open-multi-agent-kit 0.80.7 → 0.80.8

package/dist/core/loadout-compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-compose.d.ts","sourceRoot":"","sources":["../../src/core/loadout-compose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAKN,KAAK,kBAAkB,EAMvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIN,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,WAAW,EAGhB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACtD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;CACvC;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,cAAc,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAYnD,wBAAgB,cAAc,CAC7B,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,aAAa,GAAG,MAAM,EAC9B,OAAO,GAAE,qBAA0B,GACjC,eAAe,CA0DjB","sourcesContent":["/**\n * Role + domain loadout composition.\n *\n * The composer is pure and additive: it never mutates built-in role loadouts or\n * domain profiles. It can only narrow authority and active tools, while forcing\n * baseline security hooks and downgrading writable filesystem MCP access for\n * read-only authorities.\n */\n\nimport { type DomainProfile, getDomainProfile } from \"./domain-loadouts.ts\";\nimport {\n\tcapabilityGateNames,\n\tdowngradeMcpForAuthority,\n\tforceSecurityHooks,\n\tminAuthority,\n\ttype StrippedCapability,\n\tselectSafestCommandMode,\n\tstripWriteSkillsForAuthority,\n\tstripWriteToolsForAuthority,\n\tunionCapabilityGateNames,\n\tuniqueSorted,\n} from \"./loadout-safety.ts\";\nimport {\n\tBUILTIN_LOADOUTS,\n\ttype CapabilityGate,\n\tinferLoadoutForRole,\n\ttype LoadoutAuthority,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype ToolGate,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\n\nexport interface SamplingProfile {\n\treadonly temperature?: number;\n\treadonly topP?: number;\n\treadonly topK?: number;\n}\n\nexport interface ScopeHints {\n\treadonly readScope?: readonly string[];\n\treadonly writeScope?: readonly string[];\n\treadonly executeScope?: readonly string[];\n}\n\nexport interface CompositionTrace {\n\treadonly roleAuthority: LoadoutAuthority;\n\treadonly domainAuthority: LoadoutAuthority;\n\treadonly grantAuthority?: LoadoutAuthority;\n\treadonly composedAuthority: LoadoutAuthority;\n\treadonly stripped: readonly StrippedCapability[];\n\treadonly downgraded: readonly { readonly mcp: string; readonly to: string }[];\n\treadonly warnings: readonly string[];\n}\n\nexport interface ComposedLoadout extends LoadoutProfile {\n\treadonly role: LoadoutRole;\n\treadonly domainId: string;\n\treadonly domainResolvedFromFallback: boolean;\n\treadonly routingPrompt?: string;\n\treadonly samplingProfile?: SamplingProfile;\n\treadonly scopeHints?: ScopeHints;\n\treadonly composition: CompositionTrace;\n}\n\nexport interface ComposeLoadoutOptions {\n\treadonly grantAuthority?: LoadoutAuthority;\n\treadonly preserveRoleAuthority?: boolean;\n\treadonly scopeHints?: ScopeHints;\n\treadonly forcedSecurityHooks?: readonly string[];\n\treadonly roleProfileOverride?: LoadoutProfile;\n\treadonly samplingProfile?: SamplingProfile;\n}\n\nexport type ComposeOptions = ComposeLoadoutOptions;\n\ninterface ResolvedDomainProfile {\n\treadonly profile: DomainProfile;\n\treadonly fallback: boolean;\n}\n\ninterface ComposedMcpGate {\n\treadonly gate: CapabilityGate;\n\treadonly downgraded: readonly { readonly mcp: string; readonly to: string }[];\n}\n\nexport function composeLoadout(\n\trole: LoadoutRole,\n\tdomain: DomainProfile | string,\n\toptions: ComposeLoadoutOptions = {},\n): ComposedLoadout {\n\tconst roleProfile = options.roleProfileOverride ?? BUILTIN_LOADOUTS[inferLoadoutForRole(role)];\n\tconst resolvedDomain = resolveDomainProfile(domain);\n\tconst domainProfile = resolvedDomain.profile;\n\tconst composedAuthority = minAuthority(roleProfile.authority, domainProfile.authority, options.grantAuthority);\n\n\tconst stripped: StrippedCapability[] = [];\n\tconst warnings: string[] = [];\n\n\tconst toolGate = composeToolGate(roleProfile.tools, domainProfile.tools, composedAuthority, stripped);\n\tconst skills = composeCapabilityGate(\"skill\", roleProfile.skills, domainProfile.skills, composedAuthority, stripped);\n\tconst mcp = composeMcpGate(roleProfile.mcp, domainProfile.mcp, composedAuthority);\n\tconst hooks = composeHookGate(roleProfile.hooks, domainProfile.hooks, options.forcedSecurityHooks);\n\tconst commands = selectSafestCommandMode(\n\t\tcomposedAuthority,\n\t\troleProfile.commands?.mode,\n\t\tdomainProfile.commands?.mode,\n\t);\n\n\twarnings.push(...selectorWarnings(\"role skills\", roleProfile.skills));\n\twarnings.push(...selectorWarnings(\"domain skills\", domainProfile.skills));\n\twarnings.push(...selectorWarnings(\"role mcp\", roleProfile.mcp));\n\twarnings.push(...selectorWarnings(\"domain mcp\", domainProfile.mcp));\n\twarnings.push(...selectorWarnings(\"role hooks\", roleProfile.hooks));\n\twarnings.push(...selectorWarnings(\"domain hooks\", domainProfile.hooks));\n\n\tconst composed: ComposedLoadout = {\n\t\tschemaVersion: \"omk.loadout.v1\",\n\t\tname: `${roleProfile.name}+${domainProfile.id}`,\n\t\tdescription: `Composed ${roleProfile.name} role loadout with ${domainProfile.id} domain profile`,\n\t\tauthority: composedAuthority,\n\t\ttools: toolGate,\n\t\tskills,\n\t\tmcp: mcp.gate,\n\t\thooks,\n\t\tcommands,\n\t\trole,\n\t\tdomainId: domainProfile.id,\n\t\tdomainResolvedFromFallback: resolvedDomain.fallback,\n\t\troutingPrompt: domainProfile.routingPrompt,\n\t\t...(options.samplingProfile ? { samplingProfile: options.samplingProfile } : {}),\n\t\t...(options.scopeHints ? { scopeHints: options.scopeHints } : {}),\n\t\tcomposition: {\n\t\t\troleAuthority: roleProfile.authority,\n\t\t\tdomainAuthority: domainProfile.authority,\n\t\t\t...(options.grantAuthority ? { grantAuthority: options.grantAuthority } : {}),\n\t\t\tcomposedAuthority,\n\t\t\tstripped: uniqueStripped(stripped),\n\t\t\tdowngraded: mcp.downgraded,\n\t\t\twarnings: uniqueSorted(warnings),\n\t\t},\n\t};\n\n\tconst validation = validateLoadoutProfile(composed);\n\tif (!validation.valid) {\n\t\tthrow new Error(`composed loadout is invalid: ${validation.errors.join(\"; \")}`);\n\t}\n\treturn composed;\n}\n\nfunction resolveDomainProfile(domain: DomainProfile | string): ResolvedDomainProfile {\n\tif (typeof domain !== \"string\") return { profile: domain, fallback: false };\n\tconst profile = getDomainProfile(domain);\n\treturn { profile, fallback: profile.id !== domain };\n}\n\nfunction composeToolGate(\n\troleGate: ToolGate,\n\tdomainGate: ToolGate,\n\tauthority: LoadoutAuthority,\n\tstripped: StrippedCapability[],\n): ToolGate {\n\tconst roleAllow = roleGate.allow ?? [];\n\tconst domainAllow = domainGate.allow ?? [];\n\tconst allowed = intersectNames(roleAllow, domainAllow);\n\tconst strippedTools = stripWriteToolsForAuthority(allowed, authority);\n\tstripped.push(...strippedTools.stripped);\n\tconst require = uniqueSorted([...(roleGate.require ?? []), ...(domainGate.require ?? [])]);\n\tconst exclude = uniqueSorted([...(roleGate.exclude ?? []), ...(domainGate.exclude ?? [])]);\n\treturn cleanToolGate({\n\t\tallow: strippedTools.names,\n\t\t...(require.length > 0 ? { require } : {}),\n\t\t...(exclude.length > 0 ? { exclude } : {}),\n\t});\n}\n\nfunction composeCapabilityGate(\n\tkind: \"skill\",\n\troleGate: CapabilityGate | undefined,\n\tdomainGate: CapabilityGate | undefined,\n\tauthority: LoadoutAuthority,\n\tstripped: StrippedCapability[],\n): CapabilityGate {\n\tconst allowNames = uniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]);\n\tconst requireNames = uniqueSorted([\n\t\t...capabilityGateNames(roleGate, \"require\"),\n\t\t...capabilityGateNames(domainGate, \"require\"),\n\t]);\n\tconst excludeNames = unionCapabilityGateNames(\"exclude\", roleGate, domainGate);\n\tconst strippedAllow = stripWriteSkillsForAuthority(allowNames, authority);\n\tconst strippedRequire = stripWriteSkillsForAuthority(requireNames, authority);\n\tstripped.push(...strippedAllow.stripped, ...strippedRequire.stripped);\n\treturn cleanCapabilityGate(kind, strippedAllow.names, strippedRequire.names, excludeNames);\n}\n\nfunction composeMcpGate(\n\troleGate: CapabilityGate | undefined,\n\tdomainGate: CapabilityGate | undefined,\n\tauthority: LoadoutAuthority,\n): ComposedMcpGate {\n\tconst allowDowngrade = downgradeMcpForAuthority(\n\t\tuniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]),\n\t\tauthority,\n\t);\n\tconst requireDowngrade = downgradeMcpForAuthority(\n\t\tuniqueSorted([...capabilityGateNames(roleGate, \"require\"), ...capabilityGateNames(domainGate, \"require\")]),\n\t\tauthority,\n\t);\n\tconst excludeNames = unionCapabilityGateNames(\"exclude\", roleGate, domainGate);\n\treturn {\n\t\tgate: cleanCapabilityGate(\"mcp\", allowDowngrade.names, requireDowngrade.names, excludeNames),\n\t\tdowngraded: uniqueMcpDowngrades([...allowDowngrade.downgraded, ...requireDowngrade.downgraded]),\n\t};\n}\n\nfunction composeHookGate(\n\troleGate: CapabilityGate | undefined,\n\tdomainGate: CapabilityGate | undefined,\n\tforcedSecurityHooks: readonly string[] | undefined,\n): CapabilityGate {\n\tconst allowNames = forceSecurityHooks(\n\t\tuniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]),\n\t\tforcedSecurityHooks,\n\t);\n\tconst requireNames = uniqueSorted([\n\t\t...capabilityGateNames(roleGate, \"require\"),\n\t\t...capabilityGateNames(domainGate, \"require\"),\n\t]);\n\tconst excludeNames = unionCapabilityGateNames(\"exclude\", roleGate, domainGate);\n\treturn cleanCapabilityGate(\"hook\", allowNames, requireNames, excludeNames);\n}\n\nfunction cleanToolGate(gate: ToolGate): ToolGate {\n\treturn {\n\t\tallow: uniqueSorted(gate.allow ?? []),\n\t\t...(gate.require && gate.require.length > 0 ? { require: uniqueSorted(gate.require) } : {}),\n\t\t...(gate.exclude && gate.exclude.length > 0 ? { exclude: uniqueSorted(gate.exclude) } : {}),\n\t};\n}\n\nfunction cleanCapabilityGate(\n\tkind: \"skill\" | \"mcp\" | \"hook\",\n\tallow: readonly string[],\n\trequire: readonly string[],\n\texclude: readonly string[],\n): CapabilityGate {\n\treturn {\n\t\tallow: [{ kind, names: uniqueSorted(allow) }],\n\t\t...(require.length > 0 ? { require: [{ kind, names: uniqueSorted(require) }] } : {}),\n\t\t...(exclude.length > 0 ? { exclude: [{ kind, names: uniqueSorted(exclude) }] } : {}),\n\t};\n}\n\nfunction intersectNames(left: readonly string[], right: readonly string[]): string[] {\n\tconst rightSet = new Set(right);\n\treturn uniqueSorted(left.filter((value) => rightSet.has(value)));\n}\n\nfunction selectorWarnings(label: string, gate: CapabilityGate | undefined): string[] {\n\tconst warnings: string[] = [];\n\tfor (const group of [\"allow\", \"exclude\", \"require\"] as const) {\n\t\tfor (const selector of gate?.[group] ?? []) {\n\t\t\tif (selector.names === undefined || selector.names.length === 0) {\n\t\t\t\twarnings.push(\n\t\t\t\t\t`${label}.${group} contains a non-name selector that cannot be represented by composed gates`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\treturn warnings;\n}\n\nfunction uniqueStripped(values: readonly StrippedCapability[]): StrippedCapability[] {\n\tconst seen = new Set<string>();\n\tconst result: StrippedCapability[] = [];\n\tfor (const value of values) {\n\t\tconst key = `${value.kind}\\0${value.name}\\0${value.reason}`;\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(value);\n\t}\n\treturn result.sort((a, b) => compareString(a.kind, b.kind) || compareString(a.name, b.name));\n}\n\nfunction uniqueMcpDowngrades(\n\tvalues: readonly { readonly mcp: string; readonly to: string }[],\n): { readonly mcp: string; readonly to: string }[] {\n\tconst seen = new Set<string>();\n\tconst result: { readonly mcp: string; readonly to: string }[] = [];\n\tfor (const value of values) {\n\t\tconst key = `${value.mcp}\\0${value.to}`;\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(value);\n\t}\n\treturn result.sort((a, b) => compareString(a.mcp, b.mcp) || compareString(a.to, b.to));\n}\n\nfunction compareString(a: string, b: string): number {\n\tif (a < b) return -1;\n\tif (a > b) return 1;\n\treturn 0;\n}\n"]}

package/dist/core/loadout-compose.js

@@ -0,0 +1,172 @@
+/**
+ * Role + domain loadout composition.
+ *
+ * The composer is pure and additive: it never mutates built-in role loadouts or
+ * domain profiles. It can only narrow authority and active tools, while forcing
+ * baseline security hooks and downgrading writable filesystem MCP access for
+ * read-only authorities.
+ */
+import { getDomainProfile } from "./domain-loadouts.js";
+import { capabilityGateNames, downgradeMcpForAuthority, forceSecurityHooks, minAuthority, selectSafestCommandMode, stripWriteSkillsForAuthority, stripWriteToolsForAuthority, unionCapabilityGateNames, uniqueSorted, } from "./loadout-safety.js";
+import { BUILTIN_LOADOUTS, inferLoadoutForRole, validateLoadoutProfile, } from "./loadouts.js";
+export function composeLoadout(role, domain, options = {}) {
+    const roleProfile = options.roleProfileOverride ?? BUILTIN_LOADOUTS[inferLoadoutForRole(role)];
+    const resolvedDomain = resolveDomainProfile(domain);
+    const domainProfile = resolvedDomain.profile;
+    const composedAuthority = minAuthority(roleProfile.authority, domainProfile.authority, options.grantAuthority);
+    const stripped = [];
+    const warnings = [];
+    const toolGate = composeToolGate(roleProfile.tools, domainProfile.tools, composedAuthority, stripped);
+    const skills = composeCapabilityGate("skill", roleProfile.skills, domainProfile.skills, composedAuthority, stripped);
+    const mcp = composeMcpGate(roleProfile.mcp, domainProfile.mcp, composedAuthority);
+    const hooks = composeHookGate(roleProfile.hooks, domainProfile.hooks, options.forcedSecurityHooks);
+    const commands = selectSafestCommandMode(composedAuthority, roleProfile.commands?.mode, domainProfile.commands?.mode);
+    warnings.push(...selectorWarnings("role skills", roleProfile.skills));
+    warnings.push(...selectorWarnings("domain skills", domainProfile.skills));
+    warnings.push(...selectorWarnings("role mcp", roleProfile.mcp));
+    warnings.push(...selectorWarnings("domain mcp", domainProfile.mcp));
+    warnings.push(...selectorWarnings("role hooks", roleProfile.hooks));
+    warnings.push(...selectorWarnings("domain hooks", domainProfile.hooks));
+    const composed = {
+        schemaVersion: "omk.loadout.v1",
+        name: `${roleProfile.name}+${domainProfile.id}`,
+        description: `Composed ${roleProfile.name} role loadout with ${domainProfile.id} domain profile`,
+        authority: composedAuthority,
+        tools: toolGate,
+        skills,
+        mcp: mcp.gate,
+        hooks,
+        commands,
+        role,
+        domainId: domainProfile.id,
+        domainResolvedFromFallback: resolvedDomain.fallback,
+        routingPrompt: domainProfile.routingPrompt,
+        ...(options.samplingProfile ? { samplingProfile: options.samplingProfile } : {}),
+        ...(options.scopeHints ? { scopeHints: options.scopeHints } : {}),
+        composition: {
+            roleAuthority: roleProfile.authority,
+            domainAuthority: domainProfile.authority,
+            ...(options.grantAuthority ? { grantAuthority: options.grantAuthority } : {}),
+            composedAuthority,
+            stripped: uniqueStripped(stripped),
+            downgraded: mcp.downgraded,
+            warnings: uniqueSorted(warnings),
+        },
+    };
+    const validation = validateLoadoutProfile(composed);
+    if (!validation.valid) {
+        throw new Error(`composed loadout is invalid: ${validation.errors.join("; ")}`);
+    }
+    return composed;
+}
+function resolveDomainProfile(domain) {
+    if (typeof domain !== "string")
+        return { profile: domain, fallback: false };
+    const profile = getDomainProfile(domain);
+    return { profile, fallback: profile.id !== domain };
+}
+function composeToolGate(roleGate, domainGate, authority, stripped) {
+    const roleAllow = roleGate.allow ?? [];
+    const domainAllow = domainGate.allow ?? [];
+    const allowed = intersectNames(roleAllow, domainAllow);
+    const strippedTools = stripWriteToolsForAuthority(allowed, authority);
+    stripped.push(...strippedTools.stripped);
+    const require = uniqueSorted([...(roleGate.require ?? []), ...(domainGate.require ?? [])]);
+    const exclude = uniqueSorted([...(roleGate.exclude ?? []), ...(domainGate.exclude ?? [])]);
+    return cleanToolGate({
+        allow: strippedTools.names,
+        ...(require.length > 0 ? { require } : {}),
+        ...(exclude.length > 0 ? { exclude } : {}),
+    });
+}
+function composeCapabilityGate(kind, roleGate, domainGate, authority, stripped) {
+    const allowNames = uniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]);
+    const requireNames = uniqueSorted([
+        ...capabilityGateNames(roleGate, "require"),
+        ...capabilityGateNames(domainGate, "require"),
+    ]);
+    const excludeNames = unionCapabilityGateNames("exclude", roleGate, domainGate);
+    const strippedAllow = stripWriteSkillsForAuthority(allowNames, authority);
+    const strippedRequire = stripWriteSkillsForAuthority(requireNames, authority);
+    stripped.push(...strippedAllow.stripped, ...strippedRequire.stripped);
+    return cleanCapabilityGate(kind, strippedAllow.names, strippedRequire.names, excludeNames);
+}
+function composeMcpGate(roleGate, domainGate, authority) {
+    const allowDowngrade = downgradeMcpForAuthority(uniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]), authority);
+    const requireDowngrade = downgradeMcpForAuthority(uniqueSorted([...capabilityGateNames(roleGate, "require"), ...capabilityGateNames(domainGate, "require")]), authority);
+    const excludeNames = unionCapabilityGateNames("exclude", roleGate, domainGate);
+    return {
+        gate: cleanCapabilityGate("mcp", allowDowngrade.names, requireDowngrade.names, excludeNames),
+        downgraded: uniqueMcpDowngrades([...allowDowngrade.downgraded, ...requireDowngrade.downgraded]),
+    };
+}
+function composeHookGate(roleGate, domainGate, forcedSecurityHooks) {
+    const allowNames = forceSecurityHooks(uniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]), forcedSecurityHooks);
+    const requireNames = uniqueSorted([
+        ...capabilityGateNames(roleGate, "require"),
+        ...capabilityGateNames(domainGate, "require"),
+    ]);
+    const excludeNames = unionCapabilityGateNames("exclude", roleGate, domainGate);
+    return cleanCapabilityGate("hook", allowNames, requireNames, excludeNames);
+}
+function cleanToolGate(gate) {
+    return {
+        allow: uniqueSorted(gate.allow ?? []),
+        ...(gate.require && gate.require.length > 0 ? { require: uniqueSorted(gate.require) } : {}),
+        ...(gate.exclude && gate.exclude.length > 0 ? { exclude: uniqueSorted(gate.exclude) } : {}),
+    };
+}
+function cleanCapabilityGate(kind, allow, require, exclude) {
+    return {
+        allow: [{ kind, names: uniqueSorted(allow) }],
+        ...(require.length > 0 ? { require: [{ kind, names: uniqueSorted(require) }] } : {}),
+        ...(exclude.length > 0 ? { exclude: [{ kind, names: uniqueSorted(exclude) }] } : {}),
+    };
+}
+function intersectNames(left, right) {
+    const rightSet = new Set(right);
+    return uniqueSorted(left.filter((value) => rightSet.has(value)));
+}
+function selectorWarnings(label, gate) {
+    const warnings = [];
+    for (const group of ["allow", "exclude", "require"]) {
+        for (const selector of gate?.[group] ?? []) {
+            if (selector.names === undefined || selector.names.length === 0) {
+                warnings.push(`${label}.${group} contains a non-name selector that cannot be represented by composed gates`);
+            }
+        }
+    }
+    return warnings;
+}
+function uniqueStripped(values) {
+    const seen = new Set();
+    const result = [];
+    for (const value of values) {
+        const key = `${value.kind}\0${value.name}\0${value.reason}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        result.push(value);
+    }
+    return result.sort((a, b) => compareString(a.kind, b.kind) || compareString(a.name, b.name));
+}
+function uniqueMcpDowngrades(values) {
+    const seen = new Set();
+    const result = [];
+    for (const value of values) {
+        const key = `${value.mcp}\0${value.to}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        result.push(value);
+    }
+    return result.sort((a, b) => compareString(a.mcp, b.mcp) || compareString(a.to, b.to));
+}
+function compareString(a, b) {
+    if (a < b)
+        return -1;
+    if (a > b)
+        return 1;
+    return 0;
+}
+//# sourceMappingURL=loadout-compose.js.map

package/dist/core/loadout-compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-compose.js","sourceRoot":"","sources":["../../src/core/loadout-compose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAsB,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EACN,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,YAAY,EAEZ,uBAAuB,EACvB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,YAAY,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,gBAAgB,EAEhB,mBAAmB,EAKnB,sBAAsB,GACtB,MAAM,eAAe,CAAC;AAuDvB,MAAM,UAAU,cAAc,CAC7B,IAAiB,EACjB,MAA8B,EAC9B,OAAO,GAA0B,EAAE,EACjB;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC;IAC7C,MAAM,iBAAiB,GAAG,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE/G,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,uBAAuB,CACvC,iBAAiB,EACjB,WAAW,CAAC,QAAQ,EAAE,IAAI,EAC1B,aAAa,CAAC,QAAQ,EAAE,IAAI,CAC5B,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAExE,MAAM,QAAQ,GAAoB;QACjC,aAAa,EAAE,gBAAgB;QAC/B,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,IAAI,aAAa,CAAC,EAAE,EAAE;QAC/C,WAAW,EAAE,YAAY,WAAW,CAAC,IAAI,sBAAsB,aAAa,CAAC,EAAE,iBAAiB;QAChG,SAAS,EAAE,iBAAiB;QAC5B,KAAK,EAAE,QAAQ;QACf,MAAM;QACN,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC1B,0BAA0B,EAAE,cAAc,CAAC,QAAQ;QACnD,aAAa,EAAE,aAAa,CAAC,aAAa;QAC1C,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,WAAW,EAAE;YACZ,aAAa,EAAE,WAAW,CAAC,SAAS;YACpC,eAAe,EAAE,aAAa,CAAC,SAAS;YACxC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,iBAAiB;YACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;YAClC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;SAChC;KACD,CAAC;IAEF,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,oBAAoB,CAAC,MAA8B,EAAyB;IACpF,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;AAAA,CACpD;AAED,SAAS,eAAe,CACvB,QAAkB,EAClB,UAAoB,EACpB,SAA2B,EAC3B,QAA8B,EACnB;IACX,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtE,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,aAAa,CAAC;QACpB,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;AAAA,CACH;AAED,SAAS,qBAAqB,CAC7B,IAAa,EACb,QAAoC,EACpC,UAAsC,EACtC,SAA2B,EAC3B,QAA8B,EACb;IACjB,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,YAAY,GAAG,YAAY,CAAC;QACjC,GAAG,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3C,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,4BAA4B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,4BAA4B,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC9E,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,mBAAmB,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAAA,CAC3F;AAED,SAAS,cAAc,CACtB,QAAoC,EACpC,UAAsC,EACtC,SAA2B,EACT;IAClB,MAAM,cAAc,GAAG,wBAAwB,CAC9C,YAAY,CAAC,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,EACpF,SAAS,CACT,CAAC;IACF,MAAM,gBAAgB,GAAG,wBAAwB,CAChD,YAAY,CAAC,CAAC,GAAG,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EAC1G,SAAS,CACT,CAAC;IACF,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/E,OAAO;QACN,IAAI,EAAE,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC;QAC5F,UAAU,EAAE,mBAAmB,CAAC,CAAC,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;KAC/F,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CACvB,QAAoC,EACpC,UAAsC,EACtC,mBAAkD,EACjC;IACjB,MAAM,UAAU,GAAG,kBAAkB,CACpC,YAAY,CAAC,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,EACpF,mBAAmB,CACnB,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC;QACjC,GAAG,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3C,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/E,OAAO,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAAA,CAC3E;AAED,SAAS,aAAa,CAAC,IAAc,EAAY;IAChD,OAAO;QACN,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;AAAA,CACF;AAED,SAAS,mBAAmB,CAC3B,IAA8B,EAC9B,KAAwB,EACxB,OAA0B,EAC1B,OAA0B,EACT;IACjB,OAAO;QACN,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,IAAuB,EAAE,KAAwB,EAAY;IACpF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAAA,CACjE;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAgC,EAAY;IACpF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAU,EAAE,CAAC;QAC9D,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjE,QAAQ,CAAC,IAAI,CACZ,GAAG,KAAK,IAAI,KAAK,4EAA4E,CAC7F,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,cAAc,CAAC,MAAqC,EAAwB;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CAC7F;AAED,SAAS,mBAAmB,CAC3B,MAAgE,EACd;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAoD,EAAE,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAAA,CACvF;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS,EAAU;IACpD,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,CAAC,CAAC;AAAA,CACT","sourcesContent":["/**\n * Role + domain loadout composition.\n *\n * The composer is pure and additive: it never mutates built-in role loadouts or\n * domain profiles. It can only narrow authority and active tools, while forcing\n * baseline security hooks and downgrading writable filesystem MCP access for\n * read-only authorities.\n */\n\nimport { type DomainProfile, getDomainProfile } from \"./domain-loadouts.ts\";\nimport {\n\tcapabilityGateNames,\n\tdowngradeMcpForAuthority,\n\tforceSecurityHooks,\n\tminAuthority,\n\ttype StrippedCapability,\n\tselectSafestCommandMode,\n\tstripWriteSkillsForAuthority,\n\tstripWriteToolsForAuthority,\n\tunionCapabilityGateNames,\n\tuniqueSorted,\n} from \"./loadout-safety.ts\";\nimport {\n\tBUILTIN_LOADOUTS,\n\ttype CapabilityGate,\n\tinferLoadoutForRole,\n\ttype LoadoutAuthority,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype ToolGate,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\n\nexport interface SamplingProfile {\n\treadonly temperature?: number;\n\treadonly topP?: number;\n\treadonly topK?: number;\n}\n\nexport interface ScopeHints {\n\treadonly readScope?: readonly string[];\n\treadonly writeScope?: readonly string[];\n\treadonly executeScope?: readonly string[];\n}\n\nexport interface CompositionTrace {\n\treadonly roleAuthority: LoadoutAuthority;\n\treadonly domainAuthority: LoadoutAuthority;\n\treadonly grantAuthority?: LoadoutAuthority;\n\treadonly composedAuthority: LoadoutAuthority;\n\treadonly stripped: readonly StrippedCapability[];\n\treadonly downgraded: readonly { readonly mcp: string; readonly to: string }[];\n\treadonly warnings: readonly string[];\n}\n\nexport interface ComposedLoadout extends LoadoutProfile {\n\treadonly role: LoadoutRole;\n\treadonly domainId: string;\n\treadonly domainResolvedFromFallback: boolean;\n\treadonly routingPrompt?: string;\n\treadonly samplingProfile?: SamplingProfile;\n\treadonly scopeHints?: ScopeHints;\n\treadonly composition: CompositionTrace;\n}\n\nexport interface ComposeLoadoutOptions {\n\treadonly grantAuthority?: LoadoutAuthority;\n\treadonly preserveRoleAuthority?: boolean;\n\treadonly scopeHints?: ScopeHints;\n\treadonly forcedSecurityHooks?: readonly string[];\n\treadonly roleProfileOverride?: LoadoutProfile;\n\treadonly samplingProfile?: SamplingProfile;\n}\n\nexport type ComposeOptions = ComposeLoadoutOptions;\n\ninterface ResolvedDomainProfile {\n\treadonly profile: DomainProfile;\n\treadonly fallback: boolean;\n}\n\ninterface ComposedMcpGate {\n\treadonly gate: CapabilityGate;\n\treadonly downgraded: readonly { readonly mcp: string; readonly to: string }[];\n}\n\nexport function composeLoadout(\n\trole: LoadoutRole,\n\tdomain: DomainProfile | string,\n\toptions: ComposeLoadoutOptions = {},\n): ComposedLoadout {\n\tconst roleProfile = options.roleProfileOverride ?? BUILTIN_LOADOUTS[inferLoadoutForRole(role)];\n\tconst resolvedDomain = resolveDomainProfile(domain);\n\tconst domainProfile = resolvedDomain.profile;\n\tconst composedAuthority = minAuthority(roleProfile.authority, domainProfile.authority, options.grantAuthority);\n\n\tconst stripped: StrippedCapability[] = [];\n\tconst warnings: string[] = [];\n\n\tconst toolGate = composeToolGate(roleProfile.tools, domainProfile.tools, composedAuthority, stripped);\n\tconst skills = composeCapabilityGate(\"skill\", roleProfile.skills, domainProfile.skills, composedAuthority, stripped);\n\tconst mcp = composeMcpGate(roleProfile.mcp, domainProfile.mcp, composedAuthority);\n\tconst hooks = composeHookGate(roleProfile.hooks, domainProfile.hooks, options.forcedSecurityHooks);\n\tconst commands = selectSafestCommandMode(\n\t\tcomposedAuthority,\n\t\troleProfile.commands?.mode,\n\t\tdomainProfile.commands?.mode,\n\t);\n\n\twarnings.push(...selectorWarnings(\"role skills\", roleProfile.skills));\n\twarnings.push(...selectorWarnings(\"domain skills\", domainProfile.skills));\n\twarnings.push(...selectorWarnings(\"role mcp\", roleProfile.mcp));\n\twarnings.push(...selectorWarnings(\"domain mcp\", domainProfile.mcp));\n\twarnings.push(...selectorWarnings(\"role hooks\", roleProfile.hooks));\n\twarnings.push(...selectorWarnings(\"domain hooks\", domainProfile.hooks));\n\n\tconst composed: ComposedLoadout = {\n\t\tschemaVersion: \"omk.loadout.v1\",\n\t\tname: `${roleProfile.name}+${domainProfile.id}`,\n\t\tdescription: `Composed ${roleProfile.name} role loadout with ${domainProfile.id} domain profile`,\n\t\tauthority: composedAuthority,\n\t\ttools: toolGate,\n\t\tskills,\n\t\tmcp: mcp.gate,\n\t\thooks,\n\t\tcommands,\n\t\trole,\n\t\tdomainId: domainProfile.id,\n\t\tdomainResolvedFromFallback: resolvedDomain.fallback,\n\t\troutingPrompt: domainProfile.routingPrompt,\n\t\t...(options.samplingProfile ? { samplingProfile: options.samplingProfile } : {}),\n\t\t...(options.scopeHints ? { scopeHints: options.scopeHints } : {}),\n\t\tcomposition: {\n\t\t\troleAuthority: roleProfile.authority,\n\t\t\tdomainAuthority: domainProfile.authority,\n\t\t\t...(options.grantAuthority ? { grantAuthority: options.grantAuthority } : {}),\n\t\t\tcomposedAuthority,\n\t\t\tstripped: uniqueStripped(stripped),\n\t\t\tdowngraded: mcp.downgraded,\n\t\t\twarnings: uniqueSorted(warnings),\n\t\t},\n\t};\n\n\tconst validation = validateLoadoutProfile(composed);\n\tif (!validation.valid) {\n\t\tthrow new Error(`composed loadout is invalid: ${validation.errors.join(\"; \")}`);\n\t}\n\treturn composed;\n}\n\nfunction resolveDomainProfile(domain: DomainProfile | string): ResolvedDomainProfile {\n\tif (typeof domain !== \"string\") return { profile: domain, fallback: false };\n\tconst profile = getDomainProfile(domain);\n\treturn { profile, fallback: profile.id !== domain };\n}\n\nfunction composeToolGate(\n\troleGate: ToolGate,\n\tdomainGate: ToolGate,\n\tauthority: LoadoutAuthority,\n\tstripped: StrippedCapability[],\n): ToolGate {\n\tconst roleAllow = roleGate.allow ?? [];\n\tconst domainAllow = domainGate.allow ?? [];\n\tconst allowed = intersectNames(roleAllow, domainAllow);\n\tconst strippedTools = stripWriteToolsForAuthority(allowed, authority);\n\tstripped.push(...strippedTools.stripped);\n\tconst require = uniqueSorted([...(roleGate.require ?? []), ...(domainGate.require ?? [])]);\n\tconst exclude = uniqueSorted([...(roleGate.exclude ?? []), ...(domainGate.exclude ?? [])]);\n\treturn cleanToolGate({\n\t\tallow: strippedTools.names,\n\t\t...(require.length > 0 ? { require } : {}),\n\t\t...(exclude.length > 0 ? { exclude } : {}),\n\t});\n}\n\nfunction composeCapabilityGate(\n\tkind: \"skill\",\n\troleGate: CapabilityGate | undefined,\n\tdomainGate: CapabilityGate | undefined,\n\tauthority: LoadoutAuthority,\n\tstripped: StrippedCapability[],\n): CapabilityGate {\n\tconst allowNames = uniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]);\n\tconst requireNames = uniqueSorted([\n\t\t...capabilityGateNames(roleGate, \"require\"),\n\t\t...capabilityGateNames(domainGate, \"require\"),\n\t]);\n\tconst excludeNames = unionCapabilityGateNames(\"exclude\", roleGate, domainGate);\n\tconst strippedAllow = stripWriteSkillsForAuthority(allowNames, authority);\n\tconst strippedRequire = stripWriteSkillsForAuthority(requireNames, authority);\n\tstripped.push(...strippedAllow.stripped, ...strippedRequire.stripped);\n\treturn cleanCapabilityGate(kind, strippedAllow.names, strippedRequire.names, excludeNames);\n}\n\nfunction composeMcpGate(\n\troleGate: CapabilityGate | undefined,\n\tdomainGate: CapabilityGate | undefined,\n\tauthority: LoadoutAuthority,\n): ComposedMcpGate {\n\tconst allowDowngrade = downgradeMcpForAuthority(\n\t\tuniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]),\n\t\tauthority,\n\t);\n\tconst requireDowngrade = downgradeMcpForAuthority(\n\t\tuniqueSorted([...capabilityGateNames(roleGate, \"require\"), ...capabilityGateNames(domainGate, \"require\")]),\n\t\tauthority,\n\t);\n\tconst excludeNames = unionCapabilityGateNames(\"exclude\", roleGate, domainGate);\n\treturn {\n\t\tgate: cleanCapabilityGate(\"mcp\", allowDowngrade.names, requireDowngrade.names, excludeNames),\n\t\tdowngraded: uniqueMcpDowngrades([...allowDowngrade.downgraded, ...requireDowngrade.downgraded]),\n\t};\n}\n\nfunction composeHookGate(\n\troleGate: CapabilityGate | undefined,\n\tdomainGate: CapabilityGate | undefined,\n\tforcedSecurityHooks: readonly string[] | undefined,\n): CapabilityGate {\n\tconst allowNames = forceSecurityHooks(\n\t\tuniqueSorted([...capabilityGateNames(roleGate), ...capabilityGateNames(domainGate)]),\n\t\tforcedSecurityHooks,\n\t);\n\tconst requireNames = uniqueSorted([\n\t\t...capabilityGateNames(roleGate, \"require\"),\n\t\t...capabilityGateNames(domainGate, \"require\"),\n\t]);\n\tconst excludeNames = unionCapabilityGateNames(\"exclude\", roleGate, domainGate);\n\treturn cleanCapabilityGate(\"hook\", allowNames, requireNames, excludeNames);\n}\n\nfunction cleanToolGate(gate: ToolGate): ToolGate {\n\treturn {\n\t\tallow: uniqueSorted(gate.allow ?? []),\n\t\t...(gate.require && gate.require.length > 0 ? { require: uniqueSorted(gate.require) } : {}),\n\t\t...(gate.exclude && gate.exclude.length > 0 ? { exclude: uniqueSorted(gate.exclude) } : {}),\n\t};\n}\n\nfunction cleanCapabilityGate(\n\tkind: \"skill\" | \"mcp\" | \"hook\",\n\tallow: readonly string[],\n\trequire: readonly string[],\n\texclude: readonly string[],\n): CapabilityGate {\n\treturn {\n\t\tallow: [{ kind, names: uniqueSorted(allow) }],\n\t\t...(require.length > 0 ? { require: [{ kind, names: uniqueSorted(require) }] } : {}),\n\t\t...(exclude.length > 0 ? { exclude: [{ kind, names: uniqueSorted(exclude) }] } : {}),\n\t};\n}\n\nfunction intersectNames(left: readonly string[], right: readonly string[]): string[] {\n\tconst rightSet = new Set(right);\n\treturn uniqueSorted(left.filter((value) => rightSet.has(value)));\n}\n\nfunction selectorWarnings(label: string, gate: CapabilityGate | undefined): string[] {\n\tconst warnings: string[] = [];\n\tfor (const group of [\"allow\", \"exclude\", \"require\"] as const) {\n\t\tfor (const selector of gate?.[group] ?? []) {\n\t\t\tif (selector.names === undefined || selector.names.length === 0) {\n\t\t\t\twarnings.push(\n\t\t\t\t\t`${label}.${group} contains a non-name selector that cannot be represented by composed gates`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\treturn warnings;\n}\n\nfunction uniqueStripped(values: readonly StrippedCapability[]): StrippedCapability[] {\n\tconst seen = new Set<string>();\n\tconst result: StrippedCapability[] = [];\n\tfor (const value of values) {\n\t\tconst key = `${value.kind}\\0${value.name}\\0${value.reason}`;\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(value);\n\t}\n\treturn result.sort((a, b) => compareString(a.kind, b.kind) || compareString(a.name, b.name));\n}\n\nfunction uniqueMcpDowngrades(\n\tvalues: readonly { readonly mcp: string; readonly to: string }[],\n): { readonly mcp: string; readonly to: string }[] {\n\tconst seen = new Set<string>();\n\tconst result: { readonly mcp: string; readonly to: string }[] = [];\n\tfor (const value of values) {\n\t\tconst key = `${value.mcp}\\0${value.to}`;\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(value);\n\t}\n\treturn result.sort((a, b) => compareString(a.mcp, b.mcp) || compareString(a.to, b.to));\n}\n\nfunction compareString(a: string, b: string): number {\n\tif (a < b) return -1;\n\tif (a > b) return 1;\n\treturn 0;\n}\n"]}

package/dist/core/loadout-policy-bridge.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Bridge from runtime loadout state into the AgentSession access policy shape.
+ *
+ * This wrapper keeps policy creation fail-closed for blocker-bearing states and
+ * exposes a lightweight integrity check for SDK/domain-dispatch integration.
+ */
+import type { LoadoutAccessPolicy } from "./loadout-access-policy.ts";
+import { type LoadoutRuntimeState } from "./loadout-runtime.ts";
+import type { LoadoutCommands } from "./loadouts.ts";
+export interface PolicyBridgeOptions {
+    readonly cwd: string;
+    readonly blockedPaths?: readonly string[];
+    readonly commands?: LoadoutCommands;
+    readonly additionalSecurityChecks?: boolean;
+}
+export interface PolicyIntegrityResult {
+    readonly valid: boolean;
+    readonly warnings: readonly string[];
+}
+export declare function createLoadoutPolicyFromRuntimeState(state: LoadoutRuntimeState, options: PolicyBridgeOptions): LoadoutAccessPolicy;
+export declare function validatePolicyIntegrity(policy: LoadoutAccessPolicy, state: LoadoutRuntimeState): PolicyIntegrityResult;
+//# sourceMappingURL=loadout-policy-bridge.d.ts.map

package/dist/core/loadout-policy-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-policy-bridge.d.ts","sourceRoot":"","sources":["../../src/core/loadout-policy-bridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAA4B,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,mBAAmB,GAC1B,mBAAmB,CASrB;AAED,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,mBAAmB,GACxB,qBAAqB,CAcvB","sourcesContent":["/**\n * Bridge from runtime loadout state into the AgentSession access policy shape.\n *\n * This wrapper keeps policy creation fail-closed for blocker-bearing states and\n * exposes a lightweight integrity check for SDK/domain-dispatch integration.\n */\n\nimport type { LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { buildLoadoutAccessPolicy, type LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport type { LoadoutCommands } from \"./loadouts.ts\";\n\nexport interface PolicyBridgeOptions {\n\treadonly cwd: string;\n\treadonly blockedPaths?: readonly string[];\n\treadonly commands?: LoadoutCommands;\n\treadonly additionalSecurityChecks?: boolean;\n}\n\nexport interface PolicyIntegrityResult {\n\treadonly valid: boolean;\n\treadonly warnings: readonly string[];\n}\n\nexport function createLoadoutPolicyFromRuntimeState(\n\tstate: LoadoutRuntimeState,\n\toptions: PolicyBridgeOptions,\n): LoadoutAccessPolicy {\n\tif (state.blockers.length > 0) {\n\t\tthrow new Error(`cannot create loadout access policy with blockers: ${state.blockers.join(\"; \")}`);\n\t}\n\treturn buildLoadoutAccessPolicy(state, {\n\t\tcwd: options.cwd,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport function validatePolicyIntegrity(\n\tpolicy: LoadoutAccessPolicy,\n\tstate: LoadoutRuntimeState,\n): PolicyIntegrityResult {\n\tconst warnings: string[] = [];\n\tif (!sameStringSet(policy.activeTools, state.activeTools)) {\n\t\twarnings.push(\"policy active tools do not match runtime active tools\");\n\t}\n\tconst expectedReadRoots = countPathRoots(state.schedulerFields.readSet);\n\tconst expectedWriteRoots = countPathRoots(state.schedulerFields.writeSet);\n\tif (policy.readRoots.length !== expectedReadRoots) {\n\t\twarnings.push(\"policy read roots do not match runtime scheduler read set\");\n\t}\n\tif (policy.writeRoots.length !== expectedWriteRoots) {\n\t\twarnings.push(\"policy write roots do not match runtime scheduler write set\");\n\t}\n\treturn { valid: warnings.length === 0, warnings };\n}\n\nfunction countPathRoots(entries: readonly { readonly path: string; readonly symbols?: readonly string[] }[]): number {\n\treturn entries.filter((entry) => entry.symbols === undefined || entry.symbols.length === 0).length;\n}\n\nfunction sameStringSet(left: readonly string[], right: readonly string[]): boolean {\n\tconst normalizedLeft = uniqueSorted(left);\n\tconst normalizedRight = uniqueSorted(right);\n\tif (normalizedLeft.length !== normalizedRight.length) return false;\n\treturn normalizedLeft.every((value, index) => value === normalizedRight[index]);\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)].sort((a, b) => {\n\t\tif (a < b) return -1;\n\t\tif (a > b) return 1;\n\t\treturn 0;\n\t});\n}\n"]}

package/dist/core/loadout-policy-bridge.js

@@ -0,0 +1,52 @@
+/**
+ * Bridge from runtime loadout state into the AgentSession access policy shape.
+ *
+ * This wrapper keeps policy creation fail-closed for blocker-bearing states and
+ * exposes a lightweight integrity check for SDK/domain-dispatch integration.
+ */
+import { buildLoadoutAccessPolicy } from "./loadout-runtime.js";
+export function createLoadoutPolicyFromRuntimeState(state, options) {
+    if (state.blockers.length > 0) {
+        throw new Error(`cannot create loadout access policy with blockers: ${state.blockers.join("; ")}`);
+    }
+    return buildLoadoutAccessPolicy(state, {
+        cwd: options.cwd,
+        blockedPaths: options.blockedPaths,
+        commands: options.commands,
+    });
+}
+export function validatePolicyIntegrity(policy, state) {
+    const warnings = [];
+    if (!sameStringSet(policy.activeTools, state.activeTools)) {
+        warnings.push("policy active tools do not match runtime active tools");
+    }
+    const expectedReadRoots = countPathRoots(state.schedulerFields.readSet);
+    const expectedWriteRoots = countPathRoots(state.schedulerFields.writeSet);
+    if (policy.readRoots.length !== expectedReadRoots) {
+        warnings.push("policy read roots do not match runtime scheduler read set");
+    }
+    if (policy.writeRoots.length !== expectedWriteRoots) {
+        warnings.push("policy write roots do not match runtime scheduler write set");
+    }
+    return { valid: warnings.length === 0, warnings };
+}
+function countPathRoots(entries) {
+    return entries.filter((entry) => entry.symbols === undefined || entry.symbols.length === 0).length;
+}
+function sameStringSet(left, right) {
+    const normalizedLeft = uniqueSorted(left);
+    const normalizedRight = uniqueSorted(right);
+    if (normalizedLeft.length !== normalizedRight.length)
+        return false;
+    return normalizedLeft.every((value, index) => value === normalizedRight[index]);
+}
+function uniqueSorted(values) {
+    return [...new Set(values)].sort((a, b) => {
+        if (a < b)
+            return -1;
+        if (a > b)
+            return 1;
+        return 0;
+    });
+}
+//# sourceMappingURL=loadout-policy-bridge.js.map

package/dist/core/loadout-policy-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-policy-bridge.js","sourceRoot":"","sources":["../../src/core/loadout-policy-bridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,wBAAwB,EAA4B,MAAM,sBAAsB,CAAC;AAe1F,MAAM,UAAU,mCAAmC,CAClD,KAA0B,EAC1B,OAA4B,EACN;IACtB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,wBAAwB,CAAC,KAAK,EAAE;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,uBAAuB,CACtC,MAA2B,EAC3B,KAA0B,EACF;IACxB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,iBAAiB,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AAAA,CAClD;AAED,SAAS,cAAc,CAAC,OAAmF,EAAU;IACpH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAAA,CACnG;AAED,SAAS,aAAa,CAAC,IAAuB,EAAE,KAAwB,EAAW;IAClF,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,cAAc,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAChF;AAED,SAAS,YAAY,CAAC,MAAyB,EAAY;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACpB,OAAO,CAAC,CAAC;IAAA,CACT,CAAC,CAAC;AAAA,CACH","sourcesContent":["/**\n * Bridge from runtime loadout state into the AgentSession access policy shape.\n *\n * This wrapper keeps policy creation fail-closed for blocker-bearing states and\n * exposes a lightweight integrity check for SDK/domain-dispatch integration.\n */\n\nimport type { LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { buildLoadoutAccessPolicy, type LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport type { LoadoutCommands } from \"./loadouts.ts\";\n\nexport interface PolicyBridgeOptions {\n\treadonly cwd: string;\n\treadonly blockedPaths?: readonly string[];\n\treadonly commands?: LoadoutCommands;\n\treadonly additionalSecurityChecks?: boolean;\n}\n\nexport interface PolicyIntegrityResult {\n\treadonly valid: boolean;\n\treadonly warnings: readonly string[];\n}\n\nexport function createLoadoutPolicyFromRuntimeState(\n\tstate: LoadoutRuntimeState,\n\toptions: PolicyBridgeOptions,\n): LoadoutAccessPolicy {\n\tif (state.blockers.length > 0) {\n\t\tthrow new Error(`cannot create loadout access policy with blockers: ${state.blockers.join(\"; \")}`);\n\t}\n\treturn buildLoadoutAccessPolicy(state, {\n\t\tcwd: options.cwd,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport function validatePolicyIntegrity(\n\tpolicy: LoadoutAccessPolicy,\n\tstate: LoadoutRuntimeState,\n): PolicyIntegrityResult {\n\tconst warnings: string[] = [];\n\tif (!sameStringSet(policy.activeTools, state.activeTools)) {\n\t\twarnings.push(\"policy active tools do not match runtime active tools\");\n\t}\n\tconst expectedReadRoots = countPathRoots(state.schedulerFields.readSet);\n\tconst expectedWriteRoots = countPathRoots(state.schedulerFields.writeSet);\n\tif (policy.readRoots.length !== expectedReadRoots) {\n\t\twarnings.push(\"policy read roots do not match runtime scheduler read set\");\n\t}\n\tif (policy.writeRoots.length !== expectedWriteRoots) {\n\t\twarnings.push(\"policy write roots do not match runtime scheduler write set\");\n\t}\n\treturn { valid: warnings.length === 0, warnings };\n}\n\nfunction countPathRoots(entries: readonly { readonly path: string; readonly symbols?: readonly string[] }[]): number {\n\treturn entries.filter((entry) => entry.symbols === undefined || entry.symbols.length === 0).length;\n}\n\nfunction sameStringSet(left: readonly string[], right: readonly string[]): boolean {\n\tconst normalizedLeft = uniqueSorted(left);\n\tconst normalizedRight = uniqueSorted(right);\n\tif (normalizedLeft.length !== normalizedRight.length) return false;\n\treturn normalizedLeft.every((value, index) => value === normalizedRight[index]);\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)].sort((a, b) => {\n\t\tif (a < b) return -1;\n\t\tif (a > b) return 1;\n\t\treturn 0;\n\t});\n}\n"]}

package/dist/core/loadout-runtime.d.ts

@@ -54,13 +54,28 @@ export interface SubagentLaneGrant {
     authority: LoadoutAuthority;
     allowedPaths: string[];
     blockedPaths: string[];
+    tools: string[];
     skills: string[];
     mcp: string[];
     hooks: string[];
     commands: LoadoutCommands;
+    contextInheritance: LaneContextInheritanceMode;
+    spawnReceipt?: LaneSpawnReceipt;
+    evidenceGates: LaneEvidenceGate[];
+    dependsOn: string[];
+    acceptance: string[];
     evidenceOutput?: string;
     scheduler: SchedulerFields;
 }
+export type LaneContextInheritanceMode = "none" | "receipt" | "last-turn" | "bounded" | "full";
+export type LaneEvidenceGate = "plan-reread" | "automated-verification" | "manual-qa" | "adversarial-qa" | "cleanup";
+export interface LaneSpawnReceipt {
+    whyParallel: string;
+    whyNotLocal: string;
+    independence: string;
+    expectedReceiptShape: string;
+    maxInlineTokens: number;
+}
 export declare function buildCapabilityInventory(session: LoadoutRuntimeSession, resourceLoader: ResourceLoader, cwd: string, hookInventory: HookInventory): CapabilityInventory;
 export interface ApplyLoadoutToRuntimeRequest {
     profile: LoadoutProfile;
@@ -73,11 +88,18 @@ export declare function applyLoadoutToRuntime(session: LoadoutRuntimeSession, re
 export interface BuildSubagentLaneGrantOptions {
     allowedReadPaths?: readonly string[];
     allowedWritePaths?: readonly string[];
+    blockedPaths?: readonly string[];
     evidenceOutputPattern?: string;
     runId?: string;
     profile?: {
         commands?: LoadoutCommands;
     };
+    agentName?: string;
+    contextInheritance?: LaneContextInheritanceMode;
+    spawnReceipt?: LaneSpawnReceipt;
+    evidenceGates?: readonly LaneEvidenceGate[];
+    dependsOn?: readonly string[];
+    acceptance?: readonly string[];
 }
 export declare function buildSubagentLaneGrant(nodeId: string, role: LoadoutRole, task: string, applied: AppliedLoadout, schedulerFields: SchedulerFields, options?: BuildSubagentLaneGrantOptions): SubagentLaneGrant;
 export {};

package/dist/core/loadout-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CA6DrB;AAED,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAkDrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CACzC;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CA4BnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: \"project\",\n\t\torigin: \"top-level\",\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.scriptPath ?? \"builtin\",\n\t\tscope: \"builtin\",\n\t\torigin: \"top-level\",\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git/*\"];\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n"]}
+{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,kBAAkB,EAAE,0BAA0B,CAAC;IAC/C,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE/F,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,wBAAwB,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAErH,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CAgErB;AAOD,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAkDrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;IAChD,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CAwCnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport path from \"node:path\";\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { sanitizeHookPolicy } from \"./hooks/index.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\ttools: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tcontextInheritance: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates: LaneEvidenceGate[];\n\tdependsOn: string[];\n\tacceptance: string[];\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport type LaneContextInheritanceMode = \"none\" | \"receipt\" | \"last-turn\" | \"bounded\" | \"full\";\n\nexport type LaneEvidenceGate = \"plan-reread\" | \"automated-verification\" | \"manual-qa\" | \"adversarial-qa\" | \"cleanup\";\n\nexport interface LaneSpawnReceipt {\n\twhyParallel: string;\n\twhyNotLocal: string;\n\tindependence: string;\n\texpectedReceiptShape: string;\n\tmaxInlineTokens: number;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: mcpInventoryScope(cwd, entry.source),\n\t\torigin: \"top-level\",\n\t\tpath: entry.source,\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.builtin ? \"builtin\" : \"project\",\n\t\tscope: descriptor.builtin ? \"builtin\" : \"project\",\n\t\torigin: \"top-level\",\n\t\tpath: descriptor.scriptPath,\n\t\tpolicy: sanitizeHookPolicy(descriptor.policy),\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nfunction mcpInventoryScope(cwd: string, sourcePath: string): \"project\" | \"user\" {\n\tconst relative = path.relative(cwd, sourcePath);\n\treturn relative !== \"\" && !relative.startsWith(\"..\") && !path.isAbsolute(relative) ? \"project\" : \"user\";\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tblockedPaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n\tagentName?: string;\n\tcontextInheritance?: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates?: readonly LaneEvidenceGate[];\n\tdependsOn?: readonly string[];\n\tacceptance?: readonly string[];\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = uniqueSorted([\n\t\t\"**/.env*\",\n\t\t\"**/*secret*\",\n\t\t\"**/*key*\",\n\t\t\"**/.git/*\",\n\t\t...(options.blockedPaths ?? []),\n\t]);\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: options.agentName ?? `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\ttools: applied.activeTools,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tcontextInheritance: options.contextInheritance ?? defaultContextInheritance(role),\n\t\t...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),\n\t\tevidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),\n\t\tdependsOn: uniqueSorted(options.dependsOn ?? []),\n\t\tacceptance: uniqueSorted(options.acceptance ?? []),\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction defaultContextInheritance(role: LoadoutRole): LaneContextInheritanceMode {\n\tswitch (role) {\n\t\tcase \"planner\":\n\t\tcase \"critic\":\n\t\tcase \"visual-qa\":\n\t\t\treturn \"receipt\";\n\t\tcase \"security\":\n\t\t\treturn \"none\";\n\t\tdefault:\n\t\t\treturn \"bounded\";\n\t}\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n\nfunction uniqueSortedEvidenceGates(values: readonly LaneEvidenceGate[]): LaneEvidenceGate[] {\n\treturn [...new Set(values)].sort();\n}\n"]}

package/dist/core/loadout-runtime.js

@@ -5,7 +5,9 @@
  * capability inventories, lane grants, and scheduler fields without mutating
  * `AgentSession`.
  */
+import path from "node:path";
 import { loadHookInventory } from "./hook-inventory.js";
+import { sanitizeHookPolicy } from "./hooks/index.js";
 import { createLoadoutAccessPolicy } from "./loadout-access-policy.js";
 import { applyLoadoutProfile, deriveSchedulerFields, validateLoadoutProfile, } from "./loadouts.js";
 import { loadMcpInventory } from "./mcp-inventory.js";
@@ -62,18 +64,25 @@ export function buildCapabilityInventory(session, resourceLoader, cwd, hookInven
         kind: "mcp",
         name: entry.name,
         source: entry.source,
-        scope: "project",
+        scope: mcpInventoryScope(cwd, entry.source),
         origin: "top-level",
+        path: entry.source,
     }));
     const hooks = hookInventory.hooks.map((descriptor) => ({
         kind: "hook",
         name: descriptor.name,
-        source: descriptor.scriptPath ?? "builtin",
-        scope: "builtin",
+        source: descriptor.builtin ? "builtin" : "project",
+        scope: descriptor.builtin ? "builtin" : "project",
         origin: "top-level",
+        path: descriptor.scriptPath,
+        policy: sanitizeHookPolicy(descriptor.policy),
     }));
     return { tools, skills, mcp, hooks };
 }
+function mcpInventoryScope(cwd, sourcePath) {
+    const relative = path.relative(cwd, sourcePath);
+    return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative) ? "project" : "user";
+}
 export function applyLoadoutToRuntime(session, resourceLoader, cwd, agentDir, request) {
     const validation = validateLoadoutProfile(request.profile);
     if (!validation.valid) {
@@ -124,7 +133,13 @@ export function applyLoadoutToRuntime(session, resourceLoader, cwd, agentDir, re
 }
 export function buildSubagentLaneGrant(nodeId, role, task, applied, schedulerFields, options = {}) {
     const allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);
-    const blockedPaths = ["**/.env*", "**/*secret*", "**/*key*", "**/.git/*"];
+    const blockedPaths = uniqueSorted([
+        "**/.env*",
+        "**/*secret*",
+        "**/*key*",
+        "**/.git/*",
+        ...(options.blockedPaths ?? []),
+    ]);
     let evidenceOutput;
     if (options.evidenceOutputPattern) {
         evidenceOutput = options.runId
@@ -134,24 +149,45 @@ export function buildSubagentLaneGrant(nodeId, role, task, applied, schedulerFie
     const commands = options.profile?.commands ?? { mode: "none" };
     return {
         laneId: nodeId,
-        agent: `omk-${role}`,
+        agent: options.agentName ?? `omk-${role}`,
         task,
         scope: "loadout-derived lane grant",
         authority: applied.authority,
         allowedPaths,
         blockedPaths,
+        tools: applied.activeTools,
         skills: applied.activeSkills,
         mcp: applied.activeMcp,
         hooks: applied.activeHooks,
         commands,
+        contextInheritance: options.contextInheritance ?? defaultContextInheritance(role),
+        ...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),
+        evidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),
+        dependsOn: uniqueSorted(options.dependsOn ?? []),
+        acceptance: uniqueSorted(options.acceptance ?? []),
         evidenceOutput,
         scheduler: schedulerFields,
     };
 }
+function defaultContextInheritance(role) {
+    switch (role) {
+        case "planner":
+        case "critic":
+        case "visual-qa":
+            return "receipt";
+        case "security":
+            return "none";
+        default:
+            return "bounded";
+    }
+}
 function uniqueSorted(values) {
     return [...new Set(values)]
         .map((value) => value.trim())
         .filter((value) => value !== "")
         .sort();
 }
+function uniqueSortedEvidenceGates(values) {
+    return [...new Set(values)].sort();
+}
 //# sourceMappingURL=loadout-runtime.js.map