n\r\n return {\r\n agentId,\r\n pid,\r\n status: 'spawned',\r\n timestamp,\r\n metadata: {\r\n agentType: config.agentType,\r\n taskId: config.taskId,\r\n iteration: config.iteration,\r\n mode: config.mode,\r\n provider,\r\n model\r\n }\r\n };\r\n } catch (error) {\r\n return {\r\n agentId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: error instanceof Error ? error.message : String(error)\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Spawn a worker with team configuration\r\n */\r\n async spawnWorker(config: SpawnWorkerConfig): Promise<SpawnResult> {\r\n const timestamp = new Date().toISOString();\r\n const workerId = this.generateWorkerId(config.team);\r\n\r\n try {\r\n // Validate worker configuration\r\n this.validateWorkerConfig(config);\r\n\r\n // Load team provider configuration\r\n const teamConfig = this.loadTeamConfig(config.team);\r\n\r\n // Select model based on complexity\r\n const model = this.selectModel(config.team, config.complexity);\r\n\r\n // Get API key from environment\r\n const apiKey = this.getApiKey(config.team, 'workers');\r\n\r\n // Build environment for worker\r\n const env = this.buildWorkerEnvironment(config, workerId, model, apiKey);\r\n\r\n // Provider routing\r\n this.routeWorkerProvider(config.providerMode, config.team, model, apiKey);\r\n\r\n return {\r\n agentId: workerId,\r\n pid: 0,\r\n status: 'spawned',\r\n timestamp,\r\n metadata: {\r\n team: config.team,\r\n complexity: config.complexity,\r\n model,\r\n provider: config.providerMode\r\n }\r\n };\r\n } catch (error) {\r\n return {\r\n agentId: workerId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: error instanceof Error ? error.message : String(error)\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Validate that an agent type exists in the profiles directory\r\n */\r\n async validateAgentExists(agentType: string): Promise<boolean> {\r\n // Normalize agent type (handle both underscore and hyphen variations)\r\n const normalized = agentType.replace(/_/g, '-').toLowerCase();\r\n\r\n // Check for agent profile in subdirectories\r\n const possiblePaths = [\r\n resolve(this.agentProfilesDir, `${normalized}.md`),\r\n // Check in subdirectories\r\n ...this.findAgentInSubdirs(normalized)\r\n ];\r\n\r\n return possiblePaths.some(path => existsSync(path));\r\n }\r\n\r\n /**\r\n * Parse provider configuration from agent profile frontmatter\r\n */\r\n async parseAgentProvider(agentType: string): Promise<ProviderConfig> {\r\n const agentPath = this.findAgentProfile(agentType);\r\n\r\n if (!agentPath) {\r\n return {\r\n provider: 'zai',\r\n model: 'glm-4.6'\r\n };\r\n }\r\n\r\n try {\r\n const content = readFileSync(agentPath, 'utf-8');\r\n const providerMatch = content.match(/<!-- PROVIDER_PARAMETERS\\s*([\\s\\S]*?)\\s*-->/);\r\n\r\n if (providerMatch) {\r\n const params = providerMatch[1];\r\n const providerMatch_ = params.match(/provider:\\s*(\\w+)/);\r\n const modelMatch = params.match(/model:\\s*([^\\n]+)/);\r\n\r\n return {\r\n provider: providerMatch_?.[1] || 'zai',\r\n model: modelMatch?.[1]?.trim() || 'glm-4.6'\r\n };\r\n }\r\n } catch (error) {\r\n // Silent fallback\r\n }\r\n\r\n return {\r\n provider: 'zai',\r\n model: 'glm-4.6'\r\n };\r\n }\r\n\r\n /**\r\n * Generate a unique agent ID\r\n */\r\n private generateAgentId(agentType: string): string {\r\n const timestamp = Date.now();\r\n const random = Math.random().toString(36).substring(2, 9);\r\n return `agent-${agentType}-${timestamp}-${random}`;\r\n }\r\n\r\n /**\r\n * Generate a unique worker ID\r\n */\r\n private generateWorkerId(team: string): string {\r\n const uuid = uuidv4().substring(0, 8);\r\n return `worker-${team}-${uuid}`;\r\n }\r\n\r\n /**\r\n * Validate spawn configuration\r\n */\r\n private validateSpawnConfig(config: SpawnAgentConfig): void {\r\n const errors: string[] = [];\r\n\r\n if (!config.agentType || typeof config.agentType !== 'string') {\r\n errors.push('agentType must be a non-empty string');\r\n }\r\n\r\n if (!config.taskId || typeof config.taskId !== 'string') {\r\n errors.push('taskId must be a non-empty string');\r\n } else {\r\n const taskIdValidation = this.validateTaskId(config.taskId);\r\n if (!taskIdValidation.valid) {\r\n errors.push(taskIdValidation.error || 'Invalid taskId format');\r\n }\r\n }\r\n\r\n if (config.iteration === undefined || typeof config.iteration !== 'number') {\r\n errors.push('iteration must be a number');\r\n }\r\n\r\n if (!['mvp', 'standard', 'enterprise'].includes(config.mode)) {\r\n errors.push('mode must be mvp, standard, or enterprise');\r\n }\r\n\r\n if (errors.length > 0) {\r\n throw new Error(`Configuration validation failed:\\n${errors.join('\\n')}`);\r\n }\r\n }\r\n\r\n /**\r\n * Validate worker configuration\r\n */\r\n private validateWorkerConfig(config: SpawnWorkerConfig): void {\r\n const errors: string[] = [];\r\n\r\n if (!config.team || typeof config.team !== 'string') {\r\n errors.push('team must be a non-empty string');\r\n }\r\n\r\n if (!['simple', 'complex'].includes(config.complexity)) {\r\n errors.push('complexity must be simple or complex');\r\n }\r\n\r\n if (!['auto', 'zai', 'anthropic'].includes(config.providerMode)) {\r\n errors.push('providerMode must be auto, zai, or anthropic');\r\n }\r\n\r\n if (errors.length > 0) {\r\n throw new Error(`Worker configuration validation failed:\\n${errors.join('\\n')}`);\r\n }\r\n }\r\n\r\n /**\r\n * Validate task ID format (CVSS 8.9 - command injection prevention)\r\n * Pattern: alphanumeric, underscore, hyphen, dot only, max 64 chars\r\n */\r\n private validateTaskId(taskId: string): ValidationResult {\r\n if (typeof taskId !== 'string' || taskId.length === 0) {\r\n return { valid: false, error: 'Task ID must be a non-empty string' };\r\n }\r\n\r\n const taskIdPattern = /^[a-zA-Z0-9_.-]{1,64}$/;\r\n if (!taskIdPattern.test(taskId)) {\r\n return {\r\n valid: false,\r\n error: 'Invalid task ID format - must contain only alphanumeric characters, dot, underscore, and hyphens (max 64 chars)'\r\n };\r\n }\r\n\r\n return { valid: true };\r\n }\r\n\r\n /**\r\n * Build environment variables for agent execution\r\n */\r\n private buildEnvironment(\r\n config: SpawnAgentConfig,\r\n agentId: string,\r\n provider: string,\r\n model: string\r\n ): Record<string, string> {\r\n const env: Record<string, string> = {\r\n ...process.env as Record<string, string>,\r\n AGENT_ID: agentId,\r\n AGENT_TYPE: config.agentType,\r\n TASK_ID: config.taskId,\r\n ITERATION: String(config.iteration),\r\n MODE: config.mode,\r\n PROVIDER: provider,\r\n MODEL: model,\r\n SPAWNED_AT: new Date().toISOString(),\r\n PROJECT_ROOT: this.projectRoot\r\n };\r\n\r\n // Merge user-provided environment variables\r\n if (config.env) {\r\n Object.assign(env, config.env);\r\n }\r\n\r\n return env;\r\n }\r\n\r\n /**\r\n * Build environment for worker process\r\n */\r\n private buildWorkerEnvironment(\r\n config: SpawnWorkerConfig,\r\n workerId: string,\r\n model: string,\r\n apiKey: string\r\n ): Record<string, string> {\r\n const env: Record<string, string> = {\r\n ...process.env as Record<string, string>,\r\n WORKER_ID: workerId,\r\n TEAM: config.team,\r\n COMPLEXITY: config.complexity,\r\n MODEL: model,\r\n API_KEY: apiKey,\r\n PROJECT_ROOT: this.projectRoot\r\n };\r\n\r\n if (config.agentType) {\r\n env.AGENT_TYPE = config.agentType;\r\n }\r\n\r\n if (config.taskContext) {\r\n env.TASK_CONTEXT = config.taskContext;\r\n }\r\n\r\n return env;\r\n }\r\n\r\n /**\r\n * Spawn the actual process\r\n */\r\n private async spawnProcess(\r\n agentType: string,\r\n env: Record<string, string>,\r\n background: boolean = true\r\n ): Promise<number> {\r\n const args = [\r\n 'src/cli/agent-executor.ts',\r\n '--agent-type', agentType\r\n ];\r\n\r\n const child = childSpawn('tsx', args, {\r\n env,\r\n stdio: background ? 'ignore' : 'inherit',\r\n detached: background\r\n });\r\n\r\n const pid = child.pid || 0;\r\n\r\n if (background) {\r\n child.unref();\r\n } else {\r\n await new Promise((resolve, reject) => {\r\n child.on('exit', (code) => {\r\n if (code !== 0) {\r\n reject(new Error(`Process exited with code ${code}`));\r\n } else {\r\n resolve(undefined);\r\n }\r\n });\r\n });\r\n }\r\n\r\n return pid;\r\n }\r\n\r\n /**\r\n * Find agent profile in directory structure\r\n */\r\n private findAgentProfile(agentType: string): string | null {\r\n const normalized = agentType.replace(/_/g, '-').toLowerCase();\r\n\r\n // Direct path\r\n const directPath = resolve(this.agentProfilesDir, `${normalized}.md`);\r\n if (existsSync(directPath)) {\r\n return directPath;\r\n }\r\n\r\n // Search in subdirectories\r\n const subdirs = [\r\n 'developers', 'testers', 'reviewers', 'architecture',\r\n 'dev-ops', 'product-owners', 'coordinators', 'analysts', 'utility'\r\n ];\r\n\r\n for (const subdir of subdirs) {\r\n const path = resolve(this.agentProfilesDir, subdir, `${normalized}.md`);\r\n if (existsSync(path)) {\r\n return path;\r\n }\r\n\r\n // Check nested subdirectories\r\n const nestedDirs = ['frontend', 'backend', 'database', 'quality', 'e2e', 'unit', 'validation', 'data'];\r\n for (const nested of nestedDirs) {\r\n const nestedPath = resolve(this.agentProfilesDir, subdir, nested, `${normalized}.md`);\r\n if (existsSync(nestedPath)) {\r\n return nestedPath;\r\n }\r\n }\r\n }\r\n\r\n return null;\r\n }\r\n\r\n /**\r\n * Find agent in subdirectories\r\n */\r\n private findAgentInSubdirs(normalized: string): string[] {\r\n const paths: string[] = [];\r\n const subdirs = [\r\n 'developers', 'testers', 'reviewers', 'architecture',\r\n 'dev-ops', 'product-owners', 'coordinators', 'analysts', 'utility'\r\n ];\r\n\r\n for (const subdir of subdirs) {\r\n const path = resolve(this.agentProfilesDir, subdir, `${normalized}.md`);\r\n paths.push(path);\r\n\r\n // Check nested directories\r\n const nestedDirs = ['frontend', 'backend', 'database', 'quality', 'e2e', 'unit', 'validation', 'data'];\r\n for (const nested of nestedDirs) {\r\n paths.push(resolve(this.agentProfilesDir, subdir, nested, `${normalized}.md`));\r\n }\r\n }\r\n\r\n return paths;\r\n }\r\n\r\n /**\r\n * Load team configuration from config file\r\n */\r\n private loadTeamConfig(team: string): Record<string, unknown> {\r\n if (!existsSync(this.agentConfigFile)) {\r\n throw new Error(`Team configuration not found at ${this.agentConfigFile}`);\r\n }\r\n\r\n const content = readFileSync(this.agentConfigFile, 'utf-8');\r\n const config = JSON.parse(content);\r\n\r\n if (!config.teams || !config.teams[team]) {\r\n throw new Error(`Invalid or missing provider configuration for team: ${team}`);\r\n }\r\n\r\n return config.teams[team] as Record<string, unknown>;\r\n }\r\n\r\n /**\r\n * Select model based on complexity\r\n */\r\n private selectModel(team: string, complexity: 'simple' | 'complex'): string {\r\n const config = this.loadTeamConfig(team);\r\n const workers = config.workers as Record<string, unknown>;\r\n const models = workers?.models as Record<string, unknown>;\r\n\r\n if (models && models[complexity]) {\r\n return models[complexity] as string;\r\n }\r\n\r\n // Fallback to default complexity\r\n const defaultComplexity = 'simple';\r\n if (models && models[defaultComplexity]) {\r\n return models[defaultComplexity] as string;\r\n }\r\n\r\n return 'gpt-4';\r\n }\r\n\r\n /**\r\n * Get API key from environment\r\n */\r\n private getApiKey(team: string, role: 'coordinator' | 'workers'): string {\r\n const config = this.loadTeamConfig(team);\r\n const roleConfig = config[role] as Record<string, unknown>;\r\n\r\n if (!roleConfig) {\r\n throw new Error(`No configuration found for team=${team}, role=${role}`);\r\n }\r\n\r\n const apiKeyEnvVar = roleConfig.apiKeyEnvVar as string;\r\n\r\n if (!apiKeyEnvVar) {\r\n throw new Error(`apiKeyEnvVar not configured for team=${team}, role=${role}`);\r\n }\r\n\r\n const apiKey = process.env[apiKeyEnvVar];\r\n\r\n if (!apiKey) {\r\n throw new Error(`API key not found in environment variable: ${apiKeyEnvVar}`);\r\n }\r\n\r\n return apiKey;\r\n }\r\n\r\n /**\r\n * Route worker to appropriate provider\r\n */\r\n private routeWorkerProvider(\r\n providerMode: string,\r\n team: string,\r\n model: string,\r\n apiKey: string\r\n ): void {\r\n const config = this.loadTeamConfig(team);\r\n const workers = config.workers as Record<string, unknown>;\r\n const provider = workers?.provider as string;\r\n const baseUrl = workers?.baseUrl as string;\r\n\r\n switch (providerMode) {\r\n case 'auto':\r\n this.routeAutoProvider(provider, baseUrl, model, apiKey);\r\n break;\r\n case 'zai':\r\n process.env.ZAI_API_KEY = apiKey;\r\n process.env.ZAI_BASE_URL = baseUrl;\r\n process.env.ZAI_MODEL = model;\r\n break;\r\n case 'anthropic':\r\n process.env.ANTHROPIC_API_KEY = apiKey;\r\n process.env.ANTHROPIC_BASE_URL = baseUrl;\r\n process.env.ANTHROPIC_MODEL = model;\r\n break;\r\n default:\r\n throw new Error(`Invalid provider mode: ${providerMode}`);\r\n }\r\n }\r\n\r\n /**\r\n * Route to appropriate provider based on configuration\r\n */\r\n private routeAutoProvider(provider: string, baseUrl: string, model: string, apiKey: string): void {\r\n switch (provider) {\r\n case 'zai':\r\n process.env.ZAI_API_KEY = apiKey;\r\n process.env.ZAI_BASE_URL = baseUrl;\r\n process.env.ZAI_MODEL = model;\r\n break;\r\n case 'anthropic':\r\n process.env.ANTHROPIC_API_KEY = apiKey;\r\n process.env.ANTHROPIC_BASE_URL = baseUrl;\r\n process.env.ANTHROPIC_MODEL = model;\r\n break;\r\n default:\r\n throw new Error(`Unsupported provider: ${provider}`);\r\n }\r\n }\r\n}\r\n\r\nexport type { SpawnAgentConfig, SpawnResult, ProviderConfig, SpawnWorkerConfig };\r\n"],"names":["existsSync","readFileSync","resolve","spawn","childSpawn","v4","uuidv4","AgentSpawner","projectRoot","agentProfilesDir","agentConfigFile","process","cwd","spawnAgent","config","timestamp","Date","toISOString","agentId","generateAgentId","agentType","validateSpawnConfig","agentExists","validateAgentExists","pid","status","error","provider","model","providerConfig","parseAgentProvider","env","buildEnvironment","spawnProcess","background","metadata","taskId","iteration","mode","Error","message","String","spawnWorker","workerId","generateWorkerId","team","validateWorkerConfig","teamConfig","loadTeamConfig","selectModel","complexity","apiKey","getApiKey","buildWorkerEnvironment","routeWorkerProvider","providerMode","normalized","replace","toLowerCase","possiblePaths","findAgentInSubdirs","some","path","agentPath","findAgentProfile","content","providerMatch","match","params","providerMatch_","modelMatch","trim","now","random","Math","toString","substring","uuid","errors","push","taskIdValidation","validateTaskId","valid","undefined","includes","length","join","taskIdPattern","test","AGENT_ID","AGENT_TYPE","TASK_ID","ITERATION","MODE","PROVIDER","MODEL","SPAWNED_AT","PROJECT_ROOT","Object","assign","WORKER_ID","TEAM","COMPLEXITY","API_KEY","taskContext","TASK_CONTEXT","args","child","stdio","detached","unref","Promise","reject","on","code","directPath","subdirs","subdir","nestedDirs","nested","nestedPath","paths","JSON","parse","teams","workers","models","defaultComplexity","role","roleConfig","apiKeyEnvVar","baseUrl","routeAutoProvider","ZAI_API_KEY","ZAI_BASE_URL","ZAI_MODEL","ANTHROPIC_API_KEY","ANTHROPIC_BASE_URL","ANTHROPIC_MODEL"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,YAAY,QAAQ,KAAK;AAC9C,SAASC,OAAO,QAAc,OAAO;AACrC,SAAuBC,SAASC,UAAU,QAAQ,gBAAgB;AAClE,SAASC,MAAMC,MAAM,QAAQ,OAAO;AAyDpC;;CAEC,GACD,OAAO,MAAMC;IACHC,YAAoB;IACpBC,iBAAyB;IACzBC,gBAAwB;IAEhC,YAAYF,WAAoB,CAAE;QAChC,IAAI,CAACA,WAAW,GAAGA,eAAeG,QAAQC,GAAG;QAC7C,IAAI,CAACH,gBAAgB,GAAGP,QAAQ,IAAI,CAACM,WAAW,EAAE;QAClD,IAAI,CAACE,eAAe,GAAGR,QAAQ,IAAI,CAACM,WAAW,EAAE;IACnD;IAEA;;GAEC,GACD,MAAMK,WAAWC,MAAwB,EAAwB;QAC/D,MAAMC,YAAY,IAAIC,OAAOC,WAAW;QACxC,MAAMC,UAAU,IAAI,CAACC,eAAe,CAACL,OAAOM,SAAS;QAErD,IAAI;YACF,yBAAyB;YACzB,IAAI,CAACC,mBAAmB,CAACP;YAEzB,qBAAqB;YACrB,MAAMQ,cAAc,MAAM,IAAI,CAACC,mBAAmB,CAACT,OAAOM,SAAS;YACnE,IAAI,CAACE,aAAa;gBAChB,OAAO;oBACLJ;oBACAM,KAAK,CAAC;oBACNC,QAAQ;oBACRV;oBACAW,OAAO,CAAC,sBAAsB,EAAEZ,OAAOM,SAAS,EAAE;gBACpD;YACF;YAEA,0DAA0D;YAC1D,IAAIO,WAAWb,OAAOa,QAAQ;YAC9B,IAAIC,QAAQd,OAAOc,KAAK;YAExB,IAAI,CAACD,YAAY,CAACC,OAAO;gBACvB,MAAMC,iBAAiB,MAAM,IAAI,CAACC,kBAAkB,CAAChB,OAAOM,SAAS;gBACrEO,WAAWA,YAAYE,eAAeF,QAAQ;gBAC9CC,QAAQA,SAASC,eAAeD,KAAK;YACvC;YAEA,8BAA8B;YAC9B,MAAMG,MAAM,IAAI,CAACC,gBAAgB,CAAClB,QAAQI,SAASS,UAAUC;YAE7D,oBAAoB;YACpB,MAAMJ,MAAM,MAAM,IAAI,CAACS,YAAY,CAACnB,OAAOM,SAAS,EAAEW,KAAKjB,OAAOoB,UAAU;YAE5E,OAAO;gBACLhB;gBACAM;gBACAC,QAAQ;gBACRV;gBACAoB,UAAU;oBACRf,WAAWN,OAAOM,SAAS;oBAC3BgB,QAAQtB,OAAOsB,MAAM;oBACrBC,WAAWvB,OAAOuB,SAAS;oBAC3BC,MAAMxB,OAAOwB,IAAI;oBACjBX;oBACAC;gBACF;YACF;QACF,EAAE,OAAOF,OAAO;YACd,OAAO;gBACLR;gBACAM,KAAK,CAAC;gBACNC,QAAQ;gBACRV;gBACAW,OAAOA,iBAAiBa,QAAQb,MAAMc,OAAO,GAAGC,OAAOf;YACzD;QACF;IACF;IAEA;;GAEC,GACD,MAAMgB,YAAY5B,MAAyB,EAAwB;QACjE,MAAMC,YAAY,IAAIC,OAAOC,WAAW;QACxC,MAAM0B,WAAW,IAAI,CAACC,gBAAgB,CAAC9B,OAAO+B,IAAI;QAElD,IAAI;YACF,gCAAgC;YAChC,IAAI,CAACC,oBAAoB,CAAChC;YAE1B,mCAAmC;YACnC,MAAMiC,aAAa,IAAI,CAACC,cAAc,CAAClC,OAAO+B,IAAI;YAElD,mCAAmC;YACnC,MAAMjB,QAAQ,IAAI,CAACqB,WAAW,CAACnC,OAAO+B,IAAI,EAAE/B,OAAOoC,UAAU;YAE7D,+BAA+B;YAC/B,MAAMC,SAAS,IAAI,CAACC,SAAS,CAACtC,OAAO+B,IAAI,EAAE;YAE3C,+BAA+B;YAC/B,MAAMd,MAAM,IAAI,CAACsB,sBAAsB,CAACvC,QAAQ6B,UAAUf,OAAOuB;YAEjE,mBAAmB;YACnB,IAAI,CAACG,mBAAmB,CAACxC,OAAOyC,YAAY,EAAEzC,OAAO+B,IAAI,EAAEjB,OAAOuB;YAElE,OAAO;gBACLjC,SAASyB;gBACTnB,KAAK;gBACLC,QAAQ;gBACRV;gBACAoB,UAAU;oBACRU,MAAM/B,OAAO+B,IAAI;oBACjBK,YAAYpC,OAAOoC,UAAU;oBAC7BtB;oBACAD,UAAUb,OAAOyC,YAAY;gBAC/B;YACF;QACF,EAAE,OAAO7B,OAAO;YACd,OAAO;gBACLR,SAASyB;gBACTnB,KAAK,CAAC;gBACNC,QAAQ;gBACRV;gBACAW,OAAOA,iBAAiBa,QAAQb,MAAMc,OAAO,GAAGC,OAAOf;YACzD;QACF;IACF;IAEA;;GAEC,GACD,MAAMH,oBAAoBH,SAAiB,EAAoB;QAC7D,sEAAsE;QACtE,MAAMoC,aAAapC,UAAUqC,OAAO,CAAC,MAAM,KAAKC,WAAW;QAE3D,4CAA4C;QAC5C,MAAMC,gBAAgB;YACpBzD,QAAQ,IAAI,CAACO,gBAAgB,EAAE,GAAG+C,WAAW,GAAG,CAAC;YACjD,0BAA0B;eACvB,IAAI,CAACI,kBAAkB,CAACJ;SAC5B;QAED,OAAOG,cAAcE,IAAI,CAACC,CAAAA,OAAQ9D,WAAW8D;IAC/C;IAEA;;GAEC,GACD,MAAMhC,mBAAmBV,SAAiB,EAA2B;QACnE,MAAM2C,YAAY,IAAI,CAACC,gBAAgB,CAAC5C;QAExC,IAAI,CAAC2C,WAAW;YACd,OAAO;gBACLpC,UAAU;gBACVC,OAAO;YACT;QACF;QAEA,IAAI;YACF,MAAMqC,UAAUhE,aAAa8D,WAAW;YACxC,MAAMG,gBAAgBD,QAAQE,KAAK,CAAC;YAEpC,IAAID,eAAe;gBACjB,MAAME,SAASF,aAAa,CAAC,EAAE;gBAC/B,MAAMG,iBAAiBD,OAAOD,KAAK,CAAC;gBACpC,MAAMG,aAAaF,OAAOD,KAAK,CAAC;gBAEhC,OAAO;oBACLxC,UAAU0C,gBAAgB,CAAC,EAAE,IAAI;oBACjCzC,OAAO0C,YAAY,CAAC,EAAE,EAAEC,UAAU;gBACpC;YACF;QACF,EAAE,OAAO7C,OAAO;QACd,kBAAkB;QACpB;QAEA,OAAO;YACLC,UAAU;YACVC,OAAO;QACT;IACF;IAEA;;GAEC,GACD,AAAQT,gBAAgBC,SAAiB,EAAU;QACjD,MAAML,YAAYC,KAAKwD,GAAG;QAC1B,MAAMC,SAASC,KAAKD,MAAM,GAAGE,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG;QACvD,OAAO,CAAC,MAAM,EAAExD,UAAU,CAAC,EAAEL,UAAU,CAAC,EAAE0D,QAAQ;IACpD;IAEA;;GAEC,GACD,AAAQ7B,iBAAiBC,IAAY,EAAU;QAC7C,MAAMgC,OAAOvE,SAASsE,SAAS,CAAC,GAAG;QACnC,OAAO,CAAC,OAAO,EAAE/B,KAAK,CAAC,EAAEgC,MAAM;IACjC;IAEA;;GAEC,GACD,AAAQxD,oBAAoBP,MAAwB,EAAQ;QAC1D,MAAMgE,SAAmB,EAAE;QAE3B,IAAI,CAAChE,OAAOM,SAAS,IAAI,OAAON,OAAOM,SAAS,KAAK,UAAU;YAC7D0D,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAACjE,OAAOsB,MAAM,IAAI,OAAOtB,OAAOsB,MAAM,KAAK,UAAU;YACvD0C,OAAOC,IAAI,CAAC;QACd,OAAO;YACL,MAAMC,mBAAmB,IAAI,CAACC,cAAc,CAACnE,OAAOsB,MAAM;YAC1D,IAAI,CAAC4C,iBAAiBE,KAAK,EAAE;gBAC3BJ,OAAOC,IAAI,CAACC,iBAAiBtD,KAAK,IAAI;YACxC;QACF;QAEA,IAAIZ,OAAOuB,SAAS,KAAK8C,aAAa,OAAOrE,OAAOuB,SAAS,KAAK,UAAU;YAC1EyC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAO;YAAY;SAAa,CAACK,QAAQ,CAACtE,OAAOwB,IAAI,GAAG;YAC5DwC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAID,OAAOO,MAAM,GAAG,GAAG;YACrB,MAAM,IAAI9C,MAAM,CAAC,kCAAkC,EAAEuC,OAAOQ,IAAI,CAAC,OAAO;QAC1E;IACF;IAEA;;GAEC,GACD,AAAQxC,qBAAqBhC,MAAyB,EAAQ;QAC5D,MAAMgE,SAAmB,EAAE;QAE3B,IAAI,CAAChE,OAAO+B,IAAI,IAAI,OAAO/B,OAAO+B,IAAI,KAAK,UAAU;YACnDiC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAU;SAAU,CAACK,QAAQ,CAACtE,OAAOoC,UAAU,GAAG;YACtD4B,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAQ;YAAO;SAAY,CAACK,QAAQ,CAACtE,OAAOyC,YAAY,GAAG;YAC/DuB,OAAOC,IAAI,CAAC;QACd;QAEA,IAAID,OAAOO,MAAM,GAAG,GAAG;YACrB,MAAM,IAAI9C,MAAM,CAAC,yCAAyC,EAAEuC,OAAOQ,IAAI,CAAC,OAAO;QACjF;IACF;IAEA;;;GAGC,GACD,AAAQL,eAAe7C,MAAc,EAAoB;QACvD,IAAI,OAAOA,WAAW,YAAYA,OAAOiD,MAAM,KAAK,GAAG;YACrD,OAAO;gBAAEH,OAAO;gBAAOxD,OAAO;YAAqC;QACrE;QAEA,MAAM6D,gBAAgB;QACtB,IAAI,CAACA,cAAcC,IAAI,CAACpD,SAAS;YAC/B,OAAO;gBACL8C,OAAO;gBACPxD,OAAO;YACT;QACF;QAEA,OAAO;YAAEwD,OAAO;QAAK;IACvB;IAEA;;GAEC,GACD,AAAQlD,iBACNlB,MAAwB,EACxBI,OAAe,EACfS,QAAgB,EAChBC,KAAa,EACW;QACxB,MAAMG,MAA8B;YAClC,GAAGpB,QAAQoB,GAAG;YACd0D,UAAUvE;YACVwE,YAAY5E,OAAOM,SAAS;YAC5BuE,SAAS7E,OAAOsB,MAAM;YACtBwD,WAAWnD,OAAO3B,OAAOuB,SAAS;YAClCwD,MAAM/E,OAAOwB,IAAI;YACjBwD,UAAUnE;YACVoE,OAAOnE;YACPoE,YAAY,IAAIhF,OAAOC,WAAW;YAClCgF,cAAc,IAAI,CAACzF,WAAW;QAChC;QAEA,4CAA4C;QAC5C,IAAIM,OAAOiB,GAAG,EAAE;YACdmE,OAAOC,MAAM,CAACpE,KAAKjB,OAAOiB,GAAG;QAC/B;QAEA,OAAOA;IACT;IAEA;;GAEC,GACD,AAAQsB,uBACNvC,MAAyB,EACzB6B,QAAgB,EAChBf,KAAa,EACbuB,MAAc,EACU;QACxB,MAAMpB,MAA8B;YAClC,GAAGpB,QAAQoB,GAAG;YACdqE,WAAWzD;YACX0D,MAAMvF,OAAO+B,IAAI;YACjByD,YAAYxF,OAAOoC,UAAU;YAC7B6C,OAAOnE;YACP2E,SAASpD;YACT8C,cAAc,IAAI,CAACzF,WAAW;QAChC;QAEA,IAAIM,OAAOM,SAAS,EAAE;YACpBW,IAAI2D,UAAU,GAAG5E,OAAOM,SAAS;QACnC;QAEA,IAAIN,OAAO0F,WAAW,EAAE;YACtBzE,IAAI0E,YAAY,GAAG3F,OAAO0F,WAAW;QACvC;QAEA,OAAOzE;IACT;IAEA;;GAEC,GACD,MAAcE,aACZb,SAAiB,EACjBW,GAA2B,EAC3BG,aAAsB,IAAI,EACT;QACjB,MAAMwE,OAAO;YACX;YACA;YAAgBtF;SACjB;QAED,MAAMuF,QAAQvG,WAAW,OAAOsG,MAAM;YACpC3E;YACA6E,OAAO1E,aAAa,WAAW;YAC/B2E,UAAU3E;QACZ;QAEA,MAAMV,MAAMmF,MAAMnF,GAAG,IAAI;QAEzB,IAAIU,YAAY;YACdyE,MAAMG,KAAK;QACb,OAAO;YACL,MAAM,IAAIC,QAAQ,CAAC7G,SAAS8G;gBAC1BL,MAAMM,EAAE,CAAC,QAAQ,CAACC;oBAChB,IAAIA,SAAS,GAAG;wBACdF,OAAO,IAAIzE,MAAM,CAAC,yBAAyB,EAAE2E,MAAM;oBACrD,OAAO;wBACLhH,QAAQiF;oBACV;gBACF;YACF;QACF;QAEA,OAAO3D;IACT;IAEA;;GAEC,GACD,AAAQwC,iBAAiB5C,SAAiB,EAAiB;QACzD,MAAMoC,aAAapC,UAAUqC,OAAO,CAAC,MAAM,KAAKC,WAAW;QAE3D,cAAc;QACd,MAAMyD,aAAajH,QAAQ,IAAI,CAACO,gBAAgB,EAAE,GAAG+C,WAAW,GAAG,CAAC;QACpE,IAAIxD,WAAWmH,aAAa;YAC1B,OAAOA;QACT;QAEA,2BAA2B;QAC3B,MAAMC,UAAU;YACd;YAAc;YAAW;YAAa;YACtC;YAAW;YAAkB;YAAgB;YAAY;SAC1D;QAED,KAAK,MAAMC,UAAUD,QAAS;YAC5B,MAAMtD,OAAO5D,QAAQ,IAAI,CAACO,gBAAgB,EAAE4G,QAAQ,GAAG7D,WAAW,GAAG,CAAC;YACtE,IAAIxD,WAAW8D,OAAO;gBACpB,OAAOA;YACT;YAEA,8BAA8B;YAC9B,MAAMwD,aAAa;gBAAC;gBAAY;gBAAW;gBAAY;gBAAW;gBAAO;gBAAQ;gBAAc;aAAO;YACtG,KAAK,MAAMC,UAAUD,WAAY;gBAC/B,MAAME,aAAatH,QAAQ,IAAI,CAACO,gBAAgB,EAAE4G,QAAQE,QAAQ,GAAG/D,WAAW,GAAG,CAAC;gBACpF,IAAIxD,WAAWwH,aAAa;oBAC1B,OAAOA;gBACT;YACF;QACF;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQ5D,mBAAmBJ,UAAkB,EAAY;QACvD,MAAMiE,QAAkB,EAAE;QAC1B,MAAML,UAAU;YACd;YAAc;YAAW;YAAa;YACtC;YAAW;YAAkB;YAAgB;YAAY;SAC1D;QAED,KAAK,MAAMC,UAAUD,QAAS;YAC5B,MAAMtD,OAAO5D,QAAQ,IAAI,CAACO,gBAAgB,EAAE4G,QAAQ,GAAG7D,WAAW,GAAG,CAAC;YACtEiE,MAAM1C,IAAI,CAACjB;YAEX,2BAA2B;YAC3B,MAAMwD,aAAa;gBAAC;gBAAY;gBAAW;gBAAY;gBAAW;gBAAO;gBAAQ;gBAAc;aAAO;YACtG,KAAK,MAAMC,UAAUD,WAAY;gBAC/BG,MAAM1C,IAAI,CAAC7E,QAAQ,IAAI,CAACO,gBAAgB,EAAE4G,QAAQE,QAAQ,GAAG/D,WAAW,GAAG,CAAC;YAC9E;QACF;QAEA,OAAOiE;IACT;IAEA;;GAEC,GACD,AAAQzE,eAAeH,IAAY,EAA2B;QAC5D,IAAI,CAAC7C,WAAW,IAAI,CAACU,eAAe,GAAG;YACrC,MAAM,IAAI6B,MAAM,CAAC,gCAAgC,EAAE,IAAI,CAAC7B,eAAe,EAAE;QAC3E;QAEA,MAAMuD,UAAUhE,aAAa,IAAI,CAACS,eAAe,EAAE;QACnD,MAAMI,SAAS4G,KAAKC,KAAK,CAAC1D;QAE1B,IAAI,CAACnD,OAAO8G,KAAK,IAAI,CAAC9G,OAAO8G,KAAK,CAAC/E,KAAK,EAAE;YACxC,MAAM,IAAIN,MAAM,CAAC,oDAAoD,EAAEM,MAAM;QAC/E;QAEA,OAAO/B,OAAO8G,KAAK,CAAC/E,KAAK;IAC3B;IAEA;;GAEC,GACD,AAAQI,YAAYJ,IAAY,EAAEK,UAAgC,EAAU;QAC1E,MAAMpC,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAMgF,UAAU/G,OAAO+G,OAAO;QAC9B,MAAMC,SAASD,SAASC;QAExB,IAAIA,UAAUA,MAAM,CAAC5E,WAAW,EAAE;YAChC,OAAO4E,MAAM,CAAC5E,WAAW;QAC3B;QAEA,iCAAiC;QACjC,MAAM6E,oBAAoB;QAC1B,IAAID,UAAUA,MAAM,CAACC,kBAAkB,EAAE;YACvC,OAAOD,MAAM,CAACC,kBAAkB;QAClC;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQ3E,UAAUP,IAAY,EAAEmF,IAA+B,EAAU;QACvE,MAAMlH,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAMoF,aAAanH,MAAM,CAACkH,KAAK;QAE/B,IAAI,CAACC,YAAY;YACf,MAAM,IAAI1F,MAAM,CAAC,gCAAgC,EAAEM,KAAK,OAAO,EAAEmF,MAAM;QACzE;QAEA,MAAME,eAAeD,WAAWC,YAAY;QAE5C,IAAI,CAACA,cAAc;YACjB,MAAM,IAAI3F,MAAM,CAAC,qCAAqC,EAAEM,KAAK,OAAO,EAAEmF,MAAM;QAC9E;QAEA,MAAM7E,SAASxC,QAAQoB,GAAG,CAACmG,aAAa;QAExC,IAAI,CAAC/E,QAAQ;YACX,MAAM,IAAIZ,MAAM,CAAC,2CAA2C,EAAE2F,cAAc;QAC9E;QAEA,OAAO/E;IACT;IAEA;;GAEC,GACD,AAAQG,oBACNC,YAAoB,EACpBV,IAAY,EACZjB,KAAa,EACbuB,MAAc,EACR;QACN,MAAMrC,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAMgF,UAAU/G,OAAO+G,OAAO;QAC9B,MAAMlG,WAAWkG,SAASlG;QAC1B,MAAMwG,UAAUN,SAASM;QAEzB,OAAQ5E;YACN,KAAK;gBACH,IAAI,CAAC6E,iBAAiB,CAACzG,UAAUwG,SAASvG,OAAOuB;gBACjD;YACF,KAAK;gBACHxC,QAAQoB,GAAG,CAACsG,WAAW,GAAGlF;gBAC1BxC,QAAQoB,GAAG,CAACuG,YAAY,GAAGH;gBAC3BxH,QAAQoB,GAAG,CAACwG,SAAS,GAAG3G;gBACxB;YACF,KAAK;gBACHjB,QAAQoB,GAAG,CAACyG,iBAAiB,GAAGrF;gBAChCxC,QAAQoB,GAAG,CAAC0G,kBAAkB,GAAGN;gBACjCxH,QAAQoB,GAAG,CAAC2G,eAAe,GAAG9G;gBAC9B;YACF;gBACE,MAAM,IAAIW,MAAM,CAAC,uBAAuB,EAAEgB,cAAc;QAC5D;IACF;IAEA;;GAEC,GACD,AAAQ6E,kBAAkBzG,QAAgB,EAAEwG,OAAe,EAAEvG,KAAa,EAAEuB,MAAc,EAAQ;QAChG,OAAQxB;YACN,KAAK;gBACHhB,QAAQoB,GAAG,CAACsG,WAAW,GAAGlF;gBAC1BxC,QAAQoB,GAAG,CAACuG,YAAY,GAAGH;gBAC3BxH,QAAQoB,GAAG,CAACwG,SAAS,GAAG3G;gBACxB;YACF,KAAK;gBACHjB,QAAQoB,GAAG,CAACyG,iBAAiB,GAAGrF;gBAChCxC,QAAQoB,GAAG,CAAC0G,kBAAkB,GAAGN;gBACjCxH,QAAQoB,GAAG,CAAC2G,eAAe,GAAG9G;gBAC9B;YACF;gBACE,MAAM,IAAIW,MAAM,CAAC,sBAAsB,EAAEZ,UAAU;QACvD;IACF;AACF"}
1
+ {"version":3,"sources":["../../src/cli/agent-spawner.ts"],"sourcesContent":["/**\r\n * Agent Spawner Module\r\n *\r\n * High-level API for spawning agents with full type safety,\r\n * environment variable handling, provider configuration parsing,\r\n * and Redis coordination integration.\r\n *\r\n * Usage:\r\n * const spawner = new AgentSpawner();\r\n * const result = await spawner.spawnAgent({\r\n * agentType: 'backend-developer',\r\n * taskId: 'task-123',\r\n * iteration: 1,\r\n * mode: 'standard'\r\n * });\r\n */\r\n\r\nimport { existsSync, readFileSync } from 'fs';\r\nimport { resolve, join } from 'path';\r\nimport { execFileSync, spawn as childSpawn } from 'child_process';\r\nimport { v4 as uuidv4 } from 'uuid';\r\nimport { generateTaskId } from './spawn-agent-cli';\r\nimport { getEnvValue, getNetworkName } from '../lib/environment-contract';\r\n\r\n/**\r\n * Configuration for spawning an agent\r\n */\r\ninterface SpawnAgentConfig {\r\n agentType: string;\r\n taskId: string;\r\n iteration: number;\r\n mode: 'mvp' | 'standard' | 'enterprise';\r\n provider?: string;\r\n model?: string;\r\n prompt?: string;\r\n env?: Record<string, string>;\r\n background?: boolean;\r\n timeout?: number;\r\n}\r\n\r\n/**\r\n * Result of agent spawning operation\r\n */\r\ninterface SpawnResult {\r\n agentId: string;\r\n pid: number;\r\n status: 'spawned' | 'running' | 'failed';\r\n timestamp: string;\r\n error?: string;\r\n metadata?: Record<string, unknown>;\r\n}\r\n\r\n/**\r\n * Provider configuration parsed from agent profile\r\n */\r\ninterface ProviderConfig {\r\n provider: string;\r\n model: string;\r\n baseUrl?: string;\r\n}\r\n\r\n/**\r\n * Worker spawning configuration\r\n */\r\ninterface SpawnWorkerConfig {\r\n team: string;\r\n complexity: 'simple' | 'complex';\r\n providerMode: 'auto' | 'zai' | 'anthropic';\r\n agentType?: string;\r\n taskContext?: string;\r\n}\r\n\r\n/**\r\n * Validation result with optional error message\r\n */\r\ninterface ValidationResult {\r\n valid: boolean;\r\n error?: string;\r\n}\r\n\r\n/**\r\n * AgentSpawner class - Type-safe agent spawning with validation\r\n */\r\nexport class AgentSpawner {\r\n private projectRoot: string;\r\n private agentProfilesDir: string;\r\n private agentConfigFile: string;\r\n\r\n constructor(projectRoot?: string) {\r\n this.projectRoot = projectRoot || process.cwd();\r\n this.agentProfilesDir = resolve(this.projectRoot, '.claude/agents/cfn-dev-team');\r\n this.agentConfigFile = resolve(this.projectRoot, '.claude/cfn-config/team-providers.json');\r\n }\r\n\r\n /**\r\n * Spawn an agent with the given configuration\r\n */\r\n async spawnAgent(config: SpawnAgentConfig): Promise<SpawnResult> {\r\n const timestamp = new Date().toISOString();\r\n const agentId = this.generateAgentId(config.agentType);\r\n\r\n try {\r\n // Validate configuration\r\n this.validateSpawnConfig(config);\r\n\r\n // Check agent exists\r\n const agentExists = await this.validateAgentExists(config.agentType);\r\n if (!agentExists) {\r\n return {\r\n agentId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: `Agent type not found: ${config.agentType}`\r\n };\r\n }\r\n\r\n // Parse provider configuration if not explicitly provided\r\n let provider = config.provider;\r\n let model = config.model;\r\n\r\n if (!provider || !model) {\r\n const providerConfig = await this.parseAgentProvider(config.agentType);\r\n provider = provider || providerConfig.provider;\r\n model = model || providerConfig.model;\r\n }\r\n\r\n // Build environment variables\r\n const env = this.buildEnvironment(config, agentId, provider, model);\r\n\r\n // Spawn the process\r\n const pid = await this.spawnProcess(config.agentType, env, config.background);\r\n\r\n return {\r\n agentId,\r\n pid,\r\n status: 'spawned',\r\n timestamp,\r\n metadata: {\r\n agentType: config.agentType,\r\n taskId: config.taskId,\r\n iteration: config.iteration,\r\n mode: config.mode,\r\n provider,\r\n model\r\n }\r\n };\r\n } catch (error) {\r\n return {\r\n agentId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: error instanceof Error ? error.message : String(error)\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Spawn a worker with team configuration\r\n */\r\n async spawnWorker(config: SpawnWorkerConfig): Promise<SpawnResult> {\r\n const timestamp = new Date().toISOString();\r\n const workerId = this.generateWorkerId(config.team);\r\n\r\n try {\r\n // Validate worker configuration\r\n this.validateWorkerConfig(config);\r\n\r\n // Load team provider configuration\r\n const teamConfig = this.loadTeamConfig(config.team);\r\n\r\n // Select model based on complexity\r\n const model = this.selectModel(config.team, config.complexity);\r\n\r\n // Get API key from environment\r\n const apiKey = this.getApiKey(config.team, 'workers');\r\n\r\n // Build environment for worker\r\n const env = this.buildWorkerEnvironment(config, workerId, model, apiKey);\r\n\r\n // Provider routing\r\n this.routeWorkerProvider(config.providerMode, config.team, model, apiKey);\r\n\r\n return {\r\n agentId: workerId,\r\n pid: 0,\r\n status: 'spawned',\r\n timestamp,\r\n metadata: {\r\n team: config.team,\r\n complexity: config.complexity,\r\n model,\r\n provider: config.providerMode\r\n }\r\n };\r\n } catch (error) {\r\n return {\r\n agentId: workerId,\r\n pid: -1,\r\n status: 'failed',\r\n timestamp,\r\n error: error instanceof Error ? error.message : String(error)\r\n };\r\n }\r\n }\r\n\r\n /**\r\n * Validate that an agent type exists in the profiles directory\r\n */\r\n async validateAgentExists(agentType: string): Promise<boolean> {\r\n // Normalize agent type (handle both underscore and hyphen variations)\r\n const normalized = agentType.replace(/_/g, '-').toLowerCase();\r\n\r\n // Check for agent profile in subdirectories\r\n const possiblePaths = [\r\n resolve(this.agentProfilesDir, `${normalized}.md`),\r\n // Check in subdirectories\r\n ...this.findAgentInSubdirs(normalized)\r\n ];\r\n\r\n return possiblePaths.some(path => existsSync(path));\r\n }\r\n\r\n /**\r\n * Parse provider configuration from agent profile frontmatter\r\n */\r\n async parseAgentProvider(agentType: string): Promise<ProviderConfig> {\r\n const agentPath = this.findAgentProfile(agentType);\r\n\r\n if (!agentPath) {\r\n return {\r\n provider: 'zai',\r\n model: 'glm-4.6'\r\n };\r\n }\r\n\r\n try {\r\n const content = readFileSync(agentPath, 'utf-8');\r\n const providerMatch = content.match(/<!-- PROVIDER_PARAMETERS\\s*([\\s\\S]*?)\\s*-->/);\r\n\r\n if (providerMatch) {\r\n const params = providerMatch[1];\r\n const providerMatch_ = params.match(/provider:\\s*(\\w+)/);\r\n const modelMatch = params.match(/model:\\s*([^\\n]+)/);\r\n\r\n return {\r\n provider: providerMatch_?.[1] || 'zai',\r\n model: modelMatch?.[1]?.trim() || 'glm-4.6'\r\n };\r\n }\r\n } catch (error) {\r\n // Silent fallback\r\n }\r\n\r\n return {\r\n provider: 'zai',\r\n model: 'glm-4.6'\r\n };\r\n }\r\n\r\n /**\r\n * Generate a unique agent ID\r\n */\r\n private generateAgentId(agentType: string): string {\r\n const timestamp = Date.now();\r\n const random = Math.random().toString(36).substring(2, 9);\r\n return `agent-${agentType}-${timestamp}-${random}`;\r\n }\r\n\r\n /**\r\n * Generate a unique worker ID\r\n */\r\n private generateWorkerId(team: string): string {\r\n const uuid = uuidv4().substring(0, 8);\r\n return `worker-${team}-${uuid}`;\r\n }\r\n\r\n /**\r\n * Validate spawn configuration\r\n */\r\n private validateSpawnConfig(config: SpawnAgentConfig): void {\r\n const errors: string[] = [];\r\n\r\n if (!config.agentType || typeof config.agentType !== 'string') {\r\n errors.push('agentType must be a non-empty string');\r\n }\r\n\r\n if (!config.taskId || typeof config.taskId !== 'string') {\r\n errors.push('taskId must be a non-empty string');\r\n } else {\r\n const taskIdValidation = this.validateTaskId(config.taskId);\r\n if (!taskIdValidation.valid) {\r\n errors.push(taskIdValidation.error || 'Invalid taskId format');\r\n }\r\n }\r\n\r\n if (config.iteration === undefined || typeof config.iteration !== 'number') {\r\n errors.push('iteration must be a number');\r\n }\r\n\r\n if (!['mvp', 'standard', 'enterprise'].includes(config.mode)) {\r\n errors.push('mode must be mvp, standard, or enterprise');\r\n }\r\n\r\n if (errors.length > 0) {\r\n throw new Error(`Configuration validation failed:\\n${errors.join('\\n')}`);\r\n }\r\n }\r\n\r\n /**\r\n * Validate worker configuration\r\n */\r\n private validateWorkerConfig(config: SpawnWorkerConfig): void {\r\n const errors: string[] = [];\r\n\r\n if (!config.team || typeof config.team !== 'string') {\r\n errors.push('team must be a non-empty string');\r\n }\r\n\r\n if (!['simple', 'complex'].includes(config.complexity)) {\r\n errors.push('complexity must be simple or complex');\r\n }\r\n\r\n if (!['auto', 'zai', 'anthropic'].includes(config.providerMode)) {\r\n errors.push('providerMode must be auto, zai, or anthropic');\r\n }\r\n\r\n if (errors.length > 0) {\r\n throw new Error(`Worker configuration validation failed:\\n${errors.join('\\n')}`);\r\n }\r\n }\r\n\r\n /**\r\n * Validate task ID format (CVSS 8.9 - command injection prevention)\r\n * Supports both raw IDs and Phase 1 prefixed IDs (cli:*, trigger:*)\r\n * Pattern: alphanumeric, underscore, hyphen, dot, and colon (for mode prefix) only, max 128 chars\r\n *\r\n * Accepted formats:\r\n * - Raw: task-123 (16 chars)\r\n * - Prefixed: cli:task-123 (20 chars)\r\n * - Prefixed: trigger:task-123 (24 chars)\r\n */\r\n private validateTaskId(taskId: string): ValidationResult {\r\n if (typeof taskId !== 'string' || taskId.length === 0) {\r\n return { valid: false, error: 'Task ID must be a non-empty string' };\r\n }\r\n\r\n // Updated pattern to support namespace prefixes (e.g., cli:, trigger:, task:, orchestrator:)\r\n const taskIdPattern = /^([a-z]+:)?[a-zA-Z0-9_.-]{1,64}$/;\r\n if (!taskIdPattern.test(taskId)) {\r\n return {\r\n valid: false,\r\n error: 'Invalid task ID format - must contain optional namespace prefix (e.g., \"cli:\") and alphanumeric characters, dot, underscore, hyphens (max 64 chars)'\r\n };\r\n }\r\n\r\n return { valid: true };\r\n }\r\n\r\n /**\r\n * Build environment variables for agent execution\r\n *\r\n * Provider routing: Sets both PROVIDER and CLAUDE_API_PROVIDER for compatibility.\r\n * - PROVIDER: New convention used by agent-spawner\r\n * - CLAUDE_API_PROVIDER: Legacy convention used by anthropic-client.ts getAPIConfig()\r\n *\r\n * BUG FIX: Previously only set PROVIDER, but anthropic-client.ts checked CLAUDE_API_PROVIDER\r\n */\r\n private buildEnvironment(\r\n config: SpawnAgentConfig,\r\n agentId: string,\r\n provider: string,\r\n model: string\r\n ): Record<string, string> {\r\n const env: Record<string, string> = {\r\n ...process.env as Record<string, string>,\r\n AGENT_ID: agentId,\r\n AGENT_TYPE: config.agentType,\r\n TASK_ID: config.taskId,\r\n ITERATION: String(config.iteration),\r\n MODE: config.mode,\r\n // Provider routing - set both for compatibility\r\n PROVIDER: provider,\r\n CLAUDE_API_PROVIDER: provider, // BUG FIX: anthropic-client.ts reads this\r\n MODEL: model,\r\n SPAWNED_AT: new Date().toISOString(),\r\n PROJECT_ROOT: this.projectRoot,\r\n // Redis coordination for CLI mode agents (resolved via environment contract)\r\n CFN_REDIS_HOST: getEnvValue('redis_host', 'cli'),\r\n CFN_REDIS_PORT: getEnvValue('redis_port', 'cli'),\r\n // FIX: Don't use REDIS_PASSWORD from parent env - only explicit CFN_REDIS_PASSWORD\r\n // This prevents CLI agents from inheriting the wrong password from shell environment\r\n CFN_REDIS_PASSWORD: process.env.CFN_REDIS_PASSWORD || '',\r\n CFN_NETWORK_NAME: getNetworkName('cli')\r\n };\r\n\r\n // Add provider-specific API keys if available\r\n // This ensures spawned agents have access to the correct API key for their provider\r\n if (provider === 'zai' && process.env.ZAI_API_KEY) {\r\n env.ZAI_API_KEY = process.env.ZAI_API_KEY;\r\n }\r\n if (provider === 'kimi' && process.env.KIMI_API_KEY) {\r\n env.KIMI_API_KEY = process.env.KIMI_API_KEY;\r\n }\r\n if (provider === 'openrouter' && process.env.OPENROUTER_API_KEY) {\r\n env.OPENROUTER_API_KEY = process.env.OPENROUTER_API_KEY;\r\n }\r\n if (provider === 'anthropic' && process.env.ANTHROPIC_API_KEY) {\r\n env.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;\r\n }\r\n\r\n // Add optional prompt parameter if provided\r\n if (config.prompt) {\r\n env.PROMPT = config.prompt;\r\n }\r\n\r\n // Merge user-provided environment variables\r\n if (config.env) {\r\n Object.assign(env, config.env);\r\n }\r\n\r\n // Debug logging for provider routing\r\n console.error(`[agent-spawner] Building env for agent ${agentId}:`);\r\n console.error(`[agent-spawner] PROVIDER=${provider}, CLAUDE_API_PROVIDER=${provider}`);\r\n console.error(`[agent-spawner] Has ZAI_API_KEY: ${!!env.ZAI_API_KEY}`);\r\n console.error(`[agent-spawner] Has KIMI_API_KEY: ${!!env.KIMI_API_KEY}`);\r\n console.error(`[agent-spawner] Has ANTHROPIC_API_KEY: ${!!env.ANTHROPIC_API_KEY}`);\r\n\r\n return env;\r\n }\r\n\r\n /**\r\n * Build environment for worker process\r\n */\r\n private buildWorkerEnvironment(\r\n config: SpawnWorkerConfig,\r\n workerId: string,\r\n model: string,\r\n apiKey: string\r\n ): Record<string, string> {\r\n const env: Record<string, string> = {\r\n ...process.env as Record<string, string>,\r\n WORKER_ID: workerId,\r\n TEAM: config.team,\r\n COMPLEXITY: config.complexity,\r\n MODEL: model,\r\n API_KEY: apiKey,\r\n PROJECT_ROOT: this.projectRoot\r\n };\r\n\r\n if (config.agentType) {\r\n env.AGENT_TYPE = config.agentType;\r\n }\r\n\r\n if (config.taskContext) {\r\n env.TASK_CONTEXT = config.taskContext;\r\n }\r\n\r\n return env;\r\n }\r\n\r\n /**\r\n * Spawn the actual process\r\n */\r\n private async spawnProcess(\r\n agentType: string,\r\n env: Record<string, string>,\r\n background: boolean = true\r\n ): Promise<number> {\r\n const args = [\r\n 'src/cli/agent-executor.ts',\r\n '--agent-type', agentType\r\n ];\r\n\r\n const child = childSpawn('tsx', args, {\r\n env,\r\n stdio: background ? 'ignore' : 'inherit',\r\n detached: background\r\n });\r\n\r\n const pid = child.pid || 0;\r\n\r\n if (background) {\r\n child.unref();\r\n } else {\r\n await new Promise((resolve, reject) => {\r\n child.on('exit', (code) => {\r\n if (code !== 0) {\r\n reject(new Error(`Process exited with code ${code}`));\r\n } else {\r\n resolve(undefined);\r\n }\r\n });\r\n });\r\n }\r\n\r\n return pid;\r\n }\r\n\r\n /**\r\n * Find agent profile in directory structure\r\n */\r\n private findAgentProfile(agentType: string): string | null {\r\n const normalized = agentType.replace(/_/g, '-').toLowerCase();\r\n\r\n // Direct path\r\n const directPath = resolve(this.agentProfilesDir, `${normalized}.md`);\r\n if (existsSync(directPath)) {\r\n return directPath;\r\n }\r\n\r\n // Search in subdirectories\r\n const subdirs = [\r\n 'developers', 'testers', 'reviewers', 'architecture',\r\n 'dev-ops', 'product-owners', 'coordinators', 'analysts', 'utility'\r\n ];\r\n\r\n for (const subdir of subdirs) {\r\n const path = resolve(this.agentProfilesDir, subdir, `${normalized}.md`);\r\n if (existsSync(path)) {\r\n return path;\r\n }\r\n\r\n // Check nested subdirectories\r\n const nestedDirs = ['frontend', 'backend', 'database', 'quality', 'e2e', 'unit', 'validation', 'data'];\r\n for (const nested of nestedDirs) {\r\n const nestedPath = resolve(this.agentProfilesDir, subdir, nested, `${normalized}.md`);\r\n if (existsSync(nestedPath)) {\r\n return nestedPath;\r\n }\r\n }\r\n }\r\n\r\n return null;\r\n }\r\n\r\n /**\r\n * Find agent in subdirectories\r\n */\r\n private findAgentInSubdirs(normalized: string): string[] {\r\n const paths: string[] = [];\r\n const subdirs = [\r\n 'developers', 'testers', 'reviewers', 'architecture',\r\n 'dev-ops', 'product-owners', 'coordinators', 'analysts', 'utility'\r\n ];\r\n\r\n for (const subdir of subdirs) {\r\n const path = resolve(this.agentProfilesDir, subdir, `${normalized}.md`);\r\n paths.push(path);\r\n\r\n // Check nested directories\r\n const nestedDirs = ['frontend', 'backend', 'database', 'quality', 'e2e', 'unit', 'validation', 'data'];\r\n for (const nested of nestedDirs) {\r\n paths.push(resolve(this.agentProfilesDir, subdir, nested, `${normalized}.md`));\r\n }\r\n }\r\n\r\n return paths;\r\n }\r\n\r\n /**\r\n * Load team configuration from config file\r\n */\r\n private loadTeamConfig(team: string): Record<string, unknown> {\r\n if (!existsSync(this.agentConfigFile)) {\r\n throw new Error(`Team configuration not found at ${this.agentConfigFile}`);\r\n }\r\n\r\n const content = readFileSync(this.agentConfigFile, 'utf-8');\r\n const config = JSON.parse(content);\r\n\r\n if (!config.teams || !config.teams[team]) {\r\n throw new Error(`Invalid or missing provider configuration for team: ${team}`);\r\n }\r\n\r\n return config.teams[team] as Record<string, unknown>;\r\n }\r\n\r\n /**\r\n * Select model based on complexity\r\n */\r\n private selectModel(team: string, complexity: 'simple' | 'complex'): string {\r\n const config = this.loadTeamConfig(team);\r\n const workers = config.workers as Record<string, unknown>;\r\n const models = workers?.models as Record<string, unknown>;\r\n\r\n if (models && models[complexity]) {\r\n return models[complexity] as string;\r\n }\r\n\r\n // Fallback to default complexity\r\n const defaultComplexity = 'simple';\r\n if (models && models[defaultComplexity]) {\r\n return models[defaultComplexity] as string;\r\n }\r\n\r\n return 'gpt-4';\r\n }\r\n\r\n /**\r\n * Get API key from environment\r\n */\r\n private getApiKey(team: string, role: 'coordinator' | 'workers'): string {\r\n const config = this.loadTeamConfig(team);\r\n const roleConfig = config[role] as Record<string, unknown>;\r\n\r\n if (!roleConfig) {\r\n throw new Error(`No configuration found for team=${team}, role=${role}`);\r\n }\r\n\r\n const apiKeyEnvVar = roleConfig.apiKeyEnvVar as string;\r\n\r\n if (!apiKeyEnvVar) {\r\n throw new Error(`apiKeyEnvVar not configured for team=${team}, role=${role}`);\r\n }\r\n\r\n const apiKey = process.env[apiKeyEnvVar];\r\n\r\n if (!apiKey) {\r\n throw new Error(`API key not found in environment variable: ${apiKeyEnvVar}`);\r\n }\r\n\r\n return apiKey;\r\n }\r\n\r\n /**\r\n * Route worker to appropriate provider\r\n */\r\n private routeWorkerProvider(\r\n providerMode: string,\r\n team: string,\r\n model: string,\r\n apiKey: string\r\n ): void {\r\n const config = this.loadTeamConfig(team);\r\n const workers = config.workers as Record<string, unknown>;\r\n const provider = workers?.provider as string;\r\n const baseUrl = workers?.baseUrl as string;\r\n\r\n switch (providerMode) {\r\n case 'auto':\r\n this.routeAutoProvider(provider, baseUrl, model, apiKey);\r\n break;\r\n case 'zai':\r\n process.env.ZAI_API_KEY = apiKey;\r\n process.env.ZAI_BASE_URL = baseUrl;\r\n process.env.ZAI_MODEL = model;\r\n break;\r\n case 'anthropic':\r\n process.env.ANTHROPIC_API_KEY = apiKey;\r\n process.env.ANTHROPIC_BASE_URL = baseUrl;\r\n process.env.ANTHROPIC_MODEL = model;\r\n break;\r\n default:\r\n throw new Error(`Invalid provider mode: ${providerMode}`);\r\n }\r\n }\r\n\r\n /**\r\n * Route to appropriate provider based on configuration\r\n */\r\n private routeAutoProvider(provider: string, baseUrl: string, model: string, apiKey: string): void {\r\n switch (provider) {\r\n case 'zai':\r\n process.env.ZAI_API_KEY = apiKey;\r\n process.env.ZAI_BASE_URL = baseUrl;\r\n process.env.ZAI_MODEL = model;\r\n break;\r\n case 'anthropic':\r\n process.env.ANTHROPIC_API_KEY = apiKey;\r\n process.env.ANTHROPIC_BASE_URL = baseUrl;\r\n process.env.ANTHROPIC_MODEL = model;\r\n break;\r\n default:\r\n throw new Error(`Unsupported provider: ${provider}`);\r\n }\r\n }\r\n}\r\n\r\nexport type { SpawnAgentConfig, SpawnResult, ProviderConfig, SpawnWorkerConfig };\r\n"],"names":["existsSync","readFileSync","resolve","spawn","childSpawn","v4","uuidv4","getEnvValue","getNetworkName","AgentSpawner","projectRoot","agentProfilesDir","agentConfigFile","process","cwd","spawnAgent","config","timestamp","Date","toISOString","agentId","generateAgentId","agentType","validateSpawnConfig","agentExists","validateAgentExists","pid","status","error","provider","model","providerConfig","parseAgentProvider","env","buildEnvironment","spawnProcess","background","metadata","taskId","iteration","mode","Error","message","String","spawnWorker","workerId","generateWorkerId","team","validateWorkerConfig","teamConfig","loadTeamConfig","selectModel","complexity","apiKey","getApiKey","buildWorkerEnvironment","routeWorkerProvider","providerMode","normalized","replace","toLowerCase","possiblePaths","findAgentInSubdirs","some","path","agentPath","findAgentProfile","content","providerMatch","match","params","providerMatch_","modelMatch","trim","now","random","Math","toString","substring","uuid","errors","push","taskIdValidation","validateTaskId","valid","undefined","includes","length","join","taskIdPattern","test","AGENT_ID","AGENT_TYPE","TASK_ID","ITERATION","MODE","PROVIDER","CLAUDE_API_PROVIDER","MODEL","SPAWNED_AT","PROJECT_ROOT","CFN_REDIS_HOST","CFN_REDIS_PORT","CFN_REDIS_PASSWORD","CFN_NETWORK_NAME","ZAI_API_KEY","KIMI_API_KEY","OPENROUTER_API_KEY","ANTHROPIC_API_KEY","prompt","PROMPT","Object","assign","console","WORKER_ID","TEAM","COMPLEXITY","API_KEY","taskContext","TASK_CONTEXT","args","child","stdio","detached","unref","Promise","reject","on","code","directPath","subdirs","subdir","nestedDirs","nested","nestedPath","paths","JSON","parse","teams","workers","models","defaultComplexity","role","roleConfig","apiKeyEnvVar","baseUrl","routeAutoProvider","ZAI_BASE_URL","ZAI_MODEL","ANTHROPIC_BASE_URL","ANTHROPIC_MODEL"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,YAAY,QAAQ,KAAK;AAC9C,SAASC,OAAO,QAAc,OAAO;AACrC,SAAuBC,SAASC,UAAU,QAAQ,gBAAgB;AAClE,SAASC,MAAMC,MAAM,QAAQ,OAAO;AAEpC,SAASC,WAAW,EAAEC,cAAc,QAAQ,8BAA8B;AA0D1E;;CAEC,GACD,OAAO,MAAMC;IACHC,YAAoB;IACpBC,iBAAyB;IACzBC,gBAAwB;IAEhC,YAAYF,WAAoB,CAAE;QAChC,IAAI,CAACA,WAAW,GAAGA,eAAeG,QAAQC,GAAG;QAC7C,IAAI,CAACH,gBAAgB,GAAGT,QAAQ,IAAI,CAACQ,WAAW,EAAE;QAClD,IAAI,CAACE,eAAe,GAAGV,QAAQ,IAAI,CAACQ,WAAW,EAAE;IACnD;IAEA;;GAEC,GACD,MAAMK,WAAWC,MAAwB,EAAwB;QAC/D,MAAMC,YAAY,IAAIC,OAAOC,WAAW;QACxC,MAAMC,UAAU,IAAI,CAACC,eAAe,CAACL,OAAOM,SAAS;QAErD,IAAI;YACF,yBAAyB;YACzB,IAAI,CAACC,mBAAmB,CAACP;YAEzB,qBAAqB;YACrB,MAAMQ,cAAc,MAAM,IAAI,CAACC,mBAAmB,CAACT,OAAOM,SAAS;YACnE,IAAI,CAACE,aAAa;gBAChB,OAAO;oBACLJ;oBACAM,KAAK,CAAC;oBACNC,QAAQ;oBACRV;oBACAW,OAAO,CAAC,sBAAsB,EAAEZ,OAAOM,SAAS,EAAE;gBACpD;YACF;YAEA,0DAA0D;YAC1D,IAAIO,WAAWb,OAAOa,QAAQ;YAC9B,IAAIC,QAAQd,OAAOc,KAAK;YAExB,IAAI,CAACD,YAAY,CAACC,OAAO;gBACvB,MAAMC,iBAAiB,MAAM,IAAI,CAACC,kBAAkB,CAAChB,OAAOM,SAAS;gBACrEO,WAAWA,YAAYE,eAAeF,QAAQ;gBAC9CC,QAAQA,SAASC,eAAeD,KAAK;YACvC;YAEA,8BAA8B;YAC9B,MAAMG,MAAM,IAAI,CAACC,gBAAgB,CAAClB,QAAQI,SAASS,UAAUC;YAE7D,oBAAoB;YACpB,MAAMJ,MAAM,MAAM,IAAI,CAACS,YAAY,CAACnB,OAAOM,SAAS,EAAEW,KAAKjB,OAAOoB,UAAU;YAE5E,OAAO;gBACLhB;gBACAM;gBACAC,QAAQ;gBACRV;gBACAoB,UAAU;oBACRf,WAAWN,OAAOM,SAAS;oBAC3BgB,QAAQtB,OAAOsB,MAAM;oBACrBC,WAAWvB,OAAOuB,SAAS;oBAC3BC,MAAMxB,OAAOwB,IAAI;oBACjBX;oBACAC;gBACF;YACF;QACF,EAAE,OAAOF,OAAO;YACd,OAAO;gBACLR;gBACAM,KAAK,CAAC;gBACNC,QAAQ;gBACRV;gBACAW,OAAOA,iBAAiBa,QAAQb,MAAMc,OAAO,GAAGC,OAAOf;YACzD;QACF;IACF;IAEA;;GAEC,GACD,MAAMgB,YAAY5B,MAAyB,EAAwB;QACjE,MAAMC,YAAY,IAAIC,OAAOC,WAAW;QACxC,MAAM0B,WAAW,IAAI,CAACC,gBAAgB,CAAC9B,OAAO+B,IAAI;QAElD,IAAI;YACF,gCAAgC;YAChC,IAAI,CAACC,oBAAoB,CAAChC;YAE1B,mCAAmC;YACnC,MAAMiC,aAAa,IAAI,CAACC,cAAc,CAAClC,OAAO+B,IAAI;YAElD,mCAAmC;YACnC,MAAMjB,QAAQ,IAAI,CAACqB,WAAW,CAACnC,OAAO+B,IAAI,EAAE/B,OAAOoC,UAAU;YAE7D,+BAA+B;YAC/B,MAAMC,SAAS,IAAI,CAACC,SAAS,CAACtC,OAAO+B,IAAI,EAAE;YAE3C,+BAA+B;YAC/B,MAAMd,MAAM,IAAI,CAACsB,sBAAsB,CAACvC,QAAQ6B,UAAUf,OAAOuB;YAEjE,mBAAmB;YACnB,IAAI,CAACG,mBAAmB,CAACxC,OAAOyC,YAAY,EAAEzC,OAAO+B,IAAI,EAAEjB,OAAOuB;YAElE,OAAO;gBACLjC,SAASyB;gBACTnB,KAAK;gBACLC,QAAQ;gBACRV;gBACAoB,UAAU;oBACRU,MAAM/B,OAAO+B,IAAI;oBACjBK,YAAYpC,OAAOoC,UAAU;oBAC7BtB;oBACAD,UAAUb,OAAOyC,YAAY;gBAC/B;YACF;QACF,EAAE,OAAO7B,OAAO;YACd,OAAO;gBACLR,SAASyB;gBACTnB,KAAK,CAAC;gBACNC,QAAQ;gBACRV;gBACAW,OAAOA,iBAAiBa,QAAQb,MAAMc,OAAO,GAAGC,OAAOf;YACzD;QACF;IACF;IAEA;;GAEC,GACD,MAAMH,oBAAoBH,SAAiB,EAAoB;QAC7D,sEAAsE;QACtE,MAAMoC,aAAapC,UAAUqC,OAAO,CAAC,MAAM,KAAKC,WAAW;QAE3D,4CAA4C;QAC5C,MAAMC,gBAAgB;YACpB3D,QAAQ,IAAI,CAACS,gBAAgB,EAAE,GAAG+C,WAAW,GAAG,CAAC;YACjD,0BAA0B;eACvB,IAAI,CAACI,kBAAkB,CAACJ;SAC5B;QAED,OAAOG,cAAcE,IAAI,CAACC,CAAAA,OAAQhE,WAAWgE;IAC/C;IAEA;;GAEC,GACD,MAAMhC,mBAAmBV,SAAiB,EAA2B;QACnE,MAAM2C,YAAY,IAAI,CAACC,gBAAgB,CAAC5C;QAExC,IAAI,CAAC2C,WAAW;YACd,OAAO;gBACLpC,UAAU;gBACVC,OAAO;YACT;QACF;QAEA,IAAI;YACF,MAAMqC,UAAUlE,aAAagE,WAAW;YACxC,MAAMG,gBAAgBD,QAAQE,KAAK,CAAC;YAEpC,IAAID,eAAe;gBACjB,MAAME,SAASF,aAAa,CAAC,EAAE;gBAC/B,MAAMG,iBAAiBD,OAAOD,KAAK,CAAC;gBACpC,MAAMG,aAAaF,OAAOD,KAAK,CAAC;gBAEhC,OAAO;oBACLxC,UAAU0C,gBAAgB,CAAC,EAAE,IAAI;oBACjCzC,OAAO0C,YAAY,CAAC,EAAE,EAAEC,UAAU;gBACpC;YACF;QACF,EAAE,OAAO7C,OAAO;QACd,kBAAkB;QACpB;QAEA,OAAO;YACLC,UAAU;YACVC,OAAO;QACT;IACF;IAEA;;GAEC,GACD,AAAQT,gBAAgBC,SAAiB,EAAU;QACjD,MAAML,YAAYC,KAAKwD,GAAG;QAC1B,MAAMC,SAASC,KAAKD,MAAM,GAAGE,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG;QACvD,OAAO,CAAC,MAAM,EAAExD,UAAU,CAAC,EAAEL,UAAU,CAAC,EAAE0D,QAAQ;IACpD;IAEA;;GAEC,GACD,AAAQ7B,iBAAiBC,IAAY,EAAU;QAC7C,MAAMgC,OAAOzE,SAASwE,SAAS,CAAC,GAAG;QACnC,OAAO,CAAC,OAAO,EAAE/B,KAAK,CAAC,EAAEgC,MAAM;IACjC;IAEA;;GAEC,GACD,AAAQxD,oBAAoBP,MAAwB,EAAQ;QAC1D,MAAMgE,SAAmB,EAAE;QAE3B,IAAI,CAAChE,OAAOM,SAAS,IAAI,OAAON,OAAOM,SAAS,KAAK,UAAU;YAC7D0D,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAACjE,OAAOsB,MAAM,IAAI,OAAOtB,OAAOsB,MAAM,KAAK,UAAU;YACvD0C,OAAOC,IAAI,CAAC;QACd,OAAO;YACL,MAAMC,mBAAmB,IAAI,CAACC,cAAc,CAACnE,OAAOsB,MAAM;YAC1D,IAAI,CAAC4C,iBAAiBE,KAAK,EAAE;gBAC3BJ,OAAOC,IAAI,CAACC,iBAAiBtD,KAAK,IAAI;YACxC;QACF;QAEA,IAAIZ,OAAOuB,SAAS,KAAK8C,aAAa,OAAOrE,OAAOuB,SAAS,KAAK,UAAU;YAC1EyC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAO;YAAY;SAAa,CAACK,QAAQ,CAACtE,OAAOwB,IAAI,GAAG;YAC5DwC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAID,OAAOO,MAAM,GAAG,GAAG;YACrB,MAAM,IAAI9C,MAAM,CAAC,kCAAkC,EAAEuC,OAAOQ,IAAI,CAAC,OAAO;QAC1E;IACF;IAEA;;GAEC,GACD,AAAQxC,qBAAqBhC,MAAyB,EAAQ;QAC5D,MAAMgE,SAAmB,EAAE;QAE3B,IAAI,CAAChE,OAAO+B,IAAI,IAAI,OAAO/B,OAAO+B,IAAI,KAAK,UAAU;YACnDiC,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAU;SAAU,CAACK,QAAQ,CAACtE,OAAOoC,UAAU,GAAG;YACtD4B,OAAOC,IAAI,CAAC;QACd;QAEA,IAAI,CAAC;YAAC;YAAQ;YAAO;SAAY,CAACK,QAAQ,CAACtE,OAAOyC,YAAY,GAAG;YAC/DuB,OAAOC,IAAI,CAAC;QACd;QAEA,IAAID,OAAOO,MAAM,GAAG,GAAG;YACrB,MAAM,IAAI9C,MAAM,CAAC,yCAAyC,EAAEuC,OAAOQ,IAAI,CAAC,OAAO;QACjF;IACF;IAEA;;;;;;;;;GASC,GACD,AAAQL,eAAe7C,MAAc,EAAoB;QACvD,IAAI,OAAOA,WAAW,YAAYA,OAAOiD,MAAM,KAAK,GAAG;YACrD,OAAO;gBAAEH,OAAO;gBAAOxD,OAAO;YAAqC;QACrE;QAEA,6FAA6F;QAC7F,MAAM6D,gBAAgB;QACtB,IAAI,CAACA,cAAcC,IAAI,CAACpD,SAAS;YAC/B,OAAO;gBACL8C,OAAO;gBACPxD,OAAO;YACT;QACF;QAEA,OAAO;YAAEwD,OAAO;QAAK;IACvB;IAEA;;;;;;;;GAQC,GACD,AAAQlD,iBACNlB,MAAwB,EACxBI,OAAe,EACfS,QAAgB,EAChBC,KAAa,EACW;QACxB,MAAMG,MAA8B;YAClC,GAAGpB,QAAQoB,GAAG;YACd0D,UAAUvE;YACVwE,YAAY5E,OAAOM,SAAS;YAC5BuE,SAAS7E,OAAOsB,MAAM;YACtBwD,WAAWnD,OAAO3B,OAAOuB,SAAS;YAClCwD,MAAM/E,OAAOwB,IAAI;YACjB,gDAAgD;YAChDwD,UAAUnE;YACVoE,qBAAqBpE;YACrBqE,OAAOpE;YACPqE,YAAY,IAAIjF,OAAOC,WAAW;YAClCiF,cAAc,IAAI,CAAC1F,WAAW;YAC9B,6EAA6E;YAC7E2F,gBAAgB9F,YAAY,cAAc;YAC1C+F,gBAAgB/F,YAAY,cAAc;YAC1C,mFAAmF;YACnF,qFAAqF;YACrFgG,oBAAoB1F,QAAQoB,GAAG,CAACsE,kBAAkB,IAAI;YACtDC,kBAAkBhG,eAAe;QACnC;QAEA,8CAA8C;QAC9C,oFAAoF;QACpF,IAAIqB,aAAa,SAAShB,QAAQoB,GAAG,CAACwE,WAAW,EAAE;YACjDxE,IAAIwE,WAAW,GAAG5F,QAAQoB,GAAG,CAACwE,WAAW;QAC3C;QACA,IAAI5E,aAAa,UAAUhB,QAAQoB,GAAG,CAACyE,YAAY,EAAE;YACnDzE,IAAIyE,YAAY,GAAG7F,QAAQoB,GAAG,CAACyE,YAAY;QAC7C;QACA,IAAI7E,aAAa,gBAAgBhB,QAAQoB,GAAG,CAAC0E,kBAAkB,EAAE;YAC/D1E,IAAI0E,kBAAkB,GAAG9F,QAAQoB,GAAG,CAAC0E,kBAAkB;QACzD;QACA,IAAI9E,aAAa,eAAehB,QAAQoB,GAAG,CAAC2E,iBAAiB,EAAE;YAC7D3E,IAAI2E,iBAAiB,GAAG/F,QAAQoB,GAAG,CAAC2E,iBAAiB;QACvD;QAEA,4CAA4C;QAC5C,IAAI5F,OAAO6F,MAAM,EAAE;YACjB5E,IAAI6E,MAAM,GAAG9F,OAAO6F,MAAM;QAC5B;QAEA,4CAA4C;QAC5C,IAAI7F,OAAOiB,GAAG,EAAE;YACd8E,OAAOC,MAAM,CAAC/E,KAAKjB,OAAOiB,GAAG;QAC/B;QAEA,qCAAqC;QACrCgF,QAAQrF,KAAK,CAAC,CAAC,uCAAuC,EAAER,QAAQ,CAAC,CAAC;QAClE6F,QAAQrF,KAAK,CAAC,CAAC,2BAA2B,EAAEC,SAAS,sBAAsB,EAAEA,UAAU;QACvFoF,QAAQrF,KAAK,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAACK,IAAIwE,WAAW,EAAE;QACvEQ,QAAQrF,KAAK,CAAC,CAAC,oCAAoC,EAAE,CAAC,CAACK,IAAIyE,YAAY,EAAE;QACzEO,QAAQrF,KAAK,CAAC,CAAC,yCAAyC,EAAE,CAAC,CAACK,IAAI2E,iBAAiB,EAAE;QAEnF,OAAO3E;IACT;IAEA;;GAEC,GACD,AAAQsB,uBACNvC,MAAyB,EACzB6B,QAAgB,EAChBf,KAAa,EACbuB,MAAc,EACU;QACxB,MAAMpB,MAA8B;YAClC,GAAGpB,QAAQoB,GAAG;YACdiF,WAAWrE;YACXsE,MAAMnG,OAAO+B,IAAI;YACjBqE,YAAYpG,OAAOoC,UAAU;YAC7B8C,OAAOpE;YACPuF,SAAShE;YACT+C,cAAc,IAAI,CAAC1F,WAAW;QAChC;QAEA,IAAIM,OAAOM,SAAS,EAAE;YACpBW,IAAI2D,UAAU,GAAG5E,OAAOM,SAAS;QACnC;QAEA,IAAIN,OAAOsG,WAAW,EAAE;YACtBrF,IAAIsF,YAAY,GAAGvG,OAAOsG,WAAW;QACvC;QAEA,OAAOrF;IACT;IAEA;;GAEC,GACD,MAAcE,aACZb,SAAiB,EACjBW,GAA2B,EAC3BG,aAAsB,IAAI,EACT;QACjB,MAAMoF,OAAO;YACX;YACA;YAAgBlG;SACjB;QAED,MAAMmG,QAAQrH,WAAW,OAAOoH,MAAM;YACpCvF;YACAyF,OAAOtF,aAAa,WAAW;YAC/BuF,UAAUvF;QACZ;QAEA,MAAMV,MAAM+F,MAAM/F,GAAG,IAAI;QAEzB,IAAIU,YAAY;YACdqF,MAAMG,KAAK;QACb,OAAO;YACL,MAAM,IAAIC,QAAQ,CAAC3H,SAAS4H;gBAC1BL,MAAMM,EAAE,CAAC,QAAQ,CAACC;oBAChB,IAAIA,SAAS,GAAG;wBACdF,OAAO,IAAIrF,MAAM,CAAC,yBAAyB,EAAEuF,MAAM;oBACrD,OAAO;wBACL9H,QAAQmF;oBACV;gBACF;YACF;QACF;QAEA,OAAO3D;IACT;IAEA;;GAEC,GACD,AAAQwC,iBAAiB5C,SAAiB,EAAiB;QACzD,MAAMoC,aAAapC,UAAUqC,OAAO,CAAC,MAAM,KAAKC,WAAW;QAE3D,cAAc;QACd,MAAMqE,aAAa/H,QAAQ,IAAI,CAACS,gBAAgB,EAAE,GAAG+C,WAAW,GAAG,CAAC;QACpE,IAAI1D,WAAWiI,aAAa;YAC1B,OAAOA;QACT;QAEA,2BAA2B;QAC3B,MAAMC,UAAU;YACd;YAAc;YAAW;YAAa;YACtC;YAAW;YAAkB;YAAgB;YAAY;SAC1D;QAED,KAAK,MAAMC,UAAUD,QAAS;YAC5B,MAAMlE,OAAO9D,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQ,GAAGzE,WAAW,GAAG,CAAC;YACtE,IAAI1D,WAAWgE,OAAO;gBACpB,OAAOA;YACT;YAEA,8BAA8B;YAC9B,MAAMoE,aAAa;gBAAC;gBAAY;gBAAW;gBAAY;gBAAW;gBAAO;gBAAQ;gBAAc;aAAO;YACtG,KAAK,MAAMC,UAAUD,WAAY;gBAC/B,MAAME,aAAapI,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQE,QAAQ,GAAG3E,WAAW,GAAG,CAAC;gBACpF,IAAI1D,WAAWsI,aAAa;oBAC1B,OAAOA;gBACT;YACF;QACF;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQxE,mBAAmBJ,UAAkB,EAAY;QACvD,MAAM6E,QAAkB,EAAE;QAC1B,MAAML,UAAU;YACd;YAAc;YAAW;YAAa;YACtC;YAAW;YAAkB;YAAgB;YAAY;SAC1D;QAED,KAAK,MAAMC,UAAUD,QAAS;YAC5B,MAAMlE,OAAO9D,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQ,GAAGzE,WAAW,GAAG,CAAC;YACtE6E,MAAMtD,IAAI,CAACjB;YAEX,2BAA2B;YAC3B,MAAMoE,aAAa;gBAAC;gBAAY;gBAAW;gBAAY;gBAAW;gBAAO;gBAAQ;gBAAc;aAAO;YACtG,KAAK,MAAMC,UAAUD,WAAY;gBAC/BG,MAAMtD,IAAI,CAAC/E,QAAQ,IAAI,CAACS,gBAAgB,EAAEwH,QAAQE,QAAQ,GAAG3E,WAAW,GAAG,CAAC;YAC9E;QACF;QAEA,OAAO6E;IACT;IAEA;;GAEC,GACD,AAAQrF,eAAeH,IAAY,EAA2B;QAC5D,IAAI,CAAC/C,WAAW,IAAI,CAACY,eAAe,GAAG;YACrC,MAAM,IAAI6B,MAAM,CAAC,gCAAgC,EAAE,IAAI,CAAC7B,eAAe,EAAE;QAC3E;QAEA,MAAMuD,UAAUlE,aAAa,IAAI,CAACW,eAAe,EAAE;QACnD,MAAMI,SAASwH,KAAKC,KAAK,CAACtE;QAE1B,IAAI,CAACnD,OAAO0H,KAAK,IAAI,CAAC1H,OAAO0H,KAAK,CAAC3F,KAAK,EAAE;YACxC,MAAM,IAAIN,MAAM,CAAC,oDAAoD,EAAEM,MAAM;QAC/E;QAEA,OAAO/B,OAAO0H,KAAK,CAAC3F,KAAK;IAC3B;IAEA;;GAEC,GACD,AAAQI,YAAYJ,IAAY,EAAEK,UAAgC,EAAU;QAC1E,MAAMpC,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAM4F,UAAU3H,OAAO2H,OAAO;QAC9B,MAAMC,SAASD,SAASC;QAExB,IAAIA,UAAUA,MAAM,CAACxF,WAAW,EAAE;YAChC,OAAOwF,MAAM,CAACxF,WAAW;QAC3B;QAEA,iCAAiC;QACjC,MAAMyF,oBAAoB;QAC1B,IAAID,UAAUA,MAAM,CAACC,kBAAkB,EAAE;YACvC,OAAOD,MAAM,CAACC,kBAAkB;QAClC;QAEA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQvF,UAAUP,IAAY,EAAE+F,IAA+B,EAAU;QACvE,MAAM9H,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAMgG,aAAa/H,MAAM,CAAC8H,KAAK;QAE/B,IAAI,CAACC,YAAY;YACf,MAAM,IAAItG,MAAM,CAAC,gCAAgC,EAAEM,KAAK,OAAO,EAAE+F,MAAM;QACzE;QAEA,MAAME,eAAeD,WAAWC,YAAY;QAE5C,IAAI,CAACA,cAAc;YACjB,MAAM,IAAIvG,MAAM,CAAC,qCAAqC,EAAEM,KAAK,OAAO,EAAE+F,MAAM;QAC9E;QAEA,MAAMzF,SAASxC,QAAQoB,GAAG,CAAC+G,aAAa;QAExC,IAAI,CAAC3F,QAAQ;YACX,MAAM,IAAIZ,MAAM,CAAC,2CAA2C,EAAEuG,cAAc;QAC9E;QAEA,OAAO3F;IACT;IAEA;;GAEC,GACD,AAAQG,oBACNC,YAAoB,EACpBV,IAAY,EACZjB,KAAa,EACbuB,MAAc,EACR;QACN,MAAMrC,SAAS,IAAI,CAACkC,cAAc,CAACH;QACnC,MAAM4F,UAAU3H,OAAO2H,OAAO;QAC9B,MAAM9G,WAAW8G,SAAS9G;QAC1B,MAAMoH,UAAUN,SAASM;QAEzB,OAAQxF;YACN,KAAK;gBACH,IAAI,CAACyF,iBAAiB,CAACrH,UAAUoH,SAASnH,OAAOuB;gBACjD;YACF,KAAK;gBACHxC,QAAQoB,GAAG,CAACwE,WAAW,GAAGpD;gBAC1BxC,QAAQoB,GAAG,CAACkH,YAAY,GAAGF;gBAC3BpI,QAAQoB,GAAG,CAACmH,SAAS,GAAGtH;gBACxB;YACF,KAAK;gBACHjB,QAAQoB,GAAG,CAAC2E,iBAAiB,GAAGvD;gBAChCxC,QAAQoB,GAAG,CAACoH,kBAAkB,GAAGJ;gBACjCpI,QAAQoB,GAAG,CAACqH,eAAe,GAAGxH;gBAC9B;YACF;gBACE,MAAM,IAAIW,MAAM,CAAC,uBAAuB,EAAEgB,cAAc;QAC5D;IACF;IAEA;;GAEC,GACD,AAAQyF,kBAAkBrH,QAAgB,EAAEoH,OAAe,EAAEnH,KAAa,EAAEuB,MAAc,EAAQ;QAChG,OAAQxB;YACN,KAAK;gBACHhB,QAAQoB,GAAG,CAACwE,WAAW,GAAGpD;gBAC1BxC,QAAQoB,GAAG,CAACkH,YAAY,GAAGF;gBAC3BpI,QAAQoB,GAAG,CAACmH,SAAS,GAAGtH;gBACxB;YACF,KAAK;gBACHjB,QAAQoB,GAAG,CAAC2E,iBAAiB,GAAGvD;gBAChCxC,QAAQoB,GAAG,CAACoH,kBAAkB,GAAGJ;gBACjCpI,QAAQoB,GAAG,CAACqH,eAAe,GAAGxH;gBAC9B;YACF;gBACE,MAAM,IAAIW,MAAM,CAAC,sBAAsB,EAAEZ,UAAU;QACvD;IACF;AACF"}
@@ -9,7 +9,8 @@ const path = require('path');
9
9
  let AgentTokenManager = class AgentTokenManager {
10
10
  constructor(options = {}){
11
11
  // Support CFN standard variables with fallback to legacy MCP_REDIS_URL
12
- const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';
12
+ // FIX: Default to 'localhost' for CLI mode (host execution), not 'cfn-redis' (Docker)
13
+ const redisHost = process.env.CFN_REDIS_HOST || 'localhost';
13
14
  const redisPort = process.env.CFN_REDIS_PORT || '6379';
14
15
  const defaultUrl = `redis://${redisHost}:${redisPort}`;
15
16
  this.redisUrl = options.redisUrl || process.env.CFN_REDIS_URL || process.env.MCP_REDIS_URL || defaultUrl;
@@ -1 +1 @@
1
- {"version":3,"sources":["../../src/cli/agent-token-manager.js"],"sourcesContent":["#!/usr/bin/env node\r\n\r\n/**\r\n * Agent Token Management CLI\r\n * Generate, register, and manage agent tokens for MCP authentication\r\n */\r\n\r\nconst crypto = require('crypto');\r\nconst Redis = require('redis');\r\nconst fs = require('fs').promises;\r\nconst path = require('path');\r\n\r\nclass AgentTokenManager {\r\n constructor(options = {}) {\r\n // Support CFN standard variables with fallback to legacy MCP_REDIS_URL\r\n const redisHost = process.env.CFN_REDIS_HOST || 'cfn-redis';\r\n const redisPort = process.env.CFN_REDIS_PORT || '6379';\r\n const defaultUrl = `redis://${redisHost}:${redisPort}`;\r\n this.redisUrl = options.redisUrl || process.env.CFN_REDIS_URL || process.env.MCP_REDIS_URL || defaultUrl;\r\n this.redis = null;\r\n this.agentConfigPath = options.agentConfigPath || './config/agent-whitelist.json';\r\n this.defaultExpiry = options.defaultExpiry || '24h';\r\n }\r\n\r\n async initialize() {\r\n try {\r\n this.redis = Redis.createClient({ url: this.redisUrl });\r\n await this.redis.connect();\r\n console.log('Connected to Redis for token management');\r\n } catch (error) {\r\n console.error('Failed to connect to Redis:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n async loadAgentConfig() {\r\n try {\r\n const configPath = path.resolve(this.agentConfigPath);\r\n const config = await fs.readFile(configPath, 'utf8');\r\n return JSON.parse(config);\r\n } catch (error) {\r\n console.error('Failed to load agent config:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n generateToken() {\r\n return crypto.randomBytes(32).toString('hex');\r\n }\r\n\r\n parseExpiry(expiry) {\r\n if (typeof expiry === 'number') {\r\n return expiry;\r\n }\r\n\r\n const match = expiry.match(/^(\\d+)([smhd])$/);\r\n if (!match) {\r\n return 86400; // Default to 24 hours\r\n }\r\n\r\n const value = parseInt(match[1]);\r\n const unit = match[2];\r\n const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };\r\n\r\n return value * (multipliers[unit] || 86400);\r\n }\r\n\r\n async registerAgentToken(agentType, options = {}) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}. Available types: ${config.agents.map(a => a.type).join(', ')}`);\r\n }\r\n\r\n const token = this.generateToken();\r\n const expiresIn = options.expiresIn || this.defaultExpiry;\r\n const expiresAt = Date.now() + (this.parseExpiry(expiresIn) * 1000);\r\n\r\n const tokenData = {\r\n token,\r\n agentType,\r\n displayName: agentConfig.displayName,\r\n skills: agentConfig.skills,\r\n allowedMcpServers: agentConfig.allowedMcpServers,\r\n resourceLimits: agentConfig.resourceLimits,\r\n expiresAt,\r\n createdAt: Date.now(),\r\n createdBy: options.createdBy || 'cli',\r\n description: options.description || `Token for ${agentConfig.displayName}`\r\n };\r\n\r\n // Store in Redis\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = JSON.stringify(tokenData);\r\n const ttlSeconds = this.parseExpiry(expiresIn);\r\n\r\n await this.redis.setEx(key, ttlSeconds, value);\r\n\r\n console.log(`✅ Token registered successfully!`);\r\n console.log(` Agent Type: ${agentConfig.displayName} (${agentType})`);\r\n console.log(` Token: ${token}`);\r\n console.log(` Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(` Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(` Expires: ${new Date(expiresAt).toISOString()}`);\r\n console.log(` Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(` Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n\r\n return tokenData;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to register token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listActiveTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n const keys = await this.redis.keys(pattern);\r\n const tokens = [];\r\n\r\n for (const key of keys) {\r\n const value = await this.redis.get(key);\r\n if (value) {\r\n const tokenData = JSON.parse(value);\r\n tokens.push({\r\n ...tokenData,\r\n key,\r\n status: tokenData.expiresAt > Date.now() ? 'active' : 'expired'\r\n });\r\n }\r\n }\r\n\r\n if (tokens.length === 0) {\r\n console.log('No active tokens found');\r\n return [];\r\n }\r\n\r\n console.log(`\\nActive Tokens (${tokens.length}):\\n`);\r\n console.log('Agent Type | Token | Expires At | Status');\r\n console.log('-------------------|------------------------------------|------------------------------|--------');\r\n\r\n for (const token of tokens) {\r\n const expiresAt = new Date(token.expiresAt).toISOString();\r\n const tokenShort = token.token.substring(0, 32);\r\n console.log(`${token.agentType.padEnd(17)} | ${tokenShort} | ${expiresAt} | ${token.status}`);\r\n }\r\n\r\n return tokens;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const exists = await this.redis.exists(key);\r\n\r\n if (!exists) {\r\n throw new Error(`Token not found for agent ${agentType}`);\r\n }\r\n\r\n await this.redis.del(key);\r\n console.log(`✅ Token revoked successfully for agent ${agentType}`);\r\n console.log(` Token: ${token}`);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeAllTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n const keys = await this.redis.keys(pattern);\r\n\r\n if (keys.length === 0) {\r\n console.log('No tokens found to revoke');\r\n return 0;\r\n }\r\n\r\n await this.redis.del(keys);\r\n console.log(`✅ Revoked ${keys.length} tokens${agentType ? ` for agent ${agentType}` : ''}`);\r\n return keys.length;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async validateToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = await this.redis.get(key);\r\n\r\n if (!value) {\r\n return { valid: false, reason: 'Token not found' };\r\n }\r\n\r\n const tokenData = JSON.parse(value);\r\n\r\n if (Date.now() > tokenData.expiresAt) {\r\n await this.redis.del(key);\r\n return { valid: false, reason: 'Token expired' };\r\n }\r\n\r\n return {\r\n valid: true,\r\n tokenData\r\n };\r\n\r\n } catch (error) {\r\n return { valid: false, reason: error.message };\r\n }\r\n }\r\n\r\n async getAgentInfo(agentType) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}`);\r\n }\r\n\r\n console.log(`\\nAgent Information: ${agentConfig.displayName}`);\r\n console.log('='.repeat(50));\r\n console.log(`Type: ${agentConfig.type}`);\r\n console.log(`Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(`Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(`Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(`Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n console.log(`Max Concurrent: ${agentConfig.resourceLimits.maxConcurrentRequests}`);\r\n console.log(`Description: ${agentConfig.description}`);\r\n\r\n return agentConfig;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to get agent info:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listAgentTypes() {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n\r\n console.log(`\\nAvailable Agent Types (${config.agents.length}):\\n`);\r\n console.log('Agent Type | Display Name | Skills Count');\r\n console.log('------------------------|--------------------------------|-------------');\r\n\r\n for (const agent of config.agents) {\r\n const type = agent.type.padEnd(22);\r\n const name = agent.displayName.padEnd(32);\r\n const skills = agent.skills.length;\r\n console.log(`${type} | ${name} | ${skills}`);\r\n }\r\n\r\n return config.agents.map(a => a.type);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list agent types:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async shutdown() {\r\n if (this.redis) {\r\n await this.redis.quit();\r\n }\r\n }\r\n}\r\n\r\n// CLI interface\r\nasync function main() {\r\n const args = process.argv.slice(2);\r\n const command = args[0];\r\n\r\n if (!command) {\r\n console.log(`\r\nAgent Token Management CLI\r\n\r\nUsage: node agent-token-manager.js <command> [options]\r\n\r\nCommands:\r\n register <agent-type> [options] Register a new token for an agent\r\n list [agent-type] List active tokens\r\n revoke <agent-type> <token> Revoke a specific token\r\n revoke-all [agent-type] Revoke all tokens (optionally for specific agent)\r\n validate <agent-type> <token> Validate a token\r\n info <agent-type> Show agent information\r\n types List available agent types\r\n\r\nOptions for 'register' command:\r\n --expires-in <duration> Token expiry (e.g., 1h, 30m, 7d) [default: 24h]\r\n --description <text> Token description\r\n --created-by <identifier> Creator identifier\r\n\r\nExamples:\r\n # Register token for frontend engineer\r\n node agent-token-manager.js register react-frontend-engineer\r\n\r\n # Register token with custom expiry\r\n node agent-token-manager.js register backend-developer --expires-in 2h\r\n\r\n # List all active tokens\r\n node agent-token-manager.js list\r\n\r\n # List tokens for specific agent\r\n node agent-token-manager.js list react-frontend-engineer\r\n\r\n # Revoke a specific token\r\n node agent-token-manager.js revoke react-frontend-engineer abc123...\r\n\r\n # Get agent information\r\n node agent-token-manager.js info security-specialist\r\n`);\r\n process.exit(0);\r\n }\r\n\r\n const tokenManager = new AgentTokenManager();\r\n\r\n try {\r\n await tokenManager.initialize();\r\n\r\n switch (command) {\r\n case 'register': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for register command');\r\n }\r\n\r\n const options = {};\r\n for (let i = 2; i < args.length; i++) {\r\n if (args[i] === '--expires-in') {\r\n options.expiresIn = args[++i];\r\n } else if (args[i] === '--description') {\r\n options.description = args[++i];\r\n } else if (args[i] === '--created-by') {\r\n options.createdBy = args[++i];\r\n }\r\n }\r\n\r\n await tokenManager.registerAgentToken(agentType, options);\r\n break;\r\n }\r\n\r\n case 'list': {\r\n const agentType = args[1];\r\n await tokenManager.listActiveTokens(agentType);\r\n break;\r\n }\r\n\r\n case 'revoke': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType || !token) {\r\n throw new Error('Agent type and token are required for revoke command');\r\n }\r\n await tokenManager.revokeToken(agentType, token);\r\n break;\r\n }\r\n\r\n case 'revoke-all': {\r\n const agentType = args[1];\r\n const count = await tokenManager.revokeAllTokens(agentType);\r\n console.log(`Revoked ${count} tokens`);\r\n break;\r\n }\r\n\r\n case 'validate': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType || !token) {\r\n throw new Error('Agent type and token are required for validate command');\r\n }\r\n\r\n const result = await tokenManager.validateToken(agentType, token);\r\n if (result.valid) {\r\n console.log('✅ Token is valid');\r\n console.log(` Agent Type: ${result.tokenData.agentType}`);\r\n console.log(` Skills: ${result.tokenData.skills.join(', ')}`);\r\n console.log(` Expires: ${new Date(result.tokenData.expiresAt).toISOString()}`);\r\n } else {\r\n console.log('❌ Token is invalid');\r\n console.log(` Reason: ${result.reason}`);\r\n }\r\n break;\r\n }\r\n\r\n case 'info': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for info command');\r\n }\r\n await tokenManager.getAgentInfo(agentType);\r\n break;\r\n }\r\n\r\n case 'types': {\r\n await tokenManager.listAgentTypes();\r\n break;\r\n }\r\n\r\n default:\r\n throw new Error(`Unknown command: ${command}`);\r\n }\r\n\r\n } catch (error) {\r\n console.error('❌ Error:', error.message);\r\n process.exit(1);\r\n } finally {\r\n await tokenManager.shutdown();\r\n }\r\n}\r\n\r\nif (require.main === module) {\r\n main().catch(error => {\r\n console.error('Fatal error:', error);\r\n process.exit(1);\r\n });\r\n}\r\n\r\nmodule.exports = AgentTokenManager;"],"names":["crypto","require","Redis","fs","promises","path","AgentTokenManager","options","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","defaultUrl","redisUrl","CFN_REDIS_URL","MCP_REDIS_URL","redis","agentConfigPath","defaultExpiry","initialize","createClient","url","connect","console","log","error","loadAgentConfig","configPath","resolve","config","readFile","JSON","parse","generateToken","randomBytes","toString","parseExpiry","expiry","match","value","parseInt","unit","multipliers","s","m","h","d","registerAgentToken","agentType","agentConfig","agents","find","a","type","Error","map","join","token","expiresIn","expiresAt","Date","now","tokenData","displayName","skills","allowedMcpServers","resourceLimits","createdAt","createdBy","description","key","stringify","ttlSeconds","setEx","toISOString","maxMemoryMB","maxRequestsPerMinute","message","listActiveTokens","pattern","keys","tokens","get","push","status","length","tokenShort","substring","padEnd","revokeToken","exists","del","revokeAllTokens","validateToken","valid","reason","getAgentInfo","repeat","maxConcurrentRequests","listAgentTypes","agent","name","shutdown","quit","main","args","argv","slice","command","exit","tokenManager","i","count","result","module","catch","exports"],"mappings":";AAEA;;;CAGC,GAED,MAAMA,SAASC,QAAQ;AACvB,MAAMC,QAAQD,QAAQ;AACtB,MAAME,KAAKF,QAAQ,MAAMG,QAAQ;AACjC,MAAMC,OAAOJ,QAAQ;AAErB,IAAA,AAAMK,oBAAN,MAAMA;IACJ,YAAYC,UAAU,CAAC,CAAC,CAAE;QACxB,uEAAuE;QACvE,MAAMC,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;QAChD,MAAMC,aAAa,CAAC,QAAQ,EAAEN,UAAU,CAAC,EAAEI,WAAW;QACtD,IAAI,CAACG,QAAQ,GAAGR,QAAQQ,QAAQ,IAAIN,QAAQC,GAAG,CAACM,aAAa,IAAIP,QAAQC,GAAG,CAACO,aAAa,IAAIH;QAC9F,IAAI,CAACI,KAAK,GAAG;QACb,IAAI,CAACC,eAAe,GAAGZ,QAAQY,eAAe,IAAI;QAClD,IAAI,CAACC,aAAa,GAAGb,QAAQa,aAAa,IAAI;IAChD;IAEA,MAAMC,aAAa;QACjB,IAAI;YACF,IAAI,CAACH,KAAK,GAAGhB,MAAMoB,YAAY,CAAC;gBAAEC,KAAK,IAAI,CAACR,QAAQ;YAAC;YACrD,MAAM,IAAI,CAACG,KAAK,CAACM,OAAO;YACxBC,QAAQC,GAAG,CAAC;QACd,EAAE,OAAOC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA;YAC7C,MAAMA;QACR;IACF;IAEA,MAAMC,kBAAkB;QACtB,IAAI;YACF,MAAMC,aAAaxB,KAAKyB,OAAO,CAAC,IAAI,CAACX,eAAe;YACpD,MAAMY,SAAS,MAAM5B,GAAG6B,QAAQ,CAACH,YAAY;YAC7C,OAAOI,KAAKC,KAAK,CAACH;QACpB,EAAE,OAAOJ,OAAO;YACdF,QAAQE,KAAK,CAAC,gCAAgCA;YAC9C,MAAMA;QACR;IACF;IAEAQ,gBAAgB;QACd,OAAOnC,OAAOoC,WAAW,CAAC,IAAIC,QAAQ,CAAC;IACzC;IAEAC,YAAYC,MAAM,EAAE;QAClB,IAAI,OAAOA,WAAW,UAAU;YAC9B,OAAOA;QACT;QAEA,MAAMC,QAAQD,OAAOC,KAAK,CAAC;QAC3B,IAAI,CAACA,OAAO;YACV,OAAO,OAAO,sBAAsB;QACtC;QAEA,MAAMC,QAAQC,SAASF,KAAK,CAAC,EAAE;QAC/B,MAAMG,OAAOH,KAAK,CAAC,EAAE;QACrB,MAAMI,cAAc;YAAEC,GAAG;YAAGC,GAAG;YAAIC,GAAG;YAAMC,GAAG;QAAM;QAErD,OAAOP,QAASG,CAAAA,WAAW,CAACD,KAAK,IAAI,KAAI;IAC3C;IAEA,MAAMM,mBAAmBC,SAAS,EAAE3C,UAAU,CAAC,CAAC,EAAE;QAChD,IAAI;YACF,MAAMwB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,UAAU,mBAAmB,EAAEnB,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI,EAAEG,IAAI,CAAC,OAAO;YACnH;YAEA,MAAMC,QAAQ,IAAI,CAACxB,aAAa;YAChC,MAAMyB,YAAYrD,QAAQqD,SAAS,IAAI,IAAI,CAACxC,aAAa;YACzD,MAAMyC,YAAYC,KAAKC,GAAG,KAAM,IAAI,CAACzB,WAAW,CAACsB,aAAa;YAE9D,MAAMI,YAAY;gBAChBL;gBACAT;gBACAe,aAAad,YAAYc,WAAW;gBACpCC,QAAQf,YAAYe,MAAM;gBAC1BC,mBAAmBhB,YAAYgB,iBAAiB;gBAChDC,gBAAgBjB,YAAYiB,cAAc;gBAC1CP;gBACAQ,WAAWP,KAAKC,GAAG;gBACnBO,WAAW/D,QAAQ+D,SAAS,IAAI;gBAChCC,aAAahE,QAAQgE,WAAW,IAAI,CAAC,UAAU,EAAEpB,YAAYc,WAAW,EAAE;YAC5E;YAEA,iBAAiB;YACjB,MAAMO,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQR,KAAKwC,SAAS,CAACT;YAC7B,MAAMU,aAAa,IAAI,CAACpC,WAAW,CAACsB;YAEpC,MAAM,IAAI,CAAC1C,KAAK,CAACyD,KAAK,CAACH,KAAKE,YAAYjC;YAExChB,QAAQC,GAAG,CAAC,CAAC,gCAAgC,CAAC;YAC9CD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYc,WAAW,CAAC,EAAE,EAAEf,UAAU,CAAC,CAAC;YACtEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;YAChClC,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACzDjC,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YACjFjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKD,WAAWe,WAAW,IAAI;YAC9DnD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YAC1EpD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAEnF,OAAOd;QAET,EAAE,OAAOrC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAMqD,iBAAiB9B,YAAY,IAAI,EAAE;QACvC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YACnC,MAAME,SAAS,EAAE;YAEjB,KAAK,MAAMX,OAAOU,KAAM;gBACtB,MAAMzC,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;gBACnC,IAAI/B,OAAO;oBACT,MAAMuB,YAAY/B,KAAKC,KAAK,CAACO;oBAC7B0C,OAAOE,IAAI,CAAC;wBACV,GAAGrB,SAAS;wBACZQ;wBACAc,QAAQtB,UAAUH,SAAS,GAAGC,KAAKC,GAAG,KAAK,WAAW;oBACxD;gBACF;YACF;YAEA,IAAIoB,OAAOI,MAAM,KAAK,GAAG;gBACvB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO,EAAE;YACX;YAEAD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyD,OAAOI,MAAM,CAAC,IAAI,CAAC;YACnD9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAMiC,SAASwB,OAAQ;gBAC1B,MAAMtB,YAAY,IAAIC,KAAKH,MAAME,SAAS,EAAEe,WAAW;gBACvD,MAAMY,aAAa7B,MAAMA,KAAK,CAAC8B,SAAS,CAAC,GAAG;gBAC5ChE,QAAQC,GAAG,CAAC,GAAGiC,MAAMT,SAAS,CAACwC,MAAM,CAAC,IAAI,GAAG,EAAEF,WAAW,GAAG,EAAE3B,UAAU,GAAG,EAAEF,MAAM2B,MAAM,EAAE;YAC9F;YAEA,OAAOH;QAET,EAAE,OAAOxD,OAAO;YACdF,QAAQE,KAAK,CAAC,4BAA4BA,MAAMoD,OAAO;YACvD,MAAMpD;QACR;IACF;IAEA,MAAMgE,YAAYzC,SAAS,EAAES,KAAK,EAAE;QAClC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMiC,SAAS,MAAM,IAAI,CAAC1E,KAAK,CAAC0E,MAAM,CAACpB;YAEvC,IAAI,CAACoB,QAAQ;gBACX,MAAM,IAAIpC,MAAM,CAAC,0BAA0B,EAAEN,WAAW;YAC1D;YAEA,MAAM,IAAI,CAAChC,KAAK,CAAC2E,GAAG,CAACrB;YACrB/C,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEwB,WAAW;YACjEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;QAElC,EAAE,OAAOhC,OAAO;YACdF,QAAQE,KAAK,CAAC,6BAA6BA,MAAMoD,OAAO;YACxD,MAAMpD;QACR;IACF;IAEA,MAAMmE,gBAAgB5C,YAAY,IAAI,EAAE;QACtC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YAEnC,IAAIC,KAAKK,MAAM,KAAK,GAAG;gBACrB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO;YACT;YAEA,MAAM,IAAI,CAACR,KAAK,CAAC2E,GAAG,CAACX;YACrBzD,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEwD,KAAKK,MAAM,CAAC,OAAO,EAAErC,YAAY,CAAC,WAAW,EAAEA,WAAW,GAAG,IAAI;YAC1F,OAAOgC,KAAKK,MAAM;QAEpB,EAAE,OAAO5D,OAAO;YACdF,QAAQE,KAAK,CAAC,8BAA8BA,MAAMoD,OAAO;YACzD,MAAMpD;QACR;IACF;IAEA,MAAMoE,cAAc7C,SAAS,EAAES,KAAK,EAAE;QACpC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;YAEnC,IAAI,CAAC/B,OAAO;gBACV,OAAO;oBAAEuD,OAAO;oBAAOC,QAAQ;gBAAkB;YACnD;YAEA,MAAMjC,YAAY/B,KAAKC,KAAK,CAACO;YAE7B,IAAIqB,KAAKC,GAAG,KAAKC,UAAUH,SAAS,EAAE;gBACpC,MAAM,IAAI,CAAC3C,KAAK,CAAC2E,GAAG,CAACrB;gBACrB,OAAO;oBAAEwB,OAAO;oBAAOC,QAAQ;gBAAgB;YACjD;YAEA,OAAO;gBACLD,OAAO;gBACPhC;YACF;QAEF,EAAE,OAAOrC,OAAO;YACd,OAAO;gBAAEqE,OAAO;gBAAOC,QAAQtE,MAAMoD,OAAO;YAAC;QAC/C;IACF;IAEA,MAAMmB,aAAahD,SAAS,EAAE;QAC5B,IAAI;YACF,MAAMnB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,WAAW;YACpD;YAEAzB,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYc,WAAW,EAAE;YAC7DxC,QAAQC,GAAG,CAAC,IAAIyE,MAAM,CAAC;YACvB1E,QAAQC,GAAG,CAAC,CAAC,MAAM,EAAEyB,YAAYI,IAAI,EAAE;YACvC9B,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACtDjC,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YAC9EjC,QAAQC,GAAG,CAAC,CAAC,cAAc,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YACvEpD,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAChFrD,QAAQC,GAAG,CAAC,CAAC,gBAAgB,EAAEyB,YAAYiB,cAAc,CAACgC,qBAAqB,EAAE;YACjF3E,QAAQC,GAAG,CAAC,CAAC,aAAa,EAAEyB,YAAYoB,WAAW,EAAE;YAErD,OAAOpB;QAET,EAAE,OAAOxB,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAM0E,iBAAiB;QACrB,IAAI;YACF,MAAMtE,SAAS,MAAM,IAAI,CAACH,eAAe;YAEzCH,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEK,OAAOqB,MAAM,CAACmC,MAAM,CAAC,IAAI,CAAC;YAClE9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAM4E,SAASvE,OAAOqB,MAAM,CAAE;gBACjC,MAAMG,OAAO+C,MAAM/C,IAAI,CAACmC,MAAM,CAAC;gBAC/B,MAAMa,OAAOD,MAAMrC,WAAW,CAACyB,MAAM,CAAC;gBACtC,MAAMxB,SAASoC,MAAMpC,MAAM,CAACqB,MAAM;gBAClC9D,QAAQC,GAAG,CAAC,GAAG6B,KAAK,GAAG,EAAEgD,KAAK,GAAG,EAAErC,QAAQ;YAC7C;YAEA,OAAOnC,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI;QAEtC,EAAE,OAAO5B,OAAO;YACdF,QAAQE,KAAK,CAAC,iCAAiCA,MAAMoD,OAAO;YAC5D,MAAMpD;QACR;IACF;IAEA,MAAM6E,WAAW;QACf,IAAI,IAAI,CAACtF,KAAK,EAAE;YACd,MAAM,IAAI,CAACA,KAAK,CAACuF,IAAI;QACvB;IACF;AACF;AAEA,gBAAgB;AAChB,eAAeC;IACb,MAAMC,OAAOlG,QAAQmG,IAAI,CAACC,KAAK,CAAC;IAChC,MAAMC,UAAUH,IAAI,CAAC,EAAE;IAEvB,IAAI,CAACG,SAAS;QACZrF,QAAQC,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCjB,CAAC;QACGjB,QAAQsG,IAAI,CAAC;IACf;IAEA,MAAMC,eAAe,IAAI1G;IAEzB,IAAI;QACF,MAAM0G,aAAa3F,UAAU;QAE7B,OAAQyF;YACN,KAAK;gBAAY;oBACf,MAAM5D,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBAEA,MAAMjD,UAAU,CAAC;oBACjB,IAAK,IAAI0G,IAAI,GAAGA,IAAIN,KAAKpB,MAAM,EAAE0B,IAAK;wBACpC,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BAC9B1G,QAAQqD,SAAS,GAAG+C,IAAI,CAAC,EAAEM,EAAE;wBAC/B,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,iBAAiB;4BACtC1G,QAAQgE,WAAW,GAAGoC,IAAI,CAAC,EAAEM,EAAE;wBACjC,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BACrC1G,QAAQ+D,SAAS,GAAGqC,IAAI,CAAC,EAAEM,EAAE;wBAC/B;oBACF;oBAEA,MAAMD,aAAa/D,kBAAkB,CAACC,WAAW3C;oBACjD;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM2C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMK,aAAahC,gBAAgB,CAAC9B;oBACpC;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMA,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBACA,MAAMwD,aAAarB,WAAW,CAACzC,WAAWS;oBAC1C;gBACF;YAEA,KAAK;gBAAc;oBACjB,MAAMT,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMO,QAAQ,MAAMF,aAAalB,eAAe,CAAC5C;oBACjDzB,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEwF,MAAM,OAAO,CAAC;oBACrC;gBACF;YAEA,KAAK;gBAAY;oBACf,MAAMhE,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBAEA,MAAM2D,SAAS,MAAMH,aAAajB,aAAa,CAAC7C,WAAWS;oBAC3D,IAAIwD,OAAOnB,KAAK,EAAE;wBAChBvE,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyF,OAAOnD,SAAS,CAACd,SAAS,EAAE;wBAC1DzB,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOnD,SAAS,CAACE,MAAM,CAACR,IAAI,CAAC,OAAO;wBAC9DjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKqD,OAAOnD,SAAS,CAACH,SAAS,EAAEe,WAAW,IAAI;oBACjF,OAAO;wBACLnD,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOlB,MAAM,EAAE;oBAC3C;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM/C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBACA,MAAMwD,aAAad,YAAY,CAAChD;oBAChC;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAM8D,aAAaX,cAAc;oBACjC;gBACF;YAEA;gBACE,MAAM,IAAI7C,MAAM,CAAC,iBAAiB,EAAEsD,SAAS;QACjD;IAEF,EAAE,OAAOnF,OAAO;QACdF,QAAQE,KAAK,CAAC,YAAYA,MAAMoD,OAAO;QACvCtE,QAAQsG,IAAI,CAAC;IACf,SAAU;QACR,MAAMC,aAAaR,QAAQ;IAC7B;AACF;AAEA,IAAIvG,QAAQyG,IAAI,KAAKU,QAAQ;IAC3BV,OAAOW,KAAK,CAAC1F,CAAAA;QACXF,QAAQE,KAAK,CAAC,gBAAgBA;QAC9BlB,QAAQsG,IAAI,CAAC;IACf;AACF;AAEAK,OAAOE,OAAO,GAAGhH"}
1
+ {"version":3,"sources":["../../src/cli/agent-token-manager.js"],"sourcesContent":["#!/usr/bin/env node\r\n\r\n/**\r\n * Agent Token Management CLI\r\n * Generate, register, and manage agent tokens for MCP authentication\r\n */\r\n\r\nconst crypto = require('crypto');\r\nconst Redis = require('redis');\r\nconst fs = require('fs').promises;\r\nconst path = require('path');\r\n\r\nclass AgentTokenManager {\r\n constructor(options = {}) {\r\n // Support CFN standard variables with fallback to legacy MCP_REDIS_URL\r\n // FIX: Default to 'localhost' for CLI mode (host execution), not 'cfn-redis' (Docker)\r\n const redisHost = process.env.CFN_REDIS_HOST || 'localhost';\r\n const redisPort = process.env.CFN_REDIS_PORT || '6379';\r\n const defaultUrl = `redis://${redisHost}:${redisPort}`;\r\n this.redisUrl = options.redisUrl || process.env.CFN_REDIS_URL || process.env.MCP_REDIS_URL || defaultUrl;\r\n this.redis = null;\r\n this.agentConfigPath = options.agentConfigPath || './config/agent-whitelist.json';\r\n this.defaultExpiry = options.defaultExpiry || '24h';\r\n }\r\n\r\n async initialize() {\r\n try {\r\n this.redis = Redis.createClient({ url: this.redisUrl });\r\n await this.redis.connect();\r\n console.log('Connected to Redis for token management');\r\n } catch (error) {\r\n console.error('Failed to connect to Redis:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n async loadAgentConfig() {\r\n try {\r\n const configPath = path.resolve(this.agentConfigPath);\r\n const config = await fs.readFile(configPath, 'utf8');\r\n return JSON.parse(config);\r\n } catch (error) {\r\n console.error('Failed to load agent config:', error);\r\n throw error;\r\n }\r\n }\r\n\r\n generateToken() {\r\n return crypto.randomBytes(32).toString('hex');\r\n }\r\n\r\n parseExpiry(expiry) {\r\n if (typeof expiry === 'number') {\r\n return expiry;\r\n }\r\n\r\n const match = expiry.match(/^(\\d+)([smhd])$/);\r\n if (!match) {\r\n return 86400; // Default to 24 hours\r\n }\r\n\r\n const value = parseInt(match[1]);\r\n const unit = match[2];\r\n const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };\r\n\r\n return value * (multipliers[unit] || 86400);\r\n }\r\n\r\n async registerAgentToken(agentType, options = {}) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}. Available types: ${config.agents.map(a => a.type).join(', ')}`);\r\n }\r\n\r\n const token = this.generateToken();\r\n const expiresIn = options.expiresIn || this.defaultExpiry;\r\n const expiresAt = Date.now() + (this.parseExpiry(expiresIn) * 1000);\r\n\r\n const tokenData = {\r\n token,\r\n agentType,\r\n displayName: agentConfig.displayName,\r\n skills: agentConfig.skills,\r\n allowedMcpServers: agentConfig.allowedMcpServers,\r\n resourceLimits: agentConfig.resourceLimits,\r\n expiresAt,\r\n createdAt: Date.now(),\r\n createdBy: options.createdBy || 'cli',\r\n description: options.description || `Token for ${agentConfig.displayName}`\r\n };\r\n\r\n // Store in Redis\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = JSON.stringify(tokenData);\r\n const ttlSeconds = this.parseExpiry(expiresIn);\r\n\r\n await this.redis.setEx(key, ttlSeconds, value);\r\n\r\n console.log(`✅ Token registered successfully!`);\r\n console.log(` Agent Type: ${agentConfig.displayName} (${agentType})`);\r\n console.log(` Token: ${token}`);\r\n console.log(` Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(` Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(` Expires: ${new Date(expiresAt).toISOString()}`);\r\n console.log(` Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(` Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n\r\n return tokenData;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to register token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listActiveTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n const keys = await this.redis.keys(pattern);\r\n const tokens = [];\r\n\r\n for (const key of keys) {\r\n const value = await this.redis.get(key);\r\n if (value) {\r\n const tokenData = JSON.parse(value);\r\n tokens.push({\r\n ...tokenData,\r\n key,\r\n status: tokenData.expiresAt > Date.now() ? 'active' : 'expired'\r\n });\r\n }\r\n }\r\n\r\n if (tokens.length === 0) {\r\n console.log('No active tokens found');\r\n return [];\r\n }\r\n\r\n console.log(`\\nActive Tokens (${tokens.length}):\\n`);\r\n console.log('Agent Type | Token | Expires At | Status');\r\n console.log('-------------------|------------------------------------|------------------------------|--------');\r\n\r\n for (const token of tokens) {\r\n const expiresAt = new Date(token.expiresAt).toISOString();\r\n const tokenShort = token.token.substring(0, 32);\r\n console.log(`${token.agentType.padEnd(17)} | ${tokenShort} | ${expiresAt} | ${token.status}`);\r\n }\r\n\r\n return tokens;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const exists = await this.redis.exists(key);\r\n\r\n if (!exists) {\r\n throw new Error(`Token not found for agent ${agentType}`);\r\n }\r\n\r\n await this.redis.del(key);\r\n console.log(`✅ Token revoked successfully for agent ${agentType}`);\r\n console.log(` Token: ${token}`);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke token:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async revokeAllTokens(agentType = null) {\r\n try {\r\n const pattern = agentType ? `mcp:agent:${agentType}:*` : 'mcp:agent:*';\r\n const keys = await this.redis.keys(pattern);\r\n\r\n if (keys.length === 0) {\r\n console.log('No tokens found to revoke');\r\n return 0;\r\n }\r\n\r\n await this.redis.del(keys);\r\n console.log(`✅ Revoked ${keys.length} tokens${agentType ? ` for agent ${agentType}` : ''}`);\r\n return keys.length;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to revoke tokens:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async validateToken(agentType, token) {\r\n try {\r\n const key = `mcp:agent:${agentType}:${token}`;\r\n const value = await this.redis.get(key);\r\n\r\n if (!value) {\r\n return { valid: false, reason: 'Token not found' };\r\n }\r\n\r\n const tokenData = JSON.parse(value);\r\n\r\n if (Date.now() > tokenData.expiresAt) {\r\n await this.redis.del(key);\r\n return { valid: false, reason: 'Token expired' };\r\n }\r\n\r\n return {\r\n valid: true,\r\n tokenData\r\n };\r\n\r\n } catch (error) {\r\n return { valid: false, reason: error.message };\r\n }\r\n }\r\n\r\n async getAgentInfo(agentType) {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n const agentConfig = config.agents.find(a => a.type === agentType);\r\n\r\n if (!agentConfig) {\r\n throw new Error(`Unknown agent type: ${agentType}`);\r\n }\r\n\r\n console.log(`\\nAgent Information: ${agentConfig.displayName}`);\r\n console.log('='.repeat(50));\r\n console.log(`Type: ${agentConfig.type}`);\r\n console.log(`Skills: ${agentConfig.skills.join(', ')}`);\r\n console.log(`Allowed MCP Servers: ${agentConfig.allowedMcpServers.join(', ')}`);\r\n console.log(`Memory Limit: ${agentConfig.resourceLimits.maxMemoryMB}MB`);\r\n console.log(`Rate Limit: ${agentConfig.resourceLimits.maxRequestsPerMinute}/min`);\r\n console.log(`Max Concurrent: ${agentConfig.resourceLimits.maxConcurrentRequests}`);\r\n console.log(`Description: ${agentConfig.description}`);\r\n\r\n return agentConfig;\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to get agent info:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async listAgentTypes() {\r\n try {\r\n const config = await this.loadAgentConfig();\r\n\r\n console.log(`\\nAvailable Agent Types (${config.agents.length}):\\n`);\r\n console.log('Agent Type | Display Name | Skills Count');\r\n console.log('------------------------|--------------------------------|-------------');\r\n\r\n for (const agent of config.agents) {\r\n const type = agent.type.padEnd(22);\r\n const name = agent.displayName.padEnd(32);\r\n const skills = agent.skills.length;\r\n console.log(`${type} | ${name} | ${skills}`);\r\n }\r\n\r\n return config.agents.map(a => a.type);\r\n\r\n } catch (error) {\r\n console.error('❌ Failed to list agent types:', error.message);\r\n throw error;\r\n }\r\n }\r\n\r\n async shutdown() {\r\n if (this.redis) {\r\n await this.redis.quit();\r\n }\r\n }\r\n}\r\n\r\n// CLI interface\r\nasync function main() {\r\n const args = process.argv.slice(2);\r\n const command = args[0];\r\n\r\n if (!command) {\r\n console.log(`\r\nAgent Token Management CLI\r\n\r\nUsage: node agent-token-manager.js <command> [options]\r\n\r\nCommands:\r\n register <agent-type> [options] Register a new token for an agent\r\n list [agent-type] List active tokens\r\n revoke <agent-type> <token> Revoke a specific token\r\n revoke-all [agent-type] Revoke all tokens (optionally for specific agent)\r\n validate <agent-type> <token> Validate a token\r\n info <agent-type> Show agent information\r\n types List available agent types\r\n\r\nOptions for 'register' command:\r\n --expires-in <duration> Token expiry (e.g., 1h, 30m, 7d) [default: 24h]\r\n --description <text> Token description\r\n --created-by <identifier> Creator identifier\r\n\r\nExamples:\r\n # Register token for frontend engineer\r\n node agent-token-manager.js register react-frontend-engineer\r\n\r\n # Register token with custom expiry\r\n node agent-token-manager.js register backend-developer --expires-in 2h\r\n\r\n # List all active tokens\r\n node agent-token-manager.js list\r\n\r\n # List tokens for specific agent\r\n node agent-token-manager.js list react-frontend-engineer\r\n\r\n # Revoke a specific token\r\n node agent-token-manager.js revoke react-frontend-engineer abc123...\r\n\r\n # Get agent information\r\n node agent-token-manager.js info security-specialist\r\n`);\r\n process.exit(0);\r\n }\r\n\r\n const tokenManager = new AgentTokenManager();\r\n\r\n try {\r\n await tokenManager.initialize();\r\n\r\n switch (command) {\r\n case 'register': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for register command');\r\n }\r\n\r\n const options = {};\r\n for (let i = 2; i < args.length; i++) {\r\n if (args[i] === '--expires-in') {\r\n options.expiresIn = args[++i];\r\n } else if (args[i] === '--description') {\r\n options.description = args[++i];\r\n } else if (args[i] === '--created-by') {\r\n options.createdBy = args[++i];\r\n }\r\n }\r\n\r\n await tokenManager.registerAgentToken(agentType, options);\r\n break;\r\n }\r\n\r\n case 'list': {\r\n const agentType = args[1];\r\n await tokenManager.listActiveTokens(agentType);\r\n break;\r\n }\r\n\r\n case 'revoke': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType || !token) {\r\n throw new Error('Agent type and token are required for revoke command');\r\n }\r\n await tokenManager.revokeToken(agentType, token);\r\n break;\r\n }\r\n\r\n case 'revoke-all': {\r\n const agentType = args[1];\r\n const count = await tokenManager.revokeAllTokens(agentType);\r\n console.log(`Revoked ${count} tokens`);\r\n break;\r\n }\r\n\r\n case 'validate': {\r\n const agentType = args[1];\r\n const token = args[2];\r\n if (!agentType || !token) {\r\n throw new Error('Agent type and token are required for validate command');\r\n }\r\n\r\n const result = await tokenManager.validateToken(agentType, token);\r\n if (result.valid) {\r\n console.log('✅ Token is valid');\r\n console.log(` Agent Type: ${result.tokenData.agentType}`);\r\n console.log(` Skills: ${result.tokenData.skills.join(', ')}`);\r\n console.log(` Expires: ${new Date(result.tokenData.expiresAt).toISOString()}`);\r\n } else {\r\n console.log('❌ Token is invalid');\r\n console.log(` Reason: ${result.reason}`);\r\n }\r\n break;\r\n }\r\n\r\n case 'info': {\r\n const agentType = args[1];\r\n if (!agentType) {\r\n throw new Error('Agent type is required for info command');\r\n }\r\n await tokenManager.getAgentInfo(agentType);\r\n break;\r\n }\r\n\r\n case 'types': {\r\n await tokenManager.listAgentTypes();\r\n break;\r\n }\r\n\r\n default:\r\n throw new Error(`Unknown command: ${command}`);\r\n }\r\n\r\n } catch (error) {\r\n console.error('❌ Error:', error.message);\r\n process.exit(1);\r\n } finally {\r\n await tokenManager.shutdown();\r\n }\r\n}\r\n\r\nif (require.main === module) {\r\n main().catch(error => {\r\n console.error('Fatal error:', error);\r\n process.exit(1);\r\n });\r\n}\r\n\r\nmodule.exports = AgentTokenManager;"],"names":["crypto","require","Redis","fs","promises","path","AgentTokenManager","options","redisHost","process","env","CFN_REDIS_HOST","redisPort","CFN_REDIS_PORT","defaultUrl","redisUrl","CFN_REDIS_URL","MCP_REDIS_URL","redis","agentConfigPath","defaultExpiry","initialize","createClient","url","connect","console","log","error","loadAgentConfig","configPath","resolve","config","readFile","JSON","parse","generateToken","randomBytes","toString","parseExpiry","expiry","match","value","parseInt","unit","multipliers","s","m","h","d","registerAgentToken","agentType","agentConfig","agents","find","a","type","Error","map","join","token","expiresIn","expiresAt","Date","now","tokenData","displayName","skills","allowedMcpServers","resourceLimits","createdAt","createdBy","description","key","stringify","ttlSeconds","setEx","toISOString","maxMemoryMB","maxRequestsPerMinute","message","listActiveTokens","pattern","keys","tokens","get","push","status","length","tokenShort","substring","padEnd","revokeToken","exists","del","revokeAllTokens","validateToken","valid","reason","getAgentInfo","repeat","maxConcurrentRequests","listAgentTypes","agent","name","shutdown","quit","main","args","argv","slice","command","exit","tokenManager","i","count","result","module","catch","exports"],"mappings":";AAEA;;;CAGC,GAED,MAAMA,SAASC,QAAQ;AACvB,MAAMC,QAAQD,QAAQ;AACtB,MAAME,KAAKF,QAAQ,MAAMG,QAAQ;AACjC,MAAMC,OAAOJ,QAAQ;AAErB,IAAA,AAAMK,oBAAN,MAAMA;IACJ,YAAYC,UAAU,CAAC,CAAC,CAAE;QACxB,uEAAuE;QACvE,sFAAsF;QACtF,MAAMC,YAAYC,QAAQC,GAAG,CAACC,cAAc,IAAI;QAChD,MAAMC,YAAYH,QAAQC,GAAG,CAACG,cAAc,IAAI;QAChD,MAAMC,aAAa,CAAC,QAAQ,EAAEN,UAAU,CAAC,EAAEI,WAAW;QACtD,IAAI,CAACG,QAAQ,GAAGR,QAAQQ,QAAQ,IAAIN,QAAQC,GAAG,CAACM,aAAa,IAAIP,QAAQC,GAAG,CAACO,aAAa,IAAIH;QAC9F,IAAI,CAACI,KAAK,GAAG;QACb,IAAI,CAACC,eAAe,GAAGZ,QAAQY,eAAe,IAAI;QAClD,IAAI,CAACC,aAAa,GAAGb,QAAQa,aAAa,IAAI;IAChD;IAEA,MAAMC,aAAa;QACjB,IAAI;YACF,IAAI,CAACH,KAAK,GAAGhB,MAAMoB,YAAY,CAAC;gBAAEC,KAAK,IAAI,CAACR,QAAQ;YAAC;YACrD,MAAM,IAAI,CAACG,KAAK,CAACM,OAAO;YACxBC,QAAQC,GAAG,CAAC;QACd,EAAE,OAAOC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA;YAC7C,MAAMA;QACR;IACF;IAEA,MAAMC,kBAAkB;QACtB,IAAI;YACF,MAAMC,aAAaxB,KAAKyB,OAAO,CAAC,IAAI,CAACX,eAAe;YACpD,MAAMY,SAAS,MAAM5B,GAAG6B,QAAQ,CAACH,YAAY;YAC7C,OAAOI,KAAKC,KAAK,CAACH;QACpB,EAAE,OAAOJ,OAAO;YACdF,QAAQE,KAAK,CAAC,gCAAgCA;YAC9C,MAAMA;QACR;IACF;IAEAQ,gBAAgB;QACd,OAAOnC,OAAOoC,WAAW,CAAC,IAAIC,QAAQ,CAAC;IACzC;IAEAC,YAAYC,MAAM,EAAE;QAClB,IAAI,OAAOA,WAAW,UAAU;YAC9B,OAAOA;QACT;QAEA,MAAMC,QAAQD,OAAOC,KAAK,CAAC;QAC3B,IAAI,CAACA,OAAO;YACV,OAAO,OAAO,sBAAsB;QACtC;QAEA,MAAMC,QAAQC,SAASF,KAAK,CAAC,EAAE;QAC/B,MAAMG,OAAOH,KAAK,CAAC,EAAE;QACrB,MAAMI,cAAc;YAAEC,GAAG;YAAGC,GAAG;YAAIC,GAAG;YAAMC,GAAG;QAAM;QAErD,OAAOP,QAASG,CAAAA,WAAW,CAACD,KAAK,IAAI,KAAI;IAC3C;IAEA,MAAMM,mBAAmBC,SAAS,EAAE3C,UAAU,CAAC,CAAC,EAAE;QAChD,IAAI;YACF,MAAMwB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,UAAU,mBAAmB,EAAEnB,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI,EAAEG,IAAI,CAAC,OAAO;YACnH;YAEA,MAAMC,QAAQ,IAAI,CAACxB,aAAa;YAChC,MAAMyB,YAAYrD,QAAQqD,SAAS,IAAI,IAAI,CAACxC,aAAa;YACzD,MAAMyC,YAAYC,KAAKC,GAAG,KAAM,IAAI,CAACzB,WAAW,CAACsB,aAAa;YAE9D,MAAMI,YAAY;gBAChBL;gBACAT;gBACAe,aAAad,YAAYc,WAAW;gBACpCC,QAAQf,YAAYe,MAAM;gBAC1BC,mBAAmBhB,YAAYgB,iBAAiB;gBAChDC,gBAAgBjB,YAAYiB,cAAc;gBAC1CP;gBACAQ,WAAWP,KAAKC,GAAG;gBACnBO,WAAW/D,QAAQ+D,SAAS,IAAI;gBAChCC,aAAahE,QAAQgE,WAAW,IAAI,CAAC,UAAU,EAAEpB,YAAYc,WAAW,EAAE;YAC5E;YAEA,iBAAiB;YACjB,MAAMO,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQR,KAAKwC,SAAS,CAACT;YAC7B,MAAMU,aAAa,IAAI,CAACpC,WAAW,CAACsB;YAEpC,MAAM,IAAI,CAAC1C,KAAK,CAACyD,KAAK,CAACH,KAAKE,YAAYjC;YAExChB,QAAQC,GAAG,CAAC,CAAC,gCAAgC,CAAC;YAC9CD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYc,WAAW,CAAC,EAAE,EAAEf,UAAU,CAAC,CAAC;YACtEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;YAChClC,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACzDjC,QAAQC,GAAG,CAAC,CAAC,wBAAwB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YACjFjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKD,WAAWe,WAAW,IAAI;YAC9DnD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YAC1EpD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAEnF,OAAOd;QAET,EAAE,OAAOrC,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAMqD,iBAAiB9B,YAAY,IAAI,EAAE;QACvC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YACnC,MAAME,SAAS,EAAE;YAEjB,KAAK,MAAMX,OAAOU,KAAM;gBACtB,MAAMzC,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;gBACnC,IAAI/B,OAAO;oBACT,MAAMuB,YAAY/B,KAAKC,KAAK,CAACO;oBAC7B0C,OAAOE,IAAI,CAAC;wBACV,GAAGrB,SAAS;wBACZQ;wBACAc,QAAQtB,UAAUH,SAAS,GAAGC,KAAKC,GAAG,KAAK,WAAW;oBACxD;gBACF;YACF;YAEA,IAAIoB,OAAOI,MAAM,KAAK,GAAG;gBACvB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO,EAAE;YACX;YAEAD,QAAQC,GAAG,CAAC,CAAC,iBAAiB,EAAEyD,OAAOI,MAAM,CAAC,IAAI,CAAC;YACnD9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAMiC,SAASwB,OAAQ;gBAC1B,MAAMtB,YAAY,IAAIC,KAAKH,MAAME,SAAS,EAAEe,WAAW;gBACvD,MAAMY,aAAa7B,MAAMA,KAAK,CAAC8B,SAAS,CAAC,GAAG;gBAC5ChE,QAAQC,GAAG,CAAC,GAAGiC,MAAMT,SAAS,CAACwC,MAAM,CAAC,IAAI,GAAG,EAAEF,WAAW,GAAG,EAAE3B,UAAU,GAAG,EAAEF,MAAM2B,MAAM,EAAE;YAC9F;YAEA,OAAOH;QAET,EAAE,OAAOxD,OAAO;YACdF,QAAQE,KAAK,CAAC,4BAA4BA,MAAMoD,OAAO;YACvD,MAAMpD;QACR;IACF;IAEA,MAAMgE,YAAYzC,SAAS,EAAES,KAAK,EAAE;QAClC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMiC,SAAS,MAAM,IAAI,CAAC1E,KAAK,CAAC0E,MAAM,CAACpB;YAEvC,IAAI,CAACoB,QAAQ;gBACX,MAAM,IAAIpC,MAAM,CAAC,0BAA0B,EAAEN,WAAW;YAC1D;YAEA,MAAM,IAAI,CAAChC,KAAK,CAAC2E,GAAG,CAACrB;YACrB/C,QAAQC,GAAG,CAAC,CAAC,uCAAuC,EAAEwB,WAAW;YACjEzB,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEiC,OAAO;QAElC,EAAE,OAAOhC,OAAO;YACdF,QAAQE,KAAK,CAAC,6BAA6BA,MAAMoD,OAAO;YACxD,MAAMpD;QACR;IACF;IAEA,MAAMmE,gBAAgB5C,YAAY,IAAI,EAAE;QACtC,IAAI;YACF,MAAM+B,UAAU/B,YAAY,CAAC,UAAU,EAAEA,UAAU,EAAE,CAAC,GAAG;YACzD,MAAMgC,OAAO,MAAM,IAAI,CAAChE,KAAK,CAACgE,IAAI,CAACD;YAEnC,IAAIC,KAAKK,MAAM,KAAK,GAAG;gBACrB9D,QAAQC,GAAG,CAAC;gBACZ,OAAO;YACT;YAEA,MAAM,IAAI,CAACR,KAAK,CAAC2E,GAAG,CAACX;YACrBzD,QAAQC,GAAG,CAAC,CAAC,UAAU,EAAEwD,KAAKK,MAAM,CAAC,OAAO,EAAErC,YAAY,CAAC,WAAW,EAAEA,WAAW,GAAG,IAAI;YAC1F,OAAOgC,KAAKK,MAAM;QAEpB,EAAE,OAAO5D,OAAO;YACdF,QAAQE,KAAK,CAAC,8BAA8BA,MAAMoD,OAAO;YACzD,MAAMpD;QACR;IACF;IAEA,MAAMoE,cAAc7C,SAAS,EAAES,KAAK,EAAE;QACpC,IAAI;YACF,MAAMa,MAAM,CAAC,UAAU,EAAEtB,UAAU,CAAC,EAAES,OAAO;YAC7C,MAAMlB,QAAQ,MAAM,IAAI,CAACvB,KAAK,CAACkE,GAAG,CAACZ;YAEnC,IAAI,CAAC/B,OAAO;gBACV,OAAO;oBAAEuD,OAAO;oBAAOC,QAAQ;gBAAkB;YACnD;YAEA,MAAMjC,YAAY/B,KAAKC,KAAK,CAACO;YAE7B,IAAIqB,KAAKC,GAAG,KAAKC,UAAUH,SAAS,EAAE;gBACpC,MAAM,IAAI,CAAC3C,KAAK,CAAC2E,GAAG,CAACrB;gBACrB,OAAO;oBAAEwB,OAAO;oBAAOC,QAAQ;gBAAgB;YACjD;YAEA,OAAO;gBACLD,OAAO;gBACPhC;YACF;QAEF,EAAE,OAAOrC,OAAO;YACd,OAAO;gBAAEqE,OAAO;gBAAOC,QAAQtE,MAAMoD,OAAO;YAAC;QAC/C;IACF;IAEA,MAAMmB,aAAahD,SAAS,EAAE;QAC5B,IAAI;YACF,MAAMnB,SAAS,MAAM,IAAI,CAACH,eAAe;YACzC,MAAMuB,cAAcpB,OAAOqB,MAAM,CAACC,IAAI,CAACC,CAAAA,IAAKA,EAAEC,IAAI,KAAKL;YAEvD,IAAI,CAACC,aAAa;gBAChB,MAAM,IAAIK,MAAM,CAAC,oBAAoB,EAAEN,WAAW;YACpD;YAEAzB,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYc,WAAW,EAAE;YAC7DxC,QAAQC,GAAG,CAAC,IAAIyE,MAAM,CAAC;YACvB1E,QAAQC,GAAG,CAAC,CAAC,MAAM,EAAEyB,YAAYI,IAAI,EAAE;YACvC9B,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEyB,YAAYe,MAAM,CAACR,IAAI,CAAC,OAAO;YACtDjC,QAAQC,GAAG,CAAC,CAAC,qBAAqB,EAAEyB,YAAYgB,iBAAiB,CAACT,IAAI,CAAC,OAAO;YAC9EjC,QAAQC,GAAG,CAAC,CAAC,cAAc,EAAEyB,YAAYiB,cAAc,CAACS,WAAW,CAAC,EAAE,CAAC;YACvEpD,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAEyB,YAAYiB,cAAc,CAACU,oBAAoB,CAAC,IAAI,CAAC;YAChFrD,QAAQC,GAAG,CAAC,CAAC,gBAAgB,EAAEyB,YAAYiB,cAAc,CAACgC,qBAAqB,EAAE;YACjF3E,QAAQC,GAAG,CAAC,CAAC,aAAa,EAAEyB,YAAYoB,WAAW,EAAE;YAErD,OAAOpB;QAET,EAAE,OAAOxB,OAAO;YACdF,QAAQE,KAAK,CAAC,+BAA+BA,MAAMoD,OAAO;YAC1D,MAAMpD;QACR;IACF;IAEA,MAAM0E,iBAAiB;QACrB,IAAI;YACF,MAAMtE,SAAS,MAAM,IAAI,CAACH,eAAe;YAEzCH,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEK,OAAOqB,MAAM,CAACmC,MAAM,CAAC,IAAI,CAAC;YAClE9D,QAAQC,GAAG,CAAC;YACZD,QAAQC,GAAG,CAAC;YAEZ,KAAK,MAAM4E,SAASvE,OAAOqB,MAAM,CAAE;gBACjC,MAAMG,OAAO+C,MAAM/C,IAAI,CAACmC,MAAM,CAAC;gBAC/B,MAAMa,OAAOD,MAAMrC,WAAW,CAACyB,MAAM,CAAC;gBACtC,MAAMxB,SAASoC,MAAMpC,MAAM,CAACqB,MAAM;gBAClC9D,QAAQC,GAAG,CAAC,GAAG6B,KAAK,GAAG,EAAEgD,KAAK,GAAG,EAAErC,QAAQ;YAC7C;YAEA,OAAOnC,OAAOqB,MAAM,CAACK,GAAG,CAACH,CAAAA,IAAKA,EAAEC,IAAI;QAEtC,EAAE,OAAO5B,OAAO;YACdF,QAAQE,KAAK,CAAC,iCAAiCA,MAAMoD,OAAO;YAC5D,MAAMpD;QACR;IACF;IAEA,MAAM6E,WAAW;QACf,IAAI,IAAI,CAACtF,KAAK,EAAE;YACd,MAAM,IAAI,CAACA,KAAK,CAACuF,IAAI;QACvB;IACF;AACF;AAEA,gBAAgB;AAChB,eAAeC;IACb,MAAMC,OAAOlG,QAAQmG,IAAI,CAACC,KAAK,CAAC;IAChC,MAAMC,UAAUH,IAAI,CAAC,EAAE;IAEvB,IAAI,CAACG,SAAS;QACZrF,QAAQC,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCjB,CAAC;QACGjB,QAAQsG,IAAI,CAAC;IACf;IAEA,MAAMC,eAAe,IAAI1G;IAEzB,IAAI;QACF,MAAM0G,aAAa3F,UAAU;QAE7B,OAAQyF;YACN,KAAK;gBAAY;oBACf,MAAM5D,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBAEA,MAAMjD,UAAU,CAAC;oBACjB,IAAK,IAAI0G,IAAI,GAAGA,IAAIN,KAAKpB,MAAM,EAAE0B,IAAK;wBACpC,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BAC9B1G,QAAQqD,SAAS,GAAG+C,IAAI,CAAC,EAAEM,EAAE;wBAC/B,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,iBAAiB;4BACtC1G,QAAQgE,WAAW,GAAGoC,IAAI,CAAC,EAAEM,EAAE;wBACjC,OAAO,IAAIN,IAAI,CAACM,EAAE,KAAK,gBAAgB;4BACrC1G,QAAQ+D,SAAS,GAAGqC,IAAI,CAAC,EAAEM,EAAE;wBAC/B;oBACF;oBAEA,MAAMD,aAAa/D,kBAAkB,CAACC,WAAW3C;oBACjD;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM2C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMK,aAAahC,gBAAgB,CAAC9B;oBACpC;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMA,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBACA,MAAMwD,aAAarB,WAAW,CAACzC,WAAWS;oBAC1C;gBACF;YAEA,KAAK;gBAAc;oBACjB,MAAMT,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMO,QAAQ,MAAMF,aAAalB,eAAe,CAAC5C;oBACjDzB,QAAQC,GAAG,CAAC,CAAC,QAAQ,EAAEwF,MAAM,OAAO,CAAC;oBACrC;gBACF;YAEA,KAAK;gBAAY;oBACf,MAAMhE,YAAYyD,IAAI,CAAC,EAAE;oBACzB,MAAMhD,QAAQgD,IAAI,CAAC,EAAE;oBACrB,IAAI,CAACzD,aAAa,CAACS,OAAO;wBACxB,MAAM,IAAIH,MAAM;oBAClB;oBAEA,MAAM2D,SAAS,MAAMH,aAAajB,aAAa,CAAC7C,WAAWS;oBAC3D,IAAIwD,OAAOnB,KAAK,EAAE;wBAChBvE,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,eAAe,EAAEyF,OAAOnD,SAAS,CAACd,SAAS,EAAE;wBAC1DzB,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOnD,SAAS,CAACE,MAAM,CAACR,IAAI,CAAC,OAAO;wBAC9DjC,QAAQC,GAAG,CAAC,CAAC,YAAY,EAAE,IAAIoC,KAAKqD,OAAOnD,SAAS,CAACH,SAAS,EAAEe,WAAW,IAAI;oBACjF,OAAO;wBACLnD,QAAQC,GAAG,CAAC;wBACZD,QAAQC,GAAG,CAAC,CAAC,WAAW,EAAEyF,OAAOlB,MAAM,EAAE;oBAC3C;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAM/C,YAAYyD,IAAI,CAAC,EAAE;oBACzB,IAAI,CAACzD,WAAW;wBACd,MAAM,IAAIM,MAAM;oBAClB;oBACA,MAAMwD,aAAad,YAAY,CAAChD;oBAChC;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAM8D,aAAaX,cAAc;oBACjC;gBACF;YAEA;gBACE,MAAM,IAAI7C,MAAM,CAAC,iBAAiB,EAAEsD,SAAS;QACjD;IAEF,EAAE,OAAOnF,OAAO;QACdF,QAAQE,KAAK,CAAC,YAAYA,MAAMoD,OAAO;QACvCtE,QAAQsG,IAAI,CAAC;IACf,SAAU;QACR,MAAMC,aAAaR,QAAQ;IAC7B;AACF;AAEA,IAAIvG,QAAQyG,IAAI,KAAKU,QAAQ;IAC3BV,OAAOW,KAAK,CAAC1F,CAAAA;QACXF,QAAQE,KAAK,CAAC,gBAAgBA;QAC9BlB,QAAQsG,IAAI,CAAC;IACf;AACF;AAEAK,OAAOE,OAAO,GAAGhH"}