octo-vec 1.0.0

package/dist/tools/domain/qaTools.js

@@ -0,0 +1,275 @@
+/**
+ * QA Engineer domain tools — template scaffolds for the LLM to populate.
+ */
+import { Type } from "@mariozechner/pi-ai";
+import { EventLog } from "../../atp/eventLog.js";
+import { EventType } from "../../atp/models.js";
+import { runFlow, FLOW_NAMES } from "../../flows/index.js";
+function ok(text) {
+    return { content: [{ type: "text", text }], details: {} };
+}
+export const qaTools = [
+    {
+        name: "create_test_plan",
+        label: "Create Test Plan",
+        description: "Create a comprehensive test plan for a feature or system.",
+        parameters: Type.Object({
+            feature_description: Type.String({ description: "Feature or system to test" }),
+            task_id: Type.Optional(Type.String({ description: "Optional ATP task ID for tracking" })),
+        }),
+        execute: async (_, params) => {
+            EventLog.log(EventType.AGENT_TOOL_CALL, "qa", params.task_id ?? "", "QA creating test plan");
+            return ok(`## TEST PLAN
+
+**Feature:** ${params.feature_description}
+
+### 1. SCOPE
+- **In Scope:** [Features/modules to be tested]
+- **Out of Scope:** [Explicitly excluded areas]
+
+### 2. TEST STRATEGY
+- **Unit Tests:** Individual component testing
+- **Integration Tests:** Component interaction testing
+- **E2E Tests:** Full user flow testing
+- **Regression Tests:** Prevent existing functionality breakage
+
+### 3. TEST ENVIRONMENTS
+- Development (dev)
+- Staging (pre-prod)
+- Production (smoke only)
+
+### 4. TEST TYPES
+| Type | Coverage Goal | Priority |
+|------|--------------|----------|
+| Functional | 90%+ | High |
+| Boundary | Key inputs | High |
+| Negative | Invalid inputs | Medium |
+| Performance | Load scenarios | Medium |
+| Security | Auth/OWASP | High |
+
+### 5. ENTRY/EXIT CRITERIA
+- **Entry:** Feature code complete, dev unit tests passing
+- **Exit:** All critical/high test cases pass, no P1/P2 open bugs
+
+### 6. RISKS
+- [Risk 1 and mitigation]
+- [Risk 2 and mitigation]
+
+### 7. TIMELINE
+- Test case creation: [estimate]
+- Test execution: [estimate]
+- Bug fix cycle: [estimate]`);
+        },
+    },
+    {
+        name: "write_test_cases",
+        label: "Write Test Cases",
+        description: "Write detailed test cases for a feature.",
+        parameters: Type.Object({
+            feature_description: Type.String({ description: "Feature to write test cases for" }),
+            test_type: Type.Optional(Type.String({ description: "Type: functional, boundary, negative, performance (default: functional)" })),
+            task_id: Type.Optional(Type.String({ description: "Optional ATP task ID for tracking" })),
+        }),
+        execute: async (_, params) => {
+            const testType = params.test_type ?? "functional";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "qa", params.task_id ?? "", `QA writing ${testType} test cases`);
+            return ok(`## TEST CASES — ${testType.toUpperCase()}
+
+**Feature:** ${params.feature_description}
+
+### TC-001: Happy Path
+- **Preconditions:** System in valid state, user authenticated
+- **Steps:**
+  1. [Step 1]
+  2. [Step 2]
+  3. [Step 3]
+- **Expected Result:** [Expected outcome]
+- **Priority:** High
+
+### TC-002: Boundary Values
+- **Preconditions:** [Setup]
+- **Steps:**
+  1. Test minimum valid input
+  2. Test maximum valid input
+  3. Test just beyond boundaries
+- **Expected Result:** [Correct handling at boundaries]
+- **Priority:** High
+
+### TC-003: Negative — Invalid Input
+- **Preconditions:** [Setup]
+- **Steps:**
+  1. Provide empty/null input
+  2. Provide wrong data type
+  3. Provide malformed data
+- **Expected Result:** [Graceful error handling, no crash]
+- **Priority:** Medium
+
+### TC-004: Error Recovery
+- **Preconditions:** System in error state
+- **Steps:**
+  1. Trigger error condition
+  2. Verify error message shown
+  3. Verify system recovers/retries correctly
+- **Expected Result:** [Graceful recovery]
+- **Priority:** High
+
+### AUTOMATION NOTES
+- Automatable: [Yes/No]
+- Framework: [pytest / Jest / Playwright]
+- Priority for automation: [High/Medium/Low]`);
+        },
+    },
+    {
+        name: "report_bug",
+        label: "Report Bug",
+        description: "Create a structured bug report for a discovered defect.",
+        parameters: Type.Object({
+            bug_description: Type.String({ description: "Description of the bug found" }),
+            severity: Type.Optional(Type.Union([Type.Literal("critical"), Type.Literal("high"), Type.Literal("medium"), Type.Literal("low")], {
+                description: "Bug severity (default: medium)",
+            })),
+            task_id: Type.Optional(Type.String({ description: "Optional ATP task ID for tracking" })),
+        }),
+        execute: async (_, params) => {
+            const severity = params.severity ?? "medium";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "qa", params.task_id ?? "", `QA reporting ${severity} bug`);
+            return ok(`## BUG REPORT
+
+**Summary:** ${params.bug_description}
+**Severity:** ${severity.toUpperCase()}
+**Priority:** [P1/P2/P3/P4]
+**Status:** Open
+
+### ENVIRONMENT
+- OS: [Operating system]
+- Browser/Runtime: [Version]
+- Build/Version: [App version]
+
+### REPRODUCTION STEPS
+1. [Precondition: initial state]
+2. [Action taken]
+3. [Observed result]
+
+### EXPECTED vs ACTUAL
+- **Expected:** [What should happen]
+- **Actual:** [What actually happens]
+
+### EVIDENCE
+- Screenshot/Log: [Attach or describe]
+- Error message: [Exact error text]
+
+### IMPACT
+- **Users affected:** [All / Subset / Edge case]
+- **Workaround:** [Yes: describe / No]
+- **Blocker:** [Yes / No]
+
+### SUGGESTED FIX
+[If known, describe the likely cause and fix approach]`);
+        },
+    },
+    {
+        name: "analyze_test_coverage",
+        label: "Analyze Test Coverage",
+        description: "Analyze and report on test coverage for a codebase or feature.",
+        parameters: Type.Object({
+            codebase_description: Type.String({ description: "Description of the codebase or feature to analyze coverage for" }),
+            task_id: Type.Optional(Type.String({ description: "Optional ATP task ID for tracking" })),
+        }),
+        execute: async (_, params) => {
+            EventLog.log(EventType.AGENT_TOOL_CALL, "qa", params.task_id ?? "", "QA analyzing test coverage");
+            return ok(`## TEST COVERAGE ANALYSIS
+
+**Scope:** ${params.codebase_description}
+
+### COVERAGE SUMMARY
+| Area | Line Coverage | Branch Coverage | Status |
+|------|--------------|-----------------|--------|
+| [Module 1] | [%] | [%] | ✅/⚠️/❌ |
+| [Module 2] | [%] | [%] | ✅/⚠️/❌ |
+
+### CRITICAL GAPS (Untested paths)
+1. **[Gap 1]** — Risk: High — Recommended test: [TC description]
+2. **[Gap 2]** — Risk: Medium — Recommended test: [TC description]
+
+### COVERAGE TARGETS
+- Current: [X%] line, [Y%] branch
+- Target: 80% line, 70% branch
+- Gap to close: [Delta]
+
+### RECOMMENDATIONS
+1. [Priority 1 action to improve coverage]
+2. [Priority 2 action]
+
+### TOOLS RECOMMENDED
+- Coverage: [pytest-cov / nyc / Istanbul]
+- Reporting: [Codecov / Coveralls]`);
+        },
+    },
+    // ── OCTO-FLOWS tools ─────────────────────────────────────────────────────
+    {
+        name: "run_code_scan",
+        label: "Run Code Scan",
+        description: "Run a SonarQube code scan against a workspace project directory. " +
+            "Generates a markdown report in shared/reports/ with bugs, vulnerabilities, code smells, and metrics. " +
+            "Requires SonarQube server to be running (docker compose up -d).",
+        parameters: Type.Object({
+            target_path: Type.String({
+                description: "Path to the project to scan, relative to the workspace root. " +
+                    "Examples: 'projects/my-app', 'shared/my-module'. " +
+                    "Use ls or find to confirm the path before calling this tool.",
+            }),
+            task_id: Type.Optional(Type.String({ description: "ATP task ID for tracking (e.g. TASK-042)" })),
+        }),
+        execute: async (_, params) => {
+            const taskId = params.task_id ?? "TASK-UNKNOWN";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "qa", taskId, `QA triggering Code Scan on ${params.target_path}`);
+            const result = await runFlow("code-scan", {
+                taskId,
+                agentId: "qa",
+                targetPath: params.target_path,
+            });
+            const statusLine = result.success
+                ? "Code scan completed successfully."
+                : "Code scan encountered errors (partial results may be available).";
+            return ok(`${statusLine}\n\n` +
+                `Summary: ${result.summary}\n` +
+                (result.reportPath ? `Report: ${result.reportPath}\n` : "") +
+                (result.details ? `\nDetails:\n${result.details}` : "") +
+                `\n\nNext step: read the report with the read tool, then message Rohan (dev) about any bugs or vulnerabilities found.`);
+        },
+    },
+    {
+        name: "run_flow",
+        label: "Run OCTO-Flow",
+        description: `Trigger any named OCTO-FLOW pipeline. Available flows: ${FLOW_NAMES.join(", ")}. ` +
+            "Use run_code_scan for the SonarQube flow (it has better defaults). " +
+            "Use run_flow for future flows or custom options.",
+        parameters: Type.Object({
+            flow_name: Type.String({
+                description: `Flow to run. One of: ${FLOW_NAMES.join(", ")}`,
+            }),
+            target_path: Type.String({
+                description: "Workspace-relative path to operate on",
+            }),
+            task_id: Type.Optional(Type.String({ description: "ATP task ID for tracking" })),
+            options: Type.Optional(Type.Record(Type.String(), Type.String(), {
+                description: "Flow-specific key/value options",
+            })),
+        }),
+        execute: async (_, params) => {
+            const taskId = params.task_id ?? "TASK-UNKNOWN";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "qa", taskId, `QA triggering flow '${params.flow_name}' on ${params.target_path}`);
+            const result = await runFlow(params.flow_name, {
+                taskId,
+                agentId: "qa",
+                targetPath: params.target_path,
+                options: params.options,
+            });
+            return ok(`Flow '${params.flow_name}': ${result.success ? "SUCCESS" : "FAILED"}\n\n` +
+                `${result.summary}\n` +
+                (result.reportPath ? `Report: ${result.reportPath}\n` : "") +
+                (result.details ? `\nDetails:\n${result.details}` : ""));
+        },
+    },
+];
+//# sourceMappingURL=qaTools.js.map

package/dist/tools/domain/qaTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qaTools.js","sourceRoot":"","sources":["../../../src/tools/domain/qaTools.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE3D,SAAS,EAAE,CAAC,IAAY;IACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;SAC1F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC7F,OAAO,EAAE,CAAC;;eAED,MAAM,CAAC,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAqCb,CAAC,CAAC;QAC1B,CAAC;KACF;IAED;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,0CAA0C;QACvD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;YACpF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yEAAyE,EAAE,CAAC,CAAC;YACjI,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;SAC1F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,YAAY,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,cAAc,QAAQ,aAAa,CAAC,CAAC;YACzG,OAAO,EAAE,CAAC,mBAAmB,QAAQ,CAAC,WAAW,EAAE;;eAE1C,MAAM,CAAC,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CAyCI,CAAC,CAAC;QAC3C,CAAC;KACF;IAED;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,yDAAyD;QACtE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;YAC7E,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;gBACxG,WAAW,EAAE,gCAAgC;aAC9C,CAAC,CACH;YACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;SAC1F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC7C,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,gBAAgB,QAAQ,MAAM,CAAC,CAAC;YACpG,OAAO,EAAE,CAAC;;eAED,MAAM,CAAC,eAAe;gBACrB,QAAQ,CAAC,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;uDA4BiB,CAAC,CAAC;QACrD,CAAC;KACF;IAED;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,gEAAgE;QAC7E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gEAAgE,EAAE,CAAC;YACpH,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;SAC1F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAClG,OAAO,EAAE,CAAC;;aAEH,MAAM,CAAC,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;mCAuBL,CAAC,CAAC;QACjC,CAAC;KACF;IAED,4EAA4E;IAE5E;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,mEAAmE;YACnE,uGAAuG;YACvG,iEAAiE;QACnE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;gBACvB,WAAW,EACT,+DAA+D;oBAC/D,mDAAmD;oBACnD,8DAA8D;aACjE,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC,CACzE;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;YAChD,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,EACvC,8BAA8B,MAAM,CAAC,WAAW,EAAE,CACnD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE;gBACxC,MAAM;gBACN,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,MAAM,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO;gBAC/B,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,kEAAkE,CAAC;YAEvE,OAAO,EAAE,CACP,GAAG,UAAU,MAAM;gBACnB,YAAY,MAAM,CAAC,OAAO,IAAI;gBAC9B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,sHAAsH,CACvH,CAAC;QACJ,CAAC;KACF;IAED;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,0DAA0D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACnF,qEAAqE;YACrE,kDAAkD;QACpD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;gBACrB,WAAW,EAAE,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7D,CAAC;YACF,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;gBACvB,WAAW,EAAE,uCAAuC;aACrD,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CACzD;YACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;gBACxC,WAAW,EAAE,iCAAiC;aAC/C,CAAC,CACH;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;YAChD,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,EACvC,uBAAuB,MAAM,CAAC,SAAS,QAAQ,MAAM,CAAC,WAAW,EAAE,CACpE,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC7C,MAAM;gBACN,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YAEH,OAAO,EAAE,CACP,SAAS,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM;gBAC1E,GAAG,MAAM,CAAC,OAAO,IAAI;gBACrB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/tools/domain/securityFlowTools.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Security Engineer OCTO-FLOW tools — triggers security scanning pipelines.
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+export declare const securityFlowTools: AgentTool[];
+//# sourceMappingURL=securityFlowTools.d.ts.map

package/dist/tools/domain/securityFlowTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityFlowTools.d.ts","sourceRoot":"","sources":["../../../src/tools/domain/securityFlowTools.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAS7D,eAAO,MAAM,iBAAiB,EAAE,SAAS,EAyMxC,CAAC"}

package/dist/tools/domain/securityFlowTools.js

@@ -0,0 +1,156 @@
+/**
+ * Security Engineer OCTO-FLOW tools — triggers security scanning pipelines.
+ */
+import { Type } from "@mariozechner/pi-ai";
+import { EventLog } from "../../atp/eventLog.js";
+import { EventType } from "../../atp/models.js";
+import { runFlow, FLOW_NAMES } from "../../flows/index.js";
+function ok(text) {
+    return { content: [{ type: "text", text }], details: {} };
+}
+export const securityFlowTools = [
+    {
+        name: "run_sast_scan",
+        label: "Run SAST Scan",
+        description: "Run a Semgrep SAST (Static Application Security Testing) scan against a workspace project directory. " +
+            "Detects OWASP Top 10 vulnerabilities, injection flaws, insecure crypto, hardcoded secrets, and more. " +
+            "Generates a markdown report in shared/reports/ with findings grouped by severity. " +
+            "Requires Docker to be running.",
+        parameters: Type.Object({
+            target_path: Type.String({
+                description: "Path to the project to scan, relative to the workspace root. " +
+                    "Examples: 'projects/my-app', 'shared/my-module'. " +
+                    "Use ls or find to confirm the path before calling this tool.",
+            }),
+            task_id: Type.Optional(Type.String({ description: "ATP task ID for tracking (e.g. TASK-042)" })),
+            fail_severity: Type.Optional(Type.String({
+                description: "Minimum severity to trigger a FAIL verdict. " +
+                    "One of: ERROR (critical/high), WARNING (medium), INFO (low). Default: ERROR.",
+            })),
+        }),
+        execute: async (_, params) => {
+            const taskId = params.task_id ?? "TASK-UNKNOWN";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "security", taskId, `Security triggering SAST Scan on ${params.target_path}`);
+            const result = await runFlow("sast-scan", {
+                taskId,
+                agentId: "security",
+                targetPath: params.target_path,
+                options: params.fail_severity ? { fail_severity: params.fail_severity } : undefined,
+            });
+            const statusLine = result.success
+                ? "SAST scan PASSED — no critical/high findings."
+                : "SAST scan FAILED — critical/high findings detected.";
+            return ok(`${statusLine}\n\n` +
+                `Summary: ${result.summary}\n` +
+                (result.reportPath ? `Report: ${result.reportPath}\n` : "") +
+                (result.details ? `\nDetails:\n${result.details}` : "") +
+                `\n\nNext step: read the report with the read tool. Review each finding. ` +
+                `Message Rohan (dev) about critical vulnerabilities that need immediate fixes.`);
+        },
+    },
+    {
+        name: "run_secret_scan",
+        label: "Run Secret Scan",
+        description: "Run a Gitleaks secret scan against a workspace project directory. " +
+            "Detects leaked API keys, tokens, passwords, private keys, and other credentials. " +
+            "Generates a markdown report in shared/reports/ with all findings (redacted). " +
+            "Any leaked secret = automatic FAIL. Requires Docker to be running.",
+        parameters: Type.Object({
+            target_path: Type.String({
+                description: "Path to the project to scan, relative to the workspace root. " +
+                    "Examples: 'projects/my-app', 'shared/my-module'.",
+            }),
+            task_id: Type.Optional(Type.String({ description: "ATP task ID for tracking (e.g. TASK-042)" })),
+        }),
+        execute: async (_, params) => {
+            const taskId = params.task_id ?? "TASK-UNKNOWN";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "security", taskId, `Security triggering Secret Scan on ${params.target_path}`);
+            const result = await runFlow("secret-scan", {
+                taskId,
+                agentId: "security",
+                targetPath: params.target_path,
+            });
+            const statusLine = result.success
+                ? "Secret scan PASSED — no leaked secrets found."
+                : "Secret scan FAILED — leaked secrets detected!";
+            return ok(`${statusLine}\n\n` +
+                `Summary: ${result.summary}\n` +
+                (result.reportPath ? `Report: ${result.reportPath}\n` : "") +
+                (result.details ? `\nDetails:\n${result.details}` : "") +
+                `\n\nNext step: read the report with the read tool. ` +
+                `If secrets are found: message Rohan (dev) to rotate credentials immediately and remove from source code.`);
+        },
+    },
+    {
+        name: "run_sca_scan",
+        label: "Run SCA Scan",
+        description: "Run a Trivy SCA (Software Composition Analysis) scan against a workspace project directory. " +
+            "Detects known CVEs in dependencies by scanning lockfiles (package-lock.json, yarn.lock, etc.). " +
+            "Generates a markdown report in shared/reports/ with vulnerable packages, versions, and fixes. " +
+            "Requires Docker to be running.",
+        parameters: Type.Object({
+            target_path: Type.String({
+                description: "Path to the project to scan, relative to the workspace root. " +
+                    "Examples: 'projects/my-app', 'shared/my-module'.",
+            }),
+            task_id: Type.Optional(Type.String({ description: "ATP task ID for tracking (e.g. TASK-042)" })),
+            fail_severity: Type.Optional(Type.String({
+                description: "Minimum severity to trigger a FAIL verdict. " +
+                    "One of: CRITICAL, HIGH, MEDIUM, LOW. Default: HIGH.",
+            })),
+        }),
+        execute: async (_, params) => {
+            const taskId = params.task_id ?? "TASK-UNKNOWN";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "security", taskId, `Security triggering SCA Scan on ${params.target_path}`);
+            const result = await runFlow("sca-scan", {
+                taskId,
+                agentId: "security",
+                targetPath: params.target_path,
+                options: params.fail_severity ? { fail_severity: params.fail_severity } : undefined,
+            });
+            const statusLine = result.success
+                ? "SCA scan PASSED — no critical/high dependency vulnerabilities."
+                : "SCA scan FAILED — vulnerable dependencies found!";
+            return ok(`${statusLine}\n\n` +
+                `Summary: ${result.summary}\n` +
+                (result.reportPath ? `Report: ${result.reportPath}\n` : "") +
+                (result.details ? `\nDetails:\n${result.details}` : "") +
+                `\n\nNext step: read the report with the read tool. ` +
+                `For fixable vulnerabilities, message Rohan (dev) to update the affected packages.`);
+        },
+    },
+    {
+        name: "run_flow",
+        label: "Run OCTO-Flow",
+        description: `Trigger any named OCTO-FLOW pipeline. Available flows: ${FLOW_NAMES.join(", ")}. ` +
+            "Use run_sast_scan for Semgrep SAST (it has better defaults). " +
+            "Use run_flow for other flows or custom options.",
+        parameters: Type.Object({
+            flow_name: Type.String({
+                description: `Flow to run. One of: ${FLOW_NAMES.join(", ")}`,
+            }),
+            target_path: Type.String({
+                description: "Workspace-relative path to operate on",
+            }),
+            task_id: Type.Optional(Type.String({ description: "ATP task ID for tracking" })),
+            options: Type.Optional(Type.Record(Type.String(), Type.String(), {
+                description: "Flow-specific key/value options",
+            })),
+        }),
+        execute: async (_, params) => {
+            const taskId = params.task_id ?? "TASK-UNKNOWN";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "security", taskId, `Security triggering flow '${params.flow_name}' on ${params.target_path}`);
+            const result = await runFlow(params.flow_name, {
+                taskId,
+                agentId: "security",
+                targetPath: params.target_path,
+                options: params.options,
+            });
+            return ok(`Flow '${params.flow_name}': ${result.success ? "SUCCESS" : "FAILED"}\n\n` +
+                `${result.summary}\n` +
+                (result.reportPath ? `Report: ${result.reportPath}\n` : "") +
+                (result.details ? `\nDetails:\n${result.details}` : ""));
+        },
+    },
+];
+//# sourceMappingURL=securityFlowTools.js.map

package/dist/tools/domain/securityFlowTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityFlowTools.js","sourceRoot":"","sources":["../../../src/tools/domain/securityFlowTools.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE3D,SAAS,EAAE,CAAC,IAAY;IACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAgB;IAC5C;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,uGAAuG;YACvG,uGAAuG;YACvG,oFAAoF;YACpF,gCAAgC;QAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;gBACvB,WAAW,EACT,+DAA+D;oBAC/D,mDAAmD;oBACnD,8DAA8D;aACjE,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC,CACzE;YACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,8CAA8C;oBAC9C,8EAA8E;aACjF,CAAC,CACH;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;YAChD,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,EAC7C,oCAAoC,MAAM,CAAC,WAAW,EAAE,CACzD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE;gBACxC,MAAM;gBACN,OAAO,EAAE,UAAU;gBACnB,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;aACpF,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO;gBAC/B,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,qDAAqD,CAAC;YAE1D,OAAO,EAAE,CACP,GAAG,UAAU,MAAM;gBACnB,YAAY,MAAM,CAAC,OAAO,IAAI;gBAC9B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,0EAA0E;gBAC1E,+EAA+E,CAChF,CAAC;QACJ,CAAC;KACF;IAED;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,oEAAoE;YACpE,mFAAmF;YACnF,+EAA+E;YAC/E,oEAAoE;QACtE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;gBACvB,WAAW,EACT,+DAA+D;oBAC/D,kDAAkD;aACrD,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC,CACzE;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;YAChD,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,EAC7C,sCAAsC,MAAM,CAAC,WAAW,EAAE,CAC3D,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;gBAC1C,MAAM;gBACN,OAAO,EAAE,UAAU;gBACnB,UAAU,EAAE,MAAM,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO;gBAC/B,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,+CAA+C,CAAC;YAEpD,OAAO,EAAE,CACP,GAAG,UAAU,MAAM;gBACnB,YAAY,MAAM,CAAC,OAAO,IAAI;gBAC9B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,qDAAqD;gBACrD,0GAA0G,CAC3G,CAAC;QACJ,CAAC;KACF;IAED;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,8FAA8F;YAC9F,iGAAiG;YACjG,gGAAgG;YAChG,gCAAgC;QAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;gBACvB,WAAW,EACT,+DAA+D;oBAC/D,kDAAkD;aACrD,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC,CACzE;YACD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,8CAA8C;oBAC9C,qDAAqD;aACxD,CAAC,CACH;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;YAChD,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,EAC7C,mCAAmC,MAAM,CAAC,WAAW,EAAE,CACxD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE;gBACvC,MAAM;gBACN,OAAO,EAAE,UAAU;gBACnB,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;aACpF,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO;gBAC/B,CAAC,CAAC,gEAAgE;gBAClE,CAAC,CAAC,kDAAkD,CAAC;YAEvD,OAAO,EAAE,CACP,GAAG,UAAU,MAAM;gBACnB,YAAY,MAAM,CAAC,OAAO,IAAI;gBAC9B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,qDAAqD;gBACrD,mFAAmF,CACpF,CAAC;QACJ,CAAC;KACF;IAED;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,0DAA0D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACnF,+DAA+D;YAC/D,iDAAiD;QACnD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;gBACrB,WAAW,EAAE,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7D,CAAC;YACF,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;gBACvB,WAAW,EAAE,uCAAuC;aACrD,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CACzD;YACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;gBACxC,WAAW,EAAE,iCAAiC;aAC/C,CAAC,CACH;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;YAChD,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,MAAM,EAC7C,6BAA6B,MAAM,CAAC,SAAS,QAAQ,MAAM,CAAC,WAAW,EAAE,CAC1E,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC7C,MAAM;gBACN,OAAO,EAAE,UAAU;gBACnB,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YAEH,OAAO,EAAE,CACP,SAAS,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM;gBAC1E,GAAG,MAAM,CAAC,OAAO,IAAI;gBACrB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/tools/pm/employeeTools.d.ts

@@ -0,0 +1,15 @@
+/**
+ * PM employee registry tools for VEC-ATP.
+ *
+ * Tools:
+ *   view_employee_directory, view_org_chart,
+ *   lookup_employee, set_employee_status
+ *
+ * Usage:
+ *   import { getPMEmployeeTools } from "./employeeTools.js";
+ *   tools: [...getPMEmployeeTools(db), ...]
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+import { ATPDatabase } from "../../atp/database.js";
+export declare function getPMEmployeeTools(db: typeof ATPDatabase): AgentTool[];
+//# sourceMappingURL=employeeTools.d.ts.map

package/dist/tools/pm/employeeTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"employeeTools.d.ts","sourceRoot":"","sources":["../../../src/tools/pm/employeeTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAQpD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,WAAW,GAAG,SAAS,EAAE,CAmHtE"}

package/dist/tools/pm/employeeTools.js

@@ -0,0 +1,117 @@
+/**
+ * PM employee registry tools for VEC-ATP.
+ *
+ * Tools:
+ *   view_employee_directory, view_org_chart,
+ *   lookup_employee, set_employee_status
+ *
+ * Usage:
+ *   import { getPMEmployeeTools } from "./employeeTools.js";
+ *   tools: [...getPMEmployeeTools(db), ...]
+ */
+import { Type } from "@mariozechner/pi-ai";
+import { EventLog } from "../../atp/eventLog.js";
+import { EventType } from "../../atp/models.js";
+function ok(text) {
+    return { content: [{ type: "text", text }], details: {} };
+}
+export function getPMEmployeeTools(db) {
+    const view_employee_directory = {
+        name: "view_employee_directory",
+        label: "View Employee Directory",
+        description: "View the VEC employee directory — all virtual employees, their designations, " +
+            "departments, hierarchy level, and current availability status.",
+        parameters: Type.Object({
+            status_filter: Type.Optional(Type.String({
+                description: "Filter by status: 'available', 'busy', or 'offline'. Empty = show all.",
+            })),
+            department_filter: Type.Optional(Type.String({ description: "Filter by department name (e.g. 'Engineering'). Empty = show all." })),
+        }),
+        execute: async (_, params) => {
+            const status = (params.status_filter ?? "").trim().toLowerCase() || undefined;
+            const dept = (params.department_filter ?? "").trim() || undefined;
+            if (status && !["available", "busy", "offline"].includes(status)) {
+                return ok("ERROR: status_filter must be 'available', 'busy', or 'offline'.");
+            }
+            const result = db.employeeDirectory({ status, department: dept });
+            EventLog.log(EventType.AGENT_TOOL_CALL, "pm", "", `PM viewed employee directory (status=${status ?? "all"}, dept=${dept ?? "all"})`);
+            return ok(result);
+        },
+    };
+    const view_org_chart = {
+        name: "view_org_chart",
+        label: "View Org Chart",
+        description: "View the VEC org chart showing the full reporting hierarchy — " +
+            "who reports to whom, each employee's designation and current status.",
+        parameters: Type.Object({}),
+        execute: async () => {
+            const result = db.orgChart();
+            EventLog.log(EventType.AGENT_TOOL_CALL, "pm", "", "PM viewed org chart");
+            return ok(result);
+        },
+    };
+    const lookup_employee = {
+        name: "lookup_employee",
+        label: "Lookup Employee",
+        description: "Look up a specific employee by their employee ID (EMP-001) or agent key (e.g. 'ba', 'dev').",
+        parameters: Type.Object({
+            identifier: Type.String({
+                description: "Employee ID like 'EMP-003' or agent key like 'ba'.",
+            }),
+        }),
+        execute: async (_, params) => {
+            const id = params.identifier.trim();
+            const emp = id.toUpperCase().startsWith("EMP-")
+                ? db.getEmployee(id.toUpperCase())
+                : db.getEmployeeByAgentId(id.toLowerCase());
+            if (!emp)
+                return ok(`No employee found for '${id}'.`);
+            let reportsToStr = "nobody (top of hierarchy)";
+            if (emp.reports_to) {
+                const manager = db.getEmployee(emp.reports_to);
+                reportsToStr = manager
+                    ? `${manager.name} (${manager.designation}) [${emp.reports_to}]`
+                    : emp.reports_to;
+            }
+            const directReports = db.getDirectReports(emp.employee_id);
+            const reportsStr = directReports.length
+                ? directReports.map((r) => `${r.name} [${r.employee_id}]`).join(", ")
+                : "none";
+            EventLog.log(EventType.AGENT_TOOL_CALL, "pm", "", `PM looked up employee ${emp.employee_id} (${emp.agent_id})`);
+            const joinedAt = emp.joined_at.slice(0, 10); // YYYY-MM-DD from ISO string
+            const text = `Employee: ${emp.name}\n` +
+                `  ID: ${emp.employee_id}  |  Agent key: ${emp.agent_id}\n` +
+                `  Designation: ${emp.designation}\n` +
+                `  Department: ${emp.department}\n` +
+                `  Hierarchy level: ${emp.hierarchy_level}\n` +
+                `  Reports to: ${reportsToStr}\n` +
+                `  Direct reports: ${reportsStr}\n` +
+                `  Status: ${emp.status}\n` +
+                `  Skills: ${emp.skills || "N/A"}\n` +
+                `  Joined: ${joinedAt}`;
+            return ok(text);
+        },
+    };
+    const set_employee_status = {
+        name: "set_employee_status",
+        label: "Set Employee Status",
+        description: "Update a virtual employee's availability status. " +
+            "Use 'busy' when dispatching tasks and 'available' when the task completes.",
+        parameters: Type.Object({
+            agent_id: Type.String({ description: "The agent's short key (e.g. 'ba', 'dev', 'qa')" }),
+            status: Type.Union([Type.Literal("available"), Type.Literal("busy"), Type.Literal("offline")], {
+                description: "'available', 'busy', or 'offline'",
+            }),
+        }),
+        execute: async (_, params) => {
+            const emp = db.updateEmployeeStatus(params.agent_id.trim().toLowerCase(), params.status);
+            if (!emp) {
+                return ok(`ERROR: No employee found with agent_id '${params.agent_id}'.`);
+            }
+            EventLog.log(EventType.AGENT_TOOL_CALL, "pm", "", `PM set ${emp.name} (${emp.agent_id}) status to ${params.status}`);
+            return ok(`Employee ${emp.name} (${emp.agent_id}) status updated to '${params.status}'.`);
+        },
+    };
+    return [view_employee_directory, view_org_chart, lookup_employee, set_employee_status];
+}
+//# sourceMappingURL=employeeTools.js.map

package/dist/tools/pm/employeeTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"employeeTools.js","sourceRoot":"","sources":["../../../src/tools/pm/employeeTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAG3C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,SAAS,EAAE,CAAC,IAAY;IACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAsB;IACvD,MAAM,uBAAuB,GAAc;QACzC,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,+EAA+E;YAC/E,gEAAgE;QAClE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,aAAa,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,wEAAwE;aACtF,CAAC,CACH;YACD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mEAAmE,EAAE,CAAC,CAClG;SACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;YAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;YAClE,IAAI,MAAM,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,OAAO,EAAE,CAAC,iEAAiE,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,wCAAwC,MAAM,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;YACrI,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,MAAM,cAAc,GAAc;QAChC,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,gEAAgE;YAChE,sEAAsE;QACxE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC7B,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,MAAM,eAAe,GAAc;QACjC,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,6FAA6F;QAC/F,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;gBACtB,WAAW,EAAE,oDAAoD;aAClE,CAAC;SACH,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC7C,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;gBAClC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAE9C,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;YAEtD,IAAI,YAAY,GAAG,2BAA2B,CAAC;YAC/C,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC/C,YAAY,GAAG,OAAO;oBACpB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,MAAM,GAAG,CAAC,UAAU,GAAG;oBAChE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,CAAC;YAED,MAAM,aAAa,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM;gBACrC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACrE,CAAC,CAAC,MAAM,CAAC;YAEX,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,yBAAyB,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;YAEhH,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B;YAC1E,MAAM,IAAI,GACR,aAAa,GAAG,CAAC,IAAI,IAAI;gBACzB,SAAS,GAAG,CAAC,WAAW,mBAAmB,GAAG,CAAC,QAAQ,IAAI;gBAC3D,kBAAkB,GAAG,CAAC,WAAW,IAAI;gBACrC,iBAAiB,GAAG,CAAC,UAAU,IAAI;gBACnC,sBAAsB,GAAG,CAAC,eAAe,IAAI;gBAC7C,iBAAiB,YAAY,IAAI;gBACjC,qBAAqB,UAAU,IAAI;gBACnC,aAAa,GAAG,CAAC,MAAM,IAAI;gBAC3B,aAAa,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI;gBACpC,aAAa,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;KACF,CAAC;IAEF,MAAM,mBAAmB,GAAc;QACrC,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,mDAAmD;YACnD,4EAA4E;QAC9E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;YACxF,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE;gBAC7F,WAAW,EAAE,mCAAmC;aACjD,CAAC;SACH,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAW,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzF,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC,2CAA2C,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC5E,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACrH,OAAO,EAAE,CAAC,YAAY,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,wBAAwB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5F,CAAC;KACF,CAAC;IAEF,OAAO,CAAC,uBAAuB,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;AACzF,CAAC"}

package/dist/tools/pm/taskTools.d.ts

@@ -0,0 +1,31 @@
+/**
+ * PM task-management tools for VEC-ATP.
+ * Factory that injects database, message queue, agent queue, and agent registry.
+ *
+ * Tools:
+ *   create_and_assign_task, start_task, start_tasks,
+ *   send_task_message, send_priority_message,
+ *   check_task_status, list_all_tasks, read_messages
+ *
+ * Usage:
+ *   import { getPMTaskTools } from "./taskTools.js";
+ *   tools: [...getPMTaskTools({ db, pmQueue, agentQueue, agents }), ...]
+ */
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+import { ATPDatabase } from "../../atp/database.js";
+import { MessageQueue } from "../../atp/messageQueue.js";
+import { AgentMessageQueue } from "../../atp/agentMessageQueue.js";
+import type { VECAgent } from "../../atp/inboxLoop.js";
+export interface PMTaskToolDeps {
+    db: typeof ATPDatabase;
+    pmQueue: typeof MessageQueue;
+    agentQueue: typeof AgentMessageQueue;
+    agents: Map<string, VECAgent>;
+}
+/**
+ * Dispatch all pending tasks whose scheduled_date is today or earlier.
+ * Called at startup and hourly from tower.ts so tasks auto-release on their date.
+ */
+export declare function releaseDueTasks(deps: PMTaskToolDeps): void;
+export declare function getPMTaskTools(deps: PMTaskToolDeps): AgentTool[];
+//# sourceMappingURL=taskTools.d.ts.map

package/dist/tools/pm/taskTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taskTools.d.ts","sourceRoot":"","sources":["../../../src/tools/pm/taskTools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAGnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAiBvD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,WAAW,CAAC;IACvB,OAAO,EAAE,OAAO,YAAY,CAAC;IAC7B,UAAU,EAAE,OAAO,iBAAiB,CAAC;IACrC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CAC/B;AA8KD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAS1D;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,EAAE,CAsZhE"}