teamcast 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +654 -0
- package/dist/application/build-generated-files.d.ts +8 -0
- package/dist/application/build-generated-files.d.ts.map +1 -0
- package/dist/application/build-generated-files.js +16 -0
- package/dist/application/build-generated-files.js.map +1 -0
- package/dist/application/team.d.ts +27 -0
- package/dist/application/team.d.ts.map +1 -0
- package/dist/application/team.js +203 -0
- package/dist/application/team.js.map +1 -0
- package/dist/application/validate-team.d.ts +32 -0
- package/dist/application/validate-team.d.ts.map +1 -0
- package/dist/application/validate-team.js +132 -0
- package/dist/application/validate-team.js.map +1 -0
- package/dist/cli/diff.d.ts +3 -0
- package/dist/cli/diff.d.ts.map +1 -0
- package/dist/cli/diff.js +57 -0
- package/dist/cli/diff.js.map +1 -0
- package/dist/cli/explain.d.ts +3 -0
- package/dist/cli/explain.d.ts.map +1 -0
- package/dist/cli/explain.js +29 -0
- package/dist/cli/explain.js.map +1 -0
- package/dist/cli/generate.d.ts +3 -0
- package/dist/cli/generate.d.ts.map +1 -0
- package/dist/cli/generate.js +68 -0
- package/dist/cli/generate.js.map +1 -0
- package/dist/cli/import.d.ts +3 -0
- package/dist/cli/import.d.ts.map +1 -0
- package/dist/cli/import.js +93 -0
- package/dist/cli/import.js.map +1 -0
- package/dist/cli/index.d.ts +3 -0
- package/dist/cli/index.d.ts.map +1 -0
- package/dist/cli/index.js +19 -0
- package/dist/cli/index.js.map +1 -0
- package/dist/cli/init.d.ts +3 -0
- package/dist/cli/init.d.ts.map +1 -0
- package/dist/cli/init.js +155 -0
- package/dist/cli/init.js.map +1 -0
- package/dist/cli/manage.d.ts +3 -0
- package/dist/cli/manage.d.ts.map +1 -0
- package/dist/cli/manage.js +350 -0
- package/dist/cli/manage.js.map +1 -0
- package/dist/cli/manifest-validation.d.ts +13 -0
- package/dist/cli/manifest-validation.d.ts.map +1 -0
- package/dist/cli/manifest-validation.js +38 -0
- package/dist/cli/manifest-validation.js.map +1 -0
- package/dist/cli/reset.d.ts +3 -0
- package/dist/cli/reset.d.ts.map +1 -0
- package/dist/cli/reset.js +116 -0
- package/dist/cli/reset.js.map +1 -0
- package/dist/cli/validate.d.ts +3 -0
- package/dist/cli/validate.d.ts.map +1 -0
- package/dist/cli/validate.js +48 -0
- package/dist/cli/validate.js.map +1 -0
- package/dist/components/agent-fragments.d.ts +15 -0
- package/dist/components/agent-fragments.d.ts.map +1 -0
- package/dist/components/agent-fragments.js +163 -0
- package/dist/components/agent-fragments.js.map +1 -0
- package/dist/components/policy-fragments.d.ts +5 -0
- package/dist/components/policy-fragments.d.ts.map +1 -0
- package/dist/components/policy-fragments.js +125 -0
- package/dist/components/policy-fragments.js.map +1 -0
- package/dist/core/assertions.d.ts +28 -0
- package/dist/core/assertions.d.ts.map +1 -0
- package/dist/core/assertions.js +11 -0
- package/dist/core/assertions.js.map +1 -0
- package/dist/core/guards.d.ts +11 -0
- package/dist/core/guards.d.ts.map +1 -0
- package/dist/core/guards.js +20 -0
- package/dist/core/guards.js.map +1 -0
- package/dist/core/index.d.ts +9 -0
- package/dist/core/index.d.ts.map +1 -0
- package/dist/core/index.js +9 -0
- package/dist/core/index.js.map +1 -0
- package/dist/core/instructions.d.ts +10 -0
- package/dist/core/instructions.d.ts.map +1 -0
- package/dist/core/instructions.js +33 -0
- package/dist/core/instructions.js.map +1 -0
- package/dist/core/permissions.d.ts +10 -0
- package/dist/core/permissions.d.ts.map +1 -0
- package/dist/core/permissions.js +67 -0
- package/dist/core/permissions.js.map +1 -0
- package/dist/core/policy-evaluator.d.ts +5 -0
- package/dist/core/policy-evaluator.d.ts.map +1 -0
- package/dist/core/policy-evaluator.js +161 -0
- package/dist/core/policy-evaluator.js.map +1 -0
- package/dist/core/skill-resolver.d.ts +8 -0
- package/dist/core/skill-resolver.d.ts.map +1 -0
- package/dist/core/skill-resolver.js +17 -0
- package/dist/core/skill-resolver.js.map +1 -0
- package/dist/core/skills.d.ts +4 -0
- package/dist/core/skills.d.ts.map +1 -0
- package/dist/core/skills.js +14 -0
- package/dist/core/skills.js.map +1 -0
- package/dist/core/types.d.ts +117 -0
- package/dist/core/types.d.ts.map +1 -0
- package/dist/core/types.js +6 -0
- package/dist/core/types.js.map +1 -0
- package/dist/detector/index.d.ts +7 -0
- package/dist/detector/index.d.ts.map +1 -0
- package/dist/detector/index.js +57 -0
- package/dist/detector/index.js.map +1 -0
- package/dist/diff/index.d.ts +10 -0
- package/dist/diff/index.d.ts.map +1 -0
- package/dist/diff/index.js +26 -0
- package/dist/diff/index.js.map +1 -0
- package/dist/explainer/index.d.ts +3 -0
- package/dist/explainer/index.d.ts.map +1 -0
- package/dist/explainer/index.js +85 -0
- package/dist/explainer/index.js.map +1 -0
- package/dist/generator/file-policies.d.ts +2 -0
- package/dist/generator/file-policies.d.ts.map +1 -0
- package/dist/generator/file-policies.js +4 -0
- package/dist/generator/file-policies.js.map +1 -0
- package/dist/generator/index.d.ts +5 -0
- package/dist/generator/index.d.ts.map +1 -0
- package/dist/generator/index.js +10 -0
- package/dist/generator/index.js.map +1 -0
- package/dist/generator/renderers/agent-md.d.ts +5 -0
- package/dist/generator/renderers/agent-md.d.ts.map +1 -0
- package/dist/generator/renderers/agent-md.js +66 -0
- package/dist/generator/renderers/agent-md.js.map +1 -0
- package/dist/generator/renderers/agents-md.d.ts +4 -0
- package/dist/generator/renderers/agents-md.d.ts.map +1 -0
- package/dist/generator/renderers/agents-md.js +86 -0
- package/dist/generator/renderers/agents-md.js.map +1 -0
- package/dist/generator/renderers/claude-md.d.ts +4 -0
- package/dist/generator/renderers/claude-md.d.ts.map +1 -0
- package/dist/generator/renderers/claude-md.js +68 -0
- package/dist/generator/renderers/claude-md.js.map +1 -0
- package/dist/generator/renderers/codex-config.d.ts +4 -0
- package/dist/generator/renderers/codex-config.d.ts.map +1 -0
- package/dist/generator/renderers/codex-config.js +145 -0
- package/dist/generator/renderers/codex-config.js.map +1 -0
- package/dist/generator/renderers/codex-skill-md.d.ts +4 -0
- package/dist/generator/renderers/codex-skill-md.d.ts.map +1 -0
- package/dist/generator/renderers/codex-skill-md.js +47 -0
- package/dist/generator/renderers/codex-skill-md.js.map +1 -0
- package/dist/generator/renderers/settings-json.d.ts +5 -0
- package/dist/generator/renderers/settings-json.d.ts.map +1 -0
- package/dist/generator/renderers/settings-json.js +100 -0
- package/dist/generator/renderers/settings-json.js.map +1 -0
- package/dist/generator/renderers/skill-md.d.ts +4 -0
- package/dist/generator/renderers/skill-md.d.ts.map +1 -0
- package/dist/generator/renderers/skill-md.js +44 -0
- package/dist/generator/renderers/skill-md.js.map +1 -0
- package/dist/generator/state.d.ts +14 -0
- package/dist/generator/state.d.ts.map +1 -0
- package/dist/generator/state.js +76 -0
- package/dist/generator/state.js.map +1 -0
- package/dist/generator/targets/claude.d.ts +3 -0
- package/dist/generator/targets/claude.d.ts.map +1 -0
- package/dist/generator/targets/claude.js +24 -0
- package/dist/generator/targets/claude.js.map +1 -0
- package/dist/generator/targets/codex.d.ts +3 -0
- package/dist/generator/targets/codex.d.ts.map +1 -0
- package/dist/generator/targets/codex.js +19 -0
- package/dist/generator/targets/codex.js.map +1 -0
- package/dist/generator/targets/index.d.ts +4 -0
- package/dist/generator/targets/index.d.ts.map +1 -0
- package/dist/generator/targets/index.js +10 -0
- package/dist/generator/targets/index.js.map +1 -0
- package/dist/generator/targets/types.d.ts +8 -0
- package/dist/generator/targets/types.d.ts.map +1 -0
- package/dist/generator/targets/types.js +2 -0
- package/dist/generator/targets/types.js.map +1 -0
- package/dist/generator/types.d.ts +11 -0
- package/dist/generator/types.d.ts.map +1 -0
- package/dist/generator/types.js +2 -0
- package/dist/generator/types.js.map +1 -0
- package/dist/generator/writer.d.ts +5 -0
- package/dist/generator/writer.d.ts.map +1 -0
- package/dist/generator/writer.js +14 -0
- package/dist/generator/writer.js.map +1 -0
- package/dist/importer/index.d.ts +12 -0
- package/dist/importer/index.d.ts.map +1 -0
- package/dist/importer/index.js +295 -0
- package/dist/importer/index.js.map +1 -0
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +25 -0
- package/dist/index.js.map +1 -0
- package/dist/manifest/compat.d.ts +6 -0
- package/dist/manifest/compat.d.ts.map +1 -0
- package/dist/manifest/compat.js +56 -0
- package/dist/manifest/compat.js.map +1 -0
- package/dist/manifest/defaults.d.ts +4 -0
- package/dist/manifest/defaults.d.ts.map +1 -0
- package/dist/manifest/defaults.js +28 -0
- package/dist/manifest/defaults.js.map +1 -0
- package/dist/manifest/normalize.d.ts +14 -0
- package/dist/manifest/normalize.d.ts.map +1 -0
- package/dist/manifest/normalize.js +353 -0
- package/dist/manifest/normalize.js.map +1 -0
- package/dist/manifest/reader.d.ts +7 -0
- package/dist/manifest/reader.d.ts.map +1 -0
- package/dist/manifest/reader.js +36 -0
- package/dist/manifest/reader.js.map +1 -0
- package/dist/manifest/schema-validator.d.ts +13 -0
- package/dist/manifest/schema-validator.d.ts.map +1 -0
- package/dist/manifest/schema-validator.js +33 -0
- package/dist/manifest/schema-validator.js.map +1 -0
- package/dist/manifest/types.d.ts +150 -0
- package/dist/manifest/types.d.ts.map +1 -0
- package/dist/manifest/types.js +4 -0
- package/dist/manifest/types.js.map +1 -0
- package/dist/manifest/writer.d.ts +3 -0
- package/dist/manifest/writer.d.ts.map +1 -0
- package/dist/manifest/writer.js +10 -0
- package/dist/manifest/writer.js.map +1 -0
- package/dist/presets/index.d.ts +6 -0
- package/dist/presets/index.d.ts.map +1 -0
- package/dist/presets/index.js +56 -0
- package/dist/presets/index.js.map +1 -0
- package/dist/presets/types.d.ts +12 -0
- package/dist/presets/types.d.ts.map +1 -0
- package/dist/presets/types.js +2 -0
- package/dist/presets/types.js.map +1 -0
- package/dist/renderers/claude/agent-md.d.ts +5 -0
- package/dist/renderers/claude/agent-md.d.ts.map +1 -0
- package/dist/renderers/claude/agent-md.js +45 -0
- package/dist/renderers/claude/agent-md.js.map +1 -0
- package/dist/renderers/claude/docs.d.ts +5 -0
- package/dist/renderers/claude/docs.d.ts.map +1 -0
- package/dist/renderers/claude/docs.js +155 -0
- package/dist/renderers/claude/docs.js.map +1 -0
- package/dist/renderers/claude/index.d.ts +5 -0
- package/dist/renderers/claude/index.d.ts.map +1 -0
- package/dist/renderers/claude/index.js +23 -0
- package/dist/renderers/claude/index.js.map +1 -0
- package/dist/renderers/claude/policy-mapper.d.ts +10 -0
- package/dist/renderers/claude/policy-mapper.d.ts.map +1 -0
- package/dist/renderers/claude/policy-mapper.js +40 -0
- package/dist/renderers/claude/policy-mapper.js.map +1 -0
- package/dist/renderers/claude/settings.d.ts +5 -0
- package/dist/renderers/claude/settings.d.ts.map +1 -0
- package/dist/renderers/claude/settings.js +77 -0
- package/dist/renderers/claude/settings.js.map +1 -0
- package/dist/renderers/claude/skill-map.d.ts +16 -0
- package/dist/renderers/claude/skill-map.d.ts.map +1 -0
- package/dist/renderers/claude/skill-map.js +39 -0
- package/dist/renderers/claude/skill-map.js.map +1 -0
- package/dist/renderers/claude/skill-md.d.ts +4 -0
- package/dist/renderers/claude/skill-md.d.ts.map +1 -0
- package/dist/renderers/claude/skill-md.js +35 -0
- package/dist/renderers/claude/skill-md.js.map +1 -0
- package/dist/renderers/claude/tools.d.ts +4 -0
- package/dist/renderers/claude/tools.d.ts.map +1 -0
- package/dist/renderers/claude/tools.js +12 -0
- package/dist/renderers/claude/tools.js.map +1 -0
- package/dist/renderers/index.d.ts +3 -0
- package/dist/renderers/index.d.ts.map +1 -0
- package/dist/renderers/index.js +2 -0
- package/dist/renderers/index.js.map +1 -0
- package/dist/renderers/types.d.ts +12 -0
- package/dist/renderers/types.d.ts.map +1 -0
- package/dist/renderers/types.js +2 -0
- package/dist/renderers/types.js.map +1 -0
- package/dist/team-templates/policies.d.ts +4 -0
- package/dist/team-templates/policies.d.ts.map +1 -0
- package/dist/team-templates/policies.js +69 -0
- package/dist/team-templates/policies.js.map +1 -0
- package/dist/team-templates/presets.d.ts +6 -0
- package/dist/team-templates/presets.d.ts.map +1 -0
- package/dist/team-templates/presets.js +14 -0
- package/dist/team-templates/presets.js.map +1 -0
- package/dist/team-templates/roles.d.ts +22 -0
- package/dist/team-templates/roles.d.ts.map +1 -0
- package/dist/team-templates/roles.js +117 -0
- package/dist/team-templates/roles.js.map +1 -0
- package/dist/types/manifest.d.ts +11 -0
- package/dist/types/manifest.d.ts.map +1 -0
- package/dist/types/manifest.js +16 -0
- package/dist/types/manifest.js.map +1 -0
- package/dist/utils/chalk-helpers.d.ts +18 -0
- package/dist/utils/chalk-helpers.d.ts.map +1 -0
- package/dist/utils/chalk-helpers.js +51 -0
- package/dist/utils/chalk-helpers.js.map +1 -0
- package/dist/utils/prompts.d.ts +28 -0
- package/dist/utils/prompts.d.ts.map +1 -0
- package/dist/utils/prompts.js +51 -0
- package/dist/utils/prompts.js.map +1 -0
- package/dist/validator/checks/handoff-graph.d.ts +5 -0
- package/dist/validator/checks/handoff-graph.d.ts.map +1 -0
- package/dist/validator/checks/handoff-graph.js +65 -0
- package/dist/validator/checks/handoff-graph.js.map +1 -0
- package/dist/validator/checks/instruction-blocks.d.ts +5 -0
- package/dist/validator/checks/instruction-blocks.d.ts.map +1 -0
- package/dist/validator/checks/instruction-blocks.js +45 -0
- package/dist/validator/checks/instruction-blocks.js.map +1 -0
- package/dist/validator/checks/role-warnings.d.ts +5 -0
- package/dist/validator/checks/role-warnings.d.ts.map +1 -0
- package/dist/validator/checks/role-warnings.js +50 -0
- package/dist/validator/checks/role-warnings.js.map +1 -0
- package/dist/validator/checks/security-baseline.d.ts +3 -0
- package/dist/validator/checks/security-baseline.d.ts.map +1 -0
- package/dist/validator/checks/security-baseline.js +73 -0
- package/dist/validator/checks/security-baseline.js.map +1 -0
- package/dist/validator/checks/tool-conflicts.d.ts +5 -0
- package/dist/validator/checks/tool-conflicts.d.ts.map +1 -0
- package/dist/validator/checks/tool-conflicts.js +33 -0
- package/dist/validator/checks/tool-conflicts.js.map +1 -0
- package/dist/validator/index.d.ts +5 -0
- package/dist/validator/index.d.ts.map +1 -0
- package/dist/validator/index.js +28 -0
- package/dist/validator/index.js.map +1 -0
- package/dist/validator/reporter.d.ts +4 -0
- package/dist/validator/reporter.d.ts.map +1 -0
- package/dist/validator/reporter.js +76 -0
- package/dist/validator/reporter.js.map +1 -0
- package/dist/validator/types.d.ts +10 -0
- package/dist/validator/types.d.ts.map +1 -0
- package/dist/validator/types.js +2 -0
- package/dist/validator/types.js.map +1 -0
- package/dist/wizard/index.d.ts +7 -0
- package/dist/wizard/index.d.ts.map +1 -0
- package/dist/wizard/index.js +57 -0
- package/dist/wizard/index.js.map +1 -0
- package/dist/wizard/steps/agent-customization.d.ts +5 -0
- package/dist/wizard/steps/agent-customization.d.ts.map +1 -0
- package/dist/wizard/steps/agent-customization.js +68 -0
- package/dist/wizard/steps/agent-customization.js.map +1 -0
- package/dist/wizard/steps/confirm-generate.d.ts +3 -0
- package/dist/wizard/steps/confirm-generate.d.ts.map +1 -0
- package/dist/wizard/steps/confirm-generate.js +19 -0
- package/dist/wizard/steps/confirm-generate.js.map +1 -0
- package/dist/wizard/steps/custom-team.d.ts +3 -0
- package/dist/wizard/steps/custom-team.d.ts.map +1 -0
- package/dist/wizard/steps/custom-team.js +17 -0
- package/dist/wizard/steps/custom-team.js.map +1 -0
- package/dist/wizard/steps/project-context.d.ts +6 -0
- package/dist/wizard/steps/project-context.d.ts.map +1 -0
- package/dist/wizard/steps/project-context.js +24 -0
- package/dist/wizard/steps/project-context.js.map +1 -0
- package/dist/wizard/steps/team-selection.d.ts +5 -0
- package/dist/wizard/steps/team-selection.d.ts.map +1 -0
- package/dist/wizard/steps/team-selection.js +44 -0
- package/dist/wizard/steps/team-selection.js.map +1 -0
- package/package.json +56 -0
- package/schema/teamcast.schema.json +580 -0
- package/templates/presets/feature-team.yaml +77 -0
- package/templates/presets/research-and-build.yaml +69 -0
- package/templates/presets/secure-dev.yaml +93 -0
- package/templates/presets/solo-dev.yaml +32 -0
|
@@ -0,0 +1,65 @@
|
|
|
1
|
+
import { agentHasSkill } from '../../core/skill-resolver.js';
|
|
2
|
+
function detectCycles(graph) {
|
|
3
|
+
const visited = new Set();
|
|
4
|
+
const stack = new Set();
|
|
5
|
+
const cycles = [];
|
|
6
|
+
function dfs(node, path) {
|
|
7
|
+
if (stack.has(node)) {
|
|
8
|
+
const cycleStart = path.indexOf(node);
|
|
9
|
+
cycles.push([...path.slice(cycleStart), node]);
|
|
10
|
+
return;
|
|
11
|
+
}
|
|
12
|
+
if (visited.has(node))
|
|
13
|
+
return;
|
|
14
|
+
visited.add(node);
|
|
15
|
+
stack.add(node);
|
|
16
|
+
for (const neighbor of graph.get(node) ?? []) {
|
|
17
|
+
dfs(neighbor, [...path, node]);
|
|
18
|
+
}
|
|
19
|
+
stack.delete(node);
|
|
20
|
+
}
|
|
21
|
+
for (const node of graph.keys()) {
|
|
22
|
+
dfs(node, []);
|
|
23
|
+
}
|
|
24
|
+
return cycles;
|
|
25
|
+
}
|
|
26
|
+
export function checkHandoffGraph(team, skillMap) {
|
|
27
|
+
const results = [];
|
|
28
|
+
const agentIds = new Set(Object.keys(team.agents));
|
|
29
|
+
const graph = new Map();
|
|
30
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
31
|
+
graph.set(agentId, agent.metadata?.handoffs ?? []);
|
|
32
|
+
}
|
|
33
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
34
|
+
for (const target of agent.metadata?.handoffs ?? []) {
|
|
35
|
+
if (!agentIds.has(target)) {
|
|
36
|
+
results.push({
|
|
37
|
+
severity: 'error',
|
|
38
|
+
category: 'Handoff graph',
|
|
39
|
+
message: `Agent "${agentId}" delegates to "${target}", but "${target}" is not defined`,
|
|
40
|
+
agent: agentId,
|
|
41
|
+
});
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
46
|
+
if ((agent.metadata?.handoffs?.length ?? 0) > 0 &&
|
|
47
|
+
!agentHasSkill(agent.runtime.tools ?? [], 'delegate', skillMap)) {
|
|
48
|
+
results.push({
|
|
49
|
+
severity: 'error',
|
|
50
|
+
category: 'Handoff graph',
|
|
51
|
+
message: `Agent "${agentId}" has handoffs but "Agent" is not in its tools list`,
|
|
52
|
+
agent: agentId,
|
|
53
|
+
});
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
for (const cycle of detectCycles(graph)) {
|
|
57
|
+
results.push({
|
|
58
|
+
severity: 'error',
|
|
59
|
+
category: 'Handoff graph',
|
|
60
|
+
message: `Cyclic handoff detected: ${cycle.join(' -> ')}`,
|
|
61
|
+
});
|
|
62
|
+
}
|
|
63
|
+
return results;
|
|
64
|
+
}
|
|
65
|
+
//# sourceMappingURL=handoff-graph.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"handoff-graph.js","sourceRoot":"","sources":["../../../src/validator/checks/handoff-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAqB,MAAM,8BAA8B,CAAC;AAIhF,SAAS,YAAY,CAAC,KAA4B;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,SAAS,GAAG,CAAC,IAAY,EAAE,IAAc;QACvC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAE9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEhB,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAc,EACd,QAAsB;IAEtB,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,eAAe;oBACzB,OAAO,EAAE,UAAU,OAAO,mBAAmB,MAAM,WAAW,MAAM,kBAAkB;oBACtF,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,IACE,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC3C,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAC/D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,UAAU,OAAO,qDAAqD;gBAC/E,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,4BAA4B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import { type SkillToolMap } from '../../core/skill-resolver.js';
|
|
2
|
+
import type { CoreTeam } from '../../core/types.js';
|
|
3
|
+
import type { ValidationResult } from '../types.js';
|
|
4
|
+
export declare function checkInstructionBlocks(team: CoreTeam, skillMap: SkillToolMap): ValidationResult[];
|
|
5
|
+
//# sourceMappingURL=instruction-blocks.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"instruction-blocks.d.ts","sourceRoot":"","sources":["../../../src/validator/checks/instruction-blocks.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,GAAG,gBAAgB,EAAE,CA+CjG"}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
import { INSTRUCTION_BLOCK_KINDS } from '../../core/instructions.js';
|
|
2
|
+
import { agentHasSkill } from '../../core/skill-resolver.js';
|
|
3
|
+
export function checkInstructionBlocks(team, skillMap) {
|
|
4
|
+
const results = [];
|
|
5
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
6
|
+
const seenKinds = new Set();
|
|
7
|
+
for (const block of agent.instructions) {
|
|
8
|
+
if (!INSTRUCTION_BLOCK_KINDS.includes(block.kind)) {
|
|
9
|
+
results.push({
|
|
10
|
+
severity: 'error',
|
|
11
|
+
category: 'Instruction blocks',
|
|
12
|
+
message: `Agent "${agentId}" uses unknown instruction block kind "${block.kind}"`,
|
|
13
|
+
agent: agentId,
|
|
14
|
+
});
|
|
15
|
+
}
|
|
16
|
+
if (!block.content.trim()) {
|
|
17
|
+
results.push({
|
|
18
|
+
severity: 'error',
|
|
19
|
+
category: 'Instruction blocks',
|
|
20
|
+
message: `Agent "${agentId}" has an empty "${block.kind}" instruction block`,
|
|
21
|
+
agent: agentId,
|
|
22
|
+
});
|
|
23
|
+
}
|
|
24
|
+
if (seenKinds.has(block.kind)) {
|
|
25
|
+
results.push({
|
|
26
|
+
severity: 'warning',
|
|
27
|
+
category: 'Instruction blocks',
|
|
28
|
+
message: `Agent "${agentId}" defines multiple "${block.kind}" instruction blocks - prefer one block per kind for predictable composition`,
|
|
29
|
+
agent: agentId,
|
|
30
|
+
});
|
|
31
|
+
}
|
|
32
|
+
seenKinds.add(block.kind);
|
|
33
|
+
}
|
|
34
|
+
if (seenKinds.has('delegation') && !agentHasSkill(agent.runtime.tools ?? [], 'delegate', skillMap)) {
|
|
35
|
+
results.push({
|
|
36
|
+
severity: 'warning',
|
|
37
|
+
category: 'Instruction blocks',
|
|
38
|
+
message: `Agent "${agentId}" has a delegation instruction block but cannot delegate via tool access`,
|
|
39
|
+
agent: agentId,
|
|
40
|
+
});
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
return results;
|
|
44
|
+
}
|
|
45
|
+
//# sourceMappingURL=instruction-blocks.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"instruction-blocks.js","sourceRoot":"","sources":["../../../src/validator/checks/instruction-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAqB,MAAM,8BAA8B,CAAC;AAIhF,MAAM,UAAU,sBAAsB,CAAC,IAAc,EAAE,QAAsB;IAC3E,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QAEpC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,oBAAoB;oBAC9B,OAAO,EAAE,UAAU,OAAO,0CAA0C,KAAK,CAAC,IAAI,GAAG;oBACjF,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,oBAAoB;oBAC9B,OAAO,EAAE,UAAU,OAAO,mBAAmB,KAAK,CAAC,IAAI,qBAAqB;oBAC5E,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,oBAAoB;oBAC9B,OAAO,EAAE,UAAU,OAAO,uBAAuB,KAAK,CAAC,IAAI,8EAA8E;oBACzI,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnG,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,oBAAoB;gBAC9B,OAAO,EAAE,UAAU,OAAO,0EAA0E;gBACpG,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import { type SkillToolMap } from '../../core/skill-resolver.js';
|
|
2
|
+
import type { CoreTeam } from '../../core/types.js';
|
|
3
|
+
import type { ValidationResult } from '../types.js';
|
|
4
|
+
export declare function checkRoleWarnings(team: CoreTeam, skillMap: SkillToolMap): ValidationResult[];
|
|
5
|
+
//# sourceMappingURL=role-warnings.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"role-warnings.d.ts","sourceRoot":"","sources":["../../../src/validator/checks/role-warnings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,YAAY,GACrB,gBAAgB,EAAE,CAqDpB"}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
import { agentHasSkill } from '../../core/skill-resolver.js';
|
|
2
|
+
export function checkRoleWarnings(team, skillMap) {
|
|
3
|
+
const results = [];
|
|
4
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
5
|
+
const tools = agent.runtime.tools ?? [];
|
|
6
|
+
const id = agentId.toLowerCase();
|
|
7
|
+
if (id === 'orchestrator' || id.includes('coordinator')) {
|
|
8
|
+
if (agentHasSkill(tools, 'write_files', skillMap)) {
|
|
9
|
+
results.push({
|
|
10
|
+
severity: 'warning',
|
|
11
|
+
category: 'Role separation',
|
|
12
|
+
message: `Agent "${agentId}" is an orchestrator but has file-write tools - consider keeping orchestrators read-only`,
|
|
13
|
+
agent: agentId,
|
|
14
|
+
});
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
if (id === 'developer' || id.includes('coder') || id.includes('implementer')) {
|
|
18
|
+
if (agentHasSkill(tools, 'web', skillMap)) {
|
|
19
|
+
results.push({
|
|
20
|
+
severity: 'warning',
|
|
21
|
+
category: 'Role separation',
|
|
22
|
+
message: `Agent "${agentId}" is a developer but has internet access - consider restricting network access for code-writing agents`,
|
|
23
|
+
agent: agentId,
|
|
24
|
+
});
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
if (id === 'reviewer' || id.includes('review') || id.includes('auditor')) {
|
|
28
|
+
if (agentHasSkill(tools, 'write_files', skillMap)) {
|
|
29
|
+
results.push({
|
|
30
|
+
severity: 'warning',
|
|
31
|
+
category: 'Role separation',
|
|
32
|
+
message: `Agent "${agentId}" is a reviewer but has file-write tools - reviewers should only read and recommend`,
|
|
33
|
+
agent: agentId,
|
|
34
|
+
});
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
if (id === 'planner' || id === 'analyzer') {
|
|
38
|
+
if (agentHasSkill(tools, 'execute', skillMap)) {
|
|
39
|
+
results.push({
|
|
40
|
+
severity: 'warning',
|
|
41
|
+
category: 'Role separation',
|
|
42
|
+
message: `Agent "${agentId}" is a planner/analyzer but has Bash access - consider restricting to read-only`,
|
|
43
|
+
agent: agentId,
|
|
44
|
+
});
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
return results;
|
|
49
|
+
}
|
|
50
|
+
//# sourceMappingURL=role-warnings.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"role-warnings.js","sourceRoot":"","sources":["../../../src/validator/checks/role-warnings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAqB,MAAM,8BAA8B,CAAC;AAIhF,MAAM,UAAU,iBAAiB,CAC/B,IAAc,EACd,QAAsB;IAEtB,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAEjC,IAAI,EAAE,KAAK,cAAc,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACxD,IAAI,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,iBAAiB;oBAC3B,OAAO,EAAE,UAAU,OAAO,0FAA0F;oBACpH,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,IAAI,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,iBAAiB;oBAC3B,OAAO,EAAE,UAAU,OAAO,wGAAwG;oBAClI,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,UAAU,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzE,IAAI,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,iBAAiB;oBAC3B,OAAO,EAAE,UAAU,OAAO,qFAAqF;oBAC/G,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;YAC1C,IAAI,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,iBAAiB;oBAC3B,OAAO,EAAE,UAAU,OAAO,iFAAiF;oBAC3G,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"security-baseline.d.ts","sourceRoot":"","sources":["../../../src/validator/checks/security-baseline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AAgB7D,eAAO,MAAM,qBAAqB,EAAE,OAsEnC,CAAC"}
|
|
@@ -0,0 +1,73 @@
|
|
|
1
|
+
function hasDotEnvDeny(team) {
|
|
2
|
+
const abstractDeny = team.policies?.permissions?.deny ?? [];
|
|
3
|
+
const rawDeny = team.policies?.permissions?.rawRules?.deny ?? [];
|
|
4
|
+
if (abstractDeny.includes('env.write')) {
|
|
5
|
+
return true;
|
|
6
|
+
}
|
|
7
|
+
return rawDeny.some((rule) => {
|
|
8
|
+
const lower = rule.toLowerCase();
|
|
9
|
+
return lower.includes('.env') || /write\(.*\.env/i.test(lower) || /edit\(.*\.env/i.test(lower);
|
|
10
|
+
});
|
|
11
|
+
}
|
|
12
|
+
export const checkSecurityBaseline = (team) => {
|
|
13
|
+
const results = [];
|
|
14
|
+
if (!hasDotEnvDeny(team)) {
|
|
15
|
+
results.push({
|
|
16
|
+
severity: 'warning',
|
|
17
|
+
category: 'Security',
|
|
18
|
+
message: 'No deny rule for .env files - consider adding "Write(.env*)" and "Edit(.env*)" to deny list',
|
|
19
|
+
});
|
|
20
|
+
}
|
|
21
|
+
if (!team.policies?.sandbox?.enabled) {
|
|
22
|
+
results.push({
|
|
23
|
+
severity: 'warning',
|
|
24
|
+
category: 'Security',
|
|
25
|
+
message: 'Sandbox is disabled - consider enabling it for better isolation',
|
|
26
|
+
});
|
|
27
|
+
}
|
|
28
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
29
|
+
if (agent.runtime.permissionMode === 'bypassPermissions') {
|
|
30
|
+
results.push({
|
|
31
|
+
severity: 'warning',
|
|
32
|
+
category: 'Security',
|
|
33
|
+
message: `Agent "${agentId}" uses permission_mode: bypassPermissions - this skips all permission checks`,
|
|
34
|
+
agent: agentId,
|
|
35
|
+
});
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
const abstractAllow = team.policies?.permissions?.allow ?? [];
|
|
39
|
+
const allow = team.policies?.permissions?.rawRules?.allow ?? [];
|
|
40
|
+
const dangerousAbstractPermissions = ['destructive-shell', 'dynamic-exec', 'env.write'];
|
|
41
|
+
for (const permission of abstractAllow) {
|
|
42
|
+
if (dangerousAbstractPermissions.includes(permission)) {
|
|
43
|
+
results.push({
|
|
44
|
+
severity: 'warning',
|
|
45
|
+
category: 'Security',
|
|
46
|
+
message: `Allow permissions include high-risk capability "${permission}"`,
|
|
47
|
+
});
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
for (const rule of allow) {
|
|
51
|
+
if (rule.includes('dangerously-skip-permissions')) {
|
|
52
|
+
results.push({
|
|
53
|
+
severity: 'error',
|
|
54
|
+
category: 'Security',
|
|
55
|
+
message: `Allow rule contains "dangerously-skip-permissions": "${rule}" - remove this rule`,
|
|
56
|
+
});
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
const dangerousPatterns = ['rm -rf', 'git push --force', 'chmod 777', 'sudo'];
|
|
60
|
+
for (const rule of allow) {
|
|
61
|
+
for (const pattern of dangerousPatterns) {
|
|
62
|
+
if (rule.toLowerCase().includes(pattern)) {
|
|
63
|
+
results.push({
|
|
64
|
+
severity: 'warning',
|
|
65
|
+
category: 'Security',
|
|
66
|
+
message: `Allow rule may be dangerous: "${rule}"`,
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
}
|
|
71
|
+
return results;
|
|
72
|
+
};
|
|
73
|
+
//# sourceMappingURL=security-baseline.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"security-baseline.js","sourceRoot":"","sources":["../../../src/validator/checks/security-baseline.ts"],"names":[],"mappings":"AAGA,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAEjE,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAY,CAC5C,IAAc,EACM,EAAE;IACtB,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,6FAA6F;SACvG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,iEAAiE;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,UAAU,OAAO,8EAA8E;gBACxG,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAChE,MAAM,4BAA4B,GAAG,CAAC,mBAAmB,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IAExF,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;QACvC,IAAI,4BAA4B,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,mDAAmD,UAAU,GAAG;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,wDAAwD,IAAI,sBAAsB;aAC5F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,iCAAiC,IAAI,GAAG;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import { type SkillToolMap } from '../../core/skill-resolver.js';
|
|
2
|
+
import type { CoreTeam } from '../../core/types.js';
|
|
3
|
+
import type { ValidationResult } from '../types.js';
|
|
4
|
+
export declare function checkToolConflicts(team: CoreTeam, skillMap: SkillToolMap): ValidationResult[];
|
|
5
|
+
//# sourceMappingURL=tool-conflicts.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tool-conflicts.d.ts","sourceRoot":"","sources":["../../../src/validator/checks/tool-conflicts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,YAAY,GACrB,gBAAgB,EAAE,CAoCpB"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { agentHasSkill } from '../../core/skill-resolver.js';
|
|
2
|
+
export function checkToolConflicts(team, skillMap) {
|
|
3
|
+
const results = [];
|
|
4
|
+
for (const [agentId, agent] of Object.entries(team.agents)) {
|
|
5
|
+
// runtime.tools and runtime.disallowedTools are already expanded to CanonicalTool[]
|
|
6
|
+
// during normalization: AgentSkill values (e.g. 'read_files') are resolved to their
|
|
7
|
+
// concrete tool equivalents (e.g. 'Read', 'Grep', 'Glob') before this checker runs.
|
|
8
|
+
const allow = new Set(agent.runtime.tools ?? []);
|
|
9
|
+
const deny = new Set(agent.runtime.disallowedTools ?? []);
|
|
10
|
+
for (const tool of allow) {
|
|
11
|
+
if (deny.has(tool)) {
|
|
12
|
+
results.push({
|
|
13
|
+
severity: 'error',
|
|
14
|
+
category: 'Tool conflicts',
|
|
15
|
+
message: `Agent "${agentId}" has "${tool}" in both tools and disallowed_tools`,
|
|
16
|
+
agent: agentId,
|
|
17
|
+
});
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
const desc = agent.description.toLowerCase();
|
|
21
|
+
if ((desc.includes('read-only') || desc.includes('cannot modify') || desc.includes('does not write')) &&
|
|
22
|
+
agentHasSkill(agent.runtime.tools ?? [], 'write_files', skillMap)) {
|
|
23
|
+
results.push({
|
|
24
|
+
severity: 'warning',
|
|
25
|
+
category: 'Tool conflicts',
|
|
26
|
+
message: `Agent "${agentId}" description suggests read-only but has write tools in tools list`,
|
|
27
|
+
agent: agentId,
|
|
28
|
+
});
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
return results;
|
|
32
|
+
}
|
|
33
|
+
//# sourceMappingURL=tool-conflicts.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tool-conflicts.js","sourceRoot":"","sources":["../../../src/validator/checks/tool-conflicts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAqB,MAAM,8BAA8B,CAAC;AAIhF,MAAM,UAAU,kBAAkB,CAChC,IAAc,EACd,QAAsB;IAEtB,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,oFAAoF;QACpF,oFAAoF;QACpF,oFAAoF;QACpF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAE1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,gBAAgB;oBAC1B,OAAO,EAAE,UAAU,OAAO,UAAU,IAAI,sCAAsC;oBAC9E,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC7C,IACE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACjG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,EACjE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO,EAAE,UAAU,OAAO,oEAAoE;gBAC9F,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { TeamCastManifest } from '../manifest/types.js';
|
|
2
|
+
import type { CoreTeam } from '../core/types.js';
|
|
3
|
+
import type { ValidationResult, Checker } from './types.js';
|
|
4
|
+
export declare function runValidation(input: TeamCastManifest | CoreTeam, extraCheckers?: Checker[]): ValidationResult[];
|
|
5
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validator/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAqB5D,wBAAgB,aAAa,CAC3B,KAAK,EAAE,gBAAgB,GAAG,QAAQ,EAClC,aAAa,CAAC,EAAE,OAAO,EAAE,GACxB,gBAAgB,EAAE,CAWpB"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import { isCoreTeam } from '../core/guards.js';
|
|
2
|
+
import { applyDefaults } from '../manifest/defaults.js';
|
|
3
|
+
import { checkHandoffGraph } from './checks/handoff-graph.js';
|
|
4
|
+
import { checkToolConflicts } from './checks/tool-conflicts.js';
|
|
5
|
+
import { checkRoleWarnings } from './checks/role-warnings.js';
|
|
6
|
+
import { checkSecurityBaseline } from './checks/security-baseline.js';
|
|
7
|
+
import { checkInstructionBlocks } from './checks/instruction-blocks.js';
|
|
8
|
+
import { evaluatePolicyAssertions } from '../core/policy-evaluator.js';
|
|
9
|
+
import { CLAUDE_SKILL_MAP } from '../renderers/claude/skill-map.js';
|
|
10
|
+
const skillMap = CLAUDE_SKILL_MAP;
|
|
11
|
+
const CHECKERS = [
|
|
12
|
+
(team) => checkHandoffGraph(team, skillMap),
|
|
13
|
+
(team) => checkToolConflicts(team, skillMap),
|
|
14
|
+
(team) => checkRoleWarnings(team, skillMap),
|
|
15
|
+
checkSecurityBaseline,
|
|
16
|
+
(team) => checkInstructionBlocks(team, skillMap),
|
|
17
|
+
(team) => evaluatePolicyAssertions(team, skillMap),
|
|
18
|
+
];
|
|
19
|
+
export function runValidation(input, extraCheckers) {
|
|
20
|
+
const team = isCoreTeam(input) ? input : applyDefaults(input);
|
|
21
|
+
const results = [];
|
|
22
|
+
const checkers = extraCheckers ? [...CHECKERS, ...extraCheckers] : CHECKERS;
|
|
23
|
+
for (const checker of checkers) {
|
|
24
|
+
results.push(...checker(team));
|
|
25
|
+
}
|
|
26
|
+
return results;
|
|
27
|
+
}
|
|
28
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validator/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGpE,MAAM,QAAQ,GAAG,gBAAgC,CAAC;AAElD,MAAM,QAAQ,GAAc;IAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC;IAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC;IAC5C,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC;IAC3C,qBAAqB;IACrB,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC;IAChD,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC;CACnD,CAAC;AAEF,MAAM,UAAU,aAAa,CAC3B,KAAkC,EAClC,aAAyB;IAEzB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAyB,CAAC,CAAC;IAClF,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE5E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import type { ValidationResult } from './types.js';
|
|
2
|
+
export declare function printValidationReport(results: ValidationResult[], policyAssertionCount?: number): void;
|
|
3
|
+
export declare function hasErrors(results: ValidationResult[]): boolean;
|
|
4
|
+
//# sourceMappingURL=reporter.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../../src/validator/reporter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA6BnD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,oBAAoB,CAAC,EAAE,MAAM,GAC5B,IAAI,CA2DN;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAE9D"}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
import chalk from 'chalk';
|
|
2
|
+
const CATEGORY_ORDER = [
|
|
3
|
+
{ label: 'Handoff graph', okDescription: 'delegation paths verified' },
|
|
4
|
+
{ label: 'Tool conflicts', okDescription: 'no allow/deny overlaps' },
|
|
5
|
+
{ label: 'Role separation', okDescription: 'roles match capabilities' },
|
|
6
|
+
{ label: 'Security', okDescription: 'sandbox and permissions checked' },
|
|
7
|
+
{ label: 'Instruction blocks', okDescription: 'all blocks valid' },
|
|
8
|
+
{ label: 'policy', okDescription: 'Policy assertions' },
|
|
9
|
+
];
|
|
10
|
+
function renderCategoryRow(icon, label, description, items) {
|
|
11
|
+
console.log(` ${icon} ${chalk.bold(label)} ${chalk.dim('—')} ${description}`);
|
|
12
|
+
for (const r of items) {
|
|
13
|
+
const prefix = r.severity === 'error' ? chalk.red(' [error]') : chalk.yellow(' [warn]');
|
|
14
|
+
console.log(` ${prefix} ${r.message}`);
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
export function printValidationReport(results, policyAssertionCount) {
|
|
18
|
+
// Group results by category
|
|
19
|
+
const byCategory = new Map();
|
|
20
|
+
for (const r of results) {
|
|
21
|
+
const existing = byCategory.get(r.category) ?? [];
|
|
22
|
+
byCategory.set(r.category, [...existing, r]);
|
|
23
|
+
}
|
|
24
|
+
console.log('');
|
|
25
|
+
console.log(chalk.bold('Validation results:'));
|
|
26
|
+
for (const meta of CATEGORY_ORDER) {
|
|
27
|
+
const categoryResults = byCategory.get(meta.label) ?? [];
|
|
28
|
+
const errors = categoryResults.filter((r) => r.severity === 'error');
|
|
29
|
+
const warnings = categoryResults.filter((r) => r.severity === 'warning');
|
|
30
|
+
const displayLabel = meta.label === 'policy' ? 'Policy assertions' : meta.label;
|
|
31
|
+
if (errors.length > 0) {
|
|
32
|
+
const desc = chalk.red(`${errors.length} error${errors.length !== 1 ? 's' : ''}`);
|
|
33
|
+
const extra = warnings.length > 0
|
|
34
|
+
? `, ${chalk.yellow(`${warnings.length} warning${warnings.length !== 1 ? 's' : ''}`)}`
|
|
35
|
+
: '';
|
|
36
|
+
renderCategoryRow(chalk.red('[!!]'), displayLabel, desc + extra, [...errors, ...warnings]);
|
|
37
|
+
}
|
|
38
|
+
else if (warnings.length > 0) {
|
|
39
|
+
const desc = chalk.yellow(`${warnings.length} warning${warnings.length !== 1 ? 's' : ''}`);
|
|
40
|
+
renderCategoryRow(chalk.yellow('[--]'), displayLabel, desc, warnings);
|
|
41
|
+
}
|
|
42
|
+
else {
|
|
43
|
+
// Determine ok description
|
|
44
|
+
let okDesc;
|
|
45
|
+
if (meta.label === 'policy' && policyAssertionCount !== undefined) {
|
|
46
|
+
okDesc =
|
|
47
|
+
policyAssertionCount === 0
|
|
48
|
+
? chalk.dim('no assertions defined')
|
|
49
|
+
: chalk.dim(`${policyAssertionCount} rule${policyAssertionCount !== 1 ? 's' : ''} passed`);
|
|
50
|
+
}
|
|
51
|
+
else {
|
|
52
|
+
okDesc = chalk.dim(meta.okDescription);
|
|
53
|
+
}
|
|
54
|
+
console.log(` ${chalk.green('[ok]')} ${chalk.bold(displayLabel)} ${chalk.dim('—')} ${okDesc}`);
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
console.log('');
|
|
58
|
+
const totalErrors = results.filter((r) => r.severity === 'error').length;
|
|
59
|
+
const totalWarnings = results.filter((r) => r.severity === 'warning').length;
|
|
60
|
+
if (totalErrors === 0 && totalWarnings === 0) {
|
|
61
|
+
console.log(chalk.green('All checks passed.'));
|
|
62
|
+
}
|
|
63
|
+
else {
|
|
64
|
+
const parts = [];
|
|
65
|
+
if (totalErrors > 0)
|
|
66
|
+
parts.push(chalk.red(`${totalErrors} error${totalErrors !== 1 ? 's' : ''}`));
|
|
67
|
+
if (totalWarnings > 0)
|
|
68
|
+
parts.push(chalk.yellow(`${totalWarnings} warning${totalWarnings !== 1 ? 's' : ''}`));
|
|
69
|
+
console.log(`${parts.join(', ')} found.`);
|
|
70
|
+
}
|
|
71
|
+
console.log('');
|
|
72
|
+
}
|
|
73
|
+
export function hasErrors(results) {
|
|
74
|
+
return results.some((r) => r.severity === 'error');
|
|
75
|
+
}
|
|
76
|
+
//# sourceMappingURL=reporter.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reporter.js","sourceRoot":"","sources":["../../src/validator/reporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B,MAAM,cAAc,GAAmB;IACrC,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,2BAA2B,EAAE;IACtE,EAAE,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE;IACpE,EAAE,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,0BAA0B,EAAE;IACvE,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,iCAAiC,EAAE;IACvE,EAAE,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,kBAAkB,EAAE;IAClE,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,EAAE;CACxD,CAAC;AAEF,SAAS,iBAAiB,CACxB,IAAY,EACZ,KAAa,EACb,WAAmB,EACnB,KAAyB;IAEzB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA2B,EAC3B,oBAA6B;IAE7B,4BAA4B;IAC5B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAE/C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAEhF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBACtF,CAAC,CAAC,EAAE,CAAC;YACT,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,GAAG,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,2BAA2B;YAC3B,IAAI,MAAc,CAAC;YACnB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAClE,MAAM;oBACJ,oBAAoB,KAAK,CAAC;wBACxB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC;wBACpC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,oBAAoB,QAAQ,oBAAoB,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjG,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAE7E,IAAI,WAAW,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,WAAW,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,WAAW,SAAS,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClG,IAAI,aAAa,GAAG,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,aAAa,WAAW,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAA2B;IACnD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;AACrD,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { CoreTeam } from '../core/types.js';
|
|
2
|
+
export type Severity = 'error' | 'warning' | 'info';
|
|
3
|
+
export interface ValidationResult {
|
|
4
|
+
severity: Severity;
|
|
5
|
+
category: string;
|
|
6
|
+
message: string;
|
|
7
|
+
agent?: string;
|
|
8
|
+
}
|
|
9
|
+
export type Checker = (team: CoreTeam) => ValidationResult[];
|
|
10
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/validator/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,QAAQ,KAAK,gBAAgB,EAAE,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/validator/types.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wizard/index.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDrE"}
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
import chalk from 'chalk';
|
|
2
|
+
import { detectProjectContext } from '../detector/index.js';
|
|
3
|
+
import { writeManifest } from '../manifest/writer.js';
|
|
4
|
+
import { generate } from '../generator/index.js';
|
|
5
|
+
import { stepProjectContext } from './steps/project-context.js';
|
|
6
|
+
import { stepTeamSelection } from './steps/team-selection.js';
|
|
7
|
+
import { stepConfirmGenerate } from './steps/confirm-generate.js';
|
|
8
|
+
import { stepAgentCustomization } from './steps/agent-customization.js';
|
|
9
|
+
import { evaluateTeam, teamHasBlockingIssues, printManifestValidation } from '../application/validate-team.js';
|
|
10
|
+
import { printSuccess, printError, printHeader, printCommandSuccess, printNextSteps, } from '../utils/chalk-helpers.js';
|
|
11
|
+
export async function runWizard(options) {
|
|
12
|
+
const { cwd, skipConfirm = false, nonInteractive = false } = options;
|
|
13
|
+
printHeader('Init');
|
|
14
|
+
console.log(chalk.dim('Design your Claude Code agent team'));
|
|
15
|
+
console.log('');
|
|
16
|
+
const ctx = detectProjectContext(cwd);
|
|
17
|
+
const projectPartial = await stepProjectContext(ctx, undefined, { nonInteractive });
|
|
18
|
+
let manifest = (await stepTeamSelection(projectPartial, { nonInteractive }));
|
|
19
|
+
manifest.version = '1';
|
|
20
|
+
manifest = await stepAgentCustomization(manifest, { nonInteractive });
|
|
21
|
+
const validation = evaluateTeam(manifest);
|
|
22
|
+
if (teamHasBlockingIssues(validation)) {
|
|
23
|
+
printManifestValidation(validation);
|
|
24
|
+
process.exit(1);
|
|
25
|
+
}
|
|
26
|
+
const confirmed = await stepConfirmGenerate(manifest, cwd, skipConfirm || nonInteractive);
|
|
27
|
+
if (!confirmed) {
|
|
28
|
+
console.log(chalk.dim('\nAborted. No files were written.'));
|
|
29
|
+
return;
|
|
30
|
+
}
|
|
31
|
+
try {
|
|
32
|
+
writeManifest(manifest, cwd);
|
|
33
|
+
}
|
|
34
|
+
catch (err) {
|
|
35
|
+
printError('Failed to write teamcast.yaml', String(err));
|
|
36
|
+
process.exit(1);
|
|
37
|
+
}
|
|
38
|
+
let files;
|
|
39
|
+
try {
|
|
40
|
+
files = generate(manifest, { cwd });
|
|
41
|
+
}
|
|
42
|
+
catch (err) {
|
|
43
|
+
printError('Generation failed', String(err));
|
|
44
|
+
process.exit(1);
|
|
45
|
+
}
|
|
46
|
+
console.log('');
|
|
47
|
+
for (const file of files) {
|
|
48
|
+
printSuccess(file.path);
|
|
49
|
+
}
|
|
50
|
+
printCommandSuccess(`Agent team initialized for project "${manifest.project.name}"`);
|
|
51
|
+
printManifestValidation(validation);
|
|
52
|
+
printNextSteps([
|
|
53
|
+
`${chalk.bold('teamcast explain')} - view the team structure`,
|
|
54
|
+
`Edit ${chalk.bold('teamcast.yaml')} and run ${chalk.bold('teamcast generate')} to apply changes`,
|
|
55
|
+
]);
|
|
56
|
+
}
|
|
57
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/wizard/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/G,OAAO,EACL,YAAY,EACZ,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,cAAc,GACf,MAAM,2BAA2B,CAAC;AAQnC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,KAAK,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAErE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAEpF,IAAI,QAAQ,GAAG,CAAC,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC,CAA+B,CAAC;IAC3G,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC;IACvB,QAAQ,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtE,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,IAAI,cAAc,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CAAC,+BAA+B,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CAAC,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,mBAAmB,CAAC,uCAAuC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACrF,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpC,cAAc,CAAC;QACb,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,4BAA4B;QAC7D,QAAQ,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,mBAAmB;KAClG,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"agent-customization.d.ts","sourceRoot":"","sources":["../../../src/wizard/steps/agent-customization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,qBAAqB,CAAC;AAoBhE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,QAAQ,EACd,OAAO,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GACrC,OAAO,CAAC,QAAQ,CAAC,CA0DnB"}
|