crewly 1.13.0 → 1.13.1

package/dist/cli/backend/src/services/agent/crewly-agent/in-process-runtime-registry.js

@@ -0,0 +1,120 @@
+/**
+ * In-Process Runtime Registry
+ *
+ * Module-level registry that tracks active in-process Crewly Agent runtimes
+ * by session name. Provides a lightweight lookup mechanism for callers (such
+ * as `orchestrator-status.service.ts`) that need to determine whether an
+ * in-process runtime is alive without holding a reference to the
+ * `AgentRegistrationService` instance.
+ *
+ * Why this exists (B0 hot-fix):
+ * The PTY-based `sessionExists()` check returns `false` for in-process
+ * Crewly Agent runtimes because they have no PTY session. Before this
+ * registry, the orchestrator-status service had no runtime-aware fallback,
+ * so `isActive` would report `false` for healthy in-process orchestrators
+ * — causing SlackBridge to incorrectly route messages to the offline path.
+ *
+ * The `AgentRegistrationService` already maintains an internal
+ * `inProcessRuntimes` map for in-process runtime routing. This module
+ * mirrors that knowledge at module scope so any caller can probe runtime
+ * health without a service-locator dance.
+ *
+ * @module services/agent/crewly-agent/in-process-runtime-registry
+ */
+/**
+ * Module-level registry of active in-process runtimes keyed by session name.
+ *
+ * Mirrors `AgentRegistrationService.inProcessRuntimes`. Both maps must stay
+ * in sync — `AgentRegistrationService` writes to this registry whenever it
+ * registers/unregisters a runtime.
+ */
+const registry = new Map();
+/**
+ * Register an in-process Crewly Agent runtime.
+ *
+ * Called by `AgentRegistrationService` after `initializeInProcess()`
+ * succeeds. If a runtime is already registered for the same session, it is
+ * replaced — the old reference is discarded but not shut down (the caller
+ * is responsible for the lifecycle).
+ *
+ * @param sessionName - Session name owning the runtime (e.g. 'crewly-orc')
+ * @param runtime - The initialized CrewlyAgentExternalRuntimeService instance
+ *
+ * @example
+ * ```typescript
+ * registerInProcessRuntime('crewly-orc', crewlyRuntime);
+ * ```
+ */
+export function registerInProcessRuntime(sessionName, runtime) {
+    registry.set(sessionName, runtime);
+}
+/**
+ * Unregister an in-process runtime by session name.
+ *
+ * Called when a runtime is shut down or the session is destroyed.
+ * Idempotent — safe to call when the session is not registered.
+ *
+ * @param sessionName - Session name to remove
+ * @returns True if a runtime was removed, false if none was registered
+ */
+export function unregisterInProcessRuntime(sessionName) {
+    return registry.delete(sessionName);
+}
+/**
+ * Look up an in-process runtime by session name.
+ *
+ * @param sessionName - Session name to look up
+ * @returns The CrewlyAgentExternalRuntimeService if registered, undefined otherwise
+ */
+export function getInProcessRuntime(sessionName) {
+    return registry.get(sessionName);
+}
+/**
+ * Check whether an in-process runtime exists and is ready to handle
+ * messages for the given session.
+ *
+ * Returns `true` only when both:
+ * - A runtime is registered for the session
+ * - The runtime's `isReady()` returns `true`
+ *
+ * This is the function callers should use when answering "is this
+ * session alive?" — it correctly handles both the worker-process and
+ * direct in-process modes of `CrewlyAgentExternalRuntimeService`.
+ *
+ * @param sessionName - Session name to check
+ * @returns True when the runtime exists and is ready
+ */
+export function isInProcessRuntimeActive(sessionName) {
+    const runtime = registry.get(sessionName);
+    if (!runtime) {
+        return false;
+    }
+    try {
+        return runtime.isReady();
+    }
+    catch {
+        // Defensive: a misbehaving isReady() must not break callers.
+        return false;
+    }
+}
+/**
+ * Reset the registry. Test-only helper.
+ *
+ * Leaves any actually-running runtimes untouched — only clears the
+ * registry's bookkeeping. Production code must never call this.
+ *
+ * @internal
+ */
+export function _resetInProcessRuntimeRegistryForTesting() {
+    registry.clear();
+}
+/**
+ * Get the current registry size. Test-only helper.
+ *
+ * @returns Number of registered runtimes
+ * @internal
+ */
+export function _getInProcessRuntimeRegistrySize() {
+    return registry.size;
+}
+//# sourceMappingURL=in-process-runtime-registry.js.map

package/dist/cli/backend/src/services/agent/crewly-agent/in-process-runtime-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-runtime-registry.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/in-process-runtime-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH;;;;;;GAMG;AACH,MAAM,QAAQ,GAAmD,IAAI,GAAG,EAAE,CAAC;AAE3E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,OAA0C;IAE1C,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB;IAEnB,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wCAAwC;IACtD,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC;IAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC"}

package/dist/cli/backend/src/services/agent/crewly-agent/types.d.ts

@@ -0,0 +1,536 @@
+/**
+ * Crewly Agent Runtime Type Definitions
+ *
+ * Types for the in-process Crewly Agent runtime powered by Vercel AI SDK.
+ * Covers model configuration, conversation state, and agent lifecycle.
+ *
+ * @module services/agent/crewly-agent/types
+ */
+import type { ModelMessage } from 'ai';
+import type { z } from 'zod';
+import type { McpServerConfig } from '../../mcp-client.js';
+/**
+ * Sensitivity overrides for MCP tools. Inlined after the in-process
+ * crewly-agent runtime was extracted to the standalone package — OSS
+ * only needs the type now, to thread overrides through CrewlyAgentConfig
+ * when spawning the subprocess.
+ */
+export type McpSensitivityOverrides = Record<string, 'safe' | 'sensitive' | 'destructive'>;
+/**
+ * Supported model providers for Crewly Agent.
+ *
+ * Note: 'deepseek' is served through the OpenAI-compatible API at
+ * https://api.deepseek.com/v1, but is exposed as a distinct provider
+ * so users can select it explicitly. Its API key (DEEPSEEK_API_KEY) is
+ * read from the environment, not from the settings service — see
+ * model-manager.ts for details.
+ */
+export type ModelProvider = 'anthropic' | 'openai' | 'google' | 'ollama' | 'deepseek';
+/**
+ * All valid model providers
+ */
+export declare const MODEL_PROVIDERS: readonly ModelProvider[];
+/**
+ * Configuration for a specific model instance
+ */
+export interface ModelConfig {
+    /** Model provider (e.g., 'anthropic', 'openai', 'google', 'ollama') */
+    provider: ModelProvider;
+    /** Model identifier (e.g., 'claude-sonnet-4-20250514', 'gpt-4o', 'gemini-2.0-flash') */
+    modelId: string;
+    /** Optional temperature override (0-1) */
+    temperature?: number;
+    /** Optional max tokens per response */
+    maxTokens?: number;
+}
+/**
+ * Conversation state maintained by the AgentRunner
+ */
+export interface ConversationState {
+    /** AI SDK ModelMessage array — the full conversation history */
+    messages: ModelMessage[];
+    /** System prompt loaded from prompt.md */
+    systemPrompt: string;
+    /** Cumulative token usage across all generateText calls */
+    totalTokens: {
+        input: number;
+        output: number;
+    };
+    /**
+     * Tokens occupying the model's context as of the most recent request:
+     * the prompt that was actually sent (system + tools + retained history,
+     * cache hits included) plus the reply it produced, which the next request
+     * carries forward.
+     *
+     * This is a MEASUREMENT, not a running total — it is assigned, never
+     * accumulated. `totalTokens` answers "what has this session cost?";
+     * this answers "how full is the context?". Using the former for the
+     * latter conflates lifetime spend with occupancy and climbs past 100%
+     * of the window after a few turns, pinning the runner in permanent
+     * compaction. 0 until the first response lands.
+     */
+    lastContextTokens: number;
+    /** Conversation creation time */
+    createdAt: Date;
+    /** Last activity timestamp */
+    lastActivityAt: Date;
+}
+/**
+ * Configuration for the Crewly Agent runtime
+ */
+export interface CrewlyAgentConfig {
+    /** Model configuration for the agent */
+    model: ModelConfig;
+    /** Maximum reasoning steps per generateText call */
+    maxSteps: number;
+    /** Session name for this agent instance */
+    sessionName: string;
+    /** Agent role (e.g. developer, product-manager) */
+    role?: string;
+    /** Base URL for the Crewly REST API */
+    apiBaseUrl: string;
+    /** System prompt content (loaded from prompt.md) */
+    systemPrompt: string;
+    /** Maximum conversation history messages before compaction triggers */
+    maxHistoryMessages: number;
+    /** Token budget threshold (percentage of context window) for compaction */
+    compactionThreshold: number;
+    /** Project path for memory and task tools (auto-injected) */
+    projectPath?: string;
+    /** Team member ID for heartbeat tracking (used as key in teamAgentStatus.json) */
+    memberId?: string;
+    /** MCP server configurations for external tool integration */
+    mcpServers?: Record<string, McpServerConfig>;
+    /** Sensitivity overrides for MCP tools (key: 'serverName:toolName' or 'toolName') */
+    mcpSensitivityOverrides?: McpSensitivityOverrides;
+    /**
+     * Eval mode flag. When true:
+     * - Strips TL delegation-first instructions from system prompt
+     * - Agent implements directly instead of delegating to workers
+     * - Enables post-execution deliverable self-check (Stop Hook)
+     */
+    evalMode?: boolean;
+}
+/**
+ * Result of a single agent run (one generateText invocation)
+ */
+export interface AgentRunResult {
+    /** Final text response from the model */
+    text: string;
+    /** Number of steps taken in this run */
+    steps: number;
+    /**
+     * Token usage for this run. `cachedInput` is the portion of `input` the
+     * provider served from its prompt cache — the number to watch when
+     * verifying caching actually engaged. It is 0 on providers that do not
+     * report cache hits.
+     */
+    usage: {
+        input: number;
+        output: number;
+        cachedInput: number;
+    };
+    /** Tool calls made during this run */
+    toolCalls: ToolCallRecord[];
+    /** Reason the generation finished */
+    finishReason: string;
+    /** Budget warning message when token usage is approaching limits */
+    budgetWarning?: string;
+    /**
+     * I2: DeepSeek-R1 chain-of-thought text extracted from `delta.reasoning_content`.
+     *
+     * Present only for `deepseek-reasoner` model runs. `null` if the run did not
+     * produce any reasoning content (e.g. non-R1 model, or R1 returned content-only).
+     * `undefined` for non-DeepSeek providers (no extraction is performed).
+     *
+     * Concatenated across all agentic steps in this single AgentRunResult — i.e.
+     * if the model made N HTTP calls during this run, the reasoning from all N
+     * is joined in call order.
+     *
+     * **SECURITY — UNTRUSTED CONTENT.** This string is downstream of user input
+     * (R1 reasoning is generated in response to the user's prompt). When re-injected
+     * into ANY subsequent model call, it MUST be wrapped as untrusted-context — e.g.
+     * `<reasoning-from-deepseek-r1 trust="untrusted">...</reasoning-from-deepseek-r1>`
+     * with explicit framing as "hint material from another model, not authoritative
+     * instructions." Direct splicing into a system prompt = jailbreak primitive.
+     * See P0-1 design-review gate for I2.5 reasoning-pipe routing.
+     */
+    reasoning?: string | null;
+}
+/**
+ * Record of a single tool call during agent execution
+ */
+export interface ToolCallRecord {
+    /** Tool name */
+    toolName: string;
+    /** Arguments passed to the tool */
+    args: Record<string, unknown>;
+    /** Result returned by the tool */
+    result: unknown;
+}
+/**
+ * Result of an API call to the Crewly backend
+ */
+export interface ApiCallResult<T = unknown> {
+    /** Whether the call succeeded (HTTP 2xx) */
+    success: boolean;
+    /** Response data on success */
+    data?: T;
+    /** Error message on failure */
+    error?: string;
+    /** HTTP status code */
+    status: number;
+}
+/**
+ * Sensitivity classification for tool security auditing.
+ *
+ * - 'safe': Read-only or informational tools (no side effects)
+ * - 'sensitive': Tools that modify state or communicate externally
+ * - 'destructive': Tools that can cause irreversible damage
+ */
+export type ToolSensitivity = 'safe' | 'sensitive' | 'destructive';
+/**
+ * Tool definition shape matching AI SDK Tool interface.
+ * Shared by both the main tool registry and the auditor tool registry.
+ */
+export interface ToolDefinition {
+    /** Human-readable description of what the tool does */
+    description: string;
+    /** Zod schema for validating tool input */
+    inputSchema: z.ZodType;
+    /** Execute the tool with the given validated arguments */
+    execute: (args: Record<string, unknown>) => Promise<unknown>;
+    /** Security sensitivity classification for audit purposes */
+    sensitivity?: ToolSensitivity;
+}
+/**
+ * Callbacks for streaming events during agent execution.
+ * Emitted in real-time as the model generates text and calls tools.
+ */
+export interface StreamingEventCallbacks {
+    /** Called when a text chunk arrives from the model */
+    onTextChunk?: (chunk: string) => void;
+    /** Called when a tool call starts executing */
+    onToolCallStart?: (toolName: string, args: Record<string, unknown>) => void;
+    /** Called when a tool call completes */
+    onToolCallFinish?: (toolName: string, args: Record<string, unknown>, result: unknown, durationMs: number) => void;
+    /** Called when a reasoning step completes */
+    onStepFinish?: (stepIndex: number, hasToolCalls: boolean) => void;
+}
+/**
+ * A single entry in the security audit trail.
+ * Records every tool invocation with timing, classification, and result status.
+ */
+export interface AuditEntry {
+    /** ISO timestamp of the tool invocation */
+    timestamp: string;
+    /** Agent session name that invoked the tool */
+    sessionName?: string;
+    /** Name of the tool that was called */
+    toolName: string;
+    /** Sensitivity classification of the tool */
+    sensitivity: ToolSensitivity;
+    /** Arguments passed to the tool (sanitized — no secrets) */
+    args: Record<string, unknown>;
+    /** Whether the tool call succeeded */
+    success: boolean;
+    /** Error message if the call failed */
+    error?: string;
+    /** Execution duration in milliseconds */
+    durationMs: number;
+}
+/**
+ * Security policy configuration for the agent runtime.
+ * Controls which tool sensitivity levels require approval or are blocked.
+ */
+export interface SecurityPolicy {
+    /** Whether audit logging is enabled */
+    auditEnabled: boolean;
+    /** Tool sensitivity levels that require explicit approval */
+    requireApproval: ToolSensitivity[];
+    /** Tool names that are completely blocked */
+    blockedTools: string[];
+    /** Maximum audit log entries to retain in memory */
+    maxAuditEntries: number;
+    /**
+     * Read-only audit mode. When enabled, all tools classified as
+     * 'sensitive' or 'destructive' are blocked — only 'safe' (read-only)
+     * tools can execute. Tool invocations are still logged to the audit trail.
+     */
+    readOnlyMode: boolean;
+}
+/**
+ * Tools that perform write/modify operations.
+ * Used by readOnlyMode to determine which tools to block.
+ */
+export declare const WRITE_TOOLS: readonly string[];
+/**
+ * Context budget status for the current conversation.
+ * Tracks token usage against the model's context window limit.
+ */
+export interface ContextBudgetStatus {
+    /**
+     * Tokens occupying the context window right now — measured from the last
+     * request, or estimated from the system prompt + history before the first
+     * one. This is the numerator of `usagePercent`.
+     */
+    contextTokensUsed: number;
+    /**
+     * Lifetime tokens billed for this session (input + output across every
+     * request). Reported for cost visibility only — it must never be compared
+     * against the context window, since re-sent history is counted once per
+     * request and the sum exceeds the window long before the context is full.
+     */
+    lifetimeTokensUsed: number;
+    /** Estimated context window size for the current model */
+    contextWindowSize: number;
+    /** Usage as a fraction (0.0 - 1.0) */
+    usagePercent: number;
+    /** Current threshold level based on compactionThreshold */
+    level: 'normal' | 'warning' | 'critical';
+    /** Number of messages in conversation history */
+    messageCount: number;
+    /** Whether auto-compaction will trigger on next message */
+    compactionPending: boolean;
+    /** Human-readable summary */
+    summary: string;
+}
+/**
+ * Estimated context window sizes (in tokens) for known models.
+ * Used for budget tracking when the model doesn't report its own limit.
+ */
+export declare const MODEL_CONTEXT_WINDOWS: Record<string, number>;
+/**
+ * Per-model floor on `maxOutputTokens` (the AI SDK's name for the
+ * `max_tokens` request param). Used to defend against a class of bugs where
+ * a low user-configured limit silently produces an empty response.
+ *
+ * Currently only `deepseek-reasoner` has a real floor: R1 mixes
+ * `reasoning_tokens` into the same `max_tokens` budget as `completion_tokens`,
+ * so a user value < ~200 can be entirely consumed by the reasoning trace,
+ * leaving `message.content = ""` (200 OK, no error).
+ *
+ * Models not listed here resolve to a floor of 0 (no clamp).
+ *
+ * Discovered 2026-05-03 via live smoke test D — see
+ * `.crewly/specs/2026-05-03-crewly-agent-deepseek-gap-list.md` (finding N5).
+ */
+export declare const MODEL_OUTPUT_TOKEN_FLOORS: Record<string, number>;
+/**
+ * Resolve the effective `maxOutputTokens` for a given model configuration,
+ * applying any per-model floor from `MODEL_OUTPUT_TOKEN_FLOORS`.
+ *
+ * If `config.maxTokens` is unset, falls back to the runtime default
+ * (`CREWLY_AGENT_DEFAULTS.DEFAULT_MODEL.maxTokens`). The result is always
+ * `>= floor` for the model, where `floor` defaults to 0.
+ *
+ * @param config - Model configuration (may have `maxTokens` undefined)
+ * @returns Effective max output tokens to pass to generateText/streamText
+ */
+export declare function resolveMaxOutputTokens(config: ModelConfig): number;
+/**
+ * Result of an autonomous context compaction operation.
+ * Returned by the compact_memory tool and requestCompaction().
+ */
+export interface CompactionResult {
+    /** Whether compaction was performed */
+    compacted: boolean;
+    /** Number of messages before compaction */
+    messagesBefore: number;
+    /** Number of messages after compaction */
+    messagesAfter: number;
+    /** Reason if compaction was skipped */
+    reason?: string;
+}
+/**
+ * Result of a tool approval check.
+ * Returned by the onCheckApproval callback to determine if a tool can execute.
+ */
+export interface ApprovalCheckResult {
+    /** Whether the tool is allowed to execute */
+    allowed: boolean;
+    /** Reason if the tool is blocked or requires approval */
+    reason?: string;
+    /** Whether the tool was blocked (vs requiring approval) */
+    blocked?: boolean;
+}
+/**
+ * Callbacks from tool registry to the agent runner.
+ * Allows tools to trigger runner-level operations like compaction and security checks.
+ */
+export interface ToolCallbacks {
+    /** Trigger intelligent context compaction */
+    onCompactMemory?: () => Promise<CompactionResult>;
+    /** Get current context budget status */
+    onGetContextBudget?: () => ContextBudgetStatus;
+    /** Record an audit entry for a tool call */
+    onAuditLog?: (entry: AuditEntry) => void;
+    /** Check if a tool is allowed to execute given current security policy */
+    onCheckApproval?: (toolName: string, sensitivity: ToolSensitivity) => ApprovalCheckResult;
+    /** Retrieve audit log entries with optional filters */
+    onGetAuditLog?: (filters: AuditLogFilters) => AuditEntry[];
+    /** Enqueue a tool call for approval when it requires explicit approval */
+    onEnqueueApproval?: (toolName: string, sensitivity: ToolSensitivity, args: Record<string, unknown>) => {
+        approvalId: string;
+    };
+}
+/**
+ * Filters for querying the audit log.
+ */
+export interface AuditLogFilters {
+    /** Maximum entries to return (most recent first) */
+    limit: number;
+    /** Filter by sensitivity level */
+    sensitivity?: ToolSensitivity;
+    /** Filter by specific tool name */
+    toolName?: string;
+}
+/**
+ * Configuration for API key security guardrails.
+ * Controls output filtering, environment isolation, and prompt protection.
+ */
+export interface SecurityGuardrailConfig {
+    /** Enable output filtering (redact API keys from agent responses) */
+    outputFilterEnabled: boolean;
+    /** Enable environment isolation (strip secrets from bash child processes) */
+    envIsolationEnabled: boolean;
+    /** Enable prompt guard (block key extraction commands and prompt injections) */
+    promptGuardEnabled: boolean;
+    /** Additional env vars to explicitly allow in child processes */
+    explicitEnvVars: string[];
+}
+/**
+ * Default configuration values for Crewly Agent
+ */
+export declare const CREWLY_AGENT_DEFAULTS: {
+    /** Default max reasoning steps per generateText call (high to mimic unlimited like Claude Code) */
+    readonly MAX_STEPS: 500;
+    /** Maximum tool calls allowed per single response to prevent polling dead-loops */
+    readonly MAX_TOOL_CALLS_PER_RESPONSE: 15;
+    /** Consecutive identical tool calls before aborting (loop detection) */
+    readonly LOOP_DETECTION_THRESHOLD: 3;
+    /** Consecutive error responses (404, 4xx, 5xx) from the same tool before aborting */
+    readonly ERROR_LOOP_THRESHOLD: 3;
+    /** Default API base URL */
+    readonly API_BASE_URL: "http://localhost:8787";
+    /** Default max history messages before compaction */
+    readonly MAX_HISTORY_MESSAGES: 100;
+    /** Default compaction threshold (80% of context window) */
+    readonly COMPACTION_THRESHOLD: 0.8;
+    /**
+     * Characters per token, used ONLY to size the context before the first
+     * response gives us a real measurement. Latin text runs about 4 chars per
+     * token; CJK about 1.5, so the two are counted separately — a single ratio
+     * would misjudge a Chinese system prompt by more than 2x.
+     */
+    readonly CHARS_PER_TOKEN_LATIN: 4;
+    readonly CHARS_PER_TOKEN_CJK: 1.5;
+    /** Default model configuration */
+    readonly DEFAULT_MODEL: {
+        provider: ModelProvider;
+        modelId: string;
+        temperature: number;
+        maxTokens: number;
+    };
+    /** HTTP request timeout in milliseconds */
+    readonly API_TIMEOUT_MS: 30000;
+    /** Heartbeat interval in milliseconds for keeping in-process agent active between messages */
+    readonly HEARTBEAT_INTERVAL_MS: 30000;
+    /** Maximum time in milliseconds for a single message processing (generateText call) — hard abort.
+     *  Override via CREWLY_AGENT_MESSAGE_TIMEOUT_MS env var.
+     *
+     *  This is the **default** timeout used when the model has no entry in
+     *  `MODEL_TIMEOUT_MS`. Per-model overrides take precedence — see below. */
+    readonly MESSAGE_TIMEOUT_MS: number;
+    /** I4 — Per-model hard-timeout overrides. Looked up by `modelId`.
+     *
+     *  When the runtime service is about to run a message, it checks
+     *  `MODEL_TIMEOUT_MS[config.model.modelId]` first; falls back to
+     *  `MESSAGE_TIMEOUT_MS` if no entry exists.
+     *
+     *  **Why per-model:** different models have radically different latency
+     *  characteristics. DeepSeek-R1 (`deepseek-reasoner`) emits chain-of-thought
+     *  reasoning_tokens which are slower to generate than plain content tokens.
+     *  Live smoke (2026-05-03) measured R1 single-step at avg 2.8s/max 4.8s, but
+     *  long-context (>32k) latency rises sharply per vendor docs, and multi-step
+     *  agentic loops can accumulate 30+ steps. 5min default is tight; 10min gives
+     *  safety margin without inviting runaway loops. See gap-list spec §I4 for
+     *  measurement evidence. */
+    /**
+     * Frozen at module load via `Object.freeze` — defensive guard against
+     * runtime mutation. `as const` is compile-time only and the
+     * `Record<string, number>` cast widens it back to mutable, so freeze
+     * is the only line of defense against accidental writes like
+     * `CREWLY_AGENT_DEFAULTS.MODEL_TIMEOUT_MS['x'] = 999` from elsewhere
+     * in the codebase. Per-model overrides should be added by editing this
+     * file (treat as a config table, not runtime state).
+     */
+    readonly MODEL_TIMEOUT_MS: Readonly<Record<string, number>>;
+    /** Soft warning threshold in milliseconds — logs a warning but does not kill the request.
+     *  Override via CREWLY_AGENT_MESSAGE_SOFT_WARNING_MS env var. */
+    readonly MESSAGE_SOFT_WARNING_MS: number;
+    /** Grace period added on top of the agent's own run budget before the PARENT
+     *  gives up waiting on the child's IPC reply.
+     *
+     *  The child enforces the run budget itself and reports a clean error, so in
+     *  normal operation the parent timer never fires. It exists for the case the
+     *  child can no longer report at all — blocked event loop, broken stdout pipe,
+     *  SIGSTOP. The grace keeps the parent from racing the child and mislabelling
+     *  a normal in-budget timeout as a wedged runtime. */
+    readonly IPC_RUN_TIMEOUT_GRACE_MS: 30000;
+    /** Cooldown period in milliseconds after rate limit retries are exhausted */
+    readonly RATE_LIMIT_COOLDOWN_MS: 300000;
+    /** Maximum number of automatic retries for recoverable errors (429, 5xx, network) */
+    readonly MAX_RETRIES: 3;
+    /** Base delay in milliseconds for exponential backoff between retries */
+    readonly RETRY_BASE_DELAY_MS: 1000;
+    /** Default Ollama API base URL for local LLM provider */
+    readonly OLLAMA_BASE_URL: "http://localhost:11434/api";
+    /** Default security policy */
+    readonly SECURITY_POLICY: {
+        auditEnabled: true;
+        requireApproval: ToolSensitivity[];
+        blockedTools: string[];
+        maxAuditEntries: number;
+        readOnlyMode: false;
+    };
+    /** Default security guardrail configuration */
+    readonly SECURITY_GUARDRAILS: {
+        outputFilterEnabled: true;
+        envIsolationEnabled: true;
+        promptGuardEnabled: true;
+        explicitEnvVars: never[];
+    };
+};
+/**
+ * Type guard to check if a string is a valid ModelProvider
+ *
+ * @param value - String to check
+ * @returns True if the value is a valid ModelProvider
+ */
+export declare function isModelProvider(value: string): value is ModelProvider;
+/**
+ * Supported models for the UI dropdown.
+ * Format: provider/modelId → display label
+ */
+export declare const SUPPORTED_MODELS: Array<{
+    id: string;
+    label: string;
+    provider: ModelProvider;
+}>;
+/**
+ * Parse a modelId string (provider/modelId) into a ModelConfig.
+ * Falls back to DEFAULT_MODEL if the input is invalid.
+ *
+ * @param modelId - Format: "provider/modelId" (e.g. "google/gemini-3-flash-preview")
+ * @returns Parsed ModelConfig
+ */
+export declare function parseModelId(modelId: string | undefined): ModelConfig;
+/**
+ * Type guard to check if an object is a valid ModelConfig
+ *
+ * @param obj - Object to validate
+ * @returns True if the object has all required ModelConfig fields
+ */
+export declare function isModelConfig(obj: unknown): obj is ModelConfig;
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/backend/src/services/agent/crewly-agent/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,CAAC,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEtF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAM1C,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,QAAQ,EAAE,aAAa,CAAC;IACxB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,WAAW,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iCAAiC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,8BAA8B;IAC9B,cAAc,EAAE,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,KAAK,EAAE,WAAW,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,sCAAsC;IACtC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,kCAAkC;IAClC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,aAAa,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC;IACvB,0DAA0D;IAC1D,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,6DAA6D;IAC7D,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,+CAA+C;IAC/C,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5E,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAClH,6CAA6C;IAC7C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,KAAK,IAAI,CAAC;CACnE;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,WAAW,EAAE,eAAe,CAAC;IAC7B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,YAAY,EAAE,OAAO,CAAC;IACtB,6DAA6D;IAC7D,eAAe,EAAE,eAAe,EAAE,CAAC;IACnC,6CAA6C;IAC7C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAgB/B,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACzC,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAkC/C,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAEnD,CAAC;AAEX;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAIlE;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,wCAAwC;IACxC,kBAAkB,CAAC,EAAE,MAAM,mBAAmB,CAAC;IAC/C,4CAA4C;IAC5C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACzC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,KAAK,mBAAmB,CAAC;IAC1F,uDAAuD;IACvD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;IAC3D,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/H;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,qEAAqE;IACrE,mBAAmB,EAAE,OAAO,CAAC;IAC7B,6EAA6E;IAC7E,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gFAAgF;IAChF,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iEAAiE;IACjE,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB;IAChC,mGAAmG;;IAEnG,mFAAmF;;IAEnF,wEAAwE;;IAExE,qFAAqF;;IAErF,2BAA2B;;IAE3B,qDAAqD;;IAErD,2DAA2D;;IAE3D;;;;;OAKG;;;IAGH,kCAAkC;;kBAEV,aAAa;;;;;IAKrC,2CAA2C;;IAE3C,8FAA8F;;IAE9F;;;;+EAI2E;;IAE3E;;;;;;;;;;;;;gCAa4B;IAC5B;;;;;;;;OAQG;+BAIG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC;qEACiE;;IAEjE;;;;;;;0DAOsD;;IAEtD,6EAA6E;;IAE7E,qFAAqF;;IAErF,yEAAyE;;IAEzE,yDAAyD;;IAEzD,8BAA8B;;;yBAGL,eAAe,EAAE;sBACpB,MAAM,EAAE;;;;IAI9B,+CAA+C;;;;;;;CAOvC,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,CAU1F,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAmBrE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,WAAW,CAS9D"}