opalserve 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (158) hide show
  1. package/.env.example +19 -0
  2. package/AGENTS.md +23 -0
  3. package/README.md +109 -0
  4. package/config/servers.example.yaml +67 -0
  5. package/config/servers.yaml +2 -0
  6. package/dist/cli/discover.d.ts +3 -0
  7. package/dist/cli/discover.d.ts.map +1 -0
  8. package/dist/cli/discover.js +160 -0
  9. package/dist/cli/discover.js.map +1 -0
  10. package/dist/cli/index.d.ts +3 -0
  11. package/dist/cli/index.d.ts.map +1 -0
  12. package/dist/cli/index.js +32 -0
  13. package/dist/cli/index.js.map +1 -0
  14. package/dist/connectors/base.d.ts +49 -0
  15. package/dist/connectors/base.d.ts.map +1 -0
  16. package/dist/connectors/base.js +45 -0
  17. package/dist/connectors/base.js.map +1 -0
  18. package/dist/connectors/custom.d.ts +19 -0
  19. package/dist/connectors/custom.d.ts.map +1 -0
  20. package/dist/connectors/custom.js +129 -0
  21. package/dist/connectors/custom.js.map +1 -0
  22. package/dist/connectors/github.d.ts +18 -0
  23. package/dist/connectors/github.d.ts.map +1 -0
  24. package/dist/connectors/github.js +188 -0
  25. package/dist/connectors/github.js.map +1 -0
  26. package/dist/connectors/google-drive.d.ts +18 -0
  27. package/dist/connectors/google-drive.d.ts.map +1 -0
  28. package/dist/connectors/google-drive.js +209 -0
  29. package/dist/connectors/google-drive.js.map +1 -0
  30. package/dist/connectors/index.d.ts +11 -0
  31. package/dist/connectors/index.d.ts.map +1 -0
  32. package/dist/connectors/index.js +76 -0
  33. package/dist/connectors/index.js.map +1 -0
  34. package/dist/connectors/postgres.d.ts +18 -0
  35. package/dist/connectors/postgres.d.ts.map +1 -0
  36. package/dist/connectors/postgres.js +140 -0
  37. package/dist/connectors/postgres.js.map +1 -0
  38. package/dist/connectors/slack.d.ts +18 -0
  39. package/dist/connectors/slack.d.ts.map +1 -0
  40. package/dist/connectors/slack.js +181 -0
  41. package/dist/connectors/slack.js.map +1 -0
  42. package/dist/core/auth.d.ts +26 -0
  43. package/dist/core/auth.d.ts.map +1 -0
  44. package/dist/core/auth.js +81 -0
  45. package/dist/core/auth.js.map +1 -0
  46. package/dist/core/registry.d.ts +33 -0
  47. package/dist/core/registry.d.ts.map +1 -0
  48. package/dist/core/registry.js +237 -0
  49. package/dist/core/registry.js.map +1 -0
  50. package/dist/core/tokenizer.d.ts +16 -0
  51. package/dist/core/tokenizer.d.ts.map +1 -0
  52. package/dist/core/tokenizer.js +29 -0
  53. package/dist/core/tokenizer.js.map +1 -0
  54. package/dist/governance/audit.d.ts +27 -0
  55. package/dist/governance/audit.d.ts.map +1 -0
  56. package/dist/governance/audit.js +149 -0
  57. package/dist/governance/audit.js.map +1 -0
  58. package/dist/governance/index.d.ts +5 -0
  59. package/dist/governance/index.d.ts.map +1 -0
  60. package/dist/governance/index.js +5 -0
  61. package/dist/governance/index.js.map +1 -0
  62. package/dist/governance/policy.d.ts +20 -0
  63. package/dist/governance/policy.d.ts.map +1 -0
  64. package/dist/governance/policy.js +162 -0
  65. package/dist/governance/policy.js.map +1 -0
  66. package/dist/governance/rate-limiter.d.ts +20 -0
  67. package/dist/governance/rate-limiter.d.ts.map +1 -0
  68. package/dist/governance/rate-limiter.js +73 -0
  69. package/dist/governance/rate-limiter.js.map +1 -0
  70. package/dist/governance/types.d.ts +246 -0
  71. package/dist/governance/types.d.ts.map +1 -0
  72. package/dist/governance/types.js +72 -0
  73. package/dist/governance/types.js.map +1 -0
  74. package/dist/identity/access-control.d.ts +15 -0
  75. package/dist/identity/access-control.d.ts.map +1 -0
  76. package/dist/identity/access-control.js +81 -0
  77. package/dist/identity/access-control.js.map +1 -0
  78. package/dist/identity/index.d.ts +4 -0
  79. package/dist/identity/index.d.ts.map +1 -0
  80. package/dist/identity/index.js +4 -0
  81. package/dist/identity/index.js.map +1 -0
  82. package/dist/identity/manager.d.ts +29 -0
  83. package/dist/identity/manager.d.ts.map +1 -0
  84. package/dist/identity/manager.js +167 -0
  85. package/dist/identity/manager.js.map +1 -0
  86. package/dist/identity/types.d.ts +237 -0
  87. package/dist/identity/types.d.ts.map +1 -0
  88. package/dist/identity/types.js +80 -0
  89. package/dist/identity/types.js.map +1 -0
  90. package/dist/index.d.ts +13 -0
  91. package/dist/index.d.ts.map +1 -0
  92. package/dist/index.js +10 -0
  93. package/dist/index.js.map +1 -0
  94. package/dist/registry/server.d.ts +14 -0
  95. package/dist/registry/server.d.ts.map +1 -0
  96. package/dist/registry/server.js +173 -0
  97. package/dist/registry/server.js.map +1 -0
  98. package/dist/types/index.d.ts +639 -0
  99. package/dist/types/index.d.ts.map +1 -0
  100. package/dist/types/index.js +76 -0
  101. package/dist/types/index.js.map +1 -0
  102. package/dist/utils/config.d.ts +29 -0
  103. package/dist/utils/config.d.ts.map +1 -0
  104. package/dist/utils/config.js +47 -0
  105. package/dist/utils/config.js.map +1 -0
  106. package/dist/utils/index.d.ts +7 -0
  107. package/dist/utils/index.d.ts.map +1 -0
  108. package/dist/utils/index.js +44 -0
  109. package/dist/utils/index.js.map +1 -0
  110. package/dist/workflow/engine.d.ts +18 -0
  111. package/dist/workflow/engine.d.ts.map +1 -0
  112. package/dist/workflow/engine.js +155 -0
  113. package/dist/workflow/engine.js.map +1 -0
  114. package/dist/workflow/index.d.ts +4 -0
  115. package/dist/workflow/index.d.ts.map +1 -0
  116. package/dist/workflow/index.js +4 -0
  117. package/dist/workflow/index.js.map +1 -0
  118. package/dist/workflow/templates.d.ts +4 -0
  119. package/dist/workflow/templates.d.ts.map +1 -0
  120. package/dist/workflow/templates.js +218 -0
  121. package/dist/workflow/templates.js.map +1 -0
  122. package/dist/workflow/types.d.ts +255 -0
  123. package/dist/workflow/types.d.ts.map +1 -0
  124. package/dist/workflow/types.js +48 -0
  125. package/dist/workflow/types.js.map +1 -0
  126. package/eslint.config.js +25 -0
  127. package/package.json +78 -0
  128. package/src/cli/discover.ts +223 -0
  129. package/src/cli/index.ts +40 -0
  130. package/src/connectors/base.ts +75 -0
  131. package/src/connectors/custom.ts +139 -0
  132. package/src/connectors/github.ts +195 -0
  133. package/src/connectors/google-drive.ts +217 -0
  134. package/src/connectors/index.ts +86 -0
  135. package/src/connectors/postgres.ts +148 -0
  136. package/src/connectors/slack.ts +188 -0
  137. package/src/core/auth.ts +109 -0
  138. package/src/core/registry.ts +301 -0
  139. package/src/core/tokenizer.ts +40 -0
  140. package/src/governance/audit.ts +182 -0
  141. package/src/governance/index.ts +4 -0
  142. package/src/governance/policy.ts +187 -0
  143. package/src/governance/rate-limiter.ts +95 -0
  144. package/src/governance/types.ts +100 -0
  145. package/src/identity/access-control.ts +119 -0
  146. package/src/identity/index.ts +3 -0
  147. package/src/identity/manager.ts +207 -0
  148. package/src/identity/types.ts +91 -0
  149. package/src/index.ts +16 -0
  150. package/src/registry/server.ts +195 -0
  151. package/src/types/index.ts +128 -0
  152. package/src/utils/config.ts +78 -0
  153. package/src/utils/index.ts +47 -0
  154. package/src/workflow/engine.ts +187 -0
  155. package/src/workflow/index.ts +3 -0
  156. package/src/workflow/templates.ts +220 -0
  157. package/src/workflow/types.ts +89 -0
  158. package/tsconfig.json +25 -0
@@ -0,0 +1,237 @@
1
+ import { TokenCounter } from './tokenizer.js';
2
+ export class ToolRegistry {
3
+ tools = new Map();
4
+ servers = new Map();
5
+ serverInstances = new Map();
6
+ tokenCounter;
7
+ constructor(contextBudget = 128000) {
8
+ this.tokenCounter = new TokenCounter(contextBudget);
9
+ }
10
+ registerTool(tool) {
11
+ const searchableText = this.buildSearchableText(tool);
12
+ const indexedTool = {
13
+ tool,
14
+ searchableText,
15
+ tokenCount: this.tokenCounter.count(searchableText),
16
+ };
17
+ this.tools.set(tool.id, indexedTool);
18
+ }
19
+ registerServer(server) {
20
+ this.servers.set(server.id, server);
21
+ }
22
+ registerServerInstance(instance) {
23
+ this.serverInstances.set(instance.id, instance);
24
+ }
25
+ removeTool(toolId) {
26
+ return this.tools.delete(toolId);
27
+ }
28
+ removeServer(serverId) {
29
+ this.servers.delete(serverId);
30
+ this.serverInstances.delete(serverId);
31
+ for (const [toolId, indexed] of this.tools) {
32
+ if (indexed.tool.serverId === serverId) {
33
+ this.tools.delete(toolId);
34
+ }
35
+ }
36
+ return true;
37
+ }
38
+ getTool(toolId) {
39
+ return this.tools.get(toolId)?.tool;
40
+ }
41
+ getServer(serverId) {
42
+ return this.servers.get(serverId);
43
+ }
44
+ getAllTools() {
45
+ return Array.from(this.tools.values()).map(i => i.tool);
46
+ }
47
+ getAllServers() {
48
+ return Array.from(this.servers.values());
49
+ }
50
+ getToolsByServer(serverId) {
51
+ return Array.from(this.tools.values())
52
+ .filter(i => i.tool.serverId === serverId)
53
+ .map(i => i.tool);
54
+ }
55
+ async discover(query) {
56
+ const tools = this.scoreAndFilterTools(query);
57
+ const servers = this.getServersForTools(tools.map(t => t.tool.serverId));
58
+ const contextUsed = this.calculateContextUsed(tools);
59
+ const queryInterpretation = this.interpretQuery(query);
60
+ return {
61
+ tools: tools.map(({ tool, relevanceScore, matchReasons, tokenEstimate }) => ({
62
+ tool,
63
+ relevanceScore,
64
+ matchReasons,
65
+ tokenEstimate,
66
+ })),
67
+ servers,
68
+ totalMatches: tools.length,
69
+ contextUsed,
70
+ contextBudget: query.contextBudget,
71
+ suggestions: this.generateSuggestions(query),
72
+ queryInterpretation,
73
+ };
74
+ }
75
+ scoreAndFilterTools(query) {
76
+ const scored = [];
77
+ let contextUsed = 0;
78
+ const headerTokens = 200;
79
+ for (const indexed of this.tools.values()) {
80
+ const { tool, tokenCount } = indexed;
81
+ if (contextUsed + tokenCount + headerTokens > query.contextBudget && scored.length > 0) {
82
+ break;
83
+ }
84
+ const { score, reasons } = this.calculateRelevance(tool, query);
85
+ if (score > 0) {
86
+ if (query.capabilities?.length) {
87
+ const hasCapability = query.capabilities.some(cap => tool.capabilities.includes(cap));
88
+ if (!hasCapability)
89
+ continue;
90
+ }
91
+ if (query.tags?.length) {
92
+ const hasTag = query.tags.some(tag => tool.tags.includes(tag));
93
+ if (!hasTag)
94
+ continue;
95
+ }
96
+ scored.push({
97
+ tool,
98
+ relevanceScore: score,
99
+ matchReasons: reasons,
100
+ tokenEstimate: tokenCount,
101
+ });
102
+ contextUsed += tokenCount;
103
+ }
104
+ }
105
+ scored.sort((a, b) => b.relevanceScore - a.relevanceScore);
106
+ const limit = Math.min(query.limit, this.findContextFitLimit(scored, query.contextBudget));
107
+ return scored.slice(query.offset, query.offset + limit);
108
+ }
109
+ calculateRelevance(tool, query) {
110
+ let score = 0;
111
+ const reasons = [];
112
+ if (query.query) {
113
+ const q = query.query.toLowerCase();
114
+ const words = q.split(/\s+/);
115
+ for (const word of words) {
116
+ if (tool.name.toLowerCase().includes(word)) {
117
+ score += 0.4;
118
+ reasons.push(`Name matches "${word}"`);
119
+ }
120
+ if (tool.description.toLowerCase().includes(word)) {
121
+ score += 0.3;
122
+ reasons.push(`Description matches "${word}"`);
123
+ }
124
+ for (const tag of tool.tags) {
125
+ if (tag.toLowerCase().includes(word)) {
126
+ score += 0.2;
127
+ reasons.push(`Tag "${tag}" matches "${word}"`);
128
+ }
129
+ }
130
+ for (const cap of tool.capabilities) {
131
+ if (cap.toLowerCase().includes(word)) {
132
+ score += 0.25;
133
+ reasons.push(`Capability "${cap}" matches "${word}"`);
134
+ }
135
+ }
136
+ }
137
+ const allText = `${tool.name} ${tool.description} ${tool.tags.join(' ')} ${tool.capabilities.join(' ')}`.toLowerCase();
138
+ const matchCount = words.filter(w => allText.includes(w)).length;
139
+ if (matchCount === words.length) {
140
+ score += 0.3;
141
+ reasons.push('All query terms matched');
142
+ }
143
+ }
144
+ return { score: Math.min(score, 1), reasons };
145
+ }
146
+ getServersForTools(serverIds) {
147
+ const uniqueIds = [...new Set(serverIds)];
148
+ return uniqueIds
149
+ .map(id => this.servers.get(id))
150
+ .filter((s) => s !== undefined);
151
+ }
152
+ calculateContextUsed(tools) {
153
+ return tools.reduce((sum, t) => sum + t.tokenEstimate, 0) + 200;
154
+ }
155
+ findContextFitLimit(tools, budget) {
156
+ let used = 200;
157
+ for (let i = 0; i < tools.length; i++) {
158
+ if (used + tools[i].tokenEstimate > budget) {
159
+ return i;
160
+ }
161
+ used += tools[i].tokenEstimate;
162
+ }
163
+ return tools.length;
164
+ }
165
+ interpretQuery(query) {
166
+ if (!query.query) {
167
+ return 'Returning all available tools sorted by relevance';
168
+ }
169
+ const q = query.query.toLowerCase();
170
+ const interpretations = [];
171
+ if (q.includes('what can i do') || q.includes('available') || q.includes('list')) {
172
+ interpretations.push('Listing available actions');
173
+ }
174
+ if (q.includes('github') || q.includes('repo') || q.includes('pr')) {
175
+ interpretations.push('Looking for GitHub-related tools');
176
+ }
177
+ if (q.includes('slack') || q.includes('message') || q.includes('channel')) {
178
+ interpretations.push('Looking for Slack/messaging tools');
179
+ }
180
+ if (q.includes('database') || q.includes('query') || q.includes('sql')) {
181
+ interpretations.push('Looking for database tools');
182
+ }
183
+ if (q.includes('file') || q.includes('drive') || q.includes('document')) {
184
+ interpretations.push('Looking for file/document tools');
185
+ }
186
+ if (interpretations.length === 0) {
187
+ return `Searching for tools matching: "${query.query}"`;
188
+ }
189
+ return interpretations.join(', ');
190
+ }
191
+ generateSuggestions(query) {
192
+ const suggestions = [];
193
+ if (this.tools.size > 50 && query.limit && query.limit < 10) {
194
+ suggestions.push('Try increasing the limit to see more tools');
195
+ }
196
+ if (!query.query && this.tools.size > 50) {
197
+ suggestions.push('Use a query to filter tools by capability or name');
198
+ }
199
+ const hasGitHub = Array.from(this.tools.values()).some(i => i.tool.serverName.toLowerCase().includes('github'));
200
+ if (!hasGitHub) {
201
+ suggestions.push('Configure GitHub connector for repository management');
202
+ }
203
+ return suggestions;
204
+ }
205
+ buildSearchableText(tool) {
206
+ return [
207
+ tool.name,
208
+ tool.description,
209
+ ...tool.tags,
210
+ ...tool.capabilities,
211
+ tool.serverName,
212
+ ].join(' ');
213
+ }
214
+ async healthCheck(serverId) {
215
+ const instance = this.serverInstances.get(serverId);
216
+ if (!instance) {
217
+ return { healthy: false };
218
+ }
219
+ return instance.healthCheck();
220
+ }
221
+ async refreshServer(serverId) {
222
+ const instance = this.serverInstances.get(serverId);
223
+ const server = this.servers.get(serverId);
224
+ if (!instance || !server)
225
+ return;
226
+ try {
227
+ await instance.disconnect();
228
+ await instance.connect();
229
+ server.status = 'active';
230
+ server.lastSeen = new Date().toISOString();
231
+ }
232
+ catch {
233
+ server.status = 'error';
234
+ }
235
+ }
236
+ }
237
+ //# sourceMappingURL=registry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAQ9C,MAAM,OAAO,YAAY;IACf,KAAK,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC5C,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,eAAe,GAA2B,IAAI,GAAG,EAAE,CAAC;IACpD,YAAY,CAAe;IAEnC,YAAY,gBAAwB,MAAM;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;IAED,YAAY,CAAC,IAAU;QACrB,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,WAAW,GAAgB;YAC/B,IAAI;YACJ,cAAc;YACd,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC;SACpD,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACvC,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,sBAAsB,CAAC,QAAmB;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;IACtC,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;aACzC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAqB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEvD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC3E,IAAI;gBACJ,cAAc;gBACd,YAAY;gBACZ,aAAa;aACd,CAAC,CAAC;YACH,OAAO;YACP,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,WAAW;YACX,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;YAC5C,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,KAAqB;QAM/C,MAAM,MAAM,GAKP,EAAE,CAAC;QAER,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,YAAY,GAAG,GAAG,CAAC;QAEzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACrC,IAAI,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvF,MAAM;YACR,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAEhE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;oBAC/B,MAAM,aAAa,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAClD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChC,CAAC;oBACF,IAAI,CAAC,aAAa;wBAAE,SAAS;gBAC/B,CAAC;gBAED,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC/D,IAAI,CAAC,MAAM;wBAAE,SAAS;gBACxB,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,cAAc,EAAE,KAAK;oBACrB,YAAY,EAAE,OAAO;oBACrB,aAAa,EAAE,UAAU;iBAC1B,CAAC,CAAC;gBACH,WAAW,IAAI,UAAU,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;IAC1D,CAAC;IAEO,kBAAkB,CAAC,IAAU,EAAE,KAAqB;QAI1D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,KAAK,IAAI,GAAG,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,KAAK,IAAI,GAAG,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC;gBAChD,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,KAAK,IAAI,GAAG,CAAC;wBACb,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,cAAc,IAAI,GAAG,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,KAAK,IAAI,IAAI,CAAC;wBACd,OAAO,CAAC,IAAI,CAAC,eAAe,GAAG,cAAc,IAAI,GAAG,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACvH,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACjE,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,KAAK,IAAI,GAAG,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;IAEO,kBAAkB,CAAC,SAAmB;QAC5C,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,OAAO,SAAS;aACb,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACjD,CAAC;IAEO,oBAAoB,CAAC,KAAuC;QAClE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;IAClE,CAAC;IAEO,mBAAmB,CAAC,KAAuC,EAAE,MAAc;QACjF,IAAI,IAAI,GAAG,GAAG,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC;gBAC3C,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACjC,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAEO,cAAc,CAAC,KAAqB;QAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,mDAAmD,CAAC;QAC7D,CAAC;QAED,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjF,eAAe,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,eAAe,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1E,eAAe,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,eAAe,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACxE,eAAe,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,kCAAkC,KAAK,CAAC,KAAK,GAAG,CAAC;QAC1D,CAAC;QAED,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,mBAAmB,CAAC,KAAqB;QAC/C,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;YAC5D,WAAW,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YACzC,WAAW,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACpD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACxD,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,mBAAmB,CAAC,IAAU;QACpC,OAAO;YACL,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,WAAW;YAChB,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,IAAI,CAAC,YAAY;YACpB,IAAI,CAAC,UAAU;SAChB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO;QAEjC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;YACzB,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}
@@ -0,0 +1,16 @@
1
+ export declare class TokenCounter {
2
+ private contextBudget;
3
+ constructor(contextBudget?: number);
4
+ count(text: string): number;
5
+ estimateToolTokens(tool: {
6
+ name: string;
7
+ description: string;
8
+ inputSchema?: Record<string, unknown>;
9
+ tags?: string[];
10
+ capabilities?: string[];
11
+ }): number;
12
+ canFit(tokens: number, currentUsage?: number): boolean;
13
+ remaining(currentUsage?: number): number;
14
+ setBudget(budget: number): void;
15
+ }
16
+ //# sourceMappingURL=tokenizer.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tokenizer.d.ts","sourceRoot":"","sources":["../../src/core/tokenizer.ts"],"names":[],"mappings":"AAAA,qBAAa,YAAY;IACvB,OAAO,CAAC,aAAa,CAAS;gBAElB,aAAa,GAAE,MAAe;IAI1C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI3B,kBAAkB,CAAC,IAAI,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GAAG,MAAM;IAWV,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,GAAE,MAAU,GAAG,OAAO;IAIzD,SAAS,CAAC,YAAY,GAAE,MAAU,GAAG,MAAM;IAI3C,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAGhC"}
@@ -0,0 +1,29 @@
1
+ export class TokenCounter {
2
+ contextBudget;
3
+ constructor(contextBudget = 128000) {
4
+ this.contextBudget = contextBudget;
5
+ }
6
+ count(text) {
7
+ return Math.ceil(text.length / 4);
8
+ }
9
+ estimateToolTokens(tool) {
10
+ const parts = [
11
+ tool.name,
12
+ tool.description,
13
+ JSON.stringify(tool.inputSchema || {}),
14
+ (tool.tags || []).join(' '),
15
+ (tool.capabilities || []).join(' '),
16
+ ];
17
+ return this.count(parts.join(' ')) + 20;
18
+ }
19
+ canFit(tokens, currentUsage = 0) {
20
+ return (currentUsage + tokens) <= this.contextBudget;
21
+ }
22
+ remaining(currentUsage = 0) {
23
+ return Math.max(0, this.contextBudget - currentUsage);
24
+ }
25
+ setBudget(budget) {
26
+ this.contextBudget = budget;
27
+ }
28
+ }
29
+ //# sourceMappingURL=tokenizer.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tokenizer.js","sourceRoot":"","sources":["../../src/core/tokenizer.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,YAAY;IACf,aAAa,CAAS;IAE9B,YAAY,gBAAwB,MAAM;QACxC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,kBAAkB,CAAC,IAMlB;QACC,MAAM,KAAK,GAAG;YACZ,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YACtC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3B,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SACpC,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,eAAuB,CAAC;QAC7C,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC;IACvD,CAAC;IAED,SAAS,CAAC,eAAuB,CAAC;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;CACF"}
@@ -0,0 +1,27 @@
1
+ import type { AuditEvent, AuditEventType, ComplianceReport } from './types.js';
2
+ export declare class AuditLogger {
3
+ private events;
4
+ private maxEvents;
5
+ constructor(maxEvents?: number);
6
+ log(event: Omit<AuditEvent, 'id' | 'timestamp'>): AuditEvent;
7
+ logToolAccess(agentId: string, agentName: string, toolId: string, result: 'success' | 'denied' | 'error', requestId: string, reason?: string): void;
8
+ logAuthentication(agentId: string, agentName: string, success: boolean, requestId: string, ipAddress?: string): void;
9
+ logToolExecution(agentId: string, agentName: string, toolId: string, success: boolean, requestId: string, durationMs?: number, error?: string): void;
10
+ logPermissionCheck(agentId: string, permission: string, allowed: boolean, requestId: string, reason?: string): void;
11
+ getEvents(options?: {
12
+ type?: AuditEventType;
13
+ agentId?: string;
14
+ resourceType?: string;
15
+ resourceId?: string;
16
+ result?: 'success' | 'denied' | 'error';
17
+ since?: string;
18
+ until?: string;
19
+ limit?: number;
20
+ offset?: number;
21
+ }): AuditEvent[];
22
+ generateComplianceReport(periodStart: string, periodEnd: string): ComplianceReport;
23
+ clear(): void;
24
+ export(): AuditEvent[];
25
+ import(events: AuditEvent[]): void;
26
+ }
27
+ //# sourceMappingURL=audit.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/governance/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE/E,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,SAAS,CAAS;gBAEd,SAAS,GAAE,MAAc;IAIrC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,UAAU;IAkB5D,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAgBnJ,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAcpH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAgBpJ,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAanH,SAAS,CAAC,OAAO,CAAC,EAAE;QAClB,IAAI,CAAC,EAAE,cAAc,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;QACxC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,UAAU,EAAE;IAgChB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,gBAAgB;IAyClF,KAAK,IAAI,IAAI;IAIb,MAAM,IAAI,UAAU,EAAE;IAItB,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI;CAGnC"}
@@ -0,0 +1,149 @@
1
+ export class AuditLogger {
2
+ events = [];
3
+ maxEvents;
4
+ constructor(maxEvents = 10000) {
5
+ this.maxEvents = maxEvents;
6
+ }
7
+ log(event) {
8
+ const fullEvent = {
9
+ id: `audit-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
10
+ timestamp: new Date().toISOString(),
11
+ ...event,
12
+ metadata: event.metadata || {},
13
+ context: event.context || {},
14
+ };
15
+ this.events.push(fullEvent);
16
+ if (this.events.length > this.maxEvents) {
17
+ this.events = this.events.slice(-this.maxEvents);
18
+ }
19
+ return fullEvent;
20
+ }
21
+ logToolAccess(agentId, agentName, toolId, result, requestId, reason) {
22
+ this.log({
23
+ type: result === 'denied' ? 'tool.denied' : result === 'error' ? 'tool.error' : 'tool.accessed',
24
+ agentId,
25
+ agentName,
26
+ requestId,
27
+ resourceType: 'tool',
28
+ resourceId: toolId,
29
+ action: 'access',
30
+ result,
31
+ reason,
32
+ metadata: {},
33
+ context: {},
34
+ });
35
+ }
36
+ logAuthentication(agentId, agentName, success, requestId, ipAddress) {
37
+ this.log({
38
+ type: success ? 'identity.authenticated' : 'identity.auth_failed',
39
+ agentId: success ? agentId : undefined,
40
+ agentName: success ? agentName : undefined,
41
+ requestId,
42
+ ipAddress,
43
+ action: 'authenticate',
44
+ result: success ? 'success' : 'denied',
45
+ metadata: { ipAddress },
46
+ context: {},
47
+ });
48
+ }
49
+ logToolExecution(agentId, agentName, toolId, success, requestId, durationMs, error) {
50
+ this.log({
51
+ type: success ? 'tool.executed' : 'tool.error',
52
+ agentId,
53
+ agentName,
54
+ requestId,
55
+ resourceType: 'tool',
56
+ resourceId: toolId,
57
+ action: 'execute',
58
+ result: success ? 'success' : 'error',
59
+ reason: error,
60
+ metadata: { durationMs },
61
+ context: {},
62
+ });
63
+ }
64
+ logPermissionCheck(agentId, permission, allowed, requestId, reason) {
65
+ this.log({
66
+ type: allowed ? 'permission.checked' : 'permission.denied',
67
+ agentId,
68
+ requestId,
69
+ action: `check:${permission}`,
70
+ result: allowed ? 'success' : 'denied',
71
+ reason,
72
+ metadata: {},
73
+ context: {},
74
+ });
75
+ }
76
+ getEvents(options) {
77
+ let filtered = [...this.events];
78
+ if (options?.type) {
79
+ filtered = filtered.filter(e => e.type === options.type);
80
+ }
81
+ if (options?.agentId) {
82
+ filtered = filtered.filter(e => e.agentId === options.agentId);
83
+ }
84
+ if (options?.resourceType) {
85
+ filtered = filtered.filter(e => e.resourceType === options.resourceType);
86
+ }
87
+ if (options?.resourceId) {
88
+ filtered = filtered.filter(e => e.resourceId === options.resourceId);
89
+ }
90
+ if (options?.result) {
91
+ filtered = filtered.filter(e => e.result === options.result);
92
+ }
93
+ if (options?.since) {
94
+ filtered = filtered.filter(e => e.timestamp >= options.since);
95
+ }
96
+ if (options?.until) {
97
+ filtered = filtered.filter(e => e.timestamp <= options.until);
98
+ }
99
+ filtered.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
100
+ const offset = options?.offset || 0;
101
+ const limit = options?.limit || 100;
102
+ return filtered.slice(offset, offset + limit);
103
+ }
104
+ generateComplianceReport(periodStart, periodEnd) {
105
+ const events = this.getEvents({ since: periodStart, until: periodEnd });
106
+ const byType = {};
107
+ const byAgent = {};
108
+ for (const event of events) {
109
+ byType[event.type] = (byType[event.type] || 0) + 1;
110
+ if (event.agentId) {
111
+ byAgent[event.agentId] = (byAgent[event.agentId] || 0) + 1;
112
+ }
113
+ }
114
+ const deniedAccess = events.filter(e => e.result === 'denied').length;
115
+ const rateLimitExceeded = events.filter(e => e.type === 'rate_limit.exceeded').length;
116
+ const policyViolations = events.filter(e => e.type === 'permission.denied' || e.type === 'tool.denied').length;
117
+ const recommendations = [];
118
+ if (deniedAccess > events.length * 0.1) {
119
+ recommendations.push('High rate of denied access - review permission configurations');
120
+ }
121
+ if (rateLimitExceeded > 100) {
122
+ recommendations.push('Frequent rate limit violations - consider increasing limits or optimizing usage');
123
+ }
124
+ if (Object.keys(byAgent).length < 5) {
125
+ recommendations.push('Limited user diversity - ensure proper access distribution');
126
+ }
127
+ return {
128
+ generatedAt: new Date().toISOString(),
129
+ period: { start: periodStart, end: periodEnd },
130
+ totalEvents: events.length,
131
+ byType,
132
+ byAgent,
133
+ deniedAccess,
134
+ rateLimitExceeded,
135
+ policyViolations,
136
+ recommendations,
137
+ };
138
+ }
139
+ clear() {
140
+ this.events = [];
141
+ }
142
+ export() {
143
+ return [...this.events];
144
+ }
145
+ import(events) {
146
+ this.events = [...this.events, ...events].slice(-this.maxEvents);
147
+ }
148
+ }
149
+ //# sourceMappingURL=audit.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/governance/audit.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,WAAW;IACd,MAAM,GAAiB,EAAE,CAAC;IAC1B,SAAS,CAAS;IAE1B,YAAY,YAAoB,KAAK;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,GAAG,CAAC,KAA2C;QAC7C,MAAM,SAAS,GAAe;YAC5B,EAAE,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACpE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,KAAK;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;SAC7B,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc,EAAE,MAAsC,EAAE,SAAiB,EAAE,MAAe;QAC1I,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe;YAC/F,OAAO;YACP,SAAS;YACT,SAAS;YACT,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,MAAM;YACN,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAgB,EAAE,SAAiB,EAAE,SAAkB;QAC3G,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,sBAAsB;YACjE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACtC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC1C,SAAS;YACT,SAAS;YACT,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACtC,QAAQ,EAAE,EAAE,SAAS,EAAE;YACvB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc,EAAE,OAAgB,EAAE,SAAiB,EAAE,UAAmB,EAAE,KAAc;QAC3I,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;YAC9C,OAAO;YACP,SAAS;YACT,SAAS;YACT,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACrC,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,EAAE,UAAU,EAAE;YACxB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,OAAe,EAAE,UAAkB,EAAE,OAAgB,EAAE,SAAiB,EAAE,MAAe;QAC1G,IAAI,CAAC,GAAG,CAAC;YACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB;YAC1D,OAAO;YACP,SAAS;YACT,MAAM,EAAE,SAAS,UAAU,EAAE;YAC7B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACtC,MAAM;YACN,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,OAUT;QACC,IAAI,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;YAClB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;YACxB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,KAAM,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,KAAM,CAAC,CAAC;QACjE,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,GAAG,CAAC;QACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB,CAAC,WAAmB,EAAE,SAAiB;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QACtE,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;QAE/G,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACvC,eAAe,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,iBAAiB,GAAG,GAAG,EAAE,CAAC;YAC5B,eAAe,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,eAAe,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACrF,CAAC;QAED,OAAO;YACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE;YAC9C,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,MAAM;YACN,OAAO;YACP,YAAY;YACZ,iBAAiB;YACjB,gBAAgB;YAChB,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,MAAoB;QACzB,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC;CACF"}
@@ -0,0 +1,5 @@
1
+ export { AuditLogger } from './audit.js';
2
+ export { PolicyEngine } from './policy.js';
3
+ export { RateLimiter, type RateLimitConfig } from './rate-limiter.js';
4
+ export * from './types.js';
5
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,cAAc,YAAY,CAAC"}
@@ -0,0 +1,5 @@
1
+ export { AuditLogger } from './audit.js';
2
+ export { PolicyEngine } from './policy.js';
3
+ export { RateLimiter } from './rate-limiter.js';
4
+ export * from './types.js';
5
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAwB,MAAM,mBAAmB,CAAC;AACtE,cAAc,YAAY,CAAC"}
@@ -0,0 +1,20 @@
1
+ import type { GovernancePolicy, PolicyRule, AuditEvent } from './types.js';
2
+ export declare class PolicyEngine {
3
+ private policies;
4
+ private auditCallback?;
5
+ setAuditCallback(callback: (event: Omit<AuditEvent, 'id' | 'timestamp'>) => void): void;
6
+ registerPolicy(policy: GovernancePolicy): void;
7
+ getPolicy(id: string): GovernancePolicy | undefined;
8
+ getAllPolicies(): GovernancePolicy[];
9
+ deletePolicy(id: string): boolean;
10
+ evaluate(context: Record<string, unknown>): {
11
+ allowed: boolean;
12
+ matchedRules: PolicyRule[];
13
+ auditEvents: Omit<AuditEvent, 'id' | 'timestamp'>[];
14
+ };
15
+ private evaluateConditions;
16
+ private getNestedValue;
17
+ private evaluateOperator;
18
+ createDefaultPolicies(): void;
19
+ }
20
+ //# sourceMappingURL=policy.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/governance/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE3E,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,aAAa,CAAC,CAAwD;IAE9E,gBAAgB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,WAAW,CAAC,KAAK,IAAI,GAAG,IAAI;IAIvF,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAK9C,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD,cAAc,IAAI,gBAAgB,EAAE;IAIpC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,UAAU,EAAE,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC;KACrD;IAkDD,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,gBAAgB;IAuBxB,qBAAqB,IAAI,IAAI;CA6D9B"}