octoflow-core 1.0.0

package/dist/plugins/test-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-context.d.ts","sourceRoot":"","sources":["../../src/plugins/test-context.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,uBAAuB,EAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,uBAAuB,EAAE,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,EAC1C,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,8BAAmC,GAC3C,iBAAiB,CA2KnB"}

package/dist/plugins/test-context.js

@@ -0,0 +1,186 @@
+import crypto from "node:crypto";
+import { TaskNotFoundError } from "../domain/errors/index.js";
+import { BridgeEventEmitter } from "../runtime/bridge/events.js";
+import { cloneValue } from "../utils/clone.js";
+function createPluginTestContext(options = {}) {
+  const registeredActions = [];
+  const registeredSkills = [];
+  const sentMessages = [];
+  const tasks = /* @__PURE__ */ new Map();
+  const warnings = [];
+  const emitter = new BridgeEventEmitter();
+  for (const task of options.tasks ?? []) {
+    tasks.set(task.id, cloneTask(task));
+  }
+  function getTask(taskId) {
+    const task = tasks.get(taskId);
+    if (!task) {
+      return Promise.reject(new TaskNotFoundError(taskId));
+    }
+    return Promise.resolve(cloneTask(task));
+  }
+  function listTasks(listOptions = {}) {
+    const states = listOptions.state == null ? null : new Set(
+      Array.isArray(listOptions.state) ? listOptions.state : [listOptions.state]
+    );
+    const limit = Math.max(1, listOptions.limit ?? 50);
+    const offset = Math.max(
+      0,
+      Number.parseInt(listOptions.cursor ?? "0", 10) || 0
+    );
+    const statusTimestampAfter = listOptions.statusTimestampAfter == null ? Number.NaN : Date.parse(listOptions.statusTimestampAfter);
+    const filteredTasks = [...tasks.values()].filter(
+      (task) => !listOptions.contextId || task.contextId === listOptions.contextId
+    ).filter(
+      (task) => listOptions.tenant === void 0 || task.tenant === listOptions.tenant
+    ).filter((task) => !states || states.has(task.status.state)).filter(
+      (task) => Number.isNaN(statusTimestampAfter) || typeof task.status.timestamp === "string" && Date.parse(task.status.timestamp) >= statusTimestampAfter
+    ).filter(
+      (task) => !listOptions.packId || task.metadata?.bridge?.packId === listOptions.packId
+    ).filter(
+      (task) => !listOptions.parentTaskId || task.metadata?.bridge?.parentTaskId === listOptions.parentTaskId
+    ).sort((left, right) => taskSortTime(right) - taskSortTime(left));
+    return Promise.resolve({
+      tasks: filteredTasks.slice(offset, offset + limit).map((task) => cloneTask(task, listOptions)),
+      nextCursor: offset + limit < filteredTasks.length ? String(offset + limit) : null,
+      pageSize: limit,
+      totalSize: filteredTasks.length
+    });
+  }
+  function sendMessage(params) {
+    sentMessages.push(params);
+    const task = createSentTask(params, options.contextId ?? "test-context");
+    tasks.set(task.id, cloneTask(task));
+    return Promise.resolve({
+      kind: "task",
+      task: cloneTask(task),
+      contextId: task.contextId,
+      taskId: task.id
+    });
+  }
+  function setTask(task) {
+    tasks.set(task.id, cloneTask(task));
+  }
+  function registerAction(action) {
+    registeredActions.push(action.name);
+  }
+  function unregisterAction(name) {
+    const idx = registeredActions.indexOf(name);
+    if (idx !== -1) {
+      registeredActions.splice(idx, 1);
+      return true;
+    }
+    return false;
+  }
+  function registerSkill(skill) {
+    registeredSkills.push(skill.name);
+  }
+  function unregisterSkill(name) {
+    const idx = registeredSkills.indexOf(name);
+    if (idx !== -1) {
+      registeredSkills.splice(idx, 1);
+      return true;
+    }
+    return false;
+  }
+  function checkBudget(_contextId, _tenant) {
+    return { status: "ok" };
+  }
+  function getSpend(_contextId) {
+    return { totalUsd: 0, totalTokens: 0 };
+  }
+  const ctx = {
+    bridge: null,
+    on: emitter.on.bind(emitter),
+    once: emitter.once.bind(emitter),
+    off: emitter.off.bind(emitter),
+    getTask,
+    listTasks,
+    checkBudget,
+    getSpend,
+    sendMessage,
+    registerAction,
+    unregisterAction,
+    registerSkill,
+    unregisterSkill,
+    setTask,
+    simulateEvent(event, data) {
+      return emitter.emit(event, data);
+    },
+    get registeredActions() {
+      return registeredActions;
+    },
+    get registeredSkills() {
+      return registeredSkills;
+    },
+    get sentMessages() {
+      return sentMessages;
+    },
+    get tasks() {
+      return [...tasks.values()].map((task) => cloneTask(task));
+    },
+    get warnings() {
+      return warnings;
+    }
+  };
+  return ctx;
+}
+function createSentTask(params, fallbackContextId) {
+  const taskId = params.taskId ?? crypto.randomUUID();
+  const contextId = params.contextId ?? fallbackContextId;
+  const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+  const message = createUserMessage(params.message, contextId, taskId);
+  return {
+    id: taskId,
+    kind: "task",
+    contextId,
+    createdAt: timestamp,
+    lastModified: timestamp,
+    history: [message],
+    artifacts: [],
+    metadata: params.metadata,
+    status: {
+      state: "completed",
+      timestamp
+    },
+    tenant: params.tenant
+  };
+}
+function createUserMessage(input, contextId, taskId) {
+  if (typeof input !== "string") {
+    return {
+      ...cloneValue(input),
+      contextId: input.contextId ?? contextId,
+      taskId: input.taskId ?? taskId
+    };
+  }
+  return {
+    kind: "message",
+    messageId: crypto.randomUUID(),
+    contextId,
+    taskId,
+    parts: [{ kind: "text", text: input }],
+    role: "user"
+  };
+}
+function cloneTask(task, options = {}) {
+  const cloned = cloneValue(task);
+  if (options.historyLength != null) {
+    cloned.history = (cloned.history ?? []).slice(
+      -Math.max(0, options.historyLength)
+    );
+  }
+  if (options.includeArtifacts === false) {
+    delete cloned.artifacts;
+  }
+  return cloned;
+}
+function taskSortTime(task) {
+  return Date.parse(
+    task.lastModified ?? task.status.timestamp ?? task.createdAt ?? ""
+  ) || 0;
+}
+export {
+  createPluginTestContext
+};
+//# sourceMappingURL=test-context.js.map

package/dist/plugins/test-context.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/plugins/test-context.ts"],
+  "sourcesContent": ["import crypto from 'node:crypto';\n\nimport type { ActionDefinition } from '../actions/types.js';\nimport type { SkillDefinition } from '../capabilities/skill-types.js';\nimport type {\n  BridgeListTasksOptions,\n  BridgeSendMessageParams,\n  BridgeSendResult,\n} from '../domain/bridge-api.js';\nimport type { Message, Task } from '../domain/core-task.js';\nimport { TaskNotFoundError } from '../domain/errors/index.js';\nimport type { BridgeEventMap } from '../runtime/bridge/events.js';\nimport { BridgeEventEmitter } from '../runtime/bridge/events.js';\nimport type { PluginContext } from '../runtime/bridge/plugins.js';\nimport { cloneValue } from '../utils/clone.js';\n\nexport interface PluginTestContext extends PluginContext {\n  readonly registeredActions: string[];\n  readonly registeredSkills: string[];\n  readonly sentMessages: BridgeSendMessageParams[];\n  readonly tasks: Task[];\n  readonly warnings: string[];\n  setTask(task: Task): void;\n  simulateEvent<K extends keyof BridgeEventMap>(\n    event: K,\n    data: BridgeEventMap[K]\n  ): Promise<void>;\n}\n\nexport interface CreatePluginTestContextOptions {\n  /** Default context id for tasks produced by sendMessage(). */\n  contextId?: string;\n  /** Seed tasks available through getTask() and listTasks(). */\n  tasks?: readonly Task[];\n}\n\n/**\n * Creates an in-memory {@link PluginContext} for unit-testing plugins.\n *\n * @example\n * const ctx = createPluginTestContext({ tasks: [existingTask] });\n * await plugin.setup!(ctx);\n * expect(ctx.registeredActions).toContain('my-action');\n */\nexport function createPluginTestContext(\n  options: CreatePluginTestContextOptions = {}\n): PluginTestContext {\n  const registeredActions: string[] = [];\n  const registeredSkills: string[] = [];\n  const sentMessages: BridgeSendMessageParams[] = [];\n  const tasks = new Map<string, Task>();\n  const warnings: string[] = [];\n  const emitter = new BridgeEventEmitter();\n\n  for (const task of options.tasks ?? []) {\n    tasks.set(task.id, cloneTask(task));\n  }\n\n  function getTask(taskId: string): Promise<Task> {\n    const task = tasks.get(taskId);\n    if (!task) {\n      return Promise.reject(new TaskNotFoundError(taskId));\n    }\n    return Promise.resolve(cloneTask(task));\n  }\n\n  function listTasks(listOptions: BridgeListTasksOptions = {}) {\n    const states =\n      listOptions.state == null\n        ? null\n        : new Set(\n            Array.isArray(listOptions.state)\n              ? listOptions.state\n              : [listOptions.state]\n          );\n    const limit = Math.max(1, listOptions.limit ?? 50);\n    const offset = Math.max(\n      0,\n      Number.parseInt(listOptions.cursor ?? '0', 10) || 0\n    );\n    const statusTimestampAfter =\n      listOptions.statusTimestampAfter == null\n        ? Number.NaN\n        : Date.parse(listOptions.statusTimestampAfter);\n\n    const filteredTasks = [...tasks.values()]\n      .filter(\n        (task) =>\n          !listOptions.contextId || task.contextId === listOptions.contextId\n      )\n      .filter(\n        (task) =>\n          listOptions.tenant === undefined || task.tenant === listOptions.tenant\n      )\n      .filter((task) => !states || states.has(task.status.state))\n      .filter(\n        (task) =>\n          Number.isNaN(statusTimestampAfter) ||\n          (typeof task.status.timestamp === 'string' &&\n            Date.parse(task.status.timestamp) >= statusTimestampAfter)\n      )\n      .filter(\n        (task) =>\n          !listOptions.packId ||\n          task.metadata?.bridge?.packId === listOptions.packId\n      )\n      .filter(\n        (task) =>\n          !listOptions.parentTaskId ||\n          task.metadata?.bridge?.parentTaskId === listOptions.parentTaskId\n      )\n      .sort((left, right) => taskSortTime(right) - taskSortTime(left));\n\n    return Promise.resolve({\n      tasks: filteredTasks\n        .slice(offset, offset + limit)\n        .map((task) => cloneTask(task, listOptions)),\n      nextCursor:\n        offset + limit < filteredTasks.length ? String(offset + limit) : null,\n      pageSize: limit,\n      totalSize: filteredTasks.length,\n    });\n  }\n\n  function sendMessage(\n    params: BridgeSendMessageParams\n  ): Promise<BridgeSendResult> {\n    sentMessages.push(params);\n    const task = createSentTask(params, options.contextId ?? 'test-context');\n    tasks.set(task.id, cloneTask(task));\n    return Promise.resolve({\n      kind: 'task' as const,\n      task: cloneTask(task),\n      contextId: task.contextId,\n      taskId: task.id,\n    });\n  }\n\n  function setTask(task: Task): void {\n    tasks.set(task.id, cloneTask(task));\n  }\n\n  function registerAction(action: ActionDefinition): void {\n    registeredActions.push(action.name);\n  }\n\n  function unregisterAction(name: string): boolean {\n    const idx = registeredActions.indexOf(name);\n    if (idx !== -1) {\n      registeredActions.splice(idx, 1);\n      return true;\n    }\n    return false;\n  }\n\n  function registerSkill(skill: SkillDefinition): void {\n    registeredSkills.push(skill.name);\n  }\n\n  function unregisterSkill(name: string): boolean {\n    const idx = registeredSkills.indexOf(name);\n    if (idx !== -1) {\n      registeredSkills.splice(idx, 1);\n      return true;\n    }\n    return false;\n  }\n\n  function checkBudget(_contextId: string, _tenant?: string) {\n    return { status: 'ok' as const };\n  }\n\n  function getSpend(_contextId: string) {\n    return { totalUsd: 0, totalTokens: 0 };\n  }\n\n  const ctx: PluginTestContext = {\n    bridge: null as unknown as PluginContext['bridge'],\n    on: emitter.on.bind(emitter),\n    once: emitter.once.bind(emitter),\n    off: emitter.off.bind(emitter),\n    getTask,\n    listTasks,\n    checkBudget,\n    getSpend,\n    sendMessage,\n    registerAction,\n    unregisterAction,\n    registerSkill,\n    unregisterSkill,\n    setTask,\n\n    simulateEvent<K extends keyof BridgeEventMap>(\n      event: K,\n      data: BridgeEventMap[K]\n    ): Promise<void> {\n      return emitter.emit(event, data);\n    },\n\n    get registeredActions() {\n      return registeredActions;\n    },\n    get registeredSkills() {\n      return registeredSkills;\n    },\n    get sentMessages() {\n      return sentMessages;\n    },\n    get tasks() {\n      return [...tasks.values()].map((task) => cloneTask(task));\n    },\n    get warnings() {\n      return warnings;\n    },\n  };\n\n  return ctx;\n}\n\nfunction createSentTask(\n  params: BridgeSendMessageParams,\n  fallbackContextId: string\n): Task {\n  const taskId = params.taskId ?? crypto.randomUUID();\n  const contextId = params.contextId ?? fallbackContextId;\n  const timestamp = new Date().toISOString();\n  const message = createUserMessage(params.message, contextId, taskId);\n\n  return {\n    id: taskId,\n    kind: 'task',\n    contextId,\n    createdAt: timestamp,\n    lastModified: timestamp,\n    history: [message],\n    artifacts: [],\n    metadata: params.metadata,\n    status: {\n      state: 'completed',\n      timestamp,\n    },\n    tenant: params.tenant,\n  };\n}\n\nfunction createUserMessage(\n  input: BridgeSendMessageParams['message'],\n  contextId: string,\n  taskId: string\n): Message {\n  if (typeof input !== 'string') {\n    return {\n      ...cloneValue(input),\n      contextId: input.contextId ?? contextId,\n      taskId: input.taskId ?? taskId,\n    };\n  }\n\n  return {\n    kind: 'message',\n    messageId: crypto.randomUUID(),\n    contextId,\n    taskId,\n    parts: [{ kind: 'text', text: input }],\n    role: 'user',\n  };\n}\n\nfunction cloneTask(\n  task: Task,\n  options: Pick<\n    BridgeListTasksOptions,\n    'historyLength' | 'includeArtifacts'\n  > = {}\n): Task {\n  const cloned = cloneValue(task);\n  if (options.historyLength != null) {\n    cloned.history = (cloned.history ?? []).slice(\n      -Math.max(0, options.historyLength)\n    );\n  }\n  if (options.includeArtifacts === false) {\n    delete cloned.artifacts;\n  }\n  return cloned;\n}\n\nfunction taskSortTime(task: Task): number {\n  return (\n    Date.parse(\n      task.lastModified ?? task.status.timestamp ?? task.createdAt ?? ''\n    ) || 0\n  );\n}\n"],
+  "mappings": "AAAA,OAAO,YAAY;AAUnB,SAAS,yBAAyB;AAElC,SAAS,0BAA0B;AAEnC,SAAS,kBAAkB;AA8BpB,SAAS,wBACd,UAA0C,CAAC,GACxB;AACnB,QAAM,oBAA8B,CAAC;AACrC,QAAM,mBAA6B,CAAC;AACpC,QAAM,eAA0C,CAAC;AACjD,QAAM,QAAQ,oBAAI,IAAkB;AACpC,QAAM,WAAqB,CAAC;AAC5B,QAAM,UAAU,IAAI,mBAAmB;AAEvC,aAAW,QAAQ,QAAQ,SAAS,CAAC,GAAG;AACtC,UAAM,IAAI,KAAK,IAAI,UAAU,IAAI,CAAC;AAAA,EACpC;AAEA,WAAS,QAAQ,QAA+B;AAC9C,UAAM,OAAO,MAAM,IAAI,MAAM;AAC7B,QAAI,CAAC,MAAM;AACT,aAAO,QAAQ,OAAO,IAAI,kBAAkB,MAAM,CAAC;AAAA,IACrD;AACA,WAAO,QAAQ,QAAQ,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,WAAS,UAAU,cAAsC,CAAC,GAAG;AAC3D,UAAM,SACJ,YAAY,SAAS,OACjB,OACA,IAAI;AAAA,MACF,MAAM,QAAQ,YAAY,KAAK,IAC3B,YAAY,QACZ,CAAC,YAAY,KAAK;AAAA,IACxB;AACN,UAAM,QAAQ,KAAK,IAAI,GAAG,YAAY,SAAS,EAAE;AACjD,UAAM,SAAS,KAAK;AAAA,MAClB;AAAA,MACA,OAAO,SAAS,YAAY,UAAU,KAAK,EAAE,KAAK;AAAA,IACpD;AACA,UAAM,uBACJ,YAAY,wBAAwB,OAChC,OAAO,MACP,KAAK,MAAM,YAAY,oBAAoB;AAEjD,UAAM,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,EACrC;AAAA,MACC,CAAC,SACC,CAAC,YAAY,aAAa,KAAK,cAAc,YAAY;AAAA,IAC7D,EACC;AAAA,MACC,CAAC,SACC,YAAY,WAAW,UAAa,KAAK,WAAW,YAAY;AAAA,IACpE,EACC,OAAO,CAAC,SAAS,CAAC,UAAU,OAAO,IAAI,KAAK,OAAO,KAAK,CAAC,EACzD;AAAA,MACC,CAAC,SACC,OAAO,MAAM,oBAAoB,KAChC,OAAO,KAAK,OAAO,cAAc,YAChC,KAAK,MAAM,KAAK,OAAO,SAAS,KAAK;AAAA,IAC3C,EACC;AAAA,MACC,CAAC,SACC,CAAC,YAAY,UACb,KAAK,UAAU,QAAQ,WAAW,YAAY;AAAA,IAClD,EACC;AAAA,MACC,CAAC,SACC,CAAC,YAAY,gBACb,KAAK,UAAU,QAAQ,iBAAiB,YAAY;AAAA,IACxD,EACC,KAAK,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,aAAa,IAAI,CAAC;AAEjE,WAAO,QAAQ,QAAQ;AAAA,MACrB,OAAO,cACJ,MAAM,QAAQ,SAAS,KAAK,EAC5B,IAAI,CAAC,SAAS,UAAU,MAAM,WAAW,CAAC;AAAA,MAC7C,YACE,SAAS,QAAQ,cAAc,SAAS,OAAO,SAAS,KAAK,IAAI;AAAA,MACnE,UAAU;AAAA,MACV,WAAW,cAAc;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,WAAS,YACP,QAC2B;AAC3B,iBAAa,KAAK,MAAM;AACxB,UAAM,OAAO,eAAe,QAAQ,QAAQ,aAAa,cAAc;AACvE,UAAM,IAAI,KAAK,IAAI,UAAU,IAAI,CAAC;AAClC,WAAO,QAAQ,QAAQ;AAAA,MACrB,MAAM;AAAA,MACN,MAAM,UAAU,IAAI;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AAEA,WAAS,QAAQ,MAAkB;AACjC,UAAM,IAAI,KAAK,IAAI,UAAU,IAAI,CAAC;AAAA,EACpC;AAEA,WAAS,eAAe,QAAgC;AACtD,sBAAkB,KAAK,OAAO,IAAI;AAAA,EACpC;AAEA,WAAS,iBAAiB,MAAuB;AAC/C,UAAM,MAAM,kBAAkB,QAAQ,IAAI;AAC1C,QAAI,QAAQ,IAAI;AACd,wBAAkB,OAAO,KAAK,CAAC;AAC/B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,WAAS,cAAc,OAA8B;AACnD,qBAAiB,KAAK,MAAM,IAAI;AAAA,EAClC;AAEA,WAAS,gBAAgB,MAAuB;AAC9C,UAAM,MAAM,iBAAiB,QAAQ,IAAI;AACzC,QAAI,QAAQ,IAAI;AACd,uBAAiB,OAAO,KAAK,CAAC;AAC9B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,WAAS,YAAY,YAAoB,SAAkB;AACzD,WAAO,EAAE,QAAQ,KAAc;AAAA,EACjC;AAEA,WAAS,SAAS,YAAoB;AACpC,WAAO,EAAE,UAAU,GAAG,aAAa,EAAE;AAAA,EACvC;AAEA,QAAM,MAAyB;AAAA,IAC7B,QAAQ;AAAA,IACR,IAAI,QAAQ,GAAG,KAAK,OAAO;AAAA,IAC3B,MAAM,QAAQ,KAAK,KAAK,OAAO;AAAA,IAC/B,KAAK,QAAQ,IAAI,KAAK,OAAO;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IAEA,cACE,OACA,MACe;AACf,aAAO,QAAQ,KAAK,OAAO,IAAI;AAAA,IACjC;AAAA,IAEA,IAAI,oBAAoB;AACtB,aAAO;AAAA,IACT;AAAA,IACA,IAAI,mBAAmB;AACrB,aAAO;AAAA,IACT;AAAA,IACA,IAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,IACA,IAAI,QAAQ;AACV,aAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC;AAAA,IAC1D;AAAA,IACA,IAAI,WAAW;AACb,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,eACP,QACA,mBACM;AACN,QAAM,SAAS,OAAO,UAAU,OAAO,WAAW;AAClD,QAAM,YAAY,OAAO,aAAa;AACtC,QAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AACzC,QAAM,UAAU,kBAAkB,OAAO,SAAS,WAAW,MAAM;AAEnE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,cAAc;AAAA,IACd,SAAS,CAAC,OAAO;AAAA,IACjB,WAAW,CAAC;AAAA,IACZ,UAAU,OAAO;AAAA,IACjB,QAAQ;AAAA,MACN,OAAO;AAAA,MACP;AAAA,IACF;AAAA,IACA,QAAQ,OAAO;AAAA,EACjB;AACF;AAEA,SAAS,kBACP,OACA,WACA,QACS;AACT,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,MACL,GAAG,WAAW,KAAK;AAAA,MACnB,WAAW,MAAM,aAAa;AAAA,MAC9B,QAAQ,MAAM,UAAU;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,OAAO,WAAW;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,MAAM,CAAC;AAAA,IACrC,MAAM;AAAA,EACR;AACF;AAEA,SAAS,UACP,MACA,UAGI,CAAC,GACC;AACN,QAAM,SAAS,WAAW,IAAI;AAC9B,MAAI,QAAQ,iBAAiB,MAAM;AACjC,WAAO,WAAW,OAAO,WAAW,CAAC,GAAG;AAAA,MACtC,CAAC,KAAK,IAAI,GAAG,QAAQ,aAAa;AAAA,IACpC;AAAA,EACF;AACA,MAAI,QAAQ,qBAAqB,OAAO;AACtC,WAAO,OAAO;AAAA,EAChB;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAoB;AACxC,SACE,KAAK;AAAA,IACH,KAAK,gBAAgB,KAAK,OAAO,aAAa,KAAK,aAAa;AAAA,EAClE,KAAK;AAET;",
+  "names": []
+}

package/dist/policy/evaluator.d.ts

@@ -0,0 +1,7 @@
+import type { BridgePolicy, PolicyDecision, PolicyDecisionObserver, PolicyEvaluationInput, PolicySubject } from './types.js';
+export declare function isPolicyEnabled(policy: BridgePolicy | undefined): boolean;
+export declare function resolvePolicySubject(subject?: PolicySubject, fallback?: PolicySubject): PolicySubject;
+export declare function decidePolicy(policy: BridgePolicy | undefined, input: PolicyEvaluationInput): Promise<PolicyDecision>;
+export declare function isPolicyAllowed(policy: BridgePolicy | undefined, input: PolicyEvaluationInput): Promise<boolean>;
+export declare function assertPolicyAllowed(policy: BridgePolicy | undefined, input: PolicyEvaluationInput, observer?: PolicyDecisionObserver): Promise<PolicyDecision>;
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/policy/evaluator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EAGZ,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EAGrB,aAAa,EACd,MAAM,YAAY,CAAC;AAYpB,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAIzE;AAED,wBAAgB,oBAAoB,CAClC,OAAO,CAAC,EAAE,aAAa,EACvB,QAAQ,CAAC,EAAE,aAAa,GACvB,aAAa,CAEf;AAwHD,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,cAAc,CAAC,CAMzB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,KAAK,EAAE,qBAAqB,EAC5B,QAAQ,CAAC,EAAE,sBAAsB,GAChC,OAAO,CAAC,cAAc,CAAC,CAgBzB"}

package/dist/policy/evaluator.js

@@ -0,0 +1,127 @@
+import { PolicyDeniedError } from "../domain/errors/index.js";
+const ANONYMOUS_SUBJECT = Object.freeze({
+  id: "anonymous",
+  roles: [],
+  tenantIds: []
+});
+function isEvaluator(policy) {
+  return typeof policy.decide === "function";
+}
+function isPolicyEnabled(policy) {
+  if (!policy) return false;
+  if (isEvaluator(policy)) return true;
+  return policy.enabled !== false;
+}
+function resolvePolicySubject(subject, fallback) {
+  return subject ?? fallback ?? ANONYMOUS_SUBJECT;
+}
+function includesOrEmpty(values, candidate) {
+  return values == null || candidate !== void 0 && values.includes(candidate);
+}
+function intersectsOrEmpty(required, actual) {
+  return required == null || required.length === 0 || required.some((entry) => actual?.includes(entry));
+}
+function objectMatches(expected, actual) {
+  if (!expected) return true;
+  return Object.entries(expected).every(
+    ([key, value]) => actual?.[key] === value
+  );
+}
+function actionMatches(rule, action) {
+  if (!rule.actions || rule.actions.length === 0) return true;
+  return rule.actions.some(
+    (candidate) => candidate === action || candidate === "*"
+  );
+}
+function subjectMatches(rule, subject, resource) {
+  const match = rule.subject;
+  if (!match) return true;
+  if (!includesOrEmpty(match.ids, subject.id)) return false;
+  if (!intersectsOrEmpty(match.roles, subject.roles)) return false;
+  if (!intersectsOrEmpty(match.tenantIds, subject.tenantIds)) return false;
+  if (!includesOrEmpty(match.adapterNames, subject.adapter?.name)) return false;
+  if (!includesOrEmpty(match.adapterUserIds, subject.adapter?.userId)) {
+    return false;
+  }
+  if (!includesOrEmpty(match.adapterChannelIds, subject.adapter?.channelId)) {
+    return false;
+  }
+  if (!objectMatches(match.metadata, subject.metadata)) return false;
+  if (resource.tenant && match.tenantIds && !subject.tenantIds?.includes(resource.tenant)) {
+    return false;
+  }
+  return true;
+}
+function resourceMatches(rule, resource) {
+  const match = rule.resource;
+  if (!match) return true;
+  if (match.kinds && !match.kinds.includes(resource.kind)) return false;
+  if (!includesOrEmpty(match.ids, resource.id)) return false;
+  if (!includesOrEmpty(match.tenants, resource.tenant)) return false;
+  if (!includesOrEmpty(match.names, resource.name)) return false;
+  if (!includesOrEmpty(match.backends, resource.backend)) return false;
+  if (!intersectsOrEmpty(match.tags, resource.tags)) return false;
+  if (!objectMatches(match.attributes, resource.attributes)) return false;
+  return true;
+}
+function contextMatches(rule, input) {
+  const match = rule.context;
+  if (!match) return true;
+  if (!includesOrEmpty(match.contextIds, input.context?.contextId)) {
+    return false;
+  }
+  if (!includesOrEmpty(match.taskIds, input.context?.taskId)) return false;
+  if (!includesOrEmpty(match.backends, input.context?.backend)) return false;
+  if (!includesOrEmpty(match.requestedTenants, input.context?.requestedTenant)) {
+    return false;
+  }
+  return true;
+}
+async function configDecision(config, input) {
+  for (const rule of config.rules ?? []) {
+    if (!actionMatches(rule, input.action)) continue;
+    if (!subjectMatches(rule, input.subject, input.resource)) continue;
+    if (!resourceMatches(rule, input.resource)) continue;
+    if (!contextMatches(rule, input)) continue;
+    if (rule.when && !await rule.when(input)) continue;
+    return { effect: rule.effect, reason: rule.reason };
+  }
+  return {
+    effect: config.defaultEffect ?? "deny",
+    reason: "No matching policy rule"
+  };
+}
+async function decidePolicy(policy, input) {
+  if (!policy) return { effect: "allow" };
+  if (!isPolicyEnabled(policy)) return { effect: "allow" };
+  return isEvaluator(policy) ? policy.decide(input) : await configDecision(policy, input);
+}
+async function isPolicyAllowed(policy, input) {
+  const decision = await decidePolicy(policy, input);
+  return decision.effect === "allow";
+}
+async function assertPolicyAllowed(policy, input, observer) {
+  const decision = await decidePolicy(policy, input);
+  await observer?.({ input, decision });
+  if (decision.effect !== "allow") {
+    throw new PolicyDeniedError(
+      input.action,
+      input.resource.kind,
+      decision.reason,
+      {
+        resourceId: input.resource.id,
+        tenant: input.resource.tenant,
+        subjectId: input.subject.id
+      }
+    );
+  }
+  return decision;
+}
+export {
+  assertPolicyAllowed,
+  decidePolicy,
+  isPolicyAllowed,
+  isPolicyEnabled,
+  resolvePolicySubject
+};
+//# sourceMappingURL=evaluator.js.map

package/dist/policy/evaluator.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/policy/evaluator.ts"],
+  "sourcesContent": ["import { PolicyDeniedError } from '../domain/errors/index.js';\nimport type {\n  BridgePolicy,\n  BridgePolicyConfig,\n  BridgePolicyRule,\n  PolicyDecision,\n  PolicyDecisionObserver,\n  PolicyEvaluationInput,\n  PolicyEvaluator,\n  PolicyResource,\n  PolicySubject,\n} from './types.js';\n\nconst ANONYMOUS_SUBJECT: PolicySubject = Object.freeze({\n  id: 'anonymous',\n  roles: [],\n  tenantIds: [],\n});\n\nfunction isEvaluator(policy: BridgePolicy): policy is PolicyEvaluator {\n  return typeof (policy as PolicyEvaluator).decide === 'function';\n}\n\nexport function isPolicyEnabled(policy: BridgePolicy | undefined): boolean {\n  if (!policy) return false;\n  if (isEvaluator(policy)) return true;\n  return policy.enabled !== false;\n}\n\nexport function resolvePolicySubject(\n  subject?: PolicySubject,\n  fallback?: PolicySubject\n): PolicySubject {\n  return subject ?? fallback ?? ANONYMOUS_SUBJECT;\n}\n\nfunction includesOrEmpty(\n  values: readonly string[] | undefined,\n  candidate: string | undefined\n): boolean {\n  return (\n    values == null || (candidate !== undefined && values.includes(candidate))\n  );\n}\n\nfunction intersectsOrEmpty(\n  required: readonly string[] | undefined,\n  actual: readonly string[] | undefined\n): boolean {\n  return (\n    required == null ||\n    required.length === 0 ||\n    required.some((entry) => actual?.includes(entry))\n  );\n}\n\nfunction objectMatches(\n  expected: Record<string, unknown> | undefined,\n  actual: Record<string, unknown> | undefined\n): boolean {\n  if (!expected) return true;\n  return Object.entries(expected).every(\n    ([key, value]) => actual?.[key] === value\n  );\n}\n\nfunction actionMatches(rule: BridgePolicyRule, action: string): boolean {\n  if (!rule.actions || rule.actions.length === 0) return true;\n  return rule.actions.some(\n    (candidate) => candidate === action || candidate === '*'\n  );\n}\n\nfunction subjectMatches(\n  rule: BridgePolicyRule,\n  subject: PolicySubject,\n  resource: PolicyResource\n): boolean {\n  const match = rule.subject;\n  if (!match) return true;\n  if (!includesOrEmpty(match.ids, subject.id)) return false;\n  if (!intersectsOrEmpty(match.roles, subject.roles)) return false;\n  if (!intersectsOrEmpty(match.tenantIds, subject.tenantIds)) return false;\n  if (!includesOrEmpty(match.adapterNames, subject.adapter?.name)) return false;\n  if (!includesOrEmpty(match.adapterUserIds, subject.adapter?.userId)) {\n    return false;\n  }\n  if (!includesOrEmpty(match.adapterChannelIds, subject.adapter?.channelId)) {\n    return false;\n  }\n  if (!objectMatches(match.metadata, subject.metadata)) return false;\n  if (\n    resource.tenant &&\n    match.tenantIds &&\n    !subject.tenantIds?.includes(resource.tenant)\n  ) {\n    return false;\n  }\n  return true;\n}\n\nfunction resourceMatches(\n  rule: BridgePolicyRule,\n  resource: PolicyResource\n): boolean {\n  const match = rule.resource;\n  if (!match) return true;\n  if (match.kinds && !match.kinds.includes(resource.kind)) return false;\n  if (!includesOrEmpty(match.ids, resource.id)) return false;\n  if (!includesOrEmpty(match.tenants, resource.tenant)) return false;\n  if (!includesOrEmpty(match.names, resource.name)) return false;\n  if (!includesOrEmpty(match.backends, resource.backend)) return false;\n  if (!intersectsOrEmpty(match.tags, resource.tags)) return false;\n  if (!objectMatches(match.attributes, resource.attributes)) return false;\n  return true;\n}\n\nfunction contextMatches(\n  rule: BridgePolicyRule,\n  input: PolicyEvaluationInput\n): boolean {\n  const match = rule.context;\n  if (!match) return true;\n  if (!includesOrEmpty(match.contextIds, input.context?.contextId)) {\n    return false;\n  }\n  if (!includesOrEmpty(match.taskIds, input.context?.taskId)) return false;\n  if (!includesOrEmpty(match.backends, input.context?.backend)) return false;\n  if (\n    !includesOrEmpty(match.requestedTenants, input.context?.requestedTenant)\n  ) {\n    return false;\n  }\n  return true;\n}\n\nasync function configDecision(\n  config: BridgePolicyConfig,\n  input: PolicyEvaluationInput\n): Promise<PolicyDecision> {\n  for (const rule of config.rules ?? []) {\n    if (!actionMatches(rule, input.action)) continue;\n    if (!subjectMatches(rule, input.subject, input.resource)) continue;\n    if (!resourceMatches(rule, input.resource)) continue;\n    if (!contextMatches(rule, input)) continue;\n    if (rule.when && !(await rule.when(input))) continue;\n    return { effect: rule.effect, reason: rule.reason };\n  }\n  return {\n    effect: config.defaultEffect ?? 'deny',\n    reason: 'No matching policy rule',\n  };\n}\n\nexport async function decidePolicy(\n  policy: BridgePolicy | undefined,\n  input: PolicyEvaluationInput\n): Promise<PolicyDecision> {\n  if (!policy) return { effect: 'allow' };\n  if (!isPolicyEnabled(policy)) return { effect: 'allow' };\n  return isEvaluator(policy)\n    ? policy.decide(input)\n    : await configDecision(policy, input);\n}\n\nexport async function isPolicyAllowed(\n  policy: BridgePolicy | undefined,\n  input: PolicyEvaluationInput\n): Promise<boolean> {\n  const decision = await decidePolicy(policy, input);\n  return decision.effect === 'allow';\n}\n\nexport async function assertPolicyAllowed(\n  policy: BridgePolicy | undefined,\n  input: PolicyEvaluationInput,\n  observer?: PolicyDecisionObserver\n): Promise<PolicyDecision> {\n  const decision = await decidePolicy(policy, input);\n  await observer?.({ input, decision });\n  if (decision.effect !== 'allow') {\n    throw new PolicyDeniedError(\n      input.action,\n      input.resource.kind,\n      decision.reason,\n      {\n        resourceId: input.resource.id,\n        tenant: input.resource.tenant,\n        subjectId: input.subject.id,\n      }\n    );\n  }\n  return decision;\n}\n"],
+  "mappings": "AAAA,SAAS,yBAAyB;AAalC,MAAM,oBAAmC,OAAO,OAAO;AAAA,EACrD,IAAI;AAAA,EACJ,OAAO,CAAC;AAAA,EACR,WAAW,CAAC;AACd,CAAC;AAED,SAAS,YAAY,QAAiD;AACpE,SAAO,OAAQ,OAA2B,WAAW;AACvD;AAEO,SAAS,gBAAgB,QAA2C;AACzE,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,YAAY,MAAM,EAAG,QAAO;AAChC,SAAO,OAAO,YAAY;AAC5B;AAEO,SAAS,qBACd,SACA,UACe;AACf,SAAO,WAAW,YAAY;AAChC;AAEA,SAAS,gBACP,QACA,WACS;AACT,SACE,UAAU,QAAS,cAAc,UAAa,OAAO,SAAS,SAAS;AAE3E;AAEA,SAAS,kBACP,UACA,QACS;AACT,SACE,YAAY,QACZ,SAAS,WAAW,KACpB,SAAS,KAAK,CAAC,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEpD;AAEA,SAAS,cACP,UACA,QACS;AACT,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,OAAO,QAAQ,QAAQ,EAAE;AAAA,IAC9B,CAAC,CAAC,KAAK,KAAK,MAAM,SAAS,GAAG,MAAM;AAAA,EACtC;AACF;AAEA,SAAS,cAAc,MAAwB,QAAyB;AACtE,MAAI,CAAC,KAAK,WAAW,KAAK,QAAQ,WAAW,EAAG,QAAO;AACvD,SAAO,KAAK,QAAQ;AAAA,IAClB,CAAC,cAAc,cAAc,UAAU,cAAc;AAAA,EACvD;AACF;AAEA,SAAS,eACP,MACA,SACA,UACS;AACT,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,CAAC,gBAAgB,MAAM,KAAK,QAAQ,EAAE,EAAG,QAAO;AACpD,MAAI,CAAC,kBAAkB,MAAM,OAAO,QAAQ,KAAK,EAAG,QAAO;AAC3D,MAAI,CAAC,kBAAkB,MAAM,WAAW,QAAQ,SAAS,EAAG,QAAO;AACnE,MAAI,CAAC,gBAAgB,MAAM,cAAc,QAAQ,SAAS,IAAI,EAAG,QAAO;AACxE,MAAI,CAAC,gBAAgB,MAAM,gBAAgB,QAAQ,SAAS,MAAM,GAAG;AACnE,WAAO;AAAA,EACT;AACA,MAAI,CAAC,gBAAgB,MAAM,mBAAmB,QAAQ,SAAS,SAAS,GAAG;AACzE,WAAO;AAAA,EACT;AACA,MAAI,CAAC,cAAc,MAAM,UAAU,QAAQ,QAAQ,EAAG,QAAO;AAC7D,MACE,SAAS,UACT,MAAM,aACN,CAAC,QAAQ,WAAW,SAAS,SAAS,MAAM,GAC5C;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,gBACP,MACA,UACS;AACT,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,MAAM,SAAS,CAAC,MAAM,MAAM,SAAS,SAAS,IAAI,EAAG,QAAO;AAChE,MAAI,CAAC,gBAAgB,MAAM,KAAK,SAAS,EAAE,EAAG,QAAO;AACrD,MAAI,CAAC,gBAAgB,MAAM,SAAS,SAAS,MAAM,EAAG,QAAO;AAC7D,MAAI,CAAC,gBAAgB,MAAM,OAAO,SAAS,IAAI,EAAG,QAAO;AACzD,MAAI,CAAC,gBAAgB,MAAM,UAAU,SAAS,OAAO,EAAG,QAAO;AAC/D,MAAI,CAAC,kBAAkB,MAAM,MAAM,SAAS,IAAI,EAAG,QAAO;AAC1D,MAAI,CAAC,cAAc,MAAM,YAAY,SAAS,UAAU,EAAG,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,eACP,MACA,OACS;AACT,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,CAAC,gBAAgB,MAAM,YAAY,MAAM,SAAS,SAAS,GAAG;AAChE,WAAO;AAAA,EACT;AACA,MAAI,CAAC,gBAAgB,MAAM,SAAS,MAAM,SAAS,MAAM,EAAG,QAAO;AACnE,MAAI,CAAC,gBAAgB,MAAM,UAAU,MAAM,SAAS,OAAO,EAAG,QAAO;AACrE,MACE,CAAC,gBAAgB,MAAM,kBAAkB,MAAM,SAAS,eAAe,GACvE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAe,eACb,QACA,OACyB;AACzB,aAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,QAAI,CAAC,cAAc,MAAM,MAAM,MAAM,EAAG;AACxC,QAAI,CAAC,eAAe,MAAM,MAAM,SAAS,MAAM,QAAQ,EAAG;AAC1D,QAAI,CAAC,gBAAgB,MAAM,MAAM,QAAQ,EAAG;AAC5C,QAAI,CAAC,eAAe,MAAM,KAAK,EAAG;AAClC,QAAI,KAAK,QAAQ,CAAE,MAAM,KAAK,KAAK,KAAK,EAAI;AAC5C,WAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,EACpD;AACA,SAAO;AAAA,IACL,QAAQ,OAAO,iBAAiB;AAAA,IAChC,QAAQ;AAAA,EACV;AACF;AAEA,eAAsB,aACpB,QACA,OACyB;AACzB,MAAI,CAAC,OAAQ,QAAO,EAAE,QAAQ,QAAQ;AACtC,MAAI,CAAC,gBAAgB,MAAM,EAAG,QAAO,EAAE,QAAQ,QAAQ;AACvD,SAAO,YAAY,MAAM,IACrB,OAAO,OAAO,KAAK,IACnB,MAAM,eAAe,QAAQ,KAAK;AACxC;AAEA,eAAsB,gBACpB,QACA,OACkB;AAClB,QAAM,WAAW,MAAM,aAAa,QAAQ,KAAK;AACjD,SAAO,SAAS,WAAW;AAC7B;AAEA,eAAsB,oBACpB,QACA,OACA,UACyB;AACzB,QAAM,WAAW,MAAM,aAAa,QAAQ,KAAK;AACjD,QAAM,WAAW,EAAE,OAAO,SAAS,CAAC;AACpC,MAAI,SAAS,WAAW,SAAS;AAC/B,UAAM,IAAI;AAAA,MACR,MAAM;AAAA,MACN,MAAM,SAAS;AAAA,MACf,SAAS;AAAA,MACT;AAAA,QACE,YAAY,MAAM,SAAS;AAAA,QAC3B,QAAQ,MAAM,SAAS;AAAA,QACvB,WAAW,MAAM,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/policy/index.d.ts

@@ -0,0 +1,3 @@
+export { assertPolicyAllowed, decidePolicy, isPolicyAllowed, isPolicyEnabled, resolvePolicySubject, } from './evaluator.js';
+export type { BridgePolicy, BridgePolicyConfig, BridgePolicyRule, PolicyAction, PolicyDecision, PolicyDecisionObserver, PolicyDecisionRecord, PolicyEffect, PolicyEvaluationInput, PolicyEvaluator, PolicyResource, PolicySubject, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC"}

package/dist/policy/index.js

@@ -0,0 +1,15 @@
+import {
+  assertPolicyAllowed,
+  decidePolicy,
+  isPolicyAllowed,
+  isPolicyEnabled,
+  resolvePolicySubject
+} from "./evaluator.js";
+export {
+  assertPolicyAllowed,
+  decidePolicy,
+  isPolicyAllowed,
+  isPolicyEnabled,
+  resolvePolicySubject
+};
+//# sourceMappingURL=index.js.map

package/dist/policy/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/policy/index.ts"],
+  "sourcesContent": ["export {\n  assertPolicyAllowed,\n  decidePolicy,\n  isPolicyAllowed,\n  isPolicyEnabled,\n  resolvePolicySubject,\n} from './evaluator.js';\nexport type {\n  BridgePolicy,\n  BridgePolicyConfig,\n  BridgePolicyRule,\n  PolicyAction,\n  PolicyDecision,\n  PolicyDecisionObserver,\n  PolicyDecisionRecord,\n  PolicyEffect,\n  PolicyEvaluationInput,\n  PolicyEvaluator,\n  PolicyResource,\n  PolicySubject,\n} from './types.js';\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "names": []
+}

package/dist/policy/types.d.ts

@@ -0,0 +1,91 @@
+export type PolicyEffect = 'allow' | 'deny' | 'ask';
+export type PolicyAction = 'tenant.use' | 'task.create' | 'task.read' | 'task.list' | 'task.cancel' | 'task.subscribe' | 'backend.use' | 'backend.switch' | 'tool.deliver' | 'tool.invoke' | 'memory.read' | 'memory.write' | 'memory.maintain' | 'approval.request' | 'approval.decide' | 'approval.list' | 'adapter.receive' | 'adapter.send' | (string & {});
+export interface PolicySubject {
+    id: string;
+    roles?: readonly string[];
+    tenantIds?: readonly string[];
+    adapter?: {
+        name: string;
+        userId?: string;
+        channelId?: string;
+    };
+    metadata?: Record<string, unknown>;
+}
+export interface PolicyResource {
+    kind: 'tenant' | 'task' | 'context' | 'backend' | 'tool' | 'memory' | 'approval' | 'adapter';
+    id?: string;
+    tenant?: string;
+    backend?: string;
+    name?: string;
+    tags?: readonly string[];
+    attributes?: Record<string, unknown>;
+}
+export interface PolicyDecision {
+    effect: PolicyEffect;
+    reason?: string;
+    obligations?: {
+        approvalType?: 'tool-call' | 'plan-review' | 'escalation' | 'custom';
+        auditTags?: readonly string[];
+    };
+}
+export interface PolicyEvaluationContext {
+    contextId?: string;
+    taskId?: string;
+    backend?: string;
+    requestedTenant?: string;
+}
+export interface PolicyEvaluationInput {
+    action: PolicyAction;
+    subject: PolicySubject;
+    resource: PolicyResource;
+    context?: PolicyEvaluationContext;
+}
+export interface PolicyEvaluator {
+    decide(input: PolicyEvaluationInput): PolicyDecision | Promise<PolicyDecision>;
+}
+export interface PolicySubjectRule {
+    ids?: readonly string[];
+    roles?: readonly string[];
+    tenantIds?: readonly string[];
+    adapterNames?: readonly string[];
+    adapterUserIds?: readonly string[];
+    adapterChannelIds?: readonly string[];
+    metadata?: Record<string, unknown>;
+}
+export interface PolicyResourceRule {
+    kinds?: readonly PolicyResource['kind'][];
+    ids?: readonly string[];
+    tenants?: readonly string[];
+    names?: readonly string[];
+    tags?: readonly string[];
+    backends?: readonly string[];
+    attributes?: Record<string, unknown>;
+}
+export interface PolicyContextRule {
+    contextIds?: readonly string[];
+    taskIds?: readonly string[];
+    backends?: readonly string[];
+    requestedTenants?: readonly string[];
+}
+export interface BridgePolicyRule {
+    effect: PolicyEffect;
+    actions?: readonly PolicyAction[];
+    subject?: PolicySubjectRule;
+    resource?: PolicyResourceRule;
+    context?: PolicyContextRule;
+    /** Runtime predicate for org-specific checks that still fit static policy config. */
+    when?: (input: PolicyEvaluationInput) => boolean | Promise<boolean>;
+    reason?: string;
+}
+export interface BridgePolicyConfig {
+    enabled?: boolean;
+    defaultEffect?: PolicyEffect;
+    rules?: readonly BridgePolicyRule[];
+}
+export interface PolicyDecisionRecord {
+    input: PolicyEvaluationInput;
+    decision: PolicyDecision;
+}
+export type PolicyDecisionObserver = (record: PolicyDecisionRecord) => void | Promise<void>;
+export type BridgePolicy = PolicyEvaluator | BridgePolicyConfig;
+//# sourceMappingURL=types.d.ts.map

package/dist/policy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/policy/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,YAAY,GACpB,YAAY,GACZ,aAAa,GACb,WAAW,GACX,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EACA,QAAQ,GACR,MAAM,GACN,SAAS,GACT,SAAS,GACT,MAAM,GACN,QAAQ,GACR,UAAU,GACV,SAAS,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QACZ,YAAY,CAAC,EAAE,WAAW,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;QACrE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CACJ,KAAK,EAAE,qBAAqB,GAC3B,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,SAAS,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1C,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,qFAAqF;IACrF,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,CACnC,MAAM,EAAE,oBAAoB,KACzB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC"}

package/dist/policy/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/dist/policy/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/ports/process.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Port: process runner.  CLI-backed agents spawn subprocesses through this
+ * interface.  Concrete implementations (SpawnProcessRunner, SshProcessRunner)
+ * live in adapters/agents/runtime/ — they depend on this file, not the other
+ * way around.
+ */
+import type { AgentProcessRunner } from '../domain/process-runner.js';
+export type { ParsedEventCallback, RunExecutionResult, } from '../domain/process-runner.js';
+export type ProcessRunner = AgentProcessRunner;
+//# sourceMappingURL=process.d.ts.map

package/dist/ports/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/ports/process.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,YAAY,EACV,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC"}

package/dist/ports/process.js

@@ -0,0 +1 @@
+//# sourceMappingURL=process.js.map

package/dist/ports/process.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/prompts/agent-type.d.ts

@@ -0,0 +1,18 @@
+import type { AgentType } from '../runtime/bridge/agent-routes.js';
+import type { PackOptions } from '../runtime/orchestration/pack/types.js';
+import type { BridgeOptions } from '../runtime/sessions/context-types.js';
+export declare const AGENT_TYPE_SYSTEM_PROMPTS: {
+    readonly 'tool-loop': string;
+    readonly supervisor: string;
+    readonly swarm: string;
+    readonly sequential: string;
+    readonly parallel: string;
+    readonly loop: string;
+    readonly 'plan-execute': string;
+    readonly reflection: string;
+    readonly 'code-act': string;
+    readonly react: string;
+};
+export declare function applyAgentTypePromptToBridgeOptions<T extends BridgeOptions>(agentType: AgentType, options: T): T;
+export declare function applyAgentTypePromptToPackOptions<T extends PackOptions>(agentType: AgentType, options: T): T;
+//# sourceMappingURL=agent-type.d.ts.map

package/dist/prompts/agent-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-type.d.ts","sourceRoot":"","sources":["../../src/prompts/agent-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EACV,WAAW,EAEZ,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAyB1E,eAAO,MAAM,yBAAyB;;;;;;;;;;;CA6DQ,CAAC;AAQ/C,wBAAgB,mCAAmC,CAAC,CAAC,SAAS,aAAa,EACzE,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,CAAC,GACT,CAAC,CAQH;AAED,wBAAgB,iCAAiC,CAAC,CAAC,SAAS,WAAW,EACrE,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,CAAC,GACT,CAAC,CAOH"}