reflectt-node 0.1.8 → 0.1.12

package/defaults/TEAM-ROLES.yaml

@@ -236,25 +236,332 @@ agents:
       - brand-copy
     wipCap: 1
 
+  - name: cos
+    role: chief-of-staff
+    description: Alignment and escalation router. Maintains decision log, tracks who owes what by when, packages escalations, prevents thrash. No final product/design decisions.
+    affinityTags:
+      - alignment
+      - escalation
+      - decisions
+      - process
+      - coordination
+      - strategy
+    routingMode: opt-in
+    neverRouteUnlessLane: alignment
+    alwaysRoute:
+      - alignment
+      - escalation
+      - process
+    neverRoute:
+      - backend
+      - frontend
+      - ui
+      - design
+      - security-review
+      - code-review
+    wipCap: 2
+
+  - name: coo
+    role: operations
+    description: Board execution, lane health, and ops monitoring. Owns board hygiene, task gate enforcement, EOD signal generation, SOUL.md patch cycle.
+    affinityTags:
+      - ops
+      - board-health
+      - lane-health
+      - monitoring
+      - execution
+      - watchdog
+    routingMode: opt-in
+    neverRouteUnlessLane: ops
+    alwaysRoute:
+      - ops
+      - board-health
+      - execution
+    neverRoute:
+      - backend
+      - frontend
+      - ui
+      - design
+    wipCap: 2
+
+  - name: pm
+    role: product-manager
+    description: Product spec, acceptance criteria, lane metrics, and shipping reports. Translates business goals into scoped tasks.
+    affinityTags:
+      - product
+      - spec
+      - ac
+      - reporting
+      - metrics
+      - prioritization
+    routingMode: opt-in
+    neverRouteUnlessLane: product
+    alwaysRoute:
+      - product
+      - spec
+      - reporting
+    neverRoute:
+      - backend
+      - ui
+      - security-review
+    wipCap: 2
+
+  - name: qa
+    role: quality
+    description: Regression testing, audit checklists, mobile QA, and test coverage validation.
+    affinityTags:
+      - qa
+      - testing
+      - regression
+      - audit
+      - checklist
+      - coverage
+      - mobile-qa
+    alwaysRoute:
+      - qa
+      - testing
+      - regression
+    neverRoute:
+      - brand-copy
+      - marketing
+    wipCap: 2
+
+  - name: swift
+    role: ios-engineer
+    description: iOS app development — Swift/SwiftUI, TestFlight pipeline, Apple Watch companion, App Store submission.
+    affinityTags:
+      - ios
+      - swift
+      - swiftui
+      - testflight
+      - apple
+      - watchos
+      - mobile
+    alwaysRoute:
+      - ios
+      - swift
+      - apple
+    neverRoute:
+      - android
+      - backend
+      - design
+    wipCap: 2
+
+  - name: kotlin
+    role: android-engineer
+    description: Android app development — Kotlin, Play Store submission, Firebase integration, CI/CD pipeline.
+    affinityTags:
+      - android
+      - kotlin
+      - play-store
+      - firebase
+      - mobile
+      - gradle
+    alwaysRoute:
+      - android
+      - kotlin
+      - play-store
+    neverRoute:
+      - ios
+      - backend
+      - design
+    wipCap: 2
+
+  - name: shield
+    role: security
+    description: Security audits — RLS policy review, IDOR checks, rate limiting, env var hygiene, Vercel config.
+    affinityTags:
+      - security
+      - rls
+      - audit
+      - idor
+      - rate-limiting
+      - env
+      - compliance
+    alwaysRoute:
+      - security
+      - rls
+      - security-review
+    neverRoute:
+      - brand-copy
+      - marketing
+      - design
+    protectedDomains:
+      - security
+    wipCap: 1
+
+  - name: artdirector
+    role: art-director
+    description: Visual design direction — host detail pages, design specs, screenshot audits, mobile layout direction.
+    affinityTags:
+      - design
+      - visual
+      - layout
+      - art-direction
+      - spec
+      - mockup
+    routingMode: opt-in
+    neverRouteUnlessLane: design
+    alwaysRoute:
+      - art-direction
+      - design-spec
+    neverRoute:
+      - backend
+      - security-review
+      - code-review
+    wipCap: 1
+
+  - name: uipolish
+    role: ui-polisher
+    description: Frontend polish — mobile layout fixes, density improvements, empty states, scroll affordances, visual regressions.
+    affinityTags:
+      - ui
+      - polish
+      - mobile
+      - css
+      - layout
+      - visual
+      - frontend
+    alwaysRoute:
+      - ui-polish
+      - visual-polish
+      - mobile
+    neverRoute:
+      - backend
+      - security-review
+      - api
+    wipCap: 2
+
+  - name: kindling
+    role: community
+    description: Community engagement — Discord posts, UTM tracking, community onboarding content.
+    affinityTags:
+      - community
+      - discord
+      - utm
+      - onboarding-content
+      - social
+    routingMode: opt-in
+    neverRouteUnlessLane: community
+    alwaysRoute:
+      - community
+      - discord
+    neverRoute:
+      - backend
+      - security-review
+      - code-review
+    wipCap: 1
+
+  - name: quill
+    role: writer
+    description: Long-form content — dev.to articles, changelogs, shipping summaries, community posts.
+    affinityTags:
+      - writing
+      - content
+      - changelog
+      - blog
+      - devto
+      - community-post
+    routingMode: opt-in
+    neverRouteUnlessLane: content
+    alwaysRoute:
+      - writing
+      - changelog
+      - blog
+    neverRoute:
+      - backend
+      - security-review
+      - code-review
+      - ui
+    wipCap: 1
+
+  - name: funnel
+    role: growth-funnel
+    description: Conversion funnel optimization — install drop-off fixes, onboarding UX, PATH guidance, curl installer.
+    affinityTags:
+      - funnel
+      - conversion
+      - install
+      - onboarding
+      - growth
+      - drop-off
+    alwaysRoute:
+      - funnel
+      - install
+      - onboarding-ux
+    neverRoute:
+      - security-review
+      - backend-infra
+    wipCap: 1
+
+  - name: attribution
+    role: analytics
+    description: Cost and attribution analytics — cost dashboards, spend alerts, model effectiveness tracking, UTM attribution.
+    affinityTags:
+      - analytics
+      - cost
+      - attribution
+      - spend
+      - reporting
+      - dashboard
+      - metrics
+    alwaysRoute:
+      - analytics
+      - cost-tracking
+      - attribution
+    neverRoute:
+      - security-review
+      - brand-copy
+    wipCap: 1
+
   # Removed agent-1/2/3 fallback entries — were leaking into dashboard as ghost agents
 
+# Decision authority — what the team owns vs. what requires a human
+# This section survives cold-start and new installs.
+# Agents reading this on first boot should NOT default to Ryan for decisions in the team-decides list.
+decision_authority:
+  team_decides:
+    - Product feature scope and prioritization (P0/P1/P2/P3 assignment)
+    - Architecture and technical decisions (API shape, data model, infra choices)
+    - Pricing tier structure and copy
+    - PR merges within approved feature scope
+    - Task creation, assignment, reassignment, and cancellation
+    - Agent role definitions and team composition changes
+    - API spend thresholds and monitoring rules
+    - Design, UX, and content decisions
+    - Marketing copy, social posts, and community messaging
+    - Internal process decisions (SOUL.md patches, PROGRAM.md updates, TEAM-STANDARDS.md)
+    - Review approvals and rejections
+    - Budget allocation between work streams (within overall investment context)
+    - Continuity loop configuration and agent protocols
+  escalate_to_human:
+    - External credentials and secrets (Apple Developer enrollment, Play Console, API keys, OAuth tokens)
+    - Legal agreements, terms of service, and compliance sign-offs
+    - Founder vision conflicts or major strategic pivots (e.g., changing the core product direction)
+    - Privacy policy content and publication (requires human approval before going live)
+    - External service account creation requiring identity verification (app store developer accounts)
+    - Any decision where a mistake could cause irreversible public harm or legal liability
+  escalation_channel: cloud app task assignment or email — never #general chat @mention
+  note: When in doubt, make the call. A reversible decision made by the team beats a correct decision that
+        waits for Ryan. Escalate only when the decision is genuinely irreversible or legally significant.
+
 # Lane definitions for ready-queue engine.
 # Each lane groups agents into a work stream with floor + WIP controls.
 # readyFloor — minimum unblocked todo tasks per agent before sweeper fires
 # wipLimit   — max simultaneous doing tasks per agent (/tasks/next enforces this)
 lanes:
   - name: engineering
-    agents: [link]
+    agents: [link, swift, kotlin]
     readyFloor: 2
     wipLimit: 2
 
   - name: design
-    agents: [pixel]
+    agents: [pixel, artdirector, uipolish]
     readyFloor: 1
     wipLimit: 1
 
   - name: operations
-    agents: [sage, rhythm]
+    agents: [sage, rhythm, coo, cos, pm, qa]
     readyFloor: 1
     wipLimit: 1
 
@@ -264,11 +571,16 @@ lanes:
     wipLimit: 1
 
   - name: growth
-    agents: [spark]
+    agents: [spark, funnel, attribution]
     readyFloor: 1
     wipLimit: 1
 
   - name: content
-    agents: [echo]
+    agents: [echo, quill, kindling]
+    readyFloor: 1
+    wipLimit: 1
+
+  - name: security
+    agents: [shield]
     readyFloor: 1
     wipLimit: 1

package/dist/agent-config.d.ts

@@ -0,0 +1,51 @@
+export interface AgentConfig {
+    agentId: string;
+    teamId: string;
+    model: string | null;
+    fallbackModel: string | null;
+    costCapDaily: number | null;
+    costCapMonthly: number | null;
+    maxTokensPerCall: number | null;
+    settings: Record<string, unknown>;
+    createdAt: number;
+    updatedAt: number;
+}
+/**
+ * Get config for a specific agent. Returns null if not set.
+ */
+export declare function getAgentConfig(agentId: string): AgentConfig | null;
+/**
+ * List all agent configs, optionally filtered by team.
+ */
+export declare function listAgentConfigs(opts?: {
+    teamId?: string;
+}): AgentConfig[];
+/**
+ * Set (upsert) config for an agent.
+ */
+export declare function setAgentConfig(agentId: string, updates: {
+    teamId?: string;
+    model?: string | null;
+    fallbackModel?: string | null;
+    costCapDaily?: number | null;
+    costCapMonthly?: number | null;
+    maxTokensPerCall?: number | null;
+    settings?: Record<string, unknown>;
+}): AgentConfig;
+/**
+ * Delete config for an agent.
+ */
+export declare function deleteAgentConfig(agentId: string): boolean;
+/**
+ * Check if an agent is within its cost cap.
+ * Returns { allowed, remaining, cap, spent, action } for the cost enforcement hook.
+ */
+export declare function checkCostCap(agentId: string, currentDailySpend: number, currentMonthlySpend: number): {
+    allowed: boolean;
+    dailyRemaining: number | null;
+    monthlyRemaining: number | null;
+    action: 'allow' | 'warn' | 'downgrade' | 'deny';
+    model: string | null;
+    fallbackModel: string | null;
+};
+//# sourceMappingURL=agent-config.d.ts.map

package/dist/agent-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.d.ts","sourceRoot":"","sources":["../src/agent-config.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AA8BD;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAIlE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,EAAE,CAQ1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;IACvD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC,GAAG,WAAW,CAwCd;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG;IACrG,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;IAC/C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B,CAwCA"}

package/dist/agent-config.js

@@ -0,0 +1,129 @@
+// SPDX-License-Identifier: Apache-2.0
+// Agent configuration API — model preference + cost cap per agent
+import { getDb } from './db.js';
+function rowToConfig(row) {
+    return {
+        agentId: row.agent_id,
+        teamId: row.team_id,
+        model: row.model,
+        fallbackModel: row.fallback_model,
+        costCapDaily: row.cost_cap_daily,
+        costCapMonthly: row.cost_cap_monthly,
+        maxTokensPerCall: row.max_tokens_per_call,
+        settings: JSON.parse(row.settings || '{}'),
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/**
+ * Get config for a specific agent. Returns null if not set.
+ */
+export function getAgentConfig(agentId) {
+    const db = getDb();
+    const row = db.prepare('SELECT * FROM agent_config WHERE agent_id = ?').get(agentId);
+    return row ? rowToConfig(row) : null;
+}
+/**
+ * List all agent configs, optionally filtered by team.
+ */
+export function listAgentConfigs(opts) {
+    const db = getDb();
+    if (opts?.teamId) {
+        const rows = db.prepare('SELECT * FROM agent_config WHERE team_id = ? ORDER BY agent_id').all(opts.teamId);
+        return rows.map(rowToConfig);
+    }
+    const rows = db.prepare('SELECT * FROM agent_config ORDER BY agent_id').all();
+    return rows.map(rowToConfig);
+}
+/**
+ * Set (upsert) config for an agent.
+ */
+export function setAgentConfig(agentId, updates) {
+    const db = getDb();
+    const now = Date.now();
+    const existing = getAgentConfig(agentId);
+    if (existing) {
+        // Update
+        const model = updates.model !== undefined ? updates.model : existing.model;
+        const fallbackModel = updates.fallbackModel !== undefined ? updates.fallbackModel : existing.fallbackModel;
+        const costCapDaily = updates.costCapDaily !== undefined ? updates.costCapDaily : existing.costCapDaily;
+        const costCapMonthly = updates.costCapMonthly !== undefined ? updates.costCapMonthly : existing.costCapMonthly;
+        const maxTokensPerCall = updates.maxTokensPerCall !== undefined ? updates.maxTokensPerCall : existing.maxTokensPerCall;
+        const settings = updates.settings !== undefined ? updates.settings : existing.settings;
+        const teamId = updates.teamId ?? existing.teamId;
+        db.prepare(`
+      UPDATE agent_config SET
+        team_id = ?, model = ?, fallback_model = ?, cost_cap_daily = ?,
+        cost_cap_monthly = ?, max_tokens_per_call = ?, settings = ?, updated_at = ?
+      WHERE agent_id = ?
+    `).run(teamId, model, fallbackModel, costCapDaily, costCapMonthly, maxTokensPerCall, JSON.stringify(settings), now, agentId);
+        return { agentId, teamId, model, fallbackModel, costCapDaily, costCapMonthly, maxTokensPerCall, settings, createdAt: existing.createdAt, updatedAt: now };
+    }
+    // Insert
+    const teamId = updates.teamId ?? 'default';
+    const model = updates.model ?? null;
+    const fallbackModel = updates.fallbackModel ?? null;
+    const costCapDaily = updates.costCapDaily ?? null;
+    const costCapMonthly = updates.costCapMonthly ?? null;
+    const maxTokensPerCall = updates.maxTokensPerCall ?? null;
+    const settings = updates.settings ?? {};
+    db.prepare(`
+    INSERT INTO agent_config (agent_id, team_id, model, fallback_model, cost_cap_daily, cost_cap_monthly, max_tokens_per_call, settings, created_at, updated_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(agentId, teamId, model, fallbackModel, costCapDaily, costCapMonthly, maxTokensPerCall, JSON.stringify(settings), now, now);
+    return { agentId, teamId, model, fallbackModel, costCapDaily, costCapMonthly, maxTokensPerCall, settings, createdAt: now, updatedAt: now };
+}
+/**
+ * Delete config for an agent.
+ */
+export function deleteAgentConfig(agentId) {
+    const db = getDb();
+    const result = db.prepare('DELETE FROM agent_config WHERE agent_id = ?').run(agentId);
+    return result.changes > 0;
+}
+/**
+ * Check if an agent is within its cost cap.
+ * Returns { allowed, remaining, cap, spent, action } for the cost enforcement hook.
+ */
+export function checkCostCap(agentId, currentDailySpend, currentMonthlySpend) {
+    const config = getAgentConfig(agentId);
+    if (!config) {
+        return { allowed: true, dailyRemaining: null, monthlyRemaining: null, action: 'allow', model: null, fallbackModel: null };
+    }
+    let action = 'allow';
+    let dailyRemaining = null;
+    let monthlyRemaining = null;
+    if (config.costCapDaily !== null) {
+        dailyRemaining = config.costCapDaily - currentDailySpend;
+        if (dailyRemaining <= 0) {
+            action = 'deny';
+        }
+        else if (dailyRemaining < config.costCapDaily * 0.1) {
+            action = 'downgrade'; // < 10% remaining → use fallback model
+        }
+        else if (dailyRemaining < config.costCapDaily * 0.2) {
+            action = action === 'allow' ? 'warn' : action; // < 20% remaining → warn
+        }
+    }
+    if (config.costCapMonthly !== null) {
+        monthlyRemaining = config.costCapMonthly - currentMonthlySpend;
+        if (monthlyRemaining <= 0) {
+            action = 'deny';
+        }
+        else if (monthlyRemaining < config.costCapMonthly * 0.1 && action !== 'deny') {
+            action = 'downgrade';
+        }
+        else if (monthlyRemaining < config.costCapMonthly * 0.2 && action === 'allow') {
+            action = 'warn';
+        }
+    }
+    return {
+        allowed: action !== 'deny',
+        dailyRemaining,
+        monthlyRemaining,
+        action,
+        model: config.model,
+        fallbackModel: config.fallbackModel,
+    };
+}
+//# sourceMappingURL=agent-config.js.map

package/dist/agent-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.js","sourceRoot":"","sources":["../src/agent-config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,kEAAkE;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AA4B/B,SAAS,WAAW,CAAC,GAAc;IACjC,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,gBAAgB,EAAE,GAAG,CAAC,mBAAmB;QACzC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC1C,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAClB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,OAAO,CAA0B,CAAA;IAC7G,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAClB,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAgB,CAAA;QACzH,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,EAAiB,CAAA;IAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,OAQ/C;IACC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAExC,IAAI,QAAQ,EAAE,CAAC;QACb,SAAS;QACT,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAA;QAC1E,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAA;QAC1G,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAA;QACtG,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAA;QAC9G,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAA;QACtH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAA;QACtF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAA;QAEhD,EAAE,CAAC,OAAO,CAAC;;;;;KAKV,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QAE5H,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;IAC3J,CAAC;IAED,SAAS;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAAA;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAA;IACnC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAA;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAA;IACjD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAA;IACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAA;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEvC,EAAE,CAAC,OAAO,CAAC;;;GAGV,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAEjI,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;AAC5I,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;IAClB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACrF,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,iBAAyB,EAAE,mBAA2B;IAQlG,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IAC3H,CAAC;IAED,IAAI,MAAM,GAA4C,OAAO,CAAA;IAC7D,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,gBAAgB,GAAkB,IAAI,CAAA;IAE1C,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,cAAc,GAAG,MAAM,CAAC,YAAY,GAAG,iBAAiB,CAAA;QACxD,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,MAAM,CAAA;QACjB,CAAC;aAAM,IAAI,cAAc,GAAG,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;YACtD,MAAM,GAAG,WAAW,CAAA,CAAC,uCAAuC;QAC9D,CAAC;aAAM,IAAI,cAAc,GAAG,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;YACtD,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA,CAAC,yBAAyB;QACzE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,gBAAgB,GAAG,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAA;QAC9D,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,GAAG,MAAM,CAAA;QACjB,CAAC;aAAM,IAAI,gBAAgB,GAAG,MAAM,CAAC,cAAc,GAAG,GAAG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/E,MAAM,GAAG,WAAW,CAAA;QACtB,CAAC;aAAM,IAAI,gBAAgB,GAAG,MAAM,CAAC,cAAc,GAAG,GAAG,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAChF,MAAM,GAAG,MAAM,CAAA;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,KAAK,MAAM;QAC1B,cAAc;QACd,gBAAgB;QAChB,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;AACH,CAAC"}

package/dist/agent-config.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-config.test.d.ts.map

package/dist/agent-config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.test.d.ts","sourceRoot":"","sources":["../src/agent-config.test.ts"],"names":[],"mappings":""}

package/dist/agent-config.test.js

@@ -0,0 +1,91 @@
+// SPDX-License-Identifier: Apache-2.0
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+// Test the cost cap logic in isolation
+function checkCostCap(config, dailySpend, monthlySpend) {
+    if (!config)
+        return { allowed: true, action: 'allow' };
+    let action = 'allow';
+    if (config.costCapDaily !== null) {
+        const remaining = config.costCapDaily - dailySpend;
+        if (remaining <= 0)
+            action = 'deny';
+        else if (remaining < config.costCapDaily * 0.1)
+            action = 'downgrade';
+        else if (remaining < config.costCapDaily * 0.2)
+            action = 'warn';
+    }
+    if (config.costCapMonthly !== null) {
+        const remaining = config.costCapMonthly - monthlySpend;
+        if (remaining <= 0)
+            action = 'deny';
+        else if (remaining < config.costCapMonthly * 0.1 && action !== 'deny')
+            action = 'downgrade';
+        else if (remaining < config.costCapMonthly * 0.2 && action === 'allow')
+            action = 'warn';
+    }
+    return { allowed: action !== 'deny', action };
+}
+describe('agent config cost enforcement', () => {
+    it('allows when no config exists', () => {
+        const r = checkCostCap(null, 5, 50);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'allow');
+    });
+    it('allows when no caps are set', () => {
+        const r = checkCostCap({ costCapDaily: null, costCapMonthly: null, model: null, fallbackModel: null }, 5, 50);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'allow');
+    });
+    it('allows when well under daily cap', () => {
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: null, model: 'opus', fallbackModel: 'sonnet' }, 3, 0);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'allow');
+    });
+    it('warns at 80% daily spend', () => {
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: null, model: 'opus', fallbackModel: 'sonnet' }, 8.5, 0);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'warn');
+    });
+    it('downgrades at 90% daily spend', () => {
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: null, model: 'opus', fallbackModel: 'sonnet' }, 9.5, 0);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'downgrade');
+    });
+    it('denies at 100% daily spend', () => {
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: null, model: 'opus', fallbackModel: 'sonnet' }, 10, 0);
+        assert.equal(r.allowed, false);
+        assert.equal(r.action, 'deny');
+    });
+    it('denies when over daily cap', () => {
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: null, model: 'opus', fallbackModel: 'sonnet' }, 12, 0);
+        assert.equal(r.allowed, false);
+        assert.equal(r.action, 'deny');
+    });
+    it('monthly cap denies overriding daily allow', () => {
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: 100, model: null, fallbackModel: null }, 3, 100);
+        assert.equal(r.allowed, false);
+        assert.equal(r.action, 'deny');
+    });
+    it('monthly warn when daily is fine', () => {
+        const r = checkCostCap({ costCapDaily: null, costCapMonthly: 100, model: null, fallbackModel: null }, 0, 85);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'warn');
+    });
+    it('monthly downgrade at 90%', () => {
+        const r = checkCostCap({ costCapDaily: null, costCapMonthly: 100, model: null, fallbackModel: null }, 0, 95);
+        assert.equal(r.allowed, true);
+        assert.equal(r.action, 'downgrade');
+    });
+    it('both caps — tighter one wins', () => {
+        // Daily is at 95% (downgrade), monthly is fine
+        const r = checkCostCap({ costCapDaily: 10, costCapMonthly: 1000, model: 'opus', fallbackModel: 'sonnet' }, 9.5, 50);
+        assert.equal(r.action, 'downgrade');
+    });
+    it('zero cap always denies', () => {
+        const r = checkCostCap({ costCapDaily: 0, costCapMonthly: null, model: null, fallbackModel: null }, 0, 0);
+        assert.equal(r.allowed, false);
+        assert.equal(r.action, 'deny');
+    });
+});
+//# sourceMappingURL=agent-config.test.js.map

package/dist/agent-config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.test.js","sourceRoot":"","sources":["../src/agent-config.test.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAc,MAAM,WAAW,CAAA;AACpD,OAAO,MAAM,MAAM,oBAAoB,CAAA;AAEvC,uCAAuC;AACvC,SAAS,YAAY,CACnB,MAAiI,EACjI,UAAkB,EAClB,YAAoB;IAEpB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IAEtD,IAAI,MAAM,GAA4C,OAAO,CAAA;IAE7D,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,GAAG,UAAU,CAAA;QAClD,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,GAAG,MAAM,CAAA;aAC9B,IAAI,SAAS,GAAG,MAAM,CAAC,YAAY,GAAG,GAAG;YAAE,MAAM,GAAG,WAAW,CAAA;aAC/D,IAAI,SAAS,GAAG,MAAM,CAAC,YAAY,GAAG,GAAG;YAAE,MAAM,GAAG,MAAM,CAAA;IACjE,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,GAAG,YAAY,CAAA;QACtD,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,GAAG,MAAM,CAAA;aAC9B,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc,GAAG,GAAG,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,GAAG,WAAW,CAAA;aACtF,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc,GAAG,GAAG,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM,GAAG,MAAM,CAAA;IACzF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAChH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAClH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAClH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QACjH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QACjH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAC3G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,+CAA+C;QAC/C,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QACnH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}