network-ai 5.13.4 → 5.14.0

package/dist/lib/claude-hooks.js

@@ -0,0 +1,307 @@
+"use strict";
+/**
+ * Claude Code Hooks Bridge — AuthGuardian-gated tool calls for coding agents.
+ *
+ * Claude Code (and other hook-capable agent CLIs) can call an external
+ * command on every tool use (PreToolUse / PostToolUse hooks). This module
+ * turns Network-AI into that command: every tool call an agent makes is
+ * audited — and optionally permission-gated — through the same
+ * `AuthGuardian` weighted scoring used for swarm agents (justification 40%,
+ * trust 30%, risk 30%).
+ *
+ * Two modes:
+ * - `'observe'` (default) — every tool call is audit-logged, nothing is
+ *   blocked. Zero-risk visibility into what the agent is doing.
+ * - `'enforce'` — tool calls are mapped to Network-AI resource types
+ *   (Bash → SHELL_EXEC, Write/Edit → FILE_SYSTEM, WebFetch →
+ *   EXTERNAL_SERVICE, …) and must pass `AuthGuardian.requestPermission()`.
+ *   Denied calls return `'ask'` (escalate to the human) or `'deny'`.
+ *
+ * Wire-up (Claude Code `settings.json`):
+ * ```json
+ * {
+ *   "hooks": {
+ *     "PreToolUse": [{
+ *       "matcher": "Bash|Write|Edit|WebFetch",
+ *       "hooks": [{ "type": "command",
+ *                   "command": "npx -y -p network-ai network-ai hook pre-tool-use --mode enforce" }]
+ *     }]
+ *   }
+ * }
+ * ```
+ * See `examples/claude-code-hooks.json` for a complete config.
+ *
+ * @module ClaudeHooks
+ * @version 1.0.0
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClaudeHookBridge = exports.DEFAULT_TOOL_RESOURCE_MAP = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const auth_guardian_1 = require("./auth-guardian");
+// ============================================================================
+// DEFAULTS
+// ============================================================================
+/**
+ * Default mapping from Claude Code tool names to Network-AI resource types.
+ * MCP tools (`mcp__*`) and unknown tools map to EXTERNAL_SERVICE.
+ */
+exports.DEFAULT_TOOL_RESOURCE_MAP = {
+    Bash: 'SHELL_EXEC',
+    BashOutput: 'SHELL_EXEC',
+    KillShell: 'SHELL_EXEC',
+    Write: 'FILE_SYSTEM',
+    Edit: 'FILE_SYSTEM',
+    MultiEdit: 'FILE_SYSTEM',
+    NotebookEdit: 'FILE_SYSTEM',
+    Read: 'FILE_SYSTEM',
+    Glob: 'FILE_SYSTEM',
+    Grep: 'FILE_SYSTEM',
+    WebFetch: 'EXTERNAL_SERVICE',
+    WebSearch: 'EXTERNAL_SERVICE',
+    Task: 'EXTERNAL_SERVICE',
+};
+/** Justification templates per resource type — phrased to carry the
+ *  resource-relevant context AuthGuardian's scorer checks for. */
+const JUSTIFICATION_TEMPLATES = {
+    SHELL_EXEC: (tool, target) => `Execute shell command via ${tool} in order to complete the current coding task: ${target}`,
+    FILE_SYSTEM: (tool, target) => `Access workspace file via ${tool} in order to complete the current coding task: ${target}`,
+    GIT: (tool, target) => `Perform git repository operation via ${tool} in order to complete the current coding task: ${target}`,
+    EXTERNAL_SERVICE: (tool, target) => `Fetch external api endpoint via ${tool} in order to complete the current coding task: ${target}`,
+};
+// ============================================================================
+// HELPERS
+// ============================================================================
+/** Extract the most meaningful target string from a tool input */
+function extractTarget(toolName, toolInput) {
+    if (!toolInput)
+        return toolName;
+    const candidates = ['command', 'file_path', 'filePath', 'path', 'url', 'query', 'pattern', 'prompt'];
+    for (const key of candidates) {
+        const v = toolInput[key];
+        if (typeof v === 'string' && v.length > 0)
+            return v.slice(0, 500);
+    }
+    try {
+        return JSON.stringify(toolInput).slice(0, 300);
+    }
+    catch {
+        return toolName;
+    }
+}
+/** Test a tool name / target against a pattern list */
+function matchesAny(patterns, toolName, target) {
+    if (!patterns || patterns.length === 0)
+        return false;
+    for (const p of patterns) {
+        const re = typeof p === 'string' ? new RegExp(p, 'i') : p;
+        if (re.test(toolName) || re.test(target))
+            return true;
+    }
+    return false;
+}
+// ============================================================================
+// CLAUDE HOOK BRIDGE
+// ============================================================================
+/**
+ * Bridges coding-agent hook events (Claude Code PreToolUse / PostToolUse)
+ * into Network-AI's AuthGuardian permission system and audit trail.
+ */
+class ClaudeHookBridge {
+    guardian;
+    agentId;
+    mode;
+    denyPatterns;
+    allowPatterns;
+    toolResourceMap;
+    blockedDecision;
+    auditLogPath;
+    onAudit;
+    constructor(options = {}) {
+        this.agentId = options.agentId ?? 'claude-code';
+        this.mode = options.mode ?? 'observe';
+        this.denyPatterns = options.denyPatterns ?? [];
+        this.allowPatterns = options.allowPatterns ?? [];
+        this.toolResourceMap = { ...exports.DEFAULT_TOOL_RESOURCE_MAP, ...(options.toolResourceMap ?? {}) };
+        this.blockedDecision = options.blockedDecision ?? 'ask';
+        this.auditLogPath = options.auditLogPath ? path.resolve(options.auditLogPath) : null;
+        this.onAudit = options.onAudit ?? null;
+        if (options.guardian) {
+            this.guardian = options.guardian;
+        }
+        else if (this.mode === 'enforce') {
+            // Auto-create a guardian with a trust identity for this agent.
+            this.guardian = new auth_guardian_1.AuthGuardian({
+                trustLevels: [{
+                        agentId: this.agentId,
+                        trustLevel: options.trustLevel ?? 0.7,
+                        allowedNamespaces: ['*'],
+                        allowedResources: ['*'],
+                    }],
+                ...(options.guardianAuditLogPath ? { auditLogPath: options.guardianAuditLogPath } : {}),
+                ...(options.trustConfigPath ? { trustConfigPath: options.trustConfigPath } : {}),
+            });
+        }
+        else {
+            this.guardian = null;
+        }
+    }
+    /**
+     * Parse a raw hook stdin payload. Tolerates a leading UTF-8 BOM (some
+     * shells prepend one when piping). Throws on malformed JSON or a payload
+     * that is not an object.
+     */
+    static parseInput(raw) {
+        let parsed;
+        try {
+            parsed = JSON.parse(raw.replace(/^\uFEFF/, '').trim());
+        }
+        catch (err) {
+            const detail = err instanceof Error ? err.message : String(err);
+            throw new Error(`ClaudeHookBridge: invalid hook input JSON — ${detail}`);
+        }
+        if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('ClaudeHookBridge: hook input must be a JSON object');
+        }
+        const obj = parsed;
+        if (typeof obj['hook_event_name'] !== 'string') {
+            throw new Error('ClaudeHookBridge: hook input missing hook_event_name');
+        }
+        return obj;
+    }
+    /**
+     * Handle a PreToolUse event: decide allow / deny / ask.
+     *
+     * Decision order: denyPatterns → allowPatterns → observe-mode allow →
+     * AuthGuardian permission request (enforce mode).
+     */
+    async handlePreToolUse(input) {
+        const toolName = input.tool_name ?? 'unknown';
+        const target = extractTarget(toolName, input.tool_input);
+        // 1. Hard deny list
+        if (matchesAny(this.denyPatterns, toolName, target)) {
+            return this.decide(input, toolName, target, 'deny', `Blocked by Network-AI deny pattern (tool: ${toolName})`);
+        }
+        // 2. Explicit allow list
+        if (matchesAny(this.allowPatterns, toolName, target)) {
+            return this.decide(input, toolName, target, 'allow', `Allowed by Network-AI allow pattern (tool: ${toolName})`);
+        }
+        // 3. Observe mode: audit, never block
+        if (this.mode === 'observe' || !this.guardian) {
+            return this.decide(input, toolName, target, 'allow', 'Network-AI observe mode — call audited, not gated');
+        }
+        // 4. Enforce mode: AuthGuardian weighted permission scoring
+        const resourceType = this.toolResourceMap[toolName]
+            ?? (toolName.startsWith('mcp__') ? 'EXTERNAL_SERVICE' : 'EXTERNAL_SERVICE');
+        const template = JUSTIFICATION_TEMPLATES[resourceType] ?? JUSTIFICATION_TEMPLATES['EXTERNAL_SERVICE'];
+        const justification = template(toolName, target);
+        const grant = await this.guardian.requestPermission(this.agentId, resourceType, justification, toolName);
+        if (grant.granted) {
+            return this.decide(input, toolName, target, 'allow', `AuthGuardian granted ${resourceType} (restrictions: ${grant.restrictions.join(', ') || 'none'})`);
+        }
+        return this.decide(input, toolName, target, this.blockedDecision, `AuthGuardian denied ${resourceType}: ${grant.reason ?? 'permission not granted'}`);
+    }
+    /**
+     * Handle a PostToolUse event: audit the completed call. Never blocks.
+     * Returns an empty object (the hook-protocol no-op).
+     */
+    async handlePostToolUse(input) {
+        const toolName = input.tool_name ?? 'unknown';
+        const target = extractTarget(toolName, input.tool_input);
+        this.audit({
+            timestamp: new Date().toISOString(),
+            event: 'PostToolUse',
+            toolName,
+            target,
+            sessionId: input.session_id,
+            agentId: this.agentId,
+            mode: this.mode,
+        });
+        return {};
+    }
+    /**
+     * Dispatch a hook input by its `hook_event_name`.
+     */
+    async handle(input) {
+        if (input.hook_event_name === 'PreToolUse')
+            return this.handlePreToolUse(input);
+        if (input.hook_event_name === 'PostToolUse')
+            return this.handlePostToolUse(input);
+        throw new Error(`ClaudeHookBridge: unsupported hook event "${input.hook_event_name}"`);
+    }
+    // --------------------------------------------------------------------------
+    // Internals
+    // --------------------------------------------------------------------------
+    decide(input, toolName, target, decision, reason) {
+        this.audit({
+            timestamp: new Date().toISOString(),
+            event: 'PreToolUse',
+            toolName,
+            target,
+            decision,
+            reason,
+            sessionId: input.session_id,
+            agentId: this.agentId,
+            mode: this.mode,
+        });
+        return {
+            hookSpecificOutput: {
+                hookEventName: 'PreToolUse',
+                permissionDecision: decision,
+                permissionDecisionReason: reason,
+            },
+        };
+    }
+    audit(entry) {
+        try {
+            this.onAudit?.(entry);
+        }
+        catch {
+            /* observer errors must never break the hook */
+        }
+        if (this.auditLogPath) {
+            try {
+                fs.mkdirSync(path.dirname(this.auditLogPath), { recursive: true });
+                fs.appendFileSync(this.auditLogPath, JSON.stringify(entry) + '\n', 'utf8');
+            }
+            catch {
+                /* audit-write failures must never break the hook */
+            }
+        }
+    }
+}
+exports.ClaudeHookBridge = ClaudeHookBridge;
+//# sourceMappingURL=claude-hooks.js.map

package/dist/lib/claude-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hooks.js","sourceRoot":"","sources":["../../lib/claude-hooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,mDAA+C;AAgF/C,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;GAGG;AACU,QAAA,yBAAyB,GAA2B;IAC/D,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,YAAY;IACvB,KAAK,EAAE,aAAa;IACpB,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,aAAa;IACxB,YAAY,EAAE,aAAa;IAC3B,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,kBAAkB;IAC7B,IAAI,EAAE,kBAAkB;CACzB,CAAC;AAEF;kEACkE;AAClE,MAAM,uBAAuB,GAA6D;IACxF,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC3B,6BAA6B,IAAI,kDAAkD,MAAM,EAAE;IAC7F,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC5B,6BAA6B,IAAI,kDAAkD,MAAM,EAAE;IAC7F,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CACpB,wCAAwC,IAAI,kDAAkD,MAAM,EAAE;IACxG,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CACjC,mCAAmC,IAAI,kDAAkD,MAAM,EAAE;CACpG,CAAC;AAEF,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,kEAAkE;AAClE,SAAS,aAAa,CAAC,QAAgB,EAAE,SAA8C;IACrF,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChC,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,UAAU,CAAC,QAA4C,EAAE,QAAgB,EAAE,MAAc;IAChG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;GAGG;AACH,MAAa,gBAAgB;IACV,QAAQ,CAAsB;IAC9B,OAAO,CAAS;IAChB,IAAI,CAAwB;IAC5B,YAAY,CAAyB;IACrC,aAAa,CAAyB;IACtC,eAAe,CAAyB;IACxC,eAAe,CAAiB;IAChC,YAAY,CAAgB;IAC5B,OAAO,CAA2C;IAEnE,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,eAAe,GAAG,EAAE,GAAG,iCAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QAEvC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,+DAA+D;YAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAY,CAAC;gBAC/B,WAAW,EAAE,CAAC;wBACZ,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,GAAG;wBACrC,iBAAiB,EAAE,CAAC,GAAG,CAAC;wBACxB,gBAAgB,EAAE,CAAC,GAAG,CAAC;qBACxB,CAAC;gBACF,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAC,GAAW;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,GAAiC,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAsB;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAEzD,oBAAoB;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAChD,6CAA6C,QAAQ,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,yBAAyB;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EACjD,8CAA8C,QAAQ,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EACjD,mDAAmD,CAAC,CAAC;QACzD,CAAC;QAED,4DAA4D;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;eAC9C,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,YAAY,CAAC,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;QACtG,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CACjD,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,CACpD,CAAC;QAEF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EACjD,wBAAwB,YAAY,mBAAmB,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAC9D,uBAAuB,YAAY,KAAK,KAAK,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC,CAAC;IACxF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAsB;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,aAAa;YACpB,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAsB;QACjC,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;IACzF,CAAC;IAED,6EAA6E;IAC7E,YAAY;IACZ,6EAA6E;IAErE,MAAM,CACZ,KAAsB,EACtB,QAAgB,EAChB,MAAc,EACd,QAAgC,EAChC,MAAc;QAEd,IAAI,CAAC,KAAK,CAAC;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,YAAY;YACnB,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,OAAO;YACL,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,QAAQ;gBAC5B,wBAAwB,EAAE,MAAM;aACjC;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAqB;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAvLD,4CAuLC"}

package/dist/lib/mcp-elicitation.d.ts

@@ -0,0 +1,116 @@
+/**
+ * MCP Elicitation — native in-client approval prompts.
+ *
+ * Implements the MCP elicitation capability (spec revision 2025-06-18):
+ * the server sends an `elicitation/create` JSON-RPC request *to the client*,
+ * the client renders it natively (Claude Code, Codex, Gemini CLI, Cursor…),
+ * and the user's answer comes back as the response.
+ *
+ * Network-AI uses this to surface `ApprovalGate` / `ApprovalInbox` decisions
+ * directly inside the MCP client instead of a separate HTTP inbox: wrap a
+ * request sender with {@link createElicitationApprovalCallback} and pass the
+ * resulting callback to `ApprovalGate`.
+ *
+ * Transport plumbing for stdio servers is provided by
+ * {@link StdioElicitationChannel}: it assigns request ids, writes
+ * newline-delimited JSON-RPC to the client, and resolves pending promises
+ * when responses arrive.
+ *
+ * @example
+ * ```ts
+ * const channel = new StdioElicitationChannel((line) => process.stdout.write(line + '\n'));
+ * // in the stdin loop: if (channel.handleMessage(parsed)) return; // consumed a response
+ * const approvalCallback = createElicitationApprovalCallback(
+ *   (params) => channel.request('elicitation/create', params),
+ * );
+ * const gate = new ApprovalGate(approvalCallback);
+ * ```
+ *
+ * @module McpElicitation
+ * @version 1.0.0
+ */
+import type { ApprovalRequest, ApprovalDecision } from './agent-runtime';
+/** Flat-primitive schema property allowed by MCP elicitation */
+export interface ElicitationSchemaProperty {
+    type: 'string' | 'number' | 'integer' | 'boolean';
+    title?: string;
+    description?: string;
+    enum?: string[];
+    default?: string | number | boolean;
+}
+/** The restricted object schema MCP elicitation requests may carry */
+export interface ElicitationRequestedSchema {
+    type: 'object';
+    properties: Record<string, ElicitationSchemaProperty>;
+    required?: string[];
+}
+/** Params for an `elicitation/create` request */
+export interface ElicitationCreateParams {
+    /** Human-readable message presented to the user */
+    message: string;
+    /** Schema describing the structured content requested from the user */
+    requestedSchema: ElicitationRequestedSchema;
+}
+/** Result of an `elicitation/create` request */
+export interface ElicitationResult {
+    /** 'accept' (user submitted), 'decline' (explicit no), 'cancel' (dismissed) */
+    action: 'accept' | 'decline' | 'cancel';
+    /** The user's structured answer — present only when action is 'accept' */
+    content?: Record<string, unknown>;
+}
+/**
+ * Sends an elicitation request to the connected client and resolves its
+ * result. Implementations own the transport (stdio, streamable HTTP, …).
+ */
+export type ElicitationRequestSender = (params: ElicitationCreateParams) => Promise<ElicitationResult>;
+/** Options for {@link createElicitationApprovalCallback} */
+export interface ElicitationApprovalOptions {
+    /** Identity recorded on decisions approved via elicitation (default: 'mcp-client') */
+    approvedBy?: string;
+    /** Overall timeout for the elicitation round-trip in ms (default: 300000 = 5 min) */
+    timeoutMs?: number;
+}
+/**
+ * Build an `ApprovalCallback` (as used by `ApprovalGate` / `AgentRuntime`)
+ * that resolves approvals by asking the connected MCP client through
+ * elicitation. Fail-closed: timeouts, transport errors, declines, and
+ * cancellations all resolve to `approved: false`.
+ */
+export declare function createElicitationApprovalCallback(send: ElicitationRequestSender, options?: ElicitationApprovalOptions): (request: ApprovalRequest) => Promise<ApprovalDecision>;
+/**
+ * Server→client request channel for newline-delimited JSON-RPC transports
+ * (stdio). Assigns unique ids to outgoing requests and resolves the pending
+ * promise when the matching response arrives.
+ *
+ * Integration contract for the stdin loop: for every parsed inbound message,
+ * call {@link handleMessage} first — if it returns `true` the message was a
+ * response to a server-initiated request and must not be dispatched as a
+ * client request.
+ */
+export declare class StdioElicitationChannel {
+    private readonly write;
+    private readonly pending;
+    private nextId;
+    private readonly defaultTimeoutMs;
+    /**
+     * @param write            Writes one serialized JSON-RPC line to the client.
+     * @param defaultTimeoutMs Per-request timeout (default: 300000 = 5 min).
+     */
+    constructor(write: (line: string) => void, defaultTimeoutMs?: number);
+    /** Number of requests currently awaiting a client response */
+    get pendingCount(): number;
+    /**
+     * Send a server→client request and resolve its result.
+     * Rejects on timeout, client error response, or malformed result.
+     */
+    request(method: string, params: ElicitationCreateParams, timeoutMs?: number): Promise<ElicitationResult>;
+    /**
+     * Route an inbound message. Returns `true` when the message was a response
+     * to a pending server-initiated request (and was consumed); `false` when it
+     * is a client request the caller should dispatch normally.
+     */
+    handleMessage(message: unknown): boolean;
+    /** Reject every pending request (e.g. on shutdown or client disconnect). */
+    rejectAll(reason?: string): void;
+}
+//# sourceMappingURL=mcp-elicitation.d.ts.map

package/dist/lib/mcp-elicitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-elicitation.d.ts","sourceRoot":"","sources":["../../lib/mcp-elicitation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAMzE,gEAAgE;AAChE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CACrC;AAED,sEAAsE;AACtE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,eAAe,EAAE,0BAA0B,CAAC;CAC7C;AAED,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,uBAAuB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEvG,4DAA4D;AAC5D,MAAM,WAAW,0BAA0B;IACzC,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,wBAAwB,EAC9B,OAAO,GAAE,0BAA+B,GACvC,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CA2DzD;AAgBD;;;;;;;;;GASG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAInB;IACL,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAE1C;;;OAGG;gBACS,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,gBAAgB,SAAU;IAKrE,8DAA8D;IAC9D,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAwBxG;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IA8BxC,4EAA4E;IAC5E,SAAS,CAAC,MAAM,SAAmB,GAAG,IAAI;CAO3C"}

package/dist/lib/mcp-elicitation.js

@@ -0,0 +1,198 @@
+"use strict";
+/**
+ * MCP Elicitation — native in-client approval prompts.
+ *
+ * Implements the MCP elicitation capability (spec revision 2025-06-18):
+ * the server sends an `elicitation/create` JSON-RPC request *to the client*,
+ * the client renders it natively (Claude Code, Codex, Gemini CLI, Cursor…),
+ * and the user's answer comes back as the response.
+ *
+ * Network-AI uses this to surface `ApprovalGate` / `ApprovalInbox` decisions
+ * directly inside the MCP client instead of a separate HTTP inbox: wrap a
+ * request sender with {@link createElicitationApprovalCallback} and pass the
+ * resulting callback to `ApprovalGate`.
+ *
+ * Transport plumbing for stdio servers is provided by
+ * {@link StdioElicitationChannel}: it assigns request ids, writes
+ * newline-delimited JSON-RPC to the client, and resolves pending promises
+ * when responses arrive.
+ *
+ * @example
+ * ```ts
+ * const channel = new StdioElicitationChannel((line) => process.stdout.write(line + '\n'));
+ * // in the stdin loop: if (channel.handleMessage(parsed)) return; // consumed a response
+ * const approvalCallback = createElicitationApprovalCallback(
+ *   (params) => channel.request('elicitation/create', params),
+ * );
+ * const gate = new ApprovalGate(approvalCallback);
+ * ```
+ *
+ * @module McpElicitation
+ * @version 1.0.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StdioElicitationChannel = void 0;
+exports.createElicitationApprovalCallback = createElicitationApprovalCallback;
+// ============================================================================
+// APPROVAL CALLBACK FACTORY
+// ============================================================================
+/**
+ * Build an `ApprovalCallback` (as used by `ApprovalGate` / `AgentRuntime`)
+ * that resolves approvals by asking the connected MCP client through
+ * elicitation. Fail-closed: timeouts, transport errors, declines, and
+ * cancellations all resolve to `approved: false`.
+ */
+function createElicitationApprovalCallback(send, options = {}) {
+    const approvedBy = options.approvedBy ?? 'mcp-client';
+    const timeoutMs = options.timeoutMs ?? 300_000;
+    return async (request) => {
+        const params = {
+            message: `Approval required — agent "${request.agentId}" requests ${request.type} ` +
+                `on "${request.target}" (risk: ${request.risk})` +
+                (request.justification ? `\nJustification: ${request.justification}` : ''),
+            requestedSchema: {
+                type: 'object',
+                properties: {
+                    approve: {
+                        type: 'boolean',
+                        title: 'Approve this action?',
+                        description: `Allow ${request.type} on ${request.target}`,
+                    },
+                    reason: {
+                        type: 'string',
+                        title: 'Reason (optional)',
+                        description: 'Why you approved or denied this action',
+                    },
+                },
+                required: ['approve'],
+            },
+        };
+        let timer = null;
+        try {
+            const result = await Promise.race([
+                send(params),
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error(`elicitation timed out after ${timeoutMs}ms`)), timeoutMs);
+                }),
+            ]);
+            if (result.action === 'accept' && result.content?.['approve'] === true) {
+                const reason = typeof result.content['reason'] === 'string'
+                    ? result.content['reason']
+                    : undefined;
+                return { approved: true, approvedBy, ...(reason ? { reason } : {}) };
+            }
+            const why = result.action === 'accept'
+                ? 'user answered no'
+                : `user ${result.action === 'decline' ? 'declined' : 'cancelled'} the prompt`;
+            return { approved: false, reason: `Denied via MCP elicitation — ${why}` };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            // Fail closed: any transport failure is a denial, never an approval.
+            return { approved: false, reason: `Elicitation failed — ${message}` };
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    };
+}
+/**
+ * Server→client request channel for newline-delimited JSON-RPC transports
+ * (stdio). Assigns unique ids to outgoing requests and resolves the pending
+ * promise when the matching response arrives.
+ *
+ * Integration contract for the stdin loop: for every parsed inbound message,
+ * call {@link handleMessage} first — if it returns `true` the message was a
+ * response to a server-initiated request and must not be dispatched as a
+ * client request.
+ */
+class StdioElicitationChannel {
+    write;
+    pending = new Map();
+    nextId = 1_000_000; // high offset avoids collisions with client request ids
+    defaultTimeoutMs;
+    /**
+     * @param write            Writes one serialized JSON-RPC line to the client.
+     * @param defaultTimeoutMs Per-request timeout (default: 300000 = 5 min).
+     */
+    constructor(write, defaultTimeoutMs = 300_000) {
+        this.write = write;
+        this.defaultTimeoutMs = defaultTimeoutMs;
+    }
+    /** Number of requests currently awaiting a client response */
+    get pendingCount() {
+        return this.pending.size;
+    }
+    /**
+     * Send a server→client request and resolve its result.
+     * Rejects on timeout, client error response, or malformed result.
+     */
+    request(method, params, timeoutMs) {
+        const id = this.nextId++;
+        const line = JSON.stringify({ jsonrpc: '2.0', id, method, params });
+        return new Promise((resolve, reject) => {
+            const effective = timeoutMs ?? this.defaultTimeoutMs;
+            const timer = effective > 0
+                ? setTimeout(() => {
+                    this.pending.delete(id);
+                    reject(new Error(`request ${id} (${method}) timed out after ${effective}ms`));
+                }, effective)
+                : null;
+            this.pending.set(id, { resolve, reject, timer });
+            try {
+                this.write(line);
+            }
+            catch (err) {
+                if (timer)
+                    clearTimeout(timer);
+                this.pending.delete(id);
+                reject(err instanceof Error ? err : new Error(String(err)));
+            }
+        });
+    }
+    /**
+     * Route an inbound message. Returns `true` when the message was a response
+     * to a pending server-initiated request (and was consumed); `false` when it
+     * is a client request the caller should dispatch normally.
+     */
+    handleMessage(message) {
+        if (message === null || typeof message !== 'object')
+            return false;
+        const msg = message;
+        // Requests (and notifications) carry a method — not ours to consume.
+        if (typeof msg.method === 'string')
+            return false;
+        if (msg.id === null || msg.id === undefined)
+            return false;
+        const id = typeof msg.id === 'number' ? msg.id : Number(msg.id);
+        const entry = this.pending.get(id);
+        if (!entry)
+            return false;
+        this.pending.delete(id);
+        if (entry.timer)
+            clearTimeout(entry.timer);
+        if (msg.error) {
+            entry.reject(new Error(`client error ${msg.error.code}: ${msg.error.message}`));
+            return true;
+        }
+        const result = msg.result;
+        if (!result || (result.action !== 'accept' && result.action !== 'decline' && result.action !== 'cancel')) {
+            entry.reject(new Error('malformed elicitation result from client'));
+            return true;
+        }
+        entry.resolve(result);
+        return true;
+    }
+    /** Reject every pending request (e.g. on shutdown or client disconnect). */
+    rejectAll(reason = 'channel closed') {
+        for (const [id, entry] of this.pending) {
+            if (entry.timer)
+                clearTimeout(entry.timer);
+            entry.reject(new Error(`request ${id} aborted — ${reason}`));
+        }
+        this.pending.clear();
+    }
+}
+exports.StdioElicitationChannel = StdioElicitationChannel;
+//# sourceMappingURL=mcp-elicitation.js.map

package/dist/lib/mcp-elicitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-elicitation.js","sourceRoot":"","sources":["../../lib/mcp-elicitation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAgEH,8EA8DC;AAxED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAgB,iCAAiC,CAC/C,IAA8B,EAC9B,UAAsC,EAAE;IAExC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAE/C,OAAO,KAAK,EAAE,OAAwB,EAA6B,EAAE;QACnE,MAAM,MAAM,GAA4B;YACtC,OAAO,EACL,8BAA8B,OAAO,CAAC,OAAO,cAAc,OAAO,CAAC,IAAI,GAAG;gBAC1E,OAAO,OAAO,CAAC,MAAM,YAAY,OAAO,CAAC,IAAI,GAAG;gBAChD,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,sBAAsB;wBAC7B,WAAW,EAAE,SAAS,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE;qBAC1D;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,mBAAmB;wBAC1B,WAAW,EAAE,wCAAwC;qBACtD;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;SACF,CAAC;QAEF,IAAI,KAAK,GAAyC,IAAI,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC;gBACZ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,SAAS,IAAI,CAAC,CAAC,EACrE,SAAS,CACV,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvE,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ;oBACzD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAW;oBACpC,CAAC,CAAC,SAAS,CAAC;gBACd,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ;gBACpC,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,QAAQ,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,aAAa,CAAC;YAChF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,GAAG,EAAE,EAAE,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,qEAAqE;YACrE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAgBD;;;;;;;;;GASG;AACH,MAAa,uBAAuB;IACjB,KAAK,CAAyB;IAC9B,OAAO,GAAG,IAAI,GAAG,EAI9B,CAAC;IACG,MAAM,GAAG,SAAS,CAAC,CAAC,wDAAwD;IACnE,gBAAgB,CAAS;IAE1C;;;OAGG;IACH,YAAY,KAA6B,EAAE,gBAAgB,GAAG,OAAO;QACnE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,8DAA8D;IAC9D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAc,EAAE,MAA+B,EAAE,SAAkB;QACzE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAEpE,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,SAAS,GAAG,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC;YACrD,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC;gBACzB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;gBAChF,CAAC,EAAE,SAAS,CAAC;gBACf,CAAC,CAAC,IAAI,CAAC;YAET,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,OAAgB;QAC5B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,GAAG,GAAG,OAA6B,CAAC;QAE1C,qEAAqE;QACrE,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAE1D,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE3C,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAuC,CAAC;QAC3D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YACzG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,SAAS,CAAC,MAAM,GAAG,gBAAgB;QACjC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AA/FD,0DA+FC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "network-ai",
-  "version": "5.13.4",
-  "description": "AI agent orchestration framework for TypeScript/Node.js - 29 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Computer Use, OpenAI Agents SDK, Vertex AI, Pydantic AI, Browser Agent, Hermes, Orchestrator, RLM + streaming variants). Built-in CLI, security, swarm intelligence, real-time streaming, and agentic workflow patterns.",
+  "version": "5.14.0",
+  "description": "AI agent orchestration framework for TypeScript/Node.js - 32 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, OpenAI Responses, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Computer Use, Claude Agent SDK, OpenAI Agents SDK, Vertex AI, Gemini, Pydantic AI, Browser Agent, Hermes, Orchestrator, RLM + streaming variants). Built-in CLI, security, swarm intelligence, real-time streaming, and agentic workflow patterns.",
   "homepage": "https://network-ai.org",
   "main": "dist/index.js",
   "module": "dist/esm/index.js",